last executing test programs: 12.51653527s ago: executing program 1 (id=46): mmap$auto(0x7, 0x2020009, 0x3, 0x13, 0xfffffffffffffffa, 0x8000) arch_prctl$auto(0x9, 0x3) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x222802, 0x0) r0 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='b\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010031bd7000fddbdf250c00000008000380040003801800018014000200776c616e3000"/46], 0x34}}, 0x24048084) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x402, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8a241, 0x0) move_pages$auto(0x0, 0x401, 0x0, &(0x7f0000000040)=0x1900, 0x0, 0x12) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_tcp_metrics(0x0, 0xffffffffffffffff) socket(0x10, 0x2, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/ip_mr_vif\x00', 0x40900, 0x0) pread64$auto(r1, 0x0, 0x594c, 0x9fffffffd) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp6\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x100000000008, 0x8000) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x3, 0x6) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x2000, 0x0) pread64$auto(r3, 0x0, 0x6, 0x3) 11.945904278s ago: executing program 3 (id=50): mmap$auto(0x0, 0xffc, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0x6c6, 0xeb1, 0x401, 0x8000) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x7) semtimedop$auto(0x0, &(0x7f0000000000)={0x2, 0x8001, 0x36ec}, 0x1f4, 0x0) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={0xffffffffffffffff, 0x0, 0xf05, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x0, 0x3f, 0x3, 0x3, 0x3, 0x6}, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = inotify_init1$auto(0x3000000000000) socket$nl_generic(0x11, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) unshare$auto(0x40000080) r1 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="64e25022ccbf60111fd12c451a63ae00000000", @ANYBLOB="96e88b42a712ed7ad3e28df7b4a775f4121b233f0abbc44609aa87dcbb8d8efc5f3394d0ab9aedc2a3b12316489e741cce7430d1cff55175627a69095637a7cdcf30a6449b5262a187fffdbd08a28bcad5e54876450c75b30aa4664c2f876b856dde8cc982c032a7c077a715f5337345c31fdd06efcac89f19d4193aebc9a3012b9fcc775a825488c9ba6f6d4363c1b2238224a05f1d069e87d08962f049e5d9ceefe7b9296a846f0f300b926e052ee96096917a", @ANYBLOB="010027bd7000fcdbdf250a0000001800018014000200"/38], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000015) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x840, 0x0) read$auto(r0, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x8000000000, 0xffffffffffff0005, 0x13) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffffe}, 0x4000000000008) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) write$auto(0x3, 0x0, 0xfdef) 10.771103086s ago: executing program 1 (id=52): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r0, 0x15, 0x0, 0x9) r1 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) madvise$auto(0x0, 0x1010001, 0x100000003) r2 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fsconfig$auto_SHMEM_HUGE_DENY(0xffffffffffffffff, 0x0, &(0x7f0000000140)='\\!:\x00', 0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r3, 0xffffffffffdffe00, &(0x7f0000000140)) lseek$auto(r2, 0x7, 0x2) madvise$auto(0x1000, 0x400050, 0x9) ioprio_set$auto(0x3, 0x400000000000, 0x72e2f0a) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) write$auto(0x1, 0x0, 0x80000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) munmap$auto(0x8000, 0xffffffff) recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) mmap$auto(0xb, 0xe5, 0x1, 0x15, r1, 0x101) getsockopt$auto_SO_TXTIME(r1, 0x81, 0x3d, &(0x7f0000000000)='!}\x00', &(0x7f0000000040)=0xc22c) 10.66691165s ago: executing program 3 (id=53): mmap$auto(0x0, 0x5, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x2a082, 0x0) socket(0xa, 0x3, 0x3b) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x103281, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.7/usb8/authorized_default\x00', 0x20582, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) open(0x0, 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0xc3) 10.380172829s ago: executing program 3 (id=55): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x9, 0x1, 0xf) socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x0, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x200007, 0x8) mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) connect$auto(0x3, 0x0, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 10.200919465s ago: executing program 0 (id=56): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) socket(0x1d, 0x2, 0x6) socket(0x2, 0x2, 0x1) socket(0x11, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) socket(0x11, 0x2, 0x73) close_range$auto(0x0, 0x5, 0x0) mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u50xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x5}, 0xef) r1 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x301483, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0x29, 0x18, &(0x7f0000000040)='!\x00', 0x1ff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_NL80211_CMD_CONNECT(r1, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0xc090) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) futex$auto(0x0, 0x88, 0x7, 0x0, 0x0, 0x5) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x5, 0xfffffffd) fcntl$auto_F_NOTIFY(0xffffffffffffffff, 0x402, 0x9000) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) fsopen$auto(0x0, 0x1) prctl$auto(0x38, 0x3, r0, 0x2, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0x2, 0xeb1, 0xffffffffffffffff, 0x8000) r6 = socket(0x23, 0x2, 0x0) ioctl$auto(r6, 0x89ef, 0x74) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) bpf$auto(0x0, 0x0, 0x6f3) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) close_range$auto(0x2, 0x8, 0x0) 9.812963667s ago: executing program 1 (id=58): mmap$auto(0x0, 0xf6, 0xdf, 0xeb1, 0x401, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$auto_rng_chrdev_ops_core(r0, &(0x7f0000000040)=""/4096, 0xfffffe82) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_seg6(0x0, 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES16=r2, @ANYBLOB="1ed7504904c59df2465e774c34316d44c46efb883c56ebae51f17617795dd841eeee37d8e053918c3dbe3dc4d6dfc55c502308a45b3c6519bdc52004664c5f302c98357c767a0fbe347f09be4a8901c38ef8af5c11c4f1820462b55875bb9d07a0f046fa40c75c303aa085ab0c27a783f6d916f65376dbc9af089d128b1f81d7c76ee462c360c48cca18be507730b43ee6f79dbd7b73a22bbce5460128f1832f08e7141e3604adb59a73c02a7951", @ANYRES64=r2, @ANYRESOCT=r1, @ANYRES64=r2], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x84) sendmsg$auto_SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="bb00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\a\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4.