last executing test programs: 12.396122298s ago: executing program 2 (id=84): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xa2102, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) io_uring_setup$auto(0xe, 0x0) r0 = bpf$auto(0x12, 0x0, 0x26) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x999, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) r2 = socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NETDEV_CMD_DEV_GET(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004091}, 0x800) close_range$auto(0x2, 0x8, 0x0) read$auto(r0, 0x0, 0x9) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x8202, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) mlock2$auto(0x1, 0x8001, 0x0) 10.094990869s ago: executing program 3 (id=88): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb) ioctl$auto_SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000240)) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{&(0x7f0000000200)="fb08879254c1c24169fb1eb914e3b7f221f2841c3d38cd87d0", 0x1, &(0x7f0000000380)={&(0x7f0000000280)="8346937e12ba00e330311a19e48a0a9a2e91b6de44b66b63f1596b3f9d5c9f510298d5522b2f135e98b99e6fac9035b3e0469f8d1a694f4c16c64bb3c27c1179a6c16599a273abe7a3569be34d93", 0x4}, 0x54, &(0x7f00000003c0)="58a887ce482f9847847a27203ddba921d454a6c86fce97592078366c4f6c8fee6e7fd116b574b538e1bad18ef1da26cba8642753abd3f8a96926c38339c11b133eef5aa66e23c098ba119eb39971e64edb18441af8d68649f32ada49d82cc34fcb6e9bdf708ee7abcdfb1c5b915d39c0be5f029d67b53f7afb0a133600981508423b6fa88476b25248297c7d3426dff1c875d16de47691fc61aafcae44ff57e63b2b25a7", 0xd8, 0x7fffffff}, 0x5fb}, 0x101, 0xc2d2, 0x0) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000000)=' ', 0x1) write$auto(r1, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) r2 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev$auto(r2, &(0x7f0000000300)={0x0, 0x10001}, 0xc) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/92, 0x5c) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0x1000eb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x5) memfd_create$auto(0x0, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) 8.567783425s ago: executing program 2 (id=90): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0x14, 0xffffffffffffffff, 0x8000) swapon$auto(0x0, 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x9, 0x3, 0x0, 0x80000000000000, 0x80000000, 0x0, 0x4513, 0x9, 0xffffffffffffffff, {0x7, 0x6}, 0xfffffffc, 0xbfa, 0x9, 0x10, 0x0, 0x2, 0x8, 0xff, 0x10000, 0x100000001, 0x4}) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)="85f3fb1553598ec47684db1391b13104cecd41f8be06fc90431b916c8446c26b3c40032338db061ac5ca08be6bcb96d4e6127582af833024c4df19d0886c97fd96de84f3022840c11e57ae3c28994dbd466cbdd3cb09d88508ca6703fc06bb12c87e860ae0f9b0631f057dc6ff5ed57e749a5680b315ced066d2d2b727d134f312d7cb19785b25720bcd2dcbce2c60aa1a0bc0092abff4bb30a59dc6244a713dbbf0b597ccdb420de8c1e431db4cc531d4e5e31fa8eabdab039950462285b986907591fe0ddf0746a7bb1a1fcfdd75cd7ab8f392db250f4b3864f9b77c3c49ac8fde3b74e93bbb53") prctl$auto(0xe, 0x0, 0x3, 0x4, 0x400) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) close_range$auto(0x2, 0x8, 0x0) close_range$auto(r0, 0x8, 0xfffffe02) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)="7f07d3") socketcall$auto(0x8000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) swapon$auto(&(0x7f0000000100)='\',\x00', 0x113) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r3) 8.368815651s ago: executing program 3 (id=91): select$auto(0xd, &(0x7f00000000c0)={[0x5, 0x9, 0x3, 0x3, 0x2, 0xb8, 0x0, 0x9, 0x8000000000000001, 0xffffffffffffff73, 0x8001, 0x2, 0x4, 0x8, 0x3e7, 0x8]}, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x88000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r0 = socket(0x1d, 0x800, 0x7) socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'gre0\x00', 0x0}) bind$auto(r0, &(0x7f0000000000)=@can={0x1d, r1}, 0x6a) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000100)={0x3fd}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap$auto(0x76d7, 0xf9f7, 0x0, 0x12, r3, 0x951f) r4 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x22c02, 0x0) ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)=0x6) r5 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000100)=0x643) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x6, 0x103, 0xcb2, 0x7, 0x80000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r6, &(0x7f0000000040)='//\xf2\x00', 0x80000000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 8.287465587s ago: executing program 1 (id=92): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) setresuid$auto(0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) timer_create$auto(0x3, 0x0, &(0x7f0000000280)=0x6) timer_gettime$auto(0x0, &(0x7f0000001f80)={{0x9, 0x100000001}, {0x9f9a, 0x401}}) sched_setattr$auto(0x0, 0x0, 0x7b) msync$auto(0x1ffff000, 0x1800000fffffff4, 0x400000004) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x20) mmap$auto(0x8005, 0x2020009, 0x3, 0xeb1, r1, 0x8000) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r2, 0x7cb, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x2, 0x0) sendmsg$auto_BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='40', @ANYRES16=0x0, @ANYBLOB="200b28bd7000fbdbdf250c00000005000a00060000000a"], 0x34}, 0x1, 0x0, 0x0, 0x4011}, 0x4000855) write$auto_tomoyo_operations_securityfs_if(r4, 0x0, 0x0) fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x9, 0xffffffffffffffff, 0x0) getdents$auto(0xffffffffffffffff, 0x0, 0x400018) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 7.078985812s ago: executing program 0 (id=93): mmap$auto(0x0, 0x6, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) prctl$auto(0x1000000003b, 0x100001, 0x4, 0x80a, 0x6) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) ioctl$auto_UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000080)={0x130, 0x8, 0x10001}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0x400a507}, 0x800}, 0xa, 0x8) write$auto_proc_mem_operations_base(r0, &(0x7f0000000400)="94c5be883ae7ee95e2bff5f990f6f7249475e8960bf6c1ee8796193bfbd249c19c9460ea0c1c18bb983b84aebb8629e8e9e25558c9bfeb22ed79fdab8065d67eec271b56d08971f043224fe7604598e2506e785c6318c1b7696b10324d1e7db02961facdf9fab2640716f07dd1c617dcb6f1bb648821a53f78be14a6dc8f336e92e389609b991019c180950ed085b91123", 0x91) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x101a00, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0xfffffffffffffffe, 0x3, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8040) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r4, 0x4c02, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r3, &(0x7f0000000340)=""/179, 0xb3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2900, 0x0) read$auto(r5, 0x0, 0x7) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') socket(0x2, 0x2, 0x0) 6.71159182s ago: executing program 2 (id=94): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket(0x10, 0x2, 0x0) msgctl$auto_MSG_STAT(0xfb8, 0xb, &(0x7f0000000180)={{0x3, 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3, 0x400}, 0x0, 0x0, 0x0, 0x50, 0x9, 0x3, 0x40, 0x7fff, 0x10, 0x100, @raw=0xffffffff, @raw=0x4}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="0600", @ANYRES16=0x0, @ANYBLOB="010025bd"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='B'], 0x1ac}}, 0x40000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x4000, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0x4}, 0x9}, 0x7, 0x4008) mmap$auto(0x0, 0xe7a, 0x34f, 0xeb1, 0xfffffffffffffffa, 0x8000) ustat$auto(0x801, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D3\x00', 0x1, 0x0) socket(0x10, 0x2, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3b, 0x0, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0xf08f, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x200948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x6, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000001ff, 0x7, 0xd, 0x1, 0x3, 0x3, 0x15f4da0a, 0x2, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xd, 0xd, 0x1]}, 0x0) close_range$auto(0x2, 0x8, 0x8000ffff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x62202, 0x0) 6.598674531s ago: executing program 1 (id=95): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x4}}, 0x6a) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x4802, 0x0) statx$auto(r4, 0x0, 0x6d7, 0x80000008, 0x0) mlockall$auto(0x800000000000005) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) listxattrat$auto(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x2000000001) close_range$auto(0x2, r5, 