last executing test programs: 13.979875806s ago: executing program 1 (id=84): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) madvise$auto(0x100000, 0xfffffffffffffffe, 0x15) r0 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0) lseek$auto(r0, 0x0, 0x3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/lapb2/statistics/rx_compressed\x00', 0x401, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x863e, 0xffffffffffff0005, 0x4) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x200007, 0x8) unshare$auto(0x40000080) r1 = syz_clone3(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/conf/nlmon0/addr_gen_mode\x00', 0xa02, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x1a, 0x0, 0xfffffffffffffffc, 0x5}, 0x6}, 0x1, 0x401) open$dir(&(0x7f0000000040)='./file0\x00', 0x101, 0x140) r2 = socket(0xa, 0x5, 0x84) sendto$auto(r2, 0x0, 0x401, 0x6358c0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe800000ffffffff"}, 0x1c) r3 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000000500)={0x400, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280), {0x29}, 0x0, 0x0, &(0x7f00000003c0)=""/193, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0x0], 0x5}, 0x58) sendmsg$auto_NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000007a40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44018}, 0x4000004) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000340), 0x98002, 0x0) 10.409038157s ago: executing program 3 (id=88): timer_create$auto_CLOCK_TAI(0xb, &(0x7f0000000f80)={@sival_int=0xfffffff9, @inferred=0xffffffffffffffff, 0x80007, @_sigev_thread={&(0x7f00000000c0)=&(0x7f0000000080), &(0x7f00000002c0)="d786ecbf4105985ddacfec99ea3e4c443af606745444525c09bdde1e2d5d81dfbf9b0e2db62ecff4f8900bf8d6e9f1fd855d1b11444131962139f196aa5b3e36cd38f9b260a3ad004e99e1459374f1db7770ae4d9f"}}, &(0x7f0000000fc0)=0x7ff) mmap$auto(0x4, 0x4020004, 0xdc, 0x16, 0x401, 0x8000) unshare$auto(0x40000080) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = eventfd$auto(0x8c) r2 = socket(0x25, 0x2, 0x7) r3 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x4, &(0x7f0000000000), 0x1) ioctl$auto(r0, 0x100, r3) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000280)=""/40, 0x28) madvise$auto(0x0, 0x6, 0x9) madvise$auto(0xfffffffffffffffd, 0xffffffffffff0401, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0xffffffffffffffff, 0x8001, 0xdf, 0x9b72, r1, 0xfffffffffffffffd) madvise$auto(0x1, 0x40, 0x5) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x4a841, 0x0) sendmmsg$auto(r2, 0x0, 0xeffffffd, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x4, 0x9, 0x0, 0x400000000009, 0x7) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mq_notify$auto(0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r4 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x88681, 0x0) write$auto(r4, 0x0, 0x1e1) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(r2, 0xfffffffb, 0x9, 0x0, 0x5) 9.741050456s ago: executing program 1 (id=89): mmap$auto(0x0, 0xe985, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_11={0x1, 0x6, 0x6, 0x7, 0x1bb080, 0x97, 0xff, r0}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x7, &(0x7f0000000180)={@siginfo_0_0={0x0, 0x9c2a, 0xffffffff, @_sigsys={0x0, 0x5d35, 0x6}}}) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4840}, 0x8041) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) sendmsg$auto_NL80211_CMD_NEW_STATION(r2, 0x0, 0x1) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x2000, 0x0) socket(0x2, 0x5, 0x4000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) r4 = io_uring_setup$auto(0x1, 0x0) write$auto_fops_init_pkru_pkeys(r4, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0x3, r3, 0x0, 0x100400000000006) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01e82bbd7000fddbdd250100000004f70a8008000200000e0000080003007d295b0004000500080001000f000000"], 0x34}, 0x1, 0x9eff, 0x0, 0x44040}, 0xc0) 9.487078859s ago: executing program 2 (id=90): msgctl$auto_MSG_STAT(0x3, 0xb, &(0x7f00000002c0)={{0x0, 0xee00, 0xee00, 0xd, 0x3, 0x200}, 0x0, 0x0, 0xfffffffffffffff9, 0x7, 0x8, 0x5, 0xd, 0xbb84, 0x5, 0xfde, @inferred, @raw=0x3}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000013c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00B', @ANYRES16=r1, @ANYBLOB="01002abd7f00fddbdf250d00000008000300", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="340002800800010006000000080003000000000008000100ff07000008000300000000000800010007000000080001"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 9.452230991s ago: executing program 3 (id=91): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) madvise$auto(0x100000, 0xfffffffffffffffe, 0x15) r0 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0) lseek$auto(r0, 0x0, 0x3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/lapb2/statistics/rx_compressed\x00', 0x401, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x863e, 0xffffffffffff0005, 0x4) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x200007, 0x8) unshare$auto(0x40000080) r1 = syz_clone3(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/conf/nlmon0/addr_gen_mode\x00', 0xa02, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x1a, 0x0, 0xfffffffffffffffc, 0x5}, 0x6}, 0x1, 0x401) open$dir(&(0x7f0000000040)='./file0\x00', 0x101, 0x140) r2 = socket(0xa, 0x5, 0x84) sendto$auto(r2, 0x0, 0x401, 0x6358c0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r3 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000000500)={0x400, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280), {0x29}, 0x0, 0x0, &(0x7f00000003c0)=""/193, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0x0], 0x5}, 0x58) sendmsg$auto_NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000007a40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44018}, 0x4000004) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000340), 0x98002, 0x0) 9.431278154s ago: executing program 2 (id=92): mmap$auto(0x0, 0xe985, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_11={0x1, 0x6, 0x6, 0x7, 0x1bb080, 0x97, 0xff, r0}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x7, &(0x7f0000000180)={@siginfo_0_0={0x0, 0x9c2a, 0xffffffff, @_sigsys={0x0, 0x5d35, 0x6}}}) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4840}, 0x8041) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) sendmsg$auto_NL80211_CMD_NEW_STATION(r2, 0x0, 0x1) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x2000, 0x0) socket(0x2, 0x5, 0x4000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) r4 = io_uring_setup$auto(0x1, 0x0) write$auto_fops_init_pkru_pkeys(r4, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0x3, r3, 0x0, 0x100400000000006) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01e82bbd7000fddbdd250100000004f70a8008000200000e0000080003007d295b0004000500080001000f000000"], 0x34}, 0x1, 0xf0ff, 0x0, 0x44040}, 0xc0) 8.194947113s ago: executing program 1 (id=94): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) madvise$auto(0x100000, 0xfffffffffffffffe, 0x15) r0 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0) lseek$auto(r0, 0x0, 0x3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/lapb2/statistics/rx_compressed\x00', 0x401, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x863e, 0xffffffffffff0005, 0x4) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x200007, 0x8) unshare$auto(0x40000080) r1 = syz_clone3(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/conf/nlmon0/addr_gen_mode\x00', 0xa02, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x1a, 0x0, 0xfffffffffffffffc, 0x5}, 0x6}, 0x1, 0x401) open$dir(&(0x7f0000000040)='./file0\x00', 0x101, 0x140) r2 = socket(0xa, 0x5, 0x84) sendto$auto(r2, 0x0, 0x401, 0x6358c0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000000080fe00"}, 0x1c) r3 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000000500)={0x400, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280), {0x29}, 0x0, 0x0, &(0x7f00000003c0)=""/193, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0x0], 0x5}, 0x58) sendmsg$auto_NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000007a40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44018}, 0x4000004) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000340), 0x98002, 0x0) 7.953934497s ago: executing program 0 (id=95): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) timer_create$auto(0x7, &(0x7f0000000000)={@sival_ptr=0x0, @inferred=0xffffffffffffffff, 0x1, @_tid=0xffffffffffffffff}, &(0x7f0000000040)=0x200) timer_settime$auto(0x0, 0x3b4, &(0x7f0000000040)={{0x0, 0xd3}, {0x200001005, 0x6}}, &(0x7f0000000140)={{0x6, 0x4}, {0x8, 0x800007ff}}) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x80802, 0x0) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) capset$auto(0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x17, 0x0, 0x28) setsockopt$auto(0x3, 0x0, 0x17, 0x0, 0x28) r2 = socket(0x2b, 0x1, 0x0) r3 = timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x4d7) ioctl$auto_VHOST_GET_FEATURES2(r3, 0x8008af00, &(0x7f0000000000)=0x7f) ioctl$auto_IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f00000000c0)={0x9, 0x9, 0x9, 0x2}) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00H', @ANYRES16=0x0, @ANYBLOB="00082bbd7000fedbdf25090000000600090083eb00000800270009000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000010) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000180), r0) r5 = setfsuid$auto(0xee00) r6 = setfsuid$auto(0xee01) setresuid$auto(r5, r6, r5) setuid$auto(r5) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYRESDEC=r0], 0x1c}}, 0x80) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) recvmmsg$auto(0x3, 0x0, 0x10000000, 0x9, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x58) mmap$auto(0x800, 0x4000040009, 0xe2, 0x9b72, 0x7, 0x28000) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) write$auto(0x3, 0x0, 0xfdef) 7.814166134s ago: executing program 2 (id=96): mmap$auto(0x0, 0xe985, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_11={0x1, 0x6, 0x6, 0x7, 0x1bb080, 0x97, 0xff, r0}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x7, &(0x7f0000000180)={@siginfo_0_0={0x0, 0x9c2a, 0xffffffff, @_sigsys={0x0, 0x5d35, 0x6}}}) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4840}, 0x8041) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) sendmsg$auto_NL80211_CMD_NEW_STATION(r2, 0x0, 0x1) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x2000, 0x0) socket(0x2, 0x5, 0x4000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) r4 = io_uring_setup$auto(0x1, 0x0) write$auto_fops_init_pkru_pkeys(r4, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0x3, r3, 0x0, 0x100400000000006) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01e82bbd7000fddbdd250100000004f70a8008000200000e0000080003007d295b0004000500080001000f000000"], 0x34}, 0x1, 0x0, 0x3000000000000, 0x44040}, 0xc0) 7.292994266s ago: executing program 0 (id=97): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x52, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x29}, 0x20100007}, 0x3, 0xffff0300) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r0, 0x0, 0x39b8) 6.568422869s ago: executing program 2 (id=98): openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/modalias\x00', 0x80000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) select$auto(0xd, 0x0, &(0x7f0000000400)={[0x8, 0x200000000005, 0x7, 0x7, 0x0, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x3, 0xfffffffffffff954, 0xfffffffffffffff8, 0xfff]}, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x2020009, 0x4, 0x17, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x4604, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20461, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(0x0, 0x0, 0x64) getdents64$auto(0xffffffffffffffff, 0x0, 0x40002) lseek$auto(r1, 0x7ff, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) pidfd_open$auto(0x1, 0x0) socket(0x2, 0x1, 0x0) setsockopt$auto(0x4, 0x0, 0x484, 0xfffffffffffffffe, 0x20) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) 6.350680327s ago: executing program 3 (id=99): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r0 = socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, 0x0, 0x0) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = wait4$auto(0x0, &(0x7f00000000c0)=0x2, 0x5b80, &(0x7f0000000380)={{0x8, 0x4}, {0xfffffffffffffffb, 0x100000001}, 0xac6d, 0x0, 0x1, 0x3, 0x2, 0x0, 0x2, 0x4cd, 0x86, 0x9, 0x3, 0x4, 0x4, 0x100}) prctl$auto_SIGCONT(0xfffffffd, 0x12, r2, 0x2, 0xfffffffffffff428) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8802, 0x0) socket(0x28, 0x1, 0x0) mmap$auto(0xa9f788d, 0xffffffff, 0x3fff7fffff, 0x80eb1, r0, 0x7) writev$auto(0x3, 0x0, 0x8) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x10005, 0x0, 0xd, 0x0) socket(0x10, 0x2, 0x6) 5.694463313s ago: executing program 0 (id=100): r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_regulator_summary_fops_(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x3, 0x0, 0x100000000) sendmsg$auto_MACSEC_CMD_GET_TXSC(r1, 0x0, 0x40080c4) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x1e30c2, 0x0) r2 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) ioctl$auto_UBI_IOCATT(r2, 0x40186f40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) r3 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x4, 0x0, 0x2, 0x0) r5 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy6/aql_enable\x00', 0x2481, 0x0) pwrite64$auto(r5, 0x0, 0x3, 0x4200000000000005) uname$auto(&(0x7f0000000000)={"94cc9722afb522a98e858030365ed92ab89306efe384a20d71e300cb1c508bc870a9a4b84e7f1ca41f999a6379237082d6768f980d3f33de4646a8f1ebeeca15bf", "38e383904ea86c9933e9d7e064b0550600000000000000a0fbed58ef6fb19193d70e497c6d2f046d4eb5af7300", "f97ade924a06a62e97c4aeb7a67a2296cdf8b7bbd381d911ccf3fe97481a08be5f5e6983e31c98d834fa81d0e696e41c1a6a00", "7f4d1cd3d8873504031be24207e98792374255ae55b488e067810cd4d18379ac432e2f868bfda64b5c62baaa5c905c996d4ea95b70567c215e1cf3706874b815de", "02479756de75addea4dd0ce6b31411ef92f3d201417055935ee51d552f7f4c86bdaac10b56dcdc45b2f999b3d9ac039d2f2947ed62cbc65c73b6d5b10432ebc979", "b54f83a0546668487dd19a0e2b69cc7d72570fd5b450322ed8ca16b1aa8f6bc38c26b78c7997f9f3f0697ea521051a7c40b88f8d873858402f0be3d6c84174efab"}) keyctl$auto(0x2, 0xffffeffffffffffe, 0x107, 0x803, 0x800000000000c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="01002cbd7000fbdbdf2503000000040001800c000180080003800400c080"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) 4.239065643s ago: executing program 0 (id=101): close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/midi2\x00', 0x103341, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/net/dummy0/netdev_group\x00', 0x82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r0, 