last executing test programs: 9.302179778s ago: executing program 3 (id=77): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x5, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_O_TEI={0x8, 0x9, 0x5}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x14) r2 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2, 0x80000000df, 0x14, 0x401, 0x8000) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(r3, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$auto_BLKRRPART(r5, 0x125f, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x509a40, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x6]}, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') setsockopt$auto(r2, 0x1, 0xd, &(0x7f0000000000)='\'-+\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0x9) listen$auto(0x3, 0x81) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 9.037029349s ago: executing program 0 (id=81): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x39db00, 0x0) io_uring_setup$auto(0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$auto(0x8000000, 0x0, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/mem\x00', 0x40, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x194) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x20000054) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f00000000c0), 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x202003, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) mmap$auto(0xfffffffffffffffb, 0x1, 0xdf, 0xdb74, 0xffffffffffffffff, 0x10001) io_uring_setup$auto(0x8008, 0x0) close_range$auto(0x2, 0x8, 0x0) clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x2, 0x8, 0x0) 7.515808301s ago: executing program 0 (id=82): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.7/usb8/remove\x00', 0xa001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = epoll_create$auto(0x1) capset$auto(0x0, 0x0) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) read$auto(r1, 0x0, 0x8) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x4000) close_range$auto(0x2, r0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) connect$auto(r0, &(0x7f0000000040)=@hci={0x1f, 0x1, 0x2}, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/fail-nth\x00', 0x4c040, 0x0) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) mprotect$auto(0x0, 0x806121, 0x8) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r2) connect$auto(r0, &(0x7f0000000080)=@phonet={0x23, 0x7, 0x3, 0xf}, 0x2) openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010027bd7000f54905f08166b44208000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x9, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mbind$auto(0x10001, 0x4, 0x6, &(0x7f0000000000)=0x8, 0x3, 0x0) 7.515229388s ago: executing program 3 (id=84): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r0, 0x0, 0x400000000006) 7.038235251s ago: executing program 3 (id=85): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r1 = socket(0xa, 0x5, 0x84) io_uring_setup$auto(0x401, 0x0) getsockopt$auto(r1, 0x84, 0x18, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = socket(0xa, 0x3, 0x3a) close$auto(r2) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r2, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x5, 0x6908, 0x80) r3 = open(0x0, 0x0, 0x408) getdents$auto(r3, 0x0, 0x400018) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/dev_snmp6/veth1_to_bond\x00', 0x2082, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x801, 0x4f46, 0x6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) eventfd$auto(0xffff86c5) 6.935679306s ago: executing program 2 (id=88): unshare$auto(0x40000080) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/mcfilter6\x00', 0x121000, 0x0) pread64$auto(r0, 0x0, 0x8, 0xffff) r1 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f00000006c0), 0x20040, 0x0) readv$auto(r1, &(0x7f00000007c0)={0x0, 0x5}, 0x5) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x80800, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x4cb00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) close_range$auto(r0, 0x8, 0x0) unshare$auto(0x40000080) bind$auto(0x3, 0x0, 0xb) socket(0x1d, 0x2, 0x7) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x8002, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r2, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) listen$auto(0x3, 0x81) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x3) 5.991580029s ago: executing program 0 (id=89): mmap$auto(0x100000000000, 0x2000b, 0xdd, 0xeb1, 0xffffffffffffffff, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0xffff}, 0x5, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) fcntl$auto(0x3, 0x4, 0xa553) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) read$auto(0x3, 0x0, 0x8080) shutdown$auto(0x200000003, 0x2) r1 = bpf$auto(0x0, 0x0, 0x6f3) socket(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) syz_genetlink_get_family_id$auto_ioam6(0x0, r1) unshare$auto(0x40000080) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r2, 0x0, 0x40) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty58\x00', 0x800, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="20002abd7000fedbdf250500000008000500050000000500060008000000740001800800030007000000080003000600", @ANYBLOB="140002006e7230000000000000000000000000001b00020073797a5f74756e000000000000000000080001", @ANYRES32=r4, @ANYBLOB="1400020069705f7674693000000000000000000014000200766574683000000000000000000000000500070004000000050002000c000000000007000d000000"], 0xb0}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000) 5.988354705s ago: executing program 1 (id=90): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, 0x0, 0x10000, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xa, 0x3, 0xc, 0x5, 0x0, 0x3, 0x6, 0x10000000000002, 0x6c8, 0x5, 0x20000000003, 0x5, 0xb0, 0x7, 0x10000002, 0x3, 0x5, 0x7, 0x0, 0xfffffffd, 0x42, 0x0, 0x0, 0x0, 0x2, 0x7, 0x200, 0x0, 0x0, [0x0, 0x20000000, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x10000, 0x0, 0x0, 0xfffffffffffffffe, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x2]}, 0x1fe, 0x40081) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x810}, 0x7, 