0x0) 6.293528954s ago: executing program 0 (id=96): write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket(0x22, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) io_uring_setup$auto(0xf0, &(0x7f0000000180)={0x6, 0x18, 0xd64, 0xc852, 0x6, 0x7, r0, [0x1, 0x401, 0x1000], {0x7, 0x5, 0x1, 0x4, 0x95, 0xf4c, 0x7fff, 0xfffffffb, 0x65f29f6d}, {0x3, 0xadc, 0x10000, 0x0, 0x5, 0xffffffff, 0x1000, 0x54f, 0x5}}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0xa, 0x2, 0x0) r2 = socket(0xa, 0x3, 0xff) connect$auto(r2, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) write$auto_proc_mem_operations_base(0xffffffffffffffff, 0x0, 0x0) syz_clone3(0x0, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) futex_wake$auto(0x0, 0x5, 0x4, 0xa) sysfs$auto(0x2, 0x20, 0x0) shmget$auto(0x8, 0x10563, 0x568d1af2) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000e1, 0xeb2, 0x401, 0x8000) 5.958560853s ago: executing program 3 (id=97): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(r0, 0xae41, 0xffffffffffffffff) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) statmount$auto(0x0, &(0x7f0000000480)={0x5ffc2f43, 0x4, 0x8000, 0xf, 0x8, 0x6, 0x15e, 0x8, 0x5, 0xffffffff, 0x3fb, 0x4688, 0x0, 0x6, 0x7, 0xffffffff, 0xfffffffffffffffa, 0x8, 0x6, 0x6, 0x2cf2, 0x0, 0x2, 0x8, 0x8001, 0x9, 0x5, 0xffffff53, 0x9, 0x3, 0x0, [0x2, 0xc5, 0x200, 0x0, 0x800, 0x15, 0x3, 0x200, 0x7, 0x8, 0x8000000000000001, 0x800, 0x6, 0x0, 0x5, 0x9, 0x8, 0x40, 0x87, 0x800, 0x3, 0x5, 0x1, 0x1f0b, 0x200, 0x1ff, 0x9, 0x0, 0x2, 0x7, 0x3, 0x1, 0x6, 0x100, 0x0, 0x1, 0x7, 0x2000000000000, 0xd5, 0x2, 0x7ff, 0x5, 0x8], "548d8ea698997f834de0f18213dd3b52214026ce4187935c0c77717f3e44f3f00f1a8f2d30b91d4e80e45ab184bba619e17ef29993af7cb9867ed24679cb4ef88c32af5dc2f73167ae"}, 0x9f, 0x7) unshare$auto(0x40000080) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048004) futex$auto(0x0, 0x9, 0x3e, 0x0, 0x0, 0x0) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb4a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f00", 0xa}) ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0) writev$auto(r3, &(0x7f0000000340)={0x0, 0x500000}, 0x3) 5.480337394s ago: executing program 1 (id=98): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040050}, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x101843, 0x0) ioctl$auto_HDIO_GETGEO(r0, 0x301, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c003b"], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) socket(0x18, 0x80004, 0x1) socket(0x2, 0x3, 0xa) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000140)='0[.[\x00', 0xcd04) r2 = socket(0x15, 0x5, 0x0) bind$auto(r2, &(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x80000000}, 0x7) unshare$auto(0x40000080) unshare$auto(0x5) write$auto(r1, &(0x7f0000000140)='0[.[\x00', 0xcd04) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) mmap$auto(0x0, 0x9aad, 0xdf, 0xeb1, r3, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty42\x00', 0x40741, 0x0) ioctl$auto(0x3, 0x402c542d, r4) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x1f40) 4.588460125s ago: executing program 2 (id=99): socket(0xa, 0x2, 0x73) mmap$auto(0x100000000000000, 0xd8f0, 0x7, 0xeb1, 0xfffffffffffffffa, 0xbf47) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x10000, 0xff7, 0x14, 0x3, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/net/rose15/address\x00', 0x0, 0x0) r0 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r0, &(0x7f0000000680)={0x0, 0x40200}, 0x3) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) read$auto_dvb_dvr_fops_dmxdev(r2, 0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x1) madvise$auto(0x0, 0x200007, 0x19) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) 4.060771389s ago: executing program 0 (id=100): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) unshare$auto(0x40000080) r0 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2101, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_drm_edid_fops_drm_debugfs(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) r1 = io_uring_setup$auto(0x5, 0x0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x880c2, 0xb3) close_range$auto(0x2, r1, 0x0) acct$auto(&(0x7f0000000280)='/sys/devices/virtual/mtd/mtd0/size\x00') prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) r2 = syz_genetlink_get_family_id$auto_nl80211(0x0, r0) setresuid$auto(0x8000000000000001, 0x1, 0x200) mlockall$auto(0x7) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xf8}, 0x1, 0x0, 0x0, 0x50}, 0x4000001) sendmsg$auto_NL80211_CMD_ADD_LINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="0400000000000600df"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) 2.943944771s ago: executing program 3 (id=101): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = bpf$auto(0x24, 0x0, 0x8) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x22641, 0x0) lseek$auto(0x3, 0x2, 0x4) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) write$auto(0x3, 0x0, 0xfffffdef) setsockopt$auto_SO_DEBUG(r1, 0x6, 0x1, &(0x7f0000000000)='$/&}-#)f-&D)[,\x00', 0xda3) madvise$auto(0x0, 0x2003ec, 0x14) getsockopt$auto_SO_DONTROUTE(r0, 0x1, 0x5, &(0x7f0000000140)='$/&}-#)f-&D)[,\x00', &(0x7f0000000180)=0x3) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/028/001\x00', 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x40d81, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r2 = socket(0x10, 0x2, 0x4) bpf$auto(0x6, &(0x7f00000001c0)=@test={r2, 0x10004, 0x0, 0x3e, 0x106, 0x0, 0x0, 0xfff, 0x800, 0x9, 0x0, 0x4, 0x7, 0x2, 0xfffeffff}, 0x1) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', 0x0, 0x7fff, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0xa6) 2.889791586s ago: executing program 0 (id=102): unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8802, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) r2 = socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(r2, 0x6a, 0x2, 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x100, 0x0) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r4, 0xffffffffffdffe00, &(0x7f0000000140)=';') openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x101000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000000c0)={"58f99464", 0x8, 0x6, 0x1, 0x3, 0x5, "4bb69ec4b3f4c14539898e4c5682f5", "347f00", "a630df9d", "a0ed9959", ["cd9196b8fe1a8a7eb90401a9", "2f9c30017721de33c560b95a", "d3fe6c55a78d6932211c9b69", "ea334f1f1e5e27a1320d6edb"]}) getdents64$auto(r5, &(0x7f0000000040)={0xfedd, 0x4, 0x3, 0x5a, "4a816c23b5830604fa7fc7769b97b2005f379620818d6683ea3bf44f34aaceb64edb59e1202fda8c70e6fd"}, 0x5) r6 = epoll_create$auto(0x8800001) epoll_ctl$auto(r6, 0x1, r3, 0x0) writev$auto(r1, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) preadv2$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) 2.12201444s ago: executing program 1 (id=103): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r0 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$auto_IMDELTIMER(r0, 0x80044941, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x1, 0x106) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sysfs$auto(0x2, 0x23, 0x0) r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) sendmsg$auto_NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r5, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xc2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x9}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'virt_wifi0\x00'}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfff9}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x40400, 0xd8) fchmod$auto(r3, 0x8) setreuid$auto(0x4, 0x8) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) write$auto(r4, 0x0, 0x4) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) shutdown$auto(0x200000003, 0x2) 1.931534017s ago: executing program 0 (id=104): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x900, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x11, 0x3, 0x2) mmap$auto(0x0, 0x2, 0x7, 0x9b72, 0x7, 0x0) capget$auto(0x0, 0xfffffffffffffffe) r2 = socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x84, 0x7, 0x0, 0x0) getsockopt$auto(r1, 0x107, 0x7, 0x0, 0x0) sendmsg$auto_NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, 0x0, 0x4084) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x2c}}, 0x40000) getsockopt$auto_SO_TIMESTAMPNS_NEW(0xffffffffffffffff, 0x3, 0x40, 0x0, 0x0) 1.605678689s ago: executing program 3 (id=105): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) r2 = socket(0x10, 