last executing test programs: 7.526663942s ago: executing program 3 (id=61): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffff004, 0x2) socket(0xa, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000825bd7040ffdbdf2509"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0x24044034) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000180), 0x1) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/sound/ctl-led/speaker/mode\x00', 0x2a001, 0x0) write$auto(r0, &(0x7f0000000040)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r1 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd, r2, 0x8, 0xff, r1, @relative_fd, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x1}, 0x4) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xb) 7.370325106s ago: executing program 0 (id=63): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYBLOB="1200", @ANYRESHEX=r0], 0x1ac}}, 0x40000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time\x00') recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xffffbff9, 0x10, 0x0) r2 = io_uring_setup$auto(0x999, 0x0) mmap$auto(0x4, 0x400008, 0xa, 0x9b72, 0xffffffffffffffff, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r3 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x1a3) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) accept$auto(r2, 0x0, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r4, &(0x7f0000000580)="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", 0x817) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) 7.168098855s ago: executing program 3 (id=65): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nbd6/queue/iosched/prio_aging_expire\x00', 0x88282, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x11, 0x800, 0xfffffffc) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r0, &(0x7f0000000080)=@isdn={0x22, 0x4, 0x7, 0x2, 0x8}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/tracing_cpumask\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x101001, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) write$auto(r1, &(0x7f0000000280)='\x04>\x01\x01\x00J:\xdd\xfc\xb6\xc6\x0f\xaf\xe3\x0f\xd1V\xb1yz\\\xa6\xed\ag+\xa3p(\xc7\x1b\xdc7\x1b\xc4TM}\xce\x90\xfa9\x957\xec\xd8\xe0TC\x86\xad\xe1G\xc7\xd4\x96\x12h\x84;Y\xe2\x03i\xa1)`\n\xc3\xfeR\x06\x03\xf5/@\xf0\'\xb9\xdf\xe1\xef\v\x19B\xc0\xe2\xac\xa5^\x01\x00\x00\x00\x00\x00\x00\x00\b\xdc\xc3),=1\b\x05\x9d\x82\xd4\'\xe8\xfe\xfd\x9a\x9f\x00\x00\x00\x00\x00\x00\x00\x00', 0x8000007f) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) socket(0x2, 0x3, 0x100) r2 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000005dc0)='/proc/self/ns/cgroup\x00', 0x800, 0x0) open_by_handle_at$auto(r2, &(0x7f0000000000)={0x14, 0xf1, "00d4985d36aefd7f0f5a6614130000cb40ef4d15"}, 0x7562) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mlockall$auto(0x7) munlock$auto(0x2, 0x200c06e) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x16fa02, 0x0) 6.866995437s ago: executing program 1 (id=66): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) mmap$auto(0x0, 0x5, 0xfffffffffffffff4, 0x40eb6, r1, 0x300000000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, 0x0) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) r3 = socket(0x2, 0x1, 0x0) setsockopt$auto(r3, 0x6, 0x12, 0x0, 0x40) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = io_uring_setup$auto(0x8, 0x0) ioctl$auto_SNAPSHOT_GET_IMAGE_SIZE(r5, 0x8008330e, &(0x7f0000000040)=0xbe1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x81, 0x8000000000001, 0xa}, 0xb, 0x0) landlock_restrict_self$auto(r4, 0x8) 6.484795361s ago: executing program 1 (id=67): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x1, 0xeb5, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/pagemap\x00', 0x282881, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x9, 0x3, 0x2}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/filesystems\x00', 0x1ca102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000040)=""/172, 0xac) sync_file_range$auto(0xffffffffffffffff, 0x1, 0xa31e, 0x7) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) timer_create$auto(0x9, 0x0, 0x0) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) write$auto(0x3, 0x0, 0x100082) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x4d, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r2, 0x540a, 0x0) socket(0xa, 0x5, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/ip6_mr_cache\x00', 0x1900, 0x0) pread64$auto(r3, 0x0, 0xe, 0x100000000007) timer_create$auto(0x0, 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/blkio.bfq.time_recursive\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x7, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x10, &(0x7f0000000180)={0x7, 0x1, 0xb9, 0xd, 0x18da, 0x3, r2, [0x6, 0x7, 0x2], {0xff, 0x1ffe00, 0x75, 0x6, 0x2, 0x800, 0xf, 0x7db, 0x8}, {0x7, 0x80000000, 0xa99, 0x8001, 0x4, 0x7, 0x3, 0x9, 0x3}}) unshare$auto(0x40000080) 6.240118535s ago: executing program 0 (id=68): close_range$auto(0x2, 0xa, 0x0) r0 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media11\x00', 0x40, 0x0) ioctl$auto_media_devnode_fops_mc_devnode(r0, 0x80047c05, 0x0) r1 = socket(0x23, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.0/usb1/power/wakeup_max_time_ms\x00', 0x0, 0x0) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f00000001c0)=0x2) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x80) syz_clone(0x21821400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x40, 0xffffffffffff0005, 0x17) ioctl$auto(0x3, 0x80000541b, 0xffffffffffffffff) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyp1\x00', 0x0, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b29429b", 0x6) r3 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) getdents64$auto(r3, &(0x7f0000000100)={0x0, 0x6, 0x9, 0xf, "af06b6981eef5e801bb6731818b532e72fcbe1a6d4ccc15e334c481687a98769aa1f7aa96990c3ce4f0c81325270cc48fdf1e512436e1dfdf0a833a360c76f3d456901121d9a049bd3c79eeca7b4f5945396fb41685c3bab127cbcefaa89bfaef07e5911622b949978ad194bbe4bdad53ec8b28f3929bb2fbfa9dcbddd3650774b6334c2cf6e59aa858560d66220fdec208eabbb64f10b4f629e0c5eb59912741dee"}, 0xea) 5.990202501s ago: executing program 3 (id=69): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x69) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) r2 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x6, 0x0, 0x7, 0x1}, 0x3}, 0x4, 0x20000000) read$auto_ep0_operations_inode(r0, 0x0, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x8) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x890) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) io_uring_setup$auto(0x6, 0x0) bind$auto(0x3, 0x0, 0x6a) unshare$auto(0x40000080) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r3, &(0x7f0000000040)="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", 0x2f8) ioctl$auto_SNDCTL_SEQ_SYNC(r3, 0x5101, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1b, 0x0, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) faccessat$auto(0xffffffffffffffff, 0x0, 0x4) 5.847561567s ago: executing program 0 (id=70): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40043d04, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:09/sun\x00', 0xa0200, 0x0) pread64$auto(r2, 0x0, 0x6, 0x40008) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0xffffffffffffffff, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1e, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_ADVISE(r3, 0x2, &(0x7f0000000040)=',%!/-%,\x00', &(0x7f0000000080), 0x3) r4 = socket(0x2, 0xa, 0x5) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x10002, 0x0) r5 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0x9, 0x1, r0, 0x6, 0x2) r6 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/current_tracer\x00', 0x8000, 0x0) timerfd_settime$auto(r6, 0xff, &(0x7f0000000240)={{0x7fffffff, 0xffffffffffffffff}, {0x1, 0xfffffffffffffff8}}, &(0x7f0000000280)={{0x6, 0xb382}, {0x5, 0xbd78}}) ioctl$auto_FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, &(0x7f0000000180)="2e5e3391df647f84bf456362b81852ae") getsockopt$auto_SO_TXREHASH(r4, 0x1, 0x4a, 0x0, &(0x7f0000000080)=0x9) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) msgrcv$auto(0x0, 0x0, 0x4, 0x9, 0x3) msgctl$auto(0x0, 0x1, 0x0) r7 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000040), 0x202402, 0x0) preadv2$auto(r7, &(0x7f0000000140)={&(0x7f00000000c0)="48bb4bd4af61a7cd986362a83404e7d7ea1518a9f255d31f44353ca8988cf473b2dbc0488681944bf094d573c658348df88b5321d0399032294f9062406e89ea6c471d9fd389ab56d5945c14e402ad6da5371e27fcb46f447679dac4c277ca270853e22dd8324f63912bee854d135d206c4e51564720436b816b", 0x7}, 0x2, 0x91b, 0x8f8, 0x3) 5.591844493s ago: executing program 2 (id=71): mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYBLOB="6a0051b1"], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1008, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_ILA_CMD_FLUSH(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x204, 0x70bd2c, 0x25dfdbfb, {}, [@ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x5}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x8000}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x10}, @ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x3ff}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x80}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f0000000140)) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) r4 = socket(0x2, 0x1, 0x106) r5 = openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f0000000340), 0x410000, 0x0) ioctl$auto_userfaultfd_dev_fops_userfaultfd(r5, 0x100000000, &(0x7f0000000380)="8ce648c45339b6d73512a5b1432d5881b0aacdcfc57e7281b7e5b1605c0aa905c6cb8a88fc3764464010957c09f29ed5a33036175fd7dafba9373d3b600c765bc1e2899c514722323cf62cf319a8ae1a5662682f0d913a329c883f03f588930e505a2e4b4f68") connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video40\x00', 0x101, 0x0) ioctl$auto(r7, 0xc0485619, r6) 5.424962195s ago: executing program 1 (id=72): r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$auto_RTC_AIE_ON(r0, 0x7001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r2 = semctl$auto(0x0, 0xc5, 0x6, 0xaa) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, 0x0) unshare$auto(0x40000080) setfsuid$auto(0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000040)=0x5) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x123801, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000009c0)={{@inferred=r2, 0xd252, 0x9, 0x2, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00"}, 