last executing test programs:

2m36.509942315s ago: executing program 3 (id=72):
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/dev/cdrom/autoclose\x00', 0x2002, 0x0)
sendfile$auto(r0, r0, 0x0, 0x1)
open(&(0x7f00000001c0)='./file0\x00', 0x60142, 0x130)
openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x40002, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x101101, 0x0)
r2 = socket(0x23, 0x80805, 0x0)
getsockopt$auto(r2, 0x40000000113, 0x1, 0xfffffffffffffffc, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/v4l-subdev0\x00', 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x1d48, 0x0)
r3 = socket(0x1e, 0x2, 0x0)
getsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r5)
ioctl$auto_KVM_CREATE_VM(r4, 0x4080aebf, 0x0)

2m34.095269882s ago: executing program 3 (id=78):
r0 = socket(0x10, 0x2, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0)
sendfile$auto(r1, r1, 0x0, 0x3)
unshare$auto(0x40000080)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2b, 0x1, 0x0)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
pread64$auto(0xffffffffffffffff, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00 \x00'/21, 0x100000002, 0x100000001)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000180), 0x8203f, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200", @ANYBLOB="5de1523353"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000)

2m31.158102664s ago: executing program 3 (id=83):
socket(0x10, 0x2, 0x4)
mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff)
close_range$auto(0x2, 0xa, 0x0)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0x401, 0x7ffe)
r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, 0x0, 0x8080, 0x0)
read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r0, 0x0, 0x17)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0)
openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, 0x0, 0x1000000, 0x0)
mmap$auto(0xff, 0x862, 0xffffffff, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
futex_wait$auto(0x0, 0x0, 0x83, 0xa, 0x0, 0x1)
futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2)
socket(0x200000000000011, 0x2, 0x0)
bind$auto(0x3, 0x0, 0x6a)
syz_clone3(&(0x7f00000002c0)={0x400, 0x0, 0x0, &(0x7f0000000100), {0x3}, &(0x7f0000000140)=""/54, 0x36, &(0x7f0000000180)=""/86, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
r1 = getpid()
process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0)
ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={"c88e8e76992f088ae5aa6fa4e7be90d4bcd73b01f445abfbabed717cf0a38b0f", 0x1, 0x1ff, 0x7, 0xb626, 0x0, 0xffffffffffffffff})

2m29.422428307s ago: executing program 3 (id=85):
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r0, &(0x7f0000000100)='7\x00\\\xa0\x04\xdb\xc3\x8cnI\x9c\t\xbck\x17\xfe_9\xdf\v\x9d\xf7\xa9+n\xf19\x8ba\xe38\xf7u~\r\x91p\x90x\xd9y\xef\x06\xafs\x90\xf0\xf9\xc3\'r\xac\x8d\\\xccM\xe3\x05\x87\x8c\x1beu\xa6\xab\xb2}\xb6\xb8\xa1\xb4\x98\x0f\x9b(8\xb9\xcb\x88\x0e\x99\x81f&\xe4\xe1\xf1\xe0iS\x93\xea\xa1\xb8\xa6T\xf4G\xb0m\xe5!\xa3\xda\x83\xc1\b\xb3\xce\x1bq\x03\xf7\t\x8f', 0x81)
getsockopt$auto_SO_COOKIE(r0, 0x8001, 0x39, 0x0, 0x0)
mmap$auto(0x9, 0x7, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
syslog$auto(0x4, &(0x7f0000000040)='7\x00\\\xa0\x04\xdb\xc3\x8cnI\x9c\t\xbck\x17\xfe_9\xdf\v\x9d\xf7\xa9+n\xf19\x8ba\xe38\xf7u~\r\x91p\x90x\xd9y\xef\x06\xafs\x90\xf0\xf9\xc3\'r\xac\x8d\\\xccM\xe3\x05\x87\x8c\x1beu\xa6\xab\xb2}\xb6\xb8\xa1\xb4\x98\x0f\x9b(8\xb9\xcb\x88\x0e\x99\x81f&\xe4\xe1\xf1\xe0iS\x93\xea\xa1\xb8\xa6T\xf4G\xb0m\xe5!\xa3\xda\x83\xc1\b\xb3\xce\x1bq\x03\xf7\t\x8f', 0xf4)
waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001200)={@siginfo_0_0={0x5, 0xec9c, 0x80000000, @_rt={0xffffffffffffffff, 0xffffffffffffffff, @sival_ptr=&(0x7f0000000200)="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"}}}, 0x0, &(0x7f0000001280)={{0x646f, 0xfffffffc00000000}, {0xfffffffffffffffc, 0x8}, 0x5, 0x7, 0x1000, 0x3147, 0x4891, 0xffff, 0x7, 0x6, 0x4, 0x5, 0x80000000, 0xa5f, 0xf, 0x2})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
msgctl$auto(0x0, 0x3, 0x0)
r1 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x8)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000)
r2 = socket(0x29, 0x2, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0)
getsockopt$auto_SO_PASSCRED(r1, 0x8000, 0x10, &(0x7f0000000180)=']-^&\x00', &(0x7f00000001c0)=0xb31)
ioctl$auto(r4, 0x4b62, r1)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0xd1)
ioctl$auto(0x3, 0xc00caee0, r3)
ioctl$auto(r2, 0x4018aee3, 0x24)
open(&(0x7f0000000000)='./file0\x00', 0x202880, 0x0)

2m28.465923699s ago: executing program 3 (id=87):
mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
mincore$auto(0x1000, 0x4000000, 0x0)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x3a21eba4)
listen$auto(0x3, 0x81)
mremap$auto(0x8, 0x8000000000000001, 0x0, 0x3, 0x2)
r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0)
connect$auto(r0, 0x0, 0xd)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r1 = clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6)
wait4$auto(r1, 0x0, 0x80000300, &(0x7f0000000140)={{0x10000, 0x100080}, {0x1, 0x9}, 0x8000000000000000, 0x2, 0x9, 0x10, 0x2, 0x1, 0x5, 0x6, 0x3, 0x800000000000008, 0x4, 0x7, 0x6, 0xb4b9})
ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0xc0000000010, 0x2, 0x40008000)
r2 = getsockopt$auto(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
r3 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000000c0), r2)
sendmsg$auto_OVS_METER_CMD_SET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@OVS_METER_ATTR_USED={0xc, 0x5, 0x1}, @OVS_METER_ATTR_USED={0xc, 0x5, 0x2467}, @OVS_METER_ATTR_ID={0x8}, @OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0x5}, @OVS_METER_ATTR_CLEAR={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x855}, 0x10)
ioctl$auto_I2C_SMBUS(r3, 0x720, 0x0)
pread64$auto(r0, 0x0, 0x101, 0x103)
read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

2m26.500853228s ago: executing program 3 (id=91):
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg1\x00', 0x180443, 0x0)
r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0)
read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r0, 0x0, 0x17)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
mincore$auto(0x1000, 0x8001, 0x0)
socket(0x18, 0x80004, 0x1)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0)
write$auto(r1, &(0x7f0000000140)='0[.[\x00', 0xcd04)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0)
sendfile$auto(r2, r2, 0x0, 0x1)
openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r3, 0x80)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x1008000)
msgctl$auto_IPC_RMID(0xfd, 0x0, &(0x7f0000000240)={{0x18, <r4=>0xee01, 0x0, 0xffff, 0xfffff6e4, 0x10001, 0x5}, &(0x7f0000000080)=0x6, &(0x7f0000000200)=0x7e, 0xd, 0x100000001, 0x0, 0x4, 0xfffffffffffffb82, 0x7, 0x6, 0x2a2, @raw, @inferred=0xffffffffffffffff})
setfsuid$auto(r4)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket(0x15, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)

2m11.363312282s ago: executing program 32 (id=91):
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg1\x00', 0x180443, 0x0)
r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0)
read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r0, 0x0, 0x17)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
mincore$auto(0x1000, 0x8001, 0x0)
socket(0x18, 0x80004, 0x1)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0)
write$auto(r1, &(0x7f0000000140)='0[.[\x00', 0xcd04)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0)
sendfile$auto(r2, r2, 0x0, 0x1)
openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r3, 0x80)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x1008000)
msgctl$auto_IPC_RMID(0xfd, 0x0, &(0x7f0000000240)={{0x18, <r4=>0xee01, 0x0, 0xffff, 0xfffff6e4, 0x10001, 0x5}, &(0x7f0000000080)=0x6, &(0x7f0000000200)=0x7e, 0xd, 0x100000001, 0x0, 0x4, 0xfffffffffffffb82, 0x7, 0x6, 0x2a2, @raw, @inferred=0xffffffffffffffff})
setfsuid$auto(r4)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket(0x15, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)

1m35.470172725s ago: executing program 0 (id=188):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket(0x2, 0x1, 0x0)
getsockopt$auto(r1, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x3b)
r2 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000140), r0)
sendmsg$auto_IOAM6_CMD_DUMP_SCHEMAS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001ec0)={0x14, r2, 0x721, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008004)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x7, 0xde, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x3, 0x0)
r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="37bf3a07b3ccc7a68818ac00dfb188e1367113a8f857d477218f2c997dd5e05154fd4d96cf91ad8096cf4b25e798e9e62423e60a1c4d6e9be3be76468960f9ff6b21ce191886ad2fcceadbd41313e6d1ef7d7b7feb0dd1304d171bd739577f14e6cd3c17", @ANYRES16=r4, @ANYRESHEX=0x0, @ANYRESOCT=r3], 0x2c}, 0x1, 0x0, 0x0, 0x20008094}, 0x0)
mmap$auto(0x0, 0x20000400005, 0xdf, 0x9b72, 0x5, 0x8000)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)

1m33.381401345s ago: executing program 0 (id=197):
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x543d80, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r0, 0x0, 0x80000000)
mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0)
r1 = getpid()
process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0)
msync$auto(0x0, 0xe0, 0x6)
getsockopt$auto(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0)
r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x4923c1, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x10, r2, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/modalias\x00', 0x80500, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
read$auto(0x3, 0x0, 0x7fffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x100000000000038, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
io_uring_setup$auto(0x400009, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)

1m30.176153191s ago: executing program 0 (id=206):
socket(0x22, 0x1, 0xe)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x25}}, 0x54)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/can/reset_stats\x00', 0x40, 0x0)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
mmap$auto(0x0, 0x8, 0x4000000000df, 0x7ff, 0x401, 0x8000)
capget$auto(0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x140, 0x0)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x130)
fallocate$auto(r1, 0x8, 0xd7, 0x5)
fchmod$auto(r1, 0xa)
read$auto_ftrace_set_event_pid_fops_trace_events(r0, &(0x7f00000001c0)=""/185, 0xb9)
rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8)
mmap$auto(0x3b4, 0x2020009, 0x3, 0x800000000000e91, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xd, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x6, 0x5, 0x3, 0x5, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x5, 0x7ff, 0x0, 0x0, 0x800000000]}, 0x2, 0x81)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
ptrace$auto_PTRACE_DETACH(0x11, 0x0, 0x9, 0xfffffffffffff7b8)
r2 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

1m29.173605215s ago: executing program 0 (id=210):
madvise$auto(0x0, 0x2003f2, 0x15)

1m28.841521302s ago: executing program 0 (id=211):
select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)

1m28.561671746s ago: executing program 0 (id=213):
close_range$auto(0x2, 0x8, 0x0)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x2000, 0x0)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48500, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x42082, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sem\x00', 0xc8202, 0x0)
socket(0x18, 0x80000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100f9020000fbdbdf250100000008000b00ac141420080001"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0)
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = socket(0x11, 0xa, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC0\x00', 0x880, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0)
socket(0xa, 0x2, 0x0)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer2\x00', 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082)
write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef)

1m13.45288688s ago: executing program 33 (id=213):
close_range$auto(0x2, 0x8, 0x0)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x2000, 0x0)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48500, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x42082, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sem\x00', 0xc8202, 0x0)
socket(0x18, 0x80000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100f9020000fbdbdf250100000008000b00ac141420080001"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0)
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = socket(0x11, 0xa, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC0\x00', 0x880, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0)
socket(0xa, 0x2, 0x0)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer2\x00', 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082)
write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef)

14.132947403s ago: executing program 5 (id=335):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
socket(0xa, 0x2, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r1 = clone$auto(0x6, 0x8000000000000001, &(0x7f0000000080)=0xcf, &(0x7f00000000c0)=0xffff7fff, 0x1000)
prctl$auto(0xa134, 0x22, r1, 0x800, 0x5)
socket(0x2, 0x1, 0x106)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x4, 0x0, 0x3, &(0x7f0000000000)='!/*:(*\'\x00', 0x800000e)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
setresuid$auto(0x60, 0x1000, 0x607)
ioctl$auto(r2, 0x2284, 0xffffffffffffffff)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r0, 0x300000000000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
statmount$auto(&(0x7f0000000040)={0xffff, @raw=0x2, 0x6, 0x4, 0xfffffffffffffff8}, &(0x7f0000000340)={0x3ff, 0x1, 0x7fff, 0x8, 0x6, 0x3, 0x0, 0x5, 0x8, 0x8, 0x3, 0x690, 0x1604000000000, 0x2, 0x100, 0xfff, 0x2, 0x9, 0xfffff1a0, 0x8, 0xc, 0xfff, 0x3, 0x9501, 0x0, 0x9, 0xeb, 0x5c1f, 0x1, 0x9, 0x20000000, [0x9, 0x1ff, 0x8, 0x2, 0x0, 0x2, 0x2, 0x7, 0x6, 0x7f, 0x100, 0x2, 0x9, 0x1, 0x4, 0x3, 0x0, 0x10001, 0x8, 0x0, 0x7, 0xa5, 0xc, 0x1, 0x8000000000000000, 0x7, 0x3, 0x80000001, 0x2, 0x2, 0x0, 0x9, 0xe23f, 0x7fff, 0x3, 0x0, 0x9, 0x800, 0x6, 0x0, 0x7, 0xfff, 0xffffffff], "0d4da07757fc0a8e5de18bd363ce4cd41558fdae0643974f4f329960f2cb8c8e546a2541ef8227735f9d60e3cb50f6712c580dab3d8d1876a632fbe3c7bc8983b2033f3e94ce99928fb6f63d6a5d00427e16356cd2bb5ac7332f15102dfa643a2ac8b0a2354713be651e33e04d87dc8db31dee05bda730841ad8c01c925cfb6c19c83be19a876ab65f124cbd4bf03702b919b3334dc9"}, 0x6, 0x7)
select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0)