0x4068aea3, &(0x7f0000000040)={0xd5}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000005bc0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000005c80)={0x0, 0x0, &(0x7f0000005c40)={&(0x7f0000005c00)={0x20, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 4.186484703s ago: executing program 1 (id=102): bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x5, 0xfffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_NOTIFY(0xffffffffffffffff, 0x402, 0x9000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) fsopen$auto(0x0, 0x1) shutdown$auto(0x200000003, 0x2) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi22\x00', 0x100, 0x0) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) faccessat$auto(r3, &(0x7f0000000080)='./file1\x00', 0x80000001) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) rseq$auto(0x0, 0x8000, 0x0, 0x6) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) io_uring_setup$auto(0x2, 0x0) 4.149401453s ago: executing program 3 (id=103): mmap$auto(0x0, 0xe985, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_11={0x1, 0x6, 0x6, 0x7, 0x1bb080, 0x97, 0xff, r0}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x7, &(0x7f0000000180)={@siginfo_0_0={0x0, 0x9c2a, 0xffffffff, @_sigsys={0x0, 0x5d35, 0x6}}}) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4840}, 0x8041) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) sendmsg$auto_NL80211_CMD_NEW_STATION(r2, 0x0, 0x1) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x2000, 0x0) socket(0x2, 0x5, 0x4000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) r4 = io_uring_setup$auto(0x1, 0x0) write$auto_fops_init_pkru_pkeys(r4, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0x3, r3, 0x0, 0x100400000000006) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01e82bbd7000fddbdd250100000004f70a8008000200000e0000080003007d295b0004000500080001000f000000"], 0x34}, 0x1, 0xfff0, 0x0, 0x44040}, 0xc0) 3.899245978s ago: executing program 0 (id=104): ioctl$auto(0x4000000000000c8, 0x401054d6, 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x4002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) msgsnd$auto(0x0, &(0x7f0000000040)={0x40000007fc, 0x7}, 0x4000400, 0x1) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r0, 0x804c4700, 0x0) close$auto(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0)="4a67d23edb317545d9bc8745d18a5956210d2de48302", 0x49}, 0x5, &(0x7f0000000400), 0x5, 0x1000}}, 0x1, 0x100) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r4, 0x8000) madvise$auto(0x0, 0x400052, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000180)={0x6, "c9682225990a380e959a4adc9c510df4675c322e8f9d42754dc41d1b6d3d1baf", @inferred=r3}) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="94210000", @ANYRES16=r2, @ANYBLOB="000228bd7000fddbdf2507000000060001000002000006000100000800000800040003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040015}, 0x4000010) 3.264599234s ago: executing program 2 (id=105): socket(0x18, 0x3, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e) flock$auto(r0, 0x6) r1 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) io_uring_setup$auto(0x386, &(0x7f0000000000)={0x5, 0x1, 0x4c, 0x0, 0x1, 0x8, 0xffffffffffffffff, [0x10001, 0x8, 0xa], {0x8, 0x8, 0x3fc000, 0x4, 0xffffff7a, 0x3, 0x9, 0xec5, 0xffff}, {0xd5, 0x80000000, 0x1bee, 0x5d, 0x400, 0x9, 0x7, 0x8000, 0x7f}}) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x100) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00\x00\x00\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00', 0x9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/thread-self/net/stat/rt_cache\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r4, &(0x7f00000002c0)=""/266, 0x10a) mmap$auto(0x5, 0x2020009, 0xb, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setregid$auto(0x0, 0xffffffffffffffff) flock$auto(r1, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) 2.782482663s ago: executing program 3 (id=106): mmap$auto(0x0, 0xe985, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_11={0x1, 0x6, 0x6, 0x7, 0x1bb080, 0x97, 0xff, r0}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x7, &(0x7f0000000180)={@siginfo_0_0={0x0, 0x9c2a, 0xffffffff, @_sigsys={0x0, 0x5d35, 0x6}}}) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4840}, 0x8041) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) sendmsg$auto_NL80211_CMD_NEW_STATION(r2, 0x0, 0x1) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x2000, 0x0) socket(0x2, 0x5, 0x4000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) r4 = io_uring_setup$auto(0x1, 0x0) write$auto_fops_init_pkru_pkeys(r4, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0x3, r3, 0x0, 0x100400000000006) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01e82bbd7000fddbdd250100000004f70a8008000200000e0000080003007d295b0004000500080001000f000000"], 0x34}, 0x1, 0x0, 0x100000000000000, 0x44040}, 0xc0) 2.477550384s ago: executing program 0 (id=107): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) madvise$auto(0x100000, 0xfffffffffffffffe, 0x15) r0 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0) lseek$auto(r0, 0x0, 0x3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/lapb2/statistics/rx_compressed\x00', 0x401, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x863e, 0xffffffffffff0005, 0x4) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x200007, 0x8) unshare$auto(0x40000080) r1 = syz_clone3(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/conf/nlmon0/addr_gen_mode\x00', 0xa02, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x1a, 0x0, 0xfffffffffffffffc, 0x5}, 0x6}, 0x1, 0x401) open$dir(&(0x7f0000000040)='./file0\x00', 0x101, 0x140) r2 = socket(0xa, 0x5, 0x84) sendto$auto(r2, 0x0, 0x401, 0x6358c0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe800000f5ffffff"}, 0x1c) r3 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000000500)={0x400, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280), {0x29}, 0x0, 0x0, &(0x7f00000003c0)=""/193, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0x0], 0x5}, 0x58) sendmsg$auto_NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000007a40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44018}, 0x4000004) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000340), 0x98002, 0x0) 1.309905199s ago: executing program 1 (id=108): mmap$auto(0x0, 0xe985, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_11={0x1, 0x6, 0x6, 0x7, 0x1bb080, 0x97, 0xff, r0}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x7, &(0x7f0000000180)={@siginfo_0_0={0x0, 0x9c2a, 0xffffffff, @_sigsys={0x0, 0x5d35, 0x6}}}) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4840}, 0x8041) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) sendmsg$auto_NL80211_CMD_NEW_STATION(r2, 0x0, 0x1) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x2000, 0x0) socket(0x2, 0x5, 0x4000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) r4 = io_uring_setup$auto(0x1, 0x0) write$auto_fops_init_pkru_pkeys(r4, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0x3, r3, 0x0, 0x100400000000006) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01e82bbd7000fddbdd250100000004f70a8008000200000e0000080003007d295b0004000500080001000f000000"], 0x34}, 0x1, 0x30000, 0x0, 0x44040}, 0xc0) 1.21170046s ago: executing program 3 (id=109): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) unshare$auto(0x400) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0xffff}, 0x5, 0x20000043) sendmsg$auto_ILA_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x24008810) mmap$auto(0x1c1, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon40\x00', 0x40000, 0x0) ioctl$auto_MON_IOCH_MFLUSH(r1, 0x9208, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20010}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf4, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x4}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MPATH_NEXT_HOP={0xc3, 0x1a, "891379662d59702d0d61a5379450e7a46adb14be649062991d6589c0ebe074a168ee5f53b3cda95bff8f15efcd40a8b4ac5154d5e4132685d8d67328584af84790aed832222ff40841ecd76d592511b2ff551a4c9789f88fb134e57769e19af5796061504f100199c3ace289164e755f8c1c0e871df73bdc4b78eec460b0a642c41126f29c3c93d6b7b2f086ba6c2c62bb9627c3929e040d87e0dc19cb1c5899151e9ce63d5bb6acf31faaa0cb765fdbe0c8d54376279848793ae8c3e02a3a"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x7}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x9}]}, 0xf4}, 0x1, 0x0, 0x0, 0x11}, 0x0) pipe$auto(0x0) unshare$auto(0x40000080) semctl$auto(0x2, 0x5, 0x13, 0x9) 1.000821348s ago: executing program 2 (id=110): socket(0x18, 0x3, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e) flock$auto(r0, 0x6) r1 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) io_uring_setup$auto(0x386, &(0x7f0000000000)={0x5, 0x1, 0x4c, 0x0, 0x1, 0x8, 0xffffffffffffffff, [0x10001, 0x8, 0xa], {0x8, 0x8, 0x3fc000, 0x4, 0xffffff7a, 0x3, 0x9, 0xec5, 0xffff}, {0xd5, 0x80000000, 0x1bee, 0x5d, 0x400, 0x9, 0x7, 0x8000, 0x7f}}) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x100) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00\x00\x00\x00\x00\x00?\x00\x00\x00\x00\x00\x00', 0x9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/thread-self/net/stat/rt_cache\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r4, &(0x7f00000002c0)=""/266, 0x10a) mmap$auto(0x5, 0x2020009, 0xb, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setregid$auto(0x0, 0xffffffffffffffff) flock$auto(r1, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) 0s ago: executing program 1 (id=111): socket(0x18, 0x3, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e) flock$auto(r0, 0x6) r1 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) io_uring_setup$auto(0x386, &(0x7f0000000000)={0x5, 0x1, 0x4c, 0x0, 0x1, 0x8, 0xffffffffffffffff, [0x10001, 0x8, 0xa], {0x8, 0x8, 0x3fc000, 0x4, 0xffffff7a, 0x3, 0x9, 0xec5, 0xffff}, {0xd5, 0x80000000, 0x1bee, 0x5d, 0x400, 0x9, 0x7, 0x8000, 0x7f}}) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x100) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00\x00\x00\x00\x00\xff\xfe\x00\x00\x00\x00\x00\x00', 0x9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/thread-self/net/stat/rt_cache\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r4, &(0x7f00000002c0)=""/266, 0x10a) mmap$auto(0x5, 0x2020009, 0xb, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setregid$auto(0x0, 0xffffffffffffffff) flock$auto(r1, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.22' (ED25519) to the list of known hosts. [ 88.113965][ T5614] cgroup: Unknown subsys name 'net' [ 88.207604][ T5614] cgroup: Unknown subsys name 'cpuset' [ 88.217618][ T5614] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.025196][ T5614] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.066877][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.076591][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.086191][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.100096][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.111996][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.118691][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.123088][ T5640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.128918][ T5641] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.140506][ T5640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.147505][ T5641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.150145][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.163023][ T5641] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.166713][ T5640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.174812][ T5641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.184850][ T5640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.188854][ T5641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.194037][ T5640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.208591][ T5641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.211496][ T5640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.225650][ T5641] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.010067][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.017608][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.026496][ T5628] bridge_slave_0: entered allmulticast mode [ 94.034353][ T5628] bridge_slave_0: entered promiscuous mode [ 94.077532][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.085072][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.092324][ T5628] bridge_slave_1: entered allmulticast mode [ 94.101089][ T5628] bridge_slave_1: entered promiscuous mode [ 94.119119][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.126491][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.136273][ T5625] bridge_slave_0: entered allmulticast mode [ 94.144307][ T5625] bridge_slave_0: entered promiscuous mode [ 94.152238][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.159490][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.167205][ T5626] bridge_slave_0: entered allmulticast mode [ 94.174706][ T5626] bridge_slave_0: entered promiscuous mode [ 94.202366][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.210232][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.218194][ T5625] bridge_slave_1: entered allmulticast mode [ 94.226411][ T5625] bridge_slave_1: entered promiscuous mode [ 94.244994][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.252186][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.259989][ T5626] bridge_slave_1: entered allmulticast mode [ 94.268152][ T5626] bridge_slave_1: entered promiscuous mode [ 94.284290][ T5630] Bluetooth: hci2: command tx timeout [ 94.293739][ T5640] Bluetooth: hci3: command tx timeout [ 94.293990][ T5641] Bluetooth: hci0: command tx timeout [ 94.300076][ T5630] Bluetooth: hci1: command tx timeout [ 94.351129][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.394039][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.406804][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.419154][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.428495][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.435893][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.443874][ T5627] bridge_slave_0: entered allmulticast mode [ 94.451271][ T5627] bridge_slave_0: entered promiscuous mode [ 94.461280][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.474105][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.497942][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.505151][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.512415][ T5627] bridge_slave_1: entered allmulticast mode [ 94.519984][ T5627] bridge_slave_1: entered promiscuous mode [ 94.562485][ T5628] team0: Port device team_slave_0 