0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r3) read$auto(r3, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0xda25b84c77eeb07c, 0x0) fanotify_init$auto(0x65, 0x2) socket(0x22, 0x3, 0x0) socket(0xa, 0x5, 0x0) clone$auto(0x7fff, 0xff, 0x0, 0x0, 0x7) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth1_macvtap/ioam6_id_wide\x00', 0x169002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 1.11566385s ago: executing program 1 (id=106): mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x28000) r0 = io_uring_setup$auto(0x6, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x26241, 0x20) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000000)="b68161a86e8da4110338a92ca863a91beaa8558206154cc5fbaf33") ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) listen$auto(0x3, 0x81) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x1, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/msg\x00', 0x8a880, 0x0) pread64$auto(r4, 0x0, 0x7fff, 0x3) remap_file_pages$auto(0x9, 0x2200000, 0x8, 0x80000001, 0xfffffffffffff5f3) 715.13406ms ago: executing program 1 (id=107): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x14, 0x0, 0x1b, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x202, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) setgroups$auto(0xe32, 0x0) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 698.171355ms ago: executing program 3 (id=108): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) process_mrelease$auto(0xffffffffffffffff, 0xa) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x4a42, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, r1, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) close_range$auto(0x2, 0x8, 0x0) readv$auto(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x400}, 0x7f) shutdown$auto(0x200000003, 0x0) 664.380419ms ago: executing program 2 (id=109): mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) fstat$auto(0xffffffffffffffff, &(0x7f0000000300)={0xff, 0x7, 0x45, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x803, 0x4, 0x6, 0x0, 0x1000073, 0x1, 0x1, 0x8}) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) preadv$auto(r0, &(0x7f00000002c0)={0x0, 0xbe78}, 0x5, 0x800000fb, 0x8100000001) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="29601d05ad327d12ce2d3141bd0e9166", @ANYRES16, @ANYBLOB="01002bbd7400fcdbdf250800000008000b0001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000044) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="95ba5bf9d314000000", @ANYRES16=r2, @ANYBLOB="09032abd7000fedbdf2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000100), 0x1b5c40, 0x0) r3 = fanotify_init$auto(0x602, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x541c02, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x408000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000240), 0x303101, 0x0) ioctl$auto_FS_IOC_ENABLE_VERITY3(0xffffffffffffffff, 0x40806685, &(0x7f0000000280)={0x1c0, 0x3, 0x9, 0x6, 0x1, 0xa, 0x0, 0x1}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x1, "36a2662b59209f6bd4aafa4ed15fdb9c791daf044ae6ff089930def80ce28999"}) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) ioctl$auto_SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000040)=0x8) 160.265789ms ago: executing program 0 (id=110): waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_timer={0x0, 0x40002, @sival_int=0xa, 0x2}}}, 0x3, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2c, 0x80003, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, 0x0, 0x100000a3d9) socket(0x2b, 0x1, 0x0) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000180)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfdf1) lstat$auto(0x0, 0x0) 0s ago: executing program 2 (id=111): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) socket(0x6, 0x3, 0x37) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x26, 0x5, 0x8c68) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x101e41, 0x0) ioperm$auto(0x4, 0x100000001, 0x4000005) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyr0\x00', 0x74c40, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x800, 0x8000009, 0x1, 0x19, 0xffffffffffffffff, 0x100000000000008) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x7, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x40146f2c, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x40146f2b, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x50ba82, 0x0) read$auto(r4, 0x0, 0xb4d3) unshare$auto(0x40000080) setsockopt$auto(r0, 0xd0, 0x800000e4, 0x0, 0x569) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.61' (ED25519) to the list of known hosts. [ 83.422382][ T5812] cgroup: Unknown subsys name 'net' [ 83.536844][ T5812] cgroup: Unknown subsys name 'cpuset' [ 83.546997][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.322491][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.319920][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.330874][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.338769][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.346632][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.355042][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.356112][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.362784][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.369931][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.378444][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.391216][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.400501][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.414598][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.423937][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.431441][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.432147][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.446048][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.455510][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.467097][ T5146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.474334][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.483661][ T5146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.080312][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 88.216696][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 88.239317][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 88.310764][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 88.376797][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.384215][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.391446][ T5825] bridge_slave_0: entered allmulticast mode [ 88.399688][ T5825] bridge_slave_0: entered promiscuous mode [ 88.436308][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.443916][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.451050][ T5825] bridge_slave_1: entered allmulticast mode [ 88.458556][ T5825] bridge_slave_1: entered promiscuous mode [ 88.556955][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.564495][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.572073][ T5824] bridge_slave_0: entered allmulticast mode [ 88.579512][ T5824] bridge_slave_0: entered promiscuous mode [ 88.586768][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.594071][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.601210][ T5823] bridge_slave_0: entered allmulticast mode [ 88.608612][ T5823] bridge_slave_0: entered promiscuous mode [ 88.619311][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.645448][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.652714][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.659917][ T5824] bridge_slave_1: entered allmulticast mode [ 88.667490][ T5824] bridge_slave_1: entered promiscuous mode [ 88.674529][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.681668][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.689025][ T5823] bridge_slave_1: entered allmulticast mode [ 88.696378][ T5823] bridge_slave_1: entered promiscuous mode [ 88.705759][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.768143][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.775890][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.783269][ T5826] bridge_slave_0: entered allmulticast mode [ 88.790483][ T5826] bridge_slave_0: entered promiscuous mode [ 88.821822][ T5825] team0: Port device team_slave_0 added [ 88.827948][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.835263][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.842417][ T5826] bridge_slave_1: entered allmulticast mode [ 88.850143][ T5826] bridge_slave_1: entered promiscuous