0x4, 0x2000963, 0x2, @inferred=r2, @reserved="b20200a3077300f2c167afeb0a9902da3d58908ea1a8475fbd3a75d4690e48fc922df5fdffffffffffffffdbb68aec3f51e29bc18b59d74badbdcc1ba97a2004117190c9a050186fa73f5a197762a94460d134b357b8b4d0caaf1ca142917779cef3673ee57f2f5fde573fa4d4328a8ea0be7eccec0adb4f64290e53d4faa89d", "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1cb04b435b3fcd0c7c61c329794e5311121c760cb9611c78e6947a99806bcc100"}) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r4, 0xc008551c, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000100), r1) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="310026bd7400fddbdf250300000004006d7e4847993b3d08000c000380080006800400058012000100898771f1c19f17790485908286"], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc000) r7 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) execveat$auto(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x11000) msgctl$auto_MSG_INFO(0x47, 0xc, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r7, 0x4018aee2, &(0x7f00000003c0)={0x5, 0xffffffffffffffff, 0x3, 0x81}) r9 = getpid() process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0x8000fff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x9, 0x0) msgctl$auto_MSG_STAT(0x1, 0xb, &(0x7f0000000480)={{0xc04, 0x0, r8, 0x7a1d5b7c, 0x4, 0x5, 0xc8}, &(0x7f0000000400)=0x80, &(0x7f0000000440)=0xf, 0x10000, 0x1, 0x4, 0xffffffffffffffff, 0x9, 0x8001, 0x1, 0x8000, @inferred=r9, @raw=0x2}) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={0x0, 0x4dc}, 0x1, 0x0, 0x0, 0x24040000}, 0x800c0) 4.950020736s ago: executing program 2 (id=73): close_range$auto(0x2, 0xa, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x80000, 0x0) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0xff04, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, r0, 0x2, 0x8}, 0x100000cf) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x123002, 0x0) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x12b743, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x367}, 0x6) epoll_create$auto(0x40003b) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x2, 0xfd) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/sound/ctl-led/speaker/card0/list\x00', 0x400, 0x0) mount$auto(0x0, 0x0, &(0x7f00000001c0)='abs\x00', 0x5, 0x0) r2 = socket(0x29, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r2, 0x89f0, 0x24) ioctl$auto(r0, 0x89f1, 0x24) r4 = waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000280)={@siginfo_0_0={0x3, 0xfffffffb, 0x6, @_kill={0xffffffffffffffff, 0xffffffffffffffff}}}, 0x6, &(0x7f0000000300)={{0x8, 0x100000001}, {0x0, 0x5}, 0x100000000, 0x97, 0x3, 0x7, 0x5, 0x5, 0x8000000000000000, 0x80000000, 0x200, 0xd, 0x10, 0x200, 0x3, 0x3}) waitid$auto_P_PID(0x1, r4, &(0x7f00000003c0)={@_si_pad}, 0x3, &(0x7f0000000440)={{0xb, 0x584f}, {0x6, 0x1875}, 0xa59b, 0x0, 0x7, 0x14a3, 0xb7, 0x6, 0x81, 0x100, 0x8, 0x8, 0x8, 0x4, 0x7, 0xffffffffffffff44}) 4.498855254s ago: executing program 1 (id=74): r0 = socket(0x2, 0x1, 0x106) r1 = openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) read$auto_ep0_operations_inode(r1, &(0x7f0000000100)=""/5, 0x5) r2 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketcall$auto(0x2, &(0x7f0000000000)=0x5) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.pressure\x00', 0x42802, 0x0) setsockopt$auto(r2, 0x1, 0xb, 0x0, 0xeb66) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop11\x00', 0x20000, 0x0) ioctl$auto_BLKBSZGET(r3, 0x80081270, &(0x7f00000001c0)=0xbbc) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) shutdown$auto(0x200000003, 0x2) 3.947672185s ago: executing program 0 (id=75): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram15\x00', 0x14be02, 0x0) r1 = userfaultfd$auto(0x7ff) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280), 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@buf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r2 = clone3$auto(&(0x7f0000000000)={0x200, 0x5, 0x7, 0x2, 0x1, 0x87, 0x8, 0xb, 0x9, 0x2, 0xcb6}, 0xaa) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="13412abd7000a454d7dfcb8e00080000000600f5000400000000000c00000000000a002801ee69c976316f00"/60], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x44005) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd0, 0x0, 0x4) setsockopt$auto(r1, 0xf, 0xfff, &(0x7f0000000040)='\x00', 0x80000001) sendmsg$auto_NL80211_CMD_NEW_STATION(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x1}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, 0xa}, @NL80211_ATTR_PMK={0x3f, 0xfe, "bff30800d30f6a6cb3eed5f6530ec08c653dd81925a074d7a89354e32d2690eb2307393f215570831189b0c525a66e1341115ee91b0e2bce028564"}]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x20000000) r4 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/max_mmu_rmap_size\x00', 0xa2500, 0x0) read$auto_stat_fops_per_vm_kvm_main(r4, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mtdblock0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r5, 0x8000) mprotect$auto(0x1000, 0x401000, 0x5) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r7, 0x1, 0x7ff) ptrace$auto(0xf, r7, 0x9, 0xfffffffffffff6e2) ptrace$auto(0x10, r2, 0x1, 0x10000) ptrace$auto(0x4, r6, 0x1, 0x4) 3.882800602s ago: executing program 2 (id=76): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) getpid() set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x2, 0x1, 0x106) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) sendfile$auto(r2, r2, 0x0, 0x1) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x1, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7ff, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0x801f, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x4]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x4bd, 0x0, 0x1000, &(0x7f0000000040)=0x2) 3.06869251s ago: executing program 3 (id=77): ioctl$auto_RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x28, 0x5, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x20000040) read$auto(0x3, 0x0, 0x8080) unshare$auto(0x40000080) socket(0x2c, 0x1, 0x0) mmap$auto(0xffffffffffffffff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) umask$auto(0x7) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) ioctl$auto(r0, 0x2, r2) sendfile$auto(r2, r2, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xfffffffffffffffc, 0x4, 0xb, 0x10000040eb5, 0x402, 0x300000000000) get_mempolicy$auto(0x0, 0x0, 0xfffffffffffffffe, 0x99d6, 0x3) setsockopt$auto(0x3, 0x1, 0x2d, 0x0, 0x8) r3 = memfd_create$auto(0x0, 0x4) close_range$auto(r3, r3, 0xfffffffc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x3a) 3.013074584s ago: executing program 1 (id=78): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x8000400) socket(0x2b, 0x1, 0x0) r0 = socket(0x10, 0x2, 0xf) bpf$auto(0x0, &(0x7f0000000680)=@bpf_attr_4={0x1e, r0, 0x24000000, r0}, 0x210) socket(0x2, 0x3, 0xa) io_uring_setup$auto(0x1, 0x0) r1 = getpid() get_robust_list$auto(r1, &(0x7f0000000400)=0x0, &(0x7f0000000440)) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) fcntl$auto(0x0, 0x407, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) unshare$auto(0x40000080) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffee}, 0x1, 0x0, 0xe, 0x7}, 0x8}, 0xffffffff, 0x8) r2 = socket(0x2, 0x1, 0x0) ppoll$auto(&(0x7f0000000000)={r2, 0x4, 0x5}, 0x7, 0x0, 0x0, 0x8) setsockopt$auto(r3, 0x6, 0x13, 0x0, 0x9) madvise$auto(0x0, 0x2003f2, 0x15) 2.59682236s ago: executing program 0 (id=79): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd11\x00', 0x4ea02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) r1 = socket(0xa, 0x3, 0xfffff129) close$auto(r1) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0x0, 0x408) r2 = socketcall$auto_SYS_SOCKETPAIR(0x8, 0x0) mmap$auto(0x0, 0x2388, 0x4, 0x18, r0, 0x8000) ioctl$auto_TIOCGETD2(r2, 0x5424, &(0x7f00000000c0)="d4a922f9527adb91296b350d81ecdfb47013e5694596e86bb9c0bb7da0917bfc96089f6854e37ed1ae3d3f23db4bdb7a5e3f3f5e531ccb63187d1fae2221451bdc45f8b13bf9d33a0a7267fd9d3470b1732f5aae1fd2a1dc3955df05616ec65ffe0b64262dc223a5eba888c6e4b842c62d52fe0055e8e15543bfcbd82bb40ef1df886aee16a90f60376cb1a07f54d0d2b08bb4a7d2452f4a30101b37b1e93d55674a8495eb024e19a7c93f2f363089112eb02496b24f44d185880e1accfb4f00b7a0480d8a2b1144e839d5253c11cf946093ab36a38d7d65d5f121c800f2e0a108e8fc5508acc501b92f") syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000001c0)={@siginfo_0_0={0xffffffff, 0x401, 0x1, @_sigchld={0x0, 0x0, 0x2, 0x2d, 0xc91}}}, 0x5, &(0x7f0000000240)={{0xc4d, 0xffffffffffffff37}, {0x34, 0x5}, 0x5, 0x4, 0x8000, 0x7, 0x4, 0x1, 0x100000000f, 0x6, 0xf, 0x7f, 0x6, 0x5e97, 0xd, 0x5}) migrate_pages$auto(0x0, 0x8, &(0x7f0000000000)=0x4, &(0x7f0000000040)=0x3) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000300)=""/4096, 0x1000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/pnp0/00:02/resources\x00', 0x63102, 0x0) sendfile$auto(r2, r4, 0x0, 0x400000000006) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x80003, 0x304) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x5) ioctl$auto(r5, 0x4008af03, 0x0) io_uring_setup$auto(0x1, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r5, 0x4008af30, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x40009, 0x9, 0x9b72, 0x7, 0x28000) r6 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r6, 0x0, 0xfffffdf1) 1.438353218s ago: executing program 2 (id=80): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x88b02, 0x3f) close_range$auto(0x0, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x20200, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r0, &(0x7f0000000040)=""/4080, 0x1036) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)="b40c25fb561d", 0x6) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0xc048aeca, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) fallocate$auto(0x3, 0x0, 0xe, 0x8ec5) mmap$auto(0x0, 0x8000000000003, 0x1000000000001, 0x8000000008011, 0x3, 0x0) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci4/force_devcoredump\x00', 0x400102, 0x0) 1.220645191s ago: executing program 3 (id=81): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) ioctl$auto(0xffffffffffffffff, 0x1005, 0xffffffffffffffff) landlock_restrict_self$auto(0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000180)={0x8, r0}) write$auto_fb_fops_fb_chrdev(r1, &(0x7f0000000280)="abe6f4ec9a0419ef29eb", 0xa) read$auto(r0, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r3, 0x4c80, 0xfffffffffffffffd) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250400000014001a80ffff"], 