last executing test programs:

1m43.044463044s ago: executing program 1 (id=337):
r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$auto_FS_IOC_RESVSP(r0, 0x40305828, 0x0)

1m42.546629987s ago: executing program 1 (id=339):
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)

1m42.222044006s ago: executing program 1 (id=340):
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002b40)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x14, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x4}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000800)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x2, 0x2020009, 0x5, 0x18, 0xfffffffffffffffa, 0x7ffc)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0)
mmap$auto(0x0, 0x800000002020009, 0x4ba, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0)
ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7})
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/010/001\x00', 0x20000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x2d0043, 0x0)
ioctl$auto(r2, 0x5607, 0x7)
inotify_add_watch$auto(r2, 0x0, 0x9)

1m41.227715354s ago: executing program 1 (id=345):
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0)
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0)
unshare$auto(0x40000080)
openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000004c0)={[0x203, 0x3, 0xc, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x7fffffff, 0x81, 0x4, 0x9, 0x2]}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x20cc00, 0x0)
read$auto_trace_time_stamp_mode_fops_trace(r0, &(0x7f00000003c0)=""/239, 0xef)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000)
r1 = socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
madvise$auto(0x0, 0x3, 0x66)
r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
socket(0x2, 0x2, 0x1)
r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_FD={0x8, 0x17, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x0, 0x0)
mq_getsetattr$auto(r1, 0x0, 0x0)

1m40.167443261s ago: executing program 1 (id=350):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
r0 = socket(0xa, 0x2, 0x0)
r1 = socket(0xa, 0x3, 0xff)
connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
mmap$auto(0x200, 0x400008, 0x200, 0x9b72, r0, 0x6)
r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0)
write$auto_proc_mem_operations_base(r2, &(0x7f0000001680)="a7", 0x80000)
mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000)
syz_clone3(0x0, 0x0)
madvise$auto(0x1ffff000, 0x7, 0x100000000)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2)
ioperm$auto(0x7, 0x6, 0x2)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0)

1m39.017000795s ago: executing program 1 (id=354):
mmap$auto(0xfffffffffffffff9, 0x400008, 0xdf, 0x4a56, 0x2, 0x8000)
r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000500), 0x400000, 0x0)
ioctl$auto_PPPIOCSCOMPRESS(r1, 0x4010744d, &(0x7f0000000580)={&(0x7f0000000540)='\x1d\x04/\x00', 0x1ff, 0x6})
pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:<\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8\x06\xa5\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*<P\xb0\x8a\"\x176\xe1p*0\xac\xb9\xd5\xab\xcc$\x9ai\xca\v(\xcd?\x8d\xd2\x1d\xe1\x99N\x028\xe2\x12\t6x\xca{\n\xe86;\x81\xc4\x00\x8b\xed\xfa\xc0\x18\xe7\xd0\x97\xd8\x00\xd5\x85\x03\xf1\f\xcc\xf7\xb16L\xd4\xb0AV.\xe3\x9e\x8csh\x8a\x84\xe30\xde\x8d\xe3\xa4\xf1e\xcf\xb2Rx\x8f\x98G\xc3\xc8UP\xb4-\aW\xb5h\x8b\x98T\xe0n\x8d~\xf2\x8b\x1c>\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde<o\xb6[o\b\x00', 0x4e, 0x3)
ioctl$auto_FS_IOC_RESVSP(r0, 0x40305828, 0x0)
socket(0xa, 0x1, 0x100)
ioperm$auto(0x7, 0x5ad2, 0x8)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
socket(0x1e, 0x1, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = socket(0x21, 0x3, 0x9)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
r4 = socket(0xa, 0x2, 0x0)
setsockopt$auto(r4, 0x29, 0x12, 0x0, 0x1)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000001c0), r3)
set_tid_address$auto(0x0)
unshare$auto(0x40000080)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0)

1m23.621291738s ago: executing program 32 (id=354):
mmap$auto(0xfffffffffffffff9, 0x400008, 0xdf, 0x4a56, 0x2, 0x8000)
r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000500), 0x400000, 0x0)
ioctl$auto_PPPIOCSCOMPRESS(r1, 0x4010744d, &(0x7f0000000580)={&(0x7f0000000540)='\x1d\x04/\x00', 0x1ff, 0x6})
pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:<\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8\x06\xa5\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*<P\xb0\x8a\"\x176\xe1p*0\xac\xb9\xd5\xab\xcc$\x9ai\xca\v(\xcd?\x8d\xd2\x1d\xe1\x99N\x028\xe2\x12\t6x\xca{\n\xe86;\x81\xc4\x00\x8b\xed\xfa\xc0\x18\xe7\xd0\x97\xd8\x00\xd5\x85\x03\xf1\f\xcc\xf7\xb16L\xd4\xb0AV.\xe3\x9e\x8csh\x8a\x84\xe30\xde\x8d\xe3\xa4\xf1e\xcf\xb2Rx\x8f\x98G\xc3\xc8UP\xb4-\aW\xb5h\x8b\x98T\xe0n\x8d~\xf2\x8b\x1c>\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde<o\xb6[o\b\x00', 0x4e, 0x3)
ioctl$auto_FS_IOC_RESVSP(r0, 0x40305828, 0x0)
socket(0xa, 0x1, 0x100)
ioperm$auto(0x7, 0x5ad2, 0x8)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
socket(0x1e, 0x1, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = socket(0x21, 0x3, 0x9)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
r4 = socket(0xa, 0x2, 0x0)
setsockopt$auto(r4, 0x29, 0x12, 0x0, 0x1)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000001c0), r3)
set_tid_address$auto(0x0)
unshare$auto(0x40000080)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0)

1m11.974043571s ago: executing program 0 (id=444):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
r0 = socket(0xa, 0x2, 0x0)
r1 = socket(0xa, 0x3, 0xff)
connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
mmap$auto(0x200, 0x400008, 0x200, 0x9b72, r0, 0x6)
r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0)
write$auto_proc_mem_operations_base(r2, &(0x7f0000001680)="a7", 0x80000)
mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000)
madvise$auto(0x1ffff000, 0x7, 0x100000000)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2)
shmget$auto(0x8, 0x10563, 0x568d1af2)
ioperm$auto(0x7, 0x6, 0x2)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0)

1m10.611699909s ago: executing program 0 (id=449):
mmap$auto(0xfffffffffffffff9, 0x400008, 0xdf, 0x4a56, 0x2, 0x8000)
r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000500), 0x400000, 0x0)
ioctl$auto_PPPIOCSCOMPRESS(r1, 0x4010744d, &(0x7f0000000580)={&(0x7f0000000540)='\x1d\x04/\x00', 0x1ff, 0x6})
pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:<\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8\x06\xa5\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*<P\xb0\x8a\"\x176\xe1p*0\xac\xb9\xd5\xab\xcc$\x9ai\xca\v(\xcd?\x8d\xd2\x1d\xe1\x99N\x028\xe2\x12\t6x\xca{\n\xe86;\x81\xc4\x00\x8b\xed\xfa\xc0\x18\xe7\xd0\x97\xd8\x00\xd5\x85\x03\xf1\f\xcc\xf7\xb16L\xd4\xb0AV.\xe3\x9e\x8csh\x8a\x84\xe30\xde\x8d\xe3\xa4\xf1e\xcf\xb2Rx\x8f\x98G\xc3\xc8UP\xb4-\aW\xb5h\x8b\x98T\xe0n\x8d~\xf2\x8b\x1c>\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde<o\xb6[o\b\x00', 0x4e, 0x3)
ioctl$auto_FS_IOC_RESVSP(r0, 0x40305828, 0x0)
socket(0xa, 0x1, 0x100)
ioperm$auto(0x7, 0x5ad2, 0x8)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
socket(0x1e, 0x1, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = socket(0x21, 0x3, 0x9)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
r4 = socket(0xa, 0x2, 0x0)
setsockopt$auto(r4, 0x29, 0x12, 0x0, 0x1)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000001c0), r3)
set_tid_address$auto(0x0)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0)
close_range$auto(0x2, 0x8, 0x0)

1m9.622327075s ago: executing program 0 (id=451):
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0)
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0)
unshare$auto(0x40000080)
openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000004c0)={[0x203, 0x3, 0xc, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x7fffffff, 0x81, 0x4, 0x9, 0x2]}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x20cc00, 0x0)
read$auto_trace_time_stamp_mode_fops_trace(r0, &(0x7f00000003c0)=""/239, 0xef)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000)
r1 = socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
madvise$auto(0x0, 0x3, 0x66)
socket(0x2, 0x2, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r2)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x0, 0x0)
mq_getsetattr$auto(r1, 0x0, 0x0)

1m8.342031102s ago: executing program 0 (id=454):
r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r1)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r2, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_FD={0x8, 0x17, r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1m8.141743466s ago: executing program 0 (id=456):
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
write$auto(0x3, 0x0, 0x7fffffff)
write$auto(0x1, 0x0, 0x80000000)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f00000089c0)='/sys/kernel/debug/netdevsim/netdevsim1/max_vfs\x00', 0x101000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xf, 0x3, 0x2)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x2164, 0x8000000000000000, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
close_range$auto(0x2, 0xa, 0x0)
r1 = socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', <r3=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x4, 0x1ff, r1, @relative_id=0x13, 0xe600}, 0xf)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r4, 0x0, 0x3}, 0xc)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)

1m6.633964617s ago: executing program 0 (id=461):
mmap$auto(0xfffffffffffffff9, 0x400008, 0xdf, 0x4a56, 0x2, 0x8000)
r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000500), 0x400000, 0x0)
ioctl$auto_PPPIOCSCOMPRESS(r1, 0x4010744d, &(0x7f0000000580)={&(0x7f0000000540)='\x1d\x04/\x00', 0x1ff, 0x6})
pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:<\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8\x06\xa5\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*<P\xb0\x8a\"\x176\xe1p*0\xac\xb9\xd5\xab\xcc$\x9ai\xca\v(\xcd?\x8d\xd2\x1d\xe1\x99N\x028\xe2\x12\t6x\xca{\n\xe86;\x81\xc4\x00\x8b\xed\xfa\xc0\x18\xe7\xd0\x97\xd8\x00\xd5\x85\x03\xf1\f\xcc\xf7\xb16L\xd4\xb0AV.\xe3\x9e\x8csh\x8a\x84\xe30\xde\x8d\xe3\xa4\xf1e\xcf\xb2Rx\x8f\x98G\xc3\xc8UP\xb4-\aW\xb5h\x8b\x98T\xe0n\x8d~\xf2\x8b\x1c>\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde<o\xb6[o\b\x00', 0x4e, 0x3)
ioctl$auto_FS_IOC_RESVSP(r0, 0x40305828, 0x0)
socket(0xa, 0x1, 0x100)
ioperm$auto(0x7, 0x5ad2, 0x8)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
socket(0x1e, 0x1, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket(0x21, 0x3, 0x9)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
r3 = socket(0xa, 0x2, 0x0)
setsockopt$auto(r3, 0x29, 0x12, 0x0, 0x1)
set_tid_address$auto(0x0)
unshare$auto(0x40000080)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0)
close_range$auto(0x2, 0x8, 0x0)

51.58158801s ago: executing program 33 (id=461):
mmap$auto(0xfffffffffffffff9, 0x400008, 0xdf, 0x4a56, 0x2, 0x8000)
r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000500), 0x400000, 0x0)
ioctl$auto_PPPIOCSCOMPRESS(r1, 0x4010744d, &(0x7f0000000580)={&(0x7f0000000540)='\x1d\x04/\x00', 0x1ff, 0x6})
pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:<\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8\x06\xa5\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*<P\xb0\x8a\"\x176\xe1p*0\xac\xb9\xd5\xab\xcc$\x9ai\xca\v(\xcd?\x8d\xd2\x1d\xe1\x99N\x028\xe2\x12\t6x\xca{\n\xe86;\x81\xc4\x00\x8b\xed\xfa\xc0\x18\xe7\xd0\x97\xd8\x00\xd5\x85\x03\xf1\f\xcc\xf7\xb16L\xd4\xb0AV.\xe3\x9e\x8csh\x8a\x84\xe30\xde\x8d\xe3\xa4\xf1e\xcf\xb2Rx\x8f\x98G\xc3\xc8UP\xb4-\aW\xb5h\x8b\x98T\xe0n\x8d~\xf2\x8b\x1c>\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde<o\xb6[o\b\x00', 0x4e, 0x3)
ioctl$auto_FS_IOC_RESVSP(r0, 0x40305828, 0x0)
socket(0xa, 0x1, 0x100)
ioperm$auto(0x7, 0x5ad2, 0x8)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
socket(0x1e, 0x1, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket(0x21, 0x3, 0x9)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
r3 = socket(0xa, 0x2, 0x0)
setsockopt$auto(r3, 0x29, 0x12, 0x0, 0x1)
set_tid_address$auto(0x0)
unshare$auto(0x40000080)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0)
close_range$auto(0x2, 0x8, 0x0)

49.919082263s ago: executing program 3 (id=522):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
r0 = socket(0xa, 0x2, 0x0)
r1 = socket(0xa, 0x3, 0xff)
connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
mmap$auto(0x200, 0x400008, 0x200, 0x9b72, r0, 0x6)
r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0)
write$auto_proc_mem_operations_base(r2, &(0x7f0000001680)="a7", 0x80000)
syz_clone3(0x0, 0x0)
madvise$auto(0x1ffff000, 0x7, 0x100000000)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2)
shmget$auto(0x8, 0x10563, 0x568d1af2)
ioperm$auto(0x7, 0x6, 0x2)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0)

48.866111196s ago: executing program 3 (id=525):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
r0 = socket(0xa, 0x2, 0x0)
r1 = socket(0xa, 0x3, 0xff)
connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
mmap$auto(0x200, 0x400008, 0x200, 0x9b72, r0, 0x6)
openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0)
mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000)
syz_clone3(0x0, 0x0)
madvise$auto(0x1ffff000, 0x7, 0x100000000)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2)
shmget$auto(0x8, 0x10563, 0x568d1af2)
ioperm$auto(0x7, 0x6, 0x2)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0)

47.954015423s ago: executing program 3 (id=529):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
r0 = socket(0xa, 0x2, 0x0)
r1 = socket(0xa, 0x3, 0xff)
connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
mmap$auto(0x200, 0x400008, 0x200, 0x9b72, r0, 0x6)
write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0x80000)
mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000)
syz_clone3(0x0, 0x0)
madvise$auto(0x1ffff000, 0x7, 0x100000000)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2)
shmget$auto(0x8, 0x10563, 0x568d1af2)
ioperm$auto(0x7, 0x6, 0x2)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0)

46.798593305s ago: executing program 3 (id=532):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
r0 = socket(0xa, 0x2, 0x0)
r1 = socket(0xa, 0x3, 0xff)
connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
mmap$auto(0x200, 0x400008, 0x200, 0x9b72, r0, 0x6)
write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0x80000)
mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000)
syz_clone3(0x0, 0x0)
madvise$auto(0x1ffff000, 0x7, 0x100000000)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2)
shmget$auto(0x8, 0x10563, 0x568d1af2)
ioperm$auto(0x7, 0x6, 0x2)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0)

44.809699162s ago: executing program 3 (id=536):
mmap$auto(0xfffffffffffffff9, 0x400008, 0xdf, 0x4a56, 0x2, 0x8000)
r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000500), 0x400000, 0x0)
ioctl$auto_PPPIOCSCOMPRESS(r1, 0x4010744d, &(0x7f0000000580)={&(0x7f0000000540)='\x1d\x04/\x00', 0x1ff, 0x6})
pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:<\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8\x06\xa5\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*<P\xb0\x8a\"\x176\xe1p*0\xac\xb9\xd5\xab\xcc$\x9ai\xca\v(\xcd?\x8d\xd2\x1d\xe1\x99N\x028\xe2\x12\t6x\xca{\n\xe86;\x81\xc4\x00\x8b\xed\xfa\xc0\x18\xe7\xd0\x97\xd8\x00\xd5\x85\x03\xf1\f\xcc\xf7\xb16L\xd4\xb0AV.\xe3\x9e\x8csh\x8a\x84\xe30\xde\x8d\xe3\xa4\xf1e\xcf\xb2Rx\x8f\x98G\xc3\xc8UP\xb4-\aW\xb5h\x8b\x98T\xe0n\x8d~\xf2\x8b\x1c>\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde<o\xb6[o\b\x00', 0x4e, 0x3)
ioctl$auto_FS_IOC_RESVSP(r0, 0x40305828, 0x0)
socket(0xa, 0x1, 0x100)
ioperm$auto(0x7, 0x5ad2, 0x8)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
socket(0x1e, 0x1, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = socket(0x21, 0x3, 0x9)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
socket(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000001c0), r3)
set_tid_address$auto(0x0)
unshare$auto(0x40000080)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0)
close_range$auto(0x2, 0x8, 0x0)

43.820955463s ago: executing program 3 (id=538):
mmap$auto(0xfffffffffffffff9, 0x400008, 0xdf, 0x4a56, 0x2, 0x8000)
r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000500), 0x400000, 0x0)
ioctl$auto_PPPIOCSCOMPRESS(r1, 0x4010744d, &(0x7f0000000580)={&(0x7f0000000540)='\x1d\x04/\x00', 0x1ff, 0x6})
pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:<\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8\x06\xa5\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*<P\xb0\x8a\"\x176\xe1p*0\xac\xb9\xd5\xab\xcc$\x9ai\xca\v(\xcd?\x8d\xd2\x1d\xe1\x99N\x028\xe2\x12\t6x\xca{\n\xe86;\x81\xc4\x00\x8b\xed\xfa\xc0\x18\xe7\xd0\x97\xd8\x00\xd5\x85\x03\xf1\f\xcc\xf7\xb16L\xd4\xb0AV.\xe3\x9e\x8csh\x8a\x84\xe30\xde\x8d\xe3\xa4\xf1e\xcf\xb2Rx\x8f\x98G\xc3\xc8UP\xb4-\aW\xb5h\x8b\x98T\xe0n\x8d~\xf2\x8b\x1c>\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde<o\xb6[o\b\x00', 0x4e, 0x3)
ioctl$auto_FS_IOC_RESVSP(r0, 0x40305828, 0x0)
socket(0xa, 0x1, 0x100)
ioperm$auto(0x7, 0x5ad2, 0x8)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
socket(0x1e, 0x1, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket(0x21, 0x3, 0x9)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
r3 = socket(0xa, 0x2, 0x0)
setsockopt$auto(r3, 0x29, 0x12, 0x0, 0x1)
set_tid_address$auto(0x0)
unshare$auto(0x40000080)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0)
close_range$auto(0x2, 0x8, 0x0)