added [ 94.605475][ T5628] team0: Port device team_slave_1 added [ 94.624289][ T5625] team0: Port device team_slave_0 added [ 94.632116][ T5626] team0: Port device team_slave_0 added [ 94.651802][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.663911][ T5625] team0: Port device team_slave_1 added [ 94.671516][ T5626] team0: Port device team_slave_1 added [ 94.690400][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.722610][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.729793][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.755840][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.772096][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.779534][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.806058][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.875242][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.882283][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.908559][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.920708][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.928079][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.954045][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.966716][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.973787][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.000012][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.013196][ T5627] team0: Port device team_slave_0 added [ 95.019959][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.027000][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.053183][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.085335][ T5627] team0: Port device team_slave_1 added [ 95.117644][ T5628] hsr_slave_0: entered promiscuous mode [ 95.125111][ T5628] hsr_slave_1: entered promiscuous mode [ 95.197807][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.205027][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.231140][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.272110][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.279274][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.305437][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.322540][ T5625] hsr_slave_0: entered promiscuous mode [ 95.329259][ T5625] hsr_slave_1: entered promiscuous mode [ 95.335672][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 95.341479][ T5625] Cannot create hsr debugfs directory [ 95.365901][ T5626] hsr_slave_0: entered promiscuous mode [ 95.372470][ T5626] hsr_slave_1: entered promiscuous mode [ 95.378882][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 95.384697][ T5626] Cannot create hsr debugfs directory [ 95.563821][ T5627] hsr_slave_0: entered promiscuous mode [ 95.570431][ T5627] hsr_slave_1: entered promiscuous mode [ 95.577168][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 95.582943][ T5627] Cannot create hsr debugfs directory [ 95.966178][ T5628] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.981482][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.989903][ T5628] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.002396][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.019034][ T5628] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.030068][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.050138][ T5628] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.061171][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.140318][ T5625] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.154196][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.163005][ T5625] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.176143][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.192812][ T5625] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.204592][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.212753][ T5625] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.225959][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.325500][ T5626] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.341997][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.359392][ T5626] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.366977][ T5630] Bluetooth: hci1: command tx timeout [ 96.369823][ T5641] Bluetooth: hci2: command tx timeout [ 96.375977][ T5640] Bluetooth: hci3: command tx timeout [ 96.383731][ T5630] Bluetooth: hci0: command tx timeout [ 96.392726][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.404255][ T5626] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.415150][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.439378][ T5626] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.450901][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.538718][ T5627] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.548900][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.557575][ T5627] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.569623][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.578087][ T5627] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.588115][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.596909][ T5627] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.607177][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.629863][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.723790][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.769102][ T3352] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.776651][ T3352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.794205][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.816767][ T3352] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.824008][ T3352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.889097][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.911336][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.935208][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.942403][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.967419][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.974577][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.007262][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.035052][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.052076][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.087890][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.095134][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.114835][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.122067][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.156565][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.163820][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.190971][ T1583] cfg80211: failed to load regulatory.db [ 97.207532][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.214850][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.121398][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.261164][ T5628] veth0_vlan: entered promiscuous mode [ 98.329120][ T5628] veth1_vlan: entered promiscuous mode [ 98.430424][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.445666][ T5640] Bluetooth: hci0: command tx timeout [ 98.447494][ T5641] Bluetooth: hci3: command tx timeout [ 98.451161][ T5633] Bluetooth: hci1: command tx timeout [ 98.462814][ T5630] Bluetooth: hci2: command tx timeout [ 98.489797][ T5628] veth0_macvtap: entered promiscuous mode [ 98.532281][ T5628] veth1_macvtap: entered promiscuous mode [ 