0x8) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/options/trace_printk_dest\x00', 0x20000, 0x0) r2 = openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) close_range$auto(r2, r2, 0x1) open(0x0, 0x22240, 0x155) socket(0x2, 0x80802, 0x0) close_range$auto(0x2, 0xa, 0x27) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1a, &(0x7f0000000000), 0x1) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) 5.930592305s ago: executing program 2 (id=91): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x161342, 0x130) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x9, 0x1ff, 0x4, 0x4000000000014, r0, 0xceb) socket(0xa, 0x3, 0x40000073) mmap$auto(0xfffffffffffffff9, 0x2000a, 0x100000000009f, 0xeb2, 0x401, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x668401, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dmmidi2\x00', 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x01\x00\x01\x00\x00\x00\x00\x00\xc7k', 0x81) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x2}, 0xed7138c}, 0x2, 0x9) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0) cachestat$auto(r1, &(0x7f0000000640)={0x8, 0x4000000000008}, 0x0, 0x0) r2 = socket(0xa, 0x5, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/nfs/parameters/nfs_mountpoint_expiry_timeout\x00', 0xa001, 0x0) sendto$auto(r2, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) 5.471043966s ago: executing program 1 (id=92): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/nbd3/queue/iosched/front_merges\x00', 0x2041, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x2718, 0xfffffffffffffffc, 0x0) socket(0x2, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00cf81000000ffffffffffffff291d00", 0x3ff, 0x408, 0xffc, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) recvmmsg$auto(0xffffffffffffffff, 0x0, 0xd, 0xc, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0xca, 0x0, 0x2d9) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x40800) execve$auto(&(0x7f0000000080)='\x00', &(0x7f00000001c0)=&(0x7f0000000180)='-\x00', &(0x7f00000002c0)=&(0x7f0000000200)='/dev/snd/midiC2D0\x00') mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 5.035209309s ago: executing program 2 (id=93): syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000d80), 0xffffffffffffffff) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) setresuid$auto(0x0, 0x0, 0x0) ioctl$auto_BLKALIGNOFF(r0, 0x127a, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40000008000) sendmsg$auto_NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41811}, 0x20000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/fail_over_mac\x00', 0x103b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x8080000001) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x1, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) 3.930637785s ago: executing program 0 (id=94): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r0, 0x0, 0x400000000006) 3.786626631s ago: executing program 0 (id=95): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x14, r1, 0x1, 0x70bd31, 0x25dfdbfd}, 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) prctl$auto(0x1, 0x8, 0x0, 0x3a, 0x1) 3.634225827s ago: executing program 1 (id=96): socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r0 = socket(0xa, 0x5, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r0, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) r1 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_BINDTOIFINDEX(r1, 0x1, 0x3e, &(0x7f0000000080)='/dev/audio1\x00', &(0x7f00000000c0)=0x8) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) bpf$auto(0x0, 0x0, 0x6f3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7ff, 0x200}, 0x100, 0x6) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000100), 0x8040, 0x0) io_uring_setup$auto(0x9, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x403c6f2b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) acct$auto(&(0x7f0000000380)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/fo\"mat\x00') sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, 0x0, 0x4048000) 3.466755306s ago: executing program 2 (id=97): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r1, 0x4018620d, 0x9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x5, 0x5, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) write$auto(0x3, 0x0, 0x800) setrlimit$auto(0xb, 0x0) getpid() mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe982, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(r0, 0x0, 0x9a6, 0x7000000) 3.237931083s ago: executing program 1 (id=98): mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) r0 = socket(0x15, 0x5, 0x0) close_range$auto(r0, r0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) getcwd$auto(0x0, 0x7) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x40103, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8001) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x80, 0x0) r1 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) write$auto(r1, &(0x7f0000000800)='0\"\xfb]$|\xcb1j\xeb0B|d\x1e\x99\xb9\xfd\xd3\x89O\x9f\xac+\xf6\xd7/\xc9\xe9x\xd4\xf3\xc8\xf5\x7fW\xd3\xa6\x96\xd3^\xb8\xb4gq%H\xcc\x88r\xeaO\x8e\x10\t\xc7 P\xcf\xa7H\b\x04\x87\x98\x16`\xa3S\xd46\x10Wf\xc9<7\xcf\xc9\xf1\b\x9b\x8c\x9fu;\xc48(u\xf9Bx\n\xafW%/bBT\xa9\a\xed\xd2H4\x96\xa3U\xca\xf1\xef\x14dU\x15\x16\xa7\xdd\x01\x0e\xda\xc8\xd3\x00\xc5\b\x1a\xb0mN\x01\xb1\xc8B.U\xd1\x02\'\x9a\'\xf1;\xedJ\xf6@\xac\a\xf5\xf5 |\x1ex\xb7@=\xad\xe7\xff\xd6\xc1\xcf\x11\x0f\x99+v\x873\xc4\x17]\x17!]ct\xff\t\xb2A\x0f\x91\x02\xca&\x91n\xc1\x9e\xcb\x1b\xec\x972\xa9\x00', 0x4000002) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) setgroups$auto(0xe32, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 2.260974758s ago: executing program 3 (id=99): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r0 = open(0x0, 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x9, 0x1ff, 0x4, 0x4000000000014, r0, 0xceb) socket(0xa, 0x3, 0x40000073) mmap$auto(0xfffffffffffffff9, 0x2000a, 0x100000000009f, 0xeb2, 0x401, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x668401, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dmmidi2\x00', 