mode [ 88.860645][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.873598][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.885024][ T5825] team0: Port device team_slave_1 added [ 88.903960][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.915816][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.998139][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.021666][ T5823] team0: Port device team_slave_0 added [ 89.029431][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.036570][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.062787][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.080257][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.091330][ T5824] team0: Port device team_slave_0 added [ 89.099296][ T5823] team0: Port device team_slave_1 added [ 89.105873][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.113100][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.139146][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.166272][ T5824] team0: Port device team_slave_1 added [ 89.214495][ T5826] team0: Port device team_slave_0 added [ 89.232297][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.239485][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.269979][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.296976][ T5826] team0: Port device team_slave_1 added [ 89.304479][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.311425][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.337768][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.349531][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.356887][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.383268][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.425229][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.432199][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.458450][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.493609][ T5828] Bluetooth: hci1: command tx timeout [ 89.499269][ T5828] Bluetooth: hci0: command tx timeout [ 89.509574][ T5825] hsr_slave_0: entered promiscuous mode [ 89.516530][ T5825] hsr_slave_1: entered promiscuous mode [ 89.531806][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.539261][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.565576][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.576225][ T5828] Bluetooth: hci3: command tx timeout [ 89.578441][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.582726][ T5828] Bluetooth: hci2: command tx timeout [ 89.588782][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.620121][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.710084][ T5823] hsr_slave_0: entered promiscuous mode [ 89.717023][ T5823] hsr_slave_1: entered promiscuous mode [ 89.723487][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 89.729366][ T5823] Cannot create hsr debugfs directory [ 89.803019][ T5826] hsr_slave_0: entered promiscuous mode [ 89.809624][ T5826] hsr_slave_1: entered promiscuous mode [ 89.816258][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 89.822008][ T5826] Cannot create hsr debugfs directory [ 89.845010][ T5824] hsr_slave_0: entered promiscuous mode [ 89.851322][ T5824] hsr_slave_1: entered promiscuous mode [ 89.858565][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 89.864403][ T5824] Cannot create hsr debugfs directory [ 90.312957][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.327211][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.346839][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.366315][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.415706][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.431729][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.445202][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.456643][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.541548][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.558706][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.569917][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.597880][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.726469][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.749995][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.761186][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.776787][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.815362][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.878071][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.902086][ T486] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.909364][ T486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.940439][ T486] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.947584][ T486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.988010][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.055908][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.076929][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.085955][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.093163][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.119637][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.126795][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.162937][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.218128][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.239397][ T3010] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.246631][ T3010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.287838][ T3010] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.295086][ T3010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.346763][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.420450][ T486] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.427801][ T486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.486418][ T486] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.493631][ T486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.573696][ T5146] Bluetooth: hci1: command tx timeout [ 91.579230][ T5828] Bluetooth: hci0: command tx timeout [ 91.654183][ T5146] Bluetooth: hci3: command tx timeout [ 91.659717][ T5828] Bluetooth: hci2: command tx timeout [ 91.710981][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.879254][ T5825] veth0_vlan: entered promiscuous mode [ 91.908886][ T5825] veth1_vlan: entered promiscuous mode [ 91.995081][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.010661][ T5825] veth0_macvtap: entered promiscuous mode [ 92.046509][ T5825] veth1_macvtap: entered promiscuous mode [ 92.059109][ T798] cfg80211: failed to load regulatory.db [ 92.101590][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.126234][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.157225][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.186046][ T372] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.220910][ T372] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.230997][ T372] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.241310][ T372] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.279359][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.300777][ T5823] veth0_vlan: entered promiscuous mode [ 92.320669][ T5823] veth1_vlan: entered promiscuous mode [ 92.340387][ T5826] veth0_vlan: entered promiscuous mode [ 92.370263][ T5826] veth1_vlan: entered promiscuous mode [ 92.474145][ T486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.478647][ T5823] veth0_macvtap: entered promiscuous mode [ 92.483811][ T486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.540736][ T5823] veth1_macvtap: entered promiscuous mode [ 92.549984][ T5824] veth0_vlan: entered promiscuous mode [ 92.583723][ T5824] veth1_vlan: entered promiscuous mode [ 92.593576][ T486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.597536][ T5826] veth0_macvtap: entered promiscuous mode [ 92.608511][ T486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.642988][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.650849][ T5826] veth1_macvtap: entered promiscuous mode [ 92.689211][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.713126][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.735612][ T486] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.748823][ T486] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.761201][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.779761][ T486] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.789278][ T486] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.811442][ T5824] veth0_macvtap: entered promiscuous mode [ 