98.574516][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.610975][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.631029][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.657834][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.675235][ T5625] veth0_vlan: entered promiscuous mode [ 98.700686][ T147] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.711540][ T147] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.721792][ T147] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.744601][ T147] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.779484][ T5625] veth1_vlan: entered promiscuous mode [ 98.851337][ T5626] veth0_vlan: entered promiscuous mode [ 98.894053][ T5627] veth0_vlan: entered promiscuous mode [ 98.919150][ T5626] veth1_vlan: entered promiscuous mode [ 98.960751][ T5625] veth0_macvtap: entered promiscuous mode [ 98.970462][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.985626][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.997033][ T5627] veth1_vlan: entered promiscuous mode [ 99.018872][ T5625] veth1_macvtap: entered promiscuous mode [ 99.073087][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.082077][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.090745][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.114772][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.150988][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.160261][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.186619][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.198900][ T5626] veth0_macvtap: entered promiscuous mode [ 99.211867][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.237888][ T5628] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.238118][ T5626] veth1_macvtap: entered promiscuous mode [ 99.268054][ T5627] veth0_macvtap: entered promiscuous mode [ 99.284520][ T5627] veth1_macvtap: entered promiscuous mode [ 99.304293][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.369375][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.428589][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.438355][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.456511][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.472310][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.511732][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.525816][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.590513][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.605840][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.627415][ T3352] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.636505][ T3352] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.670642][ T3352] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.680932][ T3352] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.774732][ T3352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.792159][ T3352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.028881][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.053237][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.101991][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.120800][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.342788][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.342838][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.522388][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.532583][ T5633] Bluetooth: hci1: command tx timeout [ 100.539143][ T5630] Bluetooth: hci2: command tx timeout [ 100.543998][ T5633] Bluetooth: hci0: command tx timeout [ 100.544846][ T5630] Bluetooth: hci3: command tx timeout [ 100.558294][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.002868][ T5800] FAULT_INJECTION: forcing a failure. [ 101.002868][ T5800] name failslab, interval 1, probability 0, space 0, times 1 [ 101.017428][ T5800] CPU: 1 UID: 0 PID: 5800 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 101.017486][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 101.017519][ T5800] Call Trace: [ 101.017528][ T5800] [ 101.017538][ T5800] dump_stack_lvl+0x100/0x190 [ 101.017579][ T5800] should_fail_ex.cold+0x5/0xa [ 101.017615][ T5800] should_failslab+0xc2/0x120 [ 101.017648][ T5800] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 101.017693][ T5800] ? security_file_alloc+0x34/0x2c0 [ 101.017726][ T5800] ? trace_kmem_cache_alloc+0xd5/0x100 [ 101.017765][ T5800] security_file_alloc+0x34/0x2c0 [ 101.017798][ T5800] init_file+0x95/0x480 [ 101.017843][ T5800] alloc_empty_file+0x79/0x1c0 [ 101.017904][ T5800] path_openat+0xe8/0x31a0 [ 101.017938][ T5800] ? kasan_save_stack+0x3f/0x50 [ 101.017965][ T5800] ? kasan_save_stack+0x30/0x50 [ 101.017991][ T5800] ? kasan_save_track+0x14/0x30 [ 101.018018][ T5800] ? __kasan_slab_alloc+0x89/0x90 [ 101.018046][ T5800] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 101.018096][ T5800] ? do_getname+0x35/0x390 [ 101.018155][ T5800] ? do_sys_openat2+0xc5/0x1e0 [ 101.018199][ T5800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.018233][ T5800] ? __pfx_path_openat+0x10/0x10 [ 101.018282][ T5800] do_file_open+0x20e/0x430 [ 101.018322][ T5800] ? __pfx_do_file_open+0x10/0x10 [ 101.018381][ T5800] ? alloc_fd+0x476/0x790 [ 101.018419][ T5800] ? do_getname+0x191/0x390 [ 101.018464][ T5800] do_sys_openat2+0x10d/0x1e0 [ 101.018510][ T5800] ? __pfx_do_sys_openat2+0x10/0x10 [ 101.018566][ T5800] ? __sys_sendmsg+0x18f/0x220 [ 101.018605][ T5800] __x64_sys_openat+0x12d/0x210 [ 101.018652][ T5800] ? __pfx___x64_sys_openat+0x10/0x10 [ 101.018704][ T5800] ? rcu_is_watching+0x12/0xc0 [ 101.018743][ T5800] do_syscall_64+0x10b/0xf80 [ 101.018783][ T5800] ? clear_bhb_loop+0x40/0x90 [ 101.018818][ T5800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.018848][ T5800] RIP: 0033:0x7f3561f9cdd9 [ 101.018878][ T5800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.018906][ T5800] RSP: 002b:00007f3562f07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 101.018938][ T5800] RAX: ffffffffffffffda RBX: 00007f3562215fa0 RCX: 00007f3561f9cdd9 [ 101.018957][ T5800] RDX: 1a6b75d638828712 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 101.018976][ T5800] RBP: 00007f3562032d69 R08: 0000000000000000 R09: 0000000000000000 [ 101.018992][ T5800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.019008][ T5800] R13: 00007f3562216038 R14: 00007f3562215fa0 R15: 00007fffeca25958 [ 101.019043][ T5800] [ 102.055072][ T5809] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7'. [ 104.463872][ T5804] Zero length message leads to an empty skb [ 105.054749][ T5845] random: crng reseeded on system resumption [ 105.194778][ T5847] Unrecognized hibernate image header format! [ 105.194815][ T5847] PM: hibernation: Image mismatch: architecture specific data [ 109.030239][ T5894] netlink: 330 bytes leftover after parsing attributes in process `syz.3.20'. [ 113.297472][ T5970] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 113.768009][ T5970] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 113.850247][ T5970] pci 0000:00:01.3: PCI INT A: no GSI [ 117.009608][ T6039] netlink: 330 bytes leftover after parsing attributes in process `syz.3.42'. [ 117.092741][ T6041] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 117.123183][ T6039] mac80211_hwsim hwsim6 : renamed from wlan0 (while UP) [ 117.161527][ T29] audit: type=1800 