13.856847045s ago: executing program 1 (id=336):
write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$auto(0x3e, 0x5, 0x0, 0x1, 0x4d)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4000000008000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/input/event1\x00', 0x40000, 0x0)
readv$auto(r1, &(0x7f0000001100)={0x0, 0x371}, 0x3)
ioctl$auto_EVIOCREVOKE(r1, 0x40044591, 0x0)
r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef)
r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
ioctl$auto_TIOCVHANGUP(r3, 0x5437, 0x0)
ioctl$auto_TIOCVHANGUP(r3, 0x5437, 0x0)
read$auto(r0, 0x0, 0x20)
r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec26\x00', 0x88000, 0x0)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000200)={"fd000084", 0x0, 0x5, 0x2, 0x7ff, 0x6, "2eed928bf87bc54e1384f96996bd00", '\x00', "0400e6ad", "003d0002", ["f5404de6f32d14706f4f9b9f", "f8ffffffffffffffe8ff0001", "b06f8da10cff7fbcbd6b17ba", "9200000000001000"]})
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x400000003)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$auto_TCP_METRICS_CMD_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x30, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004055}, 0x0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x18, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HWSIM_ATTR_MULTI_RADIO={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)

12.645272013s ago: executing program 1 (id=338):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
socket(0xa, 0x2, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r1 = clone$auto(0x6, 0x8000000000000001, &(0x7f0000000080)=0xcf, &(0x7f00000000c0)=0xffff7fff, 0x1000)
prctl$auto(0xa134, 0x22, r1, 0x800, 0x5)
socket(0x2, 0x1, 0x106)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x4, 0x0, 0x3, &(0x7f0000000000)='!/*:(*\'\x00', 0x800000e)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
setresuid$auto(0x60, 0x1000, 0x607)
ioctl$auto(r2, 0x2284, 0xffffffffffffffff)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r0, 0x300000000000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
statmount$auto(&(0x7f0000000040)={0xffff, @raw=0x2, 0x6, 0x4, 0xfffffffffffffff8}, &(0x7f0000000340)={0x3ff, 0x1, 0x7fff, 0x8, 0x6, 0x3, 0x0, 0x5, 0x8, 0x8, 0x3, 0x690, 0x1604000000000, 0x2, 0x100, 0xfff, 0x2, 0x9, 0xfffff1a0, 0x8, 0xc, 0xfff, 0x3, 0x9501, 0x0, 0x9, 0xeb, 0x5c1f, 0x1, 0x9, 0x20000000, [0x9, 0x1ff, 0x8, 0x2, 0x0, 0x2, 0x2, 0x7, 0x6, 0x7f, 0x100, 0x2, 0x9, 0x1, 0x4, 0x3, 0x0, 0x10001, 0x8, 0x0, 0x7, 0xa5, 0xc, 0x1, 0x8000000000000000, 0x7, 0x3, 0x80000001, 0x2, 0x2, 0x0, 0x9, 0xe23f, 0x7fff, 0x3, 0x0, 0x9, 0x800, 0x6, 0x0, 0x7, 0xfff, 0xffffffff], "0d4da07757fc0a8e5de18bd363ce4cd41558fdae0643974f4f329960f2cb8c8e546a2541ef8227735f9d60e3cb50f6712c580dab3d8d1876a632fbe3c7bc8983b2033f3e94ce99928fb6f63d6a5d00427e16356cd2bb5ac7332f15102dfa643a2ac8b0a2354713be651e33e04d87dc8db31dee05bda730841ad8c01c925cfb6c19c83be19a876ab65f124cbd4bf03702b919b3334dc9"}, 0x6, 0x7)
select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mremap$auto(0x4000, 0x4, 0x13fd7, 0x3, 0xfffff000)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0)

11.487193954s ago: executing program 5 (id=343):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0)
pwrite64$auto(r1, &(0x7f0000000200)='/-\xc4-\'(])\x00', 0x8, 0x3)
write$auto(0x3, 0x0, 0x1)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, r2, 0x0, 0x400000000006)
mmap$auto(0x0, 0x8000400008, 0xdf, 0x9b72, 0x2, 0x4f)
sysfs$auto(0x2, 0xd, 0x0)
r3 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0)
read$auto_usbfs_devices_fops_usb(r3, 0x0, 0x2d)
read$auto_regulator_summary_fops_(r3, 0x0, 0x0)
socket(0x2c, 0x3, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000)
shutdown$auto(0x200000003, 0x2)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)

9.998595264s ago: executing program 1 (id=347):
mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
mincore$auto(0x1000, 0x4000000, 0x0)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x3a21eba4)
listen$auto(0x3, 0x81)
mremap$auto(0x8, 0x8000000000000001, 0x0, 0x3, 0x2)
r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0)
connect$auto(r0, 0x0, 0xd)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r1 = clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6)
wait4$auto(r1, 0x0, 0x80000300, &(0x7f0000000140)={{0x10000, 0x100080}, {0x1, 0x9}, 0x8000000000000000, 0x2, 0x9, 0x10, 0x2, 0x1, 0x5, 0x6, 0x3, 0x800000000000008, 0x4, 0x7, 0x6, 0xb4b9})
ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0xc0000000010, 0x2, 0x40008000)
r2 = getsockopt$auto(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000000c0), r2)
sendmsg$auto_OVS_METER_CMD_SET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@OVS_METER_ATTR_USED={0xc, 0x5, 0x1}, @OVS_METER_ATTR_USED={0xc, 0x5, 0x2467}, @OVS_METER_ATTR_ID={0x8}, @OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0x5}, @OVS_METER_ATTR_CLEAR={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x855}, 0x10)
pread64$auto(r0, 0x0, 0x101, 0x103)
read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

9.793472743s ago: executing program 5 (id=348):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0)
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
r0 = socket(0xa, 0x2, 0x0)
cachestat$auto(r0, &(0x7f0000000000)={0x0, 0x7fc}, &(0x7f0000000040)={0x2, 0x0, 0xd6, 0x1, 0x3}, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r1 = socket(0xa, 0x3, 0x3a)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(r1, 0x8, 0x0, 0x0)
ioctl$auto_USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000001c0)={0x0, 0x5516, 0x0})
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
r2 = open(0x0, 0x0, 0x408)
socket(0x28, 0x1, 0x0)
mmap$auto(0x0, 0x61, 0x100001000000003, 0x9b72, 0x2, 0x8000)
getsockopt$auto(0x3, 0x200000000001, 0x45, 0x0, 0x0)
getdents$auto(r2, 0x0, 0x400018)
mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000)
clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006)

8.833340934s ago: executing program 5 (id=350):
r0 = socket(0xa, 0x2, 0x73)
mmap$auto(0xfffffffffffffc, 0xd8f0, 0x7, 0xeb1, r0, 0xbf47)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
unshare$auto(0x40000080)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0)
r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0)
readv$auto(r1, &(0x7f0000000680)={0x0, 0x40200}, 0x3)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
setresuid$auto(0xffffffffffffffff, 0x0, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x15)
unshare$auto(0x20000)
unshare$auto(0x20000)
mmap$auto(0x0, 0x202000d, 0x3, 0x200000000eb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/mac80211_hwsim/hwsim0/net/wlan0/flags\x00', 0x189082, 0x0)
sendfile$auto(r3, r3, 0x0, 0x1)
read$auto_fops_atomic_t_(0xffffffffffffffff, 0x0, 0x0)
prctl$auto_PR_SET_MM_ARG_START(0x9, 0x8, 0x0, 0x3, 0x527)
mmap$auto(0x0, 0x1000002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x7ffd)

8.591693112s ago: executing program 1 (id=351):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
socket(0xa, 0x2, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r1 = clone$auto(0x6, 0x8000000000000001, &(0x7f0000000080)=0xcf, &(0x7f00000000c0)=0xffff7fff, 0x1000)
prctl$auto(0xa134, 0x22, r1, 0x800, 0x5)
socket(0x2, 0x1, 0x106)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x4, 0x0, 0x3, &(0x7f0000000000)='!/*:(*\'\x00', 0x800000e)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
setresuid$auto(0x60, 0x1000, 0x607)
ioctl$auto(r2, 0x2284, 0xffffffffffffffff)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r0, 0x300000000000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
statmount$auto(&(0x7f0000000040)={0xffff, @raw=0x2, 0x6, 0x4, 0xfffffffffffffff8}, &(0x7f0000000340)={0x3ff, 0x1, 0x7fff, 0x8, 0x6, 0x3, 0x0, 0x5, 0x8, 0x8, 0x3, 0x690, 0x1604000000000, 0x2, 0x100, 0xfff, 0x2, 0x9, 0xfffff1a0, 0x8, 0xc, 0xfff, 0x3, 0x9501, 0x0, 0x9, 0xeb, 0x5c1f, 0x1, 0x9, 0x20000000, [0x9, 0x1ff, 0x8, 0x2, 0x0, 0x2, 0x2, 0x7, 0x6, 0x7f, 0x100, 0x2, 0x9, 0x1, 0x4, 0x3, 0x0, 0x10001, 0x8, 0x0, 0x7, 0xa5, 0xc, 0x1, 0x8000000000000000, 0x7, 0x3, 0x80000001, 0x2, 0x2, 0x0, 0x9, 0xe23f, 0x7fff, 0x3, 0x0, 0x9, 0x800, 0x6, 0x0, 0x7, 0xfff, 0xffffffff], "0d4da07757fc0a8e5de18bd363ce4cd41558fdae0643974f4f329960f2cb8c8e546a2541ef8227735f9d60e3cb50f6712c580dab3d8d1876a632fbe3c7bc8983b2033f3e94ce99928fb6f63d6a5d00427e16356cd2bb5ac7332f15102dfa643a2ac8b0a2354713be651e33e04d87dc8db31dee05bda730841ad8c01c925cfb6c19c83be19a876ab65f124cbd4bf03702b919b3334dc9"}, 0x6, 0x7)
select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0)

6.365547011s ago: executing program 4 (id=355):
socket(0x22, 0x1, 0xe)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x25}}, 0x54)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/can/reset_stats\x00', 0x40, 0x0)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
mmap$auto(0x0, 0x8, 0x4000000000df, 0x7ff, 0x401, 0x8000)
capget$auto(0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
fallocate$auto(0xffffffffffffffff, 0x8, 0xd7, 0x5)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xd, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x6, 0x5, 0x3, 0x5, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x5, 0x7ff, 0x0, 0x0, 0x800000000]}, 0x2, 0x81)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

6.162485305s ago: executing program 1 (id=356):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x8000, 0x0)
read$auto(r0, &(0x7f0000000000)='veth1\x00', 0x10)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
unshare$auto(0x40000080)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_GET_RADIO(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r2, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020)
read$auto(0xffffffffffffffff, 0x0, 0x7f)
mprotect$auto(0x8000, 0x8, 0x8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x40, 0x0)
ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0)
r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
read$auto(r1, 0x0, 0x3)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

5.584249677s ago: executing program 4 (id=358):
socket(0x29, 0x800, 0xa)
mmap$auto(0x0, 0x0, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
bind$auto(0x3, 0x0, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r0 = getsockopt$auto(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000000)=0x7ffe)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
getdents$auto(0xffffffffffffffff, 0x0, 0x400018)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xe0002, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x30, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
mmap$auto(0x0, 0x2020009, 0xa0e2, 0xeb2, 0xfffffffffffffffb, 0x8000)
ioctl$auto_TUNGETFILTER(r0, 0x801054db, &(0x7f0000000100)={0x8, &(0x7f00000000c0)={0xb9, 0x1, 0xfa, @inferred=<r5=>r2}})
close_range$auto(r5, r1, 0x1)
r6 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x200, 0x0)
ioctl$auto_EXT4_IOC_MOVE_EXT(r6, 0xc028660f, 0x0)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7ff}, 0x8000000000000001, 0x0)
write$auto(0x1, 0x0, 0x80000000)

4.91190002s ago: executing program 2 (id=359):
mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
mincore$auto(0x1000, 0x4000000, 0x0)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x3a21eba4)
listen$auto(0x3, 0x81)
mremap$auto(0x8, 0x8000000000000001, 0x0, 0x3, 0x2)
r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0)
connect$auto(r0, 0x0, 0xd)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r1 = clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6)
wait4$auto(r1, 0x0, 0x80000300, &(0x7f0000000140)={{0x10000, 0x100080}, {0x1, 0x9}, 0x8000000000000000, 0x2, 0x9, 0x10, 0x2, 0x1, 0x5, 0x6, 0x3, 0x800000000000008, 0x4, 0x7, 0x6, 0xb4b9})
ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0xc0000000010, 0x2, 0x40008000)
r2 = getsockopt$auto(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000000c0), r2)
sendmsg$auto_OVS_METER_CMD_SET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@OVS_METER_ATTR_USED={0xc, 0x5, 0x1}, @OVS_METER_ATTR_USED={0xc, 0x5, 0x2467}, @OVS_METER_ATTR_ID={0x8}, @OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0x5}, @OVS_METER_ATTR_CLEAR={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x855}, 0x10)
pread64$auto(r0, 0x0, 0x101, 0x103)
read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

