last executing test programs: 6m29.080226041s ago: executing program 1 (id=110): r0 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x20080, 0x0) close_range$auto(r0, 0xffffffffffffffff, 0x6a0) r1 = pidfd_open$auto(0xffffffffffffffff, 0x818) r2 = clone$auto(0x7, 0x8, &(0x7f0000000040)=0xb491, &(0x7f0000000080)=0x4, 0x2) r3 = socket(0x1a, 0x5, 0x3) getpeername$auto(r3, &(0x7f00000000c0)=@isdn={0x22, 0x3, 0x8, 0x8, 0x9}, &(0x7f0000000100)=0xd035) ioctl$auto_TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)=0x5) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_SCAN(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200440c0}, 0x0) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r3, &(0x7f00000016c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001680)={&(0x7f0000000340)={0x1340, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MACSEC_ATTR_SA_CONFIG={0x11b7, 0x3, 0x0, 0x1, [@generic="d6238ead89a11724656e0b392e66279c8d717ae7b43d948724bfadc101a9e44077ae43e7a493494e2dab94e273f77bded476e4bba8e5e5ea93709d817c85cbbbe3d06e3f16a358d64718ccbaa92559a36b9df1ffde4228b99b0ebf2b244dac63e928ce7a8f0907384c4aa349d89257511e4784073455dc1141207b11fd442860f1add011683a607dc9f6420c499d40d5358d603359b29dff6af80d32a26192186b3fbb79c918abe4b31d67da472b7801006304319ab44f7e505ba80fa8f278ce3e663c93d9e3145825ce6cba8d57b8", @typed={0x8, 0x11d, 0x0, 0x0, @fd=r1}, @generic="4cebb7de755d0e0ebd01834e3feca2f3a34ab8b25d2fa5a0e7614b98", @nested={0x1c, 0x145, 0x0, 0x1, [@typed={0x8, 0x103, 0x0, 0x0, @u32=0x1}, @nested={0x4, 0x144}, @typed={0xc, 0xe6, 0x0, 0x0, @str='nl80211\x00'}]}, @typed={0x8, 0x109, 0x0, 0x0, @u32=0x10001}, @typed={0x4, 0xb9}, @nested={0x1096, 0x47, 0x0, 0x1, [@generic="2f46149435962197aba16a7bc06d5d1afb42da1cdf2bbf16ebd1785ac2c788c5f3304fe170fc2e395377107482c7eef7f614c4020d88c2efa0b8b8a7ea575b2bcac981d98def32a1711bc72f15b7c035da6435ebf4803c34b25687542d16904072a8083e888808b4f240ce9618e0d7a4dfe7b59e5343d394529a57efe09697bde6a0b80727e1ad5cb522c36e1d6030ebf333bfef81bfd80f6dc7cdeaf8ad87726726d7df21541628697dffd095afa2dce86b857388eb333ef0de0ad422489ae0743ce52d131a9337620fa2d3481d868460cc3457116ea38e744a5723663410f57ccc58660df7332cb38d86f0398dbaa61b8aa5f5d297e709deb4ddb1a4a253215b4b4ccc9e91acf9740fb74419f340f46a966db121a711084be936f29f801b1f1ba5271a938e6fa7bb7f1ac6886d5c6b39ebac2db5e6e1eae1385dfa08f2646f737ce080e5ddf7020544108fee032416d5f02225452be03280b34481ca2376eb59271099d51d4eb6c4bb5dbfa078bad91804ff5a5cd00c0fe8481de0d7385be8a2240f15900114e5fc8dfbd4b9d7d8a30783e08d3cb541e1b568bfc2d9156d628e55c5d75bc07b51d88673b29e161561ba939ed8e0855848c21dcd7d20f058b184dbe453b2ee28c618d3f362f9f1b5546dccf5d3f94202128c2126f33b950a778a02bdf6e62dbb8e4552c0b53175f11178ca0b4408019a7de465ebb696da751cf2b4735f340c443e7dd7b6e35b4fe7ea4caee2ea8a48d9c06d689566e173ce8330c92c7a525479ab6a1f0d9f174ba4463c4dfa72baca2c37d9cbe08d6e37c4401627b6c061503100cb76d44adb36b2f71a70444e9e32c865a225f796c4a93e545cea8457bb66c28cd4eb2f05ef283e722e3344f0c595343a883c162087293dad0967e66f578b0a6087f8bd9fa7c62f52fd67261c9e53f0b49eb534e52c1503a36c885d6e7c6f57b2fd7d98d57a994b48c6c441ba5897f52da85fdaa0c92e56870ac3d12660e8394b8991b4e55ef79537983a79379685837b616fc3d4f990af9bf425d31db5a79fb8344f8f44536b81feab49f23eb5be3c2856123db863b9e7593750aa2d981f2904fbe436806539b75d887727fc4b674a341d87acd92cf52f5b2732dcf5051e7f3ccf103cde8467f72e5064213de9f5e2edf6c24273d32740201394b30869edf7dfc560bb1a1b28dddfcbbc1c8857495910b4a92778ed2e570d42673ce3df4a2c3d74596a1089049da9eac99ba5ffcd6e0e750addcf850b475918554dd77f343cefbaa3029e8de3957798b6959b563875ec98e4f3c6920c36a3cedee70cfa9555f6f8af4523e8502bd8938fada29a5da1d76642ff63f8f084a470d75d16d7a64eb9e8061e7b1883076e8c091d2df76df82294a7728c1dbae0375ca84f0938aa6b7f085c437dabd234b61fd5b20fd2f6885421f412685ac1ce105370214dff301015aecac5dbce781aa1ecd5288ab3f167ec22c9625671bdea3b396ccbd9ea732e630810eaa5cae14a9c271c06d53808300c5df60478748fdf82310e5a076ba4842740b67774e8c539b9ea1fd9bb09046bdc45b01652f49145d0933f1b51959c87d7e76b8c83c7d418a4bc2552c72bb90a99a60ac04b845888cd731744eefa7878d92e82a9f51a295283a613c808a2ab6c16bb9a3170d55123ab9e4f76f6eb873941626d2fcefd44035013122d853ec2faf81bf04509cc27a588c318e769095ce976c29547ee8b3763b3d8b4c822ab0be1d7f5ff26a5a5563111d6727974b801cd7f1b524719524d0cde9e83c5ee5c295f09353d427092ae75a13f7d432f7f29a986d2b9c98d01a50a95d4942b79e5f45db875896a8e0925002465bdfc8973ed3df17ed6aec04e06f58375b2a4625f6dee90d2cce5e436797d3ec2fb39bb7cd8c0655cec3a57e3f58d8acc234d10c6a7ccdb3a7d6fdb2dd01e7009954c72da330966c07b317c8babefcd48bb3b66b8e0d1a45f9344b979f7303fd7981b57e5abf5d9aae2e845b27c87d83194542de4dc666e9b70f67d1c5b4a65175a1b32f5998b317676b44c99b331ef67bad7cd404597eeea89e51cfc555246b850f60ccf6b006f518601cf0d6ad08f515ebee636786b5e80a065ccfad3907b09268c4756e8fb9c7bf89eb4893acecac76c0ecfad2eed66640e18d92588f1dabc8690bf84b21f58b97a602bc0bd870931ed1fdd8c21010fc8d11cc27e864a7a6d31ab022034ae46be9304831110948c2e82ebf3f66b0fd198f062cc7a2e3e522cc5bcdd0dcaedf7ed164991b66b309d14750a0cb2052de1596f559519b205e0fbed714d40d7bd7ba5ff583d5348720a46321fff63421f2b2f22d2a23976e72839139425d9e743d9b54a390e9bc394585cde6e546015b853cfae5a5cd491feb9e78c9bbfd16904a62513e5df4255143584f01624376175d1e28dc9a9ddde84c42e830c6c6ac71d7f59770dadf115f90e6c0a1822c5da05a67912d18628963743a6964cb85faf5199e12a957ff64c56378ed12e2ef3c2feb636ac687406ade66c193d63fa57e67050d393dd151d29d904ede90ccf827faa3b48fe842d5366464a221856293a7697c4a50fc0a8f9e139222f3553560e020ba346e539a9da43226affa7f7a3f5c4ea2a23df0ab51a860cddd5f1b419066cd423352f86db3f2c0c6f1a57a58a365b8cff9b22fc563a2347da75266656429e8f3205108e6263536dd7c742bc93eca1349e02dee220a82ffa5ddbdd75f493c87715a59a2e7088180256539699eb2c217a143f0a063e52621ccadc349c62679e443e2494ee12af60c61ecad162f15740c8354c13095555ccaccc8069eac54c3b6c7c139d3086a42255d1a78762fdcdbbb3af8962578402af6f69d8fbc33095c51eed0ad8a7b1db40b16e91aa0424c87ef4752debf90227379c4e27f00ba340efd45adab8b0d96a6f709155e3f6db3a82eefcc149ce929724f597a9e0ff8da1a6d418640adcba7b895d4249bc7daa3e099e869be499c2e4a80dead70d77a4d2e32a4e393cb8303d0b61c96365b138cc26c48d9e965b4799c7363e5c3a3531ab376b54d1b8e47add849eb40b2028878bf0e54ec60994a073f7e09b5ab236b3fffc72cc8e64ab5d4ee681262297ba82be81bf642cee2be5dbb8b516cc5ea24cf05902d484959f1ff1584217b84e81dd39251aea3e7dd2425b216b0c50ead1c633776bf8571eb643cb3cf5e5df148fc4ac8f1521c64caccb49387ab1af15dbc213860e835ee4be2b16006856f673bb9599996c4300efb7ea07ef75365fa7cf3b863d4fd702f695d7e1acfccad1335d756a5d6f2dd2e765a1ef647edc9b6d06bcb53f28670e93cff628cf679c2ef5995e3df240b643f98ad306d2c0ec1478eb706d3dc0d53204589f6fca1426273a08cf8a4233fde21651d65a17104fb36f3533b777610d8c22c3aeaddf125856b36370a742fc10649160dd5c17a7ceea5f77368996942b3300b36ee39562df4351562b77e92796ac991ac5e45bc45718d6b1c1ef93a4f594b2ca6b11e828cf6e71e8d8a77c599ef680ecda423932b83e1fa5c37cc9571ffbccdf3595c8f9334f0d7dbe6867156dd63a3e5e72c599d0c35508238c24a5babcf5bd35e44c8fce47490108e38e9b4e8e6422118d32cb458b93d52334ded890d7ef02674bcd0e4007c298277c4e729cea0c4ceaa38d787c33bcf8a9b1d7d982cb026d0ac444362663fd6bd47769eeb2c96617d2a697394098f2262e245be04a8eeaab6514b8405296189cb3ef61b2edc02c0780d60c193c1733dd48be5e9d0db692f0bc46caa86632a94b6fb6a67323575bb45bd2a377bb38564004167c5b601b414cdc67b959f18a6709b640271d300fccc29716f07f39edbbf6290ea23861d365c957d0452427bdc90f7de7b421428beffa643347268509a4a2931013d12a56dafbc95fe1ed3ed966a630b462171d298f6c522c756453e685c07cbadb34a4d281978d45f4ecbc687dd8c7a44c89d2a9e7da98ee99625b2cea96f161e6621fe32d83146ad04a83930d710f484ec9160daa315d88b6da5f2ad889cc9ee746cabba050172699725891c380a539c6f8a0cf78ceb7423ef6e63c3fc07e5a86ed4c9688912dd30eee2fb35487c0c8909ee13946d5b35589ee9ffa655422f03f38b5e45503e82cd2d6eb6f74a947a52d8c6ff41c34df21c4a744d3396501aedf0d82b62752dd2a3a40a5b1d2b57df756339e5aa51453ae28a56e6975d776f300fc5034676c32622b17a773f58b806b41a01b77243c236ee194d897f2fdc6f548c1ae654e9ea84345a07d386d144ad60c2335bcb7b857e007afd89d509d2fc7488d4b1ddcfe50e88f55a8a53db03766e271e13dec477be8094b0493193ec75b49411e857453ec811769d1cc14c23d6ebb8458a0cf08c64d9c8988a239d1edd8a06ec4e3eddfc72682e9296ca796f134b4551c04faffc2ddc06936ae99e60ccadf81b5958caeb203d20d3e2f3d47a30df5d47bb1b89a1f609e5479c38977bb9fa02076d03cad208163caf561928cd07163dc23c1303fa775a54f0aa7681e5a1f7fb057726126f82457eb0a423f0ddd6a9d91d7e8cdf9f874647ad997d801d9d9d7a1c289060b280bef7a3c860529c7d8a5edbd7c3ce7423e7c672edb503d49df094f56ad68e182ee1747c781e261b46c696b18091aa9704bbb00d9d479712bc7316c3e77099320113af83a3fa706de57e4789d18e074154168c842639b66bfda9f434447074417c10d3108cea297267c7c8ccc0e7fd88634a89c73756fa8d35040e6db339b9967a83bda62ef49698550f0be975450400c3d8ad5cfae2c2451cc6958289e9c8845b7c97cd1b386618a5953b12b9c70259c4c662d3928c52fa9896f14b8a934cd04f0ab22e7863498c00a69b62e20029a36d65bc3f4ceea5f2bb8b72d97c411476640e8fde0cd270e572117207fd0401869371a3d274a02be676458ea27607afbcc0662942e2d1f99c96978b9db085eb960b2fa8f75a2db281906115ad2127f2414151567d7a38498e3776b784373e2480247955b1b00e7e410937aeb223f5bf7d4ab8c61b1ab89f76982fbd0c7e48b5c4248b7a861b0171efade5334ad058413d74058103b37ee1cd2017ababb69832bb3f956e5c8facc698d6e3d2bf11bac271ccbd426d4e08aba7edf7476a292ecf27a6f571378b28d7830cddd3cdc7352a0299b92327a0c5f648b343e4a9615e518704f02ce10ebf24ebcd49a72369ff05ca6b3b537fa4eeb039e640ec8b488b1fb1aa17933c52157227161782d9a1c00c9c0b8c0842f9c65dc93e00dd43291c4d42526a91eab7ab333d836a3ccb60b7ef31c3c44596d6492a5cb5c38d39be0fb995c6a5bdc57b7a5db38698aee8917b67e3ac47cf0f0082fab997de2351c0252269ab9651f0e3fc1dfb76328c3eba59ada6c5a32a09d5a0dc54fad2452d4ef39546c382565f989ac63d04124bd59cdefb46731c3f32f67d9def69fcc10b0e9edc75253a887eb8c7438fbdb50d168234b0519cb401e67ab5c80d6f6da56340bc41d73d7ccadfa4d52b682b04cb3edab260c04b46791521fb96bcf15467b54bde867e19163d49616731f3e2a7783929d59fdda7e800b9cb38318ca39606780b57877914f4f29ad6af6be54de4ae9fc502119a3557bdb230e8add72611f0f82ea5c0c074b8e8f325bc1b7a8fd393673ce19098beea37bd232db3e8d2ce7ce6926301a3f826a7e8133933b2f3b71f17cd0adff89078d42628c5066e5a120b90f8cb1ec55958771bedb675b6351aa7af92e4ab96683b745ec", @typed={0x4, 0x3f}, @generic="29a7974cb34feb055bcfcc5493182375cc48faffc6b8874f6662c038950a8ff3e508fa9e23300e01dc67ba7f2a702558b0675494454a6c4e4caf265b1f4f906c1351e2fc96900299c800387e598345bb397d81149779086955bb5cc842693eb34a2349f380d9d1c0a839a19f0c84324520b9e433ec", @generic="f630644905681c108708645182", @typed={0xc, 0x40, 0x0, 0x0, @u64=0x1}]}]}, @MACSEC_ATTR_OFFLOAD={0x10c, 0x9, 0x0, 0x1, [@nested={0x100, 0x108, 0x0, 0x1, [@generic="92c04cebe648cf4b58e68a598dbdb366c5809812279e1e6e5a83d7cef5b964cc6d3631a03d0426792dcbc7a0023a5264baaec2c75ecfbad5105672a5151ab60d24b7fb3b7125dd0cbe026fe010a262bfa0692650a49c39b3111fda4057e005bd7d45e4d2627a332caee94770b6ab240c38f35bdf573784177c37c214e352b140c5b52970c83d17a17657a9ba4187c8bfec50dcbbd82b4039df25d8a8", @typed={0x4, 0x133}, @generic="05e615fd5d3adbe1", @typed={0x14, 0x58, 0x0, 0x0, @ipv6=@private2}, @generic="80bd2e21718a4c56381ae2d8374fccf562e8f306625e995c474a516b0f136f725beea626ea7c4299a2f64750", @typed={0x14, 0xe, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, @typed={0x8, 0xa0, 0x0, 0x0, @fd=r1}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r5}, @MACSEC_ATTR_OFFLOAD={0x5, 0x9, 0x0, 0x1, [@generic='v']}, @MACSEC_ATTR_RXSC_CONFIG={0x58, 0x2, 0x0, 0x1, [@typed={0x8, 0x46, 0x0, 0x0, @u32=0x2}, @generic="12cfdb5ff874a898ab26c78e5e838b75959bdef65238720660e32c5e5cabd5613851b9751f4353f603d9ae724efef90eb05d9fd9fdff104710c9698c579b54108da820197a1b423745eb2fbd"]}]}, 0x1340}, 0x1, 0x0, 0x0, 0xc005}, 0x8000) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000001700)='/dev/audio\x00', 0x4a000, 0x0) ftruncate$auto(r3, 0x200) truncate$auto(&(0x7f0000001740)='./file0\x00', 0xb410) ioctl$auto_SNAPSHOT_POWER_OFF(r1, 0xc0045878, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001780), r7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000017c0)='/proc/self/net/arp\x00', 0x8200, 0x0) r8 = open$auto(&(0x7f0000001800)='./file0\x00', 0xfffffff7, 0x9) write$auto_hwsim_fops_rx_rssi_(r8, &(0x7f0000001840)="b75b9656ef36b24df16e239ec283fa665336c4114bb17a147a9c43279ff339ca5464d9a3eaba37cf6b85116c0fe7aa4371c1e3f1272fb7c3f73b3c42dfd31bc7464144f3f192b1201c1b37f23b1534f01ef156e160e3bbfb53160fa2ce6f825ab2246acd24cea14e7589505dc85f1f6638ccbae657663b0ea27152623545a35b8ba0f84ef5485b0fcecfd54714673355f6487833d08bd2258e3f4696b8aab274a101e4b006ee1f46f6e9c24e323e865a0b967c737ccb2bea77240d920a4ce87ef57b6556cd81952abf139790d84d2e9446c1", 0xd2) write$auto_seq_oss_f_ops_seq_oss(r8, &(0x7f0000001940)="4cc50fceb101b7d69571dacd15855e83e09ae811a664b139e8ea6d874e7dae15c3b96cae3f376746d7fb5680774342a8ed8e0a198b84413a1801ab7601c8b2d020589503e6238d0cb5838e9960b4d0a67246e00188bff84125b32b3e7b343db39c5d649ccfcf654e5c5290d1912aaf1bb1994752bafab5759edd19600663ad0f2ac731f8e219717dde65fafb9246da25e1696b3ebe6b54e7b14c6080424da6", 0x9f) connect$auto(r0, &(0x7f0000001a00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x2) r9 = fcntl$auto(r3, 0x4, r2) sendmsg$auto_NL80211_CMD_ADD_TX_TS(r9, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x38, r4, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9fdad2c680223793f3fb70be1d28173f6feb9bb940a5249a"}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xda67}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4048014) mmap$auto(0x2, 0x0, 0xc637, 0xd5, r7, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r10, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b80)={0x98, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xbf}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x98ad}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x80}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x95}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x3}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4014}, 0x24000000) sendmsg$auto_NL80211_CMD_JOIN_MESH(r8, &(0x7f0000002180)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002140)={&(0x7f0000001d00)={0x40c, r4, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0xfb, 0x23, 0x0, 0x1, [@generic="91b56e60b2d300fc1066abdd43ecd5c981a9cf51db3e2f1fa6cb95ad941501d71985633755e499d948660d4817f1df286a008a121cab6bff79209e92c3f09d29fba285a27322d773d82fb7cef6aa2b9f072083dbdc2f0adf029bf9c6c07288e0d9a74b6a2a99e01e4629860e11e0b5b412afc2be6d6beafd12ac1b032b88f5ea6e2be0469a21530d85f670741aa9b7713642b33f617b857a57243d35fb65c957a168d6db728d5b56c2fe7124104d973888e7dd373b48f29c6c05e468f4fbf5b32536ed863fb476cba1b5a11793c13bf8e3c13cab842a82f411c8f3accbd10107eff2d33a350a31323bd158c7bf54ef47b615ab77768cf7"]}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x9d, 0xbb, "075a5b3beebe8107586867bd1e7aa3def1c809fa48aa3e07ac6ec698436ceb8c6cd70fd788fd137bb002450defddd45da986ad623036b9d5268c54c3700e08c8509a34b31bf98a80b76128072d0500a6151ca15e736aec1a21b59009f2b836f580f46d2781006a89849294ccc3a104ae0c07cd09f7fc848c0219955b6ee8e2eb532727336f49df900c303af4322a2b9fccc49f2febecd6df91"}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xffffffdc}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x37b}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x19c, 0x75, 0x0, 0x1, [@nested={0x195, 0x9c, 0x0, 0x1, [@nested={0x4, 0x3b}, @generic="c7011f21fecdabba83ae580aecc61cb6b8d60a0cb635edbcf1a78b62b074f8a44e9b9f69de0f9861806f37053ec65586cba875c90c72826d6a814b404107dad5002cc2dee8a1514e82a1e04ea0022a48745586544dbd110a91aa5a9824ff069acd3fadd1c0825b7c2029a5d2180d1db2779ed0a9efde3bb18f8341d8e069f94ce57b13173b444114626564bb689e44", @nested={0x4, 0x78}, @generic="f7b4cffc23ca4a7517f7d3dca8b8a4385f61713519b0e421536d2e516825db62fb69b600d3ca7c9127be82658bfc0ba95b93c5ee1b3cf5bf41b58d5ff9b7059d74c98585602f89e9922890a980828e560c51320cdbf4021d6379d6dff03ca8b70253b559009698578540265bb912a32771ae93f389150c6df98b001dd0ab1871bd8c2bd280c17dec78a0fc532211dd089836d94a0069c07f786f3df2fc935b00c5c6abdcf60d02955a5fa5a6c93ddcae0dbf3ef528b8910ed73fd4c155561a42b8cb5f0817", @generic="7f4eb515d5dd8c36c7fa479910afd8b0742fb65633d70453de767937f2bff0a5f4e729061038c635ffdf7b7f826d727633", @nested={0x4, 0x51}]}]}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_MLO_TTLM_ULINK={0x60, 0x149, "68fad922fe140a4e8cabfeb2283d35cfdf9f5d475189260477f57a9ed30a727f516eff2fac2148021ded2413d761936b0438dd5332aba1a881af480e902d007a05559db16a9293192d13165a1aad56e119e3c10b145ffd62e109d103"}, @NL80211_ATTR_FILS_ERP_RRK={0x40, 0xfc, "cbc6ce20b767e94c98599cd933bf4db43b59e562e0af95f02a284c432fbd623323a144f2730276833674e49e456b4425eeec2dc5997c6d6b28a70de6"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x40c}, 0x1, 0x0, 0x0, 0x28000004}, 0x14) listmount$auto(&(0x7f00000021c0)={0xffffff80, @raw=0x6e, 0x6, 0x2dcdc085, 0xfffffffffffffffb}, &(0x7f0000002200)=0x2, 0x7, 0xd) vmsplice$auto(r6, &(0x7f0000002280)={&(0x7f0000002240)="bdf5c4d1e61188ab6573ed2de851d6a34d2d28", 0xcfb}, 0x73, 0x9) 6m28.638292394s ago: executing program 1 (id=113): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) getsockopt$auto(0x6, 0x84, 0x6c, 0x0, &(0x7f00000000c0)=0x10000) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f00000020c0), 0x88840, 0x0) readv$auto(r1, &(0x7f0000003100)={0x0, 0x2}, 0xb4) ioctl$auto_PPPIOCGFLAGS(r0, 0x8004745a, 0x0) 6m28.18009024s ago: executing program 1 (id=115): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000006000700204c0000060007000080000008000200", @ANYRES32=r1, @ANYBLOB="0a0005000180c200000e00000a0001000180c2f7ff0000000a000100aaaaaaaaaa35000000000500bbbbbbbbbbbb000006000600050000002ffd04003d4b0000"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) r2 = socket(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000ffdbdf25"], 0x3c}}, 0x22008004) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) sysfs$auto(0x2, 0x10000000000048, 0x0) r6 = fsopen$auto(0x0, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) open(0x0, 0x12ba7e, 0x45) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0x4010ae67, r6) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x8, 0x1ff, r2, @relative_id=0x13, 0xe600}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'pim6reg\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080), 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="88010000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fddbdf25170000005c00018008000300000000c00800030007000000140002006e696376663000000000000000000000080003000800000008000100", @ANYRES32=0x0, @ANYBLOB='\b\a\x00\x00', @ANYRES32=0x0, @ANYBLOB="140002006e657464657673696d300000000000000800030008000000140001800800030035df000008000100", @ANYRES32=0x0, @ANYBLOB="60000180080003000900000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776731000000000000000000000000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d7265673000000000000000000008000300010000004c0001800800030008000000080003000400000008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="14000200766c616e3100000000000000000000001c00018008000100", @ANYBLOB="080003000100000008", @ANYRES32=0x0, @ANYBLOB="3c00018008000100", @ANYRES32=r1, @ANYBLOB="1d0002006d6163766c616e310000000000000000140002006248c023394bda1617319bf9a9617461647630000000000000000003d7000800", @ANYRES32=r8, @ANYBLOB], 0x188}, 0x1, 0x0, 0x0, 0x84}, 0xd0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x22, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) 6m27.186569694s ago: executing program 1 (id=118): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1d, 0x2, 0x6) r1 = socket(0xf, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) dup3$auto(0x8000000000000001, 0x5, 0x800000000) r4 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) statx$auto(r4, 0x0, 0x1fffc00, 0x5b6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r4, 0x0, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004) statx$auto(r4, 0x0, 0x40001005, 0xbc, 0x0) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, 0x0, 0x121c01, 0x0) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto(0x3, 