last executing test programs: 6.053692773s ago: executing program 2 (id=420): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram12\x00', 0x1f7800, 0x0) mmap$auto(0x1, 0x5, 0x1, 0x8000000008011, r0, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r1 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$auto(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x108000, 0x2, 0x200000b) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) socket(0x15, 0x3, 0x0) adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x9, 0x3, 0x0, 0x80000000000000, 0x80000000, 0x0, 0x4513, 0x9, 0xffffffffffffffff, {0x7, 0x6}, 0xfffffffc, 0xbfa, 0x9, 0xb, 0x0, 0x2, 0x1ff, 0xff, 0x10000, 0x100000001, 0x4}) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f000000a500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00cb4a4b98a4276cfa9b9d89820000", @ANYRES16=r3, @ANYBLOB="050725bd7000fbdbdf251c000000180001801400020069703667726530000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) socket(0x1e, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x5, 0x0) socket(0xa, 0x801, 0x106) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x62, 0x0) write$auto(r4, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) io_uring_setup$auto(0x6, 0x0) recvmmsg$auto(0x5, 0x0, 0x3, 0x6, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x38, 0xffdfff01, 0x9, 0x8000000000000000, 0x208, 0x7, 0x9, 0x5, 0x5, 0x9, 0x3, 0x8, 0x5, 0xf, 0x0, 0x9, 0x10001, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, 0x1]}, 0x800, 0x0) poll$auto(&(0x7f0000000080)={0x2, 0x0, 0x1a}, 0xff, 0x1) sendmsg$auto_NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x20008000) setfsuid$auto(0xee00) 5.056234686s ago: executing program 2 (id=423): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video6\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) inotify_add_watch$auto(0x4, 0x0, 0xe6e) ioctl$auto_v4l2_fops_v4l2_dev(r0, 0x80085617, 0x0) open(0x0, 0xeee00, 0x31) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x11, 0x80003, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x183402, 0x0) setsockopt$auto(r2, 0x7, 0x0, &(0x7f0000000080)='\x00', 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r3) sendmsg$auto_TIPC_NL_NET_SET(r3, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf250f0000000c00078008000200", @ANYRES32=0xee00, @ANYBLOB="7d23c6de790f05aa9ecfd6017bee4d3033db9e62ec14b15e5d5360b3a5bd25fb25ad9eba3e79e264a324495652918e6fc26fd3a863539393f60c9a61e0b0edfa62796695d27a"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x48812) r5 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r5, 0x10f, 0x87, 0x0, 0x14) sendmsg$auto_NL80211_CMD_JOIN_OCB(r1, 0x0, 0x810) close_range$auto(0x2, 0x8, 0x0) 4.730193599s ago: executing program 2 (id=426): r0 = socket(0x1e, 0x1, 0xbd) timerfd_gettime$auto(0x9, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) open_tree$auto(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup\x00', 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x284080, 0x0) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r0) sendmsg$auto_NFC_CMD_GET_DEVICE(r0, &(0x7f0000002640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x1a0, r1, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xc0}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0xd9}, @NFC_ATTR_SE_APDU={0x9e, 0x19, "3f14edcc53a5579f7b37fd1a7edc9ddde8ee562260009bbd386193f28aca29a5681f4526eaaec8c5ca31c6838b497a5d34ebf0d358095c031f1b0a4e359f971e2e0bdcd49c274ed54f598be2d7f512c7207338ecf7c88fe44a58c0f375ce74f14722ebbf430b2470a1343dfad43b936fdda4076a5a869b59ba655696dec470bcfa7b92cd0fff930a372cd6844be4737407479742df929cf3fb9f"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x9}, @NFC_ATTR_VENDOR_DATA={0xaf, 0x1f, "8354fe4456cc2fc8b98fc5ff393962b5226de454071e663985d97d25e6c0d2cb0ba1cb1678b92832d3bf8db635226314d53feb48c85da0466e65099b3fa0a4472c944475bcd2d90f119af05bdf870b2b3f23c86e92b8aef97e13a7988497150906367bc37ea8535ad135215f2f8c8db1bb208a98c2dab84d1cbf940aa446fb28ecd803cea6caad407dccbebeb8abac888b295eb65cf2d949118f2462aea860e156fac67511ea31d4b9ef2e"}, @NFC_ATTR_LLC_SDP={0x4}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x1000}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xbb}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x92}, 0x80) setrlimit$auto(0x9, &(0x7f0000000000)={0x81, 0x7ff}) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0x400000) 4.10532154s ago: executing program 3 (id=429): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_CONFIG(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004049330ca2675edcf5ac36149519ffabe01fdd33a1a708f1127d7016be07000824acd4811b48f8e9a02efc57c2e7f26d3ef6bddadaef7a271f5a7fecdb0947e53008cfd758135f42f7f36cb79fbffc4a2baf6ae1f7d8aefa351b8fef7990e44fb4e7843b8b4b396b4e7717ebc6eb6f63780c7dfac4a4a8c3a26113fe6e152dbe8e139592f3e52f4a7b60018186b6", @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf250c0000000800060000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$auto(r0, 0x4008af03, 0x0) gettid() lstat$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x6, 0x2, 0xf, 0x3291, 0xffffffffffffffff, 0xee00, 0x0, 0x8, 0x3, 0x6, 0x0, 0x4, 0x1, 0xc33, 0x0, 0x6, 0x3}) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000001c80)='/sys/kernel/debug/block/nullb0/hctx0/cpu0/poll_rq_list\x00', 0x400, 0x0) r4 = socket(0x2, 0x801, 0x106) r5 = getsockopt$auto(r4, 0x11c, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x4009b72, 0x7, 0x28000) sysfs$auto(0x2, 0x4, 0x4) mincore$auto(0x1000, 0x8001, 0x0) r6 = io_uring_setup$auto(0x877, 0x0) io_uring_enter$auto(r6, 0xcd00, 0xcd00, 0x7, 0x0, 0xffffffffffffffff) sysfs$auto(0x2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYRES64=r3, @ANYRES16=r7], 0x2c}, 0x1, 0x0, 0x0, 0x4008050}, 0x44054) geteuid() mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttynull\x00', 0x0, 0x0) ioctl$auto(r8, 0x402c542d, 0x38) close_range$auto(0x2, 0x8, 0x0) fcntl$getown(r4, 0x9) 3.362225771s ago: executing program 0 (id=432): mmap$auto(0x1, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x1, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) socket(0xa, 0x2, 0x0) (async) socket(0xa, 0x2, 0x0) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0x24, 0x0, 0x0) (async) getsockopt$auto(r0, 0x84, 0x24, 0x0, 0x0) mmap$auto(0x0, 0x1000000000020009, 0xdf, 0x475, 0x40000000000a5, 0x8000) adjtimex$auto(0x0) (async) adjtimex$auto(0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x40, 0x0) (async) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x4605, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mremap$auto(0xe7, 0x7, 0x3, 0x3, 0x20000000) (async) mremap$auto(0xe7, 0x7, 0x3, 0x3, 0x20000000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) socket(0xa, 0x2, 0x88) (async) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0xfffffffc, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=r2, 0x1, @old_prog_fd=r2}, 0x7) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0x1) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffb}, 0x6, 0x7fffffff, 0x3) ioctl$auto(0x3, 0x89f2, 0x38) 3.113256823s ago: executing program 3 (id=433): mmap$auto(0x0, 0x2020009, 0x10000007, 0x13, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)={{@raw=0x8, 0xfff, 0x20e, 0x9, "669cbbd9e97551b991bea188e0f1a57cff01facac1f00b2f6ab8635524133f9e22c7717f6050f2d2252ca5f2", @raw=0x8}, 0x0, @iec958={"31bee81a1537292d6d5cf10129461bcfe21944de67f2c7e2", "45805e24089c633fd962e093b796e736916cd56e8ba600463c8f947e52f345a1832f05560b67fb3b43f9234d4f1ac1daa73642e017db1ec71d66d872484e2a198dc86694a7d8f8384d7756ad802f6499b3fc34778aafcfefebb863950c6eed81b14c2e00f36951fbcd5e61ab4c02004ed57899112d9183f5c351b7f8f3f4c814582e3fbfab15956b11ea2f62136500", 0x0, "d8eb943c"}, "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"}) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x1) madvise$auto(0x0, 0x20499d, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0x5, 0x3ba, 0x7, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x20000804) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001a80)={'wg2\x00'}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x4b, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @fd}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2.902424216s