4.434247834s ago: executing program 4 (id=360):
mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_FIONBIO(r1, 0x5421, 0xffff)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r1, 0x8000)
r2 = getpgid(0xffffffffffffffff)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0)
rt_tgsigqueueinfo$auto_SIGCONT(r2, 0x0, 0x12, &(0x7f0000000340)={@siginfo_0_0={0x943, 0x7, 0xa708, @_sigsys={&(0x7f0000000140)="7eb462370c31b08d52ba3ec91ed7077f09c5c5fef17c3ba58b0251ba4d4e3be060267dfac99b9edbd4112be2dc9f748d4eee39c392244bc90503648dcd9f4d298e9f5cdde44204fba27a6aeebdaec1ab4e49bb465efd7ca2fca8cbeb4ce5446fdf50a466ea2d9778147a105f2a7fc3f610d9f79e5682b0941037ae7a4383b60970df151267e12dd45192b72526a3863960d52cf9a937", 0x1}}})
read$auto(0x3, 0x0, 0x80)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
readv$auto(0x3, 0x0, 0x1)
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x1c3000, 0x0)
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20500, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x1, 0x0)
connect$auto(r1, &(0x7f00000000c0)=@sco={0x1f, @none}, 0x6)
listen$auto(0x3, 0x81)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
r3 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/self/ns/cgroup\x00', 0x0, 0x0)
ioctl$auto_NS_GET_NSTYPE(r3, 0xb703, 0x0)
r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x3}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"})

4.067863726s ago: executing program 2 (id=361):
mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
mincore$auto(0x1000, 0x4000000, 0x0)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x3a21eba4)
listen$auto(0x3, 0x81)
mremap$auto(0x8, 0x8000000000000001, 0x0, 0x3, 0x2)
r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0)
connect$auto(r0, 0x0, 0xd)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6)
getsockopt$auto(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
pread64$auto(r0, 0x0, 0x101, 0x103)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)

3.996252491s ago: executing program 5 (id=362):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
setsockopt$auto_SO_TIMESTAMPING_OLD(r2, 0x2d, 0x25, &(0x7f0000000040)='%\x00', 0x3)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
ioctl$auto(0x3, 0x8905, 0x38)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[], 0x70}}, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR64(r1, 0xc0884123, &(0x7f0000000480)={0x0, 0x0, @status={0x3730, 0x0, {}, 0x1, {}, {0x4, 0x8}, 0x1, 0x0, {0x7568, 0x2}}, @control={{}, 0xf67a, {}, {}, 0x8}})
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001)

3.882328884s ago: executing program 4 (id=363):
mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/nbd12\x00', 0x6600, 0x0)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff)
socket(0x2, 0x2, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x181040, 0x0)
openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, 0x0, 0x48400, 0x0)
openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe$auto(0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_udc.0/udc/dummy_udc.0/maximum_speed\x00', 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0)
openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000040), 0x669400, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/route\x00', 0x8a080, 0x0)
socketpair$auto(0x800001, 0x2, 0x615e, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r1, 0x84, 0x82, 0x0, 0x0)
ioctl$auto(0x3, 0x80106f53, r0)

3.50051731s ago: executing program 4 (id=364):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
socket(0xa, 0x2, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r1 = clone$auto(0x6, 0x8000000000000001, &(0x7f0000000080)=0xcf, &(0x7f00000000c0)=0xffff7fff, 0x1000)
prctl$auto(0xa134, 0x22, r1, 0x800, 0x5)
socket(0x2, 0x1, 0x106)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x4, 0x0, 0x3, &(0x7f0000000000)='!/*:(*\'\x00', 0x800000e)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
setresuid$auto(0x60, 0x1000, 0x607)
ioctl$auto(r2, 0x2284, 0xffffffffffffffff)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r0, 0x300000000000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
statmount$auto(&(0x7f0000000040)={0xffff, @raw=0x2, 0x6, 0x4, 0xfffffffffffffff8}, &(0x7f0000000340)={0x3ff, 0x1, 0x7fff, 0x8, 0x6, 0x3, 0x0, 0x5, 0x8, 0x8, 0x3, 0x690, 0x1604000000000, 0x2, 0x100, 0xfff, 0x2, 0x9, 0xfffff1a0, 0x8, 0xc, 0xfff, 0x3, 0x9501, 0x0, 0x9, 0xeb, 0x5c1f, 0x1, 0x9, 0x20000000, [0x9, 0x1ff, 0x8, 0x2, 0x0, 0x2, 0x2, 0x7, 0x6, 0x7f, 0x100, 0x2, 0x9, 0x1, 0x4, 0x3, 0x0, 0x10001, 0x8, 0x0, 0x7, 0xa5, 0xc, 0x1, 0x8000000000000000, 0x7, 0x3, 0x80000001, 0x2, 0x2, 0x0, 0x9, 0xe23f, 0x7fff, 0x3, 0x0, 0x9, 0x800, 0x6, 0x0, 0x7, 0xfff, 0xffffffff], "0d4da07757fc0a8e5de18bd363ce4cd41558fdae0643974f4f329960f2cb8c8e546a2541ef8227735f9d60e3cb50f6712c580dab3d8d1876a632fbe3c7bc8983b2033f3e94ce99928fb6f63d6a5d00427e16356cd2bb5ac7332f15102dfa643a2ac8b0a2354713be651e33e04d87dc8db31dee05bda730841ad8c01c925cfb6c19c83be19a876ab65f124cbd4bf03702b919b3334dc9"}, 0x6, 0x7)
select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mremap$auto(0x4000, 0x4, 0x13fd7, 0x3, 0xfffff000)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0)

3.283063369s ago: executing program 2 (id=365):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
r0 = socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50)
r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}})
io_uring_enter$auto(r1, 0x9, 0x820e, 0x6, 0x0, 0x18)
ioctl$auto_EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x2, 0x2, 0x1, 0x2})
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0xfffffffffffffffd, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
getsockopt$auto_SO_RCVMARK(r2, 0x0, 0x4b, 0x0, 0x0)
r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0)
pread64$auto(r3, 0x0, 0x800007, 0x9)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)
ioctl$auto_UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb4a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f00", 0xa})
ioctl$auto_UI_DEV_CREATE(r4, 0x5501, 0x0)
writev$auto(r4, &(0x7f0000000340)={0x0, 0x500000}, 0x9)
mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000)
clock_settime$auto(0x14, &(0x7f0000000000)={0x9, 0x20000000000004})

2.576523609s ago: executing program 1 (id=366):
socket(0x22, 0x1, 0xe)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x25}}, 0x54)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/can/reset_stats\x00', 0x40, 0x0)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
mmap$auto(0x0, 0x8, 0x4000000000df, 0x7ff, 0x401, 0x8000)
capget$auto(0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
fallocate$auto(0xffffffffffffffff, 0x8, 0xd7, 0x5)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xd, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x6, 0x5, 0x3, 0x5, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x5, 0x7ff, 0x0, 0x0, 0x800000000]}, 0x2, 0x81)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

1.857442629s ago: executing program 4 (id=367):
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
statmount$auto(0x0, 0x0, 0x202, 0x81)
setfsuid$auto(0xee00)
sysfs$auto(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto(0x3, 0x0, 0x1)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd)
r0 = socket(0x2, 0x1, 0x106)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0)
sendfile$auto(r0, r1, 0x0, 0x1)
ioctl$auto_XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f00000002c0)={r0, 0x0, 0xfffffffffffffff9, 0x7d, 0x7f, 0x3000000})
socket(0x18, 0x0, 0x0)
close_range$auto(0x0, 0x5, 0x0)
openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0), 0xca400, 0x0)
set_mempolicy$auto(0x3, &(0x7f0000000040)=0x7, 0x3)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x1f1d02, 0x0)
mbind$auto(0x2000, 0x800000100000004, 0x100000000, 0x0, 0x1003, 0x2)
ioctl$auto(0xffffffffffffffff, 0x1, r0)
madvise$auto(0x1, 0x54a8e07a, 0x12)
r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x20009, 0x81004000000008dd, 0x1000000eb1, r2, 0x0)

1.728546743s ago: executing program 2 (id=368):
socket(0x22, 0x1, 0xe)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x25}}, 0x54)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/can/reset_stats\x00', 0x40, 0x0)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
mmap$auto(0x0, 0x8, 0x4000000000df, 0x7ff, 0x401, 0x8000)
capget$auto(0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x140, 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x130)
fallocate$auto(r0, 0x8, 0xd7, 0x5)
fchmod$auto(r0, 0xa)
rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8)
mmap$auto(0x3b4, 0x2020009, 0x3, 0x800000000000e91, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xd, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x6, 0x5, 0x3, 0x5, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x5, 0x7ff, 0x0, 0x0, 0x800000000]}, 0x2, 0x81)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
ptrace$auto_PTRACE_DETACH(0x11, 0x0, 0x9, 0xfffffffffffff7b8)
r1 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

838.790922ms ago: executing program 2 (id=369):
mmap$auto(0x8, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop1\x00', 0x200, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2000000008000)
io_uring_setup$auto(0x20, 0x0)
r1 = socket(0xa, 0x2, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/netfs/cookies\x00', 0xd00, 0x0)
socketpair$auto(0x10000005, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x18, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0)
mmap$auto_def_blk_fops_fs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x110, r0, 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', <r6=>0x0})
sendmsg$auto_MACSEC_CMD_DEL_RXSA(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x24, r5, 0x501, 0x703d2b, 0x25dfdbff, {}, [@MACSEC_ATTR_SA_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0xffffffffffffffab, 0x1, r6}, @MACSEC_ATTR_RXSC_CONFIG={0x4}]}, 0x24}}, 0x80)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r7 = clone$auto(0x6db, 0x10, 0x0, 0x0, 0x3)
migrate_pages$auto(r7, 0x4, 0x0, &(0x7f0000000180)=0x2)

665.132159ms ago: executing program 5 (id=370):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x8000, 0x0)
read$auto(r0, &(0x7f0000000000)='veth1\x00', 0x10)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
unshare$auto(0x40000080)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_GET_RADIO(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r2, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020)
read$auto(0xffffffffffffffff, 0x0, 0x7f)
mprotect$auto(0x8000, 0x8, 0x8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
read$auto(r1, 0x0, 0x3)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