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x01\x00\x01\x00\x00\x00\x00\x00\xc7k', 0x81) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x2}, 0xed7138c}, 0x2, 0x9) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0) cachestat$auto(r1, &(0x7f0000000640)={0x8, 0x4000000000008}, 0x0, 0x0) r2 = socket(0xa, 0x5, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/nfs/parameters/nfs_mountpoint_expiry_timeout\x00', 0xa001, 0x0) sendto$auto(r2, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) 2.138243954s ago: executing program 2 (id=100): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket(0x2, 0x2, 0x0) connect$auto(0x3, 0x0, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4a8000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, &(0x7f0000000400)={[0x8, 0x200000000005, 0x7, 0x7, 0x0, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x3, 0xfffffffffffff954, 0xfffffffffffffff8, 0xfff]}, &(0x7f0000000180)={[0x2, 0x8000, 0x4, 0x8000000000000001, 0x7f, 0x2000000, 0x7, 0x8, 0x8, 0x2, 0x8, 0x10, 0x5, 0x9, 0x9, 0x2]}, &(0x7f0000000080)={0x800000000001ff, 0x401}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto_SO_DETACH_REUSEPORT_BPF(r1, 0x1, 0x44, &(0x7f0000000180)='\x91u\xe5?{\x00\x00\x00', 0x7) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000001100), 0xa8000, 0x0) sendmsg$auto_NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040060}, 0x40) r3 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r3, 0x0, 0x1) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r2, 0xc0085504, 0x0) 2.095597159s ago: executing program 0 (id=101): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r1 = socket(0xa, 0x2, 0x0) cachestat$auto(r1, &(0x7f0000000000)={0x0, 0x7fc}, &(0x7f0000000040)={0x2, 0x0, 0xd6, 0x1, 0x3}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = socket(0xa, 0x3, 0x3a) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r2, 0x8, 0x0, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x4a901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000001c0)={0x0, 0x5516, 0x0}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r4 = open(0x0, 0x0, 0x408) socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x61, 0x100001000000003, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x45, 0x0, 0x0) getdents$auto(r4, 0x0, 0x400018) mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) clone$auto(0x1, 0x1, 0x0, 0x0, 0x2) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x5, 0xfff, 0x44eb2, 0x10006, 0x300000000000) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x400) r5 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon0\x00', 0x82640, 0x0) readv$auto(r5, &(0x7f0000000380)={0x0, 0x8}, 0x8) 1.491878887s ago: executing program 1 (id=102): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x14, r1, 0x1, 0x70bd31, 0x25dfdbfd}, 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) prctl$auto(0x1, 0x8, 0x0, 0x3a, 0x1) 1.434225922s ago: executing program 2 (id=103): sysfs$auto(0x2, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xe) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x18, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range$auto(0x0, 0x5, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb2, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x1004000000008dd, 0x1000000eb1, r3, 0x0) unshare$auto(0x40000080) readahead$auto(r3, 0x2, 0x10001) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xffffffffffffffff, 0x8000) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/kvm/irq_exits\x00', 0xaa042, 0x0) 1.284343279s ago: executing program 3 (id=104): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x14, r1, 0x1, 0x70bd31, 0x25dfdbfd}, 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, 0x0, 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) prctl$auto(0x1, 0x8, 0x0, 0x3a, 0x1) 149.678292ms ago: executing program 3 (id=105): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r0 = open(0x0, 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x9, 0x1ff, 0x4, 0x4000000000014, r0, 0xceb) socket(0xa, 0x3, 0x40000073) mmap$auto(0xfffffffffffffff9, 0x2000a, 0x100000000009f, 0xeb2, 0x401, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x668401, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dmmidi2\x00', 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x01\x00\x01\x00\x00\x00\x00\x00\xc7k', 0x81) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x2}, 0xed7138c}, 0x2, 0x9) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0) cachestat$auto(r1, &(0x7f0000000640)={0x8, 0x4000000000008}, 0x0, 0x0) r2 = socket(0xa, 0x5, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/nfs/parameters/nfs_mountpoint_expiry_timeout\x00', 0xa001, 0x0) sendto$auto(r2, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) 0s ago: executing program 1 (id=106): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) socket(0x6, 0x3, 0x37) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x26, 0x5, 0x8c68) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x101e41, 0x0) ioperm$auto(0x4, 0x100000001, 0x4000005) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyr0\x00', 0x74c40, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x800, 0x8000009, 0x1, 0x19, 0xffffffffffffffff, 0x100000000000008) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x7, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x40146f2c, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x40146f2b, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x50ba82, 0x0) read$auto(r4, 0x0, 0xb4d3) unshare$auto(0x40000080) setsockopt$auto(r0, 0xd0, 0x800000e4, 0x0, 0x569) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.245' (ED25519) to the list of known hosts. [ 83.619728][ T5809] cgroup: Unknown subsys name 'net' [ 83.736244][ T5809] cgroup: Unknown subsys name 'cpuset' [ 