audit(1778166803.519:2): pid=6041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.42" name="trace_pipe" dev="tracefs" ino=3816 res=0 errno=0 [ 117.790538][ T6052] FAULT_INJECTION: forcing a failure. [ 117.790538][ T6052] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 117.835306][ T6052] CPU: 1 UID: 0 PID: 6052 Comm: syz.3.44 Not tainted syzkaller #0 PREEMPT(full) [ 117.835351][ T6052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 117.835370][ T6052] Call Trace: [ 117.835381][ T6052] [ 117.835401][ T6052] dump_stack_lvl+0x100/0x190 [ 117.835460][ T6052] should_fail_ex.cold+0x5/0xa [ 117.835495][ T6052] ? prepare_alloc_pages+0x16d/0x5f0 [ 117.835542][ T6052] should_fail_alloc_page+0xeb/0x140 [ 117.835584][ T6052] prepare_alloc_pages+0x1f0/0x5f0 [ 117.835634][ T6052] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 117.835690][ T6052] ? __tracing_resize_ring_buffer.part.0+0x52/0x1f0 [ 117.835736][ T6052] ? event_pid_write.isra.0+0xf8/0x7d0 [ 117.835785][ T6052] ? vfs_write+0x2aa/0x1070 [ 117.835821][ T6052] ? ksys_write+0x12a/0x250 [ 117.835856][ T6052] ? do_syscall_64+0x10b/0xf80 [ 117.835904][ T6052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.835955][ T6052] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 117.836032][ T6052] ? rcu_is_watching+0x12/0xc0 [ 117.836067][ T6052] ? trace_kmalloc+0xe3/0x110 [ 117.836105][ T6052] ? __kasan_kmalloc+0xaa/0xb0 [ 117.836146][ T6052] __alloc_pages_noprof+0xb/0x110 [ 117.836202][ T6052] alloc_cpu_data+0x60/0x130 [ 117.836239][ T6052] __rb_allocate_pages+0xbd5/0x10a0 [ 117.836293][ T6052] ring_buffer_resize+0x6df/0x1e80 [ 117.836345][ T6052] ? __pfx_update_last_data+0x10/0x10 [ 117.836382][ T6052] __tracing_resize_ring_buffer.part.0+0x52/0x1f0 [ 117.836467][ T6052] tracing_update_buffers+0xd4/0xf0 [ 117.836509][ T6052] event_pid_write.isra.0+0xf8/0x7d0 [ 117.836564][ T6052] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 117.836627][ T6052] vfs_write+0x2aa/0x1070 [ 117.836667][ T6052] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 117.836722][ T6052] ? __pfx_vfs_write+0x10/0x10 [ 117.836778][ T6052] ? __fget_files+0x215/0x3d0 [ 117.836825][ T6052] ? __fget_files+0x21f/0x3d0 [ 117.836874][ T6052] ksys_write+0x12a/0x250 [ 117.836911][ T6052] ? __pfx_ksys_write+0x10/0x10 [ 117.836954][ T6052] ? rcu_is_watching+0x12/0xc0 [ 117.837001][ T6052] do_syscall_64+0x10b/0xf80 [ 117.837045][ T6052] ? clear_bhb_loop+0x40/0x90 [ 117.837087][ T6052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.837122][ T6052] RIP: 0033:0x7f3561f9cdd9 [ 117.837159][ T6052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.837197][ T6052] RSP: 002b:00007f3562ee6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 117.837230][ T6052] RAX: ffffffffffffffda RBX: 00007f3562216090 RCX: 00007f3561f9cdd9 [ 117.837252][ T6052] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 117.837272][ T6052] RBP: 00007f3562032d69 R08: 0000000000000000 R09: 0000000000000000 [ 117.837292][ T6052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.837312][ T6052] R13: 00007f3562216128 R14: 00007f3562216090 R15: 00007fffeca25958 [ 117.837358][ T6052] [ 118.169324][ T6052] __vm_enough_memory: pid: 6052, comm: syz.3.44, bytes: 4398046457856 not enough memory for the allocation [ 121.185005][ T6092] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 122.026538][ T6092] kernel profiling enabled (shift: 0) [ 128.541517][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.60'. [ 132.412279][ T6198] openvswitch: netlink: Flow key attribute not present in set flow. [ 133.009110][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.017805][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.688345][ T6216] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 134.189173][ T6218] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 134.222456][ T6218] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 134.455957][ T6218] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 134.567093][ T6218] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 134.624141][ T6218] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 134.779259][ T6218] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 134.881639][ T6218] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 134.942963][ T6218] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 134.988997][ T6218] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 135.053094][ T6218] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 135.075173][ T6235] netlink: zone id is out of range [ 135.075192][ T6235] netlink: zone id is out of range [ 135.075204][ T6235] netlink: zone id is out of range [ 135.075215][ T6235] netlink: zone id is out of range [ 135.075227][ T6235] netlink: zone id is out of range [ 135.075239][ T6235] netlink: zone id is out of range [ 135.075250][ T6235] netlink: zone id is out of range [ 135.075262][ T6235] netlink: zone id is out of range [ 135.075274][ T6235] netlink: zone id is out of range [ 135.082633][ T6218] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 135.125419][ T6218] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 135.964000][ T5630] Bluetooth: hci0: command 0x0c1a tx timeout [ 136.603411][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout [ 136.923617][ T5630] Bluetooth: hci3: command 0x0c1a tx timeout [ 137.083904][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.044328][ T5630] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.683500][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout [ 139.003906][ T5630] Bluetooth: hci3: command 0x0c1a tx timeout [ 139.163715][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout [ 140.123618][ T5630] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.763433][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout [ 141.084668][ T5630] Bluetooth: hci3: command 0x0c1a tx timeout [ 141.243873][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.141748][ T6308] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 144.222438][ T6301] &#$@\]\-: entered promiscuous mode [ 144.573120][ T6300] ima: policy update failed [ 144.581971][ T29] audit: type=1802 audit(1778166830.939:3): pid=6300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.87" res=0 errno=0 [ 148.777004][ T6366] ubi0: attaching mtd0 [ 148.807134][ T6366] ubi0: scanning is finished [ 148.817938][ T6366] ubi0: empty MTD device detected [ 149.201113][ T6366] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 149.293453][ T6366] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 149.321293][ T6366] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 149.359079][ T6366] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 149.381771][ T6366] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 149.390298][ T6366] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 149.399938][ T6366] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2788912410 [ 149.413740][ T6366] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 149.431984][ T6371] ubi0: background thread "ubi_bgt0d" started, PID 6371 [ 154.324098][ T6422] ================================================================== [ 154.324119][ T6422] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x174a/0x1910 [ 154.324178][ T6422] Write of size 8 at addr ffffc90004a01000 by task syz.1.111/6422 [ 154.324204][ T6422] [ 154.324217][ T6422] CPU: 0 UID: 0 PID: 6422 Comm: syz.1.111 Not