ago: executing program 1 (id=435): r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/stat/rt_cache\x00', 0x60200, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000140)=""/232, 0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) read$auto(r2, &(0x7f0000000100)='nl80211\x00', 0xbe62) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf25030000000600010030"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) read$auto(r3, 0x0, 0x3ff) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000040)="a8d8", 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x8, 0xc8, 0x17, 0x2, 0x40008000) ioctl$auto_MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) 2.822914105s ago: executing program 0 (id=436): sigaltstack$auto(&(0x7f0000000300)={&(0x7f0000000200)="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", 0x80000000}, &(0x7f0000000440)={&(0x7f0000000340)="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", 0x6, 0x6}) shutdown$auto(0x200000003, 0x0) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x5, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x40, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80080001]}, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x20009, 0x10000000000e2, 0x1b, 0x401, 0x8000) r0 = creat$auto(&(0x7f0000000000)='./file0\x00', 0xfffa) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.0/usb1/devspec\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000002c00)=""/181, 0xb5) sendmsg$auto_NL80211_CMD_GET_MPATH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fcdbdf25150000d6e2ba92ee07bb48000800c4000200000004008e0006004800070000000600b500030000000d00a200fd000000"], 0x40}, 0x1, 0x0, 0x0, 0x2008c081}, 0x10001840) r2 = socket(0x26, 0x5, 0x0) openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r3, 0x8, 0x1) write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x4000, 0xfee0, 0x3fd9, 0x3, 0xfffff000) munmap$auto(0x1000000, 0x2000000c) fcntl$auto(r3, 0x11, 0x2) ioctl$auto(r2, 0x8b32, 0x91) 2.337530535s ago: executing program 3 (id=437): r0 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/error_log\x00', 0x2, 0x0) r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r1, &(0x7f0000000700)='!dev_vhc&\x00', 0x9) writev$auto(r0, &(0x7f0000000240)={0x0, 0x80}, 0x7f) symlink$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 2.170710443s ago: executing program 0 (id=438): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00'}) mmap$auto(0x3, 0x4020009, 0x4000000000df, 0xeb1, 0x401, 0x4000008000) r1 = socket(0x2, 0xa, 0xa) sendmmsg$auto(r1, &(0x7f0000000200)={{&(0x7f0000000140), 0x101, 0x0, 0x7, 0x0, 0x3, 0x1}, 0x7}, 0x8, 0x7fff) r2 = clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f00000000c0)={0x4ba0, r0, r0, 0xe5a}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) capset$auto(0x0, 0x0) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NFSD_A_SERVER_LEASETIME={0x8}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) mq_open$auto(&(0x7f0000000300)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00', 0xffffff6e, 0xfffc, &(0x7f0000000380)={0xcc, 0x9, 0x2}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) socket(0x10, 0x2, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000001c0), 0x4100, 0x0) r3 = pidfd_open$auto(r2, 0x3) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0xfcffffff, &(0x7f0000000000)={0x0, 0xc}, 0x2, 0x0, 0x4, 0xa504}, 0x800}, 0x66, 0x400b) 2.170060957s ago: executing program 3 (id=439): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 32) getrandom$auto(0x0, 0x6000000, 0x3) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x8200, 0x1001, 0x8, 0x1000000f, 0x66b, 0x0, 0x5}, 0x6f4) (async) socket(0x10, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) pipe$auto(0x0) (async) writev$auto(0x5, &(0x7f0000000100)={0x0, 0x7}, 0x201) vmsplice$auto(0x4, &(0x7f0000000040)={0x0, 0x80000000002}, 0x3, 0x4) (async) mbind$auto(0x5, 0x400, 0x4, 0x0, 0x6, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket(0x2, 0x80002, 0x73) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @private=0xa010102}, 0x6) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/tty/ttyrc/dev\x00', 0x220101, 0x0) (async) setsockopt$auto(0xffffffffffffffff, 0x9, 0x1, &(0x7f0000000100)='/sys/kernel/debug/tracing/error_log\x00', 0x1) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0xd0142, 0x0) socket(0x6, 0x3, 0x6) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/neigh/veth1_to_bridge/proxy_qlen\x00', 0x2202, 0x0) write$auto(r1, 0x0, 0x0) (async) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x202, 0x0) (async) ioctl$auto_TIOCGPTPEER2(r0, 0x5441, 0x0) (async) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x80800, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) (async) sendfile$auto(0x6, 0x3, 0x0, 0x8000) 2.08600044s ago: executing program 2 (id=440): r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/maps\x00', 0x100, 0x0) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000340)={0x68, 0x6, 0x4, 0x2000000000001, 0x20000000008, 0x1, 0x20, 0x6, 0x5, 0x200, 0xfffffffe, 0xc, 0x1000, 0x4, 0x9}) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setrlimit$auto(0x9, 0x0) (async) io_setup$auto(0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0) (async) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) (async) truncate$auto(&(0x7f0000000040)='./file0\x00', 0xa4) socket(0x29, 0x2, 0x0) semtimedop$auto(0x8001, 0x0, 0xff, 0x0) (async) ioctl$auto(0x3, 0x89e0, 0xfffffffffffff4e0) 1.983571907s ago: executing program 2 (id=441): umount2$auto(&(0x7f0000000000)='($\\\x00', 0x80000001) (async) umount2$auto(0x0, 0x3) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x213ab89e763096ae, 0x40001071) socket(0x2, 0x1, 0x84) (async) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) (async) shutdown$auto(0x200000003, 0x2) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x844c0, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_READ(r0, 0xc0085508, &(0x7f0000000040)={0xd, 0x5, 0x8}) (async) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) (async) ioctl$auto_USB_RAW_IOCTL_EP0_READ(0xffffffffffffffff, 0xc0085504, 0x0) ioctl$auto(r2, 0x4b32, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x10001, 0xdf, 0x9b72, r0, 0x48000) (async) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) (async) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyqb\x00', 0x161040, 0x0) ioctl$auto(r3, 0x5457, 0xd8) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x801, 0x106) (async) syz_genetlink_get_family_id$auto_l2tp(0x0, r1) syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) (async) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/inject\x00', 0x81, 0x0) (async) sendmsg$auto_NL80211_CMD_JOIN_IBSS(r4, 0x0, 0x4000040) umount2$auto(0x0, 0x2) (async) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 1.88511742s ago: executing program 1 (id=442): r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x2, 0x0) (async) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x4605, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) capget$auto(0x0, 0xfffffffffffffffe) (async) capset$auto(0x0, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64) sendmsg$auto_ILA_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf2504000000d48ca426d107a24ee04dd3c951691e95f7f5a96bb1f3b3a84f49cca60dbf951ee1246330e901283fb31e3cceb960621198c1a22f0dedc55c537d63f3f874199069d2db92b2f3f62e52ae"], 0x14}, 0x1, 0x0, 0x0, 0x8050}, 0x4008054) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) syz_genetlink_get_family_id$auto_ncsi(&(0x7f00000015c0), 0xffffffffffffffff) (async, rerun: 32) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) (async, rerun: 32) wait4$auto(0xffffffffffffffff, 0x0, 0xf4, &(0x7f0000000340)={{0x9, 0x9}, {0x0, 0x240c}, 0x1, 0xfffffffffffff73e, 0x8, 0xc, 0x4, 0x7, 0xfff, 0x3, 0x3, 0x21, 0x5, 0x8001, 0x800, 0x2}) (async) sendmsg$auto_TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0xb0) (async) socket(0x6, 0x800, 0x0) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d64688be86d547a05c861"}, 