83.745610][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.273843][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.219244][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.227648][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.235612][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.252929][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.260622][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.283457][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.292187][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.302262][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.310510][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.320454][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.320552][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.335333][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.343244][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.352013][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.352482][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.368644][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.368706][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.388158][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.396100][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.396797][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.958651][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 87.984115][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 88.090084][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 88.176061][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 88.228976][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.237008][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.244933][ T5825] bridge_slave_0: entered allmulticast mode [ 88.252035][ T5825] bridge_slave_0: entered promiscuous mode [ 88.295588][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.303025][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.310431][ T5825] bridge_slave_1: entered allmulticast mode [ 88.317989][ T5825] bridge_slave_1: entered promiscuous mode [ 88.366782][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.374149][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.381607][ T5820] bridge_slave_0: entered allmulticast mode [ 88.389251][ T5820] bridge_slave_0: entered promiscuous mode [ 88.437671][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.444935][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.452089][ T5820] bridge_slave_1: entered allmulticast mode [ 88.459407][ T5820] bridge_slave_1: entered promiscuous mode [ 88.467110][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.474750][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.482046][ T5826] bridge_slave_0: entered allmulticast mode [ 88.489691][ T5826] bridge_slave_0: entered promiscuous mode [ 88.500652][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.532124][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.539736][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.547193][ T5826] bridge_slave_1: entered allmulticast mode [ 88.554316][ T5826] bridge_slave_1: entered promiscuous mode [ 88.563607][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.615078][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.622420][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.629579][ T5830] bridge_slave_0: entered allmulticast mode [ 88.637333][ T5830] bridge_slave_0: entered promiscuous mode [ 88.647506][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.678242][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.685666][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.693150][ T5830] bridge_slave_1: entered allmulticast mode [ 88.700173][ T5830] bridge_slave_1: entered promiscuous mode [ 88.710446][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.722877][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.734646][ T5825] team0: Port device team_slave_0 added [ 88.761771][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.787517][ T5825] team0: Port device team_slave_1 added [ 88.837575][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.849587][ T5820] team0: Port device team_slave_0 added [ 88.857305][ T5826] team0: Port device team_slave_0 added [ 88.879658][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.891422][ T5820] team0: Port device team_slave_1 added [ 88.908167][ T5826] team0: Port device team_slave_1 added [ 88.925859][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.933031][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.959391][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.000102][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.007365][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.034877][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.056761][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.063892][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.090539][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.102449][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.109439][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.136024][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.160183][ T5830] team0: Port device team_slave_0 added [ 89.167560][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.175030][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.201498][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.221095][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.228099][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.254564][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.280289][ T5830] team0: Port device team_slave_1 added [ 89.353120][ T5825] hsr_slave_0: entered promiscuous mode [ 89.359639][ T5825] hsr_slave_1: entered promiscuous mode [ 89.366997][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.374269][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.401325][ T5835] Bluetooth: hci0: command tx timeout [ 89.407426][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.449323][ T5826] hsr_slave_0: entered promiscuous mode [ 89.455875][ T5826] hsr_slave_1: entered promiscuous mode [ 89.462057][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 89.467958][ T5826] Cannot create hsr debugfs directory [ 89.473856][ T5835] Bluetooth: hci3: command tx timeout [ 89.482934][ T51] Bluetooth: hci1: command tx timeout [ 89.488827][ T5835] Bluetooth: hci2: command tx timeout [ 