92.827360][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.865185][ T5824] veth1_macvtap: entered promiscuous mode [ 92.901573][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.917390][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.949887][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.996661][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.034070][ T3010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.050743][ T3010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.115756][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.178753][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.208678][ T3010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.222262][ T3010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.251478][ T3010] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.348684][ T3010] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.448740][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.457910][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.480514][ T3010] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.493117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 93.513044][ T3010] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.550276][ T5919] Zero length message leads to an empty skb [ 93.656597][ T5828] Bluetooth: hci0: command tx timeout [ 93.662147][ T5828] Bluetooth: hci1: command tx timeout [ 93.675004][ T372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.688484][ T372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.732917][ T5828] Bluetooth: hci2: command tx timeout [ 93.738546][ T5828] Bluetooth: hci3: command tx timeout [ 93.821120][ T372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.863481][ T372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.956220][ T372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.991037][ T372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.212323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.354308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.369214][ T5917] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.773879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.065858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.702323][ T29] audit: type=1804 audit(1771843607.185:2): pid=5946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7" name="/newroot/1/file0" dev="tmpfs" ino=23 res=1 errno=0 [ 95.733419][ T5828] Bluetooth: hci1: command tx timeout [ 95.739064][ T5828] Bluetooth: hci0: command tx timeout [ 95.786100][ T29] audit: type=1804 audit(1771843607.225:3): pid=5946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.7" name="/newroot/1/file0" dev="tmpfs" ino=23 res=1 errno=0 [ 95.818643][ T5828] Bluetooth: hci3: command tx timeout [ 95.824278][ T5146] Bluetooth: hci2: command tx timeout [ 95.903233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.154276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.242918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.453061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.461798][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.210958][ T5980] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12'. [ 98.267752][ T5980] ipvlan1: entered promiscuous mode [ 98.273403][ T5980] ipvlan1: entered allmulticast mode [ 98.278830][ T5980] veth0_vlan: entered allmulticast mode [ 98.535078][ T5984] capability: warning: `syz.0.13' uses 32-bit capabilities (legacy support in use) [ 98.603619][ T5984] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 98.960826][ T5990] FAULT_INJECTION: forcing a failure. [ 98.960826][ T5990] name failslab, interval 1, probability 0, space 0, times 1 [ 98.984186][ T5990] CPU: 1 UID: 0 PID: 5990 Comm: syz.2.15 Not tainted syzkaller #0 PREEMPT(full) [ 98.984226][ T5990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 98.984243][ T5990] Call Trace: [ 98.984254][ T5990] [ 98.984264][ T5990] dump_stack_lvl+0x100/0x190 [ 98.984314][ T5990] should_fail_ex.cold+0x5/0xa [ 98.984350][ T5990] should_failslab+0xc2/0x120 [ 98.984380][ T5990] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 98.984422][ T5990] ? mas_alloc_nodes+0x280/0x390 [ 98.984487][ T5990] mas_alloc_nodes+0x280/0x390 [ 98.984541][ T5990] mas_preallocate+0x39c/0xf10 [ 98.984585][ T5990] ? __pfx_mas_preallocate+0x10/0x10 [ 98.984636][ T5990] ? __pfx_mt_find+0x10/0x10 [ 98.984679][ T5990] vma_link+0x12c/0x710 [ 98.984722][ T5990] ? __pfx_vma_link+0x10/0x10 [ 98.984785][ T5990] insert_vm_struct+0xf4/0x2d0 [ 98.984834][ T5990] create_init_stack_vma+0x2e1/0x700 [ 98.984886][ T5990] alloc_bprm+0x405/0x710 [ 98.984933][ T5990] do_execveat_common.isra.0+0x19c/0x580 [ 98.984979][ T5990] ? do_getname+0x191/0x390 [ 98.985017][ T5990] __x64_sys_execve+0x93/0xd0 [ 98.985074][ T5990] do_syscall_64+0x106/0xf80 [ 98.985106][ T5990] ? clear_bhb_loop+0x40/0x90 [ 98.985145][ T5990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.985177][ T5990] RIP: 0033:0x7fc326d9c629 [ 98.985203][ T5990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.985232][ T5990] RSP: 002b:00007fc327b8c028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 98.985262][ T5990] RAX: ffffffffffffffda RBX: 00007fc327016090 RCX: 00007fc326d9c629 [ 98.985282][ T5990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 98.985300][ T5990] RBP: 00007fc326e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 98.985317][ T5990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.985334][ T5990] R13: 00007fc327016128 R14: 00007fc327016090 R15: 00007ffee201ffc8 [ 98.985376][ T5990] [ 99.314907][ T5990] process 'syz.2.15' launched './file0' with NULL argv: empty string added [ 100.190864][ T5995] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 100.740401][ T6015] FAULT_INJECTION: forcing a failure. [ 100.740401][ T6015] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 100.758394][ T5997] binder: 5996:5997 ioctl c018620c 0 returned -1 [ 100.822409][ T6015] CPU: 1 UID: 0 PID: 6015 Comm: syz.2.20 Not tainted syzkaller #0 PREEMPT(full) [ 100.822451][ T6015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 100.822468][ T6015] Call Trace: [ 100.822478][ T6015] [ 100.822489][ T6015] dump_stack_lvl+0x100/0x190 [ 100.822540][ T6015] should_fail_ex.cold+0x5/0xa [ 100.822579][ T6015] _copy_from_user+0x2e/0xd0 [ 100.822623][ T6015] get_timespec64+0x8b/0x1b0 [ 100.822655][ T6015] ? __pfx_get_timespec64+0x10/0x10 [ 100.822684][ T6015] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 100.822741][ T6015] __x64_sys_futex+0x21a/0x4d0 [ 100.822784][ T6015] ? __pfx___x64_sys_futex+0x10/0x10 [ 100.822838][ T6015] do_syscall_64+0x106/0xf80 [ 100.822869][ T6015] ? clear_bhb_loop+0x40/0x90 [ 100.822906][ T6015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.822936][ T6015] RIP: 0033:0x7fc326d9c629 [ 100.822962][ T6015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.822989][ T6015] RSP: 002b:00007ffee2020128 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 100.823029][ T6015] RAX: ffffffffffffffda RBX: 0000000000018959 RCX: 00007fc326d9c629 [ 100.823048][ T6015] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc327015fac [ 100.823064][ T6015] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000 [ 100.823081][ T6015] R10: 00007ffee2020230 R11: 0000000000000246 R12: 00007ffee2020250 [ 100.823098][ T6015] R13: 00007fc327015fac R14: 000000000001898b R15: 00007ffee2020230 [ 100.823137][ T6015] [ 101.651839][ T6027] netlink: 93 bytes leftover after parsing attributes in process `syz.2.20'. [ 101.719346][ T6022] netlink: 93 bytes leftover after parsing attributes in process `syz.2.20'. [ 102.507420][ T6031] Invalid ELF header magic: != ELF [ 102.729244][ T6034] FAULT_INJECTION: forcing a failure. [ 102.729244][ T6034] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 102.749108][ T6034] CPU: 0 UID: 0 PID: 6034 Comm: syz.0.23 Not tainted syzkaller #0 PREEMPT(full) [ 102.749135][ T6034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.749146][ T6034] Call Trace: [ 102.749152][ T6034] [ 102.749160][ T6034] dump_stack_lvl+0x100/0x190 [ 102.749190][ T6034] should_fail_ex.cold+0x5/0xa [ 102.749208][ T6034] ? fs_reclaim_acquire+0x70/0x100 [ 102.749230][ T6034] should_fail_alloc_page+0xeb/0x140 [ 102.749249][ T6034] prepare_alloc_pages+0x1f0/0x5f0 [ 102.749271][ T6034] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 102.749309][ T6034] ? __gup_longterm_locked+0x560/0x16f0 [ 102.749334][ T6034] ? __pfx___gup_longterm_locked+0x10/0x10 [ 102.749354][ T6034] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 