0x5420, 0x38) modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94) shmctl$auto(0x1, 0x3, &(0x7f0000000580)={{0x4, 0x0, 0x0, 0xf2, 0x4, 0x3, 0x8}, 0x20000, 0x5, 0x5, 0xda, @inferred, @raw=0x401, 0x8000, 0x0, &(0x7f0000000500), &(0x7f0000000540)="a632ab8a6f4ebec6ea12e6e4c48eecb566"}) ioctl$auto(r3, 0x402c542a, 0x38) r5 = socket(0x15, 0x3, 0x0) sendmsg$auto(r0, &(0x7f0000000000)={&(0x7f00000000c0), 0x5, 0x0, 0x5, 0x0, 0x200, 0x4}, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3) sendmsg$auto_NL80211_CMD_SET_BSS(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=r6], 0x94}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000091) 6m25.770695807s ago: executing program 1 (id=124): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) r1 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim0/psample/enable\x00', 0x2, 0x0) write$auto_nsim_psample_enable_fops_psample(r1, 0x0, 0x0) r2 = socket(0xa, 0x5, 0x84) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000080), r2) sendmsg$auto_IPVS_CMD_GET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x24976ebdf0d66416, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x44000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) tkill$auto(0x1, 0x7) 6m23.327226334s ago: executing program 1 (id=128): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6nA6\x1a\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\xcf\x00'/236, 0x4, 0x0) mount_setattr$auto(0x5, 0x0, 0x8000, &(0x7f0000000640)={0x0, 0xf6, 0x100000}, 0x283) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/vendor\x00', 0x400, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) prctl$auto(0x29, 0x5, 0x0, 0x0, 0x0) 6m23.231339546s ago: executing program 32 (id=128): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6nA6\x1a\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\xcf\x00'/236, 0x4, 0x0) mount_setattr$auto(0x5, 0x0, 0x8000, &(0x7f0000000640)={0x0, 0xf6, 0x100000}, 0x283) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/vendor\x00', 0x400, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) prctl$auto(0x29, 0x5, 0x0, 0x0, 0x0) 2m16.640668745s ago: executing program 4 (id=1160): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd12/queue/iosched/fifo_batch\x00', 0xc2082, 0x0) ioctl$auto_LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x3, 0xdf, 0x400000009b7f, 0x2, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/ip6_tables_names\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x594c, 0x7) r1 = open(0x0, 0x0, 0x408) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x2d, 0xfffffffffffffffe, 0x0) mmap$auto(0x20000000ffff, 0x24, 0x7, 0xffffffffffff7fff, r1, 0x9) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x4100, 0x0) ioctl$auto_evdev_fops_evdev(r2, 0x40084503, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/028/001\x00', 0x202, 0x0) r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/32t\x00', 0x82000, 0x0) read$auto_mon_fops_text_t_mon_text(r3, 0x0, 0x60) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/demote_size\x00', 0x123902, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0x1f40) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000) r4 = io_uring_setup$auto(0x3ff, 0x0) r5 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon26\x00', 0x40000, 0x0) ioctl$auto_MON_IOCX_MFETCH(r5, 0xc0109207, 0x0) close_range$auto(r0, r4, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x7, 0x80802, 0x0) connect$auto(r1, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x1000000}, 0x55) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) 2m15.436279341s ago: executing program 4 (id=1165): mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x940, 0x1ffe0, 0x8003, 0x6, 0x6, 0x7, 0x5, 0x2, 0x9, 0x6, 0x9, 0x2, 0x3, 0x2, 0x7}, 0x1fe, 0x7) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="04150000", @ANYRES16=0x0, @ANYBLOB="000826bd7000fcdbdf25030000003e000400b70a00002c4207000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x20008044) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) sysfs$auto(0x2, 0x4, 0x0) fsopen$auto(0x0, 0x1) clone3$auto(&(0x7f0000000540)={0x100000001, 0x80, 0x6, 0x5, 0xfffffffffffffffb, 0x1, 0xffffffffffffffff, 0xe9b, 0x8, 0x214, 0x4}, 0x2) mmap$auto(0x4, 0x1000000000020009, 0x809, 0x19, 0x401, 0x401) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x1ac}}, 0x801) r1 = socket(0xa, 0x2, 0x3a) sendmsg$auto_SMC_NETLINK_ENABLE_HS_LIMITATION(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x4000008}, 0x4004000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000500), 0x109800, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000380)={0x0, &(0x7f0000000040)={0x77c1, 0x3, 0x1, @raw=0x401}}) r5 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000600), r3) sendmsg$auto_IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r5, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xfffff0a1}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040a0}, 0x20008015) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010001f0777597032c8f2e96097c08000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20040084) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) pipe$auto(0x0) recvfrom$auto(0x3, 0x0, 0x80000000002, 0x6, 0x0, 0x0) 2m14.645434387s ago: executing program 4 (id=1169): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000002c40)=0xf0) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x1e, 0x5}, 0x7) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x141000, 0x0) preadv$auto(0x40000000000003, 0x0, 0x6, 0x7fffffff, 0x5) write$auto(0x3, 0x0, 0xfffffdef) msgctl$auto(0x0, 0x3, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r1 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r2 = bpf$auto(0x6, &(0x7f00000001c0)=@test={r1, 0x10004, 0x0, 0x1000, 0x106, 0x0, 0x0, 0xfff, 0x10000, 0x9, 0x0, 0x4, 0x7, 0x2, 0xfffeffff}, 0x1) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYRES16=r2, @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c0001"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01035a0000000000000002"], 0x14}, 0x1, 0x0, 0x0, 0x604c837}, 0x4010) 2m14.254097277s ago: executing program 4 (id=1171): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000002c40)=0xf0) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x1e, 0x5}, 0x7) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x141000, 0x0) preadv$auto(0x40000000000003, 0x0, 0x6, 0x7fffffff, 0x5) write$auto(0x3, 0x0, 0xfffffdef) msgctl$auto(0x0, 0x3, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r1 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r2 = bpf$auto(0x6, &(0x7f00000001c0)=@test={r1, 0x10004, 0x0, 0x1000, 0x106, 0x0, 0x0, 0xfff, 0x10000, 0x9, 0x0, 0x4, 0x7, 0x2, 0xfffeffff}, 0x1) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYRES16=r2, @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c0001"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01035a0000000000000002"], 0x14}, 0x1, 0x0, 0x0, 0x604c837}, 0x4010) 2m13.365089747s ago: executing program 4 (id=1174): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) socket(0x15, 0x5, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x2003f0, 0x17) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x1, 0x0) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) (async) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) (async) tkill$auto(0x1, 0x7) (async) r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x1a1382, 0x0) writev$auto(r1, &(0x7f00000000c0)={&(0x7f0000000080), 0x101}, 0x101) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip_vti0/optimistic_dad\x00', 0x269040, 0x0) (async, rerun: 32) setsockopt$auto(0x3, 0x114, 0x6, 0x0, 0x2) (rerun: 32) r2 = socket(0x10, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) (async) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) socket(0xa, 0x2, 0x0) (async) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200, 0x0) sendmsg$auto_TIPC_NL_KEY_SET(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x280, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xf4, 0x3, 0x0, 0x1, [@generic="88bee99c3292e465250e87df9b1a86ff7a23b9ec25b0f5e3570f51961d4655a6681c8fd252051b7baa8d990d3de0b822c3959e0397da211940cac8b6f277e5d4e3e7986bc2b0366662a3be9c3fad6c28026f9b4b0f1ba560569ffd4c8fd5f5f02a3313f66fa2498b45650192b2e80aedeb17a1f61cd4b44c4b8d", @typed={0x4, 0xaa}, @typed={0x8, 0x43, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x40}}, @generic="fe901b88e82d586de5ae45a5d43f202bcc936ec29fb4ce8a8c6076e6f3934d7afd0fe29cbbd020efa794967b11fba02ca25b2784c23b134af4b5a5aec6bc6ef16b2ae6fdf1115870c63169a2fa98817188f31c392736a44167c0bed14c505cb4b0a76e30a68d3655b500"]}, @TIPC_NLA_NAME_TABLE={0x10, 0x8, 0x0, 0x1, [@typed={0x8, 0x84, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x4, 0x76}]}, @TIPC_NLA_PUBL={0x105, 0x3, 0x0, 0x1, [@typed={0x14, 0x12, 0x0, 0x0, @ipv6=@empty}, @nested={0xc, 0x95, 0x0, 0x1, [@typed={0x8, 0x27, 0x0, 0x0, @ipv4=@private=0xa010102}]}, @generic="12dbd9b0a2e939df2f51c550dfd30695b14c587dc100a9d9846406af446644d61eb4370c6706b0dd822b5840aefbcfa72f8a662df13c5eddf9658d1abbfe4c043c020f1afe5767d88fd9748db6d3c3011243ed0f12797c41c7953e7cfd290290a8e8f8dcdf4dce041d5594c4972507b838b16c682e797393c7d54fb5d350870cef0ff2410430da9b94d1413b384be701a3abd8363ca208e2c7ab6df5faac11215660c46c8b0753e812329e82515507a36b5fea8121a32c3e1b3b40bf890b0fdc214507587fea2d79995a30e42d5cd8b7cac1293e200d3ba64de1ec43d1", @typed={0x4, 0xa5}]}, @TIPC_NLA_UNSPEC={0x53, 0x0, "8c6c360e80d5be233eaf67bf5340a94843968c38803ef90ebea24af493318f837bf76882f5ef555adadf5e5e1db4bfb875e1f68159dacaf2c52ecf6537dd2aaa029ccf7829b6e643e5cf17ddeda93b"}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@typed={0x8, 0x19, 0x0, 0x0, @ipv4=@empty}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x4800}, 0x44890) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b000000", @ANYBLOB='_'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m12.58024109s ago: executing program 4 (id=1178): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xcb, 0x0, 0x4) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) mmap$auto(0x80000000000, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1700", @ANYBLOB="3323596501ff1a1e97aa585c47b6d4ec5102718be55db8f4c21af8fcbc5240d1818f0e86a30000140000000000937520250436b06544327128b2750308", @ANYRESOCT], 0x1ac}}, 0x4040011) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x5, &(0x7f00000002c0)={0x0, 0xda}, 0x4, 0x0, 0x0, 0x9}, 0x7}, 0xb6d1, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'pim6reg1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyy6\x00', 0x0, 0x0) ioctl$auto(r3, 0x80045439, 0xffffffffffffffff) r4 = socket(0x9, 0x80805, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) recvmmsg$auto(r4, 0x0, 0x10002, 0x1a000, 0x0) mkdir$auto(&(0x7f0000000240)='./file0\x00', 0x8001) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002800)={'dummy0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000004640), r2) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r5, &(0x7f0000004740)={0x0, 0x0, &(0x7f0000004700)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="a54928bd7000ffdbdf251a0000000c00018008000100", @ANYRES16=r6, @ANYBLOB="2f8d3d5b59ccfa4e76b84ff7d5f5e3c7"], 0x20}, 0x1, 0x0, 0x0, 0x40404}, 0x800) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/console\x00', 0x48600, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_wakeup_irq\x00', 0x109040, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) close_range$auto(0xffffffffffffffff, r3, 0x5) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) 2m12.199979074s ago: executing program 33 (id=1178): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xcb, 0x0, 0x4) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) mmap$auto(0x80000000000, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1700", @ANYBLOB="3323596501ff1a1e97aa585c47b6d4ec5102718be55db8f4c21af8fcbc5240d1818f0e86a30000140000000000937520250436b06544327128b2750308", @ANYRESOCT], 0x1ac}}, 0x4040011) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x5, &(0x7f00000002c0)={0x0, 0xda}, 0x4, 0x0, 0x0, 0x9}, 0x7}, 0xb6d1, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'pim6reg1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyy6\x00', 0x0, 0x0) ioctl$auto(r3, 0x80045439, 0xffffffffffffffff) r4 = socket(0x9, 0x80805, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) recvmmsg$auto(r4, 0x0, 0x10002, 0x1a000, 0x0) mkdir$auto(&(0x7f0000000240)='./file0\x00', 0x8001) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002800)={'dummy0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000004640), r2) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r5, &(0x7f0000004740)={0x0, 0x0, &(0x7f0000004700)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="a54928bd7000ffdbdf251a0000000c00018008000100", @ANYRES16=r6, @ANYBLOB="2f8d3d5b59ccfa4e76b84ff7d5f5e3c7"], 0x20}, 0x1, 0x0, 0x0, 0x40404}, 0x800) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/console\x00', 0x48600, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_wakeup_irq\x00', 0x109040, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) close_range$auto(0xffffffffffffffff, r3, 0x5) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) 1m50.532297368s ago: executing program 2 (id=1268): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vkms/graphics/fb0/rotate\x00', 0xa42, 0x0) sendfile$auto(0x1, r0, 0x0, 0x3) 1m50.437555404s ago: executing program 2 (id=1270): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.0/usb1/authorized\x00', 0xe2400, 0x0) select$auto(0xb, 0x0, 0x0, 0x0, 0x0) 1m49.396317499s ago: executing program 2 (id=1276): close_range$auto(0x2, 0x8, 0x0) 1m49.337998902s ago: executing program 2 (id=1278): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x2, 0x0) (async) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (async) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') (async) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000340)="0e49c419d11014dbab0359ab0edd5db864f532c1842abe95a4f32d1d55718b41356d72c7de2831848209007c40c19d1a16e67e453ec7b9095c80ed5d319261f53db7c608b2bd8905e45567ea06254c16266e0addf916196a1203504b77c23637c202087b9a2db2a18813c92f0abb0ba6c7d85c4feca754b5cd5bb178af24b7875a681d9118e3fc7366de351b2faccd5e8c5d02f9cc909195f40ec98cc03cce117cba1b3afd5fcbce63a367559e98af539d4f7f6302001e0636dffcb147669e8859b944f28fd50f8ae68a746b1e24673d14b8b62c0d07197645e71fff0c8e35e6f07aa3cfe8c468685d2c69521c11ff0a026d96", 0x32, 0x0, 0x9, 0x0, 0x1, 0xa}, 0x800009}, 0x3, 0x8) (async) r1 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu1\x00', 0x80802, 0x0) read$auto_vcs_fops_vc_screen(r1, &(0x7f0000000040)=""/120, 0x78) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r2 = socket(0x1d, 0x2, 0x6) (async) io_uring_setup$auto(0x6, 0x0) (async) r3 = io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x6, 0x0) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) setsockopt$auto(0x3, 0x0, 0x33, 0x0, 0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001f00), r4) sendmsg$auto_SMC_PNETID_ADD(r4, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x14, r5, 0x1, 0x70bd2a, 0x25dfd3fb}, 0x14}}, 0x8000) (async) sendmsg$auto_SMC_PNETID_FLUSH(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x80}, @SMC_PNETID_ETHNAME={0x9, 0x2, 'nfsd\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48011}, 0x0) (async) listen$auto(0x3, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r2, 0x8000) r6 = open(&(0x7f0000000100)='.\x00', 0x591083, 0x408) linkat$auto(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) (async) clone$auto(0x10051c, 0x6, 0x0, 0xffffffffffffffff, 0x80000001) (async) setsockopt$auto(0x3, 0x6, 0x8, 0x0, 0x7) (async) r7 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) read$auto(r7, 0x0, 0x82) 1m49.240216749s ago: executing program 2 (id=1279): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0xfffffffffffffffc, 0x200007, 0x8) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x0, 0x3ff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/mm/ksm/pages_skipped\x00', 0x40c00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) mmap$auto(0x0, 0x200003, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x200000, 0x200006, 0x1, 0x40eb1, 0x602, 0xb00000000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x7, 0xfffffffffffffffa, 0x8) close_range$auto(0x2, 0x8, 0x0) utime$auto(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) socket(0x10, 0x3, 0x6) socket(0x22, 0x2, 0x2) socket(0x2b, 0x1, 0x1) unshare$auto(0x40000080) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) socket$nl_generic(0x10, 0x3, 0x10) 1m48.928109864s ago: executing program 2 (id=1282): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) setrlimit$auto(0x1000000007, 0x0) madvise$auto(0x0, 0x3e, 0x15) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x2, 0x1000, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008012, r0, 0x2000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) close_range$auto(0x2, 0xa, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) read$auto(0x4, 0x0, 0x80) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x88042, 0x0) write$auto(r3, &(0x7f0000000000)=')\x00', 0x800) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/path\x00', 0xc8800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001280)=""/4124, 0x101c) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xff, 0xeb1, r1, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mseal$auto(0x0, 0x7dda, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) 1m48.683422774s ago: executing program 34 (id=1282): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) setrlimit$auto(0x1000000007, 0x0) madvise$auto(0x0, 0x3e, 0x15) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x2, 0x1000, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008012, r0, 0x2000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) close_range$auto(0x2, 0xa, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) read$auto(0x4, 0x0, 0x80) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x88042, 0x0) write$auto(r3, &(0x7f0000000000)=')\x00', 0x800) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/path\x00', 0xc8800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001280)=""/4124, 0x101c) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xff, 0xeb1, r1, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mseal$auto(0x0, 0x7dda, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) 1m35.068241742s ago: executing program 0 (id=1347): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000006000700204c0000060007000080000008000200", @ANYRES32=r1, @ANYBLOB="0a0005000180c200000e00000a0001000180c2f7ff0000000a000100aaaaaaaaaa35000000000500bbbbbbbbbbbb000006000600050000002ffd04003d4b0000"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) r2 = socket(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000ffdbdf25"], 0x3c}}, 0x22008004) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) sysfs$auto(0x2, 0x10000000000048, 0x0) r6 = fsopen$auto(0x0, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) open(0x0, 0x12ba7e, 0x45) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0x4010ae67, r6) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x8, 0x1ff, r2, @relative_id=0x13, 0xe600}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'pim6reg\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080), 