38.705967998s ago: executing program 4 (id=554):
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
pipe2$auto(0x0, 0x80)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000800)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x2, 0x2020009, 0x5, 0x18, 0xfffffffffffffffa, 0x7ffc)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0)
mmap$auto(0x0, 0x800000002020009, 0x4ba, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/010/001\x00', 0x20000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x2d0043, 0x0)
ioctl$auto(r1, 0x5607, 0x7)
inotify_add_watch$auto(r1, 0x0, 0x9)

37.732804823s ago: executing program 4 (id=557):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/freezer.state\x00', 0x10b342, 0x0)
pwrite64$auto(r0, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x06\x00\x06\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x2, 0x3)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
ioctl$auto(0x3, 0x1, 0x90000800000402)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ad00, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
futex_wake$auto(0x0, 0x0, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
write$auto(0x3, 0x0, 0xffd8)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x8101, 0x0, 0xd0, 0x5, 0x6, 0x0, 0x1, 0x3691, 0x0, {0x100000000, 0x10000}, 0x7ffffffffffffffe, 0x40000000000006, 0x9, 0x1008000, 0x0, 0x80000004, 0x4bbd, 0xffffffffffff628e, 0xa747, 0xdeaa, 0x804})
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
epoll_create$auto(0x4)
socket(0x28, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x7, 0x948b, 0x3, 0x15f4da07, 0xfffffffffffffffe, 0x3, 0x62, 0x8000001f, 0x7, 0x8, 0x9, 0x2, 0x8]}, 0x0)

36.532572754s ago: executing program 4 (id=561):
mmap$auto(0xfffffffffffffff9, 0x400008, 0xdf, 0x4a56, 0x2, 0x8000)
r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000500), 0x400000, 0x0)
ioctl$auto_PPPIOCSCOMPRESS(r1, 0x4010744d, &(0x7f0000000580)={&(0x7f0000000540)='\x1d\x04/\x00', 0x1ff, 0x6})
pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:<\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8\x06\xa5\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*<P\xb0\x8a\"\x176\xe1p*0\xac\xb9\xd5\xab\xcc$\x9ai\xca\v(\xcd?\x8d\xd2\x1d\xe1\x99N\x028\xe2\x12\t6x\xca{\n\xe86;\x81\xc4\x00\x8b\xed\xfa\xc0\x18\xe7\xd0\x97\xd8\x00\xd5\x85\x03\xf1\f\xcc\xf7\xb16L\xd4\xb0AV.\xe3\x9e\x8csh\x8a\x84\xe30\xde\x8d\xe3\xa4\xf1e\xcf\xb2Rx\x8f\x98G\xc3\xc8UP\xb4-\aW\xb5h\x8b\x98T\xe0n\x8d~\xf2\x8b\x1c>\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde<o\xb6[o\b\x00', 0x4e, 0x3)
ioctl$auto_FS_IOC_RESVSP(r0, 0x40305828, 0x0)
socket(0xa, 0x1, 0x100)
ioperm$auto(0x7, 0x5ad2, 0x8)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
socket(0x1e, 0x1, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket(0x21, 0x3, 0x9)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
r3 = socket(0xa, 0x2, 0x0)
setsockopt$auto(r3, 0x29, 0x12, 0x0, 0x1)
set_tid_address$auto(0x0)
unshare$auto(0x40000080)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0)
close_range$auto(0x2, 0x8, 0x0)

35.522392619s ago: executing program 4 (id=564):
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
pipe2$auto(0x0, 0x80)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000800)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x2, 0x2020009, 0x5, 0x18, 0xfffffffffffffffa, 0x7ffc)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0)
mmap$auto(0x0, 0x800000002020009, 0x4ba, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0)
ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7})
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/010/001\x00', 0x20000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x2d0043, 0x0)
ioctl$auto(r1, 0x5607, 0x7)
inotify_add_watch$auto(r1, 0x0, 0x9)

34.597637297s ago: executing program 4 (id=566):
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/netfilter/nf_log/3\x00', 0xa2202, 0x0)
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x8)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x840, 0xc)
socket(0x1d, 0x2, 0x6)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda1\x00', 0x0, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_setup$auto(0x7, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa101, 0x0)
socket(0x10, 0x2, 0x0)
io_uring_setup$auto(0x4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x109500, 0x0)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x60c40, 0x0)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
socketpair$auto(0x4004, 0x7, 0x4, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
ioctl$auto_TCFLSH2(r0, 0x5408, 0x0)

34.140867611s ago: executing program 4 (id=568):
mmap$auto(0xfffffffffffffff9, 0x400008, 0xdf, 0x4a56, 0x2, 0x8000)
r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000500), 0x400000, 0x0)
ioctl$auto_PPPIOCSCOMPRESS(r1, 0x4010744d, &(0x7f0000000580)={&(0x7f0000000540)='\x1d\x04/\x00', 0x1ff, 0x6})
pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:<\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8\x06\xa5\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*<P\xb0\x8a\"\x176\xe1p*0\xac\xb9\xd5\xab\xcc$\x9ai\xca\v(\xcd?\x8d\xd2\x1d\xe1\x99N\x028\xe2\x12\t6x\xca{\n\xe86;\x81\xc4\x00\x8b\xed\xfa\xc0\x18\xe7\xd0\x97\xd8\x00\xd5\x85\x03\xf1\f\xcc\xf7\xb16L\xd4\xb0AV.\xe3\x9e\x8csh\x8a\x84\xe30\xde\x8d\xe3\xa4\xf1e\xcf\xb2Rx\x8f\x98G\xc3\xc8UP\xb4-\aW\xb5h\x8b\x98T\xe0n\x8d~\xf2\x8b\x1c>\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde<o\xb6[o\b\x00', 0x4e, 0x3)
ioctl$auto_FS_IOC_RESVSP(r0, 0x40305828, 0x0)
socket(0xa, 0x1, 0x100)
ioperm$auto(0x7, 0x5ad2, 0x8)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
socket(0x1e, 0x1, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = socket(0x21, 0x3, 0x9)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
socket(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000001c0), r3)
set_tid_address$auto(0x0)
unshare$auto(0x40000080)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0)
close_range$auto(0x2, 0x8, 0x0)

28.740641569s ago: executing program 34 (id=538):
mmap$auto(0xfffffffffffffff9, 0x400008, 0xdf, 0x4a56, 0x2, 0x8000)
r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000500), 0x400000, 0x0)
ioctl$auto_PPPIOCSCOMPRESS(r1, 0x4010744d, &(0x7f0000000580)={&(0x7f0000000540)='\x1d\x04/\x00', 0x1ff, 0x6})
pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:<\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8\x06\xa5\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*<P\xb0\x8a\"\x176\xe1p*0\xac\xb9\xd5\xab\xcc$\x9ai\xca\v(\xcd?\x8d\xd2\x1d\xe1\x99N\x028\xe2\x12\t6x\xca{\n\xe86;\x81\xc4\x00\x8b\xed\xfa\xc0\x18\xe7\xd0\x97\xd8\x00\xd5\x85\x03\xf1\f\xcc\xf7\xb16L\xd4\xb0AV.\xe3\x9e\x8csh\x8a\x84\xe30\xde\x8d\xe3\xa4\xf1e\xcf\xb2Rx\x8f\x98G\xc3\xc8UP\xb4-\aW\xb5h\x8b\x98T\xe0n\x8d~\xf2\x8b\x1c>\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde<o\xb6[o\b\x00', 0x4e, 0x3)
ioctl$auto_FS_IOC_RESVSP(r0, 0x40305828, 0x0)
socket(0xa, 0x1, 0x100)
ioperm$auto(0x7, 0x5ad2, 0x8)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
socket(0x1e, 0x1, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket(0x21, 0x3, 0x9)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
r3 = socket(0xa, 0x2, 0x0)
setsockopt$auto(r3, 0x29, 0x12, 0x0, 0x1)
set_tid_address$auto(0x0)
unshare$auto(0x40000080)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0)
close_range$auto(0x2, 0x8, 0x0)

20.549581195s ago: executing program 6 (id=608):
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x2, 0xaa06, 0xdf, 0xeb1, 0xffffffffffffffff, 0x2)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)=';')
openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000040), 0x18000, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x42c883, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
prctl$auto(0x1000000003b, 0x4, 0x0, 0x9, 0x7)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
io_getevents$auto(0x1, 0x1ff, 0x9, &(0x7f0000000080)={0xffffffff, 0xc, 0xffffffffffffffff, 0x9}, &(0x7f0000000180)={0x6})
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
getsockopt$auto(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x98)
setsockopt$auto_SO_SELECT_ERR_QUEUE(0xffffffffffffffff, 0x9, 0x2d, &(0x7f00000001c0)='\xf0&}\\:-:b\x00', 0x3)
r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r1, &(0x7f0000000040)='nbd\x00', 0x4)

20.313837148s ago: executing program 5 (id=609):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
r0 = socket(0xa, 0x2, 0x0)
r1 = socket(0xa, 0x3, 0xff)
connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55)
mmap$auto(0x200, 0x400008, 0x200, 0x9b72, r0, 0x6)
r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0)
write$auto_proc_mem_operations_base(r2, &(0x7f0000001680)="a7", 0x80000)
mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000)
syz_clone3(0x0, 0x0)
madvise$auto(0x1ffff000, 0x7, 0x100000000)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2)
shmget$auto(0x8, 0x10563, 0x568d1af2)
ioperm$auto(0x7, 0x6, 0x2)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0)

19.692852882s ago: executing program 6 (id=610):
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram8/dev\x00', 0x6a8800, 0x0)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x0)
write$auto(r0, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/block/nbd0/hctx0/sched_tags\x00', 0x60100, 0x0)
read$auto(r2, &(0x7f0000000040)='\x00', 0x3)
mmap$auto(0x0, 0x400008, 0x7d3, 0x9b72, 0xffffffffffffffff, 0x5cd)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rxrpc/peers\x00', 0x101000, 0x0)
pread64$auto(r3, 0x0, 0x8, 0xffff)
r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x129e01, 0x0)
ioctl$auto(r4, 0x92106409, 0xffffffffffffffff)
madvise$auto(0x0, 0x200007, 0x8)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x630001, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0)

19.692221308s ago: executing program 2 (id=619):
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x20cc00, 0x0)
read$auto_trace_time_stamp_mode_fops_trace(r0, &(0x7f00000003c0)=""/239, 0xef)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
socket(0x2, 0x2, 0x1)

19.32929867s ago: executing program 5 (id=611):
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffff7fffffffffd, 0xd1, 0x3, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x31, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
ioctl$auto_FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0xffffffffffffffff)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
futex$auto(0x0, 0x8d, 0x0, 0x0, 0x0, 0x100)
mmap$auto(0x100000000, 0x4, 0x4000000000df, 0x40eb2, 0xffffffffffffffff, 0x300000000000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182, 0x0)
r0 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000006640), 0x2, 0x0)
readv$auto(r0, &(0x7f0000000040)={0x0, 0x36a}, 0x6)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x59, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x3, 0x8001, 0x2000000000000149)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/afs/addr_prefs\x00', 0x441, 0x0)
write$auto(r1, 0x0, 0x40)

19.160068445s ago: executing program 2 (id=612):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
r0 = socket(0xa, 0x2, 0x0)
r1 = socket(0xa, 0x3, 0xff)
connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55)
mmap$auto(0x200, 0x400008, 0x200, 0x9b72, r0, 0x6)
r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0)
write$auto_proc_mem_operations_base(r2, &(0x7f0000001680)="a7", 0x80000)
mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000)
syz_clone3(0x0, 0x0)
madvise$auto(0x1ffff000, 0x7, 0x100000000)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2)
shmget$auto(0x8, 0x10563, 0x568d1af2)
ioperm$auto(0x7, 0x6, 0x2)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0)

18.992840147s ago: executing program 35 (id=568):
mmap$auto(0xfffffffffffffff9, 0x400008, 0xdf, 0x4a56, 0x2, 0x8000)
r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000500), 0x400000, 0x0)
ioctl$auto_PPPIOCSCOMPRESS(r1, 0x4010744d, &(0x7f0000000580)={&(0x7f0000000540)='\x1d\x04/\x00', 0x1ff, 0x6})
pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:<\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8\x06\xa5\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*<P\xb0\x8a\"\x176\xe1p*0\xac\xb9\xd5\xab\xcc$\x9ai\xca\v(\xcd?\x8d\xd2\x1d\xe1\x99N\x028\xe2\x12\t6x\xca{\n\xe86;\x81\xc4\x00\x8b\xed\xfa\xc0\x18\xe7\xd0\x97\xd8\x00\xd5\x85\x03\xf1\f\xcc\xf7\xb16L\xd4\xb0AV.\xe3\x9e\x8csh\x8a\x84\xe30\xde\x8d\xe3\xa4\xf1e\xcf\xb2Rx\x8f\x98G\xc3\xc8UP\xb4-\aW\xb5h\x8b\x98T\xe0n\x8d~\xf2\x8b\x1c>\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde<o\xb6[o\b\x00', 0x4e, 0x3)
ioctl$auto_FS_IOC_RESVSP(r0, 0x40305828, 0x0)
socket(0xa, 0x1, 0x100)
ioperm$auto(0x7, 0x5ad2, 0x8)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
socket(0x1e, 0x1, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = socket(0x21, 0x3, 0x9)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
socket(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000001c0), r3)
set_tid_address$auto(0x0)
unshare$auto(0x40000080)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0)
close_range$auto(0x2, 0x8, 0x0)

18.149892606s ago: executing program 2 (id=614):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
r0 = socket(0xa, 0x3, 0xff)
connect$auto(r0, &(0x7f00000018c0)=@generic={0xa}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0)
write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0x80000)
mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000)
syz_clone3(0x0, 0x0)
madvise$auto(0x1ffff000, 0x7, 0x100000000)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2)
shmget$auto(0x8, 0x10563, 0x568d1af2)
ioperm$auto(0x7, 0x6, 0x2)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0)

18.0462355s ago: executing program 5 (id=615):
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
pipe2$auto(0x0, 0x80)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000800)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x2, 0x2020009, 0x5, 0x18, 0xfffffffffffffffa, 0x7ffc)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0)
mmap$auto(0x0, 0x800000002020009, 0x4ba, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0)
ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7})
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/010/001\x00', 0x20000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x2d0043, 0x0)
ioctl$auto(r1, 0x5607, 0x7)
inotify_add_watch$auto(r1, 0x0, 0x9)

18.021802198s ago: executing program 6 (id=617):
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
pipe2$auto(0x0, 0x80)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002b40)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000800)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x2, 0x2020009, 0x5, 0x18, 0xfffffffffffffffa, 0x7ffc)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0)
mmap$auto(0x0, 0x800000002020009, 0x4ba, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0)
ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7})
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/010/001\x00', 0x20000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x2d0043, 0x0)
ioctl$auto(r2, 0x5607, 0x7)
inotify_add_watch$auto(r2, 0x0, 0x9)

17.497671856s ago: executing program 2 (id=618):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
r0 = socket(0xa, 0x3, 0xff)
connect$auto(r0, &(0x7f00000018c0)=@generic={0xa}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0)
write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0x80000)
mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000)
syz_clone3(0x0, 0x0)
madvise$auto(0x1ffff000, 0x7, 0x100000000)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2)
shmget$auto(0x8, 0x10563, 0x568d1af2)
ioperm$auto(0x7, 0x6, 0x2)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0)

17.047794205s ago: executing program 5 (id=620):
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
socket(0x2, 0x3, 0xa)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/ip6_tables_targets\x00', 0x608100, 0x0)
r1 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0)
read$auto_sco_debugfs_fops_(r1, 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
prctl$auto(0x5, 0x9, 0x0, 0x1, 0x9)
pread64$auto(r0, &(0x7f0000000200)='/proc/self/net/ip6_tables_targets\x00', 0x34b, 0x10000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
socket(0x10, 0x3, 0xb)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x801, 0x106)
socket(0x28, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x75, 0x0, 0x8)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0)
syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x5, 0x100000000000009, 0x63, 0x0, 0x0, 0x0, 0x1000, 0x8, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000004, 0xd, 0x6, 0x9})
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)

17.006091268s ago: executing program 6 (id=627):
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
pipe2$auto(0x0, 0x80)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000800)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x2, 0x2020009, 0x5, 0x18, 0xfffffffffffffffa, 0x7ffc)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0)
mmap$auto(0x0, 0x800000002020009, 0x4ba, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0)
ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7})
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/010/001\x00', 0x20000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x2d0043, 0x0)
ioctl$auto(r1, 0x5607, 0x7)
inotify_add_watch$auto(r1, 0x0, 0x9)