89.489427][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.501935][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.528509][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.585381][ T5820] hsr_slave_0: entered promiscuous mode [ 89.591649][ T5820] hsr_slave_1: entered promiscuous mode [ 89.598465][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 89.604284][ T5820] Cannot create hsr debugfs directory [ 89.770103][ T5830] hsr_slave_0: entered promiscuous mode [ 89.776635][ T5830] hsr_slave_1: entered promiscuous mode [ 89.783336][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 89.789078][ T5830] Cannot create hsr debugfs directory [ 90.130780][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.153058][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.164539][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.184429][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.235097][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.255471][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.266648][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.288455][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.363946][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.377708][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.415397][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.426504][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.495562][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.515919][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.531277][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.541710][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.621878][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.654639][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.750846][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.778539][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.792914][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.800323][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.847191][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.854498][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.888926][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.914577][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.921675][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.967388][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.974597][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.070051][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.113385][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.127763][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.134956][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.156431][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.163643][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.274388][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.308287][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.340224][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.347464][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.390339][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.397566][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.448830][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.472839][ T5835] Bluetooth: hci0: command tx timeout [ 91.568637][ T51] Bluetooth: hci1: command tx timeout [ 91.568817][ T5831] Bluetooth: hci3: command tx timeout [ 91.575440][ T5835] Bluetooth: hci2: command tx timeout [ 91.671566][ T5825] veth0_vlan: entered promiscuous mode [ 91.709713][ T5825] veth1_vlan: entered promiscuous mode [ 91.721674][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.780618][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.843941][ T5825] veth0_macvtap: entered promiscuous mode [ 91.868377][ T5825] veth1_macvtap: entered promiscuous mode [ 91.917353][ T5826] veth0_vlan: entered promiscuous mode [ 91.943772][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.960152][ T5826] veth1_vlan: entered promiscuous mode [ 91.969786][ T5830] veth0_vlan: entered promiscuous mode [ 91.987607][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.001466][ T5830] veth1_vlan: entered promiscuous mode [ 92.025156][ T1145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.045483][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.057611][ T1145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.066794][ T1145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.090976][ T1145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.120401][ T5826] veth0_macvtap: entered promiscuous mode [ 92.131985][ T5826] veth1_macvtap: entered promiscuous mode [ 92.177729][ T5830] veth0_macvtap: entered promiscuous mode [ 92.208511][ T5830] veth1_macvtap: entered promiscuous mode [ 92.238235][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.268011][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.281139][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.301031][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.301103][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.324241][ T144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.335775][ T144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.360716][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.370471][ T144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.380391][ T1145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.413509][ T1145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.440662][ T1145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.461660][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.462242][ T1145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.469600][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.489106][ T1145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.501734][ T5820] veth0_vlan: entered promiscuous mode [ 92.521605][ T5820] veth1_vlan: entered promiscuous mode [ 92.610241][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.633107][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.641046][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.721554][ T5820] veth0_macvtap: entered promiscuous mode [ 