0x28}, 0x1, 0x0, 0x0, 0x891}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x80402, 0x0) ioctl$auto_SNDCTL_DSP_GETOPTR(r4, 0x800c5012, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r5 = socket(0xa, 0x3, 0xff) connect$auto(r5, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000300)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc1}, 0x1, 0x0, 0x0, 0x109}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x8020009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r6 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, 0x0) 1.157798346s ago: executing program 0 (id=82): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x25, 0x1, 0x0) listen$auto(0x3, 0x81) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x8, 0x7]}, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r3 = socket(0x1, 0x5, 0x4) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000240), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=ANY=[@ANYBLOB="9c050000", @ANYRES16=0x0, @ANYBLOB="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"], 0x59c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="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", @ANYBLOB="80e99c0182a7df1c3a2f203df68e49529bd14884ca055a846ab4d87acdbde3cb6ba41c3f565a79a8c403287ec1c4f2f1e648d881a08180f91481450e2a036a464b61a7e81a2729a4263ec6a1a5b36e1563c8bbe81146e46f5dcac8d6acc59357ab07f25c571a040a054ef85c5e0dac77", @ANYRES32=r0, @ANYRES64=r2, @ANYRES64=r4, @ANYRES64, @ANYRES32=r1, @ANYRES16=r4, @ANYRESHEX=r3, @ANYRESHEX=r4], 0x14}}, 0x4000000) write$auto(0xffffffffffffffff, 0x0, 0x4f2a1400) write$auto(0x3, 0x0, 0xfffffdef) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) exit$auto(0x2) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x500, 0x0, 0xfffffffffffffffd) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/005/001\x00', 0x12081, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r5, 0x802c550a, &(0x7f0000000140)=ANY=[@ANYBLOB="04040000010400000900000007000000ffffff7f09000000fcffff7f03000000ff00000000000000020000000d000000ff010000040000000b0000007200000005000000080000000900000005000000010000000800000002000000008000000700000002000000dc0400000700000007000000000000000200000003000000060600006d00000008000000af8db31b1951e5e71f7159f57fc2200d382c96aa1a1588989f3beb07f6ee268c80335d64ec764021d8d26163676db6e87d612940071deb20ec1e21b4ff7ad1"]) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) socket(0x2, 0x1, 0x106) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) mbind$auto(0x0, 0x8, 0x4100000004, 0x0, 0x6, 0xd3ab) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4068aea3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1.057902537s ago: executing program 2 (id=83): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x28242, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/dummy_udc.4/udc/dummy_udc.4/is_a_peripheral\x00', 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) epoll_create$auto(0x3e) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = socket(0x18, 0x3, 0x2) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x101000, 0x0) fallocate$auto(r2, 0x2, 0xc1, 0x800) bind$auto(r1, &(0x7f0000000180)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x100000000000028, 0x0) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/notify_on_release\x00', 0x20000, 0x0) pread64$auto(r3, 0x0, 0x200000000000f, 0xfffffffffffffc00) mq_notify$auto(0xffffffffffffffff, &(0x7f00000000c0)={@sival_ptr=0x0, @raw=0x3, 0x2, @_sigev_thread={0x0, 0x0}}) connect$auto(0x3, &(0x7f00000000c0)=@hci={0x1f, 0x2}, 0x55) close_range$auto(r0, 0xffffffffffffffff, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/v4l-touch6\x00', 0x8a300, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0x545c, 0xffffffffffffffff) sysfs$auto(0xe, 0x2, 0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_udc.5/udc/dummy_udc.5/srp\x00', 0x60301, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)='\x00', 0x1) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/adsp1\x00', 0xc2140, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f00000001c0)) readv$auto(r5, &(0x7f0000000200)={0x0, 0xfffc}, 0x3) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 565.624965ms ago: executing program 1 (id=84): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) mmap$auto(0x80000000, 0x7, 0x5, 0x80000011, r0, 0x28000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0) write$auto(r1, &(0x7f0000000140)='\x00\x00\x00\x00\xd5PJ\x01\xb8\x8f\v\x01gI\xcd2.\xa3\xabI\x80z\'\xea!\xb4U\x8f\xd8\xca\xdc\x1d\x1b\x13\xd1:\x92!\x9e\x88\x9b\xed\xc9Spd\xde\fT\xcd\xee\xf2\xe1*\xb5\xab\xe1\xec\xd3,\xd7\x7f\x19\x8b\xed\xe7i\xda9H\x99\x88\xd8m\xachQ', 0x4) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0xaaa41, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r3, 0x542f, 0x0) r4 = socket(0x2, 0x1, 0x0) getgroups$auto(0x1, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/fs/bcache/pendings_cleanup\x00', 0xc0481, 0x0) write$auto(r5, &(0x7f0000000000)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/devices/platform/vhci_hcd.8/usb26/product\x00', 0x204480, 0x0) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/fail-nth\x00', 0x902, 0x0) r7 = socketpair$auto(0x20020, 0xa, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/sctp/assocs\x00', 0x101080, 0x0) bind$auto(r3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x400000}, 0x400) r8 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto_TIOCGPTPEER(r6, 0x5441, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000280), r7) sendmsg$auto_CTRL_CMD_GETPOLICY(r7, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="02000000edc1339e61f1fb4f201aadb45188cbc8be6080f0e9fdb41ccd144349afbf0f79a1a3fa17e7247050046ce7b8463f996abe3365b8a1d49b3cca9f5d9c735e00df29ecea54438e0be0413f37121bb8ce19ba5be143c895e7139f0c2da850e25dd4cf3677f2708d295c480043da7208b965098e08d0e60ef26ca3dee5183988fda742b775565d90219cc315488b870bec9200419524ee039ef07bc202a9be5896d21d5df448ad0fc3d096f4dbf1ffff63631cf0bef858308eef2ef27476af0d449ec7afeaf8a57ee276", @ANYRES16=r2, @ANYRESDEC=r4], 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x8c0) r9 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x88900, 0x0) readv$auto(r9, &(0x7f0000000680)={&(0x7f0000000380)="cafa40f3c3f7f943bb0571e6833f6202e8c701b027eb007743b4a14d02713390b8da1cd9fe4d64def424d398114a6774f1e14f31180d5f1d70ec0a114c90ee57cb3095f71954d13e95d6d6e027b7ccfb07d86f9b34b1e58a0d140e31db8106af2b17b4be25d80adb9c2d33d479ab499d827e8acc03bf1526f4317d03afa731", 0x40200}, 0x3) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto_console_fops_tty_io(r8, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) r10 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) getsockopt$auto_SO_ACCEPTCONN(r8, 0x3, 0x1e, &(0x7f0000000180)='/sys/fs/bcache/pendings_cleanup\x00', &(0x7f00000001c0)=0x1ff) ioctl$auto(r10, 0x92106405, r10) close_range$auto(0x2, 0xa, 0x0) 546.971959ms ago: executing program 3 (id=85): unshare$auto(0x40000080) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), r1) sendmsg$auto_NETDEV_CMD_DEV_GET(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="de0226bd7000fedbdf2501000000"], 0x14}, 0x1, 0xf0ffff, 0x0, 0x4005}, 0x28044004) getsockopt$auto_SO_RXQ_OVFL(r1, 0x8, 0x28, &(0x7f0000000500)=',{\x00', &(0x7f0000000540)=0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x1}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r5}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x304}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000840) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'dummy0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r7 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r7, &(0x7f0000000040)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba42933ae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233dea4af25795e12eb4d6b046bdeea6adce8626e0def15dd32b0ec16a85d93e1dea980794033f4b46973062c64c0209f9d3efc6ea7704c8e8dfea8cdfbe2cb1e367bf634a1952190e0660994f79f0c622d47ee8f93ce1c2852db907ae68a29bcc960b26e0e634173287fd012c4bb3063c41d35c92e896b44080bc5a98e90907cd1d01cc0708019cc1c93c71f29bfe841c873ad2aa0565dfaeb86c8b8e58ea2075de2a562ba1b5dc4ca452df21f25453b7c7f9a3e31547f4e803cefbac3b94715f2ab1f9fc66570244472f2f29deb9bdf6dc5b18d54e3c2264f9598f2ea749d170a66d351acf003c3f37fe74a09a8a964ce2818e4b4efd1eb0e3bca5dfd2a053eeb5735b96d282d2e03866bd6581b5e5e541c74f0b92b932b234ac117342f156b4b23fc6dcbc92ada00ce404f54443b6e7fdac9acb79e5258a865ced633ff5356d13a3e9923bcd8e6d177c9fb8618f9393798d90d70c78207e40f95bb2b0a9308f29f4331bbdfc1021dface5a740473b462c47286fee1c9d0036c78134e108b5b218d3022fd277e1cdf0cdf8cd4b37d74c8dd47e00e50fcf8d336978a0e7624f94b8fdcd1c9459201231f343c7cb602083aa5e1aea8974a9e22d77cb94cae6c89e239bacfe656d9b0948de480ce2ba3b4dbcb180089d5eb0f8f481e02f7d4628e9134b6e52881572a398e4edd6f01f90983826d721dddc7d4ba3f293288ba54f696fa25cc2f8721c3e380dd04bf05801f90019498601fcbcea6aa6a2d7983e6823f480185ef9c3b4ed19c4f94c108067c89d69bc4e0da0112280ecd0caff8a454fb3e6655dc6a35cdd053aef882e403458754f5e84bd2210f18a61106af8c5a2c18dc48ff87cfda6d545014009a167570f0550e5121d0bdf4b20a1177b708e5515ee33db3baf29633440999ddd36eb0299a1efcd8934ab60c1a88d9db6fa0d2b3f0bf12e87630e0dc5eddca8f291ad85141391e6f9fe56ee4ddb39a1ac7a573cb69ec14f012ea0b721df3ea40747d1130a61802e859519ae1bc5a3673105fa87485f88b8981a3a208a3576848c2df152a023f5e573c867b43b10247336b110956eb28e5288d7aa19219e8324857cdf6d17530385720afd5a1ffd23aa1bd061b73caafa05afdd1441040989d081814635347f1d55669b1c38be4698e3a085e2010e35d2747b4e39ef4920f58d6b4585d737c13221a44ad5543099bb0ab228722ef9cbc0d621178012495837d6a220eeaaf498ccc01", 0x4ba) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r8) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="90ece517", @ANYRES16=r9, @ANYBLOB="010329bd7000fcdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) socketpair$auto(0x800, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x200007, 0x1) madvise$auto(0x400000f, 0x852, 0x2) 0s ago: executing program 2 (id=86): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x88b02, 0x0) socket(0x22, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = socket(0x2, 0x1, 0x106) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r2, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(r1, 0x8925, r0) write$auto(0x3, 0x0, 0xfffffdef) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, 0x0, 0x7, 0x8) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8a241, 