0s ago: executing program 2 (id=371):
mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_FIONBIO(r1, 0x5421, 0xffff)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r1, 0x8000)
r2 = getpgid(0xffffffffffffffff)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0)
rt_tgsigqueueinfo$auto_SIGCONT(r2, 0x0, 0x12, &(0x7f0000000340)={@siginfo_0_0={0x943, 0x7, 0xa708, @_sigsys={&(0x7f0000000140)="7eb462370c31b08d52ba3ec91ed7077f09c5c5fef17c3ba58b0251ba4d4e3be060267dfac99b9edbd4112be2dc9f748d4eee39c392244bc90503648dcd9f4d298e9f5cdde44204fba27a6aeebdaec1ab4e49bb465efd7ca2fca8cbeb4ce5446fdf50a466ea2d9778147a105f2a7fc3f610d9f79e5682b0941037ae7a4383b60970df151267e12dd45192b72526a3863960d52cf9a937", 0x1}}})
read$auto(0x3, 0x0, 0x80)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
readv$auto(0x3, 0x0, 0x1)
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x1c3000, 0x0)
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20500, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x1, 0x0)
connect$auto(r1, &(0x7f00000000c0)=@sco={0x1f, @none}, 0x6)
listen$auto(0x3, 0x81)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
r3 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/self/ns/cgroup\x00', 0x0, 0x0)
ioctl$auto_NS_GET_NSTYPE(r3, 0xb703, 0x0)
r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x3}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.47' (ED25519) to the list of known hosts.
[   91.132748][ T5811] cgroup: Unknown subsys name 'net'
[   91.262928][ T5811] cgroup: Unknown subsys name 'cpuset'
[   91.272488][ T5811] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   93.216321][ T5811] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   95.385980][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   95.394995][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   95.411794][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   95.416664][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   95.420554][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   95.432533][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   95.435256][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   95.444932][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   95.450674][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   95.462015][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   95.467503][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   95.472983][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   95.484596][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   95.489539][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   95.499807][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   95.509349][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   95.519216][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   95.524375][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   95.539234][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   95.549211][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   96.187335][ T5823] chnl_net:caif_netlink_parms(): no params data found
[   96.252474][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   96.408009][ T5822] chnl_net:caif_netlink_parms(): no params data found
[   96.429702][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   96.476365][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.485185][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.493000][ T5823] bridge_slave_0: entered allmulticast mode
[   96.500784][ T5823] bridge_slave_0: entered promiscuous mode
[   96.559578][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.566926][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.574585][ T5823] bridge_slave_1: entered allmulticast mode
[   96.582826][ T5823] bridge_slave_1: entered promiscuous mode
[   96.646999][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.654390][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.662228][ T5825] bridge_slave_0: entered allmulticast mode
[   96.669827][ T5825] bridge_slave_0: entered promiscuous mode
[   96.703862][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.711132][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.718599][ T5825] bridge_slave_1: entered allmulticast mode
[   96.726322][ T5825] bridge_slave_1: entered promiscuous mode
[   96.753259][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.807532][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.870953][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.880417][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.889009][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.896295][ T5822] bridge_slave_0: entered allmulticast mode
[   96.904242][ T5822] bridge_slave_0: entered promiscuous mode
[   96.911978][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.919285][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.926516][ T5824] bridge_slave_0: entered allmulticast mode
[   96.934693][ T5824] bridge_slave_0: entered promiscuous mode
[   96.957640][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.967802][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.975334][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.983604][ T5822] bridge_slave_1: entered allmulticast mode
[   96.991455][ T5822] bridge_slave_1: entered promiscuous mode
[   96.998711][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.005922][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.013799][ T5824] bridge_slave_1: entered allmulticast mode
[   97.021455][ T5824] bridge_slave_1: entered promiscuous mode
[   97.031417][ T5823] team0: Port device team_slave_0 added
[   97.088955][ T5823] team0: Port device team_slave_1 added
[   97.112340][ T5825] team0: Port device team_slave_0 added
[   97.146015][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.157526][ T5825] team0: Port device team_slave_1 added
[   97.166023][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.190618][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.214256][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.237986][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.245077][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.271133][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.327864][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.335122][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.364538][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.393503][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.400925][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.427424][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.442729][ T5822] team0: Port device team_slave_0 added
[   97.449562][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.456729][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.484227][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.499236][   T24] cfg80211: failed to load regulatory.db
[   97.514409][ T5824] team0: Port device team_slave_0 added
[   97.522525][ T5822] team0: Port device team_slave_1 added
[   97.530581][ T5824] team0: Port device team_slave_1 added
[   97.539056][ T5143] Bluetooth: hci1: command tx timeout
[   97.618159][ T5143] Bluetooth: hci0: command tx timeout
[   97.625003][ T5143] Bluetooth: hci3: command tx timeout
[   97.632496][   T51] Bluetooth: hci2: command tx timeout
[   97.649189][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.656176][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.682434][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.713436][ T5825] hsr_slave_0: entered promiscuous mode
[   97.720327][ T5825] hsr_slave_1: entered promiscuous mode
[   97.727865][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.735040][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.761461][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.773625][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.781582][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.808488][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.839473][ T5823] hsr_slave_0: entered promiscuous mode
[   97.846189][ T5823] hsr_slave_1: entered promiscuous mode
[   97.852997][ T5823] debugfs: 'hsr0' already exists in 'hsr'
[   97.859144][ T5823] Cannot create hsr debugfs directory
[   97.865506][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.872864][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.898928][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.022901][ T5824] hsr_slave_0: entered promiscuous mode
[   98.030035][ T5824] hsr_slave_1: entered promiscuous mode
[   98.036462][ T5824] debugfs: 'hsr0' already exists in 'hsr'
[   98.042603][ T5824] Cannot create hsr debugfs directory
[   98.090390][ T5822] hsr_slave_0: entered promiscuous mode
[   98.096920][ T5822] hsr_slave_1: entered promiscuous mode
[   98.103424][ T5822] debugfs: 'hsr0' already exists in 'hsr'
[   98.109880][ T5822] Cannot create hsr debugfs directory
[   98.644296][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   98.663336][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   98.675494][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   98.696731][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   98.762442][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   98.779620][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   98.792138][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   98.805697][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   98.911318][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   98.944764][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   98.961776][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   98.976929][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   99.037110][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.108597][ T5822] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   99.125395][ T5822] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   99.136847][ T5822] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   99.154563][ T5822] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   99.167980][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   99.195097][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.202635][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.252616][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.259865][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.312403][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.400813][ T5823] 8021q: adding VLAN 0 to HW filter on device team0
[   99.429751][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.451763][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.458980][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.523409][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.530650][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.562003][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   99.595449][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.602719][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.618754][ T5143] Bluetooth: hci1: command tx timeout
[   99.630208][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.686166][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.693450][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.703643][ T5143] Bluetooth: hci3: command tx timeout
[   99.708676][ T5833] Bluetooth: hci2: command tx timeout
[   99.709352][ T5143] Bluetooth: hci0: command tx timeout
[   99.784696][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[   99.814344][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.821572][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.876653][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.883905][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.010354][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.200558][ T5825] veth0_vlan: entered promiscuous mode
[  100.243373][ T5825] veth1_vlan: entered promiscuous mode
[  100.305501][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.352612][ T5825] veth0_macvtap: entered promiscuous mode
[  100.391820][ T5825] veth1_macvtap: entered promiscuous mode
[  100.482771][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.504777][ T5823] veth0_vlan: entered promiscuous mode
[  100.526392][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.545374][ T5823] veth1_vlan: entered promiscuous mode
[  100.562191][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.618401][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.630805][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.640570][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.669977][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.711876][ T5823] veth0_macvtap: entered promiscuous mode
[  100.725896][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.744410][ T5823] veth1_macvtap: entered promiscuous mode
[  100.812778][ T5824] veth0_vlan: entered promiscuous mode
[  100.837331][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.850312][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.866869][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.890823][ T5824] veth1_vlan: entered promiscuous mode
[  100.917757][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.950931][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.975318][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.994585][   T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.005691][   T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.028492][ T1106] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.066564][ T5824] veth0_macvtap: entered promiscuous mode
[  101.074678][ T1106] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.096190][ T5822] veth0_vlan: entered promiscuous mode
[  101.114916][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  101.141475][ T5824] veth1_macvtap: entered promiscuous mode
[  101.216789][ T5822] veth1_vlan: entered promiscuous mode
[  101.283236][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.303817][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.328575][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.337431][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.370001][ T1106] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.401621][ T1106] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.414627][ T1106] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.431703][ T5919] netlink: 'syz.0.1': attribute type 64 has an invalid length.
[  101.440937][ T1106] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.443622][ T5919] netlink: 74 bytes leftover after parsing attributes in process `syz.0.1'.
[  101.461361][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.469584][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.485835][ T5920] Zero length message leads to an empty skb
[  101.499264][ T5822] veth0_macvtap: entered promiscuous mode
[  101.530908][ T5822] veth1_macvtap: entered promiscuous mode