0x55) (async, rerun: 64) getpeername$auto(0x3, 0x0, 0x0) (async, rerun: 64) r2 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x42, 0x0) write$auto_mousedev_fops_mousedev(r2, &(0x7f00000000c0)="00642fdb37b35fba2154e23bd03ab19f268db768651c4f6fc2979b5b97b0b4e938b90361c4c96b3d7d39e13016bcf4184d3e9a5322bf3303f7132a884c34471862710a60b49d05f5ca975c37392301b0bc95be145959cd9b119f56e51e5ecc965d", 0xfd55) read$auto(r0, 0x0, 0x7fff) (async) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/extfrag/unusable_index\x00', 0x0, 0x0) (async, rerun: 64) r4 = socketpair$auto(0x1, 0x80000001, 0x0, &(0x7f0000000080)=0x7) (async, rerun: 64) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/orangefs/stats/reads\x00', 0x2000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000001c0)=""/229, 0xe5) stat$auto(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0xd9, 0x3, 0x36d1, 0x9d, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f21b2ba, 0x7fffffff, 0x3, 0x57, 0x0, 0x1, 0x2, 0x100000000, 0x3, 0x1}) (async) statx$auto(r4, &(0x7f0000000140)='./file0\x00', 0x449d, 0x1, &(0x7f00000003c0)={0x8000, 0x4, 0xffff, 0x400000, 0xee01, 0xee00, 0x4, 0x6, 0x9, 0x4, 0x2, 0xa, {0x80000000, 0x3}, {0x4, 0xfe}, {0x2c, 0x4}, {0xffffffffffff670f, 0x4}, 0x10000, 0x2, 0xff, 0x200, 0x4, 0x3, 0x1, 0x4b9, 0x1b7, 0x3, 0x7, 0x1, [0x4, 0xfff, 0x101, 0x7, 0x100, 0xffffffffffffffff, 0x3, 0x1000, 0x4]}) (async) sync_file_range$auto(r3, 0x3, 0x1, 0x41) 1.771526004s ago: executing program 2 (id=443): r0 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x6, 0xeb1, r0, 0x8000) r1 = openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000000), 0x149001, 0x0) read$auto(r1, &(0x7f0000000100)='\xcb%)\x00', 0x7) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b71, 0x1) read$auto(0x3, 0x0, 0x1f40) 1.314915457s ago: executing program 3 (id=444): r0 = socket(0x2, 0x3, 0x100) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x642, 0x0) mmap$auto(0x0, 0xe986, 0x100df, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0xf9) write$auto(r1, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) close_range$auto(0x2, 0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.8/usb25/serial\x00', 0x10143, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) splice$auto(r0, &(0x7f0000000040)=0x800, r0, &(0x7f0000000100)=0x8, 0x100000000006, 0xd) r2 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x100401, 0x0) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000180), 0x400100, 0x0) ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, 0x0) write$auto_evm_xattr_ops_evm_secfs(r2, &(0x7f00000000c0)='.', 0x1) 898.965531ms ago: executing program 0 (id=445): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/vm/nr_overcommit_hugepages\x00', 0x100, 0x0) (async) clone$auto(0x1, 0x100, 0x0, 0x0, 0x800) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket(0xa, 0x2, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x24, r4, 0x413, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x80) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x848000000015, 0x805, 0x0) (async) bind$auto(r0, &(0x7f0000000000)=@phonet={0x23, 0x5, 0x4, 0x96}, 0x8) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x55) madvise$auto(0xc667, 0x8, 0xfffffff8) (async) sendmsg$auto_OVS_DP_CMD_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x48d0}, 0x4040010) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r7 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) sendmmsg$auto(r7, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x31cd3c7c, 0xb1) shutdown$auto(0x200000003, 0x2) (async) sendfile$auto(0x1, 0x3, 0x0, 0xc01) sendmsg$auto_OVS_DP_CMD_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[], 0xd000}, 0x1, 0x0, 0x0, 0x50}, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) timerfd_create$auto(0x7, 0x0) 815.09262ms ago: executing program 1 (id=446): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) stat$auto(0x0, &(0x7f0000000140)={0x1d, 0x79, 0x1, 0x566f, 0x0, 0xee01, 0x0, 0x100000001, 0x8, 0xbf71, 0x4, 0x4c, 0x3c2, 0x5, 0x5, 0x2, 0x3}) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd14/queue/atomic_write_unit_max_bytes\x00', 0x103400, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) sysfs$auto(0xa, 0x5, 0xaf17) 687.523831ms ago: executing program 1 (id=447): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio1\x00', 0x20342, 0x0) unshare$auto(0x40000080) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfd, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x13, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b000000", @ANYBLOB='^'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7e, 0x4) r0 = socket(0x2c, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x62edbe3e, 0xdf, 0xeb4, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x4e23, @local}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) io_uring_setup$auto(0xe8a8eb57, 0x0) madvise$auto(0x0, 0x800000005, 0x15) setsockopt$auto(0x3, 0x1, 0x9, 0x0, 0x8) memfd_create$auto(0x0, 0xe) madvise$auto(0x5, 0x3, 0x0) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(r0, 0x0, 0x5, 0x20000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40280, 0x0) socket(0x2, 0x3, 0x100) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYRES8=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x5d55a7d4b84ce2b8}, 0x0) 566.966393ms ago: executing program 0 (id=448): msgctl$auto(0x6, 0x3, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff, 0xee01, 0x6, 0x0, 0x6, 0x3}, 0x0, 0x0, 0x8, 0x9, 0x6, 0x205, 0x5b73, 0x49, 0x9, 0x2}) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000001c00), r0) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001c40)={0x14, r1, 0x100, 0x70bd27, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x2004c094}, 0x0) msgctl$auto(0x6, 0x3, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff, 0xee01, 0x6, 0x0, 0x6, 0x3}, 0x0, 0x0, 0x8, 0x9, 0x6, 0x205, 0x5b73, 0x49, 0x9, 0x2}) (async) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000001c00), r0) (async) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001c40)={0x14, r1, 0x100, 0x70bd27, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x2004c094}, 0x0) (async) 415.818912ms ago: executing program 1 (id=449): sysfs$auto(0x9109, 0x1, 0xffffffffffffffff) mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto(0x3, 0x2, 0x13, 0x9) r0 = socket(0xa, 0x1, 0x84) get_robust_list$auto(0x1, 0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002ac0), r2) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, r3, 0x1f97227bd58c1f83, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004041}, 0x40004) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xdc, r3, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x1}, @NL802154_ATTR_WPAN_PHY_CAPS={0xaf, 0x18, 0x0, 0x1, [@typed={0x8, 0x4d, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="d7612631087baaab8349ecb83e8ad166ff8e886bbbdfca2c8c53fa0fe62281a2ef92a24aece4ce5728607dfe792a89e1475289a1e021355127fbfa7437c8e9788e14b1a189af256bcc406217f5f3a26aab2ef02d9197fe4add877274c73f8d481f018520fea13fb586c01432f1a0779dfd2e0b629c70940f360fd56f85217d9e5f0931183a4856d35372dee7f6fabdf7da59517e22f6f1b8b769e063285d0cc2401213"]}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x7}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000010}, 0x4c000) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$auto(r0, 0x0, 0x484, 0x0, 0x0) 246.752147ms ago: executing program 3 (id=450): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000900), 0x101002, 0x0) r2 = openat$auto_fops_bool_file(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/failslab/ignore-gfp-wait\x00', 0x101382, 0x0) write$auto_fops_bool_file(r2, 0x0, 0x0) read$auto_state_fops_(r1, &(0x7f0000000940)=""/19, 0x13) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = getpgrp(0x0) wait4$auto(r3, &(0x7f0000000000)=0x8, 0xff, &(0x7f0000000140)={{0x9, 0x8000000000000001}, {0x1, 0x9}, 0x1ff, 0x6, 0x0, 0xf3, 0x3, 0x4, 0x8, 0xffffffffffffff93, 0x200, 0x6, 0x8, 0xffffffffffffffff, 0x3, 0x7f}) waitid$auto(0x5, r1, &(0x7f0000000040)={@siginfo_0_0={0x6, 