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="88010000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fddbdf25170000005c00018008000300000000c00800030007000000140002006e696376663000000000000000000000080003000800000008000100", @ANYRES32=0x0, @ANYBLOB='\b\a\x00\x00', @ANYRES32=0x0, @ANYBLOB="140002006e657464657673696d300000000000000800030008000000140001800800030035df000008000100", @ANYRES32=0x0, @ANYBLOB="60000180080003000900000008000100", @ANYBLOB="14000200776731000000000000000000000000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d7265673000000000000000000008000300010000004c0001800800030008000000080003000400", @ANYRES32=0x0, @ANYBLOB="140002007465616d30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="14000200766c616e3100000000000000000000001c00018008000100", @ANYRESHEX=r0, @ANYBLOB="080003000100000008", @ANYRES32=0x0, @ANYBLOB="3c00018008000100", @ANYRES32=r1, @ANYBLOB="1d0002006d6163766c616e310000000000000000140002006248c023394bda1617319bf9a9617461647630000000000000000003d7000800", @ANYRES32=r8, @ANYBLOB], 0x188}, 0x1, 0x0, 0x0, 0x84}, 0xd0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x22, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m34.578137567s ago: executing program 0 (id=1350): futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mknod$auto(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x1001, 0x4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/nfsd.fh/flush\x00', 0x8a402, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0x81) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async) mknod$auto(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x1001, 0x4) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/nfsd.fh/flush\x00', 0x8a402, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) (async) write$auto(0x3, 0x0, 0xfdef) (async) write$auto(0x3, 0x0, 0x81) (async) 1m34.180022991s ago: executing program 0 (id=1353): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/dev_mcast\x00', 0x4000, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x161302, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) read$auto(0x3, 0x0, 0x1f40) close_range$auto(r0, r0, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/conf/veth1_to_hsr/promote_secondaries\x00', 0x363583, 0x0) r2 = openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, 0x0, 0x143202, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nbd5/queue/zoned\x00', 0x60301, 0x0) mmap$auto(0x8a, 0xe7b, 0x3, 0xeb1, r0, 0x9444) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv6/conf/ipvlan1/accept_ra_rt_info_max_plen\x00', 0x103541, 0x0) read$auto(r4, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) pwritev$auto(r2, &(0x7f0000000180)={0x0, 0xa00}, 0x836, 0x2, 0x3) pwrite64$auto(r1, 0x0, 0x1, 0x2) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x224002, 0x0) write$auto(0x3, 0x0, 0xfdef) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRES16=0x0, @ANYBLOB="01002b00"/14], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x40040a2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x1) socket(0x22, 0x1, 0x84) bind$auto(0xffffffffffffffff, &(0x7f0000000300)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, 0x2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x4, 0x9}, 0x4}, 0x3, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm1c/sub2/xrun_injection\x00', 0x2, 0x0) ioctl$auto(0x3, 0x7, 0x38) unshare$auto(0x40000080) mmap$auto(0x3, 0x2000f, 0x3ff, 0x19, 0xff1, 0x8004) 1m33.850451687s ago: executing program 0 (id=1355): sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYBLOB="20062abd7000fddbdf2502"], 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x80) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) ppoll$auto(0x0, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs\x00\x00', 0x204, &(0x7f0000000340)="d17eec7039d76b6a81cee6aeda04987cc9334d8dcf252c11015ff17513ec5909096beae9d480a7e7b2cbdd4176e1cc83fb550ec8120332ad81ae487f7115ebb13ace258a9c2ae4c7c280f47d39bd73655310a1241c5385c7ff4d9e4f4fa2f3587c0cb28da09f7527cdad4730caf30be52534fef726b0379dfcfb44bb22") openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) bpf$auto(0x303d, 0x0, 0x4) socket(0xa, 0x4, 0x0) (async) socket(0xa, 0x4, 0x0) mlockall$auto(0x7) set_mempolicy$auto(0x2005, &(0x7f0000000080)=0x87e, 0x4) (async) set_mempolicy$auto(0x2005, &(0x7f0000000080)=0x87e, 0x4) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) ioperm$auto(0x7, 0x6, 0x2) (async) ioperm$auto(0x7, 0x6, 0x2) ustat$auto(0x2, 0x0) mincore$auto(0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x149082, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000280)=""/65, 0x41) 1m32.992206757s ago: executing program 0 (id=1359): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0xa, 0xe57a) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x1, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$NS_GET_PARENT(r1, 0xff02, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0x7}, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x2, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20040d0}, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = socket(0x1e, 0x1, 0x0) bind$auto(r2, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41}, 0xffffffff}}, 0x66) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0xd, 0x0, 0x1, 0xb}, 0x800009}, 0xc, 0x20000000) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) ioctl$auto_snd_seq_f_ops_seq_clientmgr(r0, 0x7, &(0x7f00000000c0)="a1c7104dc8aea5b9d4c2cf32f52fea8a4ff9078ebb62a9ded8637480ba7030baeca78894c7cd7516576350cba7a8036acc5130f1bbf5cfdd4af181e8760fc1dcc7c588e5861bf2386d3d51a402b181cad606cea870c948c59728fe7d447b3884a117b841") 1m31.774467236s ago: executing program 0 (id=1369): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x4000008000) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r1 = socket(0x2, 0x1, 0x106) setsockopt$auto(r1, 0x1, 0x21, 0x0, 0x9) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) fadvise64$auto(r2, 0x20000008002, 0x9, 0x3) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) open(0x0, 0x22240, 0x154) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/sctp/assocs\x00', 0x88000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001280)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x20042, 0x0) read$auto(r4, 0x0, 0xff) write$auto(0x3, 0x0, 0xfdef) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000080)=""/103, 0x67) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) write$auto(0x3, 0x0, 0xfdf3) sendfile$auto(0x1, 0x3, 0x0, 0xc01) 1m31.602941431s ago: executing program 35 (id=1369): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x4000008000) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r1 = socket(0x2, 0x1, 0x106) setsockopt$auto(r1, 0x1, 0x21, 0x0, 0x9) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) fadvise64$auto(r2, 0x20000008002, 0x9, 0x3) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) open(0x0, 0x22240, 0x154) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/sctp/assocs\x00', 0x88000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001280)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x20042, 0x0) read$auto(r4, 0x0, 0xff) write$auto(0x3, 0x0, 0xfdef) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000080)=""/103, 0x67) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) write$auto(0x3, 0x0, 0xfdf3) sendfile$auto(0x1, 0x3, 0x0, 0xc01) 15.304178584s ago: executing program 3 (id=1680): r0 = openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x28202, 0x0) munmap$auto(0x0, 0x9) mmap$auto(0x3, 0xffff, 0x1, 0xeb1, r0, 0x108000) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x321, 0x7fffffffffffffff, 0x9b7f, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x9) setrlimit$auto(0x1000000007, 0x0) madvise$auto(0x0, 0x3e, 0x15) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x2, 0x1000, 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/fail-nth\x00', 0x400, 0x0) read$auto_proc_fail_nth_operations_base(r1, &(0x7f0000000100)=""/23, 0x17) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008012, 0xffffffffffffffff, 0x2000000) close_range$auto(0x2, 0xa, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) read$auto(0x4, 0x0, 0x80) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x88042, 0x0) write$auto(r4, &(0x7f0000000000)=')\x00', 0x800) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc8800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xff, 0xeb1, r2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) ioperm$auto(0x7, 0x6, 0x2) mseal$auto(0x0, 0x7dda, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) 14.060740045s ago: executing program 3 (id=1684): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = clone$auto(0x20003b46, 0x8000002, 0x0, 0x0, 0x2) mlock$auto(0xfbe8, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), 0xffffffffffffffff) lstat$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x1, 0x5, 0xd70, 0x678, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, 0x2, 0x0, 0x1, 0x6, 0xfffffffffffffffe, 0x7, 0x7, 0x100000001, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x101842, 0x0) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/apparmor/exec\x00', 0x200200, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/cpuset\x00', 0x181100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x22082, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, 0x0) getresuid$auto(&(0x7f00000018c0), &(0x7f0000001900)=0xc, &(0x7f0000001940)=0x359) sendmsg$auto_OVS_FLOW_CMD_SET(r1, &(0x7f0000001840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x140a2014}, 0xc, &(0x7f0000001800)={&(0x7f0000000180)={0x157c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@OVS_FLOW_ATTR_ACTIONS={0x28, 0x2, 0x0, 0x1, [@typed={0x4, 0xf9}, @typed={0x14, 0x3e, 0x0, 0x0, @ipv6=@remote}, @typed={0xc, 0xf, 0x0, 0x0, @u64=0x4}]}, @OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_KEY={0x12f7, 0x1, 0x0, 0x1, [@nested={0x4, 0xe1}, @nested={0x1156, 0x12, 0x0, 0x1, [@typed={0x1004, 0x1ddf, 0x0, 0x0, @binary="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"}, @generic="925958fd474255ad41118a01a13f64122b03359250145bee771035ea32", @generic="112a459081835adf23b14793c0540679db9bd67b9782ad8c85e61a8c2631b2488e34406fb864099598cd81b28c43c70e28d1c40474a2e7182a345bd849c50423d29d8e57c85b9a7fcc3a6dca", @generic="c8318f721e5465f0bebf4ae8c4a0175994492a95955bce326fa395eb7c0988ecfb667481f117d976d3712b129875f3fbe031c37c1a1cdc0601e38bc807cb674bc28fe1fac09ee8e1dc00e709bd037202edbe", @nested={0x4, 0x9f}, @typed={0x4}, @generic="b52a26fba5d04166df3032fa8ef1243b5044c840614cc21d72a1f89a2ed1950b0ddbcffdf762f6af9c733299727a69f5848d7840b24e1931dea22fe6b438249448641725654d814e3e255299c53d3998e84581cc6d55443d507920e6566b00d7b17396eba83e45ab983275909f4c9f54de1154e22052e380d1cbeeb702f09f86cfc8a283e61bee9a830d47"]}, @generic="9d52f1df97d8b1a6129f154a340b308cd901bb2d07067d240e1362e6e6c0e2e76ad648899539cfc26a87775b13dbe06bacefa0d77228727a1a1ff7e1200b129724e4b1d0405999f12eb69f1d07e906dbf16048247ced07a54162022d6c19a9cc1ff4f7b832c1ae9152cc70c709ccbc1a9e1b3111fb7e6754225e034ce95d458a84a942abda67fd1caad4f089ffc5c0a373376d17a1a422ddaf9c2be64b2ad99977644c1d86634caf1b3cbe4d00a3282545591d402de1d390bdfa758333d7d54b895e089c920d418bb4c8c14e64f0301d775be54eee201d44b373231c7e4c1772aae25e0449e8aab5031e31958ebf6b72706b", @nested={0x38, 0xb8, 0x0, 0x1, [@generic="0399fbccd815362f4a89fb1e7d59efc1777b03c89782611a3391cac4e6a90b8811aa6875d836c489b30aaaf42def0d18", @nested={0x4, 0x9}]}, @typed={0x14, 0x5e, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="69c17209999bf319bd692369b45e3ccf0d80d26779e1ddc6648b4ac7ce83733e15498a8c1301f31e35e8b7edd091b8b880129c2329", @nested={0x24, 0x30, 0x0, 0x1, [@typed={0xe, 0x6b, 0x0, 0x0, @str='%.)\\[#.}$\x00'}, @typed={0x8, 0xd1, 0x0, 0x0, @pid=r0}, @typed={0x8, 0x35, 0x0, 0x0, @uid=r3}]}]}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x8000}, @OVS_FLOW_ATTR_MASK={0x23a, 0x7, 0x0, 0x1, [@typed={0x4, 0x103}, @typed={0xc, 0x1a, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x71, 0x0, 0x0, @ipv4=@broadcast}, @generic="01e37b78ad1bbd2ec760e0c4120293894bbc4f51d061b1049ae663fe585106f0df215cb7b5043452e3f3306a3303f44911a8b430de40db159746af3856783342b4ab", @nested={0x1d9, 0x33, 0x0, 0x1, [@generic="24d2568ec6602446a8a15aa7ea914f27a8895208f14bddcc2830d5d37cc489b28302c6b9bdc333d81022389de348abc3a52218e21e240ee4e31e20d4cd989ec154e3679f5767ff26262405b1d0223af9d467f02d3726fdd4f1ddeacdcbdd29cd0722376a2d9a00dd6f933c4f6dfb9756d5dc761fdd022415dc0dca9e7cbfe0868e528ba9ff72642100b0e108", @generic="fbdde07c2b17151908481e94add72b226ba091e35dc735245c25f55ed48f5a77b70add3f7c76b102a97b6605d80907021e2c4f82b5e2f18ff9849352aba8929675d29e9546db65d2", @typed={0x4, 0xe3}, @generic="6f183164cd2c115d1b0458ce11f895aeda15cce2a88dbd88b67508dd8085e65b30c6d802501eaa4c537c6bf52ec8d26b619bd8a92c3467902dd32f0c8ebe489d62554e1f792b8316b1f587ca929bbc204acfd18f5056e8ed378ad9d5142f2fa0a31f6cc2ca8022f8b3968b4160526085440ec1965dcea57ef2bf170d2930be71af4fd77c7fa715a235b742698fc3206e4d4b28210a00834214d2acad0da4a18ec18dbfe4f026a21a0bcfa5a8bf7ae3850881eb758244e03f805d383b94b3d8e4179c30cea7a19948d633a8482d5b1cbd7af7096aab6db44f659239e08658fd45af3339b9307fecec34fc1730904fe896e55e5ac3dc30440153", @generic, @nested={0x4, 0x7b}]}]}]}, 0x157c}, 0x1, 0x0, 0x0, 0x8c1}, 0x4080) personality$auto(0xfffffffc) openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000001880), 0x10300, 0x0) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) setsockopt$auto(r1, 0x6, 0x9, &(0x7f0000001980)=',$]\x00', 0xfffffff8) 12.344956485s ago: executing program 3 (id=1692): r0 = socket(0x2c, 0x3, 0x0) sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r1 = socket(0x1e, 0x1, 0x0) getsockname$auto(r1, &(0x7f0000000000), &(0x7f0000000040)=0xd1) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0xfdef}, 0x1, 0x0, 0x0, 0x10}, 0x2020057) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x2000c041) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0x29, 0x49, 0x0, 0x1) (async) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) (async) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008810}, 0x10000000) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) (async) lstat$auto(0x0, &(0x7f0000000180)={0x5, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40000000000f, 0x7, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) (async) r4 = socket(0x1e, 0x1, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x80000000, 0x8, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) (async) close_range$auto(0x2, 0x8, 0x0) pipe$auto(&(0x7f0000001480)=0xffffffffffffffff) vmsplice$auto(r5, &(0x7f0000000000)={0x0, 0x7}, 0x5, 0x1) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_ETHTOOL_MSG_MM_GET(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40400c0}, 0x14002881) r6 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) write$auto(r6, &(0x7f0000000040)='/sys/kernel/security/integrity/ima/policy\x00', 0xc6) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000000c0), r0) 11.251282787s ago: executing program 3 (id=1695): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd12/queue/iosched/fifo_batch\x00', 0xc2082, 0x0) ioctl$auto_LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x3, 0xdf, 0x400000009b7f, 0x2, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/ip6_tables_names\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x594c, 0x7) r1 = open(0x0, 0x0, 0x408) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = getsockopt$auto(0x3, 0x200000000001, 0x2d, 0xfffffffffffffffe, 0x0) mmap$auto(0x20000000ffff, 0xf8b9, 0x93c, 0x19, r2, 0x800000000001009) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x4100, 0x0) ioctl$auto_evdev_fops_evdev(r3, 0x40084503, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/028/001\x00', 0x202, 0x0) r4 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/32t\x00', 0x82000, 0x0) read$auto_mon_fops_text_t_mon_text(r4, 0x0, 0x60) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/demote_size\x00', 0x123902, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0x1f40) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000) r5 = io_uring_setup$auto(0x3ff, 0x0) r6 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon26\x00', 0x40000, 0x0) ioctl$auto_MON_IOCX_MFETCH(r6, 0xc0109207, 0x0) close_range$auto(r0, r5, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x7, 0x80802, 0x0) connect$auto(r1, &(0x7f0000000000)=@xdp={0x2c, 0x9, 0x0, 0x826}, 0x55) socket(0x2, 0x2, 0x88) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) 9.909109848s ago: executing program 3 (id=1699): mmap$auto(0x0, 0xb, 0x6, 0xeb1, 0x3ff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) utimes$auto(0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r0, 0x40045431, 0x0) mount_setattr$auto(0x5, 0x0, 0x0, &(0x7f0000000640)={0x100010, 0x7f, 0x0, @raw=0x1}, 0x283) r1 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/kvm/mmu_cache_miss\x00', 0x80000, 0x0) wait4$auto(0xfffffffffffffffb, 0x0, 0x2, 0xfffffffffffffffc) read$auto_stat_fops_per_vm_kvm_main(r1, 0x0, 0x0) 8.321292936s ago: executing program 3 (id=1708): mmap$auto(0x100004, 0x20009, 0x4000000000df, 0x90, 0x401, 0x8001) r0 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$auto_RNDADDTOENTCNT2(r0, 0x40045201, 0x0) socket(0x11, 0x3, 0x2) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000300)='\xc4\x00\xff\xfdh;\xaeX\xe8[\xe3xVW\xf2\x7f\x80\xefph\x00\x00\x91\xc4\xff\x01\x00\x00\x00\x00\x00\x00\xfc\xcbt\x04\xbd\x9b1\xd6\xe88c\xab\xc5?