[  101.678390][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.698306][ T5143] Bluetooth: hci1: command tx timeout
[  101.742045][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.779584][   T51] Bluetooth: hci3: command tx timeout
[  101.785193][ T5143] Bluetooth: hci2: command tx timeout
[  101.792275][   T51] Bluetooth: hci0: command tx timeout
[  101.845354][   T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.931340][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.949668][ T5928] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  101.960900][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.980279][   T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.060992][   T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.102377][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.103762][   T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.113780][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.324472][  T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.348409][  T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.423757][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.433232][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.778576][ T5143] Bluetooth: hci1: command tx timeout
[  103.859101][ T5143] Bluetooth: hci2: command tx timeout
[  103.864648][ T5143] Bluetooth: hci0: command tx timeout
[  103.870523][   T51] Bluetooth: hci3: command tx timeout
[  104.558410][ T5955] FAULT_INJECTION: forcing a failure.
[  104.558410][ T5955] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  104.588247][ T5955] CPU: 0 UID: 0 PID: 5955 Comm: syz.0.9 Not tainted syzkaller #0 PREEMPT(full) 
[  104.588293][ T5955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  104.588316][ T5955] Call Trace:
[  104.588326][ T5955]  <TASK>
[  104.588338][ T5955]  dump_stack_lvl+0x100/0x190
[  104.588398][ T5955]  should_fail_ex.cold+0x5/0xa
[  104.588429][ T5955]  ? prepare_alloc_pages+0x16d/0x5f0
[  104.588480][ T5955]  should_fail_alloc_page+0xeb/0x140
[  104.588514][ T5955]  prepare_alloc_pages+0x1f0/0x5f0
[  104.588549][ T5955]  ? bpf_ksym_find+0x124/0x1c0
[  104.588593][ T5955]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[  104.588639][ T5955]  ? __kernel_text_address+0xd/0x30
[  104.588683][ T5955]  ? unwind_get_return_address+0x59/0xa0
[  104.588715][ T5955]  ? arch_stack_walk+0xa6/0xf0
[  104.588758][ T5955]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  104.588810][ T5955]  ? stack_trace_save+0x8e/0xc0
[  104.588842][ T5955]  ? __pfx_stack_trace_save+0x10/0x10
[  104.588877][ T5955]  ? stack_depot_save_flags+0x27/0x9d0
[  104.588921][ T5955]  ? mas_store_prealloc+0x893/0xfb0
[  104.588962][ T5955]  ? kasan_save_stack+0x30/0x50
[  104.588991][ T5955]  ? kasan_save_track+0x14/0x30
[  104.589019][ T5955]  ? __kasan_slab_alloc+0x89/0x90
[  104.589050][ T5955]  ? kmem_cache_alloc_noprof+0x241/0x6e0
[  104.589098][ T5955]  ? __pmd_alloc+0xbf/0x950
[  104.589133][ T5955]  ? __handle_mm_fault+0xa99/0x2b60
[  104.589175][ T5955]  ? handle_mm_fault+0x36d/0xa20
[  104.589218][ T5955]  ? __get_user_pages+0xf9c/0x34d0
[  104.589254][ T5955]  ? populate_vma_page_range+0x267/0x3f0
[  104.589294][ T5955]  ? __mm_populate+0x107/0x3a0
[  104.589333][ T5955]  ? vm_mmap_pgoff+0x37f/0x470
[  104.589369][ T5955]  ? ksys_mmap_pgoff+0xe1/0x650
[  104.589403][ T5955]  ? __x64_sys_mmap+0x125/0x190
[  104.589453][ T5955]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  104.589503][ T5955]  ? policy_nodemask+0xed/0x4f0
[  104.589542][ T5955]  alloc_pages_mpol+0x1fb/0x550
[  104.589579][ T5955]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  104.589627][ T5955]  alloc_pages_noprof+0x131/0x390
[  104.589667][ T5955]  pte_alloc_one+0x1c/0x3d0
[  104.589707][ T5955]  __pte_alloc+0x6d/0x3e0
[  104.589742][ T5955]  ? __pfx___pte_alloc+0x10/0x10
[  104.589785][ T5955]  ? do_raw_spin_lock+0x128/0x260
[  104.589835][ T5955]  ? find_held_lock+0x2b/0x80
[  104.589872][ T5955]  do_anonymous_page+0x13cc/0x1fb0
[  104.589920][ T5955]  ? do_raw_spin_unlock+0x145/0x1e0
[  104.589974][ T5955]  ? _raw_spin_unlock+0x28/0x50
[  104.590018][ T5955]  ? __pmd_alloc+0x3fb/0x950
[  104.590063][ T5955]  __handle_mm_fault+0x1d42/0x2b60
[  104.590117][ T5955]  ? mt_find+0x45e/0x8e0
[  104.590150][ T5955]  ? __pfx___handle_mm_fault+0x10/0x10
[  104.590195][ T5955]  ? __pfx_mt_find+0x10/0x10
[  104.590222][ T5955]  ? lock_acquire+0x1cf/0x380
[  104.590298][ T5955]  handle_mm_fault+0x36d/0xa20
[  104.590351][ T5955]  __get_user_pages+0xf9c/0x34d0
[  104.590404][ T5955]  ? __pfx___get_user_pages+0x10/0x10
[  104.590464][ T5955]  populate_vma_page_range+0x267/0x3f0
[  104.590510][ T5955]  ? __pfx_populate_vma_page_range+0x10/0x10
[  104.590559][ T5955]  ? __mm_populate+0x24a/0x3a0
[  104.590605][ T5955]  __mm_populate+0x107/0x3a0
[  104.590649][ T5955]  ? __pfx___mm_populate+0x10/0x10
[  104.590695][ T5955]  ? up_write+0x290/0x4f0
[  104.590750][ T5955]  vm_mmap_pgoff+0x37f/0x470
[  104.590795][ T5955]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  104.590838][ T5955]  ? do_futex+0x192/0x350
[  104.590886][ T5955]  ? __pfx_do_futex+0x10/0x10
[  104.590940][ T5955]  ksys_mmap_pgoff+0xe1/0x650
[  104.590979][ T5955]  ? __x64_sys_futex+0x34f/0x4d0
[  104.591022][ T5955]  ? __x64_sys_futex+0x358/0x4d0
[  104.591069][ T5955]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  104.591107][ T5955]  ? xfd_validate_state+0x129/0x190
[  104.591161][ T5955]  __x64_sys_mmap+0x125/0x190
[  104.591219][ T5955]  do_syscall_64+0x106/0xf80
[  104.591271][ T5955]  ? clear_bhb_loop+0x40/0x90
[  104.591314][ T5955]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.591350][ T5955] RIP: 0033:0x7f51a239c799
[  104.591392][ T5955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  104.591427][ T5955] RSP: 002b:00007f51a3272028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  104.591473][ T5955] RAX: ffffffffffffffda RBX: 00007f51a2615fa0 RCX: 00007f51a239c799
[  104.591497][ T5955] RDX: 00000000000000df RSI: 0000000000000008 RDI: 0000000000000000
[  104.591517][ T5955] RBP: 00007f51a2432c99 R08: 0000000000000002 R09: 0000000000008000
[  104.591538][ T5955] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[  104.591558][ T5955] R13: 00007f51a2616038 R14: 00007f51a2615fa0 R15: 00007ffdafd30998
[  104.591602][ T5955]  </TASK>
[  105.207371][ T5958] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  106.065837][ T5963] bridge0: port 3(team0) entered blocking state
[  106.080779][ T5963] bridge0: port 3(team0) entered disabled state
[  106.135243][ T5963] team0: entered allmulticast mode
[  106.164539][ T5963] team_slave_0: entered allmulticast mode
[  106.210329][ T5963] team_slave_1: entered allmulticast mode
[  106.262299][ T5963] team0: entered promiscuous mode
[  106.387506][ T5963] team_slave_0: entered promiscuous mode
[  106.402338][ T5955] kexec: Could not allocate control_code_buffer
[  106.412956][ T5963] team_slave_1: entered promiscuous mode
[  106.455718][ T5963] bridge0: port 3(team0) entered blocking state
[  106.462310][ T5963] bridge0: port 3(team0) entered forwarding state
[  109.460204][ T6005] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  118.509003][ T6091] FAULT_INJECTION: forcing a failure.
[  118.509003][ T6091] name failslab, interval 1, probability 0, space 0, times 1
[  118.533096][ T6091] CPU: 0 UID: 0 PID: 6091 Comm: syz.3.33 Not tainted syzkaller #0 PREEMPT(full) 
[  118.533146][ T6091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  118.533165][ T6091] Call Trace:
[  118.533175][ T6091]  <TASK>
[  118.533187][ T6091]  dump_stack_lvl+0x100/0x190
[  118.533243][ T6091]  should_fail_ex.cold+0x5/0xa
[  118.533280][ T6091]  ? constrain_params_by_rules+0x175/0xcc0
[  118.533325][ T6091]  should_failslab+0xc2/0x120
[  118.533360][ T6091]  __kmalloc_noprof+0xe0/0x850
[  118.533418][ T6091]  constrain_params_by_rules+0x175/0xcc0
[  118.533475][ T6091]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  118.533525][ T6091]  ? lockdep_hardirqs_on+0x78/0x100
[  118.533582][ T6091]  ? __pfx_constrain_params_by_rules+0x10/0x10
[  118.533648][ T6091]  ? __kasan_kmalloc+0xaa/0xb0
[  118.533702][ T6091]  ? snd_pcm_oss_change_params_locked+0x81c/0x39f0
[  118.533745][ T6091]  ? snd_pcm_oss_make_ready+0xeb/0x1b0
[  118.533786][ T6091]  ? snd_pcm_oss_sync+0x1de/0x840
[  118.533839][ T6091]  ? snd_interval_refine+0x2d0/0x580
[  118.533896][ T6091]  snd_pcm_hw_refine+0x7e7/0xad0
[  118.533949][ T6091]  ? __pfx_snd_pcm_hw_refine+0x10/0x10
[  118.534013][ T6091]  ? snd_interval_refine+0x2d0/0x580
[  118.534070][ T6091]  snd_pcm_oss_change_params_locked+0xdb3/0x39f0
[  118.534144][ T6091]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  118.534186][ T6091]  ? __pfx___mutex_lock+0x10/0x10
[  118.534238][ T6091]  ? task_work_add+0x201/0x3b0
[  118.534290][ T6091]  ? __pfx_task_work_add+0x10/0x10
[  118.534364][ T6091]  snd_pcm_oss_make_ready+0xeb/0x1b0
[  118.534410][ T6091]  snd_pcm_oss_sync+0x1de/0x840
[  118.534457][ T6091]  snd_pcm_oss_release+0x238/0x300
[  118.534496][ T6091]  ? __pfx_snd_pcm_oss_release+0x10/0x10
[  118.534535][ T6091]  __fput+0x3ff/0xb40
[  118.534583][ T6091]  task_work_run+0x150/0x240
[  118.534631][ T6091]  ? __pfx_task_work_run+0x10/0x10
[  118.534689][ T6091]  exit_to_user_mode_loop+0x100/0x4a0
[  118.534730][ T6091]  do_syscall_64+0x668/0xf80
[  118.534774][ T6091]  ? clear_bhb_loop+0x40/0x90
[  118.534809][ T6091]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.534840][ T6091] RIP: 0033:0x7ff8e699c799
[  118.534867][ T6091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  118.534897][ T6091] RSP: 002b:00007ff8e77ff028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  118.534927][ T6091] RAX: 0000000000000000 RBX: 00007ff8e6c16180 RCX: 00007ff8e699c799
[  118.534944][ T6091] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002
[  118.534961][ T6091] RBP: 00007ff8e6a32c99 R08: 0000000000000000 R09: 0000000000000000
[  118.534979][ T6091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  118.534997][ T6091] R13: 00007ff8e6c16218 R14: 00007ff8e6c16180 R15: 00007ffd1f8fcf08
[  118.535036][ T6091]  </TASK>
[  125.080028][ T6141] vivid-007: =================  START STATUS  =================
[  125.117494][ T6141] vivid-007: Generate PTS: true
[  125.167825][ T6141] vivid-007: Generate SCR: true
[  125.235679][ T6141] tpg source WxH: 320x240 (Y'CbCr)
[  125.242788][ T6141] tpg field: 1
[  125.246321][ T6141] tpg crop: (0,0)/320x240
[  125.256486][ T6141] tpg compose: (0,0)/320x240
[  125.273179][ T6141] tpg colorspace: 8
[  125.311426][ T6141] tpg transfer function: 0/0
[  125.340174][ T6141] tpg Y'CbCr encoding: 0/0
[  125.344645][ T6141] tpg quantization: 0/0
[  125.383265][ T6141] tpg RGB range: 0/2
[  125.387254][ T6141] vivid-007: ==================  END STATUS  ==================
[  127.734882][ T6158] FAULT_INJECTION: forcing a failure.
[  127.734882][ T6158] name failslab, interval 1, probability 0, space 0, times 0
[  127.830293][ T6158] CPU: 1 UID: 0 PID: 6158 Comm: syz.2.44 Not tainted syzkaller #0 PREEMPT(full) 
[  127.830339][ T6158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  127.830358][ T6158] Call Trace:
[  127.830369][ T6158]  <TASK>
[  127.830381][ T6158]  dump_stack_lvl+0x100/0x190
[  127.830464][ T6158]  should_fail_ex.cold+0x5/0xa
[  127.830504][ T6158]  ? memcg_list_lru_alloc+0x4ec/0x740
[  127.830557][ T6158]  should_failslab+0xc2/0x120
[  127.830594][ T6158]  __kmalloc_noprof+0xe0/0x850
[  127.830647][ T6158]  ? ipcget+0xee/0xf50
[  127.830699][ T6158]  memcg_list_lru_alloc+0x4ec/0x740
[  127.830763][ T6158]  ? __pfx_memcg_list_lru_alloc+0x10/0x10
[  127.830815][ T6158]  ? rcu_read_unlock+0x17/0x60
[  127.830867][ T6158]  ? get_mem_cgroup_from_objcg+0xd3/0x330
[  127.830924][ T6158]  __memcg_slab_post_alloc_hook+0x130/0x990
[  127.830975][ T6158]  ? kasan_save_track+0x14/0x30
[  127.831010][ T6158]  kmem_cache_alloc_lru_noprof+0x592/0x6e0
[  127.831065][ T6158]  ? hugetlbfs_alloc_inode+0x8c/0x1d0
[  127.831112][ T6158]  hugetlbfs_alloc_inode+0x8c/0x1d0
[  127.831147][ T6158]  ? __pfx_hugetlbfs_alloc_inode+0x10/0x10
[  127.831185][ T6158]  alloc_inode+0x68/0x250
[  127.831231][ T6158]  new_inode+0x22/0x1c0
[  127.831280][ T6158]  hugetlbfs_get_inode+0x313/0x750
[  127.831321][ T6158]  hugetlb_file_setup+0x3cc/0x5b0
[  127.831358][ T6158]  newseg+0xabb/0xed0
[  127.831401][ T6158]  ? __pfx_newseg+0x10/0x10
[  127.831446][ T6158]  ? down_write+0x146/0x1f0
[  127.831475][ T6158]  ? ksys_write+0x190/0x250
[  127.831502][ T6158]  ? ksys_write+0x190/0x250
[  127.831534][ T6158]  ipcget+0xee/0xf50
[  127.831571][ T6158]  ? do_futex+0x192/0x350
[  127.831611][ T6158]  ? __pfx_do_futex+0x10/0x10
[  127.831654][ T6158]  ? __pfx_ipcget+0x10/0x10
[  127.831699][ T6158]  ? __x64_sys_futex+0x34f/0x4d0
[  127.831736][ T6158]  ? __x64_sys_futex+0x358/0x4d0
[  127.831779][ T6158]  __x64_sys_shmget+0x13b/0x1b0
[  127.831818][ T6158]  ? __pfx___x64_sys_shmget+0x10/0x10
[  127.831866][ T6158]  do_syscall_64+0x106/0xf80
[  127.831910][ T6158]  ? clear_bhb_loop+0x40/0x90
[  127.831945][ T6158]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.831974][ T6158] RIP: 0033:0x7f1f1539c799
[  127.832009][ T6158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  127.832036][ T6158] RSP: 002b:00007f1f162aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d
[  127.832064][ T6158] RAX: ffffffffffffffda RBX: 00007f1f15616270 RCX: 00007f1f1539c799
[  127.832082][ T6158] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000
[  127.832099][ T6158] RBP: 00007f1f15432c99 R08: 0000000000000000 R09: 0000000000000000
[  127.832117][ T6158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  127.832134][ T6158] R13: 00007f1f15616308 R14: 00007f1f15616270 R15: 00007ffd017358b8
[  127.832169][ T6158]  </TASK>
[  131.884509][ T5143] Bluetooth: hci0: unexpected event 0x10 length: 440 > 1
[  131.885698][ T5143] Bluetooth: hci0: hardware error 0x00
[  133.320804][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  133.330429][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  134.034114][ T5143] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  135.177666][ T6264] input: f�
 as /devices/virtual/input/input6
[  136.029909][ T6278] bridge0: port 3(gretap0) entered blocking state
[  136.036571][ T6278] bridge0: port 3(gretap0) entered disabled state
[  136.051108][ T6278] gretap0: entered allmulticast mode
[  136.077228][ T6278] FAULT_INJECTION: forcing a failure.
[  136.077228][ T6278] name failslab, interval 1, probability 0, space 0, times 0
[  136.109653][ T6278] CPU: 0 UID: 0 PID: 6278 Comm: syz.2.64 Not tainted syzkaller #0 PREEMPT(full) 
[  136.109686][ T6278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  136.109700][ T6278] Call Trace:
[  136.109708][ T6278]  <TASK>
[  136.109717][ T6278]  dump_stack_lvl+0x100/0x190
[  136.109760][ T6278]  should_fail_ex.cold+0x5/0xa
