last executing test programs: 3.111290551s ago: executing program 1 (id=2): mmap$auto(0x0, 0x2000b, 0x9, 0x20eb1, 0x40000000000a5, 0x8000) r0 = socket(0x23, 0x80805, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f0000000040)={0xa, 0x5, 0x0, 0x3, 0x9, 0x0}) r2 = prctl$auto_SECCOMP_MODE_FILTER(0x6, 0x2, r1, 0x9, 0x7) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) read$auto_ima_measurements_ops_ima_fs(r2, &(0x7f0000000080)=""/62, 0x3e) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x141401, 0x0) r3 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000840), r3) bind$auto(0x3, &(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x40}, 0x68) clock_adjtime$auto(0xfffffffffffffffb, 0x0) clone$auto(0x20003b46, 0x7, 0x0, 0x0, 0x2) ioctl$auto(0x3, 0xc060ff0b, r0) 2.897414105s ago: executing program 1 (id=5): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/dev_snmp6/batadv_slave_1\x00', 0x10b402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x5, 0x4, 0x1073) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x51) write$auto(0x3, 0x0, 0xfdef) read$auto(0x3, 0x0, 0x1f40) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x3, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) fcntl$auto_F_NOTIFY(r0, 0x402, 0x8) mmap$auto(0x0, 0x101, 0x8000, 0x3fa, 0x200000401, 0x1000008000) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x24, 0x5, 0x2009, 0x2, 0xffffffffffffffff) r1 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_TCFLSH2(r2, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) read$auto_proc_sessionid_operations_base(r1, &(0x7f00000000c0)=""/4073, 0xfe9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr4/statistics/tx_window_errors\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/195, 0xc3) r4 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_timedsend$auto(r4, 0x0, 0x2000, 0x2, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 2.221126752s ago: executing program 2 (id=3): mmap$auto(0x0, 0x8, 0xffffffffffffffff, 0x9b72, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)={0x1, 0x4, 0x6, 0x1, 0x7, "e72171dd9872b555facc1e8f"}) socket(0x28, 0x5, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) r3 = socket(0x15, 0x5, 0x106) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/006/001\x00', 0xa901, 0x0) ioctl$auto(r4, 0x4004550d, r4) sendfile$auto(r2, r1, 0x0, 0x7) pread64$auto(0xffffffffffffffff, 0x0, 0xb69c, 0x6) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x40, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) preadv$auto(0x3, 0x0, 0x3, 0x3, 0x10) bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000100)=@batch={0xffffffff, 0x0, 0x1, 0x9, 0x3, r3, 0x5, 0x1}, 0xb) ioctl$auto_FUSE_DEV_IOC_BACKING_CLOSE(r5, 0x4004e502, &(0x7f0000000080)) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x582, 0x0) 1.815698349s ago: executing program 2 (id=6): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000580)={0x0, 0x21, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r0, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb4, r1, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0xa, 0x3, 0x3a) socket(0xa, 0x1, 0x100) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) ioctl$auto(r3, 0xc038563c, r2) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r4, 0x2, 0x9) ioctl$auto(r4, 0x40104d00, r4) 1.760863099s ago: executing program 3 (id=4): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020008, 0x8, 0x411, 0xfffffffffffffffa, 0x9) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(&(0x7f0000000000)='/dev/loop7\x00', 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) socket(0x25, 0x6, 0x0) mmap$auto(0x0, 0x20009, 0x3, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = ioctl$auto_TIOCGPTPEER(r0, 0x5441, 0x0) mmap$auto(0xfffffffffffffffc, 0xe984, 0x4641, 0xeb1, r1, 0x7ffc) r2 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) read$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000000040)=""/1, 0x1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mkdir$auto(&(0x7f00000021c0)='./file0\x00', 0x9) utimes$auto(&(0x7f0000002340)='./file0\x00', &(0x7f0000002380)={0x7fffffffffffffff, 0x7}) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) close_range$auto(0x2, 0x8, 0x0) fremovexattr$auto(0xc8, &(0x7f00000001c0)=',%{}\x00') setgroups$auto(0xe32, 0x0) 1.55406699s ago: executing program 1 (id=7): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0x10, 0x2, 0x0) open(0x0, 0xa09c2, 0xa5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r0, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) pipe$auto(0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x110) getdents64$auto(r3, 0x0, 0x400) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) ioctl$auto(r2, 0x4028af11, r1) 1.190499839s ago: executing program 0 (id=1): mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x840, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x82, 0x4, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x11, 0x80003, 0x300) r1 = io_uring_setup$auto(0x6, 0x0) setsockopt$auto(r0, 0x107, 0x14, 0x0, 0x4) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x1a000}}, 0x22) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.max.depth\x00', 0x20681, 0x0) ioctl$auto_TUNGETDEVNETNS(r1, 0x54e3, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000100)="2d0f", 0x2) semctl$auto_SEM_INFO(0x0, 0xfffffffd, 0x13, 0x10000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/tty/ptycc/power/control\x00', 0x180, 0x0) pread64$auto(r3, 0x0, 0x5, 0x6) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim4/max_vfs\x00', 0x0, 0x0) r5 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r5, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x121241, 0x154) r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r6, &(0x7f0000000180)=""/250, 0xfa) ioctl$auto_USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) 1.039870932s ago: executing program 2 (id=8): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80002, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x88302, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r2, 