92.739829][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.766370][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.792670][ T5820] veth1_macvtap: entered promiscuous mode [ 92.831939][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.842999][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.887451][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.910958][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.921286][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.999290][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.085111][ T1136] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.112581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.143564][ T1154] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.189215][ T1154] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.199958][ T1154] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.501388][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 93.522800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.543746][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.554125][ T5835] Bluetooth: hci0: command tx timeout [ 93.560109][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.568090][ T5914] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 93.572846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.633368][ T5835] Bluetooth: hci3: command tx timeout [ 93.633393][ T5831] Bluetooth: hci2: command tx timeout [ 93.638839][ T51] Bluetooth: hci1: command tx timeout [ 93.692776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 93.749448][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.802392][ T29] cfg80211: failed to load regulatory.db [ 93.808764][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.854098][ T5923] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 94.026346][ T5919] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 94.102445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 94.211335][ T5927] process 'syz.0.6' launched './file0' with NULL argv: empty string added [ 94.307288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.322770][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.632704][ T5831] Bluetooth: hci0: command tx timeout [ 95.712665][ T5831] Bluetooth: hci2: command tx timeout [ 95.722384][ T5831] Bluetooth: hci1: command tx timeout [ 95.723117][ T51] Bluetooth: hci3: command tx timeout [ 96.048491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.254111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.262711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.813253][ T5976] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.903267][ T5977] input: jJǸ-9%vJ86 as /devices/virtual/input/input7 [ 99.073489][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 100.924075][ T6052] Console: switching to colour VGA+ 80x25 [ 102.687301][ T6066] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 102.713162][ T6066] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 102.856182][ T6066] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 102.898622][ T6066] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 102.942384][ T6066] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 103.292699][ T6066] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 103.303097][ T6059] syz.0.20 (6059) used greatest stack depth: 19672 bytes left [ 103.361558][ T6066] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 103.409277][ T6066] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 103.527582][ T6066] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 103.568994][ T6066] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 103.616359][ T6066] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 103.673165][ T6066] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 104.609978][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.912456][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.397349][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 105.632341][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.680015][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.992315][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.125418][ T6115] syz.1.29 uses obsolete (PF_INET,SOCK_PACKET) [ 107.492375][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 107.729950][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.066246][ T6107] Zero length message leads to an empty skb [ 108.752398][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 109.088415][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.554416][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.778271][ T6146] mmap: syz.2.34 (6146) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 109.802465][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 110.742756][ T6153] usbip-vudc usbip-vudc.0: gadget not bound [ 112.102443][ T6174] FAULT_INJECTION: forcing a failure. [ 112.102443][ T6174] name failslab, interval 1, probability 0, space 0, times 1 [ 112.149670][ T6174] CPU: 1 UID: 0 PID: 6174 Comm: syz.3.41 Not tainted syzkaller #0 PREEMPT(full) [ 112.149711][ T6174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 112.149735][ T6174] Call Trace: [ 112.149750][ T6174] [ 112.149764][ T6174] dump_stack_lvl+0x100/0x190 [ 112.149815][ T6174] should_fail_ex.cold+0x5/0xa [ 112.149848][ T6174] should_failslab+0xc2/0x120 [ 112.149874][ T6174] __kmalloc_cache_noprof+0x7a/0x6f0 [ 112.149908][ T6174] ? proc_thread_self_get_link+0x1a6/0x210 [ 112.149957][ T6174] proc_thread_self_get_link+0x1a6/0x210 [ 112.149998][ T6174] pick_link+0xac2/0x13c0 [ 112.150038][ T6174] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 112.150062][ T6174] step_into_slowpath+0x9ba/0xf90 [ 112.150087][ T6174] ? __pfx_step_into_slowpath+0x10/0x10 [ 112.150111][ T6174] ? lookup_fast+0x2da/0x600 [ 112.150129][ T6174] ? inode_permission+0x374/0x620 [ 112.150153][ T6174] link_path_walk+0xf28/0x1cc0 [ 112.150180][ T6174] path_openat+0x1be/0x31a0 [ 112.150193][ T6174] ? kasan_save_stack+0x3f/0x50 [ 112.150213][ T6174] ? kasan_save_stack+0x30/0x50 [ 112.150232][ T6174] ? kasan_save_track+0x14/0x30 [ 112.150251][ T6174] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 