102.749380][ T6034] ? try_get_folio+0x262/0x750 [ 102.749408][ T6034] ? find_held_lock+0x2b/0x80 [ 102.749426][ T6034] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 102.749455][ T6034] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.749486][ T6034] ? policy_nodemask+0xed/0x4f0 [ 102.749506][ T6034] alloc_pages_mpol+0x1fb/0x550 [ 102.749524][ T6034] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 102.749543][ T6034] ? find_held_lock+0x2b/0x80 [ 102.749562][ T6034] alloc_pages_noprof+0x131/0x390 [ 102.749580][ T6034] brd_submit_bio+0x116a/0x20d0 [ 102.749617][ T6034] ? __pfx_brd_submit_bio+0x10/0x10 [ 102.749647][ T6034] ? submit_bio_noacct_nocheck+0x74f/0xc10 [ 102.749667][ T6034] ? submit_bio_noacct_nocheck+0x74f/0xc10 [ 102.749686][ T6034] ? blk_try_enter_queue+0x1c5/0x4d0 [ 102.749706][ T6034] __submit_bio+0x419/0x6c0 [ 102.749726][ T6034] ? __pfx___submit_bio+0x10/0x10 [ 102.749748][ T6034] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 102.749771][ T6034] ? bio_associate_blkg_from_css+0x550/0x13f0 [ 102.749794][ T6034] ? submit_bio_noacct_nocheck+0x74f/0xc10 [ 102.749813][ T6034] submit_bio_noacct_nocheck+0x74f/0xc10 [ 102.749848][ T6034] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 102.749872][ T6034] ? __pfx___might_resched+0x10/0x10 [ 102.749901][ T6034] submit_bio_noacct+0xd17/0x2010 [ 102.749925][ T6034] blkdev_direct_IO+0x155c/0x1fb0 [ 102.749956][ T6034] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 102.749987][ T6034] blkdev_write_iter+0x703/0xd70 [ 102.750012][ T6034] vfs_write+0x6ac/0x1070 [ 102.750039][ T6034] ? __pfx_blkdev_write_iter+0x10/0x10 [ 102.750061][ T6034] ? __pfx_vfs_write+0x10/0x10 [ 102.750087][ T6034] ? find_held_lock+0x2b/0x80 [ 102.750116][ T6034] ksys_write+0x12a/0x250 [ 102.750142][ T6034] ? __pfx_ksys_write+0x10/0x10 [ 102.750175][ T6034] do_syscall_64+0x106/0xf80 [ 102.750195][ T6034] ? clear_bhb_loop+0x40/0x90 [ 102.750216][ T6034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.750235][ T6034] RIP: 0033:0x7f5efa79c629 [ 102.750250][ T6034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.750266][ T6034] RSP: 002b:00007f5efb57e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 102.750284][ T6034] RAX: ffffffffffffffda RBX: 00007f5efaa15fa0 RCX: 00007f5efa79c629 [ 102.750295][ T6034] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000004 [ 102.750311][ T6034] RBP: 00007f5efa832b39 R08: 0000000000000000 R09: 0000000000000000 [ 102.750321][ T6034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.750331][ T6034] R13: 00007f5efaa16038 R14: 00007f5efaa15fa0 R15: 00007ffc10d4d458 [ 102.750353][ T6034] [ 103.503828][ T6047] syz.0.26(6047): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 105.631095][ T6082] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.335364][ T6091] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 107.633388][ T6097] zswap: compressor not available [ 107.971042][ T6097] Setting dangerous option i915.mitigations - tainting kernel [ 108.083607][ T6104] Invalid ELF header magic: != ELF [ 110.370239][ T6143] ima: policy update failed [ 110.407229][ T29] audit: type=1802 audit(1771843621.865:4): pid=6143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.42" res=0 errno=0 [ 110.750405][ T6138] nvme_fcloop: unknown parameter or missing value '7' [ 111.819450][ T6151] FAULT_INJECTION: forcing a failure. [ 111.819450][ T6151] name failslab, interval 1, probability 0, space 0, times 0 [ 111.835353][ T6151] CPU: 1 UID: 0 PID: 6151 Comm: syz.0.44 Tainted: G U syzkaller #0 PREEMPT(full) [ 111.835402][ T6151] Tainted: [U]=USER [ 111.835413][ T6151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 111.835430][ T6151] Call Trace: [ 111.835440][ T6151] [ 111.835451][ T6151] dump_stack_lvl+0x100/0x190 [ 111.835501][ T6151] should_fail_ex.cold+0x5/0xa [ 111.835539][ T6151] should_failslab+0xc2/0x120 [ 111.835570][ T6151] __kmalloc_node_noprof+0xe6/0x850 [ 111.835610][ T6151] ? __rb_allocate_pages+0x589/0xf50 [ 111.835662][ T6151] __rb_allocate_pages+0x589/0xf50 [ 111.835715][ T6151] ring_buffer_resize+0x6df/0x1e80 [ 111.835766][ T6151] ? __pfx_update_last_data+0x10/0x10 [ 111.835808][ T6151] __tracing_resize_ring_buffer.part.0+0x52/0x1f0 [ 111.835866][ T6151] tracing_update_buffers+0x104/0x120 [ 111.835907][ T6151] event_pid_write.isra.0+0xf8/0x800 [ 111.835959][ T6151] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 111.836019][ T6151] vfs_write+0x2aa/0x1070 [ 111.836064][ T6151] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 111.836117][ T6151] ? __pfx_vfs_write+0x10/0x10 [ 111.836161][ T6151] ? __fget_files+0x215/0x3d0 [ 111.836229][ T6151] ? __fget_files+0x21f/0x3d0 [ 111.836288][ T6151] ksys_write+0x12a/0x250 [ 111.836334][ T6151] ? __pfx_ksys_write+0x10/0x10 [ 111.836376][ T6151] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 111.836416][ T6151] ? syscall_user_dispatch+0x76/0x130 [ 111.836466][ T6151] do_syscall_64+0x106/0xf80 [ 111.836499][ T6151] ? clear_bhb_loop+0x40/0x90 [ 111.836538][ T6151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.836568][ T6151] RIP: 0033:0x7f5efa79c629 [ 111.836594][ T6151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.836621][ T6151] RSP: 002b:00007f5efb57e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 111.836649][ T6151] RAX: ffffffffffffffda RBX: 00007f5efaa15fa0 RCX: 00007f5efa79c629 [ 111.836668][ T6151] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 111.836683][ T6151] RBP: 00007f5efa832b39 R08: 0000000000000000 R09: 0000000000000000 [ 111.836700][ T6151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.836716][ T6151] R13: 00007f5efaa16038 R14: 00007f5efaa15fa0 R15: 00007ffc10d4d458 [ 111.836759][ T6151] [ 112.452767][ T6148] bridge0: port 3(team0) entered blocking state [ 112.459188][ T6148] bridge0: port 3(team0) entered disabled state [ 112.516613][ T6167] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 112.528119][ T6148] team0: entered allmulticast mode [ 112.542072][ T6148] team_slave_0: entered allmulticast mode [ 112.548023][ T6148] team_slave_1: entered allmulticast mode [ 112.556286][ T6148] team0: entered promiscuous mode [ 112.561451][ T6148] team_slave_0: entered promiscuous mode [ 112.567526][ T6148] team_slave_1: entered promiscuous mode [ 112.574478][ T6148] bridge0: port 3(team0) entered blocking state [ 112.581122][ T6148] bridge0: port 3(team0) entered forwarding state [ 113.298162][ T6159] FAULT_INJECTION: forcing a failure. [ 113.298162][ T6159] name failslab, interval 1, probability 0, space 0, times 0 [ 113.362718][ T6159] CPU: 1 UID: 0 PID: 6159 Comm: syz.0.46 Tainted: G U syzkaller #0 PREEMPT(full) [ 113.362762][ T6159] Tainted: [U]=USER [ 113.362769][ T6159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 113.362779][ T6159] Call Trace: [ 113.362786][ T6159] [ 113.362794][ T6159] dump_stack_lvl+0x100/0x190 [ 113.362827][ T6159] should_fail_ex.cold+0x5/0xa [ 113.362849][ T6159] should_failslab+0xc2/0x120 [ 113.362872][ T6159] __kmalloc_cache_noprof+0x7a/0x6f0 [ 113.362894][ T6159] ? sc_common_open+0x46/0x200 [ 113.362926][ T6159] ? __pfx___debugfs_file_get+0x10/0x10 [ 113.362946][ T6159] ? find_held_lock+0x2b/0x80 [ 113.362966][ T6159] ? __pfx_stats_fop_open+0x10/0x10 [ 113.362984][ T6159] sc_common_open+0x46/0x200 [ 113.363005][ T6159] full_proxy_open_regular+0x1b6/0x370 [ 113.363037][ T6159] do_dentry_open+0x6d8/0x1660 [ 113.363065][ T6159] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 113.363094][ T6159] vfs_open+0x82/0x3f0 [ 113.363118][ T6159] path_openat+0x208c/0x31a0 [ 113.363143][ T6159] ? __pfx_path_openat+0x10/0x10 [ 113.363168][ T6159] do_file_open+0x20e/0x430 [ 113.363187][ T6159] ? __pfx_do_file_open+0x10/0x10 [ 113.363220][ T6159] ? alloc_fd+0x476/0x790 [ 113.363257][ T6159] ? do_getname+0x191/0x390 [ 113.363280][ T6159] do_sys_openat2+0x10d/0x1e0 [ 113.363302][ T6159] ? __pfx_do_sys_openat2+0x10/0x10 [ 113.363326][ T6159] ? __fget_files+0x21f/0x3d0 [ 113.363358][ T6159] __x64_sys_openat+0x12d/0x210 [ 113.363393][ T6159] ? __pfx___x64_sys_openat+0x10/0x10 [ 113.363432][ T6159] do_syscall_64+0x106/0xf80 [ 113.363451][ T6159] ? clear_bhb_loop+0x40/0x90 [ 113.363474][ T6159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.363492][ T6159] RIP: 0033:0x7f5efa79c629 [ 113.363508][ T6159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.363525][ T6159] RSP: 002b:00007f5efb57e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 113.363550][ T6159] RAX: ffffffffffffffda RBX: 00007f5efaa15fa0 RCX: 00007f5efa79c629 [ 