0x4018bc13, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000001c40)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x4}, @MACSEC_ATTR_SA_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x500, 0x0, 0x844}, 0x20004010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ipvlan0\x00', 0x0}) r8 = gettid() tkill$auto(r8, 0x7) getuid() r9 = geteuid() r10 = getuid() sendmsg$auto_MACSEC_CMD_ADD_TXSA(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000030c0)={0x1d90, r5, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r6}, @MACSEC_ATTR_RXSC_CONFIG={0x294, 0x2, 0x0, 0x1, [@generic="6518e12d8af4e8fd6c7b30b7b3856888029efe82d6c18d0df6d0", @nested={0x1c6, 0x73, 0x0, 0x1, [@nested={0x4, 0xe8}, @nested={0x4, 0x10c}, @typed={0x4, 0x113}, @generic="83f3aab34d6901d13ca4388a9542f5a4fc5bbe8342c3ffefda3d450a3abce29e6697f6852eee977c28cdb299aad546c92f69f96bc2ca7f248460da0674d6bf0dd45b010cf44b49fdd7c72d00461af6249d8078adc3bf7615472f13d9d1e17516e21930d42321b16a729e3ff20248e20b47bad2cf510b8322b53a14f732732f034597ea5178eba598bfdc5132bd9e06bed9963107ac7d9e3c2231015b5367cd10440571d468acc2c7a4256fc335aa5fbdcfb3846ddabaa7c8827ab5ec58de784bfdb35eb6c93cdf915f2d09", @generic="7e849719dece950144d8bc1c3d765a16a0a9750502c80672e06ba64698509ae174712823c1bdfa19152216f72084b09d94f2f8840857fd2d6c827ba00cfca2b89f7426e04604efadeb93f7826e577f66136ebb7361d98de22a257f70f01707cc1d2cf58d6e35e23be2190a528183922c4bb25ffc6527b9f2795ee1f48cdc3eb9b50e2d13e6b9a125f605688b60ebeec508423e042011f49f5966108a63da01bd1156aa01245858908374d37075d8bb386c08a0e6dcb1d89cc633e35e600096209930fc", @nested={0x4, 0x53}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x4, 0x10a}, @typed={0x14, 0x102, 0x0, 0x0, @ipv6=@private2}, @nested={0x4, 0xc4}]}, @generic="7382f068765b018f19fdfa55e0ecb5e7af55951752618dd79bc111f9807981c95213676044b1beef9dfb596e13e921392ab7616a780c872c596c24ddafe2e4037283ac2105793fd2644e71d6768e9e671f8db1f15f9458e402d9d9b48650cfba78cc81dec6b911134bcb298e9fd07207edde2a759cc197a354853901d8c73322a3f732a9a116f62ee46a049efc8863d4f38f34a456949d97e35c78eda1865247ef0dac41860a1fae01019b729951"]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r7}, @MACSEC_ATTR_RXSC_CONFIG={0x5bd, 0x2, 0x0, 0x1, [@nested={0x14, 0x52, 0x0, 0x1, [@typed={0xc, 0x10f, 0x0, 0x0, @u64=0x9}, @nested={0x4, 0x5c}]}, @nested={0x10, 0x135, 0x0, 0x1, [@nested={0x4, 0x4b}, @nested={0x4, 0x36}, @generic, @nested={0x4, 0x93}]}, @generic="055cd6688e290917fec20a9d4bf9b46198d8c00a91f4b7a13f209aa38e8b645a8273b614705d4e88a143f467f755311e242c1f7f1bbb00f173167a7decc494711459af3eb02003d5983d379497883ea73e", @nested={0x27b, 0xfc, 0x0, 0x1, [@generic="903c67c28814385f1b18edab696e3af87de1d8999bab2e29d03c477f3c9a5f98785053fc4292eb17d395df175b699248e6bba49976de368f5d990d15bf6145593c6bbcaa03245812fda2594f4b3c446cf7a684f3c62deb6837b4b524600bed536d63a4648f264466dda387591687cafb6a6c8277f70d9cfb37fb272abd3a06aa01acd796b930f857d5dad2d709c5bebc67a65bfb2cdf2964ba58f42e57cbf9acb32a9d079e3d35d3b10a6d39ed529e448ec4d8552c91e1", @generic="ddb8d41de817224200684ac8f7701f2c3e01b83df713c5653349a7d9b7678ff72ab73a224c615acf1bad90f373aaefa44708b41261493d82129aabf72ebdcd455ba35de6969924b0418fe6611482153ba6cb5d695db2251d3ada0def5d5775fe2066ddb75d1b1889ef6315fc440f1283dcc3aeefd725abaea8381cdf22ec3e9bf4b875789e9aa04fef87bf7b523b98852c7e79ddc1855ba9d8d2c124259587bdd9cecec12e9167daa00b564d7b9b0d591e87d3c96716956e2a58b9f1d0bb5f982b9df04ebe248b2fea70cb337eb7911a1259345aa2efa30f79a1491749b46d644f248d54709cc0", @generic="73132774a383b77002ad3e07702b03dc9caf85c108a9941c6826ab11468b3a1ca014617b3e23e6282183c626dbd0d9f636ea3c67caeaaed6660780c0bfdead0f0188e7ef56450f224c97649f88d3cff0c3d6f38cb89339b6a41fc7719b43dee8033a2037d5cb086541a9df4afabc8801997755cc24555c406eecf5c10da890f1ef7d4cabe0164215ced40d8f3a3db60ee330b84501859a57409bb46c96bf075877cc0026c1d7d82c4d0d00dc42de95d5438245f923ff0dc085fe9451c1c36b61e6f98340ae7469423c08baab733f733cb684764bd855d95b21"]}, @nested={0x24f, 0x124, 0x0, 0x1, [@nested={0x4, 0xdc}, @generic="dc519f2fd1ba79b3df5b5fb97cc6a22a4656c7b39b61d1c06843449928075f7b5f2859a8187bef00ac6b148f9203e01563648f02aba43221157ec90231293d109877664da363282ec8d3b26692262e4112419dc2b89c24c4e8671adadaef2aeca2474a7467ee464318c925da6d2df9a9a49725cc26084363563673990a79e495cb1eb283dc8329c0028cfa25d2c991e875f86257147e6600ba2640f237cba7e5dca30acd7c371a36685f55ea460256daa7e9498d4e69a2e5f2eea95ab34fa58acd6b1d", @generic="e3a624276da99ac80fbc8ac02eeb74ad8e00c7178c1e1af2469bbb08c01fe307d039596a310de7581f74fa742c8ca1dee346759152cf6c7c1e4663cd9059afba548db29781225887609280f4e3e9f948c2223eafa474b9419e884ff6de8d0284e1b056978f43856025cb86a050ae63c7547041e6f9ddcb596db63a7ac7764e777c32742175b8ff3c2e7727b91fe405fd0c62f052c665a23c137581f9820518a58abf4df2bddb0df4a0ed8860dccd8d9be49aa801f974ba4c710fd5c7146bc0c34421ded103d6686443c00bb5f4aafe82c39e415e8d14508005", @typed={0x8, 0x90, 0x0, 0x0, @fd=r3}, @generic="8939fb9489cfb419884af8580d8e0f20884d0d91473f45f724ffa51e37f4ceb788dca13e5b617e1da9af7bfe0f8834317ba0eb37b1043095815c8f632742e350ef7682fa89b847e07be2e306951a966c4884d39b74fb902df3f96256ad446839ce65a7f4a1b389bf81fe0518d1d74c53b0aa70e3af7690c14f0c0cc0848dc9f44eed179f9026ffba77142d4eb343cd01771cb3bab24e2b42344cb455aae17090391fdb"]}, @nested={0x5f, 0x103, 0x0, 0x1, [@generic="bc06f8b25fa739bd1cfe26bf99d350f3bfb2963b22b32d1a149cb9be3b2e45ad1df6e3923b23ff326e30138035cd925eed70dc5f997383bbdff12da1e1158407f38c2429b0910a39561fa3be63ffec8df69def310e81e3a91a072a"]}, @nested={0x10, 0x6e, 0x0, 0x1, [@nested={0x4, 0x103}, @typed={0x8, 0xc2, 0x0, 0x0, @fd=r2}]}, @typed={0x8, 0xea, 0x0, 0x0, @pid=r8}]}, @MACSEC_ATTR_RXSC_CONFIG={0x60, 0x2, 0x0, 0x1, [@generic="d6853a893cd92d5e7a69ad5ab82bac28feaac914e87b84b44a7b97084f8c3404c32d720792a245c3fae97d84526b1d86b7872d1d3bbb0b91054bbb7c7c2125313b1eec42b832e72c05e90ae8fc8fe67124e827e38a4dba0c44945588"]}, @MACSEC_ATTR_SA_CONFIG={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x50}]}, @MACSEC_ATTR_RXSC_CONFIG={0x369, 0x2, 0x0, 0x1, [@nested={0x8, 0xd4, 