\xde3`tz\x1b\xbc\xb4u\xa72\xf7\xb6\x8af|\a\xb0\x9cz\xe5\xafxu\xeb\x8b\xaf\x98\xc5\x81Ak_\xd8\xdb\xe9\xfe\xe6\x1e\x90v00\xd1o\x842\xa3\xa5\x9a\xc1\x9d?4T\xfa\xd9\xda\x06\x8a\xb5\x19\xac\xf9\x99x\xa0\x1d\x86\x1d\xcfq\xcf\xac\xef\xdf\xda\bC\xd4G0\xbc\xdd}\r\x86\xf9\xfbt\x82\t\xc7%\xea\xad`_\xb7\xcd\xfe\xb6\x10\x1c`\x94\xc0\xf6\xd96GGQZa[\xae\\^\xa8\xad\x85ZM\x0egi>\x0e\xdc#\x16\xa6\x03\x97\x982Z\xb6\xf1\xfdN\xb3\xce\xab\x13\xd1\x94\xc7\xf5\x18\xa4\xab\xd61\xbf\xb2\x12\xf4f\xa3S\x95\x88\xae\xbf\x19\x8e\'\x82E\xab\a\xbaF\x99+)\xf32\xd9\t\xa7W\xec= T\xbc\xeb0M\xac\x83\x81\x84\x04M\x8e\x81\xb9/\x9b\xe8\x1d\x99;\xb1\x11\xe7k\xee *\x06\xf0,#\xb0F!N\xaa\xfd\xb8H\x01\xbc\a_v\x90\x11\t\x1a\xa0\xbf\xdcd(l\xbc\xdc\xbe\x10\xc0\x9f\x80>I\x13\x19\x04_L\x1d\xd3M*+\x97M\xd8\xeb\xe0\xcc\xad\x95\xc0\nPI\x8d\xc0\x0eK\xa9a\x17 d\xf1\x98\xc7G+%*\x0f\xb3B\xd2\xec\xba-\v\xa6\xa9\xf5J\x95\xce\xec1+\xfb\x01\xae\xfb\xce8\x9f\xf8\x00G\x03\xd0\v\x89\x85s,\xcc2)\xb9 \x15\xcd\xb8\x16\xf4\x96V\xe8k\xaau\xbd\x7f\xb3B\'Y\xc2C\xb9_\xc6TP\xd4\xd0\x1cvIr?Z\xb2\xeaVQ\xd3\xc3 \ak\b\xbc\x1b\x9e~\xf6\x92\xb2J\x00\x16\xb6\xae\xac\xe6%\x83\xae]\x1f\x90AER\xe7g$\xe2@\xf9dZ\xd4\xd1(\x02Nx\xf3tL\"\x1c\xf1\x8e\x88\x00S\x92\xf0\xb9\xeaq\x8e\xc4c:7\xa52\xb1kq\xb20n\x139\xd6F\alIe\\\xeb\xd0\xf0\xca5\xb8\x83\xaf\xcd\x89\xd4\\\t[\xad\xddR\xfb0\x9a\xa4q[M\xcf\xeb6\xf8r?', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket(0x8, 0xa, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x3, 0x6}, 0xed7138c}, 0x3, 0x0) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioperm$auto(0xaf, 0xe, 0x991b) memfd_create$auto(&(0x7f00000002c0)='IPVS\x00', 0x7) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) pread64$auto(r1, 0x0, 0xfff, 0x6) msgget$auto(0xa, 0x77d9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mmap$auto(0x0, 0x4, 0xffd, 0x12, 0x3, 0x0) r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r2, &(0x7f0000001680)="a7", 0x1) 3.400123074s ago: executing program 6 (id=1726): r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001b14af"], 0x14}, 0x1, 0x0, 0x0, 0x48f49753371a5812}, 0x4c950) acct$auto(&(0x7f0000000040)='\\{\x00') r1 = socket(0x2, 0x3, 0x100) bind$auto(r1, &(0x7f0000000080)=@in={0x2, 0x4e23, @broadcast}, 0x7b) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) arch_prctl$auto(0x1022, 0x2000000000001) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) r3 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_io_timeout/interval\x00', 0x80900, 0x0) r4 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), r2) sendmsg$auto_IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6}, @IEEE802154_ATTR_DEST_SHORT_ADDR={0x6, 0xe, 0x3806}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x44001) read$auto_stat_fops_per_vm_kvm_main(r3, 0x0, 0x0) 3.238671925s ago: executing program 6 (id=1728): socket(0xa, 0x801, 0x84) socket(0x2, 0x2, 0x0) fanotify_init$auto(0x5, 0x2000000000002) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x82099, 0xe9e, 0x7, 0x15, 0xffd, 0x100000001, 0x4, 0xf, 0x0, 0x0, 0xe, 0x3, 0x101, 0xff, 0x2, 0x80000001]}, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x22340, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sr0\x00', 0x842, 0x0) dup3$auto(0x8000000000000001, 0x5, 0x800000000) splice$auto(0x8, &(0x7f0000000080)=0x10d, 0x5, 0x0, 0x1, 0x3) listen$auto(0x3, 0x81) ioperm$auto(0x6, 0x6, 0xfffffffd) io_setup$auto(0x7ffe, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x5, 0x100005, 0x1, 0xfffffffc, 0x4007}, {0x4, 0xfff, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) madvise$auto(0x108000, 0x800034, 0x9) bpf$auto(0xb, 0x0, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) epoll_create1$auto(0x6) accept$auto(0x3, 0x0, 0x0) 2.691104819s ago: executing program 5 (id=1730): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) fallocate$auto(0x3, 0x8, 0xc, 0x200000000000e3c6) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) poll$auto(0x0, 0x1000, 0x9) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd8800fedbdf250200090000002700080000000800060009"], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd9650200000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x9cb, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xc040aed4, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0x8}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @remote}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @HSR_A_IF2_AGE={0x8, 0x4, 0x10}, @HSR_A_IF1_AGE={0x8, 0x3, 0xfffffffa}, @HSR_A_IF2_AGE={0x8, 0x4, 0xb7}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r2, 0x0, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r2, &(0x7f00000001c0)="622d1bfe595046ab5c98199adf260600de16baef6176e6021e1dcedc", 0x1c) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000780)='/proc/slabinfo\x00', 0x100, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 2.688874091s ago: executing program 7 (id=1731): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x68141, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(&(0x7f0000000800)='./file0\x00', 0x1636c0, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x10677d, 0x0) r2 = socket(0x2, 0x1, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) memfd_create$auto(&(0x7f00000000c0)='/dev/ptmx\x00', 0xef3) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) getsockname$auto(r1, &(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x800003, 0x0) ioctl$auto(r0, 0x5456, 0xce01) 2.493995758s ago: executing program 6 (id=1732): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000002c40)=0xf0) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x1e, 0x5}, 0x7) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x141000, 0x0) preadv$auto(0x40000000000003, 0x0, 0x6, 0x7fffffff, 0x5) write$auto(0x3, 0x0, 0xfffffdef) msgctl$auto(0x0, 0x3, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r1 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r2 = bpf$auto(0x6, &(0x7f00000001c0)=@test={r1, 0x10004, 0x0, 0x1000, 0x106, 0x0, 0x0, 0xfff, 0x10000, 0x9, 0x0, 0x4, 0x7, 0x2, 0xfffeffff}, 0x1) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYRES16=r2, @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01035a0000000000000002"], 0x14}, 0x1, 0x0, 0x0, 0x604c837}, 0x4010) 2.310402214s ago: executing program 6 (id=1733): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/dma\x00', 0x0, 0x0) preadv2$auto(r0, &(0x7f0000002300)={&(0x7f0000002240), 0x9}, 0x6, 0x5, 0x4, 0x7) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) read$auto(0x3, 0x0, 0x80) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x5, &(0x7f00000002c0)={0x0, 0xa}, 0x1, 0x0, 0xe, 0xfffffff7}, 0x9}, 0x10002, 0x47) 2.192275118s ago: executing program 5 (id=1734): r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x621f, 0x10004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) exit$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0x4008af13, 0x38) 1.812555276s ago: executing program 6 (id=1735): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001080)='/dev/v4l-touch5\x00', 0x2040, 0x0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f00000010c0)=""/22, 0x16) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x2, 0x19d0, 0xfffffffffffffffa, 0x9000) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r2, r1, 0x3) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000280)={0x44, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x4}, @ETHTOOL_A_WOL_MODES={0x14, 0x2, 0x0, 0x1, [@generic="9f63537968d4ee6c9f20d8ce82015e6b"]}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x40) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002bbd7000fddbdf25040000000b002e0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4044820) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x100000000005d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) fcntl$auto(0xff80000000000000, 0x4, 0xfffffffffffffffc) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) clone$auto(0x440f, 0x6, &(0x7f00000000c0)=0x10001, &(0x7f0000000180)=0x9, 0x8) madvise$auto(0x1, 0x80, 0x4) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x5, 0x100005, 0x1, 0x0, 0x7}, {0x4, 0xfff, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) madvise$auto(0x108000, 0x800034, 0x9) mprotect$auto(0x4, 0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) 1.57531542s ago: executing program 7 (id=1736): futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r0, &(0x7f0000000000)='r\x02', 0x2fb) r1 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/kvm/mmu_cache_miss\x00', 0x80000, 0x0) read$auto_stat_fops_per_vm_kvm_main(r1, 0x0, 0x0) 1.348182766s ago: executing program 7 (id=1737): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000006000700204c0000060007000080000008000200", @ANYRES32=r1, @ANYBLOB="0a0005000180c200000e00000a0001000180c2f7ff0000000a000100aaaaaaaaaa35000000000500bbbbbbbbbbbb000006000600050000002ffd04003d4b0000"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) r2 = socket(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000ffdbdf25"], 0x3c}}, 0x22008004) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) sysfs$auto(0x2, 0x10000000000048, 0x0) r6 = fsopen$auto(0x0, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) open(0x0, 0x12ba7e, 0x45) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0x4010ae67, r6) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x8, 0x1ff, r2, @relative_id=0x13, 0xe600}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'pim6reg\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080), 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="88010000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fddbdf25170000005c00018008000300000000c00800030007000000140002006e696376663000000000000000000000080003000800000008000100", @ANYRES32=0x0, @ANYBLOB='\b\a\x00\x00', @ANYRES32=0x0, @ANYBLOB="140002006e657464657673696d3000000000000008000300080000001400018008", @ANYRES32=0x0, @ANYBLOB="60000180080003000900000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776731000000000000000000000000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d7265673000000000000000000008000300010000004c0001800800030008000000080003000400", @ANYRES32=0x0, @ANYBLOB="140002007465616d30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="14000200766c616e3100000000000000000000001c00018008000100", @ANYRESHEX=r0, @ANYBLOB="080003000100000008", @ANYRES32=0x0, @ANYBLOB="3c00018008000100", @ANYRES32=r1, @ANYBLOB="1d0002006d6163766c616e310000000000000000140002006248c023394bda1617319bf9a9617461647630000000000000000003d7000800", @ANYRES32=r8, @ANYBLOB], 0x188}, 0x1, 0x0, 0x0, 0x84}, 0xd0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x22, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.206701901s ago: executing program 5 (id=1738): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xe8902, 0x0) (async) lsm_list_modules$auto(&(0x7f0000000040)=0xffff, &(0x7f0000000080)=0x1, 0x400) (async) madvise$auto(0x1ff, 0x0, 0x10001) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/7:2/power/autosuspend_delay_ms\x00', 0x12000, 0x0) madvise$auto(0x5, 0x101, 0x5) lsm_list_modules$auto(&(0x7f0000000100)=0x5, &(0x7f0000000140)=0x1, 0x5a2) (async) ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000180)={r0, 0x7c48d764, 0x6743, 0x2}) (async) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x158, r3, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xffffffff7fffffff}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x3}, @NL80211_ATTR_HE_OBSS_PD={0x11c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0x57, 0x5, "832d395187d98f054a04ef5e982da17c030de9c13cae97fa3511c46383009e2e9186b4c1edfdc0ee2ac3030a06d51bade0178fa0557120ac6d072743bc9c97b8f632d2097bc828ea911ee279d8267ba9e1d2ae"}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xff}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xb8, 0x4, "545ad479a58334eb7c65c79fb14ff374348f19743c17730ae523ee3555abbf6e8543151f2244f6bbaf017e5595c22b422b842f2d44fa7be25e0688e6c9b7827dc3b18e5326decd79899ad1129d2552bd8c9f2c253fae2557275b85806a4b448dba9c7563b9653f39e856643b0cd75811481bcfa920f83c3973600374b59c1f908509207c661c776f3904681e53233429749abc9312654141b1ae9f480e314a408a16f19c4ee42d0828efc6b99b31359243e1c5d1"}]}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x400}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x336}]}, 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000440), r2) (async) lsm_list_modules$auto(&(0x7f0000000480)=0xa82, &(0x7f00000004c0), 0x8) lsm_list_modules$auto(&(0x7f0000000500)=0x7, &(0x7f0000000540)=0xffffff01, 0x2) (async) sendmsg$auto_NL80211_CMD_SET_PMK(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x5}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "851d33cd60e4d95501f8"}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xa}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r2) r5 = getuid() sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000e00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000740)={0x64c, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC_ADDRS={0x628, 0xa6, 0x0, 0x1, [@generic="2003e602eab9b2c9a61c6614427ebf5e5192cf83c0cc69a03f83509c24b930f0397b9f5b0228a7383522f42e45a5e54679605915df2478f510034c7221f803045ed5c93a9b5c3c9fcb4962b912203be21b2dfa7bea4cd2e079e7b4bd950727addc31719a0c246291652ad70b1de5cb8906314cf9846c38fb718b3523475f2459d7ebd6a33ed0253ef3b78049095653b41a632271aa701b11fbd864a56588837e55d4a07c79d70dd10ab7e71d7a25eacda50770b0ed3141be37b41f70f103a20847721ec53fdb91176be652750e663d1ad90f14b19b738a69c6e4f12b00cce9", @nested={0x365, 0x7, 0x0, 0x1, [@generic="1ab084e0df8e27fe5430e67b97db61e0755244cd20d6db25952d8ef95934ac181bf3c85c87205e7224be1be8f93f9a3db6197bf263f810", @generic="09e84db59addafd0218c885fcc642a176df2d0542ac08986ab189f113e840254764cc1550af577cd2ef6b9b96793ac55fe05d2f8bb041ede9d4cb1e8b8763e6e1eb44053c71df8a212d099ddd4b1a40601585a1df518d459e1df2cb1d844d900383af9ecf178b4c3c5114c23afdf3f6edd1af808b2872a8356ec", @generic="6e6f3c21ae29cd165af3b847e8c99c08417285407744cb5120dc4189fbbc1104c26df9eb21acb1831a234a810f9505a4e272a9f2fc443b546eef07fcb915cf0867e6cfb17e78d6452065ad8188075d00aabf6dede5ee5920cff0a095b09a1110663e365043c045b27f", @generic="69167d5366b4194a29ecead738a4a1dcfe40a9094d0ad705e7c13c80e4108ec9db8ce86940e9805d3dcbf815afec2cf64a744dcba7e569a171fb9e806135ad8689b88a320b0f87f90ed949ecf39e57ed31ddbca3214675fb1a6ce63a39c37c2f301b35a985e0dfaea104dd78814de8dc8e6ff5dffc59dc3b244d89629afd1bd2", @generic="91fdbdce113b866b0de97cb9219bdb87bf0c1bdf3a267db11ad2c30d9e83e60d2eb6404fb50963e7631e81a194785a64a82ca403eb6a4e4fe936eb6548ba47b596", @typed={0x8, 0x130, 0x0, 0x0, @uid=r5}, @generic="225fdc877a7983f7cb89e31d3ccda4e303552883d6d8b79178a4cd0bd345b9bd469c214bfe42a8fc6e05623136b622c1d6f288dcbc2ff8cc84307c61f83d76be7aec13f1457cd8749dead9ec3d4dce0f8bb8e94cc402cc9211aabdf32f2f60700dd5d99b4c20d7cbe4384c5d7ef6b37a7aa75f93b0c8399d815243866107e667b375523b2fc7df625df55a0624f1533f6f93282bfa1a00e9c8fc569fba28516e7565ee", @typed={0x8, 0x90, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="91906085b7abafda54431a6b611ae50c1f39b638b16159506c9e836c255f04f65c2b045bc194712d562f164c33a55c46884467be8fcc45746c1ffa6f7233a364634948aea6048e6f8f951884e3e4cc95b22f156f2e178fb4a345f5eab6a5a6f457f9783085ebccccf131c5495df808bc701e2bb08743b902ae260e6b3b941e1ab7e54b5901a3d06cf82cbe2fd8ebc9c96bd1cfe745727890bc1c592b4c89f316c11e0ca2fb4f979215e9f68370ba78ff03dec21fd0f521a8e7ea028a57270fa57effdd378534e49125b2fa64e183c76d3d1abe"]}, @generic="5b89399fe5491f32dbeb357f1c1afb7b926ce39b5d2793f46c4ea75447b9", @typed={0x14, 0xf6, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="d41b4b42f41d7d84ffdca5dd8c97f86460e05d3551f35a737ab5e09175851524634cd30009d3d5ac51439d22e023352c6f296ecaa9cfebdf65da620e7eb6fd1db73e836f2acf7133c567c79f6af64fa234641d0b4a47cc01d87dcc9b76c1d1fb363a6cae09dcbb17f9d11a6427319a5e694d4963570c5a551616cffe00b8459709d4a5", @generic="b0c88ad62310b6a63da2c5e175954656b07c908b68d254183696dd231712d633fdecb086fea4c016ecc2ae15e85f450ad7237cdd169242f4e52cab87c62d71d6b5b6fff85c266c6de1e2f33066b344ce355835c423b079e563d861ae3dd0230b6f28b9440bd404473f943976ac08e587249baf17621d9385ffdbba0b58ee852829ef8cfa13509180ad4ebc729c9d867a7e846b668f1a2fc8c6bf44c23e529058174bc6ba2474baa18030244d14cf57a98efdfdc0b902111d7d3f4037f77a432119d7010e0ed461f57c916fec595700bb30f6eb7016a2f4ad10ba044f49292a84fd05b239d61c0715453e", @generic="620b35e016d88d4348bb5647e7910faa8fec9b7418e5e25b446b20b2b40a3d78096fbf335e6e8f6492a04cbfc185aaae0a47756c20aaa81b1c75990e204c"]}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x2}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x5}]}, 0x64c}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) (async) mmap$auto_mon_fops_binary_mon_bin(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x600000a, 0x11, r2, 0x3ff) (async) lsm_list_modules$auto(&(0x7f0000000e40)=0x2, &(0x7f0000000e80)=0x1000, 0xb8) madvise$auto(0x101, 0x4, 0x427463f8) (async) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000f00)={&(0x7f0000000ec0)=0x2f4, 0x1, 0x9}) (async) mmap$auto(0x10000, 0x3, 0x0, 0x10, r1, 0x2) (async) madvise$auto(0x8, 0x15, 0x4) (async) madvise$auto(0x10001, 0xffff, 0x2) (async) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000001040)={&(0x7f0000000f40), 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x64, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x67}, @OVS_PACKET_ATTR_ACTIONS={0x45, 0x3, 0x0, 0x1, [@generic="4f4583690b75b129b94c9e7abd97d186000c250d4a1ccc9520ace5dab37f6f5c3bf1f22f734086d0922fa9067a90cba22b", @typed={0x4, 0x41}, @typed={0xc, 0xee, 0x0, 0x0, @u64}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async) poll$auto(&(0x7f0000001080)={r1, 0xa3d6, 0x8}, 0x3, 0x2) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x10200, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) (async) mmap$auto(0x5, 0x1, 0x7, 0x78, 0xffffffffffffffff, 0x5) mincore$auto(0x401, 0x8, &(0x7f0000001200)='\\,*S@*!%\x00') 1.028980285s ago: executing program 5 (id=1739): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) socket(0x2, 0x3, 0x100) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x1, @empty}, 0x6a) setsockopt$auto(0x3, 0x0, 0xa, 0x0, 0x10000) sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdf3) close_range$auto(0x2, 0x8, 0x0) 752.233171ms ago: executing program 6 (id=1740): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) socket(0x10, 0x2, 0x0) socket(0x2, 0x2, 0x88) setsockopt$auto(0x4, 0x88, 0xa, &(0x7f0000000000)='!/+:Y\x81\'\x00', 0x80000e) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x5) socket(0x2, 0x1, 0x106) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000100)={'\x00', 0xffff, 0x6, 0x2, 0x9b4, 0x9, "ce25aafc24b9952f997e703f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, 0xfffffffffffffffe, 0x0) mmap$auto(0x2, 0x2020009, 0x3, 0x12, 0xfffffffffffffffa, 0x4000008000) socket(0x11, 0x2, 0x88) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20008000) ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000180)={0xfffffffffffff527, 0x3, 0x8, @lost_msgs={0xbb}}) r2 = socket(0x2, 0x801, 0x106) io_uring_setup$auto(0x7, &(0x7f0000000000)={0x10000, 0x80, 0xe, 0x8, 0x1fd, 0x4, r2, [0x7fffffff, 0x8, 0x6], {0x5, 0x800000a, 0x200, 0xffffffff, 0x81, 0x1ff, 0x7, 0x8, 0x200}, {0x1136400, 0x72, 0x1800000, 0x400004, 0x8, 0x4, 0x3b72, 0x80, 0xffffffffffffffff}}) write$auto(0x3, 0x0, 0x3f00) 633.073432ms ago: executing program 5 (id=1741): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/unix\x00', 0x400, 0x0) sendmsg$auto_MACSEC_CMD_ADD_TXSA(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8c1}, 0x4000080) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x2000c041) close_range$auto(0x2, 0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) capset$auto(&(0x7f0000000000)={0x9, 0xffffffffffffffff}, &(0x7f0000000040)={0x40000, 0x6, 0x8}) pidfd_open$auto(r1, 0x4) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) 461.184361ms ago: executing program 7 (id=1742): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000002c40)=0xf0) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x1e, 0x5}, 0x7) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x141000, 0x0) preadv$auto(0x40000000000003, 0x0, 0x6, 0x7fffffff, 0x5) write$auto(0x3, 0x0, 0xfffffdef) msgctl$auto(0x0, 0x3, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r1 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r2 = bpf$auto(0x6, &(0x7f00000001c0)=@test={r1, 0x10004, 0x0, 0x1000, 0x106, 0x0, 0x0, 0xfff, 0x10000, 0x9, 0x0, 0x4, 0x7, 0x2, 0xfffeffff}, 0x1) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYRES16=r2, @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01035a0000000000000002"], 0x14}, 0x1, 0x0, 0x0, 0x604c837}, 0x4010) 246.551559ms ago: executing program 7 (id=1743): r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0) poll$auto(&(0x7f0000000180)={r1, 0x3569, 0x8}, 0x34, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) capset$auto(&(0x7f0000000040)={0x0, 0xffffffffffffffff}, &(0x7f00000000c0)={0x6f78, 0x1ff, 0x1}) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x1314, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_MASK={0x12fa, 0x7, 0x0, 0x1, [@generic="6e156f84081d7dc37500eafa764c4d215b9f14356a4cdc90eb2c8259b3ce60f044058773695f4f74bffd725f1920f9e4769c64820c1f8cda5ea2abb3f36195da32e4f35d65512d0a90dea27be2f54f827a1bf3a031dd54b3191af66c1282429c33c665beedeb480f325ea23b7115b85969139290540c8f1dcc78c40cacc1d11cd6e5cb942a41e30dadb5c63661b5e8299b10ae9eefaa73", @generic="e0f002b6d0e239917bb4b72f170a8a283699e96faa1673c6720b902db02dae", @nested={0xc, 0xb9, 0x0, 0x1, [@typed={0x8, 0xfa, 0x0, 0x0, @u32=0x160000}]}, @typed={0x14, 0x32, 0x0, 0x0, @ipv6=@local}, @typed={0x14, 0x91, 0x0, 0x0, @ipv6=@loopback}, @typed={0xd, 0xb5, 0x0, 0x0, @str='ovs_flow\x00'}, @generic="3292ad9e0b1d", @generic="a8640adbadb15d7090b78656cd5cdeceea01ebe5df58f623491323810cf6f27440f470583c0d922ab415070e67849c6ad5d60a8e9bcf5f0cc825ba20eec8477ffd9ac1e59d36ed7eeb192546eb4ac4115a53b552266ef3de8e1a8c7bd2ef4ed50570ab5a168f2af2e82941bb21d2ed990e3387f0da969dd3c130a6f5eb6b254cd79efb75bba3e6c870849582a3311faa5814ed88bb66955a85ef6efd565e819896cccfdf93f85d3a0896bf12a628e6b382003da518a18f87fc3bbcd45967889a258b", @typed={0xc, 