15.296988302s ago: executing program 7 (id=613):
mmap$auto(0xfffffffffffffff9, 0x400008, 0xdf, 0x4a56, 0x2, 0x8000)
r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000500), 0x400000, 0x0)
ioctl$auto_PPPIOCSCOMPRESS(r1, 0x4010744d, &(0x7f0000000580)={&(0x7f0000000540)='\x1d\x04/\x00', 0x1ff, 0x6})
pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:<\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8\x06\xa5\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*<P\xb0\x8a\"\x176\xe1p*0\xac\xb9\xd5\xab\xcc$\x9ai\xca\v(\xcd?\x8d\xd2\x1d\xe1\x99N\x028\xe2\x12\t6x\xca{\n\xe86;\x81\xc4\x00\x8b\xed\xfa\xc0\x18\xe7\xd0\x97\xd8\x00\xd5\x85\x03\xf1\f\xcc\xf7\xb16L\xd4\xb0AV.\xe3\x9e\x8csh\x8a\x84\xe30\xde\x8d\xe3\xa4\xf1e\xcf\xb2Rx\x8f\x98G\xc3\xc8UP\xb4-\aW\xb5h\x8b\x98T\xe0n\x8d~\xf2\x8b\x1c>\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde<o\xb6[o\b\x00', 0x4e, 0x3)
ioctl$auto_FS_IOC_RESVSP(r0, 0x40305828, 0x0)
socket(0xa, 0x1, 0x100)
ioperm$auto(0x7, 0x5ad2, 0x8)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
socket(0x1e, 0x1, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = socket(0x21, 0x3, 0x9)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x12, 0x0, 0x1)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000001c0), r3)
set_tid_address$auto(0x0)
unshare$auto(0x40000080)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0)
close_range$auto(0x2, 0x8, 0x0)

15.296353231s ago: executing program 5 (id=629):
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffff7fffffffffd, 0xd1, 0x3, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x31, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
ioctl$auto_FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0xffffffffffffffff)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
futex$auto(0x0, 0x8d, 0x0, 0x0, 0x0, 0x100)
mmap$auto(0x100000000, 0x4, 0x4000000000df, 0x40eb2, 0xffffffffffffffff, 0x300000000000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182, 0x0)
openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000006640), 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x3, 0x8001, 0x2000000000000149)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/afs/addr_prefs\x00', 0x441, 0x0)
write$auto(r0, 0x0, 0x40)

15.291443188s ago: executing program 2 (id=630):
mmap$auto(0xfffffffffffffffd, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x1, 0x106)
bind$auto(0x3, 0x0, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x200}, 0x54)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
socket(0xa, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0)
ioctl$auto(r0, 0xab07, r0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
getsockopt$auto_SO_BROADCAST(0xffffffffffffffff, 0xf7f, 0x6, 0x0, &(0x7f0000000180))
r2 = socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sync_file_range$auto(r1, 0x0, 0x8, 0xbeb)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
syz_genetlink_get_family_id$auto_psample(&(0x7f0000000100), r2)
openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x302, 0x0)

15.280525522s ago: executing program 6 (id=631):
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000)
prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0030e5", @ANYRES16=r1, @ANYBLOB="01002dbd7000f9dbdf25010000000500070058000000080009009c781e01060002000100000008001800030000000800190006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080)
mmap$auto(0x1, 0x3, 0x1, 0xe31, 0xffffffffffffffff, 0xe0)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)
socket(0x2, 0x5, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x101, 0x0)
socket(0x10, 0x2, 0x0)
close_range$auto(0x2, 0xa, 0x0)
mmap$auto(0x3, 0xa00006, 0x4, 0x40eb1, 0x602, 0x300000000000)
ioprio_set$auto(0x2, 0x0, 0x208)

48.155438ms ago: executing program 36 (id=613):
mmap$auto(0xfffffffffffffff9, 0x400008, 0xdf, 0x4a56, 0x2, 0x8000)
r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000500), 0x400000, 0x0)
ioctl$auto_PPPIOCSCOMPRESS(r1, 0x4010744d, &(0x7f0000000580)={&(0x7f0000000540)='\x1d\x04/\x00', 0x1ff, 0x6})
pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:<\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8\x06\xa5\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*<P\xb0\x8a\"\x176\xe1p*0\xac\xb9\xd5\xab\xcc$\x9ai\xca\v(\xcd?\x8d\xd2\x1d\xe1\x99N\x028\xe2\x12\t6x\xca{\n\xe86;\x81\xc4\x00\x8b\xed\xfa\xc0\x18\xe7\xd0\x97\xd8\x00\xd5\x85\x03\xf1\f\xcc\xf7\xb16L\xd4\xb0AV.\xe3\x9e\x8csh\x8a\x84\xe30\xde\x8d\xe3\xa4\xf1e\xcf\xb2Rx\x8f\x98G\xc3\xc8UP\xb4-\aW\xb5h\x8b\x98T\xe0n\x8d~\xf2\x8b\x1c>\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde<o\xb6[o\b\x00', 0x4e, 0x3)
ioctl$auto_FS_IOC_RESVSP(r0, 0x40305828, 0x0)
socket(0xa, 0x1, 0x100)
ioperm$auto(0x7, 0x5ad2, 0x8)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
socket(0x1e, 0x1, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = socket(0x21, 0x3, 0x9)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x12, 0x0, 0x1)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000001c0), r3)
set_tid_address$auto(0x0)
unshare$auto(0x40000080)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0)
close_range$auto(0x2, 0x8, 0x0)

16.17254ms ago: executing program 2 (id=622):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
r0 = socket(0xa, 0x3, 0xff)
connect$auto(r0, &(0x7f00000018c0)=@generic={0xa}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0)
write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0x80000)
mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000)
syz_clone3(0x0, 0x0)
madvise$auto(0x1ffff000, 0x7, 0x100000000)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2)
shmget$auto(0x8, 0x10563, 0x568d1af2)
ioperm$auto(0x7, 0x6, 0x2)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0)

14.895309ms ago: executing program 6 (id=623):
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffff7fffffffffd, 0xd1, 0x3, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x31, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
ioctl$auto_FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0xffffffffffffffff)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
futex$auto(0x0, 0x8d, 0x0, 0x0, 0x0, 0x100)
mmap$auto(0x100000000, 0x4, 0x4000000000df, 0x40eb2, 0xffffffffffffffff, 0x300000000000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182, 0x0)
r0 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000006640), 0x2, 0x0)
readv$auto(r0, &(0x7f0000000040)={0x0, 0x36a}, 0x6)
preadv$auto(0x40000000000003, 0x0, 0x6, 0x8, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x59, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
ioperm$auto(0x3, 0x8001, 0x2000000000000149)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/afs/addr_prefs\x00', 0x441, 0x0)
write$auto(r1, 0x0, 0x40)

0s ago: executing program 5 (id=633):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
r0 = socket(0xa, 0x2, 0x0)
connect$auto(0xffffffffffffffff, &(0x7f00000018c0)=@generic={0xa}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
mmap$auto(0x200, 0x400008, 0x200, 0x9b72, r0, 0x6)
r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0)
write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0x80000)
mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000)
syz_clone3(0x0, 0x0)
madvise$auto(0x1ffff000, 0x7, 0x100000000)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2)
shmget$auto(0x8, 0x10563, 0x568d1af2)
ioperm$auto(0x7, 0x6, 0x2)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.103' (ED25519) to the list of known hosts.
[   79.383797][ T5818] cgroup: Unknown subsys name 'net'
[   79.576676][ T5818] cgroup: Unknown subsys name 'cpuset'
[   79.585416][ T5818] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   81.091782][ T5818] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   82.905405][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   82.914331][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   82.933130][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   82.941342][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   82.953196][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   82.985455][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   82.993777][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   83.001632][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   83.010204][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   83.018289][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   83.081517][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   83.091074][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   83.099841][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   83.108081][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   83.116615][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   83.125299][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   83.132588][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   83.163770][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   83.193789][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   83.205350][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   83.505596][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   83.568528][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   83.751614][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.758901][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.766775][ T5830] bridge_slave_0: entered allmulticast mode
[   83.773990][ T5830] bridge_slave_0: entered promiscuous mode
[   83.807158][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.814738][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.821876][ T5827] bridge_slave_0: entered allmulticast mode
[   83.829357][ T5827] bridge_slave_0: entered promiscuous mode
[   83.837862][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.845103][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.852211][ T5830] bridge_slave_1: entered allmulticast mode
[   83.859692][ T5830] bridge_slave_1: entered promiscuous mode
[   83.876136][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.883549][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.891022][ T5827] bridge_slave_1: entered allmulticast mode
[   83.898790][ T5827] bridge_slave_1: entered promiscuous mode
[   83.996918][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.016517][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.029653][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.040485][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   84.072345][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.133957][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   84.167700][ T5827] team0: Port device team_slave_0 added
[   84.188235][ T5830] team0: Port device team_slave_0 added
[   84.197003][ T5827] team0: Port device team_slave_1 added
[   84.225939][ T5830] team0: Port device team_slave_1 added
[   84.287111][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.294372][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.320395][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.365825][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.373263][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.380387][ T5834] bridge_slave_0: entered allmulticast mode
[   84.387736][ T5834] bridge_slave_0: entered promiscuous mode
[   84.396664][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.403902][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.430508][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.448121][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.455214][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.481329][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.493076][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.500209][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.507694][ T5834] bridge_slave_1: entered allmulticast mode
[   84.514710][ T5834] bridge_slave_1: entered promiscuous mode
[   84.539607][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.546624][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.573205][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.622625][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.660070][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.716753][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.724052][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.731189][ T5837] bridge_slave_0: entered allmulticast mode
[   84.738925][ T5837] bridge_slave_0: entered promiscuous mode
[   84.763572][ T5830] hsr_slave_0: entered promiscuous mode
[   84.769861][ T5830] hsr_slave_1: entered promiscuous mode
[   84.788528][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.795977][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.803975][ T5837] bridge_slave_1: entered allmulticast mode
[   84.810893][ T5837] bridge_slave_1: entered promiscuous mode
[   84.822963][ T5827] hsr_slave_0: entered promiscuous mode
[   84.829182][ T5827] hsr_slave_1: entered promiscuous mode
[   84.835358][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.843093][ T5827] Cannot create hsr debugfs directory
[   84.864880][ T5834] team0: Port device team_slave_0 added
[   84.901913][ T5834] team0: Port device team_slave_1 added
[   84.934455][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.947144][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.005528][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.012499][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.013644][ T5829] Bluetooth: hci0: command tx timeout
[   85.039481][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.058117][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.065649][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.091706][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.102816][ T5829] Bluetooth: hci1: command tx timeout
[   85.159295][ T5837] team0: Port device team_slave_0 added
[   85.168492][ T5837] team0: Port device team_slave_1 added
[   85.253074][ T5829] Bluetooth: hci3: command tx timeout
[   85.258737][ T5829] Bluetooth: hci2: command tx timeout
[   85.283397][ T5834] hsr_slave_0: entered promiscuous mode
[   85.289532][ T5834] hsr_slave_1: entered promiscuous mode
[   85.296205][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   85.303789][ T5834] Cannot create hsr debugfs directory
[   85.309726][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.317241][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.343456][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.356610][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.363817][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.389836][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.568371][ T5837] hsr_slave_0: entered promiscuous mode
[   85.574903][ T5837] hsr_slave_1: entered promiscuous mode
[   85.580860][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   85.588622][ T5837] Cannot create hsr debugfs directory
[   85.705821][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   85.731078][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   85.745236][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   85.759915][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   85.865385][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   85.893634][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   85.904353][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   85.929979][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   86.026385][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   86.038740][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   86.050598][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   86.069597][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   86.157348][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   86.178556][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   86.188969][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   86.200686][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   86.274962][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.321138][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   86.368081][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.391781][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.399102][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.423839][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.440129][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.447310][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.495081][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   86.518668][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.558458][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   86.582677][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   86.592334][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.599555][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.648983][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.656191][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.669656][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.676976][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.689608][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.696801][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.707908][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.715484][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.749700][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.756920][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.030791][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.092898][ T5829] Bluetooth: hci0: command tx timeout
[   87.173026][ T5829] Bluetooth: hci1: command tx timeout
[   87.299772][ T5830] veth0_vlan: entered promiscuous mode
[   87.333442][ T5829] Bluetooth: hci2: command tx timeout
[   87.338899][ T5829] Bluetooth: hci3: command tx timeout
[   87.376856][ T5830] veth1_vlan: entered promiscuous mode
[   87.432543][ T5830] veth0_macvtap: entered promiscuous mode
[   87.467734][ T5830] veth1_macvtap: entered promiscuous mode
[   87.508193][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.523752][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.548829][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.566985][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.583598][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.592363][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.601484][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.702289][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.761923][ T5834] veth0_vlan: entered promiscuous mode
[   87.784665][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.828921][ T5834] veth1_vlan: entered promiscuous mode
[   87.857712][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.869364][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.927211][ T5827] veth0_vlan: entered promiscuous mode
[   87.936817][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.952201][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.994565][ T5827] veth1_vlan: entered promiscuous mode
[   88.009169][ T5834] veth0_macvtap: entered promiscuous mode
[   88.038195][ T5837] veth0_vlan: entered promiscuous mode
[   88.054814][ T5834] veth1_macvtap: entered promiscuous mode
[   88.058745][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   88.076660][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.101857][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.119954][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.130087][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.140048][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.149317][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.165659][ T5837] veth1_vlan: entered promiscuous mode
[   88.234592][ T5827] veth0_macvtap: entered promiscuous mode
[   88.281447][ T5827] veth1_macvtap: entered promiscuous mode
[   88.360908][ T5837] veth0_macvtap: entered promiscuous mode
[   88.404795][ T5837] veth1_macvtap: entered promiscuous mode
[   88.428684][ T4551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.457893][ T4551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.490079][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.501618][ T5920] random: crng reseeded on system resumption
[   88.576754][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.591370][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.698547][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.724626][ T4551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.727874][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.741631][ T4551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.759350][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.788176][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.797405][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.818170][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.841486][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.850768][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.865206][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.083892][ T4551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.098869][ T4551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.141155][ T4551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.162820][ T4551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.174315][ T5829] Bluetooth: hci0: command tx timeout
[   89.253220][ T5829] Bluetooth: hci1: command tx timeout
[   89.292839][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.307910][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.412854][ T5829] Bluetooth: hci3: command tx timeout
[   89.412876][   T51] Bluetooth: hci2: command tx timeout
[   89.536671][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.578972][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.587259][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   89.723119][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   89.732326][ T5924] Zero length message leads to an empty skb
[   91.022044][ T5958] FAULT_INJECTION: forcing a failure.
[   91.022044][ T5958] name failslab, interval 1, probability 0, space 0, times 1
[   91.047887][ T5958] CPU: 1 UID: 0 PID: 5958 Comm: syz.3.8 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) 
[   91.047924][ T5958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   91.047942][ T5958] Call Trace:
[   91.047950][ T5958]  <TASK>
[   91.047963][ T5958]  dump_stack_lvl+0x16c/0x1f0
[   91.048010][ T5958]  should_fail_ex+0x512/0x640
[   91.048042][ T5958]  ? __kmalloc_noprof+0xbf/0x510
[   91.048080][ T5958]  ? __netlink_kernel_create+0x17f/0x750
[   91.048106][ T5958]  should_failslab+0xc2/0x120
[   91.048131][ T5958]  __kmalloc_noprof+0xd2/0x510
[   91.048173][ T5958]  __netlink_kernel_create+0x17f/0x750
[   91.048202][ T5958]  ? __pfx___netlink_kernel_create+0x10/0x10
[   91.048240][ T5958]  uevent_net_init+0xf8/0x350
[   91.048266][ T5958]  ? __pfx_uevent_net_init+0x10/0x10
[   91.048293][ T5958]  ? __pfx_uevent_net_rcv+0x10/0x10
[   91.048330][ T5958]  ? __pfx_uevent_net_init+0x10/0x10
[   91.048354][ T5958]  ops_init+0x1df/0x5f0
[   91.048403][ T5958]  setup_net+0x1ff/0x510
[   91.048425][ T5958]  ? lockdep_init_map_type+0x5c/0x280
[   91.048459][ T5958]  ? __pfx_setup_net+0x10/0x10
[   91.048485][ T5958]  ? debug_mutex_init+0x37/0x70
[   91.048514][ T5958]  copy_net_ns+0x2a6/0x5f0
[   91.048544][ T5958]  create_new_namespaces+0x3ea/0xa90
[   91.048580][ T5958]  unshare_nsproxy_namespaces+0xc0/0x1f0
[   91.048610][ T5958]  ksys_unshare+0x45b/0xa40
[   91.048642][ T5958]  ? __pfx_ksys_unshare+0x10/0x10
[   91.048674][ T5958]  ? xfd_validate_state+0x61/0x180
[   91.048716][ T5958]  __x64_sys_unshare+0x31/0x40
[   91.048747][ T5958]  do_syscall_64+0xcd/0x490
[   91.048784][ T5958]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.048810][ T5958] RIP: 0033:0x7f246158e929
[   91.048840][ T5958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   91.048868][ T5958] RSP: 002b:00007f2462330038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   91.048892][ T5958] RAX: ffffffffffffffda RBX: 00007f24617b6080 RCX: 00007f246158e929
[   91.048909][ T5958] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[   91.048924][ T5958] RBP: 00007f2461610b39 R08: 0000000000000000 R09: 0000000000000000
[   91.048939][ T5958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   91.048953][ T5958] R13: 0000000000000000 R14: 00007f24617b6080 R15: 00007ffc61b138a8
[   91.048988][ T5958]  </TASK>
[   91.296043][   T51] Bluetooth: hci0: command tx timeout
[   91.308291][ T5958] kobject_uevent: unable to create netlink socket!
[   91.343838][   T51] Bluetooth: hci1: command tx timeout
[   91.454299][ T5957] random: crng reseeded on system resumption
[   91.494382][   T51] Bluetooth: hci3: command tx timeout
[   91.499833][ T5829] Bluetooth: hci2: command tx timeout
[   91.658387][ T5963] mmap: syz.2.9 (5963) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   91.826752][ T1212] cfg80211: failed to load regulatory.db
[   93.417162][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   93.468913][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   94.993070][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   95.334657][ T6043] can0: slcan on ttyS2.
[   95.345212][ T6054] FAULT_INJECTION: forcing a failure.
[   95.345212][ T6054] name failslab, interval 1, probability 0, space 0, times 0
[   95.367950][ T6054] CPU: 1 UID: 0 PID: 6054 Comm: syz.1.21 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) 
[   95.367987][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   95.368003][ T6054] Call Trace:
[   95.368012][ T6054]  <TASK>
[   95.368022][ T6054]  dump_stack_lvl+0x16c/0x1f0
[   95.368076][ T6054]  should_fail_ex+0x512/0x640
[   95.368111][ T6054]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[   95.368152][ T6054]  should_failslab+0xc2/0x120
[   95.368178][ T6054]  kmem_cache_alloc_noprof+0x6d/0x3b0
[   95.368211][ T6054]  ? __proc_create+0xc3/0x8c0
[   95.368246][ T6054]  ? __proc_create+0x2ce/0x8c0
[   95.368286][ T6054]  __proc_create+0x2ce/0x8c0
[   95.368323][ T6054]  ? __pfx___proc_create+0x10/0x10
[   95.368363][ T6054]  ? proc_register+0x314/0x5f0
[   95.368406][ T6054]  proc_create_reg+0x7d/0x180
[   95.368433][ T6054]  proc_create_net_data+0x8e/0x1b0
[   95.368471][ T6054]  ? __pfx_proc_create_net_data+0x10/0x10
[   95.368507][ T6054]  ? __pfx_uevent_net_rcv+0x10/0x10
[   95.368541][ T6054]  ? __pfx_dev_mc_net_init+0x10/0x10
[   95.368572][ T6054]  dev_mc_net_init+0x50/0x70
[   95.368602][ T6054]  ops_init+0x1df/0x5f0
[   95.368649][ T6054]  setup_net+0x1ff/0x510
[   95.368671][ T6054]  ? lockdep_init_map_type+0x5c/0x280
[   95.368706][ T6054]  ? __pfx_setup_net+0x10/0x10
[   95.368733][ T6054]  ? debug_mutex_init+0x37/0x70
[   95.368762][ T6054]  copy_net_ns+0x2a6/0x5f0
[   95.368793][ T6054]  create_new_namespaces+0x3ea/0xa90
[   95.368829][ T6054]  unshare_nsproxy_namespaces+0xc0/0x1f0
[   95.368859][ T6054]  ksys_unshare+0x45b/0xa40
[   95.368891][ T6054]  ? __pfx_ksys_unshare+0x10/0x10
[   95.368924][ T6054]  ? xfd_validate_state+0x61/0x180
[   95.368973][ T6054]  __x64_sys_unshare+0x31/0x40
[   95.369004][ T6054]  do_syscall_64+0xcd/0x490
[   95.369044][ T6054]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.369071][ T6054] RIP: 0033:0x7fdf9e78e929
[   95.369093][ T6054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   95.369116][ T6054] RSP: 002b:00007fdf9f57b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   95.369139][ T6054] RAX: ffffffffffffffda RBX: 00007fdf9e9b6080 RCX: 00007fdf9e78e929
[   95.369156][ T6054] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[   95.369171][ T6054] RBP: 00007fdf9e810b39 R08: 0000000000000000 R09: 0000000000000000
[   95.369187][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.369201][ T6054] R13: 0000000000000000 R14: 00007fdf9e9b6080 R15: 00007fff0963fe08
[   95.369234][ T6054]  </TASK>
[   95.844965][ T6041] can0 (unregistered): slcan off ttyS2.
[   96.105012][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   96.383886][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   96.393471][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   96.547119][ T6074] FAULT_INJECTION: forcing a failure.
[   96.547119][ T6074] name fail_futex, interval 1, probability 0, space 0, times 1
[   96.633387][ T6074] CPU: 0 UID: 0 PID: 6074 Comm: syz.2.26 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) 
[   96.633424][ T6074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   96.633439][ T6074] Call Trace:
[   96.633448][ T6074]  <TASK>
[   96.633457][ T6074]  dump_stack_lvl+0x16c/0x1f0
[   96.633497][ T6074]  should_fail_ex+0x512/0x640
[   96.633534][ T6074]  get_futex_key+0x1d0/0x1540
[   96.633563][ T6074]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   96.633594][ T6074]  ? __pfx_get_futex_key+0x10/0x10
[   96.633622][ T6074]  ? __lock_acquire+0x622/0x1c90
[   96.633653][ T6074]  futex_wake+0xea/0x530
[   96.633687][ T6074]  ? __pfx_futex_wake+0x10/0x10
[   96.633724][ T6074]  ? task_mm_cid_work+0x6b9/0x910
[   96.633749][ T6074]  do_futex+0x1e3/0x350
[   96.633775][ T6074]  ? __pfx_do_futex+0x10/0x10
[   96.633800][ T6074]  ? __pfx_task_mm_cid_work+0x10/0x10
[   96.633821][ T6074]  ? __pfx___might_resched+0x10/0x10
[   96.633847][ T6074]  __x64_sys_futex+0x1e0/0x4c0
[   96.633873][ T6074]  ? __pfx_blkcg_maybe_throttle_current+0x10/0x10
[   96.633901][ T6074]  ? __pfx___x64_sys_futex+0x10/0x10
[   96.633930][ T6074]  ? xfd_validate_state+0x61/0x180
[   96.633969][ T6074]  do_syscall_64+0xcd/0x490
[   96.634006][ T6074]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.634031][ T6074] RIP: 0033:0x7fd09bf8e929
[   96.634051][ T6074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   96.634075][ T6074] RSP: 002b:00007fd09cd790e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   96.634098][ T6074] RAX: ffffffffffffffda RBX: 00007fd09c1b6088 RCX: 00007fd09bf8e929
[   96.634116][ T6074] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd09c1b608c
[   96.634141][ T6074] RBP: 00007fd09c1b6080 R08: 00007fd09cd9b000 R09: 0000000000000000
[   96.634157][ T6074] R10: 0000000000000024 R11: 0000000000000246 R12: 00007fd09c1b608c
[   96.634172][ T6074] R13: 0000000000000000 R14: 00007ffd54667920 R15: 00007ffd54667a08
[   96.634203][ T6074]  </TASK>
[   97.413210][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   97.422026][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   98.660866][ T6089] syz.2.29 (6089) used greatest stack depth: 19800 bytes left
[   99.553549][ T6100] process 'syz.0.32' launched './file0' with NULL argv: empty string added
[  104.667401][ T6193] netlink: 28 bytes leftover after parsing attributes in process `syz.3.46'.