[  136.109789][ T6278]  should_failslab+0xc2/0x120
[  136.109815][ T6278]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  136.109853][ T6278]  ? __kernfs_new_node+0xd2/0x960
[  136.109896][ T6278]  __kernfs_new_node+0xd2/0x960
[  136.109967][ T6278]  ? __pfx___kernfs_new_node+0x10/0x10
[  136.110028][ T6278]  ? find_held_lock+0x2b/0x80
[  136.110066][ T6278]  ? kernfs_root+0xee/0x2a0
[  136.110107][ T6278]  ? kernfs_root+0xee/0x2a0
[  136.110149][ T6278]  kernfs_new_node+0x11b/0x1a0
[  136.110176][ T6278]  kernfs_create_link+0xcc/0x240
[  136.110209][ T6278]  sysfs_do_create_link_sd+0x90/0x140
[  136.110246][ T6278]  sysfs_create_link+0x61/0xc0
[  136.110282][ T6278]  __netdev_adjacent_dev_insert+0x43e/0xbf0
[  136.110322][ T6278]  ? __pfx___netdev_adjacent_dev_insert+0x10/0x10
[  136.110368][ T6278]  __netdev_upper_dev_link+0x3d8/0x7e0
[  136.110399][ T6278]  ? __pfx___netdev_upper_dev_link+0x10/0x10
[  136.110425][ T6278]  ? kernfs_root+0xf8/0x2a0
[  136.110464][ T6278]  ? kernfs_add_one+0x214/0x850
[  136.110494][ T6278]  netdev_master_upper_dev_link+0x9f/0xd0
[  136.110523][ T6278]  ? __pfx_netdev_master_upper_dev_link+0x10/0x10
[  136.110553][ T6278]  ? lockdep_rtnl_is_held+0x26/0x40
[  136.110581][ T6278]  ? netdev_is_rx_handler_busy+0x83/0x140
[  136.110624][ T6278]  br_add_if+0x9fd/0x1b40
[  136.110660][ T6278]  ? security_capable+0x80/0x260
[  136.110708][ T6278]  add_del_if+0x114/0x160
[  136.110744][ T6278]  br_dev_siocdevprivate+0x8ac/0x1650
[  136.110783][ T6278]  ? __pfx_br_dev_siocdevprivate+0x10/0x10
[  136.110830][ T6278]  ? lock_acquire+0x1cf/0x380
[  136.110872][ T6278]  ? netdev_name_node_lookup+0x107/0x150
[  136.110903][ T6278]  ? __mutex_lock+0x26a/0x1b90
[  136.110945][ T6278]  dev_ifsioc+0xc1e/0x1e90
[  136.110981][ T6278]  ? __pfx_dev_ifsioc+0x10/0x10
[  136.111013][ T6278]  ? __pfx___mutex_lock+0x10/0x10
[  136.111061][ T6278]  ? dev_load+0x8e/0x240
[  136.111098][ T6278]  ? dev_load+0x8e/0x240
[  136.111137][ T6278]  dev_ioctl+0x70e/0x1070
[  136.111173][ T6278]  sock_ioctl+0x494/0x6b0
[  136.111203][ T6278]  ? __pfx_sock_ioctl+0x10/0x10
[  136.111230][ T6278]  ? hook_file_ioctl_common+0x146/0x410
[  136.111265][ T6278]  ? __fget_files+0x21f/0x3d0
[  136.111293][ T6278]  ? __pfx_sock_ioctl+0x10/0x10
[  136.111322][ T6278]  __x64_sys_ioctl+0x18e/0x210
[  136.111361][ T6278]  do_syscall_64+0x106/0xf80
[  136.111396][ T6278]  ? clear_bhb_loop+0x40/0x90
[  136.111426][ T6278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.111450][ T6278] RIP: 0033:0x7f1f1539c799
[  136.111471][ T6278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  136.111493][ T6278] RSP: 002b:00007f1f1630d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  136.111516][ T6278] RAX: ffffffffffffffda RBX: 00007f1f15615fa0 RCX: 00007f1f1539c799
[  136.111532][ T6278] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 000000000000000a
[  136.111546][ T6278] RBP: 00007f1f15432c99 R08: 0000000000000000 R09: 0000000000000000
[  136.111560][ T6278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  136.111574][ T6278] R13: 00007f1f15616038 R14: 00007f1f15615fa0 R15: 00007ffd017358b8
[  136.111605][ T6278]  </TASK>
[  136.112902][ T6278] gretap0: left allmulticast mode
[  136.881697][ T6288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.67'.
[  136.923411][ T6288] netlink: 'syz.3.67': attribute type 1 has an invalid length.
[  136.978738][ T6288] netlink: 5 bytes leftover after parsing attributes in process `syz.3.67'.
[  137.457389][ T6292] bridge0: port 3(gretap0) entered blocking state
[  137.491134][ T6292] bridge0: port 3(gretap0) entered disabled state
[  137.518400][ T6292] gretap0: entered allmulticast mode
[  137.642217][ T6292] gretap0: entered promiscuous mode
[  137.681771][ T6292] bridge0: port 3(gretap0) entered blocking state
[  137.688412][ T6292] bridge0: port 3(gretap0) entered forwarding state
[  138.310733][ T6316] syz.2.70 uses obsolete (PF_INET,SOCK_PACKET)
[  141.315817][ T6359] netlink: 186 bytes leftover after parsing attributes in process `syz.0.76'.
[  142.201543][ T6359] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  143.573221][ T6398] futex_wake_op: syz.1.80 tries to shift op by -2048; fix this program
[  144.189154][ T6408] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  144.529365][ T6418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.82'.
[  144.592539][ T6421] netlink: 25 bytes leftover after parsing attributes in process `syz.0.82'.
[  146.618961][ T6452] FAULT_INJECTION: forcing a failure.
[  146.618961][ T6452] name failslab, interval 1, probability 0, space 0, times 0
[  146.658636][ T6452] CPU: 1 UID: 0 PID: 6452 Comm: syz.3.85 Not tainted syzkaller #0 PREEMPT(full) 
[  146.658679][ T6452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  146.658698][ T6452] Call Trace:
[  146.658709][ T6452]  <TASK>
[  146.658720][ T6452]  dump_stack_lvl+0x100/0x190
[  146.658778][ T6452]  should_fail_ex.cold+0x5/0xa
[  146.658819][ T6452]  should_failslab+0xc2/0x120
[  146.658858][ T6452]  __kmalloc_cache_noprof+0x7a/0x6f0
[  146.658904][ T6452]  ? syslog_print_all+0xed/0x3f0
[  146.658957][ T6452]  syslog_print_all+0xed/0x3f0
[  146.659001][ T6452]  ? futex_wait+0x125/0x380
[  146.659056][ T6452]  ? __pfx_syslog_print_all+0x10/0x10
[  146.659122][ T6452]  ? bpf_lsm_capable+0x9/0x10
[  146.659158][ T6452]  ? security_capable+0x80/0x260
[  146.659218][ T6452]  do_syslog+0x350/0x6d0
[  146.659270][ T6452]  ? __pfx_do_syslog+0x10/0x10
[  146.659347][ T6452]  __x64_sys_syslog+0x74/0xb0
[  146.659395][ T6452]  ? lockdep_hardirqs_on+0x78/0x100
[  146.659445][ T6452]  do_syscall_64+0x106/0xf80
[  146.659492][ T6452]  ? clear_bhb_loop+0x40/0x90
[  146.659532][ T6452]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.659566][ T6452] RIP: 0033:0x7ff8e699c799
[  146.659594][ T6452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  146.659635][ T6452] RSP: 002b:00007ff8e7841028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067
[  146.659667][ T6452] RAX: ffffffffffffffda RBX: 00007ff8e6c15fa0 RCX: 00007ff8e699c799
[  146.659689][ T6452] RDX: 00000000000000f4 RSI: 0000200000000040 RDI: 0000000000000004
[  146.659709][ T6452] RBP: 00007ff8e6a32c99 R08: 0000000000000000 R09: 0000000000000000
[  146.659728][ T6452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  146.659747][ T6452] R13: 00007ff8e6c16038 R14: 00007ff8e6c15fa0 R15: 00007ffd1f8fcf08
[  146.659789][ T6452]  </TASK>
[  148.045765][ T6456] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  148.377798][ T6456] FAULT_INJECTION: forcing a failure.
[  148.377798][ T6456] name failslab, interval 1, probability 0, space 0, times 0
[  148.390732][ T6456] CPU: 0 UID: 0 PID: 6456 Comm: syz.0.86 Not tainted syzkaller #0 PREEMPT(full) 
[  148.390776][ T6456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  148.390797][ T6456] Call Trace:
[  148.390809][ T6456]  <TASK>
[  148.390821][ T6456]  dump_stack_lvl+0x100/0x190
[  148.390880][ T6456]  should_fail_ex.cold+0x5/0xa
[  148.390922][ T6456]  should_failslab+0xc2/0x120
[  148.390961][ T6456]  __kmalloc_node_noprof+0xe6/0x850
[  148.391023][ T6456]  ? blk_mq_alloc_tag_set+0x477/0x1330
[  148.391078][ T6456]  ? __raw_spin_lock_init+0x3a/0x110
[  148.391138][ T6456]  blk_mq_alloc_tag_set+0x477/0x1330
[  148.391192][ T6456]  ? idr_alloc+0xdd/0x130
[  148.391241][ T6456]  ? __pfx_idr_alloc+0x10/0x10
[  148.391303][ T6456]  loop_add+0x3b7/0xb60
[  148.391351][ T6456]  ? __pfx_loop_add+0x10/0x10
[  148.391421][ T6456]  ? rcu_is_watching+0x12/0xc0
[  148.391475][ T6456]  ? do_sock_setsockopt+0x101/0x1d0
[  148.391510][ T6456]  ? kfree+0x2ec/0x6b0
[  148.391553][ T6456]  ? ipv6_setsockopt+0xcb/0x170
[  148.391593][ T6456]  loop_control_ioctl+0xae/0x620
[  148.391645][ T6456]  ? __pfx_loop_control_ioctl+0x10/0x10
[  148.391695][ T6456]  ? xfd_validate_state+0x129/0x190
[  148.391749][ T6456]  ? __pfx_loop_control_ioctl+0x10/0x10
[  148.391803][ T6456]  __x64_sys_ioctl+0x18e/0x210
[  148.391857][ T6456]  do_syscall_64+0x106/0xf80
[  148.391907][ T6456]  ? clear_bhb_loop+0x40/0x90
[  148.391949][ T6456]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.391991][ T6456] RIP: 0033:0x7f51a239c799
[  148.392020][ T6456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  148.392051][ T6456] RSP: 002b:00007f51a3272028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  148.392084][ T6456] RAX: ffffffffffffffda RBX: 00007f51a2615fa0 RCX: 00007f51a239c799
[  148.392106][ T6456] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000002
[  148.392127][ T6456] RBP: 00007f51a2432c99 R08: 0000000000000000 R09: 0000000000000000
[  148.392146][ T6456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  148.392165][ T6456] R13: 00007f51a2616038 R14: 00007f51a2615fa0 R15: 00007ffdafd30998
[  148.392208][ T6456]  </TASK>
[  149.414838][ T6490] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  149.431366][ T6490] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  149.516511][ T6490] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  149.562531][ T6490] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  149.577937][ T6490] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  149.598354][ T6490] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  149.932109][ T6490] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  150.026174][ T6490] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  150.080374][ T6490] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  150.929927][ T6503] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x7a000
[  150.948512][ T6503] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  150.955736][ T6503] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  151.006098][ T6503] raw: ffff888000000000 0000000000000000 00000001ffffffff 0000000000000000
[  151.045816][ T6503] page dumped because: unmovable page
[  151.098135][ T6503] page_owner tracks the page as allocated
[  151.115180][ T6503] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 6302, tgid 6301 (syz.3.69), ts 137854217137, free_ts 136538466436
[  151.310322][ T6503]  post_alloc_hook+0x153/0x170
[  151.315180][ T6503]  get_page_from_freelist+0x111d/0x3140
[  151.330902][ T6503]  __alloc_frozen_pages_noprof+0x27c/0x2ba0
[  151.336927][ T6503]  alloc_pages_bulk_noprof+0x782/0x1490
[  151.534683][ T6439] Bluetooth: hci2: command 0x0c1a tx timeout
[  151.573246][ T6503]  __kasan_populate_vmalloc+0xf0/0x210
[  151.581811][ T6503]  alloc_vmap_area+0x95d/0x2bd0
[  151.598167][ T6503]  __get_vm_area_node+0x1ca/0x330
[  151.615572][ T6503]  __vmalloc_node_range_noprof+0x213/0x1530
[  151.618345][ T6439] Bluetooth: hci1: command 0x0c1a tx timeout
[  151.638582][ T6503]  __vmalloc_node_noprof+0xad/0xf0
[  151.790573][ T6503]  __snd_dma_alloc_pages+0xd2/0x150
[  151.795880][ T6503]  snd_dma_alloc_dir_pages+0x151/0x240
[  151.818203][ T6503]  do_alloc_pages+0x113/0x250
[  151.822953][ T6503]  snd_pcm_lib_malloc_pages+0x4bd/0x9b0
[  151.846262][ T6503]  snd_pcm_hw_params+0x1729/0x1cb0
[  151.861997][ T6503]  snd_pcm_kernel_ioctl+0x167/0x2e0
[  151.867318][ T6503]  snd_pcm_oss_change_params_locked+0x1973/0x39f0
[  151.898192][ T6503] page last free pid 6271 tgid 6268 stack trace:
[  151.938181][ T6503]  __free_frozen_pages+0x7e1/0x10d0
[  151.943506][ T6503]  tlb_remove_table_rcu+0x2cf/0x380
[  151.947082][ T6439] Bluetooth: hci3: command 0x0c1a tx timeout
[  151.949220][ T6503]  rcu_core+0x5a2/0x10d0
[  151.968173][ T6503]  handle_softirqs+0x1eb/0x9e0
[  151.973027][ T6503]  __irq_exit_rcu+0xef/0x150
[  151.996664][ T6503]  irq_exit_rcu+0x9/0x30
[  152.017104][ T6503]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  152.027330][ T6503]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  152.515654][ T6532] vivid-007: =================  START STATUS  =================
[  152.794942][ T6532] vivid-007: Generate PTS: true
[  152.808208][ T6532] vivid-007: Generate SCR: true
[  152.813189][ T6532] tpg source WxH: 320x240 (Y'CbCr)
[  152.843204][ T6532] tpg field: 1
[  152.860636][ T6532] tpg crop: (0,0)/320x240
[  152.865041][ T6532] tpg compose: (0,0)/320x240
[  152.888095][ T6532] tpg colorspace: 8
[  152.912851][ T6532] tpg transfer function: 0/0
[  152.917835][ T6532] tpg Y'CbCr encoding: 0/0
[  152.968119][ T6532] tpg quantization: 0/0
[  152.972366][ T6532] tpg RGB range: 0/2
[  152.976495][ T6532] vivid-007: ==================  END STATUS  ==================
[  153.618179][ T6439] Bluetooth: hci2: command 0x0c1a tx timeout
[  153.701516][ T6439] Bluetooth: hci1: command 0x0c1a tx timeout
[  153.915029][ T6547] raw_sendmsg: syz.2.97 forgot to set AF_INET. Fix it!
[  154.018172][ T6439] Bluetooth: hci3: command 0x0c1a tx timeout
[  154.676570][ T6552] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7
[  154.746521][ T6544] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3)
[  155.271579][ T6553] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8
[  155.699739][ T6439] Bluetooth: hci2: command 0x0c1a tx timeout
[  155.778270][ T6439] Bluetooth: hci1: command 0x0c1a tx timeout
[  156.100210][ T6439] Bluetooth: hci3: command 0x0c1a tx timeout
[  160.100346][ T6439] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  161.194698][ T6605] smpboot: CPU 1 is now offline
[  163.156393][ T6625] mmap: syz.2.111 (6625) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  163.342143][ T6623] FAULT_INJECTION: forcing a failure.
[  163.342143][ T6623] name failslab, interval 1, probability 0, space 0, times 0
[  163.429178][ T6623] CPU: 0 UID: 0 PID: 6623 Comm: syz.2.111 Not tainted syzkaller #0 PREEMPT(full) 
[  163.429211][ T6623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  163.429225][ T6623] Call Trace:
[  163.429233][ T6623]  <TASK>
[  163.429241][ T6623]  dump_stack_lvl+0x100/0x190
[  163.429286][ T6623]  should_fail_ex.cold+0x5/0xa
[  163.429315][ T6623]  should_failslab+0xc2/0x120
[  163.429342][ T6623]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  163.429380][ T6623]  ? anon_vma_clone+0x2ba/0xcd0
[  163.429417][ T6623]  anon_vma_clone+0x2ba/0xcd0
[  163.429457][ T6623]  __split_vma+0x51f/0xd90
[  163.429496][ T6623]  ? __pfx___split_vma+0x10/0x10
[  163.429538][ T6623]  ? find_vma+0xbf/0x140
[  163.429568][ T6623]  vma_modify+0x1121/0x2250
[  163.429611][ T6623]  ? __pfx_vma_modify+0x10/0x10
[  163.429662][ T6623]  vma_modify_policy+0x238/0x300
[  163.429701][ T6623]  ? __pfx_vma_modify_policy+0x10/0x10
[  163.429757][ T6623]  ? mas_walk+0x6ef/0x9b0
[  163.429795][ T6623]  mbind_range+0x175/0x550
[  163.429830][ T6623]  do_mbind+0x7de/0xfd0
[  163.429869][ T6623]  ? __pfx_do_mbind+0x10/0x10
[  163.429900][ T6623]  ? __lock_acquire+0x4a5/0x2630
[  163.429946][ T6623]  ? __pfx_get_nodes+0x10/0x10
[  163.429966][ T6623]  ? find_held_lock+0x2b/0x80
[  163.429997][ T6623]  kernel_mbind+0x1b7/0x200
[  163.430031][ T6623]  ? __pfx_kernel_mbind+0x10/0x10
[  163.430071][ T6623]  do_syscall_64+0x106/0xf80
[  163.430107][ T6623]  ? clear_bhb_loop+0x40/0x90