0x0, 0x1, [@typed={0x4, 0xa3}]}, @nested={0x294, 0xfb, 0x0, 0x1, [@generic="bcf514aa19762bc20684c8df51d8a02029e752a879e04b1e8b596bfb46bc633c68c265b50c7f6284fd7359cbf1eb2d435ca7871e183a002bc8082331226354a1f92a2559d0b9dced6c6e2e6c1533a97f9f90d5f487436a114dd80239e11ea035976b747a25dfbc58eaf70469f54c63a8ad9a968cadd112312044602dce1c875868d4870cd2dc6a1006dfb9a5aa22d22ec14ae5b9bfc8aacbb961709c481e6bf722801276477a680f848ace8f5abf99123f46b4b1141ab201a04e46250dc881bf04e87f5e4f711f950bc34bdef2f99353d24eb570db05007b1f26cac3fffa18c1861913", @typed={0x9d, 0x1, 0x0, 0x0, @binary="5d4d678ca37b0f896634ce5a309b569ac57a546cc666618e98f3ba5b52f057c2fd010bcce4d99ff8d4836f565c0c1687657fc9447b902c4a80c5396917109a406d1db110629e7b2964320e9568ca91d534d97f114fd1d0fe2bf287d373dae89a4c391afe576918e8617074e898d66a930b7e673b8def76230f5b71e125d8f5430bf0458f3f3908533a03ba22fe41a4265d1f09a221261e03d1"}, @typed={0x8, 0x79, 0x0, 0x0, @ipv4=@private=0xa010101}, @typed={0xf, 0xba, 0x0, 0x0, @str='+\'}(-)}$(.\x00'}, @generic="23a93a0aab81193ec2162586ac54435aea29771231c9cfd32a84bd26d576e178aeb13d96661f785061f072930ee430f91ef173a72d6fe269daee83b4a2bbaa8297b39d3a8f2fa6f178822ff6101302838f132477f8b1782743342ba84f8e3668576f2ee7cb4d211fb2a7475908f4f44588b6bf012d7cca329054a07bb1293f3e5903fddfd74e26bafe6d0a4881f27ea80ac95ea46d3c183132bd9e447eda8d0fcf674891da330add38", @typed={0x43, 0x103, 0x0, 0x0, @binary="c90c866a3e9d1548fd6fb60c6bf70521f8b17095aeb47c7f879a1f7204ebbfce2e1937402411110d6b7589f22e6e64638d4da36cbeccc73f4e7c12f5de454d"}, @nested={0x4, 0x4a}, @nested={0x4}]}, @typed={0x14, 0xef, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x3c, 0x8d, 0x0, 0x1, [@nested={0x4, 0x83}, @nested={0x4, 0x14a}, @typed={0x8, 0x9a, 0x0, 0x0, @uid=r9}, @nested={0x4, 0x101}, @generic="8dc2fd7023dfba80e91da897ffdce861", @typed={0xc, 0x98, 0x0, 0x0, @u64=0xfffffffffffff366}, @typed={0x8, 0x13e, 0x0, 0x0, @uid=r10}]}, @generic="e98eea1e756d750492f207861a00f9a3af42352e971ca36e9a7b2ef335f8b56beae06758756908d5a9204d12a477d8d1dcf53081fd8e33448f171ed295df9280bbe43c38d0155ed42e143aedaa9b13040a1b214c533f2c1a7b2ad3c82b17f36667", @nested={0x4, 0x12}, @nested={0xc, 0x28, 0x0, 0x1, [@nested={0x4, 0x6a}, @nested={0x4, 0xdc}]}, @typed={0x8, 0xc1, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @MACSEC_ATTR_RXSC_CONFIG={0x72, 0x2, 0x0, 0x1, [@generic="78b15649ba58b8b3f86e8431606ff1920ffc73bfc5e420e7374fac5d4b5ba08cff3e44ba8e566d43ce82229b630fdcb3f6a0ea0dd59d143da486ca6560b1d273a634ca8e28bb21efff5d440a9a26dfbddbf8aafd99f131a600e1ceec39bb88c98f3ed1da997e8aae1f1d5f01149b"]}, @MACSEC_ATTR_RXSC_CONFIG={0x10c8, 0x2, 0x0, 0x1, [@nested={0x10, 0xbb, 0x0, 0x1, [@typed={0xc, 0x14, 0x0, 0x0, @u64=0x100}]}, @nested={0x10b3, 0x5e, 0x0, 0x1, [@generic="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", @generic="0c76607be75f3fbb885d758760de6cb1b7d53a2e", @generic="289861661c981dae7d2752a3d6af9a27d5c649180b9e7abd070f54f0a7a8c3b4629bb11740cf42610dae7f1d48216a8d8b9386d57127b52b1036125dc7de10ee32dc48ae3da8d31896431665bd851c626ca3a683765bd12b5e5f1f67a597e165ddafdd69df5cc292923a9b817b19d2398ffcb478bbeb8f3e7990f2129f2abf7d0b9324c10501dc863cf57893892af5", @nested={0x4, 0x60}, @nested={0x4, 0xc4}, @nested={0x4, 0xe9}]}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x1d90}, 0x1, 0x0, 0x0, 0x80}, 0x2000c000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYRES64=r0], 0x24}, 0x1, 0x0, 0x0, 0x4004055}, 0x0) 703.451585ms ago: executing program 3 (id=9): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x0, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x48880, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) read$auto_snd_ctl_f_ops_control(r0, &(0x7f0000000140)=""/155, 0x9b) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x80) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xfc2}, 0x3, 0x0, 0x4000000000407, 0xa505}, 0x800}, 0x3, 0x4008) r1 = socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x20009, 0x4000000002df, 0xeb1, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) inotify_init1$auto(0x3000000000000) socketpair$auto(0x0, 0xc, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r4) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r5, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80106f53, r6) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001d40), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001d80)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4004040) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, r7, 0xd00, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x8}, @NL802154_ATTR_SEC_LEVEL={0x36, 0x2d, 0x0, 0x1, [@typed={0x8, 0x140, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}}, @typed={0x4, 0x82}, @generic="1cd553df511d9f96f5adddec0ef930bdb5cbdf9652199eaf739244385a48ceab568252440942"]}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x22004844}, 0x8001) 460.903957ms ago: executing program 2 (id=10): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) signalfd4$auto(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x1, 0xffffffe0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) socket(0xa, 0x2, 0x3a) mmap$auto(0x4, 0x9, 0x10, 0x80000010, 0xffffffffffffffff, 0x10000) r0 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0) fsconfig$auto(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='+\x00', &(0x7f0000000280), 0x0) close_range$auto(r0, 0xffffffffffffffff, 0x6) socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/smps\x00', 0x22001, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r1, 0x0, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r2 = clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x3, 0x2, 0x8000, 0xffffffffffffffff, 0x7, 0x3, 0xffffffffffffffea, 0x8, 0x200}, 0x7) ptrace$auto_PTRACE_GETSIGMASK(0x420a, r2, 0x6e3, 0x1) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2200, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) 440.312148ms ago: executing program 1 (id=11): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000) io_uring_setup$auto(0x85, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40000a, 