\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d5) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x3e, 0x0) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000000)="c80d1b5d399b58", 0xfdef) 7.916222305s ago: executing program 2 (id=60): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$auto(r0, 0x800064d1, r0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r2, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) open(0x0, 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r6) r8 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000040)=@token_create={0x5, r8}, 0x9) setsockopt$auto(r8, 0x9, 0x8, &(0x7f0000000000)='\x00', 0xfffffffe) r9 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000140), r8) sendmsg$auto_NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r9, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80d0) sendmsg$auto_NLBL_CIPSOV4_C_ADD(r3, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4eb92c685c31ce3c}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, r9, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x73}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x979}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r7, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x4000000) sendmsg$auto_ILA_CMD_ADD(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x48, r5, 0x201, 0x70bd28, 0x25dfdc03, {}, [@ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x8}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x40000000000001c}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x9}, @ILA_ATTR_IFINDEX={0x8, 0x4, r10}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x9}, @ILA_ATTR_IFINDEX={0x8, 0x4, r10}]}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x38) 7.669951928s ago: executing program 2 (id=61): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x1, 0x106) r1 = socket(0x10, 0x2, 0x0) r2 = bpf$auto(0xff, &(0x7f00000004c0)=@bpf_attr_5={@target_fd=0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x5, 0xffffffffffffffff, @relative_id=0x4, 0x5}, 0x3fc) sendmmsg$auto(r1, 0x0, 0x4, 0x8) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'vlan0\x00', 0x0}) msgctl$auto_MSG_STAT_ANY(0xab7c, 0xd, &(0x7f0000000600)={{0x6, 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x8, 0x24}, 0x0, &(0x7f00000005c0)=0x5, 0x3, 0xb, 0x369d, 0xfffffffffffffffb, 0x2, 0x4, 0x8, 0x8, @raw=0x4ade9df7, @raw=0xfffffff7}) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000002c80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002c40)={&(0x7f0000001740)={0x1140, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xa6, 0x2, 0x0, 0x1, [@nested={0x47, 0xc0, 0x0, 0x1, [@typed={0x4, 0x168, 0x0, 0x0, @binary}, @typed={0x8, 0x2f, 0x0, 0x0, @fd=r0}, @generic="68f15443dd82f047c33a7492285a56bd6c147387f64602", @typed={0x14, 0x28, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @nested={0x4, 0xa}, @typed={0x8, 0xa1, 0x0, 0x0, @fd=r2}, @generic]}, @generic="350e8d0cc7e92199dd2a6a51430dc66c738d0a02359a16bfb1f4759f2948dcb0c7c7976dc42a0ae7542a53cdae817c955a99e9681daf7d9680752c7f1ad557e5821717ca34a8d6d05ab4b07eb47e285b467b68b8214bc6cdf315"]}, @ETHTOOL_A_STRSET_STRINGSETS={0xff4, 0x2, 0x0, 0x1, [@typed={0x8, 0x4e, 0x0, 0x0, @pid}, @nested={0x4, 0x153}, @generic="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", @nested={0x4, 0x6b}]}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x3}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x40}]}, @ETHTOOL_A_STRSET_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8000}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x1140}, 0x1, 0x0, 0x0, 0x8000}, 0x8030) write$auto(0x3, 0x0, 0xfffffdef) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r6 = socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff050006000100", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) r7 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000003c0), r6) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r6, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, r7, 0x10, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', 0x0, 0x7fff, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0xa6) 7.45698179s ago: executing program 0 (id=62): bpf$auto(0x0, 0x0, 0xee) mmap$auto(0x0, 0x40009, 0x1ff, 0x9b72, 0x7, 0x28000) modify_ldt$auto(0x1, 0x0, 0x10) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) modify_ldt$auto(0x0, 0x0, 0xfffffffffffffffb) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/profiling\x00', 0x82002, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)="2dfc", 0x2) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x5, 0xfffffffd) ioctl$auto_VHOST_SET_FEATURES2(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x3) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x6) madvise$auto(0x0, 0x2003f2, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) fanotify_init$auto(0x5, 0x0) creat$auto(&(0x7f0000000000)='./file0\x00', 0x3ff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) 6.078608229s ago: executing program 2 (id=63): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x582, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000001240), 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) pkey_mprotect$auto(0x100000000, 0x9, 0x6, 0x80000000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000600)={{&(0x7f0000000400)="5cdd59f1a68d086a02a2cc1399c7b3f7410eb36cfbec7e7224eaf6de379d09771080b197b8057225ffa98bc9a7bd53a5aee9a2d48d74d149c199be3009d2d61af64942e106e9b586aabcd7ae4de8a0e87e02af7f6af674c2fc8d8a8a78916f9c23e6b8a8be7141ae87f2996f079bfcbadc2ef4a6a3e894ba7dd3d9f11bd4d05558df32f9eeb4fda5e29576787e2ced58e35355c37e1ff8a11d36a067d362a37323c582eee83ea4cc9e7f", 0x6, &(0x7f0000000540)={&(0x7f00000004c0)="35a4988620ed7f4ab66aa8948d2c0530bb25f6057ba29add8bbc1d2db5f8682804b365a0d809d366e189194941627ddf76d73565a6133f661519a99780edab37135a9058cfbea6f19ec9ad30287159ec1c6afd59583911a5239ff895b0871d32f098c6cfdef0b944fe"}, 0x2, &(0x7f0000000580)="6ea0838008f497d022b78e5e7eb7c80c499b948523cfff8c50f12ebc124c316e0b644f39bb8b55a743fb004e0ed1aec82d0b82794ab3801ad7705749f562a3d87256f1ec7ebea9a0fd16decd422f095cc3abfc2c4e", 