0x7, 0x0, @_timer={r3, 0xfff, @sival_ptr=&(0x7f0000000200)="0d22be5446d1bdd08d06b79d39041c851b01ead57cab1b9337fdca4fef4f839418148b757c60b84ed5a0d6c734945a38e865cc098f06b814b594036dd0828163056c9c8b70ccaffd9998d7d5786c630b35ced0d52d339dae7d475e4eeb886ca554c854a3a52e330a68342589b8c3a604af28ee83a0ff4c8bf45b01e4221fcc453682c9b432c8ea70d4e54b636bb0cae273a38b0bd7ff58868217394fdb14c8e9cb0c6fb27ebff58fe43b15b6e6c516a0cfd25c49", 0x6}}}, 0x5, &(0x7f00000002c0)={{0x4, 0xff}, {0x3, 0x3b}, 0x610, 0x3, 0x5, 0xff, 0x8, 0x2, 0xfffffffffffffffb, 0x9, 0x8, 0x9, 0x3, 0xfffffffffffffffe, 0x6362, 0x81}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001100)=""/4106, 0x100a) mmap$auto(0x0, 0x40009, 0x9b1d, 0x9b72, 0xffffffffffffffff, 0x28000) r5 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r5, 0x107, 0x12, 0x0, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getxattr$auto(0x0, 0x0, 0x0, 0x0) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r6, 0x4c00, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) 54.888807ms ago: executing program 0 (id=451): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statx$auto(0xffffffffffffffff, 0x0, 0x1000, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) chown$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) newfstatat$auto(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x4, 0x101, 0xfff, 0x8, 0x0, 0x0, 0x0, 0x4, 0x6734, 0xd6a7, 0x9, 0x9, 0x7, 0x9, 0xce, 0x4, 0x7}, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ram0\x00', 0x40a40, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x100000) socket(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_3={0x5, 0x3, 0x6, 0x2, 0x4, 0x9, 0x81, 0x5, 0x7fff, "aa7796dcb83b6b02ccf8c8de88605612", r2, 0x8, r1, 0x3, 0x5, 0xf, 0x540e, 0x1ff, 0x6, 0x1, @attach_prog_fd, 0xfffffffa, 0x6, 0x8, 0x4, 0x0, r0}, 0xf) open(0x0, 0x80040, 0xc6) r3 = mq_open$auto(&(0x7f0000000000)='/#&/[&\x00', 0x2, 0x2, &(0x7f0000000040)={0xffffffffffff49ac, 0x5, 0x200, 0x7ff}) mmap$auto(0x5, 0x10400008, 0xdf, 0x9b70, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfs\x00', 0x2000, 0x0) fcntl$getown(r3, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto(0xffffffffffffffff, 0xffffffff, 0x3) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/ram12/queue/atomic_write_unit_min_bytes\x00', 0x2c6840, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) write$auto(0x800000000000c8, 0x0, 0x1a) mmap$auto(0x6, 0x9, 0x6, 0x32d4, 0x10000, 0x80000001) ioctl$auto(0xc8, 0xffffffff800454dd, 0x4000000000008) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd0\x00', 0x103bc3, 0x0) shutdown$auto(0x200000003, 0x2) 0s ago: executing program 1 (id=452): io_uring_setup$auto(0x6, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f00000002c0)={0x4, 0x400, 0x1, 0x3, 0x0, 0x0, 0x0, 0xd7d9, 0x1, 0x4, 0x100000001, 0x1, 0x8000002, 0x8, 0x4, 0xffffffffffffffff, 0x4}) getegid() close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0) ioctl$auto_BINDER_CTL_ADD(r1, 0xc1086201, 0x0) r2 = landlock_create_ruleset$auto(&(0x7f0000000240)={0x1000, 0x5, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0x0) symlink$auto(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') r3 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f00000037c0)='/proc/self/attr/current\x00', 0x1, 0x0) write$auto_proc_pid_attr_operations_base(r3, 0x0, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x2, 0x800000000008000) io_uring_setup$auto(0x6, 0x0) r4 = socket(0x29, 0x2, 0x0) setsockopt$auto(r4, 0x2, 0x1, 0x0, 0x699cc4dc) close_range$auto(r2, r3, 0x9) unshare$auto(0x40000080) unshare$auto(0x5) socket$nl_generic(0x10, 0x3, 0x10) futex$auto(&(0x7f0000000040)=0x9, 0x5, 0x0, 0x0, 0x0, 0xc0040000) r5 = socket(0x2, 0x3, 0xa) getsockopt$auto(r5, 0x8, 0x29, 0x0, &(0x7f0000000040)=0xdbb) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r6) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="10002dbd7000ff160adbdf25020000000800", @ANYRES32, @ANYRESDEC=0x0], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ram2\x00', 0x1c5000, 0x0) r8 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x1cdd81, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r8, 0x4c00, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.90' (ED25519) to the list of known hosts. [ 65.486362][ T5822] cgroup: Unknown subsys name 'net' [ 65.638190][ T5822] cgroup: Unknown subsys name 'cpuset' [ 65.646630][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.017242][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.802071][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.817883][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.826554][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.834279][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.856081][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.870184][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.875086][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.877580][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.885335][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.893310][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.899188][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.907439][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.912040][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.920629][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.928012][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.933386][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.941179][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.954674][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.954792][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.968883][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.970440][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.984106][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.984838][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.991745][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.347809][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 69.367434][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 69.447259][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 69.526420][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 69.541835][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.549093][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.556770][ T5836] bridge_slave_0: entered allmulticast mode [ 69.563421][ T5836] bridge_slave_0: entered promiscuous mode [ 69.572866][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.580138][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.587634][ T5836] bridge_slave_1: entered allmulticast mode [ 69.594225][ T5836] bridge_slave_1: entered promiscuous mode [ 69.672637][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.684507][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.694341][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.701486][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.708668][ T5834] bridge_slave_0: entered allmulticast mode [ 69.715886][ T5834] bridge_slave_0: entered promiscuous mode [ 69.747220][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.754380][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.761785][ T5834] bridge_slave_1: entered allmulticast mode [ 69.769147][ T5834] bridge_slave_1: entered promiscuous mode [ 69.831036][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.838191][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.845646][ T5833] bridge_slave_0: entered allmulticast mode [ 69.852637][ T5833] bridge_slave_0: entered promiscuous mode [ 69.863331][ T5836] team0: Port device team_slave_0 added [ 69.872638][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.882238][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.891780][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.900385][ T5831] bridge_slave_0: entered allmulticast mode [ 69.907561][ T5831] bridge_slave_0: entered promiscuous mode [ 69.914440][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.921793][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.928960][ T5833] bridge_slave_1: entered allmulticast mode [ 69.935965][ T5833] bridge_slave_1: entered promiscuous mode [ 69.944278][ T5836] team0: Port device team_slave_1 added [ 69.952685][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.971772][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.978956][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.986145][ T5831] bridge_slave_1: entered allmulticast mode [ 69.992666][ T5831] bridge_slave_1: entered promiscuous mode [ 70.042278][ T5834] team0: Port device team_slave_0 added [ 70.058701][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.071703][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.078963][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.105551][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.119024][ T5834] team0: Port device team_slave_1 added [ 70.126998][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.137810][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.156455][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.163405][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.189425][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.208024][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.253786][ T5833] team0: Port device team_slave_0 added [ 70.262913][ T5833] team0: Port device team_slave_1 added [ 70.269630][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.276749][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.302966][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.315951][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.322905][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.348967][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.363929][ T5831] team0: Port device team_slave_0 added [ 70.390798][ T5831] team0: Port device team_slave_1 added [ 70.428405][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.435794][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.462037][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.474860][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.487072][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.513243][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.539130][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.546220][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.572269][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.590465][ T5836] hsr_slave_0: entered promiscuous mode [ 70.596964][ T5836] hsr_slave_1: entered promiscuous mode [ 70.610815][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.620486][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.647075][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.662860][ T5834] hsr_slave_0: entered promiscuous mode [ 70.669236][ T5834] hsr_slave_1: entered promiscuous mode [ 70.675619][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.683399][ T5834] Cannot create hsr debugfs directory [ 70.719985][ T5833] hsr_slave_0: entered promiscuous mode [ 70.726108][ T5833] hsr_slave_1: entered promiscuous mode [ 70.731978][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.739809][ T5833] Cannot create hsr debugfs directory [ 70.809061][ T5831] hsr_slave_0: entered promiscuous mode [ 70.815259][ T5831] hsr_slave_1: entered promiscuous mode [ 70.822053][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.829919][ T5831] Cannot create hsr debugfs directory [ 71.036000][ T54] Bluetooth: hci1: command tx timeout [ 71.036194][ T5839] Bluetooth: hci3: command tx timeout [ 71.041508][ T5847] Bluetooth: hci2: command tx timeout [ 71.047469][ T5143] Bluetooth: hci0: command tx timeout [ 71.090810][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.100951][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.113970][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.123748][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.170865][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.180367][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.190189][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.211288][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.268295][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.279318][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.289171][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.301238][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.344905][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.363319][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.373209][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.383849][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.479104][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.524950][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.544019][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.575233][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.585426][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.592699][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.602825][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.610342][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.630907][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.638062][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.683125][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.683607][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.691069][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.696582][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.724605][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.742124][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.789480][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.805948][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.814489][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.821596][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.844782][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.851875][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.874519][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.881669][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.897624][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.942688][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.949862][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.211085][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.278430][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.324632][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.347966][ T5833] veth0_vlan: entered promiscuous mode [ 72.359510][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.391662][ T5833] veth1_vlan: entered promiscuous mode [ 72.434602][ T5834] veth0_vlan: entered promiscuous mode [ 72.462439][ T5833] veth0_macvtap: entered promiscuous mode [ 72.483499][ T5831] veth0_vlan: entered promiscuous mode [ 72.494293][ T5834] veth1_vlan: entered promiscuous mode [ 72.504190][ T5833] veth1_macvtap: entered promiscuous mode [ 72.513245][ T5836] veth0_vlan: entered promiscuous mode [ 72.532029][ T5831] veth1_vlan: entered promiscuous mode [ 72.549652][ T5836] veth1_vlan: entered promiscuous mode [ 72.562103][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.593681][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.623173][ T5831] veth0_macvtap: entered promiscuous mode [ 72.639404][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.649711][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.658785][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.670660][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.687801][ T5831] veth1_macvtap: entered promiscuous mode [ 72.713155][ T5836] veth0_macvtap: entered promiscuous mode [ 72.721441][ T5834] veth0_macvtap: entered promiscuous mode [ 72.744792][ T5834] veth1_macvtap: entered promiscuous mode [ 72.757152][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.775419][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.787171][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.794903][ T5836] veth1_macvtap: entered promiscuous mode [ 