0x0) getsockopt$auto_SO_PEEK_OFF(r2, 0xfffffff2, 0x2a, &(0x7f0000000040)='+$\x13\x00', &(0x7f00000000c0)=0x8) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x6d, 0x2e, 0x0, 0x40009) poll$auto(&(0x7f0000000d40)={0x3, 0x500, 0xa}, 0x5, 0x400) writev$auto(r4, 0x0, 0xa) setsockopt$auto(0xffffffffffffffff, 0x1, 0x9, 0x0, 0xeb66) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.115' (ED25519) to the list of known hosts. [ 69.171693][ T5615] cgroup: Unknown subsys name 'net' [ 69.278022][ T5615] cgroup: Unknown subsys name 'cpuset' [ 69.286543][ T5615] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.753201][ T5615] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.338241][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.345162][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.566445][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.568423][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.574290][ T5638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.583066][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.592827][ T5638] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.596269][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.603923][ T5638] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.615449][ T5639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.619770][ T5638] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.630873][ T5638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.631041][ T5639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.647650][ T5643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.656344][ T5643] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.662364][ T5638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.666624][ T5643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.671472][ T5638] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.678466][ T5643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.697175][ T4948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.707054][ T5638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.726127][ T4948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.228980][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.236224][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.243356][ T5629] bridge_slave_0: entered allmulticast mode [ 74.250634][ T5629] bridge_slave_0: entered promiscuous mode [ 74.279238][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.286489][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.293600][ T5629] bridge_slave_1: entered allmulticast mode [ 74.300850][ T5629] bridge_slave_1: entered promiscuous mode [ 74.351072][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.358213][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.365811][ T5630] bridge_slave_0: entered allmulticast mode [ 74.372754][ T5630] bridge_slave_0: entered promiscuous mode [ 74.409151][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.416564][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.423833][ T5630] bridge_slave_1: entered allmulticast mode [ 74.431053][ T5630] bridge_slave_1: entered promiscuous mode [ 74.449869][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.459203][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.466903][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.474018][ T5627] bridge_slave_0: entered allmulticast mode [ 74.481482][ T5627] bridge_slave_0: entered promiscuous mode [ 74.489358][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.496547][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.503825][ T5627] bridge_slave_1: entered allmulticast mode [ 74.510867][ T5627] bridge_slave_1: entered promiscuous mode [ 74.526294][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.533488][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.540962][ T5628] bridge_slave_0: entered allmulticast mode [ 74.548262][ T5628] bridge_slave_0: entered promiscuous mode [ 74.558586][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.588209][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.596375][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.603532][ T5628] bridge_slave_1: entered allmulticast mode [ 74.610740][ T5628] bridge_slave_1: entered promiscuous mode [ 74.638406][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.669930][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.681156][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.695487][ T4948] Bluetooth: hci3: command tx timeout [ 74.708211][ T5629] team0: Port device team_slave_0 added [ 74.716094][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.735921][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.747308][ T5629] team0: Port device team_slave_1 added [ 74.755121][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.775316][ T4948] Bluetooth: hci1: command tx timeout [ 74.775590][ T50] Bluetooth: hci2: command tx timeout [ 74.781319][ T4948] Bluetooth: hci0: command tx timeout [ 74.825907][ T5630] team0: Port device team_slave_0 added [ 74.852247][ T5627] team0: Port device team_slave_0 added [ 74.859956][ T5630] team0: Port device team_slave_1 added [ 74.866862][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.873888][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.899824][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.913304][ T5628] team0: Port device team_slave_0 added [ 74.927199][ T5627] team0: Port device team_slave_1 added [ 74.941691][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.948969][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.974903][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.987605][ T5628] team0: Port device team_slave_1 added [ 75.038507][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.045902][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.071870][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.085120][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.092074][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.118181][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.139792][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.147129][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.173313][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.204189][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.211184][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.237121][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.248680][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.256362][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.282335][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.306770][ T5629] hsr_slave_0: entered promiscuous mode [ 75.313062][ T5629] hsr_slave_1: entered promiscuous mode [ 75.321637][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.328636][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.354830][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.463861][ T5630] hsr_slave_0: entered promiscuous mode [ 75.470214][ T5630] hsr_slave_1: entered promiscuous mode [ 75.477675][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 75.483451][ T5630] Cannot create hsr debugfs directory [ 75.522702][ T5628] hsr_slave_0: entered promiscuous mode [ 75.529027][ T5628] hsr_slave_1: entered promiscuous mode [ 75.535578][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 75.541308][ T5628] Cannot create hsr debugfs directory [ 75.551514][ T5627] hsr_slave_0: entered promiscuous mode [ 75.558022][ T5627] hsr_slave_1: entered promiscuous mode [ 75.564021][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 75.569822][ T5627] Cannot create hsr debugfs directory [ 75.993756][ T5629] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.009438][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.018137][ T5629] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.029008][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.037119][ T5629] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.047087][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.063665][ T5629] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.073304][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.125052][ T5630] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.145381][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.158194][ T5630] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.168222][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.176657][ T5630] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.187241][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.196110][ T5630] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.206362][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.327384][ T5628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.339028][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.351834][ T5628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.361295][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.370476][ T5628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.381012][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.389702][ T5628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.399397][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.477744][ T5627] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.488169][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.496538][ T5627] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.507299][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.523445][ T5627] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.533658][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.541741][ T5627] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.552086][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.599097][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.622510][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.686178][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.699918][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.726462][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.733657][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.745036][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.752172][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.772764][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.779889][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.787740][ T4948] Bluetooth: hci3: command tx timeout [ 