0x4, 0xc7b}, 0xfffffffe}, 0x6, 0x2) 5.623904934s ago: executing program 1 (id=64): write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000000), 0x109280, 0x0) read$auto(r1, &(0x7f0000000100)='\xcb%)\x00', 0x7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = socket(0xa, 0x4, 0x9000300) sendfile$auto(0x1, r2, 0x0, 0x8fb5) fanotify_init$auto(0x1, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) socket(0x29, 0xa, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x5) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto_SO_TYPE(0xffffffffffffffff, 0xf, 0x3, &(0x7f0000000140)='$\x00', 0x0) getsockopt$auto(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) msgsnd$auto(0x0, &(0x7f0000000080)={0x6, 0x2}, 0xf, 0xc45) 5.53313611s ago: executing program 3 (id=65): socket(0x11, 0x3, 0xe) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0803, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280), 0x1) clone$auto(0x20003b48, 0x2, 0x0, 0x0, 0x5) r1 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000100)='/proc/loadavg\x00', 0x80400, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r1, &(0x7f0000000140)=""/83, 0x53) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x5, 0xc, 0x9, 0x1ffde, 0x7, 0x4, 0x3fe, 0x9, 0x1, 0x2, 0x7, 0x9, 0x8, 0x8, 0x407, 0x5, 0x8000000007, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xf3, 0x7, 0xfffffffc, 0x0, 0x1, 0x0, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x47e, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe3a]}, 0x400, 0x81) r2 = socket(0x10, 0x2, 0x0) r3 = socket(0xa, 0x3, 0x3c) write$auto(r3, &(0x7f00000003c0)='+&\x00', 0x273f) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='p\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24048040}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r0, @ANYBLOB="20e117f8d7d3294bd78015be0400881db0e33507ec25ca5f601ccdab70e652cb0a71bb097e452844286612d04b8e121402d0a83a9db7c5614da7c46a09f2a9cdfc8c007ffa19eeb87f9ad8438be2ea035defcdfbe984d52a83a3b04e117e59f16d0a1d1391472f8de85a4c41e496fc2ff0f8e11ff0260c6b197bcda2bd0959b52de21a0143523cf45d57798fa2c2603d79a27b414004fe68fd6a38ab6e9bb6e46c2ed5b03a209271253443b9c471d5bb0608cde325b082dba8a65d373c33c7fff065e533cd9748d623b434e9c56ce38f79ad1d8d29ee0230f4607f14c5a9f315"], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000200)='7\x00\\\xa0\x04|\x03\'g\t$K\xcb\x12\xfa\x00\x00\xcfk', 0xb7f) setrlimit$auto(0x7, &(0x7f0000000280)={0x0, 0x2}) userfaultfd$auto(0x1) select$auto(0x1, &(0x7f0000000040)={[0xfffffffffffff91e, 0x40, 0x4, 0x80, 0x7, 0x3, 0x80000001, 0x7c, 0x3, 0xfffffffffffffffc, 0x5, 0xb, 0x4, 0x7, 0x0, 0x6]}, &(0x7f00000000c0)={[0x3, 0x4, 0x0, 0x1, 0x39, 0x6, 0x7f, 0x3, 0x2, 0xc6d, 0x8, 0xffffffff, 0x1, 0x0, 0x7491, 0x40]}, 0x0, &(0x7f00000001c0)={0x9, 0x1}) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000180)='7\x00\\\xa0\x04|4\x00\x00\x03\x00\x00\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\x00rRVr\xc4O\xdc1\x9b%\x10Z\'\xb9\'\xa3stC=\x85\xc6\xf6\x13 \xeb\xff%\x11\x82\x05\xdfV\x02\xca&\xd8$<\xab&\xc8B-\xcc\x15\x04&\x13;\xfe\xbdQ\xaa\x16o\x1f\xc7\x94\xa3\xc9\x9a\xe1d\xf5\n\xe2\x88\x84\vT?\x98\xa2\x00'/206, 0x5) fsopen$auto(0x0, 0x1) 5.144909681s ago: executing program 0 (id=66): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x22001, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x68102, 0x0) pread64$auto(r0, 0x0, 0x3, 0xe9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = timerfd_create$auto(0x1, 0x0) timerfd_settime$auto(r1, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) socket(0xf, 0xa, 0x5) rt_sigsuspend$auto(0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) shutdown$auto(0x200000003, 0x2) listen$auto(0x3, 0x7) shmctl$auto_SHM_STAT(0x5, 0xd, &(0x7f0000000240)={{0x3, 0xee01, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x7}, 0xfffffffe, 0x9, 0x0, 0x5, @inferred, @raw=0x6, 0x0, 0x0, 0x0, 0x0}) 4.507602092s ago: executing program 3 (id=67): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x2, 0x2) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/034/001\x00', 0x201, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x73) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x161401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/nr_anon\x00', 0x0, 0x0) socket(0x2b, 0x1, 0x0) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x30d540, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socketpair$auto(0x4004, 0x8, 0x7, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TCFLSH2(r0, 0x40204706, 0x0) 4.247639664s ago: executing program 2 (id=68): r0 = openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/bluetooth/hci1/power\x00', 0x1ab080, 0x0) r1 = mq_open$auto(&(0x7f0000000000)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u50xffffffffffffffff}, &(0x7f0000000180)={0x0, 0xfff, 0xf}) rt_tgsigqueueinfo$auto_SIGCONT(r7, r8, 0x12, &(0x7f00000001c0)={@_si_pad}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0) 1.095996724s ago: executing program 1 (id=72): openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x820181, 0x0) write$auto(0xca, &(0x7f0000000040)='\x04\x1c\xdc\xec7z\xdf3\xf2\xd3!\v\xb0M\xf8Q\x15\f', 0x2d8) madvise$auto(0x9, 0xadf, 0xa) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x2200, 0x0) read$auto(r0, 0x0, 0x10001) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x3ed102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) preadv$auto(0x40000000000003, 0x0, 0x6, 0x5ff4, 0x1) close_range$auto(0x0, 0x5, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x7, 0xf8, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0x28, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x240088e4) 1.024173735s ago: executing program 3 (id=73): fsconfig$auto_SHMEM_HUGE_DENY(0xffffffffffffffff, 0x0, &(0x7f0000000140)='\\!:\x00', 0x0, 0xffffffffffffffff) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x8000) r1 = socket(0xa, 0x802, 0x3a) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x40146f2c, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) setreuid$auto(0x4, 0x8) futimesat$auto(0xda, 0x0, 0x0) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(0x0, 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_UI_DEV_DESTROY(r2, 0x5502, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) lseek$auto(r1, 0x8, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x9, 0x3, 0x0, 0x80000000000000, 0x80000000, 0x0, 0x4513, 0x9, 0xffffffffffffffff, {0x7, 0x6}, 0xfffffffc, 0xbfa, 0x9, 