syzkaller
syzkaller login: [  104.881945][ T6196] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  107.458941][ T6232] FAULT_INJECTION: forcing a failure.
[  107.458941][ T6232] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  107.475804][ T6232] CPU: 0 UID: 0 PID: 6232 Comm: syz.0.54 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) 
[  107.475825][ T6232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  107.475835][ T6232] Call Trace:
[  107.475841][ T6232]  <TASK>
[  107.475847][ T6232]  dump_stack_lvl+0x16c/0x1f0
[  107.475873][ T6232]  should_fail_ex+0x512/0x640
[  107.475898][ T6232]  should_fail_alloc_page+0xe7/0x130
[  107.475914][ T6232]  prepare_alloc_pages+0x3c2/0x610
[  107.475934][ T6232]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[  107.475958][ T6232]  ? rcu_is_watching+0x12/0xc0
[  107.475973][ T6232]  ? trace_mm_page_alloc+0x11f/0x1a0
[  107.475989][ T6232]  ? __alloc_frozen_pages_noprof+0x294/0x23f0
[  107.476010][ T6232]  ? __pfx_stack_trace_save+0x10/0x10
[  107.476027][ T6232]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  107.476054][ T6232]  ? alloc_vmap_area+0x645/0x29c0
[  107.476068][ T6232]  ? __vmalloc_node_range_noprof+0x271/0x14b0
[  107.476085][ T6232]  ? kernel_read_file+0x6ff/0x910
[  107.476098][ T6232]  ? kernel_read_file_from_path_initns+0x1cf/0x260
[  107.476112][ T6232]  ? _request_firmware+0x744/0x1470
[  107.476129][ T6232]  ? request_firmware+0x35/0x50
[  107.476145][ T6232]  ? valid_regdb+0x188/0x590
[  107.476158][ T6232]  ? reg_reload_regdb+0x11e/0x460
[  107.476172][ T6232]  ? genl_family_rcv_msg_doit+0x209/0x2f0
[  107.476191][ T6232]  ? ____sys_sendmsg+0xa98/0xc70
[  107.476207][ T6232]  ? ___sys_sendmsg+0x134/0x1d0
[  107.476225][ T6232]  ? __sys_sendmsg+0x16d/0x220
[  107.476243][ T6232]  ? do_syscall_64+0xcd/0x490
[  107.476266][ T6232]  alloc_pages_bulk_noprof+0x71c/0x1410
[  107.476286][ T6232]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  107.476309][ T6232]  ? policy_nodemask+0xea/0x4e0
[  107.476323][ T6232]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[  107.476353][ T6232]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  107.476375][ T6232]  kasan_populate_vmalloc+0xf1/0x1f0
[  107.476399][ T6232]  alloc_vmap_area+0x959/0x29c0
[  107.476423][ T6232]  ? __pfx_alloc_vmap_area+0x10/0x10
[  107.476443][ T6232]  __get_vm_area_node+0x1ca/0x330
[  107.476463][ T6232]  __vmalloc_node_range_noprof+0x271/0x14b0
[  107.476481][ T6232]  ? kernel_read_file+0x6ff/0x910
[  107.476493][ T6232]  ? do_file_open_root+0x482/0x610
[  107.476512][ T6232]  ? stack_trace_save+0x8e/0xc0
[  107.476530][ T6232]  ? __lock_acquire+0x622/0x1c90
[  107.476548][ T6232]  ? kernel_read_file+0x6ff/0x910
[  107.476565][ T6232]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  107.476585][ T6232]  ? ima_read_file+0x142/0x1a0
[  107.476605][ T6232]  ? __pfx_ima_read_file+0x10/0x10
[  107.476627][ T6232]  ? kernel_read_file+0x6ff/0x910
[  107.476639][ T6232]  __vmalloc_node_noprof+0xad/0xf0
[  107.476656][ T6232]  ? kernel_read_file+0x6ff/0x910
[  107.476672][ T6232]  kernel_read_file+0x6ff/0x910
[  107.476687][ T6232]  ? __pfx_kernel_read_file+0x10/0x10
[  107.476706][ T6232]  kernel_read_file_from_path_initns+0x1cf/0x260
[  107.476723][ T6232]  ? __pfx_kernel_read_file_from_path_initns+0x10/0x10
[  107.476738][ T6232]  ? trace_kmem_cache_alloc+0x28/0xc0
[  107.476753][ T6232]  ? _request_firmware+0x503/0x1470
[  107.476774][ T6232]  _request_firmware+0x744/0x1470
[  107.476799][ T6232]  ? __pfx__request_firmware+0x10/0x10
[  107.476823][ T6232]  request_firmware+0x35/0x50
[  107.476841][ T6232]  valid_regdb+0x188/0x590
[  107.476856][ T6232]  ? __pfx___mutex_lock+0x10/0x10
[  107.476878][ T6232]  ? __pfx_valid_regdb+0x10/0x10
[  107.476896][ T6232]  reg_reload_regdb+0x11e/0x460
[  107.476913][ T6232]  ? __pfx_reg_reload_regdb+0x10/0x10
[  107.476930][ T6232]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  107.476950][ T6232]  ? nl80211_pre_doit+0x1b0/0xb10
[  107.476972][ T6232]  genl_family_rcv_msg_doit+0x209/0x2f0
[  107.476991][ T6232]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  107.477008][ T6232]  ? rcu_is_watching+0x12/0xc0
[  107.477028][ T6232]  ? bpf_lsm_capable+0x9/0x10
[  107.477045][ T6232]  ? security_capable+0x7e/0x260
[  107.477071][ T6232]  genl_rcv_msg+0x55c/0x800
[  107.477090][ T6232]  ? __pfx_genl_rcv_msg+0x10/0x10
[  107.477107][ T6232]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  107.477127][ T6232]  ? __pfx_nl80211_reload_regdb+0x10/0x10
[  107.477141][ T6232]  ? __pfx_nl80211_post_doit+0x10/0x10
[  107.477168][ T6232]  netlink_rcv_skb+0x158/0x420
[  107.477182][ T6232]  ? __pfx_genl_rcv_msg+0x10/0x10
[  107.477200][ T6232]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  107.477222][ T6232]  ? netlink_deliver_tap+0x1ae/0xd30
[  107.477239][ T6232]  genl_rcv+0x28/0x40
[  107.477253][ T6232]  netlink_unicast+0x53a/0x7f0
[  107.477270][ T6232]  ? __pfx_netlink_unicast+0x10/0x10
[  107.477290][ T6232]  netlink_sendmsg+0x8d1/0xdd0
[  107.477307][ T6232]  ? __pfx_netlink_sendmsg+0x10/0x10
[  107.477334][ T6232]  ____sys_sendmsg+0xa98/0xc70
[  107.477353][ T6232]  ? copy_msghdr_from_user+0x10a/0x160
[  107.477373][ T6232]  ? __pfx_____sys_sendmsg+0x10/0x10
[  107.477395][ T6232]  ? __pfx_futex_wake_mark+0x10/0x10
[  107.477418][ T6232]  ___sys_sendmsg+0x134/0x1d0
[  107.477440][ T6232]  ? __pfx____sys_sendmsg+0x10/0x10
[  107.477459][ T6232]  ? __lock_acquire+0x622/0x1c90
[  107.477500][ T6232]  __sys_sendmsg+0x16d/0x220
[  107.477521][ T6232]  ? __pfx___sys_sendmsg+0x10/0x10
[  107.477541][ T6232]  ? __x64_sys_futex+0x1e0/0x4c0
[  107.477568][ T6232]  do_syscall_64+0xcd/0x490
[  107.477591][ T6232]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.477606][ T6232] RIP: 0033:0x7f97ba58e929
[  107.477619][ T6232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  107.477631][ T6232] RSP: 002b:00007f97bb4ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  107.477645][ T6232] RAX: ffffffffffffffda RBX: 00007f97ba7b5fa0 RCX: 00007f97ba58e929
[  107.477655][ T6232] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004
[  107.477663][ T6232] RBP: 00007f97ba610b39 R08: 0000000000000000 R09: 0000000000000000
[  107.477672][ T6232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  107.477680][ T6232] R13: 0000000000000000 R14: 00007f97ba7b5fa0 R15: 00007ffc169fe388
[  107.477698][ T6232]  </TASK>
[  107.477881][ T6232] syz.0.54: vmalloc error: size 1085, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  108.079208][ T6232] CPU: 0 UID: 0 PID: 6232 Comm: syz.0.54 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) 
[  108.079236][ T6232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  108.079248][ T6232] Call Trace:
[  108.079255][ T6232]  <TASK>
[  108.079264][ T6232]  dump_stack_lvl+0x16c/0x1f0
[  108.079300][ T6232]  warn_alloc+0x248/0x3a0
[  108.079332][ T6232]  ? __pfx_warn_alloc+0x10/0x10
[  108.079364][ T6232]  ? kfree+0x2b4/0x4d0
[  108.079397][ T6232]  ? __get_vm_area_node+0x208/0x330
[  108.079428][ T6232]  __vmalloc_node_range_noprof+0xb2d/0x14b0
[  108.079453][ T6232]  ? do_file_open_root+0x482/0x610
[  108.079482][ T6232]  ? stack_trace_save+0x8e/0xc0
[  108.079511][ T6232]  ? __lock_acquire+0x622/0x1c90
[  108.079538][ T6232]  ? kernel_read_file+0x6ff/0x910
[  108.079567][ T6232]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  108.079596][ T6232]  ? ima_read_file+0x142/0x1a0
[  108.079628][ T6232]  ? __pfx_ima_read_file+0x10/0x10
[  108.079662][ T6232]  ? kernel_read_file+0x6ff/0x910
[  108.079682][ T6232]  __vmalloc_node_noprof+0xad/0xf0
[  108.079710][ T6232]  ? kernel_read_file+0x6ff/0x910
[  108.079735][ T6232]  kernel_read_file+0x6ff/0x910
[  108.079763][ T6232]  ? __pfx_kernel_read_file+0x10/0x10
[  108.079796][ T6232]  kernel_read_file_from_path_initns+0x1cf/0x260
[  108.079824][ T6232]  ? __pfx_kernel_read_file_from_path_initns+0x10/0x10
[  108.079847][ T6232]  ? trace_kmem_cache_alloc+0x28/0xc0
[  108.079873][ T6232]  ? _request_firmware+0x503/0x1470
[  108.079907][ T6232]  _request_firmware+0x744/0x1470
[  108.079949][ T6232]  ? __pfx__request_firmware+0x10/0x10
[  108.079991][ T6232]  request_firmware+0x35/0x50
[  108.080021][ T6232]  valid_regdb+0x188/0x590
[  108.080064][ T6232]  ? __pfx___mutex_lock+0x10/0x10
[  108.080099][ T6232]  ? __pfx_valid_regdb+0x10/0x10
[  108.080132][ T6232]  reg_reload_regdb+0x11e/0x460
[  108.080160][ T6232]  ? __pfx_reg_reload_regdb+0x10/0x10
[  108.080189][ T6232]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  108.080219][ T6232]  ? nl80211_pre_doit+0x1b0/0xb10
[  108.080256][ T6232]  genl_family_rcv_msg_doit+0x209/0x2f0
[  108.080288][ T6232]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  108.080316][ T6232]  ? rcu_is_watching+0x12/0xc0
[  108.080352][ T6232]  ? bpf_lsm_capable+0x9/0x10
[  108.080379][ T6232]  ? security_capable+0x7e/0x260
[  108.080423][ T6232]  genl_rcv_msg+0x55c/0x800
[  108.080456][ T6232]  ? __pfx_genl_rcv_msg+0x10/0x10
[  108.080484][ T6232]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  108.080514][ T6232]  ? __pfx_nl80211_reload_regdb+0x10/0x10
[  108.080538][ T6232]  ? __pfx_nl80211_post_doit+0x10/0x10
[  108.080583][ T6232]  netlink_rcv_skb+0x158/0x420
[  108.080608][ T6232]  ? __pfx_genl_rcv_msg+0x10/0x10
[  108.080637][ T6232]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  108.080676][ T6232]  ? netlink_deliver_tap+0x1ae/0xd30
[  108.080705][ T6232]  genl_rcv+0x28/0x40
[  108.080729][ T6232]  netlink_unicast+0x53a/0x7f0
[  108.080757][ T6232]  ? __pfx_netlink_unicast+0x10/0x10
[  108.080792][ T6232]  netlink_sendmsg+0x8d1/0xdd0
[  108.080823][ T6232]  ? __pfx_netlink_sendmsg+0x10/0x10
[  108.080861][ T6232]  ____sys_sendmsg+0xa98/0xc70
[  108.080888][ T6232]  ? copy_msghdr_from_user+0x10a/0x160
[  108.080921][ T6232]  ? __pfx_____sys_sendmsg+0x10/0x10
[  108.080956][ T6232]  ? __pfx_futex_wake_mark+0x10/0x10
[  108.080993][ T6232]  ___sys_sendmsg+0x134/0x1d0
[  108.081035][ T6232]  ? __pfx____sys_sendmsg+0x10/0x10
[  108.081066][ T6232]  ? __lock_acquire+0x622/0x1c90
[  108.081140][ T6232]  __sys_sendmsg+0x16d/0x220
[  108.081174][ T6232]  ? __pfx___sys_sendmsg+0x10/0x10
[  108.081207][ T6232]  ? __x64_sys_futex+0x1e0/0x4c0
[  108.081257][ T6232]  do_syscall_64+0xcd/0x490
[  108.081293][ T6232]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.081318][ T6232] RIP: 0033:0x7f97ba58e929
[  108.081339][ T6232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  108.081360][ T6232] RSP: 002b:00007f97bb4ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  108.081382][ T6232] RAX: ffffffffffffffda RBX: 00007f97ba7b5fa0 RCX: 00007f97ba58e929
[  108.081399][ T6232] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004
[  108.081413][ T6232] RBP: 00007f97ba610b39 R08: 0000000000000000 R09: 0000000000000000
[  108.081427][ T6232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  108.081441][ T6232] R13: 0000000000000000 R14: 00007f97ba7b5fa0 R15: 00007ffc169fe388
[  108.081473][ T6232]  </TASK>
[  108.081482][ T6232] Mem-Info:
[  108.081494][ T6232] active_anon:13239 inactive_anon:0 isolated_anon:0
[  108.081494][ T6232]  active_file:12806 inactive_file:40102 isolated_file:0
[  108.081494][ T6232]  unevictable:768 dirty:750 writeback:0
[  108.081494][ T6232]  slab_reclaimable:10414 slab_unreclaimable:94417
[  108.081494][ T6232]  mapped:30829 shmem:6836 pagetables:1077
[  108.081494][ T6232]  sec_pagetables:0 bounce:0
[  108.081494][ T6232]  kernel_misc_reclaimable:0
[  108.081494][ T6232]  free:1319190 free_pcp:19942 free_cma:0
[  108.081564][ T6232] Node 0 active_anon:52956kB inactive_anon:0kB active_file:51224kB inactive_file:160196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123316kB dirty:3000kB writeback:0kB shmem:25808kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11472kB pagetables:4176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  108.081629][ T6232] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  108.081690][ T6232] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  108.081757][ T6232] lowmem_reserve[]: 0 2481 2482 2482 2482
[  108.081805][ T6232] Node 0 DMA32 free:1359304kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52908kB inactive_anon:0kB active_file:51224kB inactive_file:158880kB unevictable:1536kB writepending:3000kB present:3129332kB managed:2540868kB mlocked:0kB bounce:0kB free_pcp:59848kB local_pcp:45360kB free_cma:0kB
[  108.081875][ T6232] lowmem_reserve[]: 0 0 1 1 1
[  108.081921][ T6232] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[  108.081988][ T6232] lowmem_reserve[]: 0 0 0 0 0
[  108.082043][ T6232] Node 1 Normal free:3902088kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19904kB local_pcp:11104kB free_cma:0kB
[  108.082112][ T6232] lowmem_reserve[]: 0 0 0 0 0
[  108.082159][ T6232] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  108.082339][ T6232] Node 0 DMA32: 325*4kB (UM) 556*8kB (UM) 440*16kB (UME) 409*32kB (UME) 296*64kB (UME) 121*128kB (UM) 68*256kB (UME) 39*512kB (UM) 16*1024kB (UM) 8*2048kB (UM) 300*4096kB (M) = 1359252kB
[  108.082554][ T6232] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  108.082780][ T6232] Node 1 Normal: 190*4kB (UE) 48*8kB (UME) 39*16kB (UME) 75*32kB (UME) 27*64kB (UME) 5*128kB (UME) 5*256kB (UME) 6*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 949*4096kB (M) = 3902088kB
[  108.082985][ T6232] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  108.083005][ T6232] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  108.083031][ T6232] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  108.083051][ T6232] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  108.083069][ T6232] 59740 total pagecache pages
[  108.083078][ T6232] 0 pages in swap cache
[  108.083087][ T6232] Free swap  = 124996kB
[  108.083095][ T6232] Total swap = 124996kB
[  108.083105][ T6232] 2097051 pages RAM
[  108.083114][ T6232] 0 pages HighMem/MovableOnly
[  108.083122][ T6232] 429856 pages reserved
[  108.083131][ T6232] 0 pages cma reserved
[  108.083167][ T6232] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -12
[  108.083213][ T6232] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -12
[  108.083237][ T6232] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s
[  108.298496][ T6226] FAULT_INJECTION: forcing a failure.
[  108.298496][ T6226] name failslab, interval 1, probability 0, space 0, times 0
[  108.298542][ T6226] CPU: 0 UID: 0 PID: 6226 Comm: syz.3.55 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) 
[  108.298574][ T6226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  108.298589][ T6226] Call Trace:
[  108.298597][ T6226]  <TASK>
[  108.298606][ T6226]  dump_stack_lvl+0x16c/0x1f0
[  108.298652][ T6226]  should_fail_ex+0x512/0x640
[  108.298685][ T6226]  ? fs_reclaim_acquire+0xae/0x150
[  108.298716][ T6226]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  108.298747][ T6226]  should_failslab+0xc2/0x120
[  108.298773][ T6226]  __kmalloc_noprof+0xd2/0x510
[  108.298814][ T6226]  tomoyo_realpath_from_path+0xc2/0x6e0
[  108.298850][ T6226]  ? tomoyo_profile+0x47/0x60
[  108.298887][ T6226]  tomoyo_path_number_perm+0x245/0x580
[  108.298914][ T6226]  ? tomoyo_path_number_perm+0x237/0x580
[  108.298945][ T6226]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  108.299007][ T6226]  ? find_held_lock+0x2b/0x80
[  108.299032][ T6226]  ? hook_file_ioctl_common+0x145/0x410
[  108.299065][ T6226]  ? __fget_files+0x20e/0x3c0
[  108.299102][ T6226]  security_file_ioctl+0x9b/0x240
[  108.299134][ T6226]  __x64_sys_ioctl+0xb7/0x210
[  108.299165][ T6226]  do_syscall_64+0xcd/0x490
[  108.299203][ T6226]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.299228][ T6226] RIP: 0033:0x7f246158e929
[  108.299249][ T6226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  108.299284][ T6226] RSP: 002b:00007f2462351038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  108.299308][ T6226] RAX: ffffffffffffffda RBX: 00007f24617b5fa0 RCX: 00007f246158e929