tainted syzkaller #0 PREEMPT(full) [ 154.324266][ T6422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 154.324286][ T6422] Call Trace: [ 154.324297][ T6422] [ 154.324310][ T6422] dump_stack_lvl+0x100/0x190 [ 154.324349][ T6422] print_report+0x13d/0x4b0 [ 154.324395][ T6422] ? _raw_spin_lock_irqsave+0x52/0x60 [ 154.324439][ T6422] ? sys_fillrect+0x174a/0x1910 [ 154.324487][ T6422] kasan_report+0xdf/0x1d0 [ 154.324526][ T6422] ? sys_fillrect+0x174a/0x1910 [ 154.324577][ T6422] sys_fillrect+0x174a/0x1910 [ 154.324632][ T6422] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 154.324671][ T6422] bit_clear+0x17d/0x220 [ 154.324710][ T6422] ? __pfx_bit_clear+0x10/0x10 [ 154.324750][ T6422] ? fb_get_color_depth+0x120/0x250 [ 154.324805][ T6422] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 154.324860][ T6422] __fbcon_clear+0x633/0x760 [ 154.324896][ T6422] ? __pfx_bit_clear+0x10/0x10 [ 154.324938][ T6422] fbcon_scroll+0x314/0x650 [ 154.324977][ T6422] con_scroll+0x464/0x690 [ 154.325073][ T6422] csi_ECMA.constprop.0+0xc57/0x3b60 [ 154.325131][ T6422] ? find_held_lock+0x2b/0x80 [ 154.325176][ T6422] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 154.325239][ T6422] do_con_write+0x3946/0x4a10 [ 154.325289][ T6422] ? trace_contention_end+0x122/0x170 [ 154.325337][ T6422] ? __pfx_do_con_write+0x10/0x10 [ 154.325402][ T6422] con_write+0x23/0xb0 [ 154.325455][ T6422] n_tty_write+0x431/0x11c0 [ 154.325498][ T6422] ? __pfx_n_tty_write+0x10/0x10 [ 154.325535][ T6422] ? trace_kmalloc+0xe3/0x110 [ 154.325569][ T6422] ? __pfx_woken_wake_function+0x10/0x10 [ 154.325607][ T6422] ? rcu_is_watching+0x12/0xc0 [ 154.325642][ T6422] ? file_tty_write.isra.0+0x694/0x890 [ 154.325686][ T6422] ? kfree+0x1dd/0x6c0 [ 154.325726][ T6422] ? __pfx_n_tty_write+0x10/0x10 [ 154.325759][ T6422] file_tty_write.isra.0+0x4d2/0x890 [ 154.325809][ T6422] redirected_tty_write+0xd4/0x120 [ 154.325854][ T6422] vfs_write+0x6ac/0x1070 [ 154.325888][ T6422] ? __pfx_redirected_tty_write+0x10/0x10 [ 154.325940][ T6422] ? __pfx_vfs_write+0x10/0x10 [ 154.325977][ T6422] ? find_held_lock+0x2b/0x80 [ 154.326044][ T6422] ksys_write+0x12a/0x250 [ 154.326083][ T6422] ? __pfx_ksys_write+0x10/0x10 [ 154.326125][ T6422] ? rcu_is_watching+0x12/0xc0 [ 154.326170][ T6422] do_syscall_64+0x10b/0xf80 [ 154.326214][ T6422] ? clear_bhb_loop+0x40/0x90 [ 154.326255][ T6422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.326303][ T6422] RIP: 0033:0x7f202139cdd9 [ 154.326329][ T6422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.326381][ T6422] RSP: 002b:00007f2022256028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 154.326413][ T6422] RAX: ffffffffffffffda RBX: 00007f2021615fa0 RCX: 00007f202139cdd9 [ 154.326434][ T6422] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000006 [ 154.326454][ T6422] RBP: 00007f2021432d69 R08: 0000000000000000 R09: 0000000000000000 [ 154.326474][ T6422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.326493][ T6422] R13: 00007f2021616038 R14: 00007f2021615fa0 R15: 00007ffe22dd1bb8 [ 154.326538][ T6422] [ 154.326551][ T6422] [ 154.326572][ T6422] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90004701000 allocated at drm_gem_shmem_vmap_locked+0x553/0x860 [ 154.326653][ T6422] Memory state around the buggy address: [ 154.326671][ T6422] ffffc90004a00f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 154.326701][ T6422] ffffc90004a00f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 154.326726][ T6422] >ffffc90004a01000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 154.326744][ T6422] ^ [ 154.326760][ T6422] ffffc90004a01080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 154.326782][ T6422] ffffc90004a01100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 154.326800][ T6422] ================================================================== [ 154.328469][ T6422] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 154.328497][ T6422] CPU: 0 UID: 0 PID: 6422 Comm: syz.1.111 Not tainted syzkaller #0 PREEMPT(full) [ 154.328540][ T6422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 154.328561][ T6422] Call Trace: [ 154.328572][ T6422] [ 154.328586][ T6422] dump_stack_lvl+0x100/0x190 [ 154.328626][ T6422] vpanic+0x552/0x970 [ 154.328657][ T6422] ? __pfx_vpanic+0x10/0x10 [ 154.328693][ T6422] ? sys_fillrect+0x174a/0x1910 [ 154.328741][ T6422] panic+0xd1/0xe0 [ 154.328773][ T6422] ? __pfx_panic+0x10/0x10 [ 154.328808][ T6422] ? sys_fillrect+0x174a/0x1910 [ 154.328858][ T6422] ? preempt_schedule_common+0x42/0xc0 [ 154.328908][ T6422] check_panic_on_warn.cold+0x19/0x34 [ 154.328947][ T6422] end_report.part.0+0x3a/0x90 [ 154.328998][ T6422] kasan_report.cold+0xe/0x18 [ 154.329066][ T6422] ? sys_fillrect+0x174a/0x1910 [ 154.329122][ T6422] sys_fillrect+0x174a/0x1910 [ 154.329204][ T6422] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 154.329248][ T6422] bit_clear+0x17d/0x220 [ 154.329291][ T6422] ? __pfx_bit_clear+0x10/0x10 [ 154.329334][ T6422] ? fb_get_color_depth+0x120/0x250 [ 154.329371][ T6422] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 154.329432][ T6422] __fbcon_clear+0x633/0x760 [ 154.329471][ T6422] ? __pfx_bit_clear+0x10/0x10 [ 154.329516][ T6422] fbcon_scroll+0x314/0x650 [ 154.329556][ T6422] con_scroll+0x464/0x690 [ 154.329611][ T6422] csi_ECMA.constprop.0+0xc57/0x3b60 [ 154.329667][ T6422] ? find_held_lock+0x2b/0x80 [ 154.329713][ T6422] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 154.329773][ T6422] do_con_write+0x3946/0x4a10 [ 154.329824][ T6422] ? trace_contention_end+0x122/0x170 [ 154.329872][ T6422] ? __pfx_do_con_write+0x10/0x10 [ 154.329935][ T6422] con_write+0x23/0xb0 [ 154.329986][ T6422] n_tty_write+0x431/0x11c0 [ 154.330041][ T6422] ? __pfx_n_tty_write+0x10/0x10 [ 154.330078][ T6422] ? trace_kmalloc+0xe3/0x110 [ 154.330120][ T6422] ? __pfx_woken_wake_function+0x10/0x10 [ 154.330164][ T6422] ? rcu_is_watching+0x12/0xc0 [ 154.330204][ T6422] ? file_tty_write.isra.0+0x694/0x890 [ 154.330256][ T6422] ? kfree+0x1dd/0x6c0 [ 154.330303][ T6422] ? __pfx_n_tty_write+0x10/0x10 [ 154.330339][ T6422] file_tty_write.isra.0+0x4d2/0x890 [ 154.330395][ T6422] redirected_tty_write+0xd4/0x120 [ 154.330449][ T6422] vfs_write+0x6ac/0x1070 [ 154.330489][ T6422] ? __pfx_redirected_tty_write+0x10/0x10 [ 154.330547][ T6422] ? __pfx_vfs_write+0x10/0x10 [ 154.330585][ T6422] ? find_held_lock+0x2b/0x80 [ 154.330654][ T6422] ksys_write+0x12a/0x250 [ 154.330691][ T6422] ? __pfx_ksys_write+0x10/0x10 [ 154.330731][ T6422] ? rcu_is_watching+0x12/0xc0 [ 154.330770][ T6422] do_syscall_64+0x10b/0xf80 [ 154.330809][ T6422] ? clear_bhb_loop+0x40/0x90 [ 154.330850][ T6422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.330884][ T6422] RIP: 0033:0x7f202139cdd9 [ 154.330911][ T6422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.330943][ T6422] RSP: 002b:00007f2022256028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 154.330977][ T6422] RAX: ffffffffffffffda RBX: 00007f2021615fa0 RCX: 00007f202139cdd9 [ 154.330999][ T6422] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000006 [ 154.331030][ T6422] RBP: 00007f2021432d69 R08: 0000000000000000 R09: 0000000000000000 [ 154.331051][ T6422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.331072][ T6422] R13: 00007f2021616038 R14: 00007f2021615fa0 R15: 00007ffe22dd1bb8 [ 154.331106][ T6422] [ 154.332262][ T6422] Kernel Offset: disabled