0x10, 0x0, 0x2, 0x8, 0xff, 0x10000, 0x100000001, 0x4}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0) 153.989909ms ago: executing program 2 (id=74): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000002280), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000002340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01082aca7000fcdbdf2502000000100002800c000100d70b4d9343ea1b1208000100", @ANYRES32=r2, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4040005}, 0x40) r3 = socket(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000880), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="93ab2cbd7000fbdbdf250800000008000300", @ANYRES32=r7, @ANYBLOB="0800060042"], 0x24}, 0x1, 0x0, 0x0, 0xc811}, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty38\x00', 0x400, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x4a42, 0x0) fallocate$auto(r0, 0x8, 0x5b6f, 0x40000000004cbc60) ioctl$auto_TIOCSTI2(r8, 0x5412, &(0x7f0000000180)="0f152c389430b535fe0a7901be860df77fcffdf917723750521683cbd815672c5e43a85164690fb8f6db8d879674552ec02447f29d9af2b39a9fb511d5ac673403cde336bf1b40ede46c50bb404a512dc7b561d7a0e09ce1d717a56c7ad03d0a6e333dc3efac79977c70d127314fea27e5db699e7c33cc914a1646f7b390952b1d7aa9ce16d81b1814846d94d029d079b561b140e145348a222ff1e618522c62124b3bd10bc142c2c2329a570cff7af08ac7d14fa4fa37c0f6e44b441d8a0ab710c7708e148a09c2a66111baae9adeb88552d004f505544479cb84d9e34f39deb0435f0645ecc332") ioctl$auto_XFS_IOC_FSGROWFSLOG(0xffffffffffffffff, 0x4008586f, &(0x7f0000000400)={0x4, 0x9}) acct$auto(&(0x7f0000000280)='/dev/ocfs2_control\x00') sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3ba7e72a998a86b3b048a5ad4b2cbe0850000000f8982bc68abca629b2", @ANYRES32=0x0, @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x4) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, &(0x7f0000000040)={0x5}, 0x1000, 0x4) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) getsockopt$auto_SO_BUSY_POLL(r3, 0x4, 0x2e, &(0x7f0000000300)='/d_con9H\x99To\x00\x00\x00\x00\x00\x00\x00\x00\xb5\x94 >\x15\x13\xdd\b\xb6#\xfd1\n\x82?\xce[\xd8\x9d\x87\xf8T\x12\xd2D)\x83\xfc\xff\x03\xf8G\x97\x02\x0fHM6p\xc2\'\x01;\a\b\xe6X\x15\xc7p\xb2\x17`A\x1f\xe3 \xb2h\xb6\xd3B\x10\xd1V\xac9\xd9I\xe7h\x83\x8f\x1a\xcc\x8e\x19@\xe6z\x9bYk\xfd\x1eo\xf5X\xac./c;\xbc\x90]\xaa(e\xd3\xe9\xf9xt\xbc\x9f\x87S\xb8\xcf;\x81H\x7f\xc7\xb25\x03\xd3\x10NE\xfe\xfa\x80\xeana\xee\x00\x16\x9a\xb9T\xbe\xb3\x0e\x12\xbc\xf9\xf5\xfa\xeaF\xca\xfb\xf28n\xdd6\x0f\x9dc9\xaf\xd5\x90\xefDZV?\xd9\xff\xe4U\xd5\n2B\x11a\x04\xf2\xb5\xbf\x0e\xae\x1d~\x98\x04LQ\"\x1bK\x9c\xf6\x00Ve\xe3\xbbt\x86\x98n\xf8\x91\xcb\xa0t{+`Rt\xc9\x1c\xf8\x05\xe8}5\xb5n', &(0x7f00000002c0)=0x1) 0s ago: executing program 1 (id=75): openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x41a900, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) getrlimit$auto(0x3, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$auto_FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) unshare$auto(0x1) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x1) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r2, 0x0, 0x40002) getdents64$auto(r2, 0x0, 0x400) lseek$auto(r1, 0x7ff, 0x1) epoll_create1$auto(0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.28' (ED25519) to the list of known hosts. [ 73.866974][ T5616] cgroup: Unknown subsys name 'net' [ 73.997123][ T5616] cgroup: Unknown subsys name 'cpuset' [ 74.006991][ T5616] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.462751][ T5616] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.247672][ T5637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.248569][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.257135][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.266338][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.273569][ T5640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.277186][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.285697][ T5640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.291460][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.298734][ T5640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.306125][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.312256][ T5640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.319214][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.327547][ T5640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.335050][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.341185][ T5640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.347039][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.362739][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.370347][ T5640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.370976][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.378498][ T5640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.871286][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.878983][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.886686][ T5629] bridge_slave_0: entered allmulticast mode [ 78.894244][ T5629] bridge_slave_0: entered promiscuous mode [ 78.908221][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.915402][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.922482][ T5628] bridge_slave_0: entered allmulticast mode [ 78.929641][ T5628] bridge_slave_0: entered promiscuous mode [ 78.946909][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.954167][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.961407][ T5629] bridge_slave_1: entered allmulticast mode [ 78.968611][ T5629] bridge_slave_1: entered promiscuous mode [ 78.982851][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.990027][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.997221][ T5628] bridge_slave_1: entered allmulticast mode [ 79.004443][ T5628] bridge_slave_1: entered promiscuous mode [ 79.084184][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.104997][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.121921][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.140668][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.147860][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.155245][ T5630] bridge_slave_0: entered allmulticast mode [ 79.162141][ T5630] bridge_slave_0: entered promiscuous mode [ 79.171375][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.197728][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.204898][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.211987][ T5630] bridge_slave_1: entered allmulticast mode [ 79.219270][ T5630] bridge_slave_1: entered promiscuous mode [ 79.244889][ T5628] team0: Port device team_slave_0 added [ 79.280764][ T5628] team0: Port device team_slave_1 added [ 79.298243][ T5629] team0: Port device team_slave_0 added [ 79.304261][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.311399][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.318857][ T5627] bridge_slave_0: entered allmulticast mode [ 79.326300][ T5627] bridge_slave_0: entered promiscuous mode [ 79.344718][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.356132][ T5629] team0: Port device team_slave_1 added [ 79.361993][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.369216][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.376384][ T5627] bridge_slave_1: entered allmulticast mode [ 79.383317][ T5627] bridge_slave_1: entered promiscuous mode [ 79.400763][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.428061][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.435041][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.461086][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.472055][ T5637] Bluetooth: hci3: command tx timeout [ 79.478274][ T4947] Bluetooth: hci1: command tx timeout [ 79.478305][ T50] Bluetooth: hci2: command tx timeout [ 79.484077][ T4947] Bluetooth: hci0: command tx timeout [ 79.523240][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.530267][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.556186][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.577780][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.584803][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.610759][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.625863][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.643233][ T5630] team0: Port device team_slave_0 added [ 79.649606][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.656592][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.682822][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.695862][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.720110][ T5630] team0: Port device team_slave_1 added [ 79.791931][ T5627] team0: Port device team_slave_0 added [ 79.801852][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.808963][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.835070][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.860745][ T5628] hsr_slave_0: entered promiscuous mode [ 79.867057][ T5628] hsr_slave_1: entered promiscuous mode [ 79.875360][ T5627] team0: Port device team_slave_1 added [ 79.881538][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.888733][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.914635][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.942982][ T5629] hsr_slave_0: entered promiscuous mode [ 79.949815][ T5629] hsr_slave_1: entered promiscuous mode [ 79.956678][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 79.962506][ T5629] Cannot create hsr debugfs directory [ 80.027430][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.034639][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.060789][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.095156][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.102167][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.128491][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.155254][ T5630] hsr_slave_0: entered promiscuous mode [ 80.161488][ T5630] hsr_slave_1: entered promiscuous mode [ 80.167693][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 80.173416][ T5630] Cannot create hsr debugfs directory [ 80.297401][ T5627] hsr_slave_0: entered promiscuous mode [ 80.303979][ T5627] hsr_slave_1: entered promiscuous mode [ 80.309989][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 80.316311][ T5627] Cannot create hsr debugfs directory [ 80.648915][ T5628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.661382][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.669682][ T5628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.682116][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.690365][ T5628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.700416][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.709087][ T5628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.718138][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.787621][ T5629] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.797599][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.805770][ T5629] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.816357][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.831401][ T5629] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.841481][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.849665][ T5629] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.861574][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.956432][ T5630] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.967136][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.975181][ T5630] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.985156][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.999665][ T5630] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.010122][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.018146][ T5630] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.027776][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.115570][ T5627] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.125709][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.134162][ T5627] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.143310][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.159215][ T5627] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.169606][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.177605][ T5627] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.188603][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.223120][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.298283][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.308074][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.333083][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.340445][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.368953][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.376053][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.408315][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.441152][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.451397][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.458498][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.491706][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.498802][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.531962][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.544702][ T5637] Bluetooth: hci3: command tx timeout [ 81.544739][ T5640] Bluetooth: hci1: command tx timeout [ 81.550408][ T4947] Bluetooth: hci0: command tx timeout [ 81.555557][ T50] Bluetooth: hci2: command tx timeout [ 81.573237][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.602880][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.610171][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.657811][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.665022][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.685204][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.725503][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.732725][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.757575][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.764770][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.444797][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.586725][ T5628] veth0_vlan: entered promiscuous mode [ 82.614819][ T5628] veth1_vlan: entered promiscuous mode [ 82.718092][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.762278][ T5628] veth0_macvtap: entered promiscuous mode [ 82.778180][ T5628] veth1_macvtap: entered promiscuous mode [ 82.851614][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.874287][ T5629] veth0_vlan: entered promiscuous mode [ 82.886473][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.927592][ T5629] veth1_vlan: entered promiscuous mode [ 82.936873][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.946529][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.958986][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.974045][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.991492][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.001500][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.155519][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.178061][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.190061][ T5629] veth0_macvtap: entered promiscuous mode [ 83.198259][ T5627] veth0_vlan: entered promiscuous mode [ 83.224859][ T5630] veth0_vlan: entered promiscuous mode [ 83.237087][ T5629] veth1_macvtap: entered promiscuous mode [ 83.246015][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.256999][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.258489][ T5627] veth1_vlan: entered promiscuous mode [ 83.282136][ T5630] veth1_vlan: entered promiscuous mode [ 83.319494][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.349188][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.376435][ T5628] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.385788][ T5627] veth0_macvtap: entered promiscuous mode [ 83.400728][ T1110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.409952][ T1110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.427471][ T1110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.437183][ T1110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.458304][ T5627] veth1_macvtap: entered promiscuous mode [ 83.479470][ T5630] veth0_macvtap: entered promiscuous mode [ 83.539359][ T5630] veth1_macvtap: entered promiscuous mode [ 83.604380][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.627004][ T4947] Bluetooth: hci2: command tx timeout [ 83.627658][ T5640] Bluetooth: hci0: command tx timeout [ 83.632444][ T5637] Bluetooth: hci3: command tx timeout [ 83.643611][ T50] Bluetooth: hci1: command tx timeout [ 83.670753][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.684162][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.691518][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.705985][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.716254][ T5777] futex_wake_op: syz.3.4 tries to shift op by -2048; fix this program [ 83.727007][ T5777] 0x000000000001-0x000000020000 : "" [ 83.740531][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.751402][ T144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.756986][ T5777] ftl_cs: FTL header corrupt! [ 83.761499][ T144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.828041][ T144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.859435][ T144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.896492][ T144] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.908961][ T144] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.930241][ T144] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.939465][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.954372][ T144] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.963914][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.161108][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.193392][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.293348][ T5783] netlink: 350 bytes leftover after parsing attributes in process `syz.0.1'. [ 84.302514][ T5783] Zero length message leads to an empty skb [ 84.331896][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.360728][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.402980][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.417780][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.496155][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.516243][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.960239][ T5799] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6'. [ 85.079387][ T5798] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2'. [ 85.173322][ T5804] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2'. [ 85.704777][ T50] Bluetooth: hci1: command tx timeout [ 85.704811][ T5640] Bluetooth: hci2: command tx timeout [ 85.710242][ T4947] Bluetooth: hci3: command tx timeout [ 85.715716][ T50] Bluetooth: hci0: command tx timeout [ 87.292780][ T5833] netlink: 330 bytes leftover after parsing attributes in process `syz.0.12'. [ 87.383446][ T5834] netlink: 'syz.3.11': attribute type 11 has an invalid length. [ 87.546839][ T5833] mac80211_hwsim hwsim4 : renamed from wlan0 (while UP) [ 88.034752][ T5840] FAULT_INJECTION: forcing a failure. [ 88.034752][ T5840] name failslab, interval 1, probability 0, space 0, times 1 [ 88.063078][ T5840] CPU: 1 UID: 0 PID: 5840 Comm: syz.1.14 Not tainted syzkaller #0 PREEMPT(full) [ 88.063115][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 88.063136][ T5840] Call Trace: [ 88.063146][ T5840] [ 88.063157][ T5840] dump_stack_lvl+0x100/0x190 [ 88.063198][ T5840] should_fail_ex.cold+0x5/0xa [ 88.063235][ T5840] ? xfrm_hash_alloc+0xcf/0x100 [ 88.063264][ T5840] should_failslab+0xc2/0x120 [ 88.063297][ T5840] __kmalloc_noprof+0xe0/0x850 [ 88.063331][ T5840] ? __pfx_xfrm_net_init+0x10/0x10 [ 88.063364][ T5840] xfrm_hash_alloc+0xcf/0x100 [ 88.063394][ T5840] xfrm_state_init+0x93/0x570 [ 88.063431][ T5840] ? __pfx_xfrm_net_init+0x10/0x10 [ 88.063462][ T5840] xfrm_net_init+0x20e/0xcf0 [ 88.063502][ T5840] ? __pfx_xfrm_net_init+0x10/0x10 [ 88.063533][ T5840] ops_init+0x1e2/0x5f0 [ 88.063575][ T5840] setup_net+0x118/0x3a0 [ 88.063613][ T5840] ? __pfx_setup_net+0x10/0x10 [ 88.063651][ T5840] ? mutex_init_lockdep+0xf1/0x120 [ 88.063689][ T5840] copy_net_ns+0x46f/0x7c0 [ 88.063750][ T5840] create_new_namespaces+0x3ea/0xac0 [ 88.063804][ T5840] unshare_nsproxy_namespaces+0xf2/0x220 [ 88.063845][ T5840] ksys_unshare+0x438/0xab0 [ 88.063889][ T5840] ? __pfx_ksys_unshare+0x10/0x10 [ 88.063929][ T5840] ? xfd_validate_state+0x129/0x190 [ 88.063974][ T5840] __x64_sys_unshare+0x31/0x40 [ 88.064015][ T5840] do_syscall_64+0x10b/0x830 [ 88.064042][ T5840] ? clear_bhb_loop+0x40/0x90 [ 88.064078][ T5840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.064107][ T5840] RIP: 0033:0x7f5e83f9ce59 [ 88.064137][ T5840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.064163][ T5840] RSP: 002b:00007f5e84eb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 88.064195][ T5840] RAX: ffffffffffffffda RBX: 00007f5e84215fa0 RCX: 00007f5e83f9ce59 [ 88.064214][ T5840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 88.064231][ T5840] RBP: 00007f5e84032d6f R08: 0000000000000000 R09: 0000000000000000 [ 88.064248][ T5840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.064265][ T5840] R13: 00007f5e84216038 R14: 00007f5e84215fa0 R15: 00007ffc6e37eaa8 [ 88.064303][ T5840] [ 89.836376][ T5868] vhci_hcd vhci_hcd.0: default hub control req: 0000 v0000 i0000 l0 [ 90.011806][ T5862] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 90.234102][ T5852] mmap: syz.1.17 (5852) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.766709][ T5878] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.086742][ T5885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24'. [ 91.181703][ T5885] netlink: ct family unspecified [ 91.792702][ T808] cfg80211: failed to load regulatory.db [ 91.985826][ T29] audit: type=1800 audit(1779688714.164:2): pid=5899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.27" name="dbroot" dev="configfs" ino=8482 res=0 errno=0 [ 94.055352][ T5931] process 'syz.3.33' launched ':,' with NULL argv: empty string added [ 95.701514][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'. [ 97.818259][ T5984] netlink: 'syz.1.45': attribute type 11 has an invalid length. [ 97.842102][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.45'. [ 98.562917][ T5981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.43'. [ 98.762017][ T5997] smpboot: CPU 1 is now offline [ 99.422233][ T6007] zswap: compressor not available [ 100.076360][ T6024] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 100.820205][ T6032] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 101.729589][ T6036] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 105.764044][ T6097] FAULT_INJECTION: forcing a failure. [ 105.764044][ T6097] name failslab, interval 1, probability 0, space 0, times 0 [ 105.981538][ T6097] CPU: 0 UID: 0 PID: 6097 Comm: syz.3.65 Not tainted syzkaller #0 PREEMPT(full) [ 105.981561][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 105.981570][ T6097] Call Trace: [ 105.981576][ T6097] [ 105.981581][ T6097] dump_stack_lvl+0x100/0x190 [ 105.981603][ T6097] should_fail_ex.cold+0x5/0xa [ 105.981623][ T6097] ? __alloc_empty_sheaf+0x35/0x50 [ 105.981643][ T6097] should_failslab+0xc2/0x120 [ 105.981661][ T6097] __kmalloc_noprof+0xe0/0x850 [ 105.981674][ T6097] ? __pcs_replace_empty_main+0x13a/0x650 [ 105.981688][ T6097] ? __pcs_replace_empty_main+0x13a/0x650 [ 105.981705][ T6097] __alloc_empty_sheaf+0x35/0x50 [ 105.981726][ T6097] __pcs_replace_empty_main+0x3e8/0x650 [ 105.981746][ T6097] kmem_cache_alloc_noprof+0x480/0x6e0 [ 105.981760][ T6097] ? new_userfaultfd+0x7d/0x400 [ 105.981780][ T6097] new_userfaultfd+0x7d/0x400 [ 105.981798][ T6097] __x64_sys_userfaultfd+0x4b/0xb0 [ 105.981817][ T6097] do_syscall_64+0x10b/0x830 [ 105.981830][ T6097] ? clear_bhb_loop+0x40/0x90 [ 105.981847][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.981862][ T6097] RIP: 0033:0x7f236659ce59 [ 105.981874][ T6097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.981889][ T6097] RSP: 002b:00007f236747b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 105.981903][ T6097] RAX: ffffffffffffffda RBX: 00007f2366815fa0 RCX: 00007f236659ce59 [ 105.981913][ T6097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 105.981921][ T6097] RBP: 00007f2366632d6f R08: 0000000000000000 R09: 0000000000000000 [ 105.981930][ T6097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.981938][ T6097] R13: 00007f2366816038 R14: 00007f2366815fa0 R15: 00007fff728e2378 [ 105.981957][ T6097] [ 106.733676][ T6110] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 109.251006][ T29] audit: type=1800 audit(1843104534.890:3): pid=6133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.71" name="file0" dev="tmpfs" ino=116 res=0 errno=0 [ 109.988802][ T50] Bluetooth: hci3: unexpected event 0x1c length: 725 > 5 [ 110.140252][ T6139] FAULT_INJECTION: forcing a failure. [ 110.140252][ T6139] name failslab, interval 1, probability 0, space 0, times 0 [ 110.318211][ T6139] CPU: 0 UID: 0 PID: 6139 Comm: syz.1.72 Not tainted syzkaller #0 PREEMPT(full) [ 110.318233][ T6139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 110.318243][ T6139] Call Trace: [ 110.318249][ T6139] [ 110.318255][ T6139] dump_stack_lvl+0x100/0x190 [ 110.318283][ T6139] should_fail_ex.cold+0x5/0xa [ 110.318302][ T6139] should_failslab+0xc2/0x120 [ 110.318321][ T6139] __kmalloc_cache_noprof+0x7a/0x6f0 [ 110.318342][ T6139] ? io_uring_alloc_task_context+0xa7/0x51f [ 110.318370][ T6139] io_uring_alloc_task_context+0xa7/0x51f [ 110.318395][ T6139] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 