[  108.299325][ T6226] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000008
[  108.299340][ T6226] RBP: 00007f2461610b39 R08: 0000000000000000 R09: 0000000000000000
[  108.299354][ T6226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  108.299368][ T6226] R13: 0000000000000000 R14: 00007f24617b5fa0 R15: 00007ffc61b138a8
[  108.299402][ T6226]  </TASK>
[  108.299411][ T6226] ERROR: Out of memory at tomoyo_realpath_from_path.
[  108.936149][ T6247] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5
[  109.018051][ T6249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.58'.
[  109.665848][ T6250] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6
[  110.875327][ T6235] tty tty1: ldisc open failed (-12), clearing slot 0
[  110.883180][ T6248] ttyS ttyS2: ldisc open failed (-12), clearing slot 2
[  110.894389][ T6255] ttyS ttyS2: ldisc open failed (-12), clearing slot 2
[  110.915764][ T6257] tty tty12: ldisc open failed (-12), clearing slot 11
[  114.286869][ T6314] FAULT_INJECTION: forcing a failure.
[  114.286869][ T6314] name failslab, interval 1, probability 0, space 0, times 0
[  114.373116][ T6314] CPU: 0 UID: 0 PID: 6314 Comm: syz.1.68 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) 
[  114.373156][ T6314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  114.373171][ T6314] Call Trace:
[  114.373180][ T6314]  <TASK>
[  114.373190][ T6314]  dump_stack_lvl+0x16c/0x1f0
[  114.373233][ T6314]  should_fail_ex+0x512/0x640
[  114.373265][ T6314]  ? __kmalloc_noprof+0xbf/0x510
[  114.373304][ T6314]  ? snd_pcm_plugin_build+0x434/0x650
[  114.373333][ T6314]  should_failslab+0xc2/0x120
[  114.373357][ T6314]  __kmalloc_noprof+0xd2/0x510
[  114.373392][ T6314]  ? __mutex_unlock_slowpath+0x91/0x6a0
[  114.373433][ T6314]  snd_pcm_plugin_build+0x434/0x650
[  114.373468][ T6314]  snd_pcm_plugin_build_linear+0x29d/0x850
[  114.373499][ T6314]  ? wake_up_all_idle_cpus+0x165/0x1e0
[  114.373536][ T6314]  ? __pfx_snd_pcm_plugin_build_linear+0x10/0x10
[  114.373573][ T6314]  ? snd_pcm_hw_params+0xcd/0x1b40
[  114.373608][ T6314]  snd_pcm_plug_format_plugins+0x7f8/0x1430
[  114.373642][ T6314]  ? __pfx_snd_pcm_plug_format_plugins+0x10/0x10
[  114.373678][ T6314]  ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10
[  114.373719][ T6314]  snd_pcm_oss_change_params_locked+0x2dec/0x3a30
[  114.373766][ T6314]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  114.373824][ T6314]  snd_pcm_oss_get_active_substream+0x168/0x1d0
[  114.373869][ T6314]  snd_pcm_oss_ioctl+0x21e9/0x37a0
[  114.373900][ T6314]  ? hook_file_ioctl_common+0x145/0x410
[  114.373930][ T6314]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  114.373963][ T6314]  ? __fget_files+0x20e/0x3c0
[  114.374002][ T6314]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  114.374032][ T6314]  __x64_sys_ioctl+0x18b/0x210
[  114.374064][ T6314]  do_syscall_64+0xcd/0x490
[  114.374102][ T6314]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.374128][ T6314] RIP: 0033:0x7fdf9e78e929
[  114.374149][ T6314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  114.374172][ T6314] RSP: 002b:00007fdf9f57b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  114.374196][ T6314] RAX: ffffffffffffffda RBX: 00007fdf9e9b6080 RCX: 00007fdf9e78e929
[  114.374213][ T6314] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000008
[  114.374228][ T6314] RBP: 00007fdf9e810b39 R08: 0000000000000000 R09: 0000000000000000
[  114.374243][ T6314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  114.374259][ T6314] R13: 0000000000000000 R14: 00007fdf9e9b6080 R15: 00007fff0963fe08
[  114.374294][ T6314]  </TASK>
[  114.850479][ T6324] random: crng reseeded on system resumption
[  119.057547][ T6378] FAULT_INJECTION: forcing a failure.
[  119.057547][ T6378] name failslab, interval 1, probability 0, space 0, times 0
[  119.139746][ T6378] CPU: 1 UID: 0 PID: 6378 Comm: syz.3.84 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) 
[  119.139783][ T6378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  119.139797][ T6378] Call Trace:
[  119.139805][ T6378]  <TASK>
[  119.139815][ T6378]  dump_stack_lvl+0x16c/0x1f0
[  119.139859][ T6378]  should_fail_ex+0x512/0x640
[  119.139893][ T6378]  ? __kmalloc_noprof+0xbf/0x510
[  119.139931][ T6378]  ? ptp_open+0x103/0x520
[  119.139957][ T6378]  should_failslab+0xc2/0x120
[  119.139981][ T6378]  __kmalloc_noprof+0xd2/0x510
[  119.140023][ T6378]  ptp_open+0x103/0x520
[  119.140057][ T6378]  ? __pfx_ptp_open+0x10/0x10
[  119.140097][ T6378]  ? __pfx_ptp_open+0x10/0x10
[  119.140124][ T6378]  posix_clock_open+0x17b/0x290
[  119.140154][ T6378]  ? __pfx_posix_clock_open+0x10/0x10
[  119.140180][ T6378]  chrdev_open+0x231/0x6a0
[  119.140217][ T6378]  ? __pfx_chrdev_open+0x10/0x10
[  119.140252][ T6378]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[  119.140291][ T6378]  do_dentry_open+0x744/0x1c10
[  119.140328][ T6378]  ? __pfx_chrdev_open+0x10/0x10
[  119.140371][ T6378]  vfs_open+0x82/0x3f0
[  119.140402][ T6378]  path_openat+0x1de4/0x2cb0
[  119.140448][ T6378]  ? __pfx_path_openat+0x10/0x10
[  119.140492][ T6378]  ? __lock_acquire+0xb8a/0x1c90
[  119.140531][ T6378]  do_filp_open+0x20b/0x470
[  119.140567][ T6378]  ? __pfx_do_filp_open+0x10/0x10
[  119.140630][ T6378]  ? alloc_fd+0x471/0x7d0
[  119.140671][ T6378]  do_sys_openat2+0x11b/0x1d0
[  119.140699][ T6378]  ? __pfx_do_sys_openat2+0x10/0x10
[  119.140741][ T6378]  __x64_sys_openat+0x174/0x210
[  119.140770][ T6378]  ? __pfx___x64_sys_openat+0x10/0x10
[  119.140813][ T6378]  do_syscall_64+0xcd/0x490
[  119.140852][ T6378]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.140878][ T6378] RIP: 0033:0x7f246158e929
[  119.140900][ T6378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  119.140923][ T6378] RSP: 002b:00007f2462330038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  119.140948][ T6378] RAX: ffffffffffffffda RBX: 00007f24617b6080 RCX: 00007f246158e929
[  119.140965][ T6378] RDX: 0000000000000440 RSI: 0000200000000280 RDI: ffffffffffffff9c
[  119.140981][ T6378] RBP: 00007f2461610b39 R08: 0000000000000000 R09: 0000000000000000
[  119.140997][ T6378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  119.141012][ T6378] R13: 0000000000000000 R14: 00007f24617b6080 R15: 00007ffc61b138a8
[  119.141046][ T6378]  </TASK>
[  121.998518][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.91'.
[  122.987220][ T6457] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7
[  123.393427][ T6453] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8
[  124.470539][ T6476] FAULT_INJECTION: forcing a failure.
[  124.470539][ T6476] name failslab, interval 1, probability 0, space 0, times 0
[  124.544318][ T6476] CPU: 1 UID: 0 PID: 6476 Comm: syz.2.100 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) 
[  124.544356][ T6476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  124.544372][ T6476] Call Trace:
[  124.544381][ T6476]  <TASK>
[  124.544391][ T6476]  dump_stack_lvl+0x16c/0x1f0
[  124.544446][ T6476]  should_fail_ex+0x512/0x640
[  124.544479][ T6476]  ? fs_reclaim_acquire+0xae/0x150
[  124.544513][ T6476]  should_failslab+0xc2/0x120
[  124.544538][ T6476]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  124.544575][ T6476]  ? security_inode_alloc+0x3b/0x2b0
[  124.544608][ T6476]  security_inode_alloc+0x3b/0x2b0
[  124.544636][ T6476]  inode_init_always_gfp+0xce4/0x1030
[  124.544676][ T6476]  alloc_inode+0x86/0x240
[  124.544702][ T6476]  new_inode+0x22/0x1c0
[  124.544730][ T6476]  debugfs_create_dir+0xdd/0x5f0
[  124.544765][ T6476]  ptp_open+0x307/0x520
[  124.544800][ T6476]  ? __pfx_ptp_open+0x10/0x10
[  124.544839][ T6476]  ? __pfx_ptp_open+0x10/0x10
[  124.544866][ T6476]  posix_clock_open+0x17b/0x290
[  124.544895][ T6476]  ? __pfx_posix_clock_open+0x10/0x10
[  124.544921][ T6476]  chrdev_open+0x231/0x6a0
[  124.544955][ T6476]  ? __pfx_apparmor_file_open+0x10/0x10
[  124.544985][ T6476]  ? __pfx_chrdev_open+0x10/0x10
[  124.545024][ T6476]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[  124.545061][ T6476]  do_dentry_open+0x744/0x1c10
[  124.545095][ T6476]  ? __pfx_chrdev_open+0x10/0x10
[  124.545147][ T6476]  vfs_open+0x82/0x3f0
[  124.545180][ T6476]  path_openat+0x1de4/0x2cb0
[  124.545225][ T6476]  ? __pfx_path_openat+0x10/0x10
[  124.545261][ T6476]  ? __lock_acquire+0xb8a/0x1c90
[  124.545297][ T6476]  do_filp_open+0x20b/0x470
[  124.545331][ T6476]  ? __pfx_do_filp_open+0x10/0x10
[  124.545390][ T6476]  ? alloc_fd+0x471/0x7d0
[  124.545429][ T6476]  do_sys_openat2+0x11b/0x1d0
[  124.545454][ T6476]  ? __pfx_do_sys_openat2+0x10/0x10
[  124.545493][ T6476]  __x64_sys_openat+0x174/0x210
[  124.545521][ T6476]  ? __pfx___x64_sys_openat+0x10/0x10
[  124.545564][ T6476]  do_syscall_64+0xcd/0x490
[  124.545602][ T6476]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.545628][ T6476] RIP: 0033:0x7fd09bf8e929
[  124.545660][ T6476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  124.545684][ T6476] RSP: 002b:00007fd09cd79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  124.545712][ T6476] RAX: ffffffffffffffda RBX: 00007fd09c1b6080 RCX: 00007fd09bf8e929
[  124.545727][ T6476] RDX: 0000000000000440 RSI: 0000200000000280 RDI: ffffffffffffff9c
[  124.545742][ T6476] RBP: 00007fd09c010b39 R08: 0000000000000000 R09: 0000000000000000
[  124.545757][ T6476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  124.545771][ T6476] R13: 0000000000000000 R14: 00007fd09c1b6080 R15: 00007ffd54667a08
[  124.545807][ T6476]  </TASK>
[  124.545867][ T6476] debugfs: out of free dentries, can not create directory '0xffff888033be0000'
[  126.550217][ T6516] FAULT_INJECTION: forcing a failure.
[  126.550217][ T6516] name failslab, interval 1, probability 0, space 0, times 0
[  126.597275][ T6516] CPU: 1 UID: 0 PID: 6516 Comm: syz.2.110 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) 
[  126.597312][ T6516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  126.597327][ T6516] Call Trace:
[  126.597336][ T6516]  <TASK>
[  126.597346][ T6516]  dump_stack_lvl+0x16c/0x1f0
[  126.597387][ T6516]  should_fail_ex+0x512/0x640
[  126.597422][ T6516]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  126.597458][ T6516]  should_failslab+0xc2/0x120
[  126.597483][ T6516]  __kmalloc_cache_noprof+0x6a/0x3e0
[  126.597516][ T6516]  ? snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0
[  126.597555][ T6516]  snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0
[  126.597589][ T6516]  ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10
[  126.597628][ T6516]  snd_pcm_oss_change_params_locked+0x92b/0x3a30
[  126.597674][ T6516]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  126.597713][ T6516]  ? __pfx___mutex_lock+0x10/0x10
[  126.597775][ T6516]  snd_pcm_oss_get_active_substream+0x168/0x1d0
[  126.597808][ T6516]  snd_pcm_oss_ioctl+0x21e9/0x37a0
[  126.597838][ T6516]  ? hook_file_ioctl_common+0x145/0x410
[  126.597865][ T6516]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  126.597898][ T6516]  ? __fget_files+0x20e/0x3c0
[  126.597935][ T6516]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  126.597964][ T6516]  __x64_sys_ioctl+0x18b/0x210
[  126.597996][ T6516]  do_syscall_64+0xcd/0x490
[  126.598033][ T6516]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.598058][ T6516] RIP: 0033:0x7fd09bf8e929
[  126.598079][ T6516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  126.598104][ T6516] RSP: 002b:00007fd09cd79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  126.598128][ T6516] RAX: ffffffffffffffda RBX: 00007fd09c1b6080 RCX: 00007fd09bf8e929
[  126.598145][ T6516] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000008
[  126.598160][ T6516] RBP: 00007fd09c010b39 R08: 0000000000000000 R09: 0000000000000000
[  126.598174][ T6516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  126.598187][ T6516] R13: 0000000000000000 R14: 00007fd09c1b6080 R15: 00007ffd54667a08
[  126.598221][ T6516]  </TASK>
[  128.412198][ T6544] can0: slcan on ttyS2.
[  128.555604][ T6543] can0 (unregistered): slcan off ttyS2.
[  129.072453][ T6554] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9
[  129.490956][ T6555] debugfs: Directory 'ttyS2' with parent 'caif_serial' already present!
[  129.733286][ T6567] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10
[  132.090576][ T6612] can0: slcan on ttyS2.
[  132.242831][ T6611] can0 (unregistered): slcan off ttyS2.
[  132.358336][ T6613] GUP no longer grows the stack in syz.2.125 (6613): 14000-401000 (4000)
[  132.502995][ T6613] CPU: 0 UID: 0 PID: 6613 Comm: syz.2.125 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) 
[  132.503019][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  132.503028][ T6613] Call Trace:
[  132.503033][ T6613]  <TASK>
[  132.503039][ T6613]  dump_stack_lvl+0x16c/0x1f0
[  132.503067][ T6613]  gup_vma_lookup+0x1d2/0x220
[  132.503084][ T6613]  __get_user_pages+0x271/0x3b80
[  132.503106][ T6613]  ? process_vm_rw_core.constprop.0+0x1d8/0x9a0
[  132.503129][ T6613]  ? kasan_save_stack+0x42/0x60
[  132.503149][ T6613]  ? __pfx___get_user_pages+0x10/0x10
[  132.503164][ T6613]  ? register_lock_class+0x41/0x4c0
[  132.503183][ T6613]  ? __x64_sys_process_vm_readv+0xe2/0x1c0
[  132.503204][ T6613]  ? do_syscall_64+0xcd/0x490
[  132.503230][ T6613]  __gup_longterm_locked+0x20d/0x1840
[  132.503247][ T6613]  ? __lock_acquire+0xb8a/0x1c90
[  132.503318][ T6613]  ? __pfx___gup_longterm_locked+0x10/0x10
[  132.503345][ T6613]  pin_user_pages_remote+0xed/0x140
[  132.503364][ T6613]  ? __pfx_pin_user_pages_remote+0x10/0x10
[  132.503379][ T6613]  ? mm_access+0x22d/0x2e0
[  132.503403][ T6613]  process_vm_rw_core.constprop.0+0x41b/0x9a0
[  132.503434][ T6613]  ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10
[  132.503459][ T6613]  ? iovec_from_user+0xbb/0x140
[  132.503489][ T6613]  ? iovec_from_user+0xbb/0x140
[  132.503512][ T6613]  process_vm_rw+0x216/0x2c0
[  132.503535][ T6613]  ? __pfx_process_vm_rw+0x10/0x10
[  132.503562][ T6613]  ? __pfx___sys_sendmmsg+0x10/0x10
[  132.503602][ T6613]  ? xfd_validate_state+0x61/0x180
[  132.503619][ T6613]  ? __task_pid_nr_ns+0x17c/0x500
[  132.503639][ T6613]  __x64_sys_process_vm_readv+0xe2/0x1c0
[  132.503662][ T6613]  ? do_syscall_64+0x91/0x490
[  132.503682][ T6613]  ? lockdep_hardirqs_on+0x7c/0x110
[  132.503702][ T6613]  do_syscall_64+0xcd/0x490
[  132.503724][ T6613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.503738][ T6613] RIP: 0033:0x7fd09bf8e929
[  132.503750][ T6613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  132.503763][ T6613] RSP: 002b:00007fd09cd79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136
[  132.503777][ T6613] RAX: ffffffffffffffda RBX: 00007fd09c1b6080 RCX: 00007fd09bf8e929
[  132.503786][ T6613] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000088
[  132.503794][ T6613] RBP: 00007fd09c010b39 R08: 0000000000000003 R09: 0000000000000000
[  132.503802][ T6613] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[  132.503810][ T6613] R13: 0000000000000000 R14: 00007fd09c1b6080 R15: 00007ffd54667a08
[  132.503828][ T6613]  </TASK>
[  132.768087][    C0] vkms_vblank_simulate: vblank timer overrun
[  132.840418][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  132.847543][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  135.250132][ T6642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.132'.
[  135.291700][ T6642] vcan0: entered promiscuous mode
[  136.513327][ T6691] debugfs: Directory 'ttyS2' with parent 'caif_serial' already present!
[  137.572590][ T6722] FAULT_INJECTION: forcing a failure.
[  137.572590][ T6722] name failslab, interval 1, probability 0, space 0, times 0
[  137.687647][ T6722] CPU: 0 UID: 0 PID: 6722 Comm: syz.1.146 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) 
[  137.687684][ T6722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  137.687698][ T6722] Call Trace:
[  137.687707][ T6722]  <TASK>
[  137.687717][ T6722]  dump_stack_lvl+0x16c/0x1f0