72.812310][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.823575][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.835942][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.855479][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.869794][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.880091][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.890794][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.901697][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.913055][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.921977][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.931248][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.940358][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.963998][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.976097][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.985963][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.997607][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.009092][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.024087][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.034651][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.046195][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.057585][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.067715][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.078363][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.089314][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.114209][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.123023][ T5143] Bluetooth: hci0: command tx timeout [ 73.123562][ T5847] Bluetooth: hci3: command tx timeout [ 73.128560][ T5143] Bluetooth: hci2: command tx timeout [ 73.128589][ T5143] Bluetooth: hci1: command tx timeout [ 73.129444][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.144661][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.168234][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.179399][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.190212][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.201373][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.212303][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.223189][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.232027][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.240910][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.249728][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.258726][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.289540][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.298757][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.307943][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.317009][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.363676][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.372280][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.430130][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.445630][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.463417][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.506105][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.513963][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.602120][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.610372][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.652743][ T3480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.660868][ T3480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.723794][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.731769][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.760146][ T3480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.786135][ T3480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.195661][ T54] Bluetooth: hci2: command tx timeout [ 75.196169][ T5143] Bluetooth: hci0: command tx timeout [ 75.201084][ T54] Bluetooth: hci3: command tx timeout [ 75.212855][ T5847] Bluetooth: hci1: command tx timeout [ 75.437947][ T5926] sysfs_service_op_show: Client not running :-5: [ 76.108909][ T5931] ======================================================= [ 76.108909][ T5931] WARNING: The mand mount option has been deprecated and [ 76.108909][ T5931] and is ignored by this kernel. Remove the mand [ 76.108909][ T5931] option from the mount to silence this warning. [ 76.108909][ T5931] ======================================================= [ 76.493851][ T5948] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15'. [ 76.711304][ T5945] synth uevent: /bus/memstick: unknown uevent action string [ 77.099751][ T5954] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 77.277491][ T54] Bluetooth: hci0: command tx timeout [ 77.278809][ T5143] Bluetooth: hci3: command tx timeout [ 77.283264][ T5847] Bluetooth: hci1: command tx timeout [ 77.288654][ T5839] Bluetooth: hci2: command tx timeout [ 77.627745][ T5964] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 77.628375][ T5963] ima: policy update failed [ 77.658665][ T29] audit: type=1802 audit(1737196824.594:2): pid=5963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.19" res=0 errno=0 [ 78.112112][ T5972] can: request_module (can-proto-4) failed. [ 78.119515][ T5971] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.134893][ T5979] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 79.176782][ T5987] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 79.289388][ T5979] File: /dev/ram7 PID: 5979 Comm: syz.1.23 [ 79.310514][ T5987] File: /dev/ram7 PID: 5987 Comm: syz.1.23 [ 81.407489][ T6016] Zero length message leads to an empty skb [ 81.414603][ T6026] mmap: syz.2.33 (6026) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 81.936674][ T2148] cfg80211: failed to load regulatory.db [ 82.408042][ T6034] FAULT_INJECTION: forcing a failure. [ 82.408042][ T6034] name failslab, interval 1, probability 0, space 0, times 1 [ 82.495139][ T6034] CPU: 1 UID: 0 PID: 6034 Comm: syz.0.34 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 [ 82.505706][ T6034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 82.515809][ T6034] Call Trace: [ 82.519116][ T6034] [ 82.522082][ T6034] dump_stack_lvl+0x16c/0x1f0 [ 82.526802][ T6034] should_fail_ex+0x497/0x5b0 [ 82.531538][ T6034] ? fs_reclaim_acquire+0xae/0x150 [ 82.536694][ T6034] should_failslab+0xc2/0x120 [ 82.541420][ T6034] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 82.546839][ T6034] ? security_inode_alloc+0x3b/0x2b0 [ 82.552178][ T6034] security_inode_alloc+0x3b/0x2b0 [ 82.557341][ T6034] inode_init_always_gfp+0xce4/0x1030 [ 82.562763][ T6034] alloc_inode+0x82/0x230 [ 82.567139][ T6034] new_inode+0x22/0x210 [ 82.571339][ T6034] proc_sys_make_inode+0x47/0x5c0 [ 82.576395][ T6034] proc_sys_lookup+0x318/0x440 [ 82.581175][ T6034] ? __pfx_proc_sys_lookup+0x10/0x10 [ 82.586476][ T6034] ? __d_lookup+0x266/0x4a0 [ 82.590988][ T6034] ? __pfx_proc_sys_lookup+0x10/0x10 [ 82.596286][ T6034] lookup_open.isra.0+0x92d/0x14c0 [ 82.601421][ T6034] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 82.606980][ T6034] ? path_openat+0x88a/0x2d60 [ 82.611677][ T6034] ? mnt_get_write_access+0x20c/0x300 [ 82.617072][ T6034] path_openat+0x904/0x2d60 [ 82.621595][ T6034] ? __pfx_path_openat+0x10/0x10 [ 82.626546][ T6034] ? __pfx___lock_acquire+0x10/0x10 [ 82.631750][ T6034] ? lock_acquire.part.0+0x11b/0x380 [ 82.637040][ T6034] ? find_held_lock+0x2d/0x110 [ 82.641821][ T6034] do_filp_open+0x20c/0x470 [ 82.646341][ T6034] ? __pfx_do_filp_open+0x10/0x10 [ 82.651378][ T6034] ? find_held_lock+0x2d/0x110 [ 82.656187][ T6034] ? alloc_fd+0x41f/0x760 [ 82.660554][ T6034] do_sys_openat2+0x17a/0x1e0 [ 82.665249][ T6034] ? __pfx_do_sys_openat2+0x10/0x10 [ 82.670469][ T6034] ? __pfx___might_resched+0x10/0x10 [ 82.675770][ T6034] __x64_sys_openat+0x175/0x210 [ 82.680643][ T6034] ? __pfx___x64_sys_openat+0x10/0x10 [ 82.686042][ T6034] do_syscall_64+0xcd/0x250 [ 82.690568][ T6034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.696479][ T6034] RIP: 0033:0x7feca4b85d29 [ 82.700901][ T6034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.720530][ T6034] RSP: 002b:00007feca596e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 82.728950][ T6034] RAX: ffffffffffffffda RBX: 00007feca4d75fa0 RCX: 00007feca4b85d29 [ 82.736922][ T6034] RDX: 