110.318420][ T6139] ? alloc_file_pseudo+0x1a5/0x230 [ 110.318444][ T6139] __io_uring_add_tctx_node.cold+0x15/0x1a1 [ 110.318466][ T6139] ? security_inode_init_security_anon+0x7b/0x230 [ 110.318484][ T6139] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 110.318509][ T6139] ? __anon_inode_getfile+0x17c/0x280 [ 110.318533][ T6139] io_uring_setup.cold+0x1993/0x1c6e [ 110.318558][ T6139] ? __pfx_io_uring_setup+0x10/0x10 [ 110.318579][ T6139] ? __pfx_do_futex+0x10/0x10 [ 110.318603][ T6139] ? xfd_validate_state+0x129/0x190 [ 110.318618][ T6139] ? exit_to_user_mode_loop+0xe2/0x4f0 [ 110.318638][ T6139] __x64_sys_io_uring_setup+0xc2/0x170 [ 110.318657][ T6139] do_syscall_64+0x10b/0x830 [ 110.318671][ T6139] ? clear_bhb_loop+0x40/0x90 [ 110.318689][ T6139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.318703][ T6139] RIP: 0033:0x7f5e83f9ce59 [ 110.318716][ T6139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.318730][ T6139] RSP: 002b:00007f5e84e94028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 110.318745][ T6139] RAX: ffffffffffffffda RBX: 00007f5e84216090 RCX: 00007f5e83f9ce59 [ 110.318754][ T6139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 110.318763][ T6139] RBP: 00007f5e84032d6f R08: 0000000000000000 R09: 0000000000000000 [ 110.318771][ T6139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.318779][ T6139] R13: 00007f5e84216128 R14: 00007f5e84216090 R15: 00007ffc6e37eaa8 [ 110.318798][ T6139] [ 110.564093][ T6132] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 111.045636][ T10] ================================================================== [ 111.045647][ T10] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 111.045666][ T10] Write of size 8 at addr ffffc90004c39b80 by task kworker/0:1/10 [ 111.045678][ T10] [ 111.045685][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 111.045703][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 111.045716][ T10] Workqueue: events_power_efficient fb_flashcursor [ 111.045734][ T10] Call Trace: [ 111.045739][ T10] [ 111.045745][ T10] dump_stack_lvl+0x100/0x190 [ 111.045761][ T10] print_report+0x13d/0x4b0 [ 111.045780][ T10] ? _raw_spin_lock_irqsave+0x52/0x60 [ 111.045804][ T10] ? sys_imageblit+0x19fb/0x1d60 [ 111.045816][ T10] kasan_report+0xdf/0x1d0 [ 111.045833][ T10] ? sys_imageblit+0x19fb/0x1d60 [ 111.045848][ T10] sys_imageblit+0x19fb/0x1d60 [ 111.045863][ T10] ? __pfx_sys_imageblit+0x10/0x10 [ 111.045888][ T10] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 111.045908][ T10] soft_cursor+0x524/0xa10 [ 111.045930][ T10] bit_cursor+0xca1/0x1490 [ 111.045950][ T10] ? __pfx_bit_cursor+0x10/0x10 [ 111.045971][ T10] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 111.045993][ T10] ? get_color+0x1da/0x450 [ 111.046008][ T10] ? __pfx_bit_cursor+0x10/0x10 [ 111.046026][ T10] fb_flashcursor+0x338/0x430 [ 111.046042][ T10] process_one_work+0xa0e/0x1980 [ 111.046060][ T10] ? __pfx_process_one_work+0x10/0x10 [ 111.046076][ T10] ? __pfx_fb_flashcursor+0x10/0x10 [ 111.046093][ T10] worker_thread+0x5ef/0xe50 [ 111.046109][ T10] ? kthread+0x13a/0x450 [ 111.046121][ T10] ? __pfx_worker_thread+0x10/0x10 [ 111.046135][ T10] kthread+0x370/0x450 [ 111.046147][ T10] ? __pfx_kthread+0x10/0x10 [ 111.046160][ T10] ret_from_fork+0x72b/0xd50 [ 111.046176][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 111.046191][ T10] ? __switch_to+0x800/0x1100 [ 111.046217][ T10] ? __switch_to_asm+0x39/0x70 [ 111.046236][ T10] ? __pfx_kthread+0x10/0x10 [ 111.046249][ T10] ret_from_fork_asm+0x1a/0x30 [ 111.046272][ T10] [ 111.046277][ T10] [ 111.046280][ T10] The buggy address belongs to a vmalloc virtual mapping [ 111.046294][ T10] Memory state around the buggy address: [ 111.046302][ T10] ffffc90004c39a80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 111.046315][ T10] ffffc90004c39b00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 111.046325][ T10] >ffffc90004c39b80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 111.046332][ T10] ^ [ 111.046339][ T10] ffffc90004c39c00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 111.046349][ T10] ffffc90004c39c80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 111.046356][ T10] ================================================================== [ 111.046364][ T10] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 111.046372][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 111.046388][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 111.046397][ T10] Workqueue: events_power_efficient fb_flashcursor [ 111.046413][ T10] Call Trace: [ 111.046417][ T10] [ 111.046422][ T10] dump_stack_lvl+0x100/0x190 [ 111.046437][ T10] vpanic+0x552/0x970 [ 111.046450][ T10] ? __pfx_vpanic+0x10/0x10 [ 111.046463][ T10] ? __pfx_vprintk_emit+0x10/0x10 [ 111.046484][ T10] ? sys_imageblit+0x19fb/0x1d60 [ 111.046496][ T10] panic+0xd1/0xe0 [ 111.046509][ T10] ? __pfx_panic+0x10/0x10 [ 111.046524][ T10] ? sys_imageblit+0x19fb/0x1d60 [ 111.046536][ T10] ? check_panic_on_warn+0x1f/0x90 [ 111.046551][ T10] check_panic_on_warn.cold+0x19/0x34 [ 111.046566][ T10] end_report.part.0+0x3a/0x90 [ 111.046586][ T10] kasan_report.cold+0xe/0x18 [ 111.046606][ T10] ? sys_imageblit+0x19fb/0x1d60 [ 111.046621][ T10] sys_imageblit+0x19fb/0x1d60 [ 111.046636][ T10] ? __pfx_sys_imageblit+0x10/0x10 [ 111.046664][ T10] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 111.046683][ T10] soft_cursor+0x524/0xa10 [ 111.046704][ T10] bit_cursor+0xca1/0x1490 [ 111.046724][ T10] ? __pfx_bit_cursor+0x10/0x10 [ 111.046745][ T10] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 111.046767][ T10] ? get_color+0x1da/0x450 [ 111.046782][ T10] ? __pfx_bit_cursor+0x10/0x10 [ 111.046800][ T10] fb_flashcursor+0x338/0x430 [ 111.046816][ T10] process_one_work+0xa0e/0x1980 [ 111.046833][ T10] ? __pfx_process_one_work+0x10/0x10 [ 111.046850][ T10] ? __pfx_fb_flashcursor+0x10/0x10 [ 111.046867][ T10] worker_thread+0x5ef/0xe50 [ 111.046884][ T10] ? kthread+0x13a/0x450 [ 111.046896][ T10] ? __pfx_worker_thread+0x10/0x10 [ 111.046909][ T10] kthread+0x370/0x450 [ 111.046921][ T10] ? __pfx_kthread+0x10/0x10 [ 111.046934][ T10] ret_from_fork+0x72b/0xd50 [ 111.046949][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 111.046965][ T10] ? __switch_to+0x800/0x1100 [ 111.046984][ T10] ? __switch_to_asm+0x39/0x70 [ 111.047003][ T10] ? __pfx_kthread+0x10/0x10 [ 111.047016][ T10] ret_from_fork_asm+0x1a/0x30 [ 111.047039][ T10] [ 111.047092][ T10] Kernel Offset: disabled