0xdf, 0x11, 0xffffffffffffffff, 0xfb) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0xb6d, 0x1, 0xfffffffffffffffe, 0x13, 0xfffffffffffffffa, 0x41) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) getcwd$auto(0x0, 0x8000000000000000) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x40146f2c, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000003, 0xfffb, r0, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYRES64, @ANYRESDEC=r3, @ANYRES32=r3, @ANYRES32=0x9, @ANYBLOB="0800070004000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) bpf$auto(0xd, 0x0, 0x6f5) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101402, 0x0) mprotect$auto(0x0, 0x806121, 0x6) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8401, 0x0) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.0/usb1/power/autosuspend_delay_ms\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)='-', 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) 0s ago: executing program 0 (id=12): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) statmount$auto(0x0, 0x0, 0x1fa, 0x8) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) read$auto(r0, 0x0, 0x6) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyq4\x00', 0x208400, 0x0) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) r3 = io_uring_setup$auto(0x101, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x4, 0x8000000000000000, 0x0) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(r3, 0x7ac, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x403c6f2b, 0x0) ioctl$auto(0x3, 0x6f29, 0x10000000000402) futex$auto(0x0, 0xfffffc51, 0x10000086, 0x0, 0x0, 0x8) sysinfo$auto(0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x4, 0x0, 0x9, 0x4, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.96' (ED25519) to the list of known hosts. [ 98.574655][ T5836] cgroup: Unknown subsys name 'net' [ 98.714816][ T5836] cgroup: Unknown subsys name 'cpuset' [ 98.724101][ T5836] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 100.621763][ T5836] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.402072][ T982] cfg80211: failed to load regulatory.db [ 103.218972][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.258561][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.267308][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.275348][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.284078][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.287032][ T5860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.292463][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.307291][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.312450][ T5860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.316102][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.329608][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.329671][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.340291][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.353291][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.360747][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.362348][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.369643][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.383286][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.400778][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.408712][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.947815][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 104.185906][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 104.209598][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 104.292851][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 104.318958][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.326366][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.333969][ T5850] bridge_slave_0: entered allmulticast mode [ 104.342333][ T5850] bridge_slave_0: entered promiscuous mode [ 104.386368][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.393682][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.401409][ T5850] bridge_slave_1: entered allmulticast mode [ 104.409081][ T5850] bridge_slave_1: entered promiscuous mode [ 104.543688][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.582591][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.590498][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.597731][ T5849] bridge_slave_0: entered allmulticast mode [ 104.605299][ T5849] bridge_slave_0: entered promiscuous mode [ 104.612702][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.620460][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.627699][ T5848] bridge_slave_0: entered allmulticast mode [ 104.636903][ T5848] bridge_slave_0: entered promiscuous mode [ 104.647664][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.687873][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.695610][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.703393][ T5849] bridge_slave_1: entered allmulticast mode [ 104.711304][ T5849] bridge_slave_1: entered promiscuous mode [ 104.718758][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.726015][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.733576][ T5848] bridge_slave_1: entered allmulticast mode [ 104.741245][ T5848] bridge_slave_1: entered promiscuous mode [ 104.788506][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.798392][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.805716][ T5847] bridge_slave_0: entered allmulticast mode [ 104.815485][ T5847] bridge_slave_0: entered promiscuous mode [ 104.853212][ T5850] team0: Port device team_slave_0 added [ 104.859733][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.867855][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.876171][ T5847] bridge_slave_1: entered allmulticast mode [ 104.884394][ T5847] bridge_slave_1: entered promiscuous mode [ 104.907800][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.919719][ T5850] team0: Port device team_slave_1 added [ 