[  163.430137][ T6623]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.430161][ T6623] RIP: 0033:0x7f1f1539c799
[  163.430182][ T6623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.430205][ T6623] RSP: 002b:00007f1f1630d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  163.430228][ T6623] RAX: ffffffffffffffda RBX: 00007f1f15615fa0 RCX: 00007f1f1539c799
[  163.430243][ T6623] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000
[  163.430258][ T6623] RBP: 00007f1f15432c99 R08: 0000002000000006 R09: 0000000000000002
[  163.430306][ T6623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.430319][ T6623] R13: 00007f1f15616038 R14: 00007f1f15615fa0 R15: 00007ffd017358b8
[  163.430350][ T6623]  </TASK>
[  165.150256][ T6576] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  165.160282][ T6576] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  165.168685][ T6576] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  165.176554][ T6576] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  165.186389][ T6576] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  165.376754][ T6629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.112'.
[  166.437525][ T6642] can: request_module (can-proto-0) failed.
[  166.462774][ T6634] chnl_net:caif_netlink_parms(): no params data found
[  167.155217][ T6634] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.207436][ T6634] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.225278][ T6576] Bluetooth: hci4: command tx timeout
[  167.237915][ T6634] bridge_slave_0: entered allmulticast mode
[  167.277151][ T6634] bridge_slave_0: entered promiscuous mode
[  167.339964][ T6634] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.347114][ T6634] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.397652][ T6634] bridge_slave_1: entered allmulticast mode
[  167.429990][ T6634] bridge_slave_1: entered promiscuous mode
[  167.596094][ T6634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  167.684100][ T6634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  167.739787][ T6576] Bluetooth: hci3: Malformed LE Event: 0x0b
[  167.872618][ T6634] team0: Port device team_slave_0 added
[  167.908872][ T6634] team0: Port device team_slave_1 added
[  168.061265][ T6634] batman_adv: batadv0: Adding interface: batadv_slave_0
[  168.090308][ T6634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  168.220536][ T6634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  168.298663][ T6634] batman_adv: batadv0: Adding interface: batadv_slave_1
[  168.305680][ T6634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  168.463327][   T30] audit: type=1800 audit(1774530225.920:2): pid=6671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.118" name="lu_gp_id" dev="configfs" ino=12421 res=0 errno=0
[  168.491315][ T6671] kstrtoul() returned -22 for lu_gp_id
[  168.563487][ T6634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  168.637906][ T6667] zswap: compressor  not available
[  168.847856][ T6634] hsr_slave_0: entered promiscuous mode
[  168.875312][ T6634] hsr_slave_1: entered promiscuous mode
[  168.905056][ T6634] debugfs: 'hsr0' already exists in 'hsr'
[  168.941221][ T6634] Cannot create hsr debugfs directory
[  169.298617][ T6576] Bluetooth: hci4: command tx timeout
[  170.358143][ T6634] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  170.522699][ T6634] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  170.583989][ T6634] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  170.629510][ T6634] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  171.044228][ T6634] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.179993][ T6634] 8021q: adding VLAN 0 to HW filter on device team0
[  171.228514][ T6491] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.235719][ T6491] bridge0: port 1(bridge_slave_0) entered forwarding state
[  171.336892][ T6491] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.344203][ T6491] bridge0: port 2(bridge_slave_1) entered forwarding state
[  171.380418][ T6576] Bluetooth: hci4: command tx timeout
[  171.872155][   T30] audit: type=1800 audit(1774530229.340:3): pid=6708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.125" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0
[  172.372131][ T6719] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9
[  172.477724][ T6634] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.460238][ T6576] Bluetooth: hci4: command tx timeout
[  174.289918][ T6739] FAULT_INJECTION: forcing a failure.
[  174.289918][ T6739] name failslab, interval 1, probability 0, space 0, times 0
[  174.439042][ T6634] veth0_vlan: entered promiscuous mode
[  174.504279][ T6739] CPU: 0 UID: 0 PID: 6739 Comm: syz.1.128 Not tainted syzkaller #0 PREEMPT(full) 
[  174.504311][ T6739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  174.504326][ T6739] Call Trace:
[  174.504333][ T6739]  <TASK>
[  174.504342][ T6739]  dump_stack_lvl+0x100/0x190
[  174.504385][ T6739]  should_fail_ex.cold+0x5/0xa
[  174.504415][ T6739]  should_failslab+0xc2/0x120
[  174.504441][ T6739]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  174.504481][ T6739]  ? security_inode_alloc+0x3b/0x2c0
[  174.504507][ T6739]  ? lockdep_init_map_type+0x5c/0x250
[  174.504557][ T6739]  security_inode_alloc+0x3b/0x2c0
[  174.504584][ T6739]  inode_init_always_gfp+0xced/0x1040
[  174.504614][ T6739]  alloc_inode+0x8e/0x250
[  174.504649][ T6739]  new_inode+0x22/0x1c0
[  174.504685][ T6739]  hugetlbfs_get_inode+0x313/0x750
[  174.504716][ T6739]  hugetlb_file_setup+0x3cc/0x5b0
[  174.504748][ T6739]  newseg+0xabb/0xed0
[  174.504784][ T6739]  ? __pfx_newseg+0x10/0x10
[  174.504814][ T6739]  ? down_write+0x146/0x1f0
[  174.504838][ T6739]  ? ksys_write+0x190/0x250
[  174.504861][ T6739]  ? ksys_write+0x190/0x250
[  174.504888][ T6739]  ipcget+0xee/0xf50
[  174.504919][ T6739]  ? do_futex+0x192/0x350
[  174.504961][ T6739]  ? __pfx_do_futex+0x10/0x10
[  174.504999][ T6739]  ? __pfx_ipcget+0x10/0x10
[  174.505033][ T6739]  ? __x64_sys_futex+0x34f/0x4d0
[  174.505064][ T6739]  ? __x64_sys_futex+0x358/0x4d0
[  174.505105][ T6739]  __x64_sys_shmget+0x13b/0x1b0
[  174.505139][ T6739]  ? __pfx___x64_sys_shmget+0x10/0x10
[  174.505180][ T6739]  do_syscall_64+0x106/0xf80
[  174.505217][ T6739]  ? clear_bhb_loop+0x40/0x90
[  174.505246][ T6739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.505270][ T6739] RIP: 0033:0x7f7fb939c799
[  174.505290][ T6739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  174.505313][ T6739] RSP: 002b:00007f7fba23c028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d
[  174.505335][ T6739] RAX: ffffffffffffffda RBX: 00007f7fb9616180 RCX: 00007f7fb939c799
[  174.505351][ T6739] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000
[  174.505365][ T6739] RBP: 00007f7fb9432c99 R08: 0000000000000000 R09: 0000000000000000
[  174.505380][ T6739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  174.505393][ T6739] R13: 00007f7fb9616218 R14: 00007f7fb9616180 R15: 00007ffe91aac828
[  174.505424][ T6739]  </TASK>
[  175.740554][ T6634] veth1_vlan: entered promiscuous mode
[  176.302800][ T6634] veth0_macvtap: entered promiscuous mode
[  176.377200][ T6634] veth1_macvtap: entered promiscuous mode
[  176.446729][ T6634] batman_adv: batadv0: Interface activated: batadv_slave_0
[  176.534179][ T6634] batman_adv: batadv0: Interface activated: batadv_slave_1
[  177.009611][ T6495] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.039805][ T6495] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.195570][ T6495] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.235721][ T6495] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.584074][ T6460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.618457][ T6460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.774080][ T6460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.812271][ T6460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.639356][ T6576] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5
[  181.140868][ T6576] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260
[  181.148807][ T6576] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260
[  181.164347][ T6576] Bluetooth: hci2: Unknown advertising packet type: 0x7f
[  181.164395][ T6576] Bluetooth: hci2: adv larger than maximum supported
[  181.172869][ T6576] Bluetooth: hci2: Unknown advertising packet type: 0x34
[  181.180463][ T6576] Bluetooth: hci2: Unknown advertising packet type: 0x54
[  181.192547][ T6576] Bluetooth: hci2: Unknown advertising packet type: 0x11
[  181.199734][ T6576] Bluetooth: hci2: Malformed LE Event: 0x0d
[  182.994471][ T6803] serio: Serial port pty6
[  184.893801][ T6576] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18
[  186.979103][ T6576] Bluetooth: hci3: command 0x0c1a tx timeout
[  189.042964][ T6576] Bluetooth: hci4: unexpected event 0x1c length: 725 > 5
[  189.060173][ T6576] Bluetooth: hci3: command 0x0c1a tx timeout
[  189.515538][ T6439] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260
[  189.515571][ T6439] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260
[  189.530628][ T6439] Bluetooth: hci4: Unknown advertising packet type: 0x7f
[  189.530671][ T6439] Bluetooth: hci4: Unknown advertising packet type: 0x77
[  189.542142][ T6439] Bluetooth: hci4: adv larger than maximum supported
[  189.550318][ T6439] Bluetooth: hci4: Unknown advertising packet type: 0x39
[  189.557294][ T6439] Bluetooth: hci4: Malformed LE Event: 0x0d
[  191.757188][ T6926] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input10
[  193.302500][ T6947] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input11
[  193.463461][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  193.469970][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  194.362851][ T6961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.172'.
[  194.493609][ T6961] bridge0: port 3(team0) entered disabled state
[  194.500371][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.508814][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.628662][ T6961] bridge0: entered promiscuous mode
[  198.104877][ T7009] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input12
[  200.049651][ T7026] serio: Serial port pty6
[  203.185236][ T7073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.198'.
[  214.207374][ T7195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.224'.
[  216.668223][ T7219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.231'.
[  216.837880][ T7218] random: crng reseeded on system resumption
[  220.463200][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.236'.
[  221.994622][ T7287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.243'.
[  222.991611][ T6576] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  223.001432][ T6576] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  223.009967][ T6576] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  223.020796][ T6576] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  223.030866][ T6576] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  223.706891][ T7301] chnl_net:caif_netlink_parms(): no params data found
[  224.405126][ T7301] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.457908][ T7301] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.507697][ T7301] bridge_slave_0: entered allmulticast mode
[  224.568388][ T7301] bridge_slave_0: entered promiscuous mode
[  224.661229][ T7301] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.710037][ T7301] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.757932][ T7301] bridge_slave_1: entered allmulticast mode
[  224.799512][ T7301] bridge_slave_1: entered promiscuous mode
[  225.058383][ T6576] Bluetooth: hci5: command tx timeout
[  225.079437][ T7301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  225.133764][ T7301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  225.322934][ T7301] team0: Port device team_slave_0 added
[  225.349775][ T7334] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input13
[  225.381913][ T7301] team0: Port device team_slave_1 added
[  225.545949][ T7301] batman_adv: batadv0: Adding interface: batadv_slave_0
[  225.600310][ T7301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  225.720294][ T7301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  225.967921][ T7301] batman_adv: batadv0: Adding interface: batadv_slave_1
[  225.974978][ T7301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  226.130375][ T7301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  226.317275][ T7344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.253'.
[  226.372304][ T7301] hsr_slave_0: entered promiscuous mode
[  226.396241][ T7301] hsr_slave_1: entered promiscuous mode
[  226.417011][ T7301] debugfs: 'hsr0' already exists in 'hsr'
[  226.441963][ T7301] Cannot create hsr debugfs directory
[  227.140423][ T6576] Bluetooth: hci5: command tx timeout
[  227.664134][ T7301] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  227.780415][ T7301] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  227.871896][ T7301] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  228.015100][ T7301] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  228.602573][ T7301] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.734479][ T7301] 8021q: adding VLAN 0 to HW filter on device team0
[  228.776656][ T6426] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.783884][ T6426] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.852121][ T6426] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.859341][ T6426] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.218182][ T6576] Bluetooth: hci5: command tx timeout
[  230.377652][ T7301] 8021q: adding VLAN 0 to HW filter on device batadv0
[  231.298475][ T6576] Bluetooth: hci5: command tx timeout
[  231.328546][ T7400] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input14
[  231.634423][ T7301] veth0_vlan: entered promiscuous mode
[  231.692010][ T7301] veth1_vlan: entered promiscuous mode
[  231.721251][ T7406] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input15
[  231.856598][ T7301] veth0_macvtap: entered promiscuous mode
[  232.202579][ T7301] veth1_macvtap: entered promiscuous mode
[  232.311583][ T7301] batman_adv: batadv0: Interface activated: batadv_slave_0
[  232.443148][ T7301] batman_adv: batadv0: Interface activated: batadv_slave_1
[  232.518247][ T6422] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.527041][ T6422] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.890380][ T6422] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.930148][ T6422] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  233.191492][ T7414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.261'.