113.363561][ T6159] RDX: 0000000000008382 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 113.363572][ T6159] RBP: 00007f5efa832b39 R08: 0000000000000000 R09: 0000000000000000 [ 113.363582][ T6159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.363591][ T6159] R13: 00007f5efaa16038 R14: 00007f5efaa15fa0 R15: 00007ffc10d4d458 [ 113.363614][ T6159] [ 114.092396][ T6180] netlink: 'syz.2.50': attribute type 1 has an invalid length. [ 114.124429][ T6180] netlink: 33 bytes leftover after parsing attributes in process `syz.2.50'. [ 114.571207][ T6185] zswap: compressor not available [ 114.675515][ T6185] kstrtoul() returned -22 for lu_gp_id [ 114.684666][ T29] audit: type=1800 audit(1771843626.165:5): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.51" name="lu_gp_id" dev="configfs" ino=8877 res=0 errno=0 [ 116.615844][ T6216] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 117.073619][ T6200] syz.0.53 (6200) used greatest stack depth: 19672 bytes left [ 119.962149][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030b19000: rx timeout, send abort [ 119.972150][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888030b19000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 120.749572][ T6271] FAULT_INJECTION: forcing a failure. [ 120.749572][ T6271] name failslab, interval 1, probability 0, space 0, times 0 [ 120.764120][ T6271] CPU: 0 UID: 0 PID: 6271 Comm: syz.1.67 Tainted: G U syzkaller #0 PREEMPT(full) [ 120.764152][ T6271] Tainted: [U]=USER [ 120.764158][ T6271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 120.764168][ T6271] Call Trace: [ 120.764175][ T6271] [ 120.764182][ T6271] dump_stack_lvl+0x100/0x190 [ 120.764212][ T6271] should_fail_ex.cold+0x5/0xa [ 120.764241][ T6271] should_failslab+0xc2/0x120 [ 120.764259][ T6271] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 120.764285][ T6271] ? alloc_inode+0x183/0x250 [ 120.764305][ T6271] ? stashed_dentry_get+0x10a/0x2c0 [ 120.764323][ T6271] ? stashed_dentry_get+0x10a/0x2c0 [ 120.764344][ T6271] alloc_inode+0x183/0x250 [ 120.764366][ T6271] path_from_stashed+0x25b/0x750 [ 120.764389][ T6271] pidfs_alloc_file+0xf8/0x290 [ 120.764417][ T6271] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 120.764451][ T6271] pidfd_prepare+0x123/0x200 [ 120.764473][ T6271] __x64_sys_pidfd_open+0x105/0x1a0 [ 120.764498][ T6271] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 120.764529][ T6271] do_syscall_64+0x106/0xf80 [ 120.764548][ T6271] ? clear_bhb_loop+0x40/0x90 [ 120.764570][ T6271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.764588][ T6271] RIP: 0033:0x7f42b299c629 [ 120.764604][ T6271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.764621][ T6271] RSP: 002b:00007f42b3798028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 120.764638][ T6271] RAX: ffffffffffffffda RBX: 00007f42b2c15fa0 RCX: 00007f42b299c629 [ 120.764649][ T6271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 120.764660][ T6271] RBP: 00007f42b2a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 120.764670][ T6271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.764680][ T6271] R13: 00007f42b2c16038 R14: 00007f42b2c15fa0 R15: 00007ffff15eec48 [ 120.764703][ T6271] [ 121.330518][ T6281] ======================================================= [ 121.330518][ T6281] WARNING: The mand mount option has been deprecated and [ 121.330518][ T6281] and is ignored by this kernel. Remove the mand [ 121.330518][ T6281] option from the mount to silence this warning. [ 121.330518][ T6281] ======================================================= [ 122.463567][ T6277] netlink: 4128 bytes leftover after parsing attributes in process `syz.0.68'. [ 123.328183][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.72'. [ 123.374310][ T6278] kexec: Could not allocate control_code_buffer [ 125.680824][ T5828] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 125.689258][ T5828] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 130.346144][ T6438] Invalid ELF header magic: != ELF [ 131.298705][ T6461] hub 1-0:1.0: USB hub found [ 131.301738][ T6461] hub 1-0:1.0: 1 port detected [ 131.753724][ T6469] misc userio: Invalid payload size [ 133.039529][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.062823][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.685575][ T6525] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 135.840265][ T6525] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 135.856495][ T6523] input: jJǸ-9%vJ86 as /devices/virtual/input/input7 [ 135.891690][ T6525] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 135.968109][ T6525] page_type: f5(slab) [ 135.982073][ T6525] raw: 00fff00000000040 ffff88813fe3c280 dead000000000100 dead000000000122 [ 136.072083][ T6525] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 136.104509][ T6525] head: 00fff00000000040 ffff88813fe3c280 dead000000000100 dead000000000122 [ 136.162713][ T6525] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 136.171759][ T6525] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 136.212970][ T6525] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 136.213029][ T6525] page dumped because: unmovable page [ 136.213046][ T6525] page_owner tracks the page as allocated [ 136.213082][ T6525] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5824, tgid 5824 (syz-executor), ts 88251365033, free_ts 72024716850 [ 136.213137][ T6525] post_alloc_hook+0x153/0x170 [ 136.213179][ T6525] get_page_from_freelist+0x111d/0x3140 [ 136.213219][ T6525] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 136.213261][ T6525] alloc_pages_mpol+0x1fb/0x550 [ 136.213288][ T6525] new_slab+0x43a/0x6d0 [ 136.213320][ T6525] ___slab_alloc+0x2a0/0x850 [ 136.213353][ T6525] __kmalloc_noprof+0x460/0x850 [ 136.213401][ T6525] batadv_hash_new+0x74/0x2e0 [ 136.213431][ T6525] batadv_tt_init+0x226/0x350 [ 136.213473][ T6525] batadv_mesh_init+0x4e3/0x910 [ 136.213506][ T6525] batadv_meshif_init_late+0xbce/0xf30 [ 136.213544][ T6525] register_netdevice+0x685/0x2210 [ 136.213580][ T6525] batadv_meshif_newlink+0x8f/0xc0 [ 136.213612][ T6525] rtnl_newlink+0x1494/0x2380 [ 136.213643][ T6525] rtnetlink_rcv_msg+0x95e/0xe90 [ 136.213671][ T6525] netlink_rcv_skb+0x159/0x420 [ 136.213704][ T6525] page last free pid 5703 tgid 5703 stack trace: [ 136.213721][ T6525] __free_frozen_pages+0x7e1/0x10d0 [ 136.213755][ T6525] qlist_free_all+0x47/0xe0 [ 136.213791][ T6525] kasan_quarantine_reduce+0x1a0/0x1f0 [ 136.213832][ T6525] __kasan_slab_alloc+0x69/0x90 [ 136.213888][ T6525] __kmalloc_noprof+0x2b9/0x850 [ 136.213929][ T6525] load_elf_phdrs+0x102/0x210 [ 136.213963][ T6525] load_elf_binary+0x29e/0x51b0 [ 136.213996][ T6525] bprm_execve+0x8fb/0x1680 [ 136.214034][ T6525] do_execveat_common.isra.0+0x4a5/0x580 [ 136.214075][ T6525] __x64_sys_execve+0x93/0xd0 [ 136.214114][ T6525] do_syscall_64+0x106/0xf80 [ 136.214144][ T6525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.214486][ T6527] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 136.214518][ T6527] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 136.214542][ T6527] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 136.214570][ T6527] page_type: f5(slab) [ 136.214598][ T6527] raw: 00fff00000000040 ffff88813fe3c280 dead000000000100 dead000000000122 [ 136.214626][ T6527] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 136.214655][ T6527] head: 00fff00000000040 ffff88813fe3c280 dead000000000100 dead000000000122 [ 136.214681][ T6527] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 136.214716][ T6527] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 136.214744][ T6527] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 136.214762][ T6527] page dumped because: unmovable page [ 136.214776][ T6527] page_owner tracks the page as allocated [ 136.214789][ T6527] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5824, tgid 5824 (syz-executor), ts 88251365033, free_ts 72024716850 [ 136.214838][ T6527] post_alloc_hook+0x153/0x170 [ 136.214886][ T6527] get_page_from_freelist+0x111d/0x3140 [ 136.214927][ T6527] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 136.214970][ T6527] alloc_pages_mpol+0x1fb/0x550 [ 136.214997][ T6527] new_slab+0x43a/0x6d0 [ 136.215030][ T6527] ___slab_alloc+0x2a0/0x850 [ 136.215062][ T6527] __kmalloc_noprof+0x460/0x850 [ 136.215100][ T6527] batadv_hash_new+0x74/0x2e0 [ 136.215128][ T6527] batadv_tt_init+0x226/0x350 [ 136.215167][ T6527] batadv_mesh_init+0x4e3/0x910 [ 136.215199][ T6527] batadv_meshif_init_late+0xbce/0xf30 [ 136.215233][ T6527] register_netdevice+0x685/0x2210 [ 136.215269][ T6527] batadv_meshif_newlink+0x8f/0xc0 [ 136.215302][ T6527] rtnl_newlink+0x1494/0x2380 [ 136.215335][ T6527] rtnetlink_rcv_msg+0x95e/0xe90 [ 136.215378][ T6527] netlink_rcv_skb+0x159/0x420 [ 136.215415][ T6527] page last free pid 5703 tgid 5703 stack trace: [ 136.215435][ T6527] __free_frozen_pages+0x7e1/0x10d0 [ 136.215470][ T6527] qlist_free_all+0x47/0xe0 [ 136.215510][ T6527] kasan_quarantine_reduce+0x1a0/0x1f0 [ 136.215552][ T6527] __kasan_slab_alloc+0x69/0x90 [ 136.215606][ T6527] __kmalloc_noprof+0x2b9/0x850 [ 136.215648][ T6527] load_elf_phdrs+0x102/0x210 [ 136.215681][ T6527] load_elf_binary+0x29e/0x51b0 [ 136.215714][ T6527] bprm_execve+0x8fb/0x1680 [ 136.215753][ T6527] do_execveat_common.isra.0+0x4a5/0x580 [ 136.215797][ T6527] __x64_sys_execve+0x93/0xd0 [ 136.215838][ T6527] do_syscall_64+0x106/0xf80 [ 136.215881][ T6527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.899416][ T6537] Process accounting resumed [ 139.453434][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.105'. [ 139.541284][ T6572] netlink: 'syz.3.105': attribute type 1 has an invalid length. [ 139.681824][ T6572] netlink: 5 bytes leftover after parsing attributes in process `syz.3.105'. [ 140.003112][ T6574] mmap: syz.1.106 (6574) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 141.190241][ T6592] FAULT_INJECTION: forcing a failure. [ 141.190241][ T6592] name failslab, interval 1, probability 0, space 0, times 0 [ 141.315552][ T6592] CPU: 0 UID: 0 PID: 6592 Comm: syz.2.111 Tainted: G U L syzkaller #0 PREEMPT(full) [ 141.315603][ T6592] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 141.315614][ T6592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 141.315629][ T6592] Call Trace: [ 141.315639][ T6592] [ 141.315650][ T6592] dump_stack_lvl+0x100/0x190 [ 141.315699][ T6592] should_fail_ex.cold+0x5/0xa [ 141.315734][ T6592] should_failslab+0xc2/0x120 [ 141.315762][ T6592] __kmalloc_cache_noprof+0x7a/0x6f0 [ 141.315796][ T6592] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 141.315844][ T6592] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 141.315888][ T6592] vidtv_mux_init+0x8a6/0xbf0 [ 141.315925][ T6592] vidtv_start_feed+0x33e/0x4c0 [ 141.315966][ T6592] ? __pfx_vidtv_start_feed+0x10/0x10 [ 141.316007][ T6592] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 141.316040][ T6592] ? mark_held_locks+0x40/0x70 [ 141.316066][ T6592] ? __pfx_vidtv_start_feed+0x10/0x10 [ 141.316092][ T6592] dmx_ts_feed_start_filtering+0xf6/0x220 [ 141.316124][ T6592] dvb_dmxdev_start_feed+0x273/0x3f0 [ 141.316160][ T6592] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 141.316189][ T6592] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 141.316218][ T6592] dvb_demux_do_ioctl+0xe64/0x1200 [ 141.316252][ T6592] dvb_usercopy+0x167/0x340 [ 141.316274][ T6592] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 141.316302][ T6592] ? __pfx_dvb_usercopy+0x10/0x10 [ 141.316334][ T6592] ? __fget_files+0x21f/0x3d0 [ 141.316367][ T6592] dvb_demux_ioctl+0x29/0x40 [ 141.316390][ T6592] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 141.316414][ T6592] __x64_sys_ioctl+0x18e/0x210 [ 141.316441][ T6592] do_syscall_64+0x106/0xf80 [ 141.316460][ T6592] ? clear_bhb_loop+0x40/0x90 [ 141.316482][ T6592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.316500][ T6592] RIP: 0033:0x7fc326d9c629 [ 141.316517][ T6592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.316533][ T6592] RSP: 002b:00007fc327bad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.316551][ T6592] RAX: ffffffffffffffda RBX: 00007fc327015fa0 RCX: 00007fc326d9c629 [ 141.316562][ T6592] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 141.316573][ T6592] RBP: 00007fc326e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 141.316583][ T6592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.316593][ T6592] R13: 00007fc327016038 R14: 00007fc327015fa0 R15: 00007ffee201ffc8 [ 141.316617][ T6592] [ 141.574538][ T9] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 141.586744][ T9] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 141.595180][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G U L syzkaller #0 PREEMPT(full) [ 141.605888][ T9] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 141.611260][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 141.621402][ T9] Workqueue: events vidtv_mux_tick [ 141.626615][ T9] RIP: 0010:vidtv_psi_ts_psi_write_into+0x54a/0xbc0 [ 141.633219][ T9] Code: 3c c3 dc f9 4c 8d 63 20 4c 89 e0 48 c1 e8 03 80 3c 28 00 0f 85 e8 04 00 00 48 8b 43 20 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 <0f> b6 14 2a 38 ca 7f 08 84 d2 0f 85 19 05 00 00 0f b6 10 48 8b 7c [ 141.653121][ T9] RSP: 0018:ffffc900000e73f8 EFLAGS: 00010202 [ 141.659284][ T9] RAX: 0000000000000002 RBX: ffffc900000e7678 RCX: 0000000000000002 [ 141.667268][ T9] RDX: 0000000000000000 RSI: ffffffff882b3804 RDI: ffff88801e68dac0 [ 141.675246][ T9] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 141.683222][ T9] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900000e7698 [ 141.691226][ T9] R13: 0000000000000178 R14: 0000000000000000 R15: 0000000000000008 [ 141.699208][ T9] FS: 0000000000000000(0000) GS:ffff888124351000(0000) knlGS:0000000000000000 [ 141.708152][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.714747][ T9] CR2: 00007fc324ff6d58 CR3: 00000000344d6000 CR4: 00000000003526f0 [ 141.722737][ T9] Call Trace: [ 141.726036][ T9] [ 141.729063][ T9] ? __pfx_vidtv_psi_ts_psi_write_into+0x10/0x10 [ 141.735429][ T9] vidtv_psi_pmt_write_into+0x3b2/0xa70 [ 141.740993][ T9] ? __pfx_vidtv_psi_pmt_write_into+0x10/0x10 [ 141.747069][ T9] ? vidtv_psi_pat_write_into+0x56a/0x690 [ 141.752944][ T9] ? __pfx_vidtv_psi_pat_write_into+0x10/0x10 [ 141.759224][ T9] ? do_raw_spin_lock+0x128/0x260 [ 141.764270][ T9] ? debug_object_activate+0x331/0x490 [ 141.769757][ T9] vidtv_mux_push_si+0x932/0xe80 [ 141.774710][ T9] ? __pfx_vidtv_mux_push_si+0x10/0x10 [ 141.780183][ T9] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 141.786014][ T9] ? __pfx_vidtv_ts_pcr_write_into+0x10/0x10 [ 141.792017][ T9] ? __lock_acquire+0x4a5/0x2630 [ 141.796972][ T9] ? __mptcp_push_pending+0x453/0x540 [ 141.802377][ T9] vidtv_mux_tick+0xe9b/0x1480 [ 141.807160][ T9] ? __lock_acquire+0x4a5/0x2630 [ 141.812119][ T9] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 141.817341][ T9] ? __lock_acquire+0x4a5/0x2630 [ 141.822302][ T9] ? debug_object_deactivate+0x2e4/0x3b0 [ 141.828042][ T9] ? finish_task_switch.isra.0+0x200/0xb80 [ 141.833952][ T9] ? rcu_is_watching+0x12/0xc0 [ 141.838744][ T9] process_one_work+0x9d7/0x1920 [ 141.843709][ T9] ? __pfx_process_one_work+0x10/0x10 [ 141.849117][ T9] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 141.854361][ T9] worker_thread+0x5da/0xe40 [ 141.859092][ T9] ? kthread+0x13a/0x450 [ 141.863375][ T9] ? __pfx_worker_thread+0x10/0x10 [ 141.868520][ T9] kthread+0x370/0x450 [ 141.872703][ T9] ? __pfx_kthread+0x10/0x10 [ 141.877315][ T9] ret_from_fork+0x754/0xd80 [ 141.881969][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 141.887106][ T9] ? __switch_to+0x7b4/0x1120 [ 141.891855][ T9] ? __pfx_kthread+0x10/0x10 [ 141.896511][ T9] ret_from_fork_asm+0x1a/0x30 [ 141.901327][ T9] [ 141.904633][ T9] Modules linked in: [ 141.910717][ T9] ---[ end trace 0000000000000000 ]--- [ 141.935772][ T9] RIP: 0010:vidtv_psi_ts_psi_write_into+0x54a/0xbc0 [ 141.942410][ T9] Code: 3c c3 dc f9 4c 8d 63 20 4c 89 e0 48 c1 e8 03 80 3c 28 00 0f 85 e8 04 00 00 48 8b 43 20 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 <0f> b6 14 2a 38 ca 7f 08 84 d2 0f 85 19 05 00 00 0f b6 10 48 8b 7c [ 142.085623][ T9] RSP: 0018:ffffc900000e73f8 EFLAGS: 00010202 [ 142.122695][ T9] RAX: 0000000000000002 RBX: ffffc900000e7678 RCX: 0000000000000002 [ 142.130739][ T9] RDX: 0000000000000000 RSI: ffffffff882b3804 RDI: ffff88801e68dac0 [ 142.144119][ T9] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 142.154600][ T9] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900000e7698 [ 142.197881][ T9] R13: 0000000000000178 R14: 0000000000000000 R15: 0000000000000008 [ 142.228645][ T9] FS: 0000000000000000(0000) GS:ffff888124351000(0000) knlGS:0000000000000000 [ 142.258781][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.267902][ T9] CR2: 0000001b30fecff8 CR3: 0000000075aaa000 CR4: 00000000003526f0 [ 142.281251][ T9] Kernel panic - not syncing: Fatal exception [ 142.287972][ T9] Kernel Offset: disabled [ 142.292300][ T9] Rebooting in 86400 seconds..