0000000000040001 RSI: 0000000020000300 RDI: ffffffffffffff9c [ 82.744894][ T6034] RBP: 00007feca4c01b08 R08: 0000000000000000 R09: 0000000000000000 [ 82.752868][ T6034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.760848][ T6034] R13: 0000000000000000 R14: 00007feca4d75fa0 R15: 00007fff073171c8 [ 82.768836][ T6034] [ 83.941275][ T6050] bridge0: port 3(batadv0) entered blocking state [ 83.961322][ T6050] bridge0: port 3(batadv0) entered disabled state [ 83.981597][ T6050] batadv0: entered allmulticast mode [ 83.998849][ T6050] batadv0: entered promiscuous mode [ 84.031834][ T6050] bridge0: port 3(batadv0) entered blocking state [ 84.038657][ T6050] bridge0: port 3(batadv0) entered forwarding state [ 84.373191][ T6045] netlink: zone id is out of range [ 84.463308][ T3433] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 84.472912][ T3433] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 85.061352][ T6054] sd 0:0:1:0: PR command failed: 1026 [ 85.075166][ T6054] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 85.081926][ T6054] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 88.029551][ T6102] netlink: 32 bytes leftover after parsing attributes in process `syz.2.48'. [ 89.442714][ T6106] netlink: 28 bytes leftover after parsing attributes in process `syz.3.49'. [ 89.567698][ T6106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.575424][ T6106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.663358][ T6106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.671005][ T6106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.693742][ T6112] process 'syz.2.50' launched ':,' with NULL argv: empty string added [ 91.469070][ T6141] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.347057][ T6171] cifs: Unknown parameter 'à' [ 98.772782][ T6250] zero sized request [ 99.004535][ T6252] HfR: entered promiscuous mode [ 99.021576][ T6252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.82'. [ 99.056165][ T6252] HfR: left promiscuous mode [ 99.450374][ T6266] netlink: 28 bytes leftover after parsing attributes in process `syz.3.85'. [ 103.103240][ T6305] netlink: 28 bytes leftover after parsing attributes in process `syz.2.94'. [ 103.256469][ T6305] team0: Port device team_slave_0 removed [ 104.985214][ T6344] syz.2.102 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 106.415542][ T6367] : Can't lookup blockdev [ 107.533470][ T6370] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 110.665711][ T6401] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 110.725098][ T6401] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 111.600192][ T6414] Invalid ELF header magic: != ELF [ 113.334303][ T29] audit: type=1807 audit(4294967366.455:3): UNKNOWN=§ÖÉìÓ res=0 [ 113.343369][ T6457] ima: policy update failed [ 113.353332][ T29] audit: type=1802 audit(4294967366.455:4): pid=6458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.125" res=0 errno=0 [ 113.420166][ T29] audit: type=1802 audit(4294967366.475:5): pid=6457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.125" res=0 errno=0 [ 113.493560][ T6463] device-mapper: ioctl: Unable to rename non-existent device, to „ [ 113.926123][ T6476] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ syzkaller syzkaller login: [ 114.236520][ T6486] syz.2.131 uses obsolete (PF_INET,SOCK_PACKET) [ 115.007772][ T6444] kexec: Could not allocate control_code_buffer [ 115.501165][ T6496] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 115.519661][ T6496] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 115.538952][ T6496] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 115.550207][ T6496] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 115.565185][ T6496] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 115.592327][ T6496] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 115.605960][ T6496] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 115.615597][ T6496] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 115.636869][ T6496] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 115.661457][ T6496] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 115.676052][ T6496] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 115.715581][ T6496] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 116.420814][ T6544] netlink: 326 bytes leftover after parsing attributes in process `syz.2.144'. [ 116.882902][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.956408][ T6558] netlink: 338 bytes leftover after parsing attributes in process `syz.1.148'. [ 117.024155][ T6562] netlink: 338 bytes leftover after parsing attributes in process `syz.1.148'. [ 117.034658][ T6558] bridge0: port 3(batadv0) entered disabled state [ 117.041412][ T6558] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.049551][ T6558] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.605095][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.675162][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 117.681250][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.348882][ T5143] Bluetooth: hci0: command 0x0c1a tx timeout [ 119.676090][ T5143] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.751708][ T6582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.154'. [ 119.765305][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.771471][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.928321][ T6582] netdevsim netdevsim1 netdevsim2: entered allmulticast mode                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                syzkaller syzkaller login: [ 195.518028][ T7792] sd 0:0:1:0: PR command failed: 1026 [ 195.568847][ T7792] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 195.634032][ T7792] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 196.581310][ T7813] tipc: Started in network mode [ 196.595028][ T7813] tipc: Node identity ee00, cluster identity 4711 [ 196.623297][ T7813] tipc: Node number set to 60928 [ 196.711285][ T7814] Invalid ELF header magic: != ELF [ 196.928557][ T7753] kexec: Could not allocate control_code_buffer [ 198.958883][ T7858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.433'. [ 199.466259][ T7891] capability: warning: `syz.2.441' uses 32-bit capabilities (legacy support in use) [ 199.683038][ T7896] Invalid ELF header magic: != ELF [ 201.571963][ T7942] [ 201.574544][ T7942] ====================================================== [ 201.582264][ T7942] WARNING: possible circular locking dependency detected [ 201.589990][ T7942] 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 Not tainted [ 201.597806][ T7942] ------------------------------------------------------ [ 201.605522][ T7942] syz.0.451/7942 is trying to acquire lock: [ 201.611995][ T7942] ffff888142ba00a8 (&q->q_usage_counter(io)){++++}-{0:0}, at: submit_bio_noacct_nocheck+0x892/0xd70 [ 201.623901][ T7942] [ 201.623901][ T7942] but task is already holding lock: [ 201.631994][ T7942] ffff8880234814c0 (mapping.invalidate_lock#2){.+.+}-{4:4}, at: page_cache_ra_unbounded+0x173/0x750 [ 201.644019][ T7942] [ 201.644019][ T7942] which lock already depends on the new lock. [ 201.644019][ T7942] [ 201.655458][ T7942] [ 201.655458][ T7942] the existing dependency chain (in reverse order) is: [ 201.665368][ T7942] [ 201.665368][ T7942] -> #4 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 201.674759][ T7942] down_read+0x9a/0x330 [ 201.679926][ T7942] filemap_fault+0x2e0/0x2820 [ 201.685668][ T7942] __do_fault+0x10a/0x490 [ 201.691008][ T7942] do_pte_missing+0xebd/0x3e00 [ 201.696834][ T7942] __handle_mm_fault+0x103c/0x2a40 [ 201.703042][ T7942] handle_mm_fault+0x3fa/0xaa0 [ 201.708865][ T7942] __get_user_pages+0x8d9/0x3b50 [ 201.714878][ T7942] populate_vma_page_range+0x27f/0x3a0 [ 201.721472][ T7942] __mm_populate+0x1d6/0x380 [ 201.727113][ T7942] vm_mmap_pgoff+0x293/0x360 [ 201.732756][ T7942] ksys_mmap_pgoff+0x32c/0x5c0 [ 201.738587][ T7942] __x64_sys_mmap+0x125/0x190 [ 201.744319][ T7942] do_syscall_64+0xcd/0x250 [ 201.749970][ T7942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.757053][ T7942] [ 201.757053][ T7942] -> #3 (&mm->mmap_lock){++++}-{4:4}: [ 201.765385][ T7942] __might_fault+0x11b/0x190 [ 201.771135][ T7942] _copy_from_user+0x29/0xd0 [ 201.776787][ T7942] __blk_trace_setup+0xa8/0x180 [ 201.782716][ T7942] blk_trace_ioctl+0x163/0x290 [ 201.788561][ T7942] blkdev_ioctl+0x106/0x670 [ 201.794106][ T7942] __x64_sys_ioctl+0x190/0x200 [ 201.799914][ T7942] do_syscall_64+0xcd/0x250 [ 201.805439][ T7942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.812490][ T7942] [ 201.812490][ T7942] -> #2 (&q->debugfs_mutex){+.