[  234.288126][ T6491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.318952][ T6491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.849292][ T6460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.870610][ T6460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.896700][ T7444] program syz.5.265 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  239.073386][ T6424] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  241.400099][ T7477] netlink: 12 bytes leftover after parsing attributes in process `syz.5.271'.
[  242.355388][ T7497] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  243.873282][ T7506] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input16
[  245.037329][ T7526] netlink: 28 bytes leftover after parsing attributes in process `syz.1.281'.
[  247.114882][ T7554] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input17
[  248.674637][ T7565] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  249.621137][ T7562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.286'.
[  250.358461][ T7583] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input19
[  251.355151][ T7575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.289'.
[  251.825287][ T7595] netlink: 28 bytes leftover after parsing attributes in process `syz.2.292'.
[  251.988209][ T7595] bridge0: port 3(gretap0) entered disabled state
[  251.994890][ T7595] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.002509][ T7595] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.088445][ T7595] bridge0: entered promiscuous mode
[  254.372505][ T7613] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input20
[  255.980306][ T7630] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1)
[  256.188791][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  256.195234][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  256.218452][ T6576] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  258.259352][ T6576] Bluetooth: hci2: command 0x0c1a tx timeout
[  259.385127][ T6439] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  260.344244][ T6439] Bluetooth: hci2: command 0x0c1a tx timeout
[  260.599846][ T7666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.304'.
[  260.633807][ T7676] netlink: 28 bytes leftover after parsing attributes in process `syz.4.306'.
[  261.076090][ T7676] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.083814][ T7676] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.219385][ T7676] bridge0: entered promiscuous mode
[  262.540032][ T7694] netlink: 28 bytes leftover after parsing attributes in process `syz.4.309'.
[  267.384213][ T7748] block2mtd: illegal erase size
[  267.538521][ T7750] netlink: 'syz.2.319': attribute type 1 has an invalid length.
[  271.419729][ T7785] netlink: 12 bytes leftover after parsing attributes in process `syz.5.323'.
[  272.458232][ T7794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.324'.
[  273.874258][ T7798] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  273.932226][ T7798] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  274.008261][ T7798] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  274.081340][ T7798] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  274.143188][ T7798] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  274.656878][ T7798] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  274.932837][ T7798] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  274.960392][ T7798] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  275.420438][ T7798] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  275.938211][ T6576] Bluetooth: hci1: command 0x0c1a tx timeout
[  275.944279][ T6576] Bluetooth: hci2: command 0x0c1a tx timeout
[  276.018306][ T6576] Bluetooth: hci3: command 0x0c1a tx timeout
[  276.098098][ T6576] Bluetooth: hci4: command 0x0c1a tx timeout
[  276.980704][ T6576] Bluetooth: hci5: command 0x0c1a tx timeout
[  278.178149][ T6576] Bluetooth: hci4: command 0x0c1a tx timeout
[  278.630459][ T7855] netlink: 28 bytes leftover after parsing attributes in process `syz.4.329'.
[  279.063490][ T6576] Bluetooth: hci5: command 0x0c1a tx timeout
[  280.258068][ T6576] Bluetooth: hci4: command 0x0c1a tx timeout
[  281.138681][ T6576] Bluetooth: hci5: command 0x0c1a tx timeout
[  287.429460][ T7948] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE�r��҄y�*�"�l-���y–��
[  289.755728][ T7983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.355'.
[  291.321526][ T6576] block nbd0: Receive control failed (result -32)
[  293.063488][ T8031] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input21
[  293.829056][ T8037] netlink: 28 bytes leftover after parsing attributes in process `syz.1.366'.
[  294.379502][ T8044] netlink: 28 bytes leftover after parsing attributes in process `syz.2.368'.
[  295.291913][ T8049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.369'.
[  295.858772][   T31] INFO: task syz.3.91:6502 blocked for more than 143 seconds.
[  295.866279][   T31]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  295.959009][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  296.037349][   T31] task:syz.3.91        state:D stack:28304 pid:6502  tgid:6500  ppid:5823   task_flags:0x400140 flags:0x00080002
[  296.120320][   T31] Call Trace:
[  296.123680][   T31]  <TASK>
[  296.126638][   T31]  __schedule+0xfee/0x6120
[  296.198124][   T31]  ? __lock_acquire+0x4a5/0x2630
[  296.203148][   T31]  ? __pfx___schedule+0x10/0x10
[  296.269813][   T31]  ? find_held_lock+0x2b/0x80
[  296.274748][   T31]  ? schedule+0x2bf/0x390
[  296.322698][   T31]  schedule+0xdd/0x390
[  296.326849][   T31]  schedule_timeout+0x1b2/0x280
[  296.408176][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  296.413640][   T31]  ? mark_held_locks+0x40/0x70
[  296.475593][   T31]  __wait_for_common+0x2e7/0x4c0
[  296.538006][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  296.543492][   T31]  ? __pfx___wait_for_common+0x10/0x10
[  296.659521][   T31]  ? touch_wq_lockdep_map+0x9c/0x1c0
[  296.664992][   T31]  ? find_held_lock+0x2b/0x80
[  296.748087][   T31]  ? __flush_work+0x928/0xcb0
[  296.778032][   T31]  ? __flush_work+0x928/0xcb0
[  296.782793][   T31]  ? __flush_work+0x4ca/0xcb0
[  296.787514][   T31]  __flush_work+0x7c7/0xcb0
[  296.840232][   T31]  ? __pfx___flush_work+0x10/0x10
[  296.845341][   T31]  ? __pfx_wq_barrier_func+0x10/0x10
[  296.883099][   T31]  ? __pfx___might_resched+0x10/0x10
[  296.916951][   T31]  ? drm_atomic_helper_wait_for_flip_done+0x190/0x1f0
[  296.950365][   T31]  vkms_atomic_commit_tail+0x172/0x240
[  296.955945][   T31]  ? __pfx_vkms_atomic_commit_tail+0x10/0x10
[  296.996958][   T31]  commit_tail+0x293/0x430
[  297.004960][   T31]  drm_atomic_helper_commit+0x303/0x380
[  297.028065][   T31]  ? __pfx_drm_atomic_helper_commit+0x10/0x10
[  297.034212][   T31]  drm_atomic_commit+0x230/0x300
[  297.068083][   T31]  ? __pfx_drm_atomic_commit+0x10/0x10
[  297.073665][   T31]  ? __pfx___drm_printfn_info+0x10/0x10
[  297.105448][   T31]  ? drm_client_rotation+0x451/0x6a0
[  297.128267][   T31]  drm_client_modeset_commit_atomic+0x6a6/0x7e0
[  297.134647][   T31]  ? __mutex_lock+0x26a/0x1b90
[  297.172409][   T31]  ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[  297.198033][   T31]  ? drm_master_internal_acquire+0x21/0x80
[  297.203969][   T31]  drm_client_modeset_commit_locked+0x14d/0x580
[  297.238248][   T31]  drm_client_modeset_commit+0x4f/0x80
[  297.243796][   T31]  __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160
[  297.282270][   T31]  drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0
[  297.310484][   T31]  drm_fbdev_client_restore+0x1b/0x30
[  297.315950][   T31]  ? __pfx_drm_fbdev_client_restore+0x10/0x10
[  297.348209][   T31]  drm_client_dev_restore+0x205/0x2a0
[  297.353655][   T31]  drm_release+0x2c6/0x360
[  297.378890][   T31]  ? __pfx_drm_release+0x10/0x10
[  297.383994][   T31]  __fput+0x3ff/0xb40
[  297.419510][   T31]  task_work_run+0x150/0x240
[  297.424197][   T31]  ? __pfx_task_work_run+0x10/0x10
[  297.448291][   T31]  exit_to_user_mode_loop+0x100/0x4a0
[  297.453763][   T31]  do_syscall_64+0x668/0xf80
[  297.488021][   T31]  ? clear_bhb_loop+0x40/0x90
[  297.492777][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.518034][   T31] RIP: 0033:0x7ff8e699c799
[  297.522523][   T31] RSP: 002b:00007ff8e7820028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  297.568226][   T31] RAX: 0000000000000000 RBX: 00007ff8e6c16090 RCX: 00007ff8e699c799
[  297.576259][   T31] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002
[  297.612191][   T31] RBP: 00007ff8e6a32c99 R08: 0000000000000000 R09: 0000000000000000
[  297.648301][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  297.656329][   T31] R13: 00007ff8e6c16128 R14: 00007ff8e6c16090 R15: 00007ffd1f8fcf08
[  297.708081][   T31]  </TASK>
[  297.712624][   T31] 
[  297.712624][   T31] Showing all locks held in the system:
[  297.758546][   T31] 3 locks held by kworker/0:0/9:
[  297.763663][   T31]  #0: ffff88813fe63148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0
[  297.947207][   T31]  #1: ffffc900000e7d08 ((work_completion)(&helper->damage_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0
[  298.019115][   T31]  #2: ffff888026f70a80 (&helper->lock){+.+.}-{4:4}, at: drm_fb_helper_damage_work+0x159/0x640
[  298.088007][   T31] 1 lock held by khungtaskd/31:
[  298.093028][   T31]  #0: ffffffff8e7e77a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  298.188072][   T31] 2 locks held by getty/5582:
[  298.192803][   T31]  #0: ffff888032f830a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  298.284666][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[  298.348137][   T31] 2 locks held by kworker/0:5/5899:
[  298.353419][   T31]  #0: ffff88813fe63148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0
[  298.453256][   T31]  #1: ffffc900048d7d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0
[  298.492076][   T31] 4 locks held by kworker/u10:5/6491:
[  298.497504][   T31]  #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0
[  298.608053][   T31]  #1: ffffc90007b87d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0
[  298.665868][   T31]  #2: ffffffff905fcc90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920
[  298.713102][   T31]  #3: ffffffff8e7f32f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[  298.749258][   T31] 6 locks held by syz.3.91/6502:
[  298.754252][   T31]  #0: ffff888027078278 (&dev->clientlist_mutex){+.+.}-{4:4}, at: drm_client_dev_restore+0xe9/0x2a0
[  298.808847][   T31]  #1: ffff888026f70a80 (&helper->lock){+.+.}-{4:4}, at: __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x21/0x160
[  298.846629][   T31]  #2: ffff888027078130 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_internal_acquire+0x21/0x80
[  298.878493][   T31]  #3: ffff888026f70898 (&client->modeset_mutex){+.+.}-{4:4}, at: drm_client_modeset_commit_locked+0x4c/0x580
[  298.928051][   T31]  #4: ffffc90005fcfb30 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_client_modeset_commit_atomic+0xc4/0x7e0
[  298.968044][   T31]  #5: ffffc90005fcfb58 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_client_modeset_commit_atomic+0xc4/0x7e0
[  299.000169][   T31] 1 lock held by syz.0.213/7125:
[  299.005165][   T31]  #0: ffff888027078130 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_open+0x78/0x220
[  299.058520][   T31] 1 lock held by syz.1.338/7908:
[  299.063626][   T31] 1 lock held by syz.4.364/8027:
[  299.088018][   T31]  #0: ffffffff906154e8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220
[  299.097287][   T31] 3 locks held by syz.1.366/8036:
[  299.129635][   T31]  #0: ffffffff905fcc90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[  299.168096][   T31]  #1: ffffffff906154e8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x90/0xc60
[  299.206620][   T31]  #2: ffffffff8e7f32f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[  299.228243][   T31] 2 locks held by syz.5.370/8052:
[  299.233320][   T31]  #0: ffffffff905fcc90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[  299.268065][   T31]  #1: ffffffff906154e8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x23/0xb0
[  299.291622][   T31] 
[  299.293993][   T31] =============================================
[  299.293993][   T31] 
[  299.347276][   T31] NMI backtrace for cpu 0
[  299.347296][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  299.347322][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  299.347336][   T31] Call Trace:
[  299.347345][   T31]  <TASK>
[  299.347354][   T31]  dump_stack_lvl+0x100/0x190
[  299.347394][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[  299.347433][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  299.347469][   T31]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[  299.347502][   T31]  sys_info+0x141/0x190
[  299.347525][   T31]  watchdog+0xd25/0x1050
[  299.347557][   T31]  ? __pfx_watchdog+0x10/0x10
[  299.347581][   T31]  ? __kthread_parkme+0x18c/0x230
[  299.347611][   T31]  ? kthread+0x13a/0x450
[  299.347641][   T31]  ? __pfx_watchdog+0x10/0x10
[  299.347662][   T31]  kthread+0x370/0x450
[  299.347692][   T31]  ? __pfx_kthread+0x10/0x10
[  299.347725][   T31]  ret_from_fork+0x754/0xd80
[  299.347769][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  299.347806][   T31]  ? __switch_to+0x7b4/0x1120
[  299.347833][   T31]  ? __pfx_kthread+0x10/0x10
[  299.347866][   T31]  ret_from_fork_asm+0x1a/0x30
[  299.347905][   T31]  </TASK>
[  299.673924][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  299.681331][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  299.690571][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  299.700741][   T31] Call Trace:
[  299.704055][   T31]  <TASK>
[  299.707433][   T31]  dump_stack_lvl+0x100/0x190
[  299.712176][   T31]  vpanic+0x552/0x970
[  299.716272][   T31]  ? __pfx_vpanic+0x10/0x10
[  299.720810][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[  299.727039][   T31]  panic+0xd1/0xe0
[  299.730792][   T31]  ? __pfx_panic+0x10/0x10
[  299.735233][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[  299.741431][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[  299.747626][   T31]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[  299.753810][   T31]  ? watchdog.cold+0x198/0x1ca
[  299.758598][   T31]  ? watchdog+0xd35/0x1050
[  299.763139][   T31]  watchdog.cold+0x1a9/0x1ca
[  299.767862][   T31]  ? __pfx_watchdog+0x10/0x10
[  299.772590][   T31]  ? __kthread_parkme+0x18c/0x230
[  299.777641][   T31]  ? kthread+0x13a/0x450
[  299.781928][   T31]  ? __pfx_watchdog+0x10/0x10
[  299.786781][   T31]  kthread+0x370/0x450
[  299.790885][   T31]  ? __pfx_kthread+0x10/0x10
[  299.795514][   T31]  ret_from_fork+0x754/0xd80
[  299.800134][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  299.805314][   T31]  ? __switch_to+0x7b4/0x1120
[  299.810036][   T31]  ? __pfx_kthread+0x10/0x10
[  299.814679][   T31]  ret_from_fork_asm+0x1a/0x30
[  299.819535][   T31]  </TASK>
[  299.822664][   T31] Kernel Offset: disabled
[  299.827008][   T31] Rebooting in 86400 seconds..