0x12f, 0x0, 0x0, @u64}, @nested={0x1128, 0xab, 0x0, 0x1, [@typed={0xc, 0x113, 0x0, 0x0, @u64=0x7}, @typed={0xc, 0xad, 0x0, 0x0, @u64=0x2}, @typed={0xd, 0xbf, 0x0, 0x0, @str='ovs_flow\x00'}, @generic="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", @generic="9c4b82486bc4ebccf7d9e6cc98113eaa60702c35281738336b71a7092a51966d547a021454cb96dd9d805458413496e3a83d5f165554a6b6a78402c6b768b6c46eb8269c77f7a96ab075acd35bc5096a29fc988edef855092d9a537aac60c26adb9c894fad5e7eff90df64bc359da47e3ce13afb7ba1d6efb9a60af65ea893f5b429187fe2bf910233e37d549816f7a98f74af40f87b4471f87d30b053063acf979b3ceba34c4eba003aa6aa30e2b607fe63c3479c9e872fa7f37bb4bdaabee705b009c662baca43c3b62ccc7195ccaa3fc94ec0a350e4d1073d6c79986060d5620f9bf8308745f7957863158eef2244c2edc814f25d0dfe", @nested={0x4, 0xb5}]}]}]}, 0x1314}, 0x1, 0x0, 0x0, 0x24000080}, 0x800) 225.619µs ago: executing program 7 (id=1744): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa1, 0x1, 0x8}, 0x8, 0x0) landlock_restrict_self$auto(r0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) open(&(0x7f0000000080)='./file0\x00', 0x22281, 0x11) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto_def_blk_fops_fs(r1, 0x2282, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) mbind$auto(0x200, 0xc, 0x500000000, 0x0, 0x3, 0x2) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) setns(0xffffffffffffffff, 0x20000000) r2 = getpgid$auto(0x0) move_pages$auto(r2, 0x1, &(0x7f0000000100)=&(0x7f0000000040)="9921d8edaf7463670d6a92c25055be06fd6e471ab6e6af1b4ff988cc3281440db69e819d3a6f63effc48d2bf2d0033d3788717411c7804336a191478e5626f4ca0f1801213d7fa1d255c319429d57f1e82bdd85604eb8eb9d8df6bf94152b15c130c0753abc2174f0635bbde1890bb34ef3c96c4ff67865b0a469c905f04346575bb9400590c87de41be2c700f04b4f7bb5573d65416b1317cbcf9e2b47e508ba2", &(0x7f0000000140)=0x2, &(0x7f0000000180)=0x2, 0xfffff932) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/scsi/sg/devices\x00', 0x10b402, 0x0) pread64$auto(r3, 0x0, 0x7, 0x100) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) r4 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r4, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40342, 0x2a) unlink$auto(&(0x7f0000000080)='./file0\x00') poll$auto(&(0x7f00000001c0)={r0, 0x800}, 0x1000, 0x4) semctl$auto(0x1ff, 0x2, 0x13, 0x1) 0s ago: executing program 5 (id=1745): r0 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000100)='/dev/media11\x00', 0x4002, 0x0) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/dev_snmp6/netdevsim0\x00', 0x2000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@prog_bind_map={r1, r0, 0x8001}, 0x6f6) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000400), 0xffffffffffffffff) r4 = gettid() mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x5, 0x1, 0x9, 0x3, 0x14, 0x940, 0x1ffe0, 0x8003, 0x6, 0x6, 0x7, 0x5, 0x2, 0x9, 0x6, 0x9, 0x2, 0x3, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x42c]}, 0x1fe, 0x7) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0xfe}, 0x40000) semget$auto(0xeb6, 0x0, 0x6) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140000e4) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) kill$auto(r4, 0x11) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="57e72dad7000ffdbdf", @ANYRES32=r9, @ANYBLOB], 0x1c}}, 0x10) pipe$auto(0x0) kernel console output (not intermixed with test programs): problem. [ 114.799002][ T6469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.875273][ T3498] hsr_slave_0: left promiscuous mode [ 114.893259][ T3498] hsr_slave_1: left promiscuous mode [ 114.902089][ T3498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.931539][ T3498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.973435][ T3498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.006609][ T3498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.052698][ T3498] veth1_macvtap: left promiscuous mode [ 115.060646][ T3498] veth0_macvtap: left promiscuous mode [ 115.067096][ T3498] veth1_vlan: left promiscuous mode [ 115.072645][ T3498] veth0_vlan: left promiscuous mode [ 116.471664][ T3498] team0 (unregistering): Port device team_slave_1 removed [ 116.662368][ T3498] team0 (unregistering): Port device team_slave_0 removed [ 116.806593][ T5831] Bluetooth: hci0: command tx timeout [ 118.247507][ T6469] hsr_slave_0: entered promiscuous mode [ 118.289692][ T6469] hsr_slave_1: entered promiscuous mode [ 118.307332][ T6469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.325290][ T6469] Cannot create hsr debugfs directory [ 118.643366][ T6469] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 118.702016][ T6469] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 118.806577][ T6469] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 118.860903][ T6469] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 118.931518][ T6469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.944431][ T5831] Bluetooth: hci0: command tx timeout [ 119.124279][ T6469] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.315671][ T1515] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.322871][ T1515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.373132][ T1515] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.380334][ T1515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.089323][ T6469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.909489][ T6469] veth0_vlan: entered promiscuous mode [ 120.961362][ T6469] veth1_vlan: entered promiscuous mode [ 122.511270][ T6469] veth0_macvtap: entered promiscuous mode [ 122.548411][ T6469] veth1_macvtap: entered promiscuous mode [ 123.019225][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.052804][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.097503][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.136545][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.175556][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.186124][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.197983][ T6469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.210731][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.221227][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.231944][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.256586][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.269932][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.296521][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.318476][ T6469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.349406][ T6469] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.373938][ T6469] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.398423][ T6469] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.410559][ T6469] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.526134][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.556697][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.625315][ T1515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.647522][ T1515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.142351][ T6727] mmap: syz.2.162 (6727) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 126.601740][ T6709] netlink: 28 bytes leftover after parsing attributes in process `syz.3.160'. [ 127.544610][ T6709] bond0: (slave bond_slave_1): Releasing backup interface [ 129.512241][ T6795] netlink: 334 bytes leftover after parsing attributes in process `syz.0.175'. [ 129.522072][ T6760] Invalid ELF header magic: != ELF [ 130.675905][ T6818] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 131.455929][ T6354] syz.3.107 (6354) used greatest stack depth: 19248 bytes left [ 131.757344][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.182'. [ 132.271388][ T6847] netlink: 'syz.2.189': attribute type 3 has an invalid length. [ 132.352447][ T6847] netlink: 'syz.2.189': attribute type 3 has an invalid length. [ 132.511327][ T6321] syz.3.96 (6321) used greatest stack depth: 17648 bytes left [ 132.840012][ T6858] netlink: 330 bytes leftover after parsing attributes in process `syz.4.192'. [ 132.874208][ T6858] : renamed from team0 (while UP) [ 133.184911][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.191316][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.519052][ T6871] [U] [ 134.522096][ T6871] [U] [ 134.524822][ T6871] [U] [ 134.527545][ T6871] [U] [ 134.556540][ T6871] [U] [ 134.559299][ T6871] [U] [ 134.562031][ T6871] [U] [ 134.564765][ T6871] [U] [ 134.625088][ T6876] [U] [ 134.856206][ T6917] netlink: 20 bytes leftover after parsing attributes in process `syz.4.199'. [ 134.867519][ T6917] nbd: must specify a size in bytes for the device [ 134.881204][ T6917] tipc: Started in network mode [ 134.886179][ T6917] tipc: Node identity ee00, cluster identity 4711 [ 134.900777][ T6917] tipc: Node number set to 60928 [ 137.978527][ T6979] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000010006 [ 144.952307][ T7152] ceph: Failed to parse sending metrics switch value 'J' [ 145.061450][ T7152] netlink: 334 bytes leftover after parsing attributes in process `syz.2.238'. [ 145.077540][ T7142] netlink: 342 bytes leftover after parsing attributes in process `syz.0.235'. [ 145.156908][ T7142] aoe: could not set interface list: too many interfaces [ 145.329632][ T7162] netlink: 338 bytes leftover after parsing attributes in process `syz.2.239'. [ 150.455373][ T7260] aoe: copy from user failed [ 150.476671][ T7260] aoe: could not set interface list: too many interfaces [ 150.621734][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.259'. [ 150.987926][ T7267] MTRR 1 not used [ 151.607864][ T7264] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 151.618003][ T7264] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 151.819286][ T7264] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 151.969561][ T7271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.262'. [ 152.148810][ T7264] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 152.206649][ T7264] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 152.408158][ T7264] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 152.548714][ T7264] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 152.556153][ T7264] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 152.713295][ T7264] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 152.834819][ T7264] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 152.848881][ T7264] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 152.976776][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 153.021517][ T7264] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 154.166634][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 154.566535][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 154.886603][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 155.046672][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 156.247022][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 156.646783][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 156.966639][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 157.022717][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.274'. [ 157.129555][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 158.326720][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 158.726753][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 158.847737][ T7340] netlink: 338 bytes leftover after parsing attributes in process `syz.4.281'. [ 159.046864][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 159.630956][ T7349] netlink: 40 bytes leftover after parsing attributes in process `syz.3.283'. [ 161.236613][ T7367] netlink: 342 bytes leftover after parsing attributes in process `syz.2.286'. [ 161.351071][ T7371] aoe: could not set interface list: too many interfaces [ 162.917178][ T7402] Process accounting resumed [ 165.327788][ T7437] netlink: 342 bytes leftover after parsing attributes in process `syz.0.299'. [ 165.410025][ T7434] aoe: could not set interface list: too many interfaces [ 169.688046][ T7467] netlink: 28 bytes leftover after parsing attributes in process `syz.3.309'. [ 171.540577][ T7488] netlink: 28 bytes leftover after parsing attributes in process `syz.3.316'. [ 171.689822][ T7481] erspan0: entered allmulticast mode [ 172.266408][ T7500] netlink: 28 bytes leftover after parsing attributes in process `syz.3.319'. [ 173.430124][ T7514] netlink: 'syz.0.323': attribute type 2 has an invalid length. [ 173.933753][ T7517] could not allocate digest TFM handle [ 174.080865][ T7520] could not allocate digest TFM handle [ 175.850969][ T29] audit: type=1804 audit(6030422767.272:4): pid=7552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.331" name="#)-\&[}" dev="mqueue" ino=16422 res=1 errno=0 [ 175.851223][ T7552] kernel read not supported for file /#)-\&[} (pid: 7552 comm: syz.3.331) [ 175.955663][ T29] audit: type=1804 audit(6030422767.372:5): pid=7555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.331" name="#)-\&[}" dev="mqueue" ino=16422 res=1 errno=0 [ 176.009706][ T29] audit: type=1804 audit(6030422767.372:6): pid=7555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.331" name="#)-\&[}" dev="mqueue" ino=16422 res=1 errno=0 [ 176.106513][ T29] audit: type=1800 audit(6030422767.522:7): pid=7552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.331" name="#)-\&[}" dev="mqueue" ino=16422 res=0 errno=0 [ 179.973417][ T7615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.344'. [ 181.088455][ T7633] netlink: 334 bytes leftover after parsing attributes in process `syz.3.349'. [ 181.989938][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.347'. [ 182.029418][ T7660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.354'. [ 183.913888][ T7696] netlink: 28 bytes leftover after parsing attributes in process `syz.0.365'. [ 184.044889][ T7697] vivid-003: ================= START STATUS ================= [ 184.111333][ T7697] vivid-003: Radio HW Seek Mode: Bounded [ 184.141943][ T7697] vivid-003: Radio Programmable HW Seek: false [ 184.206032][ T7697] vivid-003: RDS Rx I/O Mode: Block I/O [ 184.246876][ T7697] vivid-003: Generate RBDS Instead of RDS: false [ 184.286846][ T7697] vivid-003: RDS Reception: true [ 184.291911][ T7697] vivid-003: RDS Program Type: 0 inactive [ 184.369363][ T7697] vivid-003: RDS PS Name: inactive [ 184.390967][ T7697] vivid-003: RDS Radio Text: inactive [ 184.396708][ T7697] vivid-003: RDS Traffic Announcement: false inactive [ 184.406523][ T7697] vivid-003: RDS Traffic Program: false inactive [ 184.412935][ T7697] vivid-003: RDS Music: false inactive [ 184.428775][ T7697] vivid-003: ================== END STATUS ================== [ 184.920278][ T7718] netlink: 28 bytes leftover after parsing attributes in process `syz.3.369'. [ 184.976968][ T7718] ip6tnl0: entered promiscuous mode [ 187.451558][ T7752] ima: policy update failed [ 187.517733][ T29] audit: type=1802 audit(6030422778.942:8): pid=7752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.378" res=0 errno=0 [ 188.453086][ T7787] sctp: failed to load transform for md5: -4 [ 191.339191][ T7837] process 'syz.0.395' launched ':,' with NULL argv: empty string added [ 193.232604][ T7852] netlink: 28 bytes leftover after parsing attributes in process `syz.3.398'. [ 194.575024][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.581438][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.525342][ T7892] CIFS: VFS: Invalid SecurityFlags: [ 198.027223][ T5831] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 198.413692][ T7928] aoe: could not set interface list: too many interfaces [ 198.633769][ T7930] block mtdblock0: the capability attribute has been deprecated. [ 201.383389][ T7967] aoe: could not set interface list: too many interfaces [ 201.979122][ T7971] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.431'. [ 203.347409][ T8010] netlink: 342 bytes leftover after parsing attributes in process `syz.3.439'. [ 203.625498][ T8014] aoe: could not set interface list: too many interfaces [ 205.020470][ T8037] lo: entered allmulticast mode [ 205.073661][ T8037] netlink: 28 bytes leftover after parsing attributes in process `syz.2.446'. [ 205.771918][ T8037] lo: left allmulticast mode [ 206.024746][ T8046] RDS: rds_bind could not find a transport for fe80::3030:3030:3a30:302f, load rds_tcp or rds_rdma? [ 206.505436][ T8050] aoe: could not set interface list: too many interfaces [ 207.413216][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 208.350950][ T8084] vivid-009: ================= START STATUS ================= [ 208.395325][ T8084] vivid-009: Enable Output Cropping: true [ 208.428248][ T8084] vivid-009: Enable Output Composing: true [ 208.552812][ T8084] vivid-009: Enable Output Scaler: true [ 208.584031][ T8084] vivid-009: Tx RGB Quantization Range: Automatic [ 208.629430][ T8084] vivid-009: Transmit Mode: HDMI [ 208.651866][ T8084] vivid-009: Hotplug Present: 0x00000000 [ 208.685522][ T8084] vivid-009: RxSense Present: 0x00000000 [ 208.711275][ T8084] vivid-009: EDID Present: 0x00000000 [ 208.738355][ T8084] vivid-009: ================== END STATUS ================== [ 209.842267][ T8110] netlink: 28 bytes leftover after parsing attributes in process `syz.0.464'. [ 210.275702][ T8110] team0: Port device team_slave_0 removed [ 210.907816][ T8141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.469'. [ 211.488381][ T8150] ucma_write: process 458 (syz.0.472) changed security contexts after opening file descriptor, this is not allowed. [ 212.139778][ T8145] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 213.451359][ T8188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.479'. [ 214.047969][ T8193] Line length is too long: Should be less than 4094 [ 214.637383][ T8206] netlink: 338 bytes leftover after parsing attributes in process `syz.0.484'. [ 215.312943][ T8222] netlink: 342 bytes leftover after parsing attributes in process `syz.0.488'. [ 224.321990][ T8378] netlink: 338 bytes leftover after parsing attributes in process `syz.2.532'. [ 224.703113][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.533'. [ 224.743726][ T8391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.533'. [ 224.745165][ T8385] could not allocate digest TFM handle [ 225.087630][ T8383] could not allocate digest TFM handle [ 225.107042][ T8403] netlink: 330 bytes leftover after parsing attributes in process `syz.4.534'. [ 225.186548][ T8403] : renamed from bond_slave_1 (while UP) [ 225.201871][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.534'. [ 226.116879][ T8429] netlink: 338 bytes leftover after parsing attributes in process `syz.2.541'. [ 227.548398][ T8457] netlink: 32 bytes leftover after parsing attributes in process `syz.2.550'. [ 230.302920][ T8495] netlink: 'syz.4.558': attribute type 11 has an invalid length. [ 230.499610][ T8498] netlink: 338 bytes leftover after parsing attributes in process `syz.3.560'. [ 230.797586][ T8500] Process accounting resumed [ 234.416843][ T8571] netlink: 186 bytes leftover after parsing attributes in process `syz.4.577'. [ 234.452067][ T8575] capability: warning: `syz.0.579' uses 32-bit capabilities (legacy support in use) [ 234.662175][ T8585] aoe: could not set interface list: too many interfaces [ 237.855409][ T8652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.595'. [ 237.876693][ T8652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.885434][ T8652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.920234][ T8652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.948676][ T8652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.578306][ T8655] netlink: 350 bytes leftover after parsing attributes in process `syz.4.596'. [ 240.587046][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.606'. [ 