76.814221][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.821432][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.855772][ T5638] Bluetooth: hci1: command tx timeout [ 76.861631][ T4948] Bluetooth: hci2: command tx timeout [ 76.868979][ T5638] Bluetooth: hci0: command tx timeout [ 76.930648][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.001758][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.020490][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.051026][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.058248][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.102877][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.129061][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.136296][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.167688][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.174897][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.203283][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.210508][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.768004][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.899807][ T5629] veth0_vlan: entered promiscuous mode [ 77.912462][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.965756][ T5629] veth1_vlan: entered promiscuous mode [ 78.112493][ T5630] veth0_vlan: entered promiscuous mode [ 78.157489][ T5629] veth0_macvtap: entered promiscuous mode [ 78.170886][ T5629] veth1_macvtap: entered promiscuous mode [ 78.197939][ T5630] veth1_vlan: entered promiscuous mode [ 78.250052][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.288112][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.329844][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.351062][ T5630] veth0_macvtap: entered promiscuous mode [ 78.378392][ T5630] veth1_macvtap: entered promiscuous mode [ 78.387828][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.397512][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.414725][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.423409][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.432765][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.505266][ T5628] veth0_vlan: entered promiscuous mode [ 78.528012][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.548925][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.576955][ T5628] veth1_vlan: entered promiscuous mode [ 78.584197][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.593343][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.618040][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.626912][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.664156][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.684438][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.701876][ T5627] veth0_vlan: entered promiscuous mode [ 78.761905][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.772724][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.773403][ T5627] veth1_vlan: entered promiscuous mode [ 78.832574][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.842324][ T5628] veth0_macvtap: entered promiscuous mode [ 78.855270][ T4948] Bluetooth: hci3: command tx timeout [ 78.857883][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.903636][ T5628] veth1_macvtap: entered promiscuous mode [ 78.909949][ T5629] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.923159][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.943564][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.945362][ T5638] Bluetooth: hci0: command tx timeout [ 78.951534][ T50] Bluetooth: hci1: command tx timeout [ 78.957268][ T4948] Bluetooth: hci2: command tx timeout [ 78.982673][ T5627] veth0_macvtap: entered promiscuous mode [ 79.027984][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.060092][ T5627] veth1_macvtap: entered promiscuous mode [ 79.085374][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.134246][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.156134][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.194445][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.234129][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.243879][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.289768][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.340779][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.386355][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.408005][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.469919][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.522883][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.560399][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.703665][ T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.731645][ T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.770147][ T160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.801789][ T160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.915148][ T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.955548][ T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.967837][ T5785] FAULT_INJECTION: forcing a failure. [ 79.967837][ T5785] name failslab, interval 1, probability 0, space 0, times 1 [ 80.006456][ T5785] CPU: 1 UID: 0 PID: 5785 Comm: syz.2.5 Not tainted syzkaller #0 PREEMPT(full) [ 80.006494][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 80.006514][ T5785] Call Trace: [ 80.006524][ T5785] [ 80.006534][ T5785] dump_stack_lvl+0x100/0x190 [ 80.006589][ T5785] should_fail_ex.cold+0x5/0xa [ 80.006624][ T5785] should_failslab+0xc2/0x120 [ 80.006659][ T5785] __kmalloc_cache_noprof+0x7a/0x6f0 [ 80.006701][ T5785] ? io_uring_alloc_task_context+0xa7/0x51f [ 80.006760][ T5785] io_uring_alloc_task_context+0xa7/0x51f [ 80.006810][ T5785] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 80.006858][ T5785] ? alloc_file_pseudo+0x1a5/0x230 [ 80.006903][ T5785] __io_uring_add_tctx_node.cold+0x15/0x201 [ 80.006947][ T5785] ? security_inode_init_security_anon+0x7b/0x230 [ 80.006983][ T5785] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 80.007020][ T5785] ? __anon_inode_getfile+0x17c/0x280 [ 80.007061][ T5785] io_uring_setup.cold+0x1993/0x1c6e [ 80.007117][ T5785] ? __pfx_io_uring_setup+0x10/0x10 [ 80.007168][ T5785] ? __pfx_do_futex+0x10/0x10 [ 80.007215][ T5785] ? xfd_validate_state+0x129/0x190 [ 80.007244][ T5785] ? ksys_write+0x1ac/0x250 [ 80.007287][ T5785] __x64_sys_io_uring_setup+0xc2/0x170 [ 80.007333][ T5785] do_syscall_64+0x115/0x840 [ 80.007371][ T5785] ? clear_bhb_loop+0x40/0x90 [ 80.007406][ T5785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.007435][ T5785] RIP: 0033:0x7faebb99ce59 [ 80.007459][ T5785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.007486][ T5785] RSP: 002b:00007faebc78e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 80.007522][ T5785] RAX: ffffffffffffffda RBX: 00007faebbc15fa0 RCX: 00007faebb99ce59 [ 80.007542][ T5785] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c [ 80.007559][ T5785] RBP: 00007faebba32d6f R08: 0000000000000000 R09: 0000000000000000 [ 80.007576][ T5785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.007593][ T5785] R13: 00007faebbc16038 R14: 00007faebbc15fa0 R15: 00007ffe84aa7f68 [ 80.007630][ T5785] [ 80.250540][ T5787] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.531845][ T5793] FAULT_INJECTION: forcing a failure. [ 80.531845][ T5793] name failslab, interval 1, probability 0, space 0, times 0 [ 80.545975][ T5793] CPU: 0 UID: 0 PID: 5793 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 80.546015][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 80.546032][ T5793] Call Trace: [ 80.546041][ T5793] [ 80.546051][ T5793] dump_stack_lvl+0x100/0x190 [ 80.546105][ T5793] should_fail_ex.cold+0x5/0xa [ 80.546141][ T5793] should_failslab+0xc2/0x120 [ 80.546174][ T5793] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 80.546218][ T5793] ? security_file_alloc+0x34/0x2c0 [ 80.546254][ T5793] ? trace_kmem_cache_alloc+0xd5/0x100 [ 80.546295][ T5793] security_file_alloc+0x34/0x2c0 [ 80.546333][ T5793] init_file+0x95/0x480 [ 80.546373][ T5793] alloc_empty_file+0x79/0x1c0 [ 80.546415][ T5793] alloc_file_pseudo+0x13a/0x230 [ 80.546458][ T5793] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 80.546501][ T5793] ? security_inode_init_security_anon+0x7b/0x230 [ 80.546542][ T5793] __anon_inode_getfile+0xe8/0x280 [ 80.546582][ T5793] ? _copy_to_user+0xaf/0xd0 [ 80.546623][ T5793] io_uring_setup.cold+0x1951/0x1c6e [ 80.546681][ T5793] ? __pfx_io_uring_setup+0x10/0x10 [ 80.546733][ T5793] ? __pfx_do_futex+0x10/0x10 [ 80.546779][ T5793] ? xfd_validate_state+0x129/0x190 [ 80.546806][ T5793] ? ksys_write+0x1ac/0x250 [ 80.546847][ T5793] __x64_sys_io_uring_setup+0xc2/0x170 [ 80.546892][ T5793] do_syscall_64+0x115/0x840 [ 80.546929][ T5793] ? clear_bhb_loop+0x40/0x90 [ 80.546963][ T5793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.546991][ T5793] RIP: 0033:0x7f6441b9ce59 [ 80.547013][ T5793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.547039][ T5793] RSP: 002b:00007f6442b25028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 80.547065][ T5793] RAX: ffffffffffffffda RBX: 00007f6441e15fa0 RCX: 00007f6441b9ce59 [ 80.547084][ T5793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c [ 80.547099][ T5793] RBP: 00007f6441c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 80.547115][ T5793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.547130][ T5793] R13: 00007f6441e16038 R14: 00007f6441e15fa0 R15: 00007ffcb2f6d2e8 [ 80.547165][ T5793] [ 80.922580][ T5796] FAULT_INJECTION: forcing a failure. [ 80.922580][ T5796] name failslab, interval 1, probability 0, space 0, times 0 [ 80.922624][ T5796] CPU: 1 UID: 0 PID: 5796 Comm: syz.3.6 Not tainted syzkaller #0 PREEMPT(full) [ 80.922658][ T5796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 80.922675][ T5796] Call Trace: [ 80.922683][ T5796] [ 80.922694][ T5796] dump_stack_lvl+0x100/0x190 [ 80.922747][ T5796] should_fail_ex.cold+0x5/0xa [ 80.922784][ T5796] should_failslab+0xc2/0x120 [ 80.922819][ T5796] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 80.922863][ T5796] ? alloc_empty_file+0x5b/0x1c0 [ 80.922911][ T5796] alloc_empty_file+0x5b/0x1c0 [ 80.922954][ T5796] alloc_file_pseudo+0x13a/0x230 [ 80.922998][ T5796] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 80.923045][ T5796] ? security_inode_init_security_anon+0x7b/0x230 [ 80.923087][ T5796] __anon_inode_getfile+0xe8/0x280 [ 80.923136][ T5796] ? _copy_to_user+0xaf/0xd0 [ 80.923178][ T5796] io_uring_setup.cold+0x1951/0x1c6e [ 80.923229][ T5796] ? __pfx_io_uring_setup+0x10/0x10 [ 80.923281][ T5796] ? __pfx_do_futex+0x10/0x10 [ 80.923327][ T5796] ? xfd_validate_state+0x129/0x190 [ 80.923354][ T5796] ? ksys_write+0x1ac/0x250 [ 80.923395][ T5796] __x64_sys_io_uring_setup+0xc2/0x170 [ 80.923441][ T5796] do_syscall_64+0x115/0x840 [ 80.923480][ T5796] ? clear_bhb_loop+0x40/0x90 [ 80.923515][ T5796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.923544][ T5796] RIP: 0033:0x7f65f759ce59 [ 80.923567][ T5796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.923593][ T5796] RSP: 002b:00007f65f843c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 80.923620][ T5796] RAX: ffffffffffffffda RBX: 00007f65f7815fa0 RCX: 00007f65f759ce59 [ 80.923639][ T5796] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c [ 80.923655][ T5796] RBP: 00007f65f7632d6f R08: 0000000000000000 R09: 0000000000000000 [ 80.923671][ T5796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.923688][ T5796] R13: 00007f65f7816038 R14: 00007f65f7815fa0 R15: 00007fff49cb6ad8 [ 80.923725][ T5796] [ 80.936789][ T4948] Bluetooth: hci3: command tx timeout [ 81.017159][ T4948] Bluetooth: hci1: command tx timeout [ 81.027108][ T4948] Bluetooth: hci2: command tx timeout [ 81.027144][ T4948] Bluetooth: hci0: command tx timeout [ 81.330699][ T5806] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 81.606274][ T5798] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 81.606274][ T5798] The task syz.2.7 (5798) triggered the difference, watch for misbehavior. [ 83.834291][ T5835] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 84.266721][ T5846] FAULT_INJECTION: forcing a failure. [ 84.266721][ T5846] name failslab, interval 1, probability 0, space 0, times 0 [ 84.345679][ T5847] random: crng reseeded on system resumption [ 84.415355][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: syz.2.15 Not tainted syzkaller #0 PREEMPT(full) [ 84.415394][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 84.415411][ T5846] Call Trace: [ 84.415420][ T5846] [ 84.415430][ T5846] dump_stack_lvl+0x100/0x190 [ 84.415482][ T5846] should_fail_ex.cold+0x5/0xa [ 84.415517][ T5846] ? sk_prot_alloc+0x10b/0x2a0 [ 84.415552][ T5846] should_failslab+0xc2/0x120 [ 84.415585][ T5846] __kmalloc_noprof+0xe0/0x850 [ 84.415628][ T5846] ? security_inode_alloc+0xcf/0x2c0 [ 84.415666][ T5846] sk_prot_alloc+0x10b/0x2a0 [ 84.415704][ T5846] sk_alloc+0x36/0xe80 [ 84.415733][ T5846] __netlink_create+0x5e/0x2c0 [ 84.415767][ T5846] __netlink_kernel_create+0xed/0x750 [ 84.415807][ T5846] ? __pfx___netlink_kernel_create+0x10/0x10 [ 84.415844][ T5846] ? find_held_lock+0x2b/0x80 [ 84.415878][ T5846] ? audit_net_init+0x190/0x440 [ 84.415908][ T5846] ? audit_net_init+0x190/0x440 [ 84.415944][ T5846] audit_net_init+0x1ae/0x440 [ 84.415974][ T5846] ? __pfx_audit_net_init+0x10/0x10 [ 84.416002][ T5846] ? rcu_is_watching+0x12/0xc0 [ 84.416035][ T5846] ? __pfx_audit_receive+0x10/0x10 [ 84.416069][ T5846] ? __pfx_audit_multicast_bind+0x10/0x10 [ 84.416104][ T5846] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 84.416142][ T5846] ? __kmalloc_noprof+0x320/0x850 [ 84.416193][ T5846] ? __pfx_audit_net_init+0x10/0x10 [ 84.416223][ T5846] ops_init+0x1e2/0x5f0 [ 84.416259][ T5846] setup_net+0x118/0x3a0 [ 84.416292][ T5846] ? __pfx_setup_net+0x10/0x10 [ 84.416335][ T5846] ? mutex_init_lockdep+0xf1/0x120 [ 84.416370][ T5846] copy_net_ns+0x46f/0x7c0 [ 84.416408][ T5846] create_new_namespaces+0x3ea/0xac0 [ 84.416452][ T5846] unshare_nsproxy_namespaces+0xf2/0x220 [ 84.416491][ T5846] ksys_unshare+0x438/0xab0 [ 84.416534][ T5846] ? __pfx_ksys_unshare+0x10/0x10 [ 84.416571][ T5846] ? xfd_validate_state+0x129/0x190 [ 84.416598][ T5846] ? exit_to_user_mode_loop+0xf3/0x670 [ 84.416654][ T5846] __x64_sys_unshare+0x31/0x40 [ 84.416695][ T5846] do_syscall_64+0x115/0x840 [ 84.416734][ T5846] ? clear_bhb_loop+0x40/0x90 [ 84.416769][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.416798][ T5846] RIP: 0033:0x7faebb99ce59 [ 84.416821][ T5846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.416848][ T5846] RSP: 002b:00007faeb9bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 84.416878][ T5846] RAX: ffffffffffffffda RBX: 00007faebbc16090 RCX: 00007faebb99ce59 [ 84.416896][ T5846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 84.416912][ T5846] RBP: 00007faebba32d6f R08: 0000000000000000 R09: 0000000000000000 [ 84.416928][ T5846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.416943][ T5846] R13: 00007faebbc16128 R14: 00007faebbc16090 R15: 00007ffe84aa7f68 [ 84.416977][ T5846] [ 84.423113][ T5846] audit: cannot initialize netlink socket in namespace [ 84.871568][ T5638] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 84.894069][ T5853] Zero length message leads to an empty skb [ 85.287693][ T5638] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 86.700889][ T24] cfg80211: failed to load regulatory.db [ 86.936583][ T4948] Bluetooth: hci1: command 0x2016 tx timeout [ 87.048335][ T5882] ovs_datapath: entered promiscuous mode [ 87.128368][ T5881] ima: policy update failed [ 87.139847][ T29] audit: type=1802 audit(1780226411.539:2): pid=5881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.23" res=0 errno=0 [ 87.335541][ T50] Bluetooth: hci0: command 0x2016 tx timeout [ 87.410901][ T5887] bond0: invalid ARP target specified [ 87.695930][ T5896] FAULT_INJECTION: forcing a failure. [ 87.695930][ T5896] name failslab, interval 1, probability 0, space 0, times 0 [ 87.697365][ T5899] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 87.743087][ T5896] CPU: 1 UID: 0 PID: 5896 Comm: syz.3.27 Not tainted syzkaller #0 PREEMPT(full) [ 87.743122][ T5896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 87.743138][ T5896] Call Trace: [ 87.743146][ T5896] [ 87.743155][ T5896] dump_stack_lvl+0x100/0x190 [ 87.743207][ T5896] should_fail_ex.cold+0x5/0xa [ 87.743242][ T5896] should_failslab+0xc2/0x120 [ 87.743275][ T5896] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 87.743319][ T5896] ? security_file_alloc+0x34/0x2c0 [ 87.743356][ T5896] ? trace_kmem_cache_alloc+0xd5/0x100 [ 87.743397][ T5896] security_file_alloc+0x34/0x2c0 [ 87.743446][ T5896] init_file+0x95/0x480 [ 87.743489][ T5896] alloc_empty_file+0x79/0x1c0 [ 87.743533][ T5896] alloc_file_pseudo+0x13a/0x230 [ 87.743579][ T5896] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 87.743624][ T5896] ? security_inode_init_security_anon+0x7b/0x230 [ 87.743669][ T5896] __anon_inode_getfile+0xe8/0x280 [ 87.743710][ T5896] ? _copy_to_user+0xaf/0xd0 [ 87.743752][ T5896] io_uring_setup.cold+0x1951/0x1c6e [ 87.743804][ T5896] ? __pfx_io_uring_setup+0x10/0x10 [ 87.743855][ T5896] ? __pfx_do_futex+0x10/0x10 [ 87.743901][ T5896] ? xfd_validate_state+0x129/0x190 [ 87.743927][ T5896] ? ksys_write+0x1ac/0x250 [ 87.743968][ T5896] __x64_sys_io_uring_setup+0xc2/0x170 [ 87.744015][ T5896] do_syscall_64+0x115/0x840 [ 87.744054][ T5896] ? clear_bhb_loop+0x40/0x90 [ 87.744089][ T5896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.744120][ T5896] RIP: 0033:0x7f65f759ce59 [ 87.744143][ T5896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.744170][ T5896] RSP: 002b:00007f65f843c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 87.744198][ T5896] RAX: ffffffffffffffda RBX: 00007f65f7815fa0 RCX: 00007f65f759ce59 [ 87.744217][ T5896] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c [ 87.744234][ T5896] RBP: 00007f65f7632d6f R08: 0000000000000000 R09: 0000000000000000 [ 87.744252][ T5896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.744268][ T5896] R13: 00007f65f7816038 R14: 00007f65f7815fa0 R15: 00007fff49cb6ad8 [ 87.744306][ T5896] [ 88.025211][ T5900] netlink: 36 bytes leftover after parsing attributes in process `syz.1.28'. [ 88.041043][ T5900] process 'syz.1.28' launched '/dev/fd/6' with NULL argv: empty string added [ 88.150228][ T5903] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 88.250042][ T5906] snd_virmidi snd_virmidi.0: control 53842:9:2:yª:0 is already present [ 88.267140][ T5906] netlink: 36 bytes leftover after parsing attributes in process `syz.2.29'. [ 88.446623][ T5910] FAULT_INJECTION: forcing a failure. [ 88.446623][ T5910] name failslab, interval 1, probability 0, space 0, times 0 [ 88.460203][ T5910] CPU: 1 UID: 0 PID: 5910 Comm: syz.1.30 Not tainted syzkaller #0 PREEMPT(full) [ 88.460243][ T5910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 88.460260][ T5910] Call Trace: [ 88.460270][ T5910] [ 88.460280][ T5910] dump_stack_lvl+0x100/0x190 [ 88.460333][ T5910] should_fail_ex.cold+0x5/0xa [ 88.460382][ T5910] should_failslab+0xc2/0x120 [ 88.460417][ T5910] __kmalloc_cache_noprof+0x7a/0x6f0 [ 88.460457][ T5910] ? io_wq_create+0x6a/0x9a0 [ 88.460506][ T5910] io_wq_create+0x6a/0x9a0 [ 88.460553][ T5910] io_uring_alloc_task_context+0x2d9/0x51f [ 88.460604][ T5910] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 88.460660][ T5910] ? alloc_file_pseudo+0x1a5/0x230 [ 88.460707][ T5910] __io_uring_add_tctx_node.cold+0x15/0x201 [ 88.460753][ T5910] ? security_inode_init_security_anon+0x7b/0x230 [ 88.460790][ T5910] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 88.460828][ T5910] ? __anon_inode_getfile+0x17c/0x280 [ 88.460870][ T5910] io_uring_setup.cold+0x1993/0x1c6e [ 88.460917][ T5910] ? __pfx_io_uring_setup+0x10/0x10 [ 88.460965][ T5910] ? __pfx_do_futex+0x10/0x10 [ 88.461010][ T5910] ? xfd_validate_state+0x129/0x190 [ 88.461035][ T5910] ? ksys_write+0x1ac/0x250 [ 88.461077][ T5910] __x64_sys_io_uring_setup+0xc2/0x170 [ 88.461122][ T5910] do_syscall_64+0x115/0x840 [ 88.461161][ T5910] ? clear_bhb_loop+0x40/0x90 [ 88.461196][ T5910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.461226][ T5910] RIP: 0033:0x7fbcbe79ce59 [ 88.461249][ T5910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.461274][ T5910] RSP: 002b:00007fbcbf6e9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 88.461300][ T5910] RAX: ffffffffffffffda RBX: 00007fbcbea15fa0 RCX: 00007fbcbe79ce59 [ 88.461318][ T5910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c [ 88.461335][ T5910] RBP: 00007fbcbe832d6f R08: 0000000000000000 R09: 0000000000000000 [ 88.461351][ T5910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.461376][ T5910] R13: 00007fbcbea16038 R14: 00007fbcbea15fa0 R15: 00007ffd8a8d1bd8 [ 88.461412][ T5910] [ 88.720114][ T5912] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 88.816725][ T5913] snd_virmidi snd_virmidi.0: control 53842:9:2:yª:0 is already