[  137.687759][ T6722]  should_fail_ex+0x512/0x640
[  137.687794][ T6722]  ? fs_reclaim_acquire+0xae/0x150
[  137.687827][ T6722]  should_failslab+0xc2/0x120
[  137.687852][ T6722]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  137.687888][ T6722]  ? security_inode_alloc+0x3b/0x2b0
[  137.687929][ T6722]  security_inode_alloc+0x3b/0x2b0
[  137.687959][ T6722]  inode_init_always_gfp+0xce4/0x1030
[  137.688001][ T6722]  alloc_inode+0x86/0x240
[  137.688027][ T6722]  iget_locked+0x2e4/0x830
[  137.688057][ T6722]  ? __pfx_iget_locked+0x10/0x10
[  137.688084][ T6722]  ? find_held_lock+0x2b/0x80
[  137.688110][ T6722]  ? kernfs_root+0xee/0x2a0
[  137.688150][ T6722]  kernfs_get_inode+0x48/0x460
[  137.688183][ T6722]  kernfs_iop_lookup+0x1a7/0x2d0
[  137.688219][ T6722]  __lookup_slow+0x251/0x460
[  137.688249][ T6722]  ? __pfx___lookup_slow+0x10/0x10
[  137.688300][ T6722]  ? lookup_fast+0x156/0x610
[  137.688328][ T6722]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  137.688365][ T6722]  walk_component+0x353/0x5b0
[  137.688397][ T6722]  link_path_walk+0x627/0xe20
[  137.688441][ T6722]  path_openat+0x1b0/0x2cb0
[  137.688471][ T6722]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.688511][ T6722]  ? __pfx_path_openat+0x10/0x10
[  137.688548][ T6722]  ? __lock_acquire+0xb8a/0x1c90
[  137.688584][ T6722]  do_filp_open+0x20b/0x470
[  137.688618][ T6722]  ? __pfx_do_filp_open+0x10/0x10
[  137.688677][ T6722]  ? alloc_fd+0x471/0x7d0
[  137.688717][ T6722]  do_sys_openat2+0x11b/0x1d0
[  137.688745][ T6722]  ? __pfx_do_sys_openat2+0x10/0x10
[  137.688787][ T6722]  __x64_sys_openat+0x174/0x210
[  137.688815][ T6722]  ? __pfx___x64_sys_openat+0x10/0x10
[  137.688858][ T6722]  do_syscall_64+0xcd/0x490
[  137.688897][ T6722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.688930][ T6722] RIP: 0033:0x7fdf9e78e929
[  137.688952][ T6722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  137.688977][ T6722] RSP: 002b:00007fdf9f59c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  137.689002][ T6722] RAX: ffffffffffffffda RBX: 00007fdf9e9b5fa0 RCX: 00007fdf9e78e929
[  137.689017][ T6722] RDX: 0000000000001182 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  137.689033][ T6722] RBP: 00007fdf9e810b39 R08: 0000000000000000 R09: 0000000000000000
[  137.689048][ T6722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  137.689061][ T6722] R13: 0000000000000000 R14: 00007fdf9e9b5fa0 R15: 00007fff0963fe08
[  137.689093][ T6722]  </TASK>
[  138.423528][ T6729] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  140.507582][ T6777] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11
[  140.892600][ T6779] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12
[  145.370190][ T6894] FAULT_INJECTION: forcing a failure.
[  145.370190][ T6894] name failslab, interval 1, probability 0, space 0, times 0
[  145.451324][ T6894] CPU: 0 UID: 0 PID: 6894 Comm: syz.1.176 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) 
[  145.451359][ T6894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  145.451373][ T6894] Call Trace:
[  145.451382][ T6894]  <TASK>
[  145.451392][ T6894]  dump_stack_lvl+0x16c/0x1f0
[  145.451430][ T6894]  should_fail_ex+0x512/0x640
[  145.451460][ T6894]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  145.451495][ T6894]  should_failslab+0xc2/0x120
[  145.451519][ T6894]  __kmalloc_cache_noprof+0x6a/0x3e0
[  145.451549][ T6894]  ? ptp_open+0xe3/0x520
[  145.451581][ T6894]  ptp_open+0xe3/0x520
[  145.451628][ T6894]  ? __pfx_ptp_open+0x10/0x10
[  145.451665][ T6894]  ? __pfx_ptp_open+0x10/0x10
[  145.451692][ T6894]  posix_clock_open+0x17b/0x290
[  145.451721][ T6894]  ? __pfx_posix_clock_open+0x10/0x10
[  145.451749][ T6894]  chrdev_open+0x231/0x6a0
[  145.451782][ T6894]  ? __pfx_apparmor_file_open+0x10/0x10
[  145.451812][ T6894]  ? __pfx_chrdev_open+0x10/0x10
[  145.451846][ T6894]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[  145.451885][ T6894]  do_dentry_open+0x744/0x1c10
[  145.451917][ T6894]  ? __pfx_chrdev_open+0x10/0x10
[  145.451958][ T6894]  vfs_open+0x82/0x3f0
[  145.451989][ T6894]  path_openat+0x1de4/0x2cb0
[  145.452033][ T6894]  ? __pfx_path_openat+0x10/0x10
[  145.452068][ T6894]  ? __lock_acquire+0xb8a/0x1c90
[  145.452103][ T6894]  do_filp_open+0x20b/0x470
[  145.452136][ T6894]  ? __pfx_do_filp_open+0x10/0x10
[  145.452214][ T6894]  ? alloc_fd+0x471/0x7d0
[  145.452259][ T6894]  do_sys_openat2+0x11b/0x1d0
[  145.452285][ T6894]  ? __pfx_do_sys_openat2+0x10/0x10
[  145.452324][ T6894]  __x64_sys_openat+0x174/0x210
[  145.452350][ T6894]  ? __pfx___x64_sys_openat+0x10/0x10
[  145.452392][ T6894]  do_syscall_64+0xcd/0x490
[  145.452428][ T6894]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.452453][ T6894] RIP: 0033:0x7fdf9e78e929
[  145.452473][ T6894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.452495][ T6894] RSP: 002b:00007fdf9f57b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  145.452518][ T6894] RAX: ffffffffffffffda RBX: 00007fdf9e9b6080 RCX: 00007fdf9e78e929
[  145.452535][ T6894] RDX: 0000000000000440 RSI: 0000200000000280 RDI: ffffffffffffff9c
[  145.452551][ T6894] RBP: 00007fdf9e810b39 R08: 0000000000000000 R09: 0000000000000000
[  145.452566][ T6894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  145.452580][ T6894] R13: 0000000000000000 R14: 00007fdf9e9b6080 R15: 00007fff0963fe08
[  145.452620][ T6894]  </TASK>
[  146.392587][ T6907] can0: slcan on ttyS2.
[  146.475065][ T6906] can0 (unregistered): slcan off ttyS2.
[  146.952885][ T6929] FAULT_INJECTION: forcing a failure.
[  146.952885][ T6929] name failslab, interval 1, probability 0, space 0, times 0
[  146.965687][ T6929] CPU: 0 UID: 0 PID: 6929 Comm: syz.3.186 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) 
[  146.965708][ T6929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  146.965717][ T6929] Call Trace:
[  146.965722][ T6929]  <TASK>
[  146.965727][ T6929]  dump_stack_lvl+0x16c/0x1f0
[  146.965752][ T6929]  should_fail_ex+0x512/0x640
[  146.965773][ T6929]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  146.965794][ T6929]  should_failslab+0xc2/0x120
[  146.965808][ T6929]  __kmalloc_cache_noprof+0x6a/0x3e0
[  146.965828][ T6929]  ? snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0
[  146.965848][ T6929]  snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0
[  146.965866][ T6929]  ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10
[  146.965882][ T6929]  ? kfree+0x2b4/0x4d0
[  146.965898][ T6929]  ? snd_pcm_oss_change_params_locked+0x958/0x3a30
[  146.965917][ T6929]  snd_pcm_oss_change_params_locked+0x9cd/0x3a30
[  146.965941][ T6929]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  146.965959][ T6929]  ? __pfx___mutex_lock+0x10/0x10
[  146.966009][ T6929]  snd_pcm_oss_get_active_substream+0x168/0x1d0
[  146.966041][ T6929]  snd_pcm_oss_ioctl+0x21e9/0x37a0
[  146.966070][ T6929]  ? hook_file_ioctl_common+0x145/0x410
[  146.966088][ T6929]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  146.966106][ T6929]  ? __fget_files+0x20e/0x3c0
[  146.966127][ T6929]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  146.966144][ T6929]  __x64_sys_ioctl+0x18b/0x210
[  146.966163][ T6929]  do_syscall_64+0xcd/0x490
[  146.966185][ T6929]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.966200][ T6929] RIP: 0033:0x7f246158e929
[  146.966213][ T6929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  146.966225][ T6929] RSP: 002b:00007f2462330038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  146.966239][ T6929] RAX: ffffffffffffffda RBX: 00007f24617b6080 RCX: 00007f246158e929
[  146.966248][ T6929] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000008
[  146.966256][ T6929] RBP: 00007f2461610b39 R08: 0000000000000000 R09: 0000000000000000
[  146.966263][ T6929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  146.966272][ T6929] R13: 0000000000000000 R14: 00007f24617b6080 R15: 00007ffc61b138a8
[  146.966290][ T6929]  </TASK>
[  148.958995][ T6961] can0: slcan on ttyS2.
[  149.043177][ T6960] can0 (unregistered): slcan off ttyS2.
[  149.198782][ T6967] FAULT_INJECTION: forcing a failure.
[  149.198782][ T6967] name failslab, interval 1, probability 0, space 0, times 0
[  149.231869][ T6967] CPU: 1 UID: 0 PID: 6967 Comm: syz.0.193 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) 
[  149.231907][ T6967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  149.231916][ T6967] Call Trace:
[  149.231922][ T6967]  <TASK>
[  149.231927][ T6967]  dump_stack_lvl+0x16c/0x1f0
[  149.231955][ T6967]  should_fail_ex+0x512/0x640
[  149.231976][ T6967]  ? __kmalloc_noprof+0xbf/0x510
[  149.231999][ T6967]  ? ptp_open+0x103/0x520
[  149.232014][ T6967]  should_failslab+0xc2/0x120
[  149.232028][ T6967]  __kmalloc_noprof+0xd2/0x510
[  149.232053][ T6967]  ptp_open+0x103/0x520
[  149.232072][ T6967]  ? __pfx_ptp_open+0x10/0x10
[  149.232093][ T6967]  ? __pfx_ptp_open+0x10/0x10
[  149.232109][ T6967]  posix_clock_open+0x17b/0x290
[  149.232125][ T6967]  ? __pfx_posix_clock_open+0x10/0x10
[  149.232140][ T6967]  chrdev_open+0x231/0x6a0
[  149.232162][ T6967]  ? __pfx_apparmor_file_open+0x10/0x10
[  149.232180][ T6967]  ? __pfx_chrdev_open+0x10/0x10
[  149.232203][ T6967]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[  149.232225][ T6967]  do_dentry_open+0x744/0x1c10
[  149.232245][ T6967]  ? __pfx_chrdev_open+0x10/0x10
[  149.232270][ T6967]  vfs_open+0x82/0x3f0
[  149.232287][ T6967]  path_openat+0x1de4/0x2cb0
[  149.232323][ T6967]  ? __pfx_path_openat+0x10/0x10
[  149.232344][ T6967]  ? __lock_acquire+0xb8a/0x1c90
[  149.232366][ T6967]  do_filp_open+0x20b/0x470
[  149.232386][ T6967]  ? __pfx_do_filp_open+0x10/0x10
[  149.232419][ T6967]  ? alloc_fd+0x471/0x7d0
[  149.232443][ T6967]  do_sys_openat2+0x11b/0x1d0
[  149.232458][ T6967]  ? __pfx_do_sys_openat2+0x10/0x10
[  149.232481][ T6967]  __x64_sys_openat+0x174/0x210
[  149.232496][ T6967]  ? __pfx___x64_sys_openat+0x10/0x10
[  149.232519][ T6967]  do_syscall_64+0xcd/0x490
[  149.232542][ T6967]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.232556][ T6967] RIP: 0033:0x7f97ba58e929
[  149.232568][ T6967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  149.232581][ T6967] RSP: 002b:00007f97bb48a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  149.232595][ T6967] RAX: ffffffffffffffda RBX: 00007f97ba7b6080 RCX: 00007f97ba58e929
[  149.232604][ T6967] RDX: 0000000000000440 RSI: 0000200000000280 RDI: ffffffffffffff9c
[  149.232613][ T6967] RBP: 00007f97ba610b39 R08: 0000000000000000 R09: 0000000000000000
[  149.232621][ T6967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  149.232629][ T6967] R13: 0000000000000000 R14: 00007f97ba7b6080 R15: 00007ffc169fe388
[  149.232648][ T6967]  </TASK>
[  151.150144][ T7002] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  152.431648][ T6997] kafs: addr_prefs: Invalid Command
[  155.312459][ T7070] syz.3.216 (7070): attempted to duplicate a private mapping with mremap.  This is not supported.
[  156.158365][ T7064] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  156.175123][ T7064] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  156.228776][ T7064] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  156.275903][ T7064] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  156.294125][ T7064] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  156.314500][ T7064] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  156.325794][ T7064] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  156.331846][ T7064] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  156.386429][ T7064] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  156.412374][ T7064] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  156.438788][ T7091] can0: slcan on ttyS2.
[  156.482459][ T7064] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  156.504621][ T7064] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  156.676481][ T7086] can0 (unregistered): slcan off ttyS2.
[  157.492807][ T6745] Bluetooth: hci0: command 0x0c1a tx timeout
[  157.742231][ T7128] FAULT_INJECTION: forcing a failure.
[  157.742231][ T7128] name failslab, interval 1, probability 0, space 0, times 0
[  157.806111][ T7128] CPU: 0 UID: 0 PID: 7128 Comm: syz.3.226 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) 
[  157.806148][ T7128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  157.806163][ T7128] Call Trace:
[  157.806171][ T7128]  <TASK>
[  157.806181][ T7128]  dump_stack_lvl+0x16c/0x1f0
[  157.806223][ T7128]  should_fail_ex+0x512/0x640
[  157.806257][ T7128]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  157.806293][ T7128]  should_failslab+0xc2/0x120
[  157.806318][ T7128]  __kmalloc_cache_noprof+0x6a/0x3e0
[  157.806349][ T7128]  ? ptp_open+0xe3/0x520
[  157.806380][ T7128]  ptp_open+0xe3/0x520
[  157.806412][ T7128]  ? __pfx_ptp_open+0x10/0x10
[  157.806477][ T7128]  ? __pfx_ptp_open+0x10/0x10
[  157.806506][ T7128]  posix_clock_open+0x17b/0x290
[  157.806536][ T7128]  ? __pfx_posix_clock_open+0x10/0x10
[  157.806564][ T7128]  chrdev_open+0x231/0x6a0
[  157.806599][ T7128]  ? __pfx_apparmor_file_open+0x10/0x10
[  157.806628][ T7128]  ? __pfx_chrdev_open+0x10/0x10
[  157.806664][ T7128]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[  157.806701][ T7128]  do_dentry_open+0x744/0x1c10
[  157.806735][ T7128]  ? __pfx_chrdev_open+0x10/0x10
[  157.806776][ T7128]  vfs_open+0x82/0x3f0
[  157.806806][ T7128]  path_openat+0x1de4/0x2cb0
[  157.806850][ T7128]  ? __pfx_path_openat+0x10/0x10
[  157.806884][ T7128]  ? __lock_acquire+0xb8a/0x1c90
[  157.806919][ T7128]  do_filp_open+0x20b/0x470
[  157.806952][ T7128]  ? __pfx_do_filp_open+0x10/0x10
[  157.807010][ T7128]  ? alloc_fd+0x471/0x7d0
[  157.807050][ T7128]  do_sys_openat2+0x11b/0x1d0
[  157.807076][ T7128]  ? __pfx_do_sys_openat2+0x10/0x10
[  157.807116][ T7128]  __x64_sys_openat+0x174/0x210
[  157.807143][ T7128]  ? __pfx___x64_sys_openat+0x10/0x10
[  157.807184][ T7128]  do_syscall_64+0xcd/0x490
[  157.807222][ T7128]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.807247][ T7128] RIP: 0033:0x7f246158e929
[  157.807268][ T7128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  157.807291][ T7128] RSP: 002b:00007f2462351038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  157.807316][ T7128] RAX: ffffffffffffffda RBX: 00007f24617b5fa0 RCX: 00007f246158e929
[  157.807332][ T7128] RDX: 0000000000000440 RSI: 0000200000000280 RDI: ffffffffffffff9c
[  157.807347][ T7128] RBP: 00007f2461610b39 R08: 0000000000000000 R09: 0000000000000000
[  157.807362][ T7128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  157.807375][ T7128] R13: 0000000000000000 R14: 00007f24617b5fa0 R15: 00007ffc61b138a8
[  157.807408][ T7128]  </TASK>
[  158.295225][ T6745] Bluetooth: hci1: command 0x0c1a tx timeout
[  158.382817][ T6745] Bluetooth: hci2: command 0x0c1a tx timeout
[  158.453498][ T6719] Bluetooth: hci3: command 0x0c1a tx timeout
[  159.057238][ T7142] syz.3.228 uses obsolete (PF_INET,SOCK_PACKET)
[  159.116368][ T6719] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18
[  159.575766][ T7165] Bluetooth: hci0: command 0x0c1a tx timeout
[  160.400875][ T7165] Bluetooth: hci1: command 0x0c1a tx timeout
[  160.454235][ T7165] Bluetooth: hci2: command 0x0c1a tx timeout
[  160.537295][ T7165] Bluetooth: hci3: command 0x0c1a tx timeout
[  161.658395][ T7165] Bluetooth: hci0: command 0x0c1a tx timeout
[  162.453065][ T7165] Bluetooth: hci1: command 0x0c1a tx timeout
[  162.533417][ T7165] Bluetooth: hci2: command 0x0c1a tx timeout
[  162.629962][ T7165] Bluetooth: hci3: command 0x0c1a tx timeout
[  165.706179][ T7298] can0: slcan on ttyS2.
[  165.917754][ T7297] can0 (unregistered): slcan off ttyS2.
[  177.432533][ T7554] FAULT_INJECTION: forcing a failure.
[  177.432533][ T7554] name failslab, interval 1, probability 0, space 0, times 0
[  177.582125][ T7554] CPU: 1 UID: 0 PID: 7554 Comm: syz.3.322 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) 