104.958607][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.972688][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.985534][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.045425][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.099582][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.126205][ T5849] team0: Port device team_slave_0 added [ 105.136388][ T5848] team0: Port device team_slave_0 added [ 105.144012][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.151126][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.177427][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.209577][ T5849] team0: Port device team_slave_1 added [ 105.217993][ T5848] team0: Port device team_slave_1 added [ 105.225056][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.232172][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.258206][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.324104][ T5847] team0: Port device team_slave_0 added [ 105.359735][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.366882][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.393862][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.407095][ T5847] team0: Port device team_slave_1 added [ 105.431167][ T5854] Bluetooth: hci3: command tx timeout [ 105.431172][ T5859] Bluetooth: hci0: command tx timeout [ 105.431489][ T5854] Bluetooth: hci1: command tx timeout [ 105.437861][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.455036][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.481599][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.495401][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.502566][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.528653][ T5854] Bluetooth: hci2: command tx timeout [ 105.534229][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.546789][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.553895][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.580044][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.654726][ T5850] hsr_slave_0: entered promiscuous mode [ 105.661850][ T5850] hsr_slave_1: entered promiscuous mode [ 105.673234][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.680677][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.707515][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.720920][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.727919][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.754089][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.842570][ T5849] hsr_slave_0: entered promiscuous mode [ 105.849079][ T5849] hsr_slave_1: entered promiscuous mode [ 105.855885][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 105.861801][ T5849] Cannot create hsr debugfs directory [ 105.926007][ T5848] hsr_slave_0: entered promiscuous mode [ 105.932646][ T5848] hsr_slave_1: entered promiscuous mode [ 105.938973][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 105.946144][ T5848] Cannot create hsr debugfs directory [ 105.993613][ T5847] hsr_slave_0: entered promiscuous mode [ 106.000752][ T5847] hsr_slave_1: entered promiscuous mode [ 106.007109][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 106.013027][ T5847] Cannot create hsr debugfs directory [ 106.509843][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.524072][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.535300][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.558044][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.633374][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.644705][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.656563][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.668203][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.767276][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.779299][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.818803][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.834889][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.956088][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.987142][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.998176][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.012597][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.035158][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.132358][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.145193][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.171306][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.193110][ T4436] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.200552][ T4436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.233600][ T4436] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.240785][ T4436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.252724][ T4436] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.259983][ T4436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.269440][ T4436] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.276681][ T4436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.357266][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.447675][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.486787][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.494075][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.510334][ T5860] Bluetooth: hci3: command tx timeout [ 107.512567][ T5859] Bluetooth: hci1: command tx timeout [ 107.515958][ T5854] Bluetooth: hci0: command tx timeout [ 107.564556][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.571849][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.591514][ T5854] Bluetooth: hci2: command tx timeout [ 107.665925][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.794628][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.847283][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.854592][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.899443][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.906727][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.072913][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.237235][ T5849] veth0_vlan: entered promiscuous mode [ 108.277195][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.309144][ T5849] veth1_vlan: entered promiscuous mode [ 108.384765][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.407346][ T5849] veth0_macvtap: entered promiscuous mode [ 108.445904][ T5849] veth1_macvtap: entered promiscuous mode [ 108.532680][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.544066][ T5850] veth0_vlan: entered promiscuous mode [ 108.570363][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.598262][ T5849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.611772][ T5849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.621223][ T5849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.630772][ T5849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.649718][ T5850] veth1_vlan: entered promiscuous mode [ 108.677910][ T5848] veth0_vlan: entered promiscuous mode [ 108.714202][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.743105][ T5848] veth1_vlan: entered promiscuous mode [ 108.847741][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.857508][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.889350][ T5850] veth0_macvtap: entered promiscuous mode [ 108.929949][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.942112][ T5850] veth1_macvtap: entered promiscuous mode [ 108.951050][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.976062][ T5848] veth0_macvtap: entered promiscuous mode [ 109.002009][ T5847] veth0_vlan: entered promiscuous mode [ 109.055283][ T5848] veth1_macvtap: entered promiscuous mode [ 109.068847][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.087882][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 109.108022][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.120838][ T5847] veth1_vlan: entered promiscuous mode [ 109.148416][ T5850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.158797][ T5850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.170659][ T5850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.179496][ T5850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.208398][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.258766][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.319473][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.337706][ T5848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.347792][ T5848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.364311][ T5848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.391825][ T5847] veth0_macvtap: entered promiscuous mode [ 109.438357][ T5847] veth1_macvtap: entered promiscuous mode [ 109.557399][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.566890][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.585978][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.592131][ T5854] Bluetooth: hci1: command tx timeout [ 109.598858][ T5859] Bluetooth: hci0: command tx timeout [ 109.602322][ T5860] Bluetooth: hci3: command tx timeout [ 109.646480][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.670821][ T5859] Bluetooth: hci2: command tx timeout [ 109.710464][ T5847] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.719421][ T5847] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.729663][ T5847] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.739235][ T5847] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.765352][ T4436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.797328][ T4436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.939236][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.973839][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.213193][ T4436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.226472][ T4436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.471991][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.504756][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.674949][ T5953] Unable to find swap-space signature [ 110.708298][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.756603][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.968687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 111.064303][ T5951] syz.2.6 (5951) used greatest stack depth: 19784 bytes left [ 111.400157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.408548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.669947][ T5859] Bluetooth: hci0: command tx timeout [ 111.670497][ T5854] Bluetooth: hci1: command tx timeout [ 111.675418][ T5859] Bluetooth: hci3: command tx timeout [ 111.750879][ T5859] Bluetooth: hci2: command tx timeout [ 112.292154][ T5989] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 112.661466][ T5995] FAULT_INJECTION: forcing a failure. [ 112.661466][ T5995] name failslab, interval 1, probability 0, space 0, times 1 [ 112.705105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.715492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #248!!! [ 112.794414][ T5995] CPU: 1 UID: 0 PID: 5995 Comm: syz.0.12 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 112.794462][ T5995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.794487][ T5995] Call Trace: [ 112.794498][ T5995] [ 112.794515][ T5995] dump_stack_lvl+0x16c/0x1f0 [ 112.794568][ T5995] should_fail_ex+0x512/0x640 [ 112.794621][ T5995] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 112.794658][ T5995] should_failslab+0xc2/0x120 [ 112.794699][ T5995] __kmalloc_cache_noprof+0x6a/0x3e0 [ 112.794732][ T5995] ? trace_kmalloc+0x2b/0xd0 [ 112.794773][ T5995] ? vidtv_psi_pmt_table_init+0x4c/0x430 [ 112.794831][ T5995] vidtv_psi_pmt_table_init+0x4c/0x430 [ 112.794887][ T5995] vidtv_psi_pmt_create_sec_for_each_pat_entry+0x293/0x670 [ 112.794956][ T5995] vidtv_channel_si_init+0x1073/0x1a50 [ 112.795006][ T5995] vidtv_mux_init+0x526/0xbe0 [ 112.795048][ T5995] vidtv_start_feed+0x33e/0x4d0 [ 112.795094][ T5995] ? __pfx_vidtv_start_feed+0x10/0x10 [ 112.795155][ T5995] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 112.795226][ T5995] dmx_section_feed_start_filtering+0x3a8/0x660 [ 112.795280][ T5995] dvb_dmxdev_filter_start+0x785/0xe10 [ 112.795327][ T5995] dvb_demux_do_ioctl+0xa63/0x12f0 [ 112.795364][ T5995] ? do_vfs_ioctl+0x128/0x14f0 [ 112.795419][ T5995] dvb_usercopy+0x164/0x340 [ 112.795466][ T5995] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 112.795501][ T5995] ? __pfx_dvb_usercopy+0x10/0x10 [ 112.795568][ T5995] ? __fget_files+0x20e/0x3c0 [ 112.795610][ T5995] dvb_demux_ioctl+0x29/0x40 [ 112.795659][ T5995] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 112.795709][ T5995] __x64_sys_ioctl+0x18b/0x210 [ 112.795763][ T5995] do_syscall_64+0xcd/0x490 [ 112.795811][ T5995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.795845][ T5995] RIP: 0033:0x7ff150f8e9a9 [ 112.795879][ T5995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.795912][ T5995] RSP: 002b:00007ff151dc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.795944][ T5995] RAX: ffffffffffffffda RBX: 00007ff1511b5fa0 RCX: 00007ff150f8e9a9 [ 112.795965][ T5995] RDX: 0010000000000402 RSI: 0000000000006f29 RDI: 0000000000000003 [ 112.795984][ T5995] RBP: 00007ff151010d69 R08: 0000000000000000 R09: 0000000000000000 [ 112.796004][ T5995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.796022][ T5995] R13: 0000000000000000 R14: 00007ff1511b5fa0 R15: 00007ffec6478c18 [ 112.796076][ T5995] [ 112.796355][ T5995] ================================================================== [ 113.049311][ T5995] BUG: KASAN: slab-use-after-free in vidtv_psi_eit_event_destroy+0xe9/0x100 [ 113.058039][ T5995] Read of size 8 at addr ffff888035b30a94 by task syz.0.12/5995 [ 113.065770][ T5995] [ 113.068121][ T5995] CPU: 1 UID: 0 PID: 5995 Comm: syz.0.12 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 113.068157][ T5995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.068174][ T5995] Call Trace: [ 113.068185][ T5995] [ 113.068196][ T5995] dump_stack_lvl+0x116/0x1f0 [ 113.068236][ T5995] print_report+0xcd/0x630 [ 113.068270][ T5995] ? __virt_addr_valid+0x81/0x610 [ 113.068302][ T5995] ? __phys_addr+0xe8/0x180 [ 113.068336][ T5995] ? vidtv_psi_eit_event_destroy+0xe9/0x100 [ 113.068363][ T5995] kasan_report+0xe0/0x110 [ 113.068397][ T5995] ? vidtv_psi_eit_event_destroy+0xe9/0x100 [ 113.068429][ T5995] vidtv_psi_eit_event_destroy+0xe9/0x100 [ 113.068456][ T5995] vidtv_channel_si_init+0x15cd/0x1a50 [ 113.068490][ T5995] vidtv_mux_init+0x526/0xbe0 [ 113.068520][ T5995] vidtv_start_feed+0x33e/0x4d0 [ 113.068556][ T5995] ? __pfx_vidtv_start_feed+0x10/0x10 [ 113.068593][ T5995] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 113.068640][ T5995] dmx_section_feed_start_filtering+0x3a8/0x660 [ 113.068678][ T5995] dvb_dmxdev_filter_start+0x785/0xe10 [ 113.068709][ T5995] dvb_demux_do_ioctl+0xa63/0x12f0 [ 113.068736][ T5995] ? do_vfs_ioctl+0x128/0x14f0 [ 113.068778][ T5995] dvb_usercopy+0x164/0x340 [ 113.068817][ T5995] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 113.068844][ T5995] ? __pfx_dvb_usercopy+0x10/0x10 [ 113.068896][ T5995] ? __fget_files+0x20e/0x3c0 [ 113.068926][ T5995] dvb_demux_ioctl+0x29/0x40 [ 113.068966][ T5995] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 113.069008][ T5995] __x64_sys_ioctl+0x18b/0x210 [ 113.069049][ T5995] do_syscall_64+0xcd/0x490 [ 113.069092][ T5995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.069121][ T5995] RIP: 0033:0x7ff150f8e9a9 [ 113.069143][ T5995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.069170][ T5995] RSP: 002b:00007ff151dc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.069195][ T5995] RAX: ffffffffffffffda RBX: 00007ff1511b5fa0 RCX: 00007ff150f8e9a9 [ 113.069213][ T5995] RDX: 0010000000000402 RSI: 0000000000006f29 RDI: 0000000000000003 [ 113.069229][ T5995] RBP: 00007ff151010d69 R08: 0000000000000000 R09: 0000000000000000 [ 113.069246][ T5995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.069261][ T5995] R13: 0000000000000000 R14: 00007ff1511b5fa0 R15: 00007ffec6478c18 [ 113.069287][ T5995] [ 113.069296][ T5995] [ 113.308709][ T5995] Allocated by task 5995: [ 113.313065][ T5995] kasan_save_stack+0x33/0x60 [ 113.317780][ T5995] kasan_save_track+0x14/0x30 [ 113.322517][ T5995] __kasan_kmalloc+0xaa/0xb0 [ 113.327146][ T5995] vidtv_psi_eit_event_init+0xe0/0x3f0 [ 113.332637][ T5995] vidtv_channel_si_init+0x897/0x1a50 [ 113.338050][ T5995] vidtv_mux_init+0x526/0xbe0 [ 113.342760][ T5995] vidtv_start_feed+0x33e/0x4d0 [ 113.347652][ T5995] dmx_section_feed_start_filtering+0x3a8/0x660 [ 113.353937][ T5995] dvb_dmxdev_filter_start+0x785/0xe10 [ 113.359428][ T5995] dvb_demux_do_ioctl+0xa63/0x12f0 [ 113.364572][ T5995] dvb_usercopy+0x164/0x340 [ 113.369116][ T5995] dvb_demux_ioctl+0x29/0x40 [ 113.373785][ T5995] __x64_sys_ioctl+0x18b/0x210 [ 113.378594][ T5995] do_syscall_64+0xcd/0x490 [ 113.383169][ T5995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.389092][ T5995] [ 113.391435][ T5995] Freed by task 5995: [ 113.395432][ T5995] kasan_save_stack+0x33/0x60 [ 113.400140][ T5995] kasan_save_track+0x14/0x30 [ 113.404849][ T5995] kasan_save_free_info+0x3b/0x60 [ 113.409933][ T5995] __kasan_slab_free+0x51/0x70 [ 113.414731][ T5995] kfree+0x2b4/0x4d0 [ 113.418668][ T5995] vidtv_psi_eit_table_destroy+0x133/0x180 [ 113.424504][ T5995] vidtv_channel_si_init+0x163d/0x1a50 [ 113.429996][ T5995] vidtv_mux_init+0x526/0xbe0 [ 113.434755][ T5995] vidtv_start_feed+0x33e/0x4d0 [ 113.439642][ T5995] dmx_section_feed_start_filtering+0x3a8/0x660 [ 113.445917][ T5995] dvb_dmxdev_filter_start+0x785/0xe10 [ 113.451409][ T5995] dvb_demux_do_ioctl+0xa63/0x12f0 [ 113.456550][ T5995] dvb_usercopy+0x164/0x340 [ 113.461098][ T5995] dvb_demux_ioctl+0x29/0x40 [ 113.465731][ T5995] __x64_sys_ioctl+0x18b/0x210 [ 113.470538][ T5995] do_syscall_64+0xcd/0x490 [ 113.475088][ T5995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.481009][ T5995] [ 113.483355][ T5995] The buggy address belongs to the object at ffff888035b30a80 [ 113.483355][ T5995] which belongs to the cache kmalloc-32 of size 32 [ 113.497259][ T5995] The buggy