241.248092][ T8698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.609'. [ 243.972797][ T8756] aoe: could not set interface list: too many interfaces [ 246.603202][ T8791] netlink: 342 bytes leftover after parsing attributes in process `syz.0.629'. [ 246.652679][ T8795] Process accounting resumed [ 247.017369][ T8807] binder: 8806:8807 ioctl c0105512 1 returned -22 [ 248.028309][ T8820] warning: `syz.2.637' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 249.696130][ T8854] ima: policy update failed [ 249.711936][ T29] audit: type=1802 audit(6030422841.132:9): pid=8854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.648" res=0 errno=0 [ 250.189236][ T29] audit: type=1800 audit(6030422841.602:10): pid=8867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.650" name="dbroot" dev="configfs" ino=21359 res=0 errno=0 [ 250.222332][ T8867] db_root: cannot open: UN^|X@O&O4Q“%i;[nuw0xRzX|oCwC [ 250.395482][ T8866] Process accounting resumed [ 250.432489][ T8866] db_root: cannot open:  [ 250.586691][ T8877] db_root: cannot open:  [ 250.798776][ T8884] db_root: cannot open:  [ 250.854725][ T8887] netlink: 330 bytes leftover after parsing attributes in process `syz.4.654'. [ 250.892813][ T8887] db_root: cannot open:  [ 251.020273][ T8890] db_root: cannot open:  [ 251.193890][ T8895] db_root: cannot open:  [ 251.737238][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.661'. [ 252.468615][ T8911] db_root: cannot open:  [ 252.766115][ T8929] db_root: cannot open:  [ 253.803221][ T8940] db_root: cannot open:  [ 253.896064][ T8957] aoe: copy from user failed [ 253.926554][ T8957] aoe: could not set interface list: too many interfaces [ 254.000437][ T8957] db_root: cannot open:  [ 254.062831][ T8961] kernel read not supported for file /#)-\&[} (pid: 8961 comm: syz.2.675) [ 254.071581][ T29] audit: type=1804 audit(6030422845.482:11): pid=8961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.675" name="#)-\&[}" dev="mqueue" ino=23667 res=1 errno=0 [ 254.109731][ T29] audit: type=1800 audit(6030422845.522:12): pid=8961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.675" name="#)-\&[}" dev="mqueue" ino=23667 res=0 errno=0 [ 254.156953][ T29] audit: type=1804 audit(6030422845.522:13): pid=8961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.675" name="#)-\&[}" dev="mqueue" ino=23667 res=1 errno=0 [ 254.186884][ T29] audit: type=1804 audit(6030422845.522:14): pid=8961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.675" name="#)-\&[}" dev="mqueue" ino=23667 res=1 errno=0 [ 254.987535][ T8974] FAULT_INJECTION: forcing a failure. [ 254.987535][ T8974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.026566][ T8974] CPU: 1 UID: 0 PID: 8974 Comm: syz.2.679 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 255.037225][ T8974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 255.047316][ T8974] Call Trace: [ 255.050615][ T8974] [ 255.053568][ T8974] dump_stack_lvl+0x16c/0x1f0 [ 255.058281][ T8974] should_fail_ex+0x497/0x5b0 [ 255.062998][ T8974] _copy_from_user+0x2e/0xd0 [ 255.067627][ T8974] copy_msghdr_from_user+0x99/0x160 [ 255.072863][ T8974] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 255.078704][ T8974] ? __lock_acquire+0xcc5/0x3c40 [ 255.083679][ T8974] ___sys_sendmsg+0xff/0x1e0 [ 255.088309][ T8974] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.093555][ T8974] ? trace_lock_acquire+0x14e/0x1f0 [ 255.098813][ T8974] __sys_sendmmsg+0x201/0x420 [ 255.103530][ T8974] ? __pfx___sys_sendmmsg+0x10/0x10 [ 255.108778][ T8974] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 255.114802][ T8974] ? fput+0x67/0x440 [ 255.118734][ T8974] ? ksys_write+0x1ba/0x250 [ 255.123264][ T8974] ? __pfx_ksys_write+0x10/0x10 [ 255.128150][ T8974] __x64_sys_sendmmsg+0x9c/0x100 [ 255.133130][ T8974] ? lockdep_hardirqs_on+0x7c/0x110 [ 255.138360][ T8974] do_syscall_64+0xcd/0x250 [ 255.142897][ T8974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.148826][ T8974] RIP: 0033:0x7f945a785d29 [ 255.153263][ T8974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.172905][ T8974] RSP: 002b:00007f945b62d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 255.181360][ T8974] RAX: ffffffffffffffda RBX: 00007f945a975fa0 RCX: 00007f945a785d29 [ 255.189361][ T8974] RDX: 0000000000000007 RSI: 0000000020000200 RDI: 0000000000000005 [ 255.197357][ T8974] RBP: 00007f945b62d090 R08: 0000000000000000 R09: 0000000000000000 [ 255.205335][ T8974] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 255.213307][ T8974] R13: 0000000000000000 R14: 00007f945a975fa0 R15: 00007ffe8fa477e8 [ 255.221292][ T8974] [ 255.481575][ T8967] db_root: cannot open:  [ 255.858974][ T8988] db_root: cannot open:  [ 256.009100][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.019019][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.093177][ T8992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.684'. [ 256.303359][ T8991] db_root: cannot open:  [ 259.440561][ T8997] db_root: cannot open:  [ 259.755053][ T9051] netlink: 338 bytes leftover after parsing attributes in process `syz.4.698'. [ 259.828166][ T9053] db_root: cannot open:  [ 260.017958][ T9052] db_root: cannot open:  [ 260.273209][ T9060] netlink: 28 bytes leftover after parsing attributes in process `syz.4.701'. [ 260.577893][ T9062] db_root: cannot open:  [ 260.990301][ T9068] db_root: cannot open:  [ 261.100471][ T9000] db_root: cannot open:  [ 261.870408][ T9079] db_root: cannot open:  [ 262.041552][ T9092] db_root: cannot open:  [ 262.840842][ T9097] db_root: cannot open:  [ 262.966771][ T9103] db_root: cannot open:  [ 263.984895][ T9107] db_root: cannot open:  [ 264.130065][ T9124] aoe: could not set interface list: too many interfaces [ 264.229761][ T9124] db_root: cannot open:  [ 264.923724][ T9129] db_root: cannot open:  [ 265.308143][ T9146] db_root: cannot open:  [ 265.431154][ T9154] IPVS: length: 11322 != 24 [ 265.753805][ T9154] db_root: cannot open:  [ 265.891592][ T29] audit: type=1800 audit(6030422857.312:15): pid=9174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.728" name="version" dev="configfs" ino=23045 res=0 errno=0 [ 266.514980][ T9171] db_root: cannot open:  [ 266.758016][ T9186] netlink: 28 bytes leftover after parsing attributes in process `syz.4.730'. [ 267.192387][ T9185] db_root: cannot open:  [ 267.573247][ T9203] db_root: cannot open:  [ 268.579565][ T9215] db_root: cannot open:  [ 268.615671][ T9227] db_root: cannot open: UN^|X@O&O4Q“%i;[nuw0xRzX|oCwC [ 268.715802][ T9226] Process accounting resumed [ 268.726779][ T9226] db_root: cannot open:  [ 268.771106][ T9228] db_root: cannot open:  [ 269.224367][ T9233] db_root: cannot open:  [ 269.362729][ T9234] db_root: cannot open:  [ 269.793446][ T9240] db_root: cannot open:  [ 269.845698][ T9245] db_root: cannot open:  [ 270.059146][ T9253] db_root: cannot open:  [ 270.471588][ T9258] db_root: cannot open:  [ 270.577113][ T9265] netlink: 28 bytes leftover after parsing attributes in process `syz.4.750'. [ 270.630494][ T9265] db_root: cannot open:  [ 270.795377][ T9268] db_root: cannot open:  [ 270.891944][ T9259] db_root: cannot open:  [ 270.996317][ T9273] db_root: cannot open:  [ 271.038847][ T9275] db_root: cannot open:  [ 271.203819][ T9277] db_root: cannot open:  [ 271.463703][ T9284] db_root: cannot open:  [ 271.576385][ T9289] nfs: Unknown parameter 'nl80211' [ 271.678403][ T9292] db_root: cannot open:  [ 271.827543][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.759'. [ 271.885988][ T9283] db_root: cannot open:  [ 272.016758][ T9298] db_root: cannot open:  [ 272.503633][ T9296] db_root: cannot open:  [ 272.657598][ T9309] netlink: 496 bytes leftover after parsing attributes in process `syz.0.763'. [ 272.677521][ T9309] netlink: 496 bytes leftover after parsing attributes in process `syz.0.763'. [ 272.688291][ T9307] db_root: cannot open:  [ 272.745002][ T9311] db_root: cannot open:  [ 273.033773][ T9305] db_root: cannot open:  [ 273.751904][ T9330] netlink: 'syz.0.768': attribute type 1 has an invalid length. [ 274.155250][ T9319] db_root: cannot open:  [ 274.377024][ T9331] db_root: cannot open:  [ 274.616895][ T9338] db_root: cannot open:  [ 274.735685][ T9343] db_root: cannot open:  [ 274.813177][ T9347] FAULT_INJECTION: forcing a failure. [ 274.813177][ T9347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.829919][ T9347] CPU: 0 UID: 0 PID: 9347 Comm: syz.3.773 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 274.840569][ T9347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 274.850659][ T9347] Call Trace: [ 274.853971][ T9347] [ 274.856933][ T9347] dump_stack_lvl+0x16c/0x1f0 [ 274.861656][ T9347] should_fail_ex+0x497/0x5b0 [ 274.866381][ T9347] core_sys_select+0x420/0xa10 [ 274.871191][ T9347] ? __pfx_core_sys_select+0x10/0x10 [ 274.876548][ T9347] ? read_tsc+0x9/0x20 [ 274.880656][ T9347] ? ktime_get_ts64+0x256/0x400 [ 274.885558][ T9347] kern_select+0x15e/0x1e0 [ 274.890016][ T9347] ? __pfx_kern_select+0x10/0x10 [ 274.894998][ T9347] ? __pfx_ksys_write+0x10/0x10 [ 274.899892][ T9347] __x64_sys_select+0xbd/0x160 [ 274.904697][ T9347] ? do_syscall_64+0x91/0x250 [ 274.909421][ T9347] ? lockdep_hardirqs_on+0x7c/0x110 [ 274.914656][ T9347] do_syscall_64+0xcd/0x250 [ 274.919205][ T9347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.925133][ T9347] RIP: 0033:0x7f4b1e785d29 [ 274.929577][ T9347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.949220][ T9347] RSP: 002b:00007f4b1f536038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 274.957674][ T9347] RAX: ffffffffffffffda RBX: 00007f4b1e975fa0 RCX: 00007f4b1e785d29 [ 274.965706][ T9347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000b [ 274.973717][ T9347] RBP: 00007f4b1f536090 R08: 0000000020000040 R09: 0000000000000000 [ 274.981722][ T9347] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001 [ 274.989728][ T9347] R13: 0000000000000000 R14: 00007f4b1e975fa0 R15: 00007fff2b244068 [ 274.997753][ T9347] [ 275.066258][ T9347] db_root: cannot open:  [ 275.517831][ T9334] db_root: cannot open:  [ 275.601003][ T9359] db_root: cannot open:  [ 276.098858][ T9351] db_root: cannot open:  [ 276.473003][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.781'. [ 276.514394][ T9373] tc_dump_action: action bad kind [ 276.547029][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.781'. [ 276.587912][ T9373] tc_dump_action: action bad kind [ 276.622445][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.781'. [ 276.632920][ T9363] db_root: cannot open:  [ 276.656836][ T9373] tc_dump_action: action bad kind [ 276.712375][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.781'. [ 276.752708][ T9373] tc_dump_action: action bad kind [ 276.780059][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.781'. [ 276.789201][ T9373] tc_dump_action: action bad kind [ 276.843035][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.781'. [ 276.857033][ T9384] FAULT_INJECTION: forcing a failure. [ 276.857033][ T9384] name failslab, interval 1, probability 0, space 0, times 1 [ 276.863106][ T9373] tc_dump_action: action bad kind [ 276.886665][ T9384] CPU: 1 UID: 0 PID: 9384 Comm: syz.0.783 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 276.897312][ T9384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 276.907390][ T9384] Call Trace: [ 276.910689][ T9384] [ 276.913639][ T9384] dump_stack_lvl+0x16c/0x1f0 [ 276.918345][ T9384] should_fail_ex+0x497/0x5b0 [ 276.923043][ T9384] ? fs_reclaim_acquire+0xae/0x150 [ 276.928170][ T9384] should_failslab+0xc2/0x120 [ 276.932872][ T9384] __kmalloc_noprof+0xce/0x4f0 [ 276.937647][ T9384] ? iovec_from_user.part.0+0xf3/0x130 [ 276.943122][ T9384] iovec_from_user.part.0+0xf3/0x130 [ 276.948419][ T9384] __import_iovec+0xd6/0x6d0 [ 276.953019][ T9384] ? hlock_class+0x4e/0x130 [ 276.957534][ T9384] import_iovec+0x108/0x140 [ 276.962051][ T9384] vfs_writev+0x198/0xdd0 [ 276.966389][ T9384] ? __pfx___lock_acquire+0x10/0x10 [ 276.971599][ T9384] ? find_held_lock+0x2d/0x110 [ 276.976375][ T9384] ? __pfx_vfs_writev+0x10/0x10 [ 276.981238][ T9384] ? __fget_files+0x1fc/0x3a0 [ 276.985919][ T9384] ? __pfx_lock_release+0x10/0x10 [ 276.990957][ T9384] ? __fget_files+0x206/0x3a0 [ 276.995646][ T9384] ? do_pwritev+0x1b1/0x270 [ 277.000152][ T9384] do_pwritev+0x1b1/0x270 [ 277.004485][ T9384] ? __pfx_do_pwritev+0x10/0x10 [ 277.009345][ T9384] do_syscall_64+0xcd/0x250 [ 277.013863][ T9384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.019770][ T9384] RIP: 0033:0x7fae1e185d29 [ 277.024189][ T9384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.043804][ T9384] RSP: 002b:00007fae1ef10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 277.052234][ T9384] RAX: ffffffffffffffda RBX: 00007fae1e375fa0 RCX: 00007fae1e185d29 [ 277.060209][ T9384] RDX: 0000000000000009 RSI: 0000000020000140 RDI: 0000000000000003 [ 277.068182][ T9384] RBP: 00007fae1ef10090 R08: 000c000000000000 R09: 0000000000000000 [ 277.076154][ T9384] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 277.084126][ T9384] R13: 0000000000000000 R14: 00007fae1e375fa0 R15: 00007ffc4c7ccab8 [ 277.092115][ T9384] [ 277.514219][ T9374] db_root: cannot open:  [ 277.656337][ T9382] db_root: cannot open:  [ 277.658999][ T9396] FAULT_INJECTION: forcing a failure. [ 277.658999][ T9396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.701122][ T9396] CPU: 0 UID: 0 PID: 9396 Comm: syz.0.785 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 277.711780][ T9396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 277.721874][ T9396] Call Trace: [ 277.725173][ T9396] [ 277.728130][ T9396] dump_stack_lvl+0x16c/0x1f0 [ 277.732845][ T9396] should_fail_ex+0x497/0x5b0 [ 277.737562][ T9396] _copy_to_user+0x32/0xd0 [ 277.742021][ T9396] poll_select_finish+0x33b/0x6b0 [ 277.747079][ T9396] ? __pfx_poll_select_finish+0x10/0x10 [ 277.752660][ T9396] ? read_tsc+0x9/0x20 [ 277.756766][ T9396] ? ktime_get_ts64+0x256/0x400 [ 277.761656][ T9396] kern_select+0x16f/0x1e0 [ 277.766099][ T9396] ? __pfx_kern_select+0x10/0x10 [ 277.771061][ T9396] ? __pfx_ksys_write+0x10/0x10 [ 277.775923][ T9396] __x64_sys_select+0xbd/0x160 [ 277.780691][ T9396] ? do_syscall_64+0x91/0x250 [ 277.785377][ T9396] ? lockdep_hardirqs_on+0x7c/0x110 [ 277.790580][ T9396] do_syscall_64+0xcd/0x250 [ 277.795090][ T9396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.800994][ T9396] RIP: 0033:0x7fae1e185d29 [ 277.805406][ T9396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.825019][ T9396] RSP: 002b:00007fae1ef10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 277.833439][ T9396] RAX: ffffffffffffffda RBX: 00007fae1e375fa0 RCX: 00007fae1e185d29 [ 277.841411][ T9396] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000b [ 277.849386][ T9396] RBP: 00007fae1ef10090 R08: 0000000020000040 R09: 0000000000000000 [ 277.857357][ T9396] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001 [ 277.865327][ T9396] R13: 0000000000000000 R14: 00007fae1e375fa0 R15: 00007ffc4c7ccab8 [ 277.873314][ T9396] [ 277.980959][ T9397] db_root: cannot open:  [ 277.998508][ T9395] db_root: cannot open:  [ 279.054174][ T9406] db_root: cannot open:  [ 279.094913][ T9401] db_root: cannot open:  [ 279.245569][ T9414] FAULT_INJECTION: forcing a failure. [ 279.245569][ T9414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.267367][ T9415] netlink: 334 bytes leftover after parsing attributes in process `syz.4.793'. [ 279.287821][ T9414] CPU: 1 UID: 0 PID: 9414 Comm: syz.3.792 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 279.298464][ T9414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 279.308538][ T9414] Call Trace: [ 279.311831][ T9414] [ 279.314778][ T9414] dump_stack_lvl+0x16c/0x1f0 [ 279.319489][ T9414] should_fail_ex+0x497/0x5b0 [ 279.324200][ T9414] _copy_from_user+0x2e/0xd0 [ 279.328827][ T9414] set_aoe_iflist+0x53/0xe0 [ 279.333353][ T9414] aoechr_write+0x74/0x160 [ 279.337788][ T9414] ? __pfx_aoechr_write+0x10/0x10 [ 279.342839][ T9414] vfs_writev+0x6da/0xdd0 [ 279.347193][ T9414] ? __pfx___lock_acquire+0x10/0x10 [ 279.352418][ T9414] ? find_held_lock+0x2d/0x110 [ 279.357216][ T9414] ? __pfx_vfs_writev+0x10/0x10 [ 279.362113][ T9414] ? __fget_files+0x1fc/0x3a0 [ 279.366821][ T9414] ? __pfx_lock_release+0x10/0x10 [ 279.371880][ T9414] ? __fget_files+0x206/0x3a0 [ 279.376604][ T9414] ? do_pwritev+0x1b1/0x270 [ 279.381131][ T9414] do_pwritev+0x1b1/0x270 [ 279.385486][ T9414] ? __pfx_do_pwritev+0x10/0x10 [ 279.390371][ T9414] do_syscall_64+0xcd/0x250 [ 279.394906][ T9414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.400829][ T9414] RIP: 0033:0x7f4b1e785d29 [ 279.405264][ T9414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.424890][ T9414] RSP: 002b:00007f4b1f536038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 279.433310][ T9414] RAX: ffffffffffffffda RBX: 00007f4b1e975fa0 RCX: 00007f4b1e785d29 [ 279.441286][ T9414] RDX: 0000000000000009 RSI: 0000000020000140 RDI: 0000000000000003 [ 279.449262][ T9414] RBP: 00007f4b1f536090 R08: 000c000000000000 R09: 0000000000000000 [ 279.457235][ T9414] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 279.465205][ T9414] R13: 0000000000000000 R14: 00007f4b1e975fa0 R15: 00007fff2b244068 [ 279.473190][ T9414] [ 279.593360][ T9414] aoe: copy from user failed [ 279.598192][ T9414] aoe: could not set interface list: too many interfaces [ 279.647199][ T9414] db_root: cannot open:  [ 279.671068][ T9415] db_root: cannot open:  [ 279.856693][ T9420] db_root: cannot open:  [ 279.915140][ T9419] netlink: 322 bytes leftover after parsing attributes in process `syz.3.795'. [ 279.925845][ T9419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.795'. [ 279.973236][ T9419] db_root: cannot open:  [ 280.048026][ T9431] db_root: cannot open:  [ 280.620107][ T9429] Process accounting paused [ 281.093124][ T9441] db_root: cannot open:  [ 281.353783][ T9458] db_root: cannot open:  [ 282.017145][ T9463] netlink: 'syz.3.807': attribute type 11 has an invalid length. [ 282.363846][ T9469] db_root: cannot open:  [ 283.437572][ T9495] db_root: cannot open:  [ 283.922163][ T9508] db_root: cannot open:  [ 286.130332][ T9510] db_root: cannot open:  [ 286.927582][ T9547] ======================================================= [ 286.927582][ T9547] WARNING: The mand mount option has been deprecated and [ 286.927582][ T9547] and is ignored by this kernel. Remove the mand [ 286.927582][ T9547] option from the mount to silence this warning. [ 286.927582][ T9547] ======================================================= [ 287.126299][ T9544] db_root: cannot open:  [ 287.295043][ T9553] db_root: cannot open:  [ 287.815406][ T9558] db_root: cannot open:  [ 288.032303][ T9569] db_root: cannot open:  [ 288.566410][ T9575] db_root: cannot open:  [ 289.610953][ T9583] db_root: cannot open:  [ 290.825013][ T9588] db_root: cannot open:  [ 290.963435][ T9603] db_root: cannot open:  [ 291.138744][ T9611] netlink: 'syz.3.841': attribute type 20 has an invalid length. [ 291.168768][ T9611] netlink: 330 bytes leftover after parsing attributes in process `syz.3.841'. [ 291.217392][ T9611] IPv6: NLM_F_CREATE should be specified when creating new route [ 291.929246][ T9611] db_root: cannot open:  [ 292.147131][ T9636] delete_channel: no stack [ 292.162065][ T9636] delete_channel: no stack [ 292.182363][ T9636] delete_channel: no stack [ 292.192474][ T9636] delete_channel: no stack [ 292.204881][ T9636] delete_channel: no stack [ 292.218596][ T9636] delete_channel: no stack [ 292.228719][ T9636] delete_channel: no stack [ 292.238296][ T9636] delete_channel: no stack [ 292.247055][ T9636] delete_channel: no stack [ 292.256152][ T9636] delete_channel: no stack [ 292.267113][ T9636] delete_channel: no stack [ 292.276145][ T9636] delete_channel: no stack [ 292.296067][ T9636] delete_channel: no stack [ 292.309929][ T9636] delete_channel: no stack [ 292.319484][ T9636] delete_channel: no stack [ 292.328605][ T9636] delete_channel: no stack [ 292.338752][ T9636] delete_channel: no stack [ 292.348262][ T9636] delete_channel: no stack [ 292.358835][ T9636] delete_channel: no stack [ 292.368125][ T9636] delete_channel: no stack [ 292.378443][ T9636] delete_channel: no stack [ 292.387898][ T9636] delete_channel: no stack [ 292.408421][ T9636] delete_channel: no stack [ 292.421024][ T9636] delete_channel: no stack [ 292.432287][ T9636] delete_channel: no stack [ 292.455679][ T9636] delete_channel: no stack [ 292.465763][ T9636] delete_channel: no stack [ 292.479457][ T9636] delete_channel: no stack [ 292.494854][ T9636] delete_channel: no stack [ 292.513275][ T9636] delete_channel: no stack [ 292.526706][ T9636] delete_channel: no stack [ 292.536682][ T9636] delete_channel: no stack [ 292.541437][ T9636] delete_channel: no stack [ 292.928450][ T9631] db_root: cannot open:  [ 293.219168][ T9647] db_root: cannot open:  [ 293.322671][ T9654] Process accounting resumed [ 294.166852][ T9672] ecryptfs_miscdev_write: Invalid packet size [0] [ 294.179117][ T9657] db_root: cannot open:  [ 294.664170][ T9683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.859'. [ 294.937081][ T9690] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 294.984915][ T9690] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 295.061259][ T9690] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 295.104728][ T9690] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 295.754865][ T9681] db_root: cannot open:  [ 295.982459][ T9708] openvswitch: netlink: Duplicate key (type 15). [ 296.742547][ T9706] db_root: cannot open:  [ 296.958004][ T9717] db_root: cannot open:  [ 296.973209][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 297.046542][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 297.127146][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 297.127156][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 298.069967][ T9732] db_root: cannot open:  [ 298.132537][ T9747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.874'. [ 298.192738][ T9747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.249846][ T9747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.332858][ T9747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.436590][ T9747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.663862][ T9754] db_root: cannot open:  [ 298.933425][ T9764] rtc_cmos 00:00: Alarms can be up to one day in the future [ 299.105878][ T9765] Process accounting paused [ 299.223040][ T9773] aoe: could not set interface list: too many interfaces [ 301.221506][ T9816] aoe: could not set interface list: too many interfaces [ 301.505382][ T9822] netlink: 28 bytes leftover after parsing attributes in process `syz.2.898'. [ 301.814784][ T9833] gspca_gl860.sensor: string doesn't fit in 6 chars. [ 302.608975][ T9841] aoe: copy from user failed [ 302.613616][ T9841] aoe: could not set interface list: too many interfaces [ 305.228318][ T9897] netlink: 350 bytes leftover after parsing attributes in process `syz.2.921'. [ 305.293322][ T9897] nbd: must specify an index to disconnect [ 305.656534][ T9900] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 306.356748][ T9920] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 309.401216][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.937'. [ 311.879893][ T9980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.948'. [ 313.526011][T10028] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 313.584624][T10028] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 314.095434][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.964'. [ 314.536905][T10046] aoe: could not set interface list: too many interfaces [ 315.687714][T10056] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 315.698152][T10056] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 315.715957][T10056] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 315.736790][T10056] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 315.988353][T10070] device-mapper: ioctl: device name cannot contain '/' [ 317.206568][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 317.449484][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.458685][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.766609][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 317.766669][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 317.772784][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 317.973630][T10109] sd 0:0:1:0: PR command failed: 1026 [ 317.996600][T10109] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 318.003368][T10109] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 318.411276][T10116] netlink: 342 bytes leftover after parsing attributes in process `syz.3.985'. [ 318.963302][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'. [ 324.587984][T10231] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1012'. [ 326.226550][T10250] Process accounting resumed [ 327.257081][T10281] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1024'. [ 327.266187][T10281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.344719][T10285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1025'. [ 327.530475][T10281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.942734][T10296] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1028'. [ 328.860822][T10313] can0: slcan on ptm0. [ 328.992531][T10312] can0 (unregistered): slcan off ptm0. [ 329.667714][T10318] Process accounting resumed [ 329.672563][T10318] db_root: cannot open:  [ 329.871580][T10351] db_root: cannot open:  [ 329.983673][T10359] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1038'. [ 330.093202][T10359] db_root: cannot open:  [ 331.289483][T10365] db_root: cannot open:  [ 331.301559][T10378] ceph: Failed to parse sending metrics switch value 'J' [ 331.501941][T10379] db_root: cannot open:  [ 331.555381][T10378] netlink: 'syz.4.1041': attribute type 21 has an invalid length. [ 331.605386][T10378] netlink: 326 bytes leftover after parsing attributes in process `syz.4.1041'. [ 331.804481][T10382] db_root: cannot open:  [ 332.980848][T10388] db_root: cannot open:  [ 332.986492][T10414] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1052'. [ 333.020794][T10412] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1052'. [ 333.146409][T10412] netlink: 134 bytes leftover after parsing attributes in process `syz.0.1052'. [ 333.169207][T10414] netlink: 134 bytes leftover after parsing attributes in process `syz.0.1052'. [ 333.268878][T10415] db_root: cannot open:  [ 333.527878][T10426] db_root: cannot open:  [ 333.708782][T10429] db_root: cannot open:  [ 334.054145][T10437] db_root: cannot open:  [ 334.157671][T10439] db_root: cannot open:  [ 334.874100][T10460] Invalid ELF header magic: != ELF [ 335.085659][T10452] db_root: cannot open:  [ 335.592740][T10470] db_root: cannot open:  [ 335.603336][T10480] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1072'. [ 335.644605][T10472] db_root: cannot open:  [ 335.698773][T10469] db_root: cannot open:  [ 336.076679][T10488] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1075'. [ 336.286810][T10484] db_root: cannot open:  [ 337.220554][T10492] db_root: cannot open:  [ 337.670425][T10516] db_root: cannot open:  [ 338.164620][T10514] kexec: Could not allocate control_code_buffer [ 338.205149][T10525] db_root: cannot open:  [ 338.329841][ T29] audit: type=1800 audit(4294967344.383:16): pid=10534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1086" name="version" dev="configfs" ino=30137 res=0 errno=0 [ 338.601725][T10534] db_root: cannot open:  [ 338.819209][T10550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1090'. [ 338.846917][T10550] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 338.948902][T10546] db_root: cannot open:  [ 339.155790][T10561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1091'. [ 339.363750][T10561] team_slave_1 (unregistering): left promiscuous mode [ 339.376615][T10561] team_slave_1 (unregistering): left allmulticast mode [ 339.442950][T10561] team0: Port device team_slave_1 removed [ 339.826631][T10555] db_root: cannot open:  [ 340.031653][T10572] db_root: cannot open:  [ 340.217755][T10575] db_root: cannot open:  [ 340.936040][T10582] db_root: cannot open:  [ 341.671983][T10593] db_root: cannot open:  [ 342.892106][T10611] db_root: cannot open:  [ 343.274746][T10621] db_root: cannot open:  [ 343.581746][T10627] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1110'. [ 343.725391][T10627] db_root: cannot open:  [ 344.352443][T10634] db_root: cannot open:  [ 344.565431][T10645] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1115'. [ 344.756222][T10645] db_root: cannot open:  [ 345.938010][T10652] db_root: cannot open:  [ 346.407034][T10595] db_root: cannot open:  [ 347.160236][T10691] db_root: cannot open:  [ 347.373200][T10674] db_root: cannot open:  [ 348.514132][T10695] db_root: cannot open:  [ 348.713839][T10703] db_root: cannot open:  [ 348.935483][T10717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1131'. [ 349.700318][T10717] db_root: cannot open:  [ 350.720452][T10725] db_root: cannot open:  [ 350.902521][T10750] db_root: cannot open:  [ 351.920640][T10758] db_root: cannot open:  [ 352.313803][T10769] db_root: cannot open:  [ 353.065160][T10772] db_root: cannot open:  [ 353.198493][T10787] FAULT_INJECTION: forcing a failure. [ 353.198493][T10787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.232131][T10787] CPU: 0 UID: 0 PID: 10787 Comm: syz.3.1149 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 353.242956][T10787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 353.253041][T10787] Call Trace: [ 353.256350][T10787] [ 353.259311][T10787] dump_stack_lvl+0x16c/0x1f0 [ 353.264026][T10787] should_fail_ex+0x497/0x5b0 [ 353.268746][T10787] _copy_from_user+0x2e/0xd0 [ 353.273374][T10787] copy_msghdr_from_user+0x99/0x160 [ 353.278607][T10787] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 353.284452][T10787] ? __pfx___lock_acquire+0x10/0x10 [ 353.289688][T10787] ___sys_recvmsg+0xdc/0x1a0 [ 353.294330][T10787] ? __pfx____sys_recvmsg+0x10/0x10 [ 353.299569][T10787] ? __pfx_lock_release+0x10/0x10 [ 353.304619][T10787] ? trace_lock_acquire+0x14e/0x1f0 [ 353.309874][T10787] do_recvmmsg+0x2f8/0x740 [ 353.314338][T10787] ? __pfx_do_recvmmsg+0x10/0x10 [ 353.319315][T10787] ? vfs_write+0x306/0x1150 [ 353.323855][T10787] ? __mutex_unlock_slowpath+0x164/0x690 [ 353.329530][T10787] ? __fget_files+0x206/0x3a0 [ 353.334250][T10787] __x64_sys_recvmmsg+0x239/0x290 [ 353.339321][T10787] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 353.344897][T10787] do_syscall_64+0xcd/0x250 [ 353.349414][T10787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.355314][T10787] RIP: 0033:0x7f4b1e785d29 [ 353.359729][T10787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.379337][T10787] RSP: 002b:00007f4b1f536038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 353.387754][T10787] RAX: ffffffffffffffda RBX: 00007f4b1e975fa0 RCX: 00007f4b1e785d29 [ 353.395731][T10787] RDX: 0000000000010000 RSI: 0000000020000100 RDI: 0000000000000003 [ 353.403702][T10787] RBP: 00007f4b1f536090 R08: 0000000000000000 R09: 0000000000000000 [ 353.411675][T10787] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 353.419647][T10787] R13: 0000000000000000 R14: 00007f4b1e975fa0 R15: 00007fff2b244068 [ 353.427632][T10787] [ 353.535101][T10785] db_root: cannot open:  [ 354.544256][T10790] db_root: cannot open:  [ 355.230603][T10820] db_root: cannot open:  [ 355.530120][T10825] db_root: cannot open:  [ 356.084344][T10833] db_root: cannot open:  [ 356.238618][T10838] db_root: cannot open:  [ 357.138122][T10839] db_root: cannot open:  [ 357.486403][T10859] db_root: cannot open:  [ 357.656634][T10860] db_root: cannot open:  [ 357.810870][T10864] db_root: cannot open:  [ 358.108596][T10866] db_root: cannot open:  [ 358.320691][T10872] db_root: cannot open:  [ 359.380913][T10875] db_root: cannot open:  [ 360.530535][T10914] Process accounting paused [ 360.617240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 360.626162][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 360.634673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 360.858629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 360.867518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 360.876380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 361.461610][T10927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1177'. [ 361.827229][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 361.838441][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 361.849302][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 361.858318][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 361.865991][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 361.874418][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.436764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 362.494104][T10931] chnl_net:caif_netlink_parms(): no params data found [ 362.821917][T10931] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.829231][T10931] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.836563][T10931] bridge_slave_0: entered allmulticast mode [ 362.843623][T10931] bridge_slave_0: entered promiscuous mode [ 362.852253][T10931] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.866636][T10931] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.873855][T10931] bridge_slave_1: entered allmulticast mode [ 362.880954][T10931] bridge_slave_1: entered promiscuous mode [ 362.952682][T10931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.985485][T10931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.247489][T10953] queue_state_write: unsupported operation '' [ 363.254065][T10953] queue_state_write: use 'run', 'start' or 'kick' [ 363.281161][T10931] team0: Port device team_slave_0 added [ 363.305040][T10931] team0: Port device team_slave_1 added [ 363.579449][T10931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.587503][T10931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.649095][T10931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.687612][T10931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.706481][T10931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.770486][T10931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.932001][ T5835] Bluetooth: hci0: command tx timeout [ 364.081679][T10931] hsr_slave_0: entered promiscuous mode [ 364.107730][T10931] hsr_slave_1: entered promiscuous mode [ 364.159152][T10931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.185157][T10931] Cannot create hsr debugfs directory [ 364.920973][T10931] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 365.070459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 365.176730][T10931] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 365.290836][T10931] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 365.379812][T10931] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 365.929279][T10931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.998630][T10931] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.008138][ T5835] Bluetooth: hci0: command tx timeout [ 366.035292][ T8132] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.042499][ T8132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.100753][ T8132] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.107906][ T8132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.205444][T10931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.493424][T10931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.906170][T10931] veth0_vlan: entered promiscuous mode [ 366.924164][T10931] veth1_vlan: entered promiscuous mode [ 366.996855][T10931] veth0_macvtap: entered promiscuous mode [ 367.033091][T10931] veth1_macvtap: entered promiscuous mode [ 367.068236][T10931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.090873][T10931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.107960][T10931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.123682][T10931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.146529][T10931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.166838][T10931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.206841][T10931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.227490][T10931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.237695][T10931] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.256744][T10931] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.267023][T10931] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.275753][T10931] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.901658][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.947916][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.037252][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 368.043589][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 368.090761][ T5835] Bluetooth: hci0: command tx timeout [ 368.309700][ T3008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.348879][ T3008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.318069][T11002] FAULT_INJECTION: forcing a failure. [ 369.318069][T11002] name failslab, interval 1, probability 0, space 0, times 0 [ 369.346485][T11002] CPU: 0 UID: 0 PID: 11002 Comm: syz.2.1194 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 369.357309][T11002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 369.367393][T11002] Call Trace: [ 369.370694][T11002] [ 369.373650][T11002] dump_stack_lvl+0x16c/0x1f0 [ 369.378369][T11002] should_fail_ex+0x497/0x5b0 [ 369.383085][T11002] ? fs_reclaim_acquire+0xae/0x150 [ 369.388236][T11002] should_failslab+0xc2/0x120 [ 369.392955][T11002] __kmalloc_cache_noprof+0x68/0x420 [ 369.398274][T11002] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 369.405677][T11002] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 369.413083][T11002] genl_start+0x1e7/0x960 [ 369.417431][T11002] __netlink_dump_start+0x615/0x980 [ 369.422639][T11002] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 369.428370][T11002] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 369.434647][T11002] ? __pfx_genl_get_cmd+0x10/0x10 [ 369.439691][T11002] ? __pfx_genl_start+0x10/0x10 [ 369.444556][T11002] ? __pfx_genl_dumpit+0x10/0x10 [ 369.449504][T11002] ? __pfx_genl_done+0x10/0x10 [ 369.454281][T11002] ? __radix_tree_lookup+0x21f/0x2c0 [ 369.459577][T11002] genl_rcv_msg+0x470/0x800 [ 369.464093][T11002] ? __pfx_genl_rcv_msg+0x10/0x10 [ 369.469126][T11002] ? __pfx_ethnl_default_start+0x10/0x10 [ 369.474769][T11002] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 369.480500][T11002] ? __pfx_ethnl_default_done+0x10/0x10 [ 369.486084][T11002] netlink_rcv_skb+0x165/0x410 [ 369.490868][T11002] ? __pfx_genl_rcv_msg+0x10/0x10 [ 369.495913][T11002] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 369.501232][T11002] ? down_read+0xc9/0x330 [ 369.505586][T11002] ? __pfx_down_read+0x10/0x10 [ 369.510361][T11002] ? netlink_deliver_tap+0x1ae/0xca0 [ 369.515658][T11002] genl_rcv+0x28/0x40 [ 369.519649][T11002] netlink_unicast+0x53c/0x7f0 [ 369.524422][T11002] ? __pfx_netlink_unicast+0x10/0x10 [ 369.529712][T11002] ? __phys_addr_symbol+0x30/0x80 [ 369.534744][T11002] ? __check_object_size+0x488/0x710 [ 369.540043][T11002] netlink_sendmsg+0x8b8/0xd70 [ 369.544818][T11002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.550122][T11002] ____sys_sendmsg+0x9ae/0xb40 [ 369.554892][T11002] ? copy_msghdr_from_user+0x10b/0x160 [ 