[  177.582165][ T7554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  177.582180][ T7554] Call Trace:
[  177.582189][ T7554]  <TASK>
[  177.582199][ T7554]  dump_stack_lvl+0x16c/0x1f0
[  177.582250][ T7554]  should_fail_ex+0x512/0x640
[  177.582285][ T7554]  ? __kmalloc_noprof+0xbf/0x510
[  177.582326][ T7554]  ? ptp_open+0x103/0x520
[  177.582351][ T7554]  should_failslab+0xc2/0x120
[  177.582375][ T7554]  __kmalloc_noprof+0xd2/0x510
[  177.582416][ T7554]  ptp_open+0x103/0x520
[  177.582449][ T7554]  ? __pfx_ptp_open+0x10/0x10
[  177.582488][ T7554]  ? __pfx_ptp_open+0x10/0x10
[  177.582515][ T7554]  posix_clock_open+0x17b/0x290
[  177.582544][ T7554]  ? __pfx_posix_clock_open+0x10/0x10
[  177.582570][ T7554]  chrdev_open+0x231/0x6a0
[  177.582604][ T7554]  ? __pfx_apparmor_file_open+0x10/0x10
[  177.582634][ T7554]  ? __pfx_chrdev_open+0x10/0x10
[  177.582675][ T7554]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[  177.582710][ T7554]  do_dentry_open+0x744/0x1c10
[  177.582745][ T7554]  ? __pfx_chrdev_open+0x10/0x10
[  177.582784][ T7554]  vfs_open+0x82/0x3f0
[  177.582813][ T7554]  path_openat+0x1de4/0x2cb0
[  177.582858][ T7554]  ? __pfx_path_openat+0x10/0x10
[  177.582894][ T7554]  ? __lock_acquire+0xb8a/0x1c90
[  177.582929][ T7554]  do_filp_open+0x20b/0x470
[  177.582963][ T7554]  ? __pfx_do_filp_open+0x10/0x10
[  177.583022][ T7554]  ? alloc_fd+0x471/0x7d0
[  177.583064][ T7554]  do_sys_openat2+0x11b/0x1d0
[  177.583091][ T7554]  ? __pfx_do_sys_openat2+0x10/0x10
[  177.583130][ T7554]  __x64_sys_openat+0x174/0x210
[  177.583159][ T7554]  ? __pfx___x64_sys_openat+0x10/0x10
[  177.583201][ T7554]  do_syscall_64+0xcd/0x490
[  177.583249][ T7554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.583275][ T7554] RIP: 0033:0x7f246158e929
[  177.583296][ T7554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  177.583319][ T7554] RSP: 002b:00007f2462330038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  177.583344][ T7554] RAX: ffffffffffffffda RBX: 00007f24617b6080 RCX: 00007f246158e929
[  177.583361][ T7554] RDX: 0000000000000440 RSI: 0000200000000280 RDI: ffffffffffffff9c
[  177.583378][ T7554] RBP: 00007f2461610b39 R08: 0000000000000000 R09: 0000000000000000
[  177.583392][ T7554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  177.583406][ T7554] R13: 0000000000000000 R14: 00007f24617b6080 R15: 00007ffc61b138a8
[  177.583441][ T7554]  </TASK>
[  193.770271][ T7861] kafs: addr_prefs: Invalid Command
[  194.215743][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  194.222165][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  200.428286][ T6745] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  200.429180][ T6745] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  200.429949][ T6745] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  200.441048][ T6745] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  200.441677][ T6745] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  201.002485][ T7984] chnl_net:caif_netlink_parms(): no params data found
[  201.297928][ T7984] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.307591][ T7984] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.315277][ T7984] bridge_slave_0: entered allmulticast mode
[  201.323553][ T7984] bridge_slave_0: entered promiscuous mode
[  201.332324][ T7984] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.362863][ T7984] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.370172][ T7984] bridge_slave_1: entered allmulticast mode
[  201.564863][ T7984] bridge_slave_1: entered promiscuous mode
[  201.807311][ T7984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.821919][ T7984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  201.883546][ T7984] team0: Port device team_slave_0 added
[  201.895019][ T7984] team0: Port device team_slave_1 added
[  201.984257][ T7984] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.991471][ T7984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.050186][ T7984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  202.064560][ T7984] batman_adv: batadv0: Adding interface: batadv_slave_1
[  202.085119][ T7984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.183242][ T7984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.316934][ T7984] hsr_slave_0: entered promiscuous mode
[  202.327787][ T7984] hsr_slave_1: entered promiscuous mode
[  202.411404][ T7984] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  202.456634][ T7984] Cannot create hsr debugfs directory
[  202.533830][ T6745] Bluetooth: hci4: command tx timeout
[  203.130007][ T7984] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  203.191913][ T7984] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  203.266665][ T7984] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  203.316817][ T7984] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  203.749236][ T7984] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.780862][ T7984] 8021q: adding VLAN 0 to HW filter on device team0
[  203.812284][ T6726] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.819418][ T6726] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.848827][ T6726] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.856046][ T6726] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.578428][ T7984] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.613842][ T7165] Bluetooth: hci4: command tx timeout
[  205.262318][ T7984] veth0_vlan: entered promiscuous mode
[  205.278285][ T7984] veth1_vlan: entered promiscuous mode
[  205.331680][ T7984] veth0_macvtap: entered promiscuous mode
[  205.346124][ T7984] veth1_macvtap: entered promiscuous mode
[  205.374525][ T7984] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.392870][ T7984] batman_adv: batadv0: Interface activated: batadv_slave_1
[  205.411068][ T7984] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.427451][ T7984] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.437114][ T7984] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.446427][ T7984] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.594732][ T6913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.615305][ T6913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.674358][ T6726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.693222][ T6726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.693330][ T7165] Bluetooth: hci4: command tx timeout
[  207.298842][ T8089] kafs: addr_prefs: Invalid Command
[  208.773165][ T7165] Bluetooth: hci4: command tx timeout
[  210.458041][ T8142] kafs: addr_prefs: Invalid Command
[  212.022175][ T8177] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13
[  212.431694][ T8178] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14
[  215.787660][ T8242] kafs: addr_prefs: Invalid Command
[  218.014183][ T8265] kafs: addr_prefs: Invalid Command
[  219.025420][ T8296] kafs: addr_prefs: Invalid Command
[  219.194577][ T8294] kafs: addr_prefs: Invalid Command
[  221.498066][ T8322] kafs: addr_prefs: Invalid Command
[  222.394770][ T8333] kafs: addr_prefs: Invalid Command
[  223.823987][ T8363] kafs: addr_prefs: Invalid Command
[  225.575608][ T8383] kafs: addr_prefs: Invalid Command
[  226.718632][ T8413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  228.342265][ T8445] kafs: addr_prefs: Invalid Command
[  228.369477][ T8447] kafs: addr_prefs: Invalid Command
[  231.652032][ T8498] kafs: addr_prefs: Invalid Command
[  232.849602][ T6745] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  232.885903][ T6745] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  232.894099][ T6745] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  232.915552][ T6745] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  232.923990][ T6745] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  234.172129][ T8536] kafs: addr_prefs: Invalid Command
[  234.202568][ T8532] chnl_net:caif_netlink_parms(): no params data found
[  234.465010][ T8532] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.495189][ T8532] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.502529][ T8532] bridge_slave_0: entered allmulticast mode
[  234.532534][ T8532] bridge_slave_0: entered promiscuous mode
[  234.556186][ T8532] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.563566][ T8532] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.570843][ T8532] bridge_slave_1: entered allmulticast mode
[  234.595805][ T8532] bridge_slave_1: entered promiscuous mode
[  234.682651][ T8532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  234.905172][ T8532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.028874][ T6745] Bluetooth: hci5: command tx timeout
[  235.048489][ T8532] team0: Port device team_slave_0 added
[  235.059104][ T8532] team0: Port device team_slave_1 added
[  235.108848][ T8532] batman_adv: batadv0: Adding interface: batadv_slave_0
[  235.115971][ T8532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.142453][ T8532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  235.156372][ T8532] batman_adv: batadv0: Adding interface: batadv_slave_1
[  235.163396][ T8532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.202097][ T8532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  235.250448][ T8577] kafs: addr_prefs: Invalid Command
[  235.311403][ T8532] hsr_slave_0: entered promiscuous mode
[  235.321214][ T8532] hsr_slave_1: entered promiscuous mode
[  235.328606][ T8532] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  235.336921][ T8532] Cannot create hsr debugfs directory
[  235.961602][ T8532] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  235.997132][ T8532] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  236.026249][ T8532] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  236.045994][ T8532] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  236.584242][ T8532] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.676279][ T8532] 8021q: adding VLAN 0 to HW filter on device team0
[  236.780807][ T6740] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.787943][ T6740] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.161460][ T6745] Bluetooth: hci5: command tx timeout
[  237.179272][ T6726] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.186488][ T6726] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.830874][ T8532] 8021q: adding VLAN 0 to HW filter on device batadv0
[  238.364604][ T8532] veth0_vlan: entered promiscuous mode
[  238.428511][ T8532] veth1_vlan: entered promiscuous mode
[  238.630672][ T8532] veth0_macvtap: entered promiscuous mode
[  238.658811][ T8532] veth1_macvtap: entered promiscuous mode
[  238.715840][ T8532] batman_adv: batadv0: Interface activated: batadv_slave_0
[  238.747011][ T8532] batman_adv: batadv0: Interface activated: batadv_slave_1
[  238.805274][ T8532] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  238.814622][ T8532] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.833482][ T8532] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.864174][ T8532] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  239.173563][ T6745] Bluetooth: hci5: command tx timeout
[  239.207085][ T6723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.225236][ T6723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.392137][ T6914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.445858][ T6914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.988934][ T8667] kafs: addr_prefs: Invalid Command
[  241.253396][ T6745] Bluetooth: hci5: command tx timeout
[  242.513336][ T8694] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15
[  242.840532][ T8697] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16
[  250.344056][ T8830] kafs: addr_prefs: Invalid Command
[  250.417437][ T8836] kafs: addr_prefs: Invalid Command
[  252.775380][ T8869] kafs: addr_prefs: Invalid Command
[  253.309261][ T8874] kafs: addr_prefs: Invalid Command
[  255.161862][ T8902] kafs: addr_prefs: Invalid Command
[  255.250217][ T7165] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  255.258905][ T7165] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  255.268408][ T7165] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  255.281849][ T7165] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  255.290607][ T7165] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  255.663343][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  255.669700][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  255.904206][ T8910] chnl_net:caif_netlink_parms(): no params data found
[  255.978671][ T8910] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.988591][ T8910] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.996244][ T8910] bridge_slave_0: entered allmulticast mode
[  256.004197][ T8910] bridge_slave_0: entered promiscuous mode
[  256.012121][ T8910] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.019758][ T8910] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.027070][ T8910] bridge_slave_1: entered allmulticast mode
[  256.034530][ T8910] bridge_slave_1: entered promiscuous mode
[  256.067758][ T8910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  256.112887][ T8910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  256.163735][ T8910] team0: Port device team_slave_0 added
[  256.174156][ T8910] team0: Port device team_slave_1 added
[  256.206699][ T8910] batman_adv: batadv0: Adding interface: batadv_slave_0
[  256.214036][ T8910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.240891][ T8910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  256.266491][ T8910] batman_adv: batadv0: Adding interface: batadv_slave_1
[  256.273548][ T8910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.318903][ T8910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  256.392408][ T8910] hsr_slave_0: entered promiscuous mode
[  256.408935][ T8910] hsr_slave_1: entered promiscuous mode
[  256.419358][ T8910] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  256.431542][ T8910] Cannot create hsr debugfs directory
[  256.945315][ T8910] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  256.973717][ T8910] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  256.983588][ T8910] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  257.020024][ T8910] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  257.285053][ T8910] 8021q: adding VLAN 0 to HW filter on device bond0
[  257.334425][ T7165] Bluetooth: hci6: command tx timeout
[  257.349222][ T8910] 8021q: adding VLAN 0 to HW filter on device team0
[  257.387245][ T6913] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.394454][ T6913] bridge0: port 1(bridge_slave_0) entered forwarding state
[  257.412223][ T6913] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.419417][ T6913] bridge0: port 2(bridge_slave_1) entered forwarding state
[  258.011493][ T8910] 8021q: adding VLAN 0 to HW filter on device batadv0
[  258.537537][ T8910] veth0_vlan: entered promiscuous mode
[  258.580020][ T8910] veth1_vlan: entered promiscuous mode
[  258.659787][ T8910] veth0_macvtap: entered promiscuous mode
[  258.671336][ T8910] veth1_macvtap: entered promiscuous mode
[  258.717773][ T8910] batman_adv: batadv0: Interface activated: batadv_slave_0
[  258.736906][ T8910] batman_adv: batadv0: Interface activated: batadv_slave_1
[  258.758444][ T8910] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  258.767693][ T8910] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  258.777935][ T8910] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  258.787592][ T8910] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  258.895490][ T6723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  258.921395][ T6723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.971662][ T6723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  258.981831][ T6723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  259.380831][ T8978] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17