address is located 20 bytes inside of [ 113.497259][ T5995] freed 32-byte region [ffff888035b30a80, ffff888035b30aa0) [ 113.510918][ T5995] [ 113.513258][ T5995] The buggy address belongs to the physical page: [ 113.519707][ T5995] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35b30 [ 113.528500][ T5995] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 113.535648][ T5995] page_type: f5(slab) [ 113.539746][ T5995] raw: 00fff00000000000 ffff88801b841780 ffffea0000ca29c0 0000000000000004 [ 113.548368][ T5995] raw: 0000000000000000 0000000000400040 00000000f5000000 0000000000000000 [ 113.556972][ T5995] page dumped because: kasan: bad access detected [ 113.563425][ T5995] page_owner tracks the page as allocated [ 113.569246][ T5995] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP), pid 5715, tgid 5715 (sed), ts 83459584972, free_ts 67576788156 [ 113.586651][ T5995] post_alloc_hook+0x1c0/0x230 [ 113.591445][ T5995] get_page_from_freelist+0x1321/0x3890 [ 113.597029][ T5995] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 113.602955][ T5995] alloc_pages_mpol+0x1fb/0x550 [ 113.607883][ T5995] new_slab+0x23b/0x330 [ 113.612067][ T5995] ___slab_alloc+0xd9c/0x1940 [ 113.616770][ T5995] __slab_alloc.constprop.0+0x56/0xb0 [ 113.622166][ T5995] __kmalloc_cache_noprof+0xfb/0x3e0 [ 113.627476][ T5995] kmem_cache_free+0x142/0x4d0 [ 113.632271][ T5995] vms_complete_munmap_vmas+0x573/0x970 [ 113.637851][ T5995] do_vmi_align_munmap+0x43b/0x7d0 [ 113.642995][ T5995] do_vmi_munmap+0x204/0x3e0 [ 113.647617][ T5995] __vm_munmap+0x19a/0x390 [ 113.652067][ T5995] elf_load+0x349/0x780 [ 113.656252][ T5995] load_elf_binary+0x1409/0x4fb0 [ 113.661219][ T5995] bprm_execve+0x8c3/0x1650 [ 113.665747][ T5995] page last free pid 5513 tgid 5513 stack trace: [ 113.672091][ T5995] __free_frozen_pages+0x7fe/0x1180 [ 113.677339][ T5995] __put_partials+0x16d/0x1c0 [ 113.682043][ T5995] qlist_free_all+0x4d/0x120 [ 113.686660][ T5995] kasan_quarantine_reduce+0x195/0x1e0 [ 113.692148][ T5995] __kasan_slab_alloc+0x69/0x90 [ 113.697047][ T5995] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 113.702977][ T5995] __alloc_skb+0x2b2/0x380 [ 113.707438][ T5995] alloc_skb_with_frags+0xe0/0x860 [ 113.712679][ T5995] sock_alloc_send_pskb+0x7fb/0x990 [ 113.717936][ T5995] unix_dgram_sendmsg+0x3e9/0x17d0 [ 113.723111][ T5995] unix_seqpacket_sendmsg+0x12a/0x1c0 [ 113.728517][ T5995] sock_write_iter+0x4fc/0x5b0 [ 113.733317][ T5995] do_iter_readv_writev+0x654/0x950 [ 113.738557][ T5995] vfs_writev+0x35f/0xde0 [ 113.742934][ T5995] do_writev+0x28c/0x340 [ 113.747227][ T5995] do_syscall_64+0xcd/0x490 [ 113.751801][ T5995] [ 113.754154][ T5995] Memory state around the buggy address: [ 113.759820][ T5995] ffff888035b30980: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 113.767928][ T5995] ffff888035b30a00: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 113.776025][ T5995] >ffff888035b30a80: fa fb fb fb fc fc fc fc 00 00 00 fc fc fc fc fc [ 113.784110][ T5995] ^ [ 113.788725][ T5995] ffff888035b30b00: 00 00 00 fc fc fc fc fc 00 00 00 05 fc fc fc fc [ 113.796807][ T5995] ffff888035b30b80: 00 00 05 fc fc fc fc fc 00 00 00 fc fc fc fc fc [ 113.804886][ T5995] ================================================================== [ 113.871375][ T5995] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 113.878658][ T5995] CPU: 0 UID: 0 PID: 5995 Comm: syz.0.12 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 113.890185][ T5995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.902218][ T5995] Call Trace: [ 113.905543][ T5995] [ 113.908518][ T5995] dump_stack_lvl+0x3d/0x1f0 [ 113.913182][ T5995] panic+0x71c/0x800 [ 113.917157][ T5995] ? __pfx_panic+0x10/0x10 [ 113.921650][ T5995] ? mark_held_locks+0x49/0x80 [ 113.926485][ T5995] ? preempt_schedule_thunk+0x16/0x30 [ 113.931931][ T5995] ? vidtv_psi_eit_event_destroy+0xe9/0x100 [ 113.937923][ T5995] ? preempt_schedule_common+0x44/0xc0 [ 113.943468][ T5995] ? vidtv_psi_eit_event_destroy+0xe9/0x100 [ 113.949420][ T5995] check_panic_on_warn+0xab/0xb0 [ 113.954448][ T5995] end_report+0x107/0x170 [ 113.958838][ T5995] kasan_report+0xee/0x110 [ 113.963322][ T5995] ? vidtv_psi_eit_event_destroy+0xe9/0x100 [ 113.969340][ T5995] vidtv_psi_eit_event_destroy+0xe9/0x100 [ 113.975164][ T5995] vidtv_channel_si_init+0x15cd/0x1a50 [ 113.980690][ T5995] vidtv_mux_init+0x526/0xbe0 [ 113.985419][ T5995] vidtv_start_feed+0x33e/0x4d0 [ 113.990334][ T5995] ? __pfx_vidtv_start_feed+0x10/0x10 [ 113.995776][ T5995] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 114.002433][ T5995] dmx_section_feed_start_filtering+0x3a8/0x660 [ 114.008743][ T5995] dvb_dmxdev_filter_start+0x785/0xe10 [ 114.014256][ T5995] dvb_demux_do_ioctl+0xa63/0x12f0 [ 114.019416][ T5995] ? do_vfs_ioctl+0x128/0x14f0 [ 114.024232][ T5995] dvb_usercopy+0x164/0x340 [ 114.028788][ T5995] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 114.034371][ T5995] ? __pfx_dvb_usercopy+0x10/0x10 [ 114.039454][ T5995] ? __fget_files+0x20e/0x3c0 [ 114.044267][ T5995] dvb_demux_ioctl+0x29/0x40 [ 114.048905][ T5995] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 114.054246][ T5995] __x64_sys_ioctl+0x18b/0x210 [ 114.059596][ T5995] do_syscall_64+0xcd/0x490 [ 114.064149][ T5995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.070082][ T5995] RIP: 0033:0x7ff150f8e9a9 [ 114.074536][ T5995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.094188][ T5995] RSP: 002b:00007ff151dc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.102643][ T5995] RAX: ffffffffffffffda RBX: 00007ff1511b5fa0 RCX: 00007ff150f8e9a9 [ 114.110649][ T5995] RDX: 0010000000000402 RSI: 0000000000006f29 RDI: 0000000000000003 [ 114.118649][ T5995] RBP: 00007ff151010d69 R08: 0000000000000000 R09: 0000000000000000 [ 114.126644][ T5995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.134731][ T5995] R13: 0000000000000000 R14: 00007ff1511b5fa0 R15: 00007ffec6478c18 [ 114.142832][ T5995] [ 114.146033][ T5995] Kernel Offset: disabled [ 114.150372][ T5995] Rebooting in 86400 seconds..