+.}-{4:4}: [ 201.821069][ T7942] __mutex_lock+0x19b/0xa60 [ 201.826590][ T7942] blk_register_queue+0x13c/0x4f0 [ 201.832674][ T7942] add_disk_fwnode+0x785/0x1300 [ 201.838563][ T7942] brd_alloc.isra.0+0x50a/0x7c0 [ 201.844468][ T7942] brd_init+0x12b/0x1d0 [ 201.849619][ T7942] do_one_initcall+0x128/0x630 [ 201.855423][ T7942] kernel_init_freeable+0x58f/0x8b0 [ 201.861720][ T7942] kernel_init+0x1c/0x2b0 [ 201.867044][ T7942] ret_from_fork+0x45/0x80 [ 201.872466][ T7942] ret_from_fork_asm+0x1a/0x30 [ 201.878294][ T7942] [ 201.878294][ T7942] -> #1 (&q->sysfs_lock){+.+.}-{4:4}: [ 201.886592][ T7942] __mutex_lock+0x19b/0xa60 [ 201.892172][ T7942] queue_attr_store+0xe2/0x170 [ 201.897989][ T7942] sysfs_kf_write+0x117/0x170 [ 201.903691][ T7942] kernfs_fop_write_iter+0x33d/0x500 [ 201.910062][ T7942] vfs_write+0x5ae/0x1150 [ 201.915405][ T7942] ksys_write+0x12b/0x250 [ 201.920752][ T7942] do_syscall_64+0xcd/0x250 [ 201.926267][ T7942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.933308][ T7942] [ 201.933308][ T7942] -> #0 (&q->q_usage_counter(io)){++++}-{0:0}: [ 201.942456][ T7942] __lock_acquire+0x249e/0x3c40 [ 201.948348][ T7942] lock_acquire.part.0+0x11b/0x380 [ 201.954552][ T7942] __submit_bio+0x49c/0x540 [ 201.960070][ T7942] submit_bio_noacct_nocheck+0x892/0xd70 [ 201.966847][ T7942] submit_bio_noacct+0x93a/0x1e20 [ 201.972944][ T7942] mpage_readahead+0x41d/0x590 [ 201.978755][ T7942] read_pages+0x1a8/0xdc0 [ 201.984080][ T7942] page_cache_ra_unbounded+0x3dc/0x750 [ 201.990640][ T7942] page_cache_ra_order+0x8f2/0xc80 [ 201.996818][ T7942] page_cache_sync_ra+0x4b4/0x9c0 [ 202.002897][ T7942] filemap_get_pages+0xd7b/0x1be0 [ 202.008984][ T7942] filemap_splice_read+0x5cc/0xd00 [ 202.015168][ T7942] do_splice_read+0x282/0x370 [ 202.020869][ T7942] splice_file_to_pipe+0x109/0x120 [ 202.027049][ T7942] do_sendfile+0x3fd/0xe30 [ 202.032462][ T7942] __x64_sys_sendfile64+0x1da/0x220 [ 202.038736][ T7942] do_syscall_64+0xcd/0x250 [ 202.044248][ T7942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.051289][ T7942] [ 202.051289][ T7942] other info that might help us debug this: [ 202.051289][ T7942] [ 202.062518][ T7942] Chain exists of: [ 202.062518][ T7942] &q->q_usage_counter(io) --> &mm->mmap_lock --> mapping.invalidate_lock#2 [ 202.062518][ T7942] [ 202.078574][ T7942] Possible unsafe locking scenario: [ 202.078574][ T7942] [ 202.086747][ T7942] CPU0 CPU1 [ 202.092624][ T7942] ---- ---- [ 202.098500][ T7942] rlock(mapping.invalidate_lock#2); [ 202.104399][ T7942] lock(&mm->mmap_lock); [ 202.111931][ T7942] lock(mapping.invalidate_lock#2); [ 202.120502][ T7942] rlock(&q->q_usage_counter(io)); [ 202.126206][ T7942] [ 202.126206][ T7942] *** DEADLOCK *** [ 202.126206][ T7942] [ 202.135156][ T7942] 2 locks held by syz.0.451/7942: [ 202.140689][ T7942] #0: ffff88803064ac68 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 202.150260][ T7942] #1: ffff8880234814c0 (mapping.invalidate_lock#2){.+.+}-{4:4}, at: page_cache_ra_unbounded+0x173/0x750 [ 202.162585][ T7942] [ 202.162585][ T7942] stack backtrace: [ 202.169049][ T7942] CPU: 0 UID: 0 PID: 7942 Comm: syz.0.451 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 [ 202.180688][ T7942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 202.191739][ T7942] Call Trace: [ 202.195335][ T7942] [ 202.198554][ T7942] dump_stack_lvl+0x116/0x1f0 [ 202.203689][ T7942] print_circular_bug+0x41c/0x610 [ 202.209208][ T7942] check_noncircular+0x31a/0x400 [ 202.214655][ T7942] ? __pfx_check_noncircular+0x10/0x10 [ 202.220670][ T7942] ? __bfs+0x2fa/0x670 [ 202.225157][ T7942] ? __pfx_hlock_conflict+0x10/0x10 [ 202.230887][ T7942] ? lockdep_lock+0xc6/0x200 [ 202.235931][ T7942] ? __pfx_lockdep_lock+0x10/0x10 [ 202.241443][ T7942] __lock_acquire+0x249e/0x3c40 [ 202.246768][ T7942] ? __pfx___lock_acquire+0x10/0x10 [ 202.252491][ T7942] lock_acquire.part.0+0x11b/0x380 [ 202.258118][ T7942] ? submit_bio_noacct_nocheck+0x892/0xd70 [ 202.264516][ T7942] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 202.270695][ T7942] ? rcu_is_watching+0x12/0xc0 [ 202.275926][ T7942] ? trace_lock_acquire+0x14e/0x1f0 [ 202.281642][ T7942] ? submit_bio_noacct_nocheck+0x892/0xd70 [ 202.288031][ T7942] ? lock_acquire+0x2f/0xb0 [ 202.292975][ T7942] ? submit_bio_noacct_nocheck+0x892/0xd70 [ 202.299357][ T7942] __submit_bio+0x49c/0x540 [ 202.304300][ T7942] ? submit_bio_noacct_nocheck+0x892/0xd70 [ 202.310677][ T7942] ? __pfx___submit_bio+0x10/0x10 [ 202.316215][ T7942] ? ktime_get+0x206/0x300 [ 202.321065][ T7942] ? lockdep_hardirqs_on+0x7c/0x110 [ 202.326791][ T7942] ? submit_bio_noacct_nocheck+0x892/0xd70 [ 202.333175][ T7942] submit_bio_noacct_nocheck+0x892/0xd70 [ 202.339378][ T7942] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 202.346150][ T7942] ? __pfx___might_resched+0x10/0x10 [ 202.351948][ T7942] ? __pfx_xa_load+0x10/0x10 [ 202.356989][ T7942] submit_bio_noacct+0x93a/0x1e20 [ 202.362513][ T7942] mpage_readahead+0x41d/0x590 [ 202.367742][ T7942] ? __pfx_mpage_readahead+0x10/0x10 [ 202.373546][ T7942] ? __pfx_blkdev_get_block+0x10/0x10 [ 202.379447][ T7942] ? __folio_batch_add_and_move+0x5f3/0xc60 [ 202.385925][ T7942] ? __pfx_lock_release+0x10/0x10 [ 202.391434][ T7942] ? __pfx_blkdev_readahead+0x10/0x10 [ 202.397339][ T7942] read_pages+0x1a8/0xdc0 [ 202.402088][ T7942] ? __folio_batch_add_and_move+0x689/0xc60 [ 202.408558][ T7942] ? __folio_batch_add_and_move+0x612/0xc60 [ 202.415030][ T7942] ? __pfx_read_pages+0x10/0x10 [ 202.420359][ T7942] ? find_held_lock+0x2d/0x110 [ 202.425604][ T7942] page_cache_ra_unbounded+0x3dc/0x750 [ 202.431596][ T7942] page_cache_ra_order+0x8f2/0xc80 [ 202.437206][ T7942] page_cache_sync_ra+0x4b4/0x9c0 [ 202.442718][ T7942] filemap_get_pages+0xd7b/0x1be0 [ 202.448236][ T7942] ? hlock_class+0x4e/0x130 [ 202.453182][ T7942] ? __pfx_filemap_get_pages+0x10/0x10 [ 202.459197][ T7942] ? __pfx___might_resched+0x10/0x10 [ 202.465011][ T7942] filemap_splice_read+0x5cc/0xd00 [ 202.470640][ T7942] ? find_held_lock+0x2d/0x110 [ 202.475870][ T7942] ? __pfx_filemap_splice_read+0x10/0x10 [ 202.482066][ T7942] ? __pfx___mutex_trylock_common+0x10/0x10 [ 202.488560][ T7942] ? pipe_lock+0x64/0x80 [ 202.493253][ T7942] ? trace_lock_acquire+0x14e/0x1f0 [ 202.498958][ T7942] ? lock_acquire+0x2f/0xb0 [ 202.503917][ T7942] ? __fget_files+0x40/0x3a0 [ 202.508971][ T7942] ? __pfx_filemap_splice_read+0x10/0x10 [ 202.515166][ T7942] do_splice_read+0x282/0x370 [ 202.520293][ T7942] splice_file_to_pipe+0x109/0x120 [ 202.525915][ T7942] do_sendfile+0x3fd/0xe30 [ 202.530772][ T7942] ? __pfx_do_sendfile+0x10/0x10 [ 202.536202][ T7942] ? __x64_sys_futex+0x1e1/0x4c0 [ 202.541622][ T7942] ? __x64_sys_futex+0x1ea/0x4c0 [ 202.547039][ T7942] __x64_sys_sendfile64+0x1da/0x220 [ 202.552744][ T7942] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 202.559036][ T7942] do_syscall_64+0xcd/0x250 [ 202.563998][ T7942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.570468][ T7942] RIP: 0033:0x7feca4b85d29 [ 202.575305][ T7942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.596864][ T7942] RSP: 002b:00007feca596e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 202.606119][ T7942] RAX: ffffffffffffffda RBX: 00007feca4d75fa0 RCX: 00007feca4b85d29 [ 202.614879][ T7942] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 202.623629][ T7942] RBP: 00007feca4c01b08 R08: 0000000000000000 R09: 0000000000000000 [ 202.632381][ T7942] R10: 0000000000100000 R11: 0000000000000246 R12: 0000000000000000 [ 202.641134][ T7942] R13: 0000000000000000 R14: 00007feca4d75fa0 R15: 00007fff073171c8 [ 202.649895][ T7942] [ 202.675323][ T7947] futex_wake_op: syz.1.452 tries to shift op by 64; fix this program