[  259.416145][ T7165] Bluetooth: hci6: command tx timeout
[  259.761693][ T8982] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18
[  261.582825][ T7165] Bluetooth: hci6: command tx timeout
[  263.733155][ T6745] Bluetooth: hci6: command tx timeout
[  263.830436][ T9048] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19
[  264.192433][ T9049] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20
[  265.165310][ T9060] kafs: addr_prefs: Invalid Command
[  265.383238][ T7165] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  265.394286][ T7165] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  265.401960][ T7165] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  265.413883][ T7165] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  265.421455][ T7165] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  265.939992][ T9064] chnl_net:caif_netlink_parms(): no params data found
[  266.047338][ T9064] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.058987][ T9064] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.079136][ T9064] bridge_slave_0: entered allmulticast mode
[  266.088272][ T9064] bridge_slave_0: entered promiscuous mode
[  266.113547][ T9064] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.128772][ T9064] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.139074][ T9064] bridge_slave_1: entered allmulticast mode
[  266.240027][ T9064] bridge_slave_1: entered promiscuous mode
[  266.416171][ T9064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  266.435456][ T9064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  266.607212][ T9064] team0: Port device team_slave_0 added
[  266.619874][ T9064] team0: Port device team_slave_1 added
[  266.732619][ T9064] batman_adv: batadv0: Adding interface: batadv_slave_0
[  266.753265][ T9064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  266.779156][    C1] vkms_vblank_simulate: vblank timer overrun
[  266.797508][ T9064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  266.833040][ T9064] batman_adv: batadv0: Adding interface: batadv_slave_1
[  266.842141][ T9064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  266.873098][ T9064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  266.983006][ T9064] hsr_slave_0: entered promiscuous mode
[  266.989494][ T9064] hsr_slave_1: entered promiscuous mode
[  266.997789][ T9064] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  267.005877][ T9064] Cannot create hsr debugfs directory
[  267.153408][ T9064] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  267.164220][ T9064] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  267.174597][ T9064] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  267.187201][ T9064] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  267.293997][ T9064] 8021q: adding VLAN 0 to HW filter on device bond0
[  267.315124][ T9064] 8021q: adding VLAN 0 to HW filter on device team0
[  267.328655][ T6726] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.335845][ T6726] bridge0: port 1(bridge_slave_0) entered forwarding state
[  267.357654][ T6726] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.364764][ T6726] bridge0: port 2(bridge_slave_1) entered forwarding state
[  267.492991][ T7165] Bluetooth: hci7: command tx timeout
[  267.546627][ T9064] 8021q: adding VLAN 0 to HW filter on device batadv0
[  267.770638][ T9064] veth0_vlan: entered promiscuous mode
[  267.781466][ T9064] veth1_vlan: entered promiscuous mode
[  267.810109][ T9064] veth0_macvtap: entered promiscuous mode
[  267.820206][ T9064] veth1_macvtap: entered promiscuous mode
[  267.838587][ T9064] batman_adv: batadv0: Interface activated: batadv_slave_0
[  267.853383][ T9064] batman_adv: batadv0: Interface activated: batadv_slave_1
[  267.866945][ T9064] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  267.876417][ T9064] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  267.885399][ T9064] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  267.894873][ T9064] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  267.965773][ T6738] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.990487][ T6738] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.022194][ T6726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.031306][ T6726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.257439][ T9115] kafs: addr_prefs: Invalid Command
[  269.573114][ T7165] Bluetooth: hci7: command tx timeout
[  271.657039][ T7165] Bluetooth: hci7: command tx timeout
[  273.734287][ T7165] Bluetooth: hci7: command tx timeout
[  283.813281][   T31] INFO: task kworker/u10:0:6718 blocked for more than 143 seconds.
[  283.821231][   T31]       Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0
[  283.841937][ T6745] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  283.855056][ T6745] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  283.872969][ T6745] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  283.890824][ T6745] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  283.898646][ T6745] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  284.030236][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  284.126909][   T31] task:kworker/u10:0   state:D stack:26952 pid:6718  tgid:6718  ppid:2      task_flags:0x4208060 flags:0x00004000
[  284.323002][   T31] Workqueue: netns cleanup_net
[  284.327852][   T31] Call Trace:
[  284.331157][   T31]  <TASK>
[  284.339072][   T31]  __schedule+0x116a/0x5de0
[  284.345959][ T9134] kafs: addr_prefs: Invalid Command
[  284.370501][   T31]  ? __lock_acquire+0x622/0x1c90
[  284.423719][   T31]  ? __pfx___schedule+0x10/0x10
[  284.428665][   T31]  ? find_held_lock+0x2b/0x80
[  284.488626][   T31]  ? schedule+0x2d7/0x3a0
[  284.493170][   T31]  schedule+0xe7/0x3a0
[  284.497502][   T31]  schedule_timeout+0x257/0x290
[  284.502395][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  284.508488][   T31]  ? mark_held_locks+0x49/0x80
[  284.513477][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  284.518713][   T31]  __wait_for_common+0x2ff/0x4e0
[  284.524156][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  284.529572][   T31]  ? __pfx___wait_for_common+0x10/0x10
[  284.535372][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  284.540616][   T31]  ? flush_workqueue_prep_pwqs+0x2e9/0x510
[  284.546827][   T31]  __flush_workqueue+0x3e2/0x1230
[  284.552028][   T31]  ? __pfx___flush_workqueue+0x10/0x10
[  284.560734][   T31]  ? reacquire_held_locks+0xcd/0x1f0
[  284.566144][   T31]  ? __pfx_sock_def_readable+0x10/0x10
[  284.571625][   T31]  ? __pfx_sock_def_readable+0x10/0x10
[  284.577239][   T31]  rds_tcp_listen_stop+0x104/0x150
[  284.582377][   T31]  ? __pfx_rds_tcp_exit_net+0x10/0x10
[  284.588051][   T31]  rds_tcp_exit_net+0xcb/0x810
[  284.594049][   T31]  ? __pfx_rds_tcp_exit_net+0x10/0x10
[  284.599458][   T31]  ? __pfx___might_resched+0x10/0x10
[  284.604822][   T31]  ? __pfx_rds_tcp_exit_net+0x10/0x10
[  284.610221][   T31]  ops_undo_list+0x2eb/0xab0
[  284.614930][   T31]  ? __pfx_ops_undo_list+0x10/0x10
[  284.620062][   T31]  ? __local_bh_enable_ip+0xa4/0x120
[  284.625394][   T31]  cleanup_net+0x408/0x890
[  284.629823][   T31]  ? __pfx_cleanup_net+0x10/0x10
[  284.634834][   T31]  ? rcu_is_watching+0x12/0xc0
[  284.639626][   T31]  process_one_work+0x9cc/0x1b70
[  284.644685][   T31]  ? __pfx_process_one_work+0x10/0x10
[  284.650103][   T31]  ? assign_work+0x1a0/0x250
[  284.654761][   T31]  worker_thread+0x6c8/0xf10
[  284.661350][   T31]  ? __pfx_worker_thread+0x10/0x10
[  284.666569][   T31]  kthread+0x3c5/0x780
[  284.670658][   T31]  ? __pfx_kthread+0x10/0x10
[  284.675283][   T31]  ? rcu_is_watching+0x12/0xc0
[  284.680059][   T31]  ? __pfx_kthread+0x10/0x10
[  284.684687][   T31]  ret_from_fork+0x5d4/0x6f0
[  284.689297][   T31]  ? __pfx_kthread+0x10/0x10
[  284.698932][   T31]  ret_from_fork_asm+0x1a/0x30
[  284.704057][   T31]  </TASK>
[  284.752810][   T31] 
[  284.752810][   T31] Showing all locks held in the system:
[  284.762221][   T31] 3 locks held by kworker/1:0/24:
[  284.772730][   T31]  #0: ffff88801b880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  284.832787][   T31]  #1: ffffc900001e7d10 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  284.852548][   T31]  #2: ffffffff8e5cfdb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0
[  284.925017][   T31] 1 lock held by khungtaskd/31:
[  284.929911][   T31]  #0: ffffffff8e5c47c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  284.962789][   T31] 2 locks held by getty/6190:
[  284.969218][   T31]  #0: ffff88814ca2b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  284.986395][   T31]  #1: ffffc90004a5b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[  284.996851][   T31] 3 locks held by kworker/u10:0/6718:
[  285.002213][   T31]  #0: ffff88801c6fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  285.013524][   T31]  #1: ffffc90004be7d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  285.041173][   T31]  #2: ffffffff90338250 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890
[  285.050900][   T31] 2 locks held by kworker/u10:3/6738:
[  285.056569][   T31]  #0: ffff8880b843a418 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[  285.066576][   T31]  #1: ffff8880b8424088 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0
[  285.079815][   T31] 2 locks held by kworker/u10:8/6913:
[  285.085250][   T31]  #0: ffff8881404ef948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  285.096137][   T31]  #1: ffffc90002ff7d10 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  285.107718][   T31] 1 lock held by syz.1.354/7727:
[  285.112686][   T31]  #0: ffffffff90338250 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0
[  285.122124][   T31] 1 lock held by syz.0.461/8271:
[  285.127094][   T31]  #0: ffffffff90338250 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0
[  285.136578][   T31] 1 lock held by syz.3.538/8660:
[  285.141498][   T31]  #0: ffffffff90338250 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0
[  285.150923][   T31] 1 lock held by syz.4.568/8832:
[  285.155896][   T31]  #0: ffffffff90338250 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0
[  285.165347][   T31] 5 locks held by syz-executor/8910:
[  285.172615][   T31]  #0: ffff88805801cd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90
[  285.182400][   T31]  #1: ffff88805801c078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0
[  285.192244][   T31]  #2: ffffffff905bf988 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260
[  285.202334][   T31]  #3: ffff888022bcb338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730
[  285.211690][   T31]  #4: ffffffff8e5cfdb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0
[  285.221773][   T31] 1 lock held by syz.7.613/9120:
[  285.226753][   T31]  #0: ffffffff90338250 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0
[  285.236221][   T31] 2 locks held by syz-executor/9141:
[  285.241493][   T31]  #0: ffffffff90338250 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0
[  285.251016][   T31]  #1: ffffffff9034e2a8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0
[  285.260332][   T31] 
[  285.314110][   T31] =============================================
[  285.314110][   T31] 
[  285.350686][   T31] NMI backtrace for cpu 0
[  285.350706][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) 
[  285.350733][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  285.350745][   T31] Call Trace:
[  285.350753][   T31]  <TASK>
[  285.350761][   T31]  dump_stack_lvl+0x116/0x1f0
[  285.350798][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  285.350822][   T31]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[  285.350852][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  285.350880][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  285.350909][   T31]  watchdog+0xf70/0x12c0
[  285.350945][   T31]  ? __pfx_watchdog+0x10/0x10
[  285.350973][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  285.351005][   T31]  ? __kthread_parkme+0x19e/0x250
[  285.351032][   T31]  ? __pfx_watchdog+0x10/0x10
[  285.351062][   T31]  kthread+0x3c5/0x780
[  285.351091][   T31]  ? __pfx_kthread+0x10/0x10
[  285.351122][   T31]  ? rcu_is_watching+0x12/0xc0
[  285.351142][   T31]  ? __pfx_kthread+0x10/0x10
[  285.351171][   T31]  ret_from_fork+0x5d4/0x6f0
[  285.351198][   T31]  ? __pfx_kthread+0x10/0x10
[  285.351225][   T31]  ret_from_fork_asm+0x1a/0x30
[  285.351262][   T31]  </TASK>
[  285.351272][   T31] Sending NMI from CPU 0 to CPUs 1:
[  285.479211][    C1] NMI backtrace for cpu 1
[  285.479228][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) 
[  285.479258][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  285.479271][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  285.479309][    C1] Code: 4b 75 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 5e 2d 00 fb f4 <e9> 0c fb 02 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  285.479331][    C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2
[  285.479350][    C1] RAX: 00000000001e9a07 RBX: 0000000000000001 RCX: ffffffff8b7cac29
[  285.479365][    C1] RDX: 0000000000000000 RSI: ffffffff8de13876 RDI: ffffffff8c1565a0
[  285.479380][    C1] RBP: ffffed1003cd7b40 R08: 0000000000000001 R09: ffffed10170a6645
[  285.479395][    C1] R10: ffff8880b853322b R11: 0000000000000001 R12: 0000000000000001
[  285.479410][    C1] R13: ffff88801e6bda00 R14: ffffffff90a82d50 R15: 0000000000000000
[  285.479425][    C1] FS:  0000000000000000(0000) GS:ffff888124860000(0000) knlGS:0000000000000000
[  285.479447][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  285.479462][    C1] CR2: 00007ffdbdbb1fb4 CR3: 00000000328d4000 CR4: 00000000003526f0
[  285.479477][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  285.479490][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  285.479504][    C1] Call Trace:
[  285.479512][    C1]  <TASK>
[  285.479519][    C1]  default_idle+0x13/0x20
[  285.479541][    C1]  default_idle_call+0x6d/0xb0
[  285.479563][    C1]  do_idle+0x391/0x510
[  285.479588][    C1]  ? __pfx_do_idle+0x10/0x10
[  285.479611][    C1]  ? trace_sched_exit_tp+0x31/0x130
[  285.479640][    C1]  cpu_startup_entry+0x4f/0x60
[  285.479663][    C1]  start_secondary+0x21d/0x2b0
[  285.479691][    C1]  ? __pfx_start_secondary+0x10/0x10
[  285.479721][    C1]  common_startup_64+0x13e/0x148
[  285.479765][    C1]  </TASK>
[  285.782409][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  285.789317][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) 
[  285.801139][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  285.811199][   T31] Call Trace:
[  285.814477][   T31]  <TASK>
[  285.817408][   T31]  dump_stack_lvl+0x3d/0x1f0
[  285.822023][   T31]  panic+0x71c/0x800
[  285.825936][   T31]  ? __pfx___irq_work_queue_local+0x10/0x10
[  285.831843][   T31]  ? __pfx_panic+0x10/0x10
[  285.836266][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  285.841649][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  285.847644][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  285.853029][   T31]  ? watchdog+0xdda/0x12c0
[  285.857453][   T31]  ? watchdog+0xdcd/0x12c0
[  285.861883][   T31]  watchdog+0xdeb/0x12c0
[  285.866155][   T31]  ? __pfx_watchdog+0x10/0x10
[  285.870843][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  285.876052][   T31]  ? __kthread_parkme+0x19e/0x250
[  285.881085][   T31]  ? __pfx_watchdog+0x10/0x10
[  285.885774][   T31]  kthread+0x3c5/0x780
[  285.889856][   T31]  ? __pfx_kthread+0x10/0x10
[  285.894461][   T31]  ? rcu_is_watching+0x12/0xc0
[  285.899229][   T31]  ? __pfx_kthread+0x10/0x10
[  285.903831][   T31]  ret_from_fork+0x5d4/0x6f0
[  285.908430][   T31]  ? __pfx_kthread+0x10/0x10
[  285.913031][   T31]  ret_from_fork_asm+0x1a/0x30
[  285.917808][   T31]  </TASK>
[  285.921116][   T31] Kernel Offset: disabled
[  285.925439][   T31] Rebooting in 86400 seconds..