112.150284][ T6174] ? __pfx_path_openat+0x10/0x10 [ 112.150306][ T6174] do_file_open+0x20e/0x430 [ 112.150322][ T6174] ? __pfx_do_file_open+0x10/0x10 [ 112.150350][ T6174] ? alloc_fd+0x476/0x790 [ 112.150375][ T6174] ? do_getname+0x191/0x390 [ 112.150394][ T6174] do_sys_openat2+0x10d/0x1e0 [ 112.150412][ T6174] ? __pfx_do_sys_openat2+0x10/0x10 [ 112.150437][ T6174] __x64_sys_openat+0x12d/0x210 [ 112.150455][ T6174] ? __pfx___x64_sys_openat+0x10/0x10 [ 112.150480][ T6174] do_syscall_64+0x106/0xf80 [ 112.150495][ T6174] ? clear_bhb_loop+0x40/0x90 [ 112.150513][ T6174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.150531][ T6174] RIP: 0033:0x7f469839c629 [ 112.150549][ T6174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.150564][ T6174] RSP: 002b:00007f4699214028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 112.150582][ T6174] RAX: ffffffffffffffda RBX: 00007f4698615fa0 RCX: 00007f469839c629 [ 112.150593][ T6174] RDX: 0000000000008800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 112.150603][ T6174] RBP: 00007f4698432b39 R08: 0000000000000000 R09: 0000000000000000 [ 112.150612][ T6174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.150621][ T6174] R13: 00007f4698616038 R14: 00007f4698615fa0 R15: 00007ffc034659a8 [ 112.150640][ T6174] [ 115.026476][ T6235] usbip-vudc usbip-vudc.0: gadget not bound [ 119.136787][ T6291] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 124.444104][ T6352] FAULT_INJECTION: forcing a failure. [ 124.444104][ T6352] name failslab, interval 1, probability 0, space 0, times 0 [ 124.497622][ T6352] CPU: 1 UID: 0 PID: 6352 Comm: syz.0.80 Not tainted syzkaller #0 PREEMPT(full) [ 124.497659][ T6352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 124.497677][ T6352] Call Trace: [ 124.497687][ T6352] [ 124.497699][ T6352] dump_stack_lvl+0x100/0x190 [ 124.497761][ T6352] should_fail_ex.cold+0x5/0xa [ 124.497792][ T6352] should_failslab+0xc2/0x120 [ 124.497820][ T6352] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 124.497868][ T6352] ? alloc_inode+0x183/0x250 [ 124.497901][ T6352] ? stashed_dentry_get+0x10a/0x2c0 [ 124.497929][ T6352] ? stashed_dentry_get+0x10a/0x2c0 [ 124.497962][ T6352] alloc_inode+0x183/0x250 [ 124.498002][ T6352] path_from_stashed+0x25b/0x750 [ 124.498039][ T6352] pidfs_alloc_file+0xf8/0x290 [ 124.498078][ T6352] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 124.498125][ T6352] pidfd_prepare+0x123/0x200 [ 124.498157][ T6352] __x64_sys_pidfd_open+0x105/0x1a0 [ 124.498195][ T6352] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 124.498246][ T6352] do_syscall_64+0x106/0xf80 [ 124.498277][ T6352] ? clear_bhb_loop+0x40/0x90 [ 124.498311][ T6352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.498338][ T6352] RIP: 0033:0x7f240bb9c629 [ 124.498366][ T6352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.498392][ T6352] RSP: 002b:00007f240cb32028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 124.498422][ T6352] RAX: ffffffffffffffda RBX: 00007f240be15fa0 RCX: 00007f240bb9c629 [ 124.498440][ T6352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 124.498452][ T6352] RBP: 00007f240bc32b39 R08: 0000000000000000 R09: 0000000000000000 [ 124.498467][ T6352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.498481][ T6352] R13: 00007f240be16038 R14: 00007f240be15fa0 R15: 00007fffa64252f8 [ 124.498512][ T6352] [ 125.110156][ T6364] ======================================================= [ 125.110156][ T6364] WARNING: The mand mount option has been deprecated and [ 125.110156][ T6364] and is ignored by this kernel. Remove the mand [ 125.110156][ T6364] option from the mount to silence this warning. [ 125.110156][ T6364] ======================================================= [ 126.164486][ T6364] kexec: Could not allocate control_code_buffer [ 127.650334][ T6367] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 127.758059][ T6391] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 127.868762][ T6394] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 128.464943][ T6394] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 syzkaller syzkaller login: [ 130.415359][ T6434] netlink: 28 bytes leftover after parsing attributes in process `syz.1.90'. [ 130.960625][ T6438] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 132.577421][ T6450] kexec: Could not allocate control_code_buffer [ 132.868033][ T6464] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 133.203321][ T6476] ima: policy update failed [ 133.253022][ T30] audit: type=1807 audit(1772053263.733:2): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 133.253075][ T30] audit: type=1802 audit(1772053263.743:3): pid=6476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.98" res=0 errno=0 [ 133.253124][ T30] audit: type=1802 audit(1772053263.743:4): pid=6476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.98" res=0 errno=0 [ 136.250842][ T6522] FAULT_INJECTION: forcing a failure. [ 136.250842][ T6522] name failslab, interval 1, probability 0, space 0, times 0 [ 136.288230][ T6522] CPU: 1 UID: 0 PID: 6522 Comm: syz.1.106 Not tainted syzkaller #0 PREEMPT(full) [ 136.288263][ T6522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 136.288273][ T6522] Call Trace: [ 136.288279][ T6522] [ 136.288285][ T6522] dump_stack_lvl+0x100/0x190 [ 136.288315][ T6522] should_fail_ex.cold+0x5/0xa [ 136.288334][ T6522] should_failslab+0xc2/0x120 [ 136.288348][ T6522] __kmalloc_cache_noprof+0x7a/0x6f0 [ 136.288368][ T6522] ? vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 136.288384][ T6522] ? vidtv_psi_pmt_table_init+0x363/0x430 [ 136.288402][ T6522] vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 136.288419][ T6522] vidtv_channel_si_init+0x1289/0x18d0 [ 136.288444][ T6522] vidtv_mux_init+0x526/0xbf0 [ 136.288475][ T6522] vidtv_start_feed+0x33e/0x4c0 [ 136.288497][ T6522] ? __pfx_vidtv_start_feed+0x10/0x10 [ 136.288519][ T6522] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 136.288545][ T6522] ? mark_held_locks+0x40/0x70 [ 136.288568][ T6522] ? __pfx_vidtv_start_feed+0x10/0x10 [ 136.288589][ T6522] dmx_ts_feed_start_filtering+0xf6/0x220 [ 136.288616][ T6522] dvb_dmxdev_start_feed+0x273/0x3f0 [ 136.288638][ T6522] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 136.288660][ T6522] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 136.288682][ T6522] dvb_demux_do_ioctl+0xe64/0x1200 [ 136.288708][ T6522] dvb_usercopy+0x167/0x340 [ 136.288726][ T6522] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 136.288747][ T6522] ? __pfx_dvb_usercopy+0x10/0x10 [ 136.288773][ T6522] ? __fget_files+0x21f/0x3d0 [ 136.288799][ T6522] dvb_demux_ioctl+0x29/0x40 [ 136.288816][ T6522] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 136.288835][ T6522] __x64_sys_ioctl+0x18e/0x210 [ 136.288861][ T6522] do_syscall_64+0x106/0xf80 [ 136.288878][ T6522] ? clear_bhb_loop+0x40/0x90 [ 136.288901][ T6522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.288917][ T6522] RIP: 0033:0x7ff943f9c629 [ 136.288932][ T6522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.288946][ T6522] RSP: 002b:00007ff944e5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.288961][ T6522] RAX: ffffffffffffffda RBX: 00007ff944215fa0 RCX: 00007ff943f9c629 [ 136.288971][ T6522] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 136.288980][ T6522] RBP: 00007ff944032b39 R08: 0000000000000000 R09: 0000000000000000 [ 136.288989][ T6522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.288997][ T6522] R13: 00007ff944216038 R14: 00007ff944215fa0 R15: 00007ffc43dea9b8 [ 136.289017][ T6522] [ 136.289095][ T6522] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 136.552349][ T6522] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 136.560776][ T6522] CPU: 1 UID: 0 PID: 6522 Comm: syz.1.106 Not tainted syzkaller #0 PREEMPT(full) [ 136.570006][ T6522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 136.580258][ T6522] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90 [ 136.586203][ T6522] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 2d 7f dc f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 4c 4c 8b 23 49 39 ec 74 36 e8 09 7f dc f9 4d 85 e4 [ 136.605826][ T6522] RSP: 0018:ffffc900055afa10 EFLAGS: 00010247 [ 136.611899][ T6522] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: ffffc9000d381000 [ 136.619971][ T6522] RDX: 0000000000000000 RSI: ffffffff882b7c53 RDI: 0000000000000005 [ 136.627984][ T6522] RBP: ffff88802d471240 R08: 0000000000000000 R09: 4453534204050000 [ 136.635957][ T6522] R10: 0000000000000005 R11: ffffffff82733314 R12: 0000000000000000 [ 136.643931][ T6522] R13: ffff888036208380 R14: ffff888022294920 R15: ffff888036208700 [ 136.652077][ T6522] FS: 00007ff944e5b6c0(0000) GS:ffff88812444f000(0000) knlGS:0000000000000000 [ 136.661009][ T6522] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.667594][ T6522] CR2: 00007f240bbe9d40 CR3: 000000007c66a000 CR4: 00000000003526f0 [ 136.675670][ T6522] Call Trace: [ 136.678960][ T6522] [ 136.681897][ T6522] vidtv_channel_si_init+0x12fc/0x18d0 [ 136.687477][ T6522] vidtv_mux_init+0x526/0xbf0 [ 136.692176][ T6522] vidtv_start_feed+0x33e/0x4c0 [ 136.697181][ T6522] ? __pfx_vidtv_start_feed+0x10/0x10 [ 136.702677][ T6522] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 136.709309][ T6522] ? mark_held_locks+0x40/0x70 [ 136.714096][ T6522] ? __pfx_vidtv_start_feed+0x10/0x10 [ 136.719497][ T6522] dmx_ts_feed_start_filtering+0xf6/0x220 [ 136.725243][ T6522] dvb_dmxdev_start_feed+0x273/0x3f0 [ 136.730677][ T6522] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 136.736155][ T6522] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 136.741369][ T6522] dvb_demux_do_ioctl+0xe64/0x1200 [ 136.746497][ T6522] dvb_usercopy+0x167/0x340 [ 136.751033][ T6522] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 136.756622][ T6522] ? __pfx_dvb_usercopy+0x10/0x10 [ 136.761680][ T6522] ? __fget_files+0x21f/0x3d0 [ 136.766378][ T6522] dvb_demux_ioctl+0x29/0x40 [ 136.771158][ T6522] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 136.776473][ T6522] __x64_sys_ioctl+0x18e/0x210 [ 136.781254][ T6522] do_syscall_64+0x106/0xf80 [ 136.785862][ T6522] ? clear_bhb_loop+0x40/0x90 [ 136.790551][ T6522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.796451][ T6522] RIP: 0033:0x7ff943f9c629 [ 136.800880][ T6522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.820670][ T6522] RSP: 002b:00007ff944e5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.829192][ T6522] RAX: ffffffffffffffda RBX: 00007ff944215fa0 RCX: 00007ff943f9c629 [ 136.837170][ T6522] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 136.845152][ T6522] RBP: 00007ff944032b39 R08: 0000000000000000 R09: 0000000000000000 [ 136.853128][ T6522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.861105][ T6522] R13: 00007ff944216038 R14: 00007ff944215fa0 R15: 00007ffc43dea9b8 [ 136.869085][ T6522] [ 136.872099][ T6522] Modules linked in: [ 136.880240][ T6522] ---[ end trace 0000000000000000 ]--- [ 136.977109][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.979844][ T6522] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90 [ 136.986102][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.016941][ T6522] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 2d 7f dc f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 4c 4c 8b 23 49 39 ec 74 36 e8 09 7f dc f9 4d 85 e4 [ 137.120623][ T6522] RSP: 0018:ffffc900055afa10 EFLAGS: 00010247 [ 137.151645][ T6522] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: ffffc9000d381000 [ 137.199295][ T6522] RDX: 0000000000000000 RSI: ffffffff882b7c53 RDI: 0000000000000005 [ 137.249598][ T6522] RBP: ffff88802d471240 R08: 0000000000000000 R09: 4453534204050000 [ 137.283796][ T6522] R10: 0000000000000005 R11: ffffffff82733314 R12: 0000000000000000 [ 137.308488][ T6522] R13: ffff888036208380 R14: ffff888022294920 R15: ffff888036208700 [ 137.342864][ T6522] FS: 00007ff944e5b6c0(0000) GS:ffff88812444f000(0000) knlGS:0000000000000000 [ 137.358451][ T6522] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.394080][ T6522] CR2: 000000000169b000 CR3: 000000007c66a000 CR4: 00000000003526f0 [ 137.424130][ T6522] Kernel panic - not syncing: Fatal exception [ 137.430664][ T6522] Kernel Offset: disabled [ 137.434988][ T6522] Rebooting in 86400 seconds..