present [ 88.901903][ T5913] netlink: 36 bytes leftover after parsing attributes in process `syz.3.31'. [ 89.028649][ T5638] Bluetooth: hci1: command 0x2016 tx timeout [ 89.424695][ T5638] Bluetooth: hci0: command 0x2016 tx timeout [ 91.368889][ T5957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.40'. [ 91.731735][ T5957] syz.2.40 (5957) used greatest stack depth: 18008 bytes left [ 91.792463][ T5963] FAULT_INJECTION: forcing a failure. [ 91.792463][ T5963] name failslab, interval 1, probability 0, space 0, times 0 [ 91.832566][ T5963] CPU: 0 UID: 0 PID: 5963 Comm: syz.1.41 Not tainted syzkaller #0 PREEMPT(full) [ 91.832607][ T5963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 91.832623][ T5963] Call Trace: [ 91.832633][ T5963] [ 91.832644][ T5963] dump_stack_lvl+0x100/0x190 [ 91.832700][ T5963] should_fail_ex.cold+0x5/0xa [ 91.832737][ T5963] should_failslab+0xc2/0x120 [ 91.832772][ T5963] __kmalloc_cache_noprof+0x7a/0x6f0 [ 91.832814][ T5963] ? io_uring_alloc_task_context+0x1a3/0x51f [ 91.832859][ T5963] ? __percpu_counter_init_many+0x2c1/0x3b0 [ 91.832910][ T5963] io_uring_alloc_task_context+0x1a3/0x51f [ 91.832960][ T5963] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 91.833012][ T5963] ? alloc_file_pseudo+0x1a5/0x230 [ 91.833057][ T5963] __io_uring_add_tctx_node.cold+0x15/0x201 [ 91.833099][ T5963] ? security_inode_init_security_anon+0x7b/0x230 [ 91.833141][ T5963] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 91.833181][ T5963] ? __anon_inode_getfile+0x17c/0x280 [ 91.833230][ T5963] io_uring_setup.cold+0x1993/0x1c6e [ 91.833285][ T5963] ? __pfx_io_uring_setup+0x10/0x10 [ 91.833339][ T5963] ? __pfx_do_futex+0x10/0x10 [ 91.833386][ T5963] ? xfd_validate_state+0x129/0x190 [ 91.833414][ T5963] ? ksys_write+0x1ac/0x250 [ 91.833457][ T5963] __x64_sys_io_uring_setup+0xc2/0x170 [ 91.833504][ T5963] do_syscall_64+0x115/0x840 [ 91.833546][ T5963] ? clear_bhb_loop+0x40/0x90 [ 91.833581][ T5963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.833609][ T5963] RIP: 0033:0x7fbcbe79ce59 [ 91.833632][ T5963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.833662][ T5963] RSP: 002b:00007fbcbf6e9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 91.833691][ T5963] RAX: ffffffffffffffda RBX: 00007fbcbea15fa0 RCX: 00007fbcbe79ce59 [ 91.833711][ T5963] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c [ 91.833730][ T5963] RBP: 00007fbcbe832d6f R08: 0000000000000000 R09: 0000000000000000 [ 91.833748][ T5963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.833766][ T5963] R13: 00007fbcbea16038 R14: 00007fbcbea15fa0 R15: 00007ffd8a8d1bd8 [ 91.833806][ T5963] [ 92.188993][ T5966] mmap: syz.2.42 (5966) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.548241][ T5976] netlink: 28 bytes leftover after parsing attributes in process `syz.3.44'. [ 92.657612][ T5976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.706779][ T5976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.740889][ T5976] bond0 (unregistering): Released all slaves [ 93.094239][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'. [ 93.579498][ T5994] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 93.664258][ T5995] snd_virmidi snd_virmidi.0: control 53842:9:2:yª:0 is already present [ 93.728974][ T5995] netlink: 36 bytes leftover after parsing attributes in process `syz.0.50'. [ 93.896940][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.51'. [ 93.992820][ T5998] FAULT_INJECTION: forcing a failure. [ 93.992820][ T5998] name failslab, interval 1, probability 0, space 0, times 0 [ 94.010840][ T5998] CPU: 0 UID: 0 PID: 5998 Comm: syz.3.51 Not tainted syzkaller #0 PREEMPT(full) [ 94.010877][ T5998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 94.010895][ T5998] Call Trace: [ 94.010905][ T5998] [ 94.010916][ T5998] dump_stack_lvl+0x100/0x190 [ 94.010971][ T5998] should_fail_ex.cold+0x5/0xa [ 94.011008][ T5998] should_failslab+0xc2/0x120 [ 94.011043][ T5998] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 94.011087][ T5998] ? __kernfs_new_node+0xd2/0x9f0 [ 94.011127][ T5998] __kernfs_new_node+0xd2/0x9f0 [ 94.011164][ T5998] ? __pfx___kernfs_new_node+0x10/0x10 [ 94.011206][ T5998] ? find_held_lock+0x2b/0x80 [ 94.011239][ T5998] ? kernfs_root+0xee/0x2a0 [ 94.011267][ T5998] ? kernfs_root+0xee/0x2a0 [ 94.011308][ T5998] kernfs_new_node+0x11b/0x1a0 [ 94.011358][ T5998] __kernfs_create_file+0x53/0x350 [ 94.011411][ T5998] sysfs_add_file_mode_ns+0x207/0x3c0 [ 94.011454][ T5998] internal_create_group+0x593/0xfb0 [ 94.011497][ T5998] ? __pfx_internal_create_group+0x10/0x10 [ 94.011538][ T5998] ? kernfs_create_link+0x1bd/0x240 [ 94.011589][ T5998] internal_create_groups+0x9d/0x150 [ 94.011626][ T5998] device_add+0x71a/0x1950 [ 94.011660][ T5998] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 94.011700][ T5998] ? __pfx_device_add+0x10/0x10 [ 94.011730][ T5998] ? lockdep_init_map_type+0x5c/0x250 [ 94.011776][ T5998] ? __init_waitqueue_head+0xca/0x150 [ 94.011818][ T5998] netdev_register_kobject+0x1a9/0x3d0 [ 94.011858][ T5998] register_netdevice+0x151c/0x24b0 [ 94.011896][ T5998] ? __pfx_register_netdevice+0x10/0x10 [ 94.011936][ T5998] internal_dev_create+0x2d3/0x520 [ 94.011980][ T5998] ovs_vport_add+0x147/0x4d0 [ 94.012022][ T5998] new_vport+0x16/0x1d0 [ 94.012052][ T5998] ovs_dp_cmd_new+0x65d/0xdf0 [ 94.012094][ T5998] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 94.012127][ T5998] ? __nla_parse+0x40/0x60 [ 94.012164][ T5998] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 94.012208][ T5998] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 94.012261][ T5998] genl_family_rcv_msg_doit+0x214/0x300 [ 94.012307][ T5998] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 94.012350][ T5998] ? genl_get_cmd+0x3e7/0x760 [ 94.012407][ T5998] ? bpf_lsm_capable+0x9/0x10 [ 94.012438][ T5998] ? security_capable+0x80/0x260 [ 94.012468][ T5998] ? ns_capable+0xd2/0xf0 [ 94.012502][ T5998] genl_rcv_msg+0x560/0x800 [ 94.012545][ T5998] ? __pfx_genl_rcv_msg+0x10/0x10 [ 94.012586][ T5998] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 94.012633][ T5998] netlink_rcv_skb+0x159/0x420 [ 94.012671][ T5998] ? __pfx_genl_rcv_msg+0x10/0x10 [ 94.012716][ T5998] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 94.012770][ T5998] ? netlink_deliver_tap+0x1ae/0xcc0 [ 94.012812][ T5998] genl_rcv+0x28/0x40 [ 94.012849][ T5998] netlink_unicast+0x585/0x850 [ 94.012888][ T5998] ? __pfx_netlink_unicast+0x10/0x10 [ 94.012937][ T5998] netlink_sendmsg+0x8b0/0xda0 [ 94.012982][ T5998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.013018][ T5998] ? __import_iovec+0x1d2/0x640 [ 94.013062][ T5998] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 94.013099][ T5998] ____sys_sendmsg+0x9e1/0xb70 [ 94.013134][ T5998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.013175][ T5998] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.013221][ T5998] ? __pfx_futex_wake_mark+0x10/0x10 [ 94.013264][ T5998] ___sys_sendmsg+0x190/0x1e0 [ 94.013306][ T5998] ? __pfx____sys_sendmsg+0x10/0x10 [ 94.013402][ T5998] __sys_sendmsg+0x170/0x220 [ 94.013432][ T5998] ? __pfx___sys_sendmsg+0x10/0x10 [ 94.013459][ T5998] ? __x64_sys_futex+0x34f/0x4d0 [ 94.013501][ T5998] ? rcu_is_watching+0x12/0xc0 [ 94.013528][ T5998] do_syscall_64+0x115/0x840 [ 94.013548][ T5998] ? clear_bhb_loop+0x40/0x90 [ 94.013566][ T5998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.013581][ T5998] RIP: 0033:0x7f65f759ce59 [ 94.013596][ T5998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.013621][ T5998] RSP: 002b:00007f65f843c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.013647][ T5998] RAX: ffffffffffffffda RBX: 00007f65f7815fa0 RCX: 00007f65f759ce59 [ 94.013666][ T5998] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000005 [ 94.013683][ T5998] RBP: 00007f65f7632d6f R08: 0000000000000000 R09: 0000000000000000 [ 94.013699][ T5998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.013710][ T5998] R13: 00007f65f7816038 R14: 00007f65f7815fa0 R15: 00007fff49cb6ad8 [ 94.013730][ T5998] [ 97.915850][ T6041] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 97.923214][ T6041] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 97.938243][ T6041] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 97.948598][ T6041] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 97.954704][ T6041] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 97.962605][ T6041] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 97.973788][ T6041] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 97.985068][ T6041] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 97.993740][ T6041] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.002523][ T6041] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 98.008771][ T6041] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 98.016967][ T6041] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 98.954956][ T6068] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 98.970521][ T6068] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 98.995318][ T6068] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 99.001748][ T6068] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 99.236183][ T6071] random: crng reseeded on system resumption [ 100.160902][ T6087] syz.0.70 uses obsolete (PF_INET,SOCK_PACKET) [ 100.211971][ T6091] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 100.302861][ T6096] snd_virmidi snd_virmidi.0: control 53842:9:2:yª:0 is already present [ 100.369993][ T6096] netlink: 36 bytes leftover after parsing attributes in process `syz.1.72'. [ 101.014901][ T50] Bluetooth: hci1: command 0x2016 tx timeout [ 101.014938][ T4948] Bluetooth: hci0: command 0x2016 tx timeout [ 101.021015][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 101.034090][ T5638] Bluetooth: hci3: command 0x0c1a tx timeout [ 103.094728][ T4948] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.101604][ T5636] Bluetooth: hci0: command 0x2016 tx timeout [ 103.103048][ T50] Bluetooth: hci1: command 0x2016 tx timeout [ 103.108736][ T5638] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.564119][ T6145] FAULT_INJECTION: forcing a failure. [ 104.564119][ T6145] name failslab, interval 1, probability 0, space 0, times 0 [ 104.594655][ T6145] CPU: 0 UID: 0 PID: 6145 Comm: syz.3.81 Not tainted syzkaller #0 PREEMPT(full) [ 104.594692][ T6145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 104.594709][ T6145] Call Trace: [ 104.594718][ T6145] [ 104.594728][ T6145] dump_stack_lvl+0x100/0x190 [ 104.594783][ T6145] should_fail_ex.cold+0x5/0xa [ 104.594821][ T6145] should_failslab+0xc2/0x120 [ 104.594855][ T6145] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 104.594898][ T6145] ? __kernfs_new_node+0xd2/0x9f0 [ 104.594936][ T6145] __kernfs_new_node+0xd2/0x9f0 [ 104.594970][ T6145] ? wake_up_q+0xae/0x130 [ 104.595003][ T6145] ? __pfx___kernfs_new_node+0x10/0x10 [ 104.595043][ T6145] ? find_held_lock+0x2b/0x80 [ 104.595077][ T6145] ? kernfs_root+0xee/0x2a0 [ 104.595104][ T6145] ? kernfs_root+0xee/0x2a0 [ 104.595143][ T6145] kernfs_new_node+0x11b/0x1a0 [ 104.595185][ T6145] __kernfs_create_file+0x53/0x350 [ 104.595230][ T6145] sysfs_add_file_mode_ns+0x207/0x3c0 [ 104.595275][ T6145] sysfs_merge_group+0x194/0x340 [ 104.595310][ T6145] ? __pfx_sysfs_merge_group+0x10/0x10 [ 104.595342][ T6145] ? bus_add_device+0x368/0x6b0 [ 104.595384][ T6145] ? __pfx_bus_add_device+0x10/0x10 [ 104.595420][ T6145] ? __pfx_dev_add_physical_location+0x10/0x10 [ 104.595464][ T6145] dpm_sysfs_add+0x237/0x280 [ 104.595497][ T6145] device_add+0x9ef/0x1950 [ 104.595531][ T6145] ? __pfx_device_add+0x10/0x10 [ 104.595558][ T6145] ? __pfx___might_resched+0x10/0x10 [ 104.595586][ T6145] ? lockdep_hardirqs_on+0x78/0x100 [ 104.595639][ T6145] __add_disk+0x518/0xe40 [ 104.595679][ T6145] add_disk_fwnode+0x118/0x5c0 [ 104.595717][ T6145] loop_add+0x90b/0xb60 [ 104.595753][ T6145] ? __pfx_loop_add+0x10/0x10 [ 104.595814][ T6145] ? find_held_lock+0x2b/0x80 [ 104.595848][ T6145] ? __fget_files+0x215/0x3d0 [ 104.595886][ T6145] loop_control_ioctl+0xae/0x620 [ 104.595926][ T6145] ? __pfx_loop_control_ioctl+0x10/0x10 [ 104.595970][ T6145] ? __pfx_loop_control_ioctl+0x10/0x10 [ 104.596008][ T6145] __x64_sys_ioctl+0x18e/0x210 [ 104.596039][ T6145] do_syscall_64+0x115/0x840 [ 104.596076][ T6145] ? clear_bhb_loop+0x40/0x90 [ 104.596109][ T6145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.596139][ T6145] RIP: 0033:0x7f65f759ce59 [ 104.596162][ T6145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.596187][ T6145] RSP: 002b:00007f65f843c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.596214][ T6145] RAX: ffffffffffffffda RBX: 00007f65f7815fa0 RCX: 00007f65f759ce59 [ 104.596255][ T6145] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000004 [ 104.596273][ T6145] RBP: 00007f65f7632d6f R08: 0000000000000000 R09: 0000000000000000 [ 104.596290][ T6145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.596307][ T6145] R13: 00007f65f7816038 R14: 00007f65f7815fa0 R15: 00007fff49cb6ad8 [ 104.596344][ T6145] [ 104.899031][ T6151] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 104.915977][ T6151] random: crng reseeded on system resumption [ 105.037320][ T6155] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 105.225527][ T5638] Bluetooth: hci3: command 0x0c1a tx timeout [ 105.226606][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 105.231589][ T5638] Bluetooth: hci0: command 0x2016 tx timeout [ 105.239853][ T4948] Bluetooth: hci1: command 0x2016 tx timeout [ 105.967392][ T6166] ================================================================== [ 105.967409][ T6166] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 105.967451][ T6166] Write of size 8 at addr ffffc90004af16e0 by task syz.1.84/6166 [ 105.967474][ T6166] [ 105.967486][ T6166] CPU: 1 UID: 0 PID: 6166 Comm: syz.1.84 Not tainted syzkaller #0 PREEMPT(full) [ 105.967518][ T6166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 105.967535][ T6166] Call Trace: [ 105.967544][ T6166] [ 105.967555][ T6166] dump_stack_lvl+0x100/0x190 [ 105.967600][ T6166] print_report+0x13d/0x4b0 [ 105.967649][ T6166] ? _raw_spin_lock_irqsave+0x52/0x60 [ 105.967690][ T6166] ? sys_imageblit+0x19fb/0x1d60 [ 105.967724][ T6166] kasan_report+0xdf/0x1d0 [ 105.967759][ T6166] ? sys_imageblit+0x19fb/0x1d60 [ 105.967798][ T6166] sys_imageblit+0x19fb/0x1d60 [ 105.967839][ T6166] ? __pfx_sys_imageblit+0x10/0x10 [ 105.967877][ T6166] ? prb_read_valid+0x78/0xa0 [ 105.967906][ T6166] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 105.967951][ T6166] soft_cursor+0x524/0xa10 [ 105.967983][ T6166] ? __probestub_notifier_run+0x10/0x10 [ 105.968025][ T6166] ? fb_get_color_depth+0x120/0x250 [ 105.968071][ T6166] bit_cursor+0xca1/0x1490 [ 105.968103][ T6166] ? __pfx_bit_cursor+0x10/0x10 [ 105.968129][ T6166] ? __lock_acquire+0x4a5/0x2630 [ 105.968175][ T6166] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 105.968217][ T6166] ? get_color+0x1da/0x450 [ 105.968259][ T6166] ? __pfx_bit_cursor+0x10/0x10 [ 105.968287][ T6166] fbcon_cursor+0x43c/0x5e0 [ 105.968329][ T6166] ? add_softcursor+0x210/0x290 [ 105.968363][ T6166] set_cursor+0x1db/0x250 [ 105.968394][ T6166] con_write+0x89/0xb0 [ 105.968430][ T6166] n_tty_write+0x431/0x11c0 [ 105.968482][ T6166] ? __pfx_n_tty_write+0x10/0x10 [ 105.968526][ T6166] ? __pfx_woken_wake_function+0x10/0x10 [ 105.968561][ T6166] ? __pfx___might_resched+0x10/0x10 [ 105.968590][ T6166] ? kfree+0x1dd/0x6c0 [ 105.968637][ T6166] ? __pfx_n_tty_write+0x10/0x10 [ 105.968681][ T6166] file_tty_write.isra.0+0x4d2/0x890 [ 105.968723][ T6166] redirected_tty_write+0xd4/0x120 [ 105.968761][ T6166] vfs_write+0x6ac/0x1070 [ 105.968799][ T6166] ? __pfx_redirected_tty_write+0x10/0x10 [ 105.968838][ T6166] ? __pfx_vfs_write+0x10/0x10 [ 105.968869][ T6166] ? find_held_lock+0x2b/0x80 [ 105.968915][ T6166] ksys_write+0x12a/0x250 [ 105.968946][ T6166] ? __pfx_ksys_write+0x10/0x10 [ 105.968980][ T6166] ? rcu_is_watching+0x12/0xc0 [ 105.969016][ T6166] do_syscall_64+0x115/0x840 [ 105.969055][ T6166] ? clear_bhb_loop+0x40/0x90 [ 105.969089][ T6166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.969116][ T6166] RIP: 0033:0x7fbcbe79ce59 [ 105.969137][ T6166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.969162][ T6166] RSP: 002b:00007fbcbf6c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.969190][ T6166] RAX: ffffffffffffffda RBX: 00007fbcbea16090 RCX: 00007fbcbe79ce59 [ 105.969210][ T6166] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 000000000000000b [ 105.969227][ T6166] RBP: 00007fbcbe832d6f R08: 0000000000000000 R09: 0000000000000000 [ 105.969243][ T6166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.969259][ T6166] R13: 00007fbcbea16128 R14: 00007fbcbea16090 R15: 00007ffd8a8d1bd8 [ 105.969287][ T6166] [ 105.969296][ T6166] [ 105.969303][ T6166] The buggy address belongs to a vmalloc virtual mapping [ 105.969321][ T6166] Memory state around the buggy address: [ 105.969340][ T6166] ffffc90004af1580: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 105.969371][ T6166] ffffc90004af1600: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 105.969392][ T6166] >ffffc90004af1680: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 105.969408][ T6166] ^ [ 105.969425][ T6166] ffffc90004af1700: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 105.969444][ T6166] ffffc90004af1780: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 105.969464][ T6166] ================================================================== [ 105.990354][ T6166] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 105.990378][ T6166] CPU: 1 UID: 0 PID: 6166 Comm: syz.1.84 Not tainted syzkaller #0 PREEMPT(full) [ 105.990413][ T6166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 105.990431][ T6166] Call Trace: [ 105.990441][ T6166] [ 105.990452][ T6166] dump_stack_lvl+0x100/0x190 [ 105.990503][ T6166] vpanic+0x552/0x970 [ 105.990531][ T6166] ? __pfx_vpanic+0x10/0x10 [ 105.990564][ T6166] ? sys_imageblit+0x19fb/0x1d60 [ 105.990600][ T6166] panic+0xd1/0xe0 [ 105.990633][ T6166] ? __pfx_panic+0x10/0x10 [ 105.990662][ T6166] ? sys_imageblit+0x19fb/0x1d60 [ 105.990697][ T6166] ? preempt_schedule_common+0x42/0xc0 [ 105.990741][ T6166] check_panic_on_warn.cold+0x19/0x34 [ 105.990772][ T6166] end_report.part.0+0x3a/0x90 [ 105.990813][ T6166] kasan_report.cold+0xe/0x18 [ 105.990855][ T6166] ? sys_imageblit+0x19fb/0x1d60 [ 105.990895][ T6166] sys_imageblit+0x19fb/0x1d60 [ 105.990936][ T6166] ? __pfx_sys_imageblit+0x10/0x10 [ 105.990974][ T6166] ? prb_read_valid+0x78/0xa0 [ 105.991004][ T6166] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 105.991053][ T6166] soft_cursor+0x524/0xa10 [ 105.991085][ T6166] ? __probestub_notifier_run+0x10/0x10 [ 105.991127][ T6166] ? fb_get_color_depth+0x120/0x250 [ 105.991173][ T6166] bit_cursor+0xca1/0x1490 [ 105.991207][ T6166] ? __pfx_bit_cursor+0x10/0x10 [ 105.991236][ T6166] ? __lock_acquire+0x4a5/0x2630 [ 105.991284][ T6166] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 105.991325][ T6166] ? get_color+0x1da/0x450 [ 105.991365][ T6166] ? __pfx_bit_cursor+0x10/0x10 [ 105.991396][ T6166] fbcon_cursor+0x43c/0x5e0 [ 105.991438][ T6166] ? add_softcursor+0x210/0x290 [ 105.991472][ T6166] set_cursor+0x1db/0x250 [ 105.991502][ T6166] con_write+0x89/0xb0 [ 105.991538][ T6166] n_tty_write+0x431/0x11c0 [ 105.991588][ T6166] ? __pfx_n_tty_write+0x10/0x10 [ 105.991638][ T6166] ? __pfx_woken_wake_function+0x10/0x10 [ 105.991672][ T6166] ? __pfx___might_resched+0x10/0x10 [ 105.991702][ T6166] ? kfree+0x1dd/0x6c0 [ 105.991743][ T6166] ? __pfx_n_tty_write+0x10/0x10 [ 105.991785][ T6166] file_tty_write.isra.0+0x4d2/0x890 [ 105.991823][ T6166] redirected_tty_write+0xd4/0x120 [ 105.991856][ T6166] vfs_write+0x6ac/0x1070 [ 105.991884][ T6166] ? __pfx_redirected_tty_write+0x10/0x10 [ 105.991914][ T6166] ? __pfx_vfs_write+0x10/0x10 [ 105.991937][ T6166] ? find_held_lock+0x2b/0x80 [ 105.991977][ T6166] ksys_write+0x12a/0x250 [ 105.992005][ T6166] ? __pfx_ksys_write+0x10/0x10 [ 105.992036][ T6166] ? rcu_is_watching+0x12/0xc0 [ 105.992067][ T6166] do_syscall_64+0x115/0x840 [ 105.992100][ T6166] ? clear_bhb_loop+0x40/0x90 [ 105.992130][ T6166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.992155][ T6166] RIP: 0033:0x7fbcbe79ce59 [ 105.992177][ T6166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.992204][ T6166] RSP: 002b:00007fbcbf6c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.992229][ T6166] RAX: ffffffffffffffda RBX: 00007fbcbea16090 RCX: 00007fbcbe79ce59 [ 105.992248][ T6166] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 000000000000000b [ 105.992265][ T6166] RBP: 00007fbcbe832d6f R08: 0000000000000000 R09: 0000000000000000 [ 105.992280][ T6166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.992295][ T6166] R13: 00007fbcbea16128 R14: 00007fbcbea16090 R15: 00007ffd8a8d1bd8 [ 105.992320][ T6166] [ 105.992570][ T6166] Kernel Offset: disabled