369.560359][T11002] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.565663][T11002] ___sys_sendmsg+0x135/0x1e0 [ 369.570351][T11002] ? __pfx____sys_sendmsg+0x10/0x10 [ 369.575567][T11002] ? __pfx_lock_release+0x10/0x10 [ 369.580594][T11002] ? trace_lock_acquire+0x14e/0x1f0 [ 369.585809][T11002] ? __fget_files+0x206/0x3a0 [ 369.590502][T11002] __sys_sendmsg+0x16e/0x220 [ 369.595100][T11002] ? __pfx___sys_sendmsg+0x10/0x10 [ 369.600239][T11002] do_syscall_64+0xcd/0x250 [ 369.604755][T11002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.610656][T11002] RIP: 0033:0x7f945a785d29 [ 369.615077][T11002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.634689][T11002] RSP: 002b:00007f945b62d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.643112][T11002] RAX: ffffffffffffffda RBX: 00007f945a975fa0 RCX: 00007f945a785d29 [ 369.651082][T11002] RDX: 0000000000004010 RSI: 0000000020000100 RDI: 0000000000000003 [ 369.659053][T11002] RBP: 00007f945b62d090 R08: 0000000000000000 R09: 0000000000000000 [ 369.667024][T11002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.675098][T11002] R13: 0000000000000000 R14: 00007f945a975fa0 R15: 00007ffe8fa477e8 [ 369.683100][T11002] [ 370.176759][ T5835] Bluetooth: hci0: command tx timeout [ 371.562915][T11034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'. [ 372.208517][T11055] kernel read not supported for file /#)-\&[} (pid: 11055 comm: syz.2.1205) [ 372.240463][ T29] audit: type=1800 audit(4294967378.293:17): pid=11055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1205" name="#)-\&[}" dev="mqueue" ino=23667 res=0 errno=0 [ 372.872054][T11064] vivid-013: ================= START STATUS ================= [ 372.916011][T11064] vivid-013: Generate PTS: true [ 372.931871][T11064] vivid-013: Generate SCR: true [ 372.936865][T11064] tpg source WxH: 640x360 (Y'CbCr) [ 372.942366][T11064] tpg field: 1 [ 372.945773][T11064] tpg crop: 640x360@0x0 [ 372.950470][T11064] tpg compose: 640x360@0x0 [ 372.955474][T11064] tpg colorspace: 8 [ 372.976649][T11064] tpg transfer function: 0/0 [ 372.981672][T11064] tpg Y'CbCr encoding: 0/0 [ 372.986689][T11064] tpg quantization: 0/0 [ 372.990874][T11064] tpg RGB range: 0/2 [ 372.997024][T11064] vivid-013: ================== END STATUS ================== [ 373.076307][T11074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1212'. [ 373.086752][T11074] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 378.208622][T11152] syz.0.1233 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 378.890814][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.902263][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.625733][T11193] lo: entered allmulticast mode [ 379.698026][T11196] lo: left allmulticast mode [ 380.606153][T11217] FAULT_INJECTION: forcing a failure. [ 380.606153][T11217] name failslab, interval 1, probability 0, space 0, times 0 [ 380.620978][T11217] CPU: 1 UID: 0 PID: 11217 Comm: syz.5.1243 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 380.631786][T11217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 380.641871][T11217] Call Trace: [ 380.645170][T11217] [ 380.648119][T11217] dump_stack_lvl+0x16c/0x1f0 [ 380.652831][T11217] should_fail_ex+0x497/0x5b0 [ 380.657541][T11217] ? fs_reclaim_acquire+0xae/0x150 [ 380.662707][T11217] should_failslab+0xc2/0x120 [ 380.667421][T11217] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 380.673261][T11217] ? __alloc_skb+0x2b3/0x380 [ 380.677893][T11217] __alloc_skb+0x2b3/0x380 [ 380.682352][T11217] ? __pfx___alloc_skb+0x10/0x10 [ 380.687339][T11217] ? ethnl_parse_header_dev_get+0x35e/0x9a0 [ 380.693277][T11217] netlink_dump+0x699/0xd00 [ 380.697795][T11217] ? __pfx_netlink_dump+0x10/0x10 [ 380.702829][T11217] ? rcu_is_watching+0x12/0xc0 [ 380.707617][T11217] ? ethnl_default_start+0x2dd/0x420 [ 380.712923][T11217] ? kasan_save_track+0x14/0x30 [ 380.717786][T11217] ? __pfx_ethnl_default_start+0x10/0x10 [ 380.723447][T11217] ? genl_start+0x67d/0x960 [ 380.727975][T11217] __netlink_dump_start+0x6d9/0x980 [ 380.733195][T11217] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 380.738931][T11217] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 380.745191][T11217] ? __pfx_genl_get_cmd+0x10/0x10 [ 380.750224][T11217] ? __pfx_genl_start+0x10/0x10 [ 380.755079][T11217] ? __pfx_genl_dumpit+0x10/0x10 [ 380.760021][T11217] ? __pfx_genl_done+0x10/0x10 [ 380.764796][T11217] ? __radix_tree_lookup+0x21f/0x2c0 [ 380.770094][T11217] genl_rcv_msg+0x470/0x800 [ 380.774606][T11217] ? __pfx_genl_rcv_msg+0x10/0x10 [ 380.779647][T11217] ? __pfx_ethnl_default_start+0x10/0x10 [ 380.785298][T11217] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 380.791024][T11217] ? __pfx_ethnl_default_done+0x10/0x10 [ 380.796588][T11217] netlink_rcv_skb+0x165/0x410 [ 380.801356][T11217] ? __pfx_genl_rcv_msg+0x10/0x10 [ 380.806387][T11217] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 380.811691][T11217] ? down_read+0xc9/0x330 [ 380.816027][T11217] ? __pfx_down_read+0x10/0x10 [ 380.820801][T11217] ? netlink_deliver_tap+0x1ae/0xca0 [ 380.826093][T11217] genl_rcv+0x28/0x40 [ 380.830083][T11217] netlink_unicast+0x53c/0x7f0 [ 380.834858][T11217] ? __pfx_netlink_unicast+0x10/0x10 [ 380.840166][T11217] ? __phys_addr_symbol+0x30/0x80 [ 380.845220][T11217] ? __check_object_size+0x488/0x710 [ 380.850533][T11217] netlink_sendmsg+0x8b8/0xd70 [ 380.855312][T11217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.860614][T11217] ____sys_sendmsg+0x9ae/0xb40 [ 380.865383][T11217] ? copy_msghdr_from_user+0x10b/0x160 [ 380.870852][T11217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.876153][T11217] ___sys_sendmsg+0x135/0x1e0 [ 380.880850][T11217] ? __pfx____sys_sendmsg+0x10/0x10 [ 380.886075][T11217] ? __pfx_lock_release+0x10/0x10 [ 380.891106][T11217] ? trace_lock_acquire+0x14e/0x1f0 [ 380.896323][T11217] ? __fget_files+0x206/0x3a0 [ 380.901013][T11217] __sys_sendmsg+0x16e/0x220 [ 380.905615][T11217] ? __pfx___sys_sendmsg+0x10/0x10 [ 380.910759][T11217] do_syscall_64+0xcd/0x250 [ 380.915272][T11217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.921172][T11217] RIP: 0033:0x7eff4ab85d29 [ 380.925590][T11217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.945199][T11217] RSP: 002b:00007eff4b8e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.953631][T11217] RAX: ffffffffffffffda RBX: 00007eff4ad75fa0 RCX: 00007eff4ab85d29 [ 380.961625][T11217] RDX: 0000000000004010 RSI: 0000000020000100 RDI: 0000000000000003 [ 380.969608][T11217] RBP: 00007eff4b8e1090 R08: 0000000000000000 R09: 0000000000000000 [ 380.977583][T11217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 380.985554][T11217] R13: 0000000000000000 R14: 00007eff4ad75fa0 R15: 00007fff1af3a6f8 [ 380.993540][T11217] [ 381.543551][T11234] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1250'. [ 383.678712][T11302] netlink: 'syz.0.1273': attribute type 21 has an invalid length. [ 383.696547][T11302] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1273'. [ 383.923105][T11308] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1273'. [ 383.952949][T11308] ip6tnl0: entered promiscuous mode [ 384.310006][T11323] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 384.971397][T11339] FAULT_INJECTION: forcing a failure. [ 384.971397][T11339] name failslab, interval 1, probability 0, space 0, times 0 [ 384.994661][T11339] CPU: 0 UID: 0 PID: 11339 Comm: syz.5.1287 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 385.005486][T11339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 385.015568][T11339] Call Trace: [ 385.018852][T11339] [ 385.021783][T11339] dump_stack_lvl+0x16c/0x1f0 [ 385.026473][T11339] should_fail_ex+0x497/0x5b0 [ 385.031166][T11339] should_failslab+0xc2/0x120 [ 385.035854][T11339] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 385.041239][T11339] ? skb_clone+0x190/0x3f0 [ 385.045669][T11339] skb_clone+0x190/0x3f0 [ 385.049923][T11339] netlink_deliver_tap+0xafd/0xca0 [ 385.055046][T11339] netlink_dump+0xb60/0xd00 [ 385.059556][T11339] ? __pfx_netlink_dump+0x10/0x10 [ 385.064580][T11339] ? rcu_is_watching+0x12/0xc0 [ 385.069363][T11339] ? ethnl_default_start+0x2dd/0x420 [ 385.074660][T11339] ? kasan_save_track+0x14/0x30 [ 385.079528][T11339] ? __pfx_ethnl_default_start+0x10/0x10 [ 385.085171][T11339] ? genl_start+0x67d/0x960 [ 385.089688][T11339] __netlink_dump_start+0x6d9/0x980 [ 385.094894][T11339] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 385.100624][T11339] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 385.106880][T11339] ? __pfx_genl_get_cmd+0x10/0x10 [ 385.111906][T11339] ? __pfx_genl_start+0x10/0x10 [ 385.116764][T11339] ? __pfx_genl_dumpit+0x10/0x10 [ 385.121704][T11339] ? __pfx_genl_done+0x10/0x10 [ 385.126484][T11339] ? __radix_tree_lookup+0x21f/0x2c0 [ 385.131798][T11339] genl_rcv_msg+0x470/0x800 [ 385.136311][T11339] ? __pfx_genl_rcv_msg+0x10/0x10 [ 385.141345][T11339] ? __pfx_ethnl_default_start+0x10/0x10 [ 385.146989][T11339] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 385.152722][T11339] ? __pfx_ethnl_default_done+0x10/0x10 [ 385.158284][T11339] netlink_rcv_skb+0x165/0x410 [ 385.163058][T11339] ? __pfx_genl_rcv_msg+0x10/0x10 [ 385.168092][T11339] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 385.173397][T11339] ? down_read+0xc9/0x330 [ 385.177738][T11339] ? __pfx_down_read+0x10/0x10 [ 385.182516][T11339] ? netlink_deliver_tap+0x1ae/0xca0 [ 385.187811][T11339] genl_rcv+0x28/0x40 [ 385.191797][T11339] netlink_unicast+0x53c/0x7f0 [ 385.196575][T11339] ? __pfx_netlink_unicast+0x10/0x10 [ 385.201876][T11339] ? __phys_addr_symbol+0x30/0x80 [ 385.206908][T11339] ? __check_object_size+0x488/0x710 [ 385.212207][T11339] netlink_sendmsg+0x8b8/0xd70 [ 385.216981][T11339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.222282][T11339] ____sys_sendmsg+0x9ae/0xb40 [ 385.227054][T11339] ? copy_msghdr_from_user+0x10b/0x160 [ 385.232523][T11339] ? __pfx_____sys_sendmsg+0x10/0x10 [ 385.237822][T11339] ___sys_sendmsg+0x135/0x1e0 [ 385.242514][T11339] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.247738][T11339] ? __pfx_lock_release+0x10/0x10 [ 385.252765][T11339] ? trace_lock_acquire+0x14e/0x1f0 [ 385.257980][T11339] ? __fget_files+0x206/0x3a0 [ 385.262672][T11339] __sys_sendmsg+0x16e/0x220 [ 385.267275][T11339] ? __pfx___sys_sendmsg+0x10/0x10 [ 385.272415][T11339] do_syscall_64+0xcd/0x250 [ 385.276931][T11339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.282834][T11339] RIP: 0033:0x7eff4ab85d29 [ 385.287256][T11339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.306869][T11339] RSP: 002b:00007eff4b8e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.315290][T11339] RAX: ffffffffffffffda RBX: 00007eff4ad75fa0 RCX: 00007eff4ab85d29 [ 385.323265][T11339] RDX: 0000000000004010 RSI: 0000000020000100 RDI: 0000000000000003 [ 385.331240][T11339] RBP: 00007eff4b8e1090 R08: 0000000000000000 R09: 0000000000000000 [ 385.339211][T11339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 385.347182][T11339] R13: 0000000000000000 R14: 00007eff4ad75fa0 R15: 00007fff1af3a6f8 [ 385.355167][T11339] [ 385.543738][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 385.568006][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 385.583870][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 385.625005][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 385.644945][ T5838] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 385.655952][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 386.014682][T11350] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1288'. [ 386.091511][T11347] netlink: 352 bytes leftover after parsing attributes in process `syz.5.1288'. [ 386.116265][T11337] kexec: Could not allocate control_code_buffer [ 386.137481][T11349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1289'. [ 386.199979][T11341] chnl_net:caif_netlink_parms(): no params data found [ 386.487776][T11341] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.494910][T11341] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.516301][T11341] bridge_slave_0: entered allmulticast mode [ 386.523603][T11341] bridge_slave_0: entered promiscuous mode [ 386.543810][T11341] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.561373][T11341] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.577861][T11341] bridge_slave_1: entered allmulticast mode [ 386.588246][T11341] bridge_slave_1: entered promiscuous mode [ 386.763439][T11341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.780784][T11341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.858415][T11341] team0: Port device team_slave_0 added [ 386.875531][T11341] team0: Port device team_slave_1 added [ 386.965187][T11341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.975052][T11341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.006703][T11341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.032668][T11341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.039915][T11341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.066651][T11341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.088876][T11373] FAULT_INJECTION: forcing a failure. [ 387.088876][T11373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.110440][T11373] CPU: 1 UID: 0 PID: 11373 Comm: syz.0.1295 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 387.121242][T11373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 387.131294][T11373] Call Trace: [ 387.134561][T11373] [ 387.137483][T11373] dump_stack_lvl+0x16c/0x1f0 [ 387.142155][T11373] should_fail_ex+0x497/0x5b0 [ 387.146828][T11373] _copy_to_user+0x32/0xd0 [ 387.151240][T11373] simple_read_from_buffer+0xd0/0x160 [ 387.156623][T11373] proc_fail_nth_read+0x198/0x270 [ 387.161644][T11373] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 387.167203][T11373] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 387.172764][T11373] vfs_read+0x1df/0xbe0 [ 387.176943][T11373] ? __fget_files+0x1fc/0x3a0 [ 387.181612][T11373] ? __pfx___mutex_lock+0x10/0x10 [ 387.186630][T11373] ? __pfx_vfs_read+0x10/0x10 [ 387.191302][T11373] ? __fget_files+0x206/0x3a0 [ 387.195971][T11373] ksys_read+0x12b/0x250 [ 387.200204][T11373] ? __pfx_ksys_read+0x10/0x10 [ 387.204961][T11373] do_syscall_64+0xcd/0x250 [ 387.209458][T11373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.215343][T11373] RIP: 0033:0x7fae1e18473c [ 387.219751][T11373] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 387.239357][T11373] RSP: 002b:00007fae1ef10030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 387.247761][T11373] RAX: ffffffffffffffda RBX: 00007fae1e375fa0 RCX: 00007fae1e18473c [ 387.255721][T11373] RDX: 000000000000000f RSI: 00007fae1ef100a0 RDI: 0000000000000004 [ 387.263682][T11373] RBP: 00007fae1ef10090 R08: 0000000000000000 R09: 0000000000000000 [ 387.271648][T11373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 387.279608][T11373] R13: 0000000000000000 R14: 00007fae1e375fa0 R15: 00007ffc4c7ccab8 [ 387.287577][T11373] [ 387.317572][T11341] hsr_slave_0: entered promiscuous mode [ 387.323924][T11341] hsr_slave_1: entered promiscuous mode [ 387.335109][T11341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.342928][T11341] Cannot create hsr debugfs directory [ 387.776761][ T5838] Bluetooth: hci2: command tx timeout [ 387.854555][T11390] sg_write: data in/out 2059/169 bytes for SCSI command 0x57-- guessing data in; [ 387.854555][T11390] program syz.3.1300 not setting count and/or reply_len properly [ 387.980845][T11341] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 388.009203][T11341] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 388.047361][T11341] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 388.067117][T11341] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 388.095612][T11396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1301'. [ 388.145774][T11396] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 388.230422][T11341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.270015][T11341] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.311953][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.319148][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.393980][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.401146][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.808579][T11341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.249369][T11341] veth0_vlan: entered promiscuous mode [ 389.292263][T11341] veth1_vlan: entered promiscuous mode [ 389.363161][T11341] veth0_macvtap: entered promiscuous mode [ 389.386463][T11341] veth1_macvtap: entered promiscuous mode [ 389.424926][T11341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.458111][T11341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.477657][T11341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.514178][T11341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.551879][T11341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.608542][T11341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.636525][T11341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.677541][T11341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.706547][T11341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.716517][T11341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.753856][T11341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.788385][T11341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.816803][T11341] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.825550][T11341] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.849552][ T5838] Bluetooth: hci2: command tx timeout [ 389.866772][T11341] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.885975][T11341] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.165486][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1310'. [ 390.183982][ T8130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.216690][ T8130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.223829][T11441] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 390.267872][ T8130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.275730][ T8130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.663209][T11449] Process accounting resumed [ 390.679937][T11449] db_root: cannot open:  [ 390.839987][T11455] db_root: cannot open:  [ 391.464440][T11466] db_root: cannot open:  [ 391.926839][ T5838] Bluetooth: hci2: command tx timeout [ 392.886130][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1320'. [ 392.925570][T11481] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 393.738890][T11497] program syz.5.1325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 394.011116][ T5838] Bluetooth: hci2: command tx timeout [ 394.455386][T11508] FAULT_INJECTION: forcing a failure. [ 394.455386][T11508] name failslab, interval 1, probability 0, space 0, times 0 [ 394.527153][T11508] CPU: 0 UID: 0 PID: 11508 Comm: syz.0.1328 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 394.537979][T11508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 394.548065][T11508] Call Trace: [ 394.551365][T11508] [ 394.554323][T11508] dump_stack_lvl+0x16c/0x1f0 [ 394.559050][T11508] should_fail_ex+0x497/0x5b0 [ 394.563765][T11508] ? fs_reclaim_acquire+0xae/0x150 [ 394.568912][T11508] should_failslab+0xc2/0x120 [ 394.573626][T11508] __kmalloc_noprof+0xce/0x4f0 [ 394.578425][T11508] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 394.584085][T11508] ? tomoyo_realpath_from_path+0xbf/0x710 [ 394.589872][T11508] tomoyo_realpath_from_path+0xbf/0x710 [ 394.595454][T11508] ? tomoyo_path_number_perm+0x235/0x5b0 [ 394.601135][T11508] tomoyo_path_number_perm+0x248/0x5b0 [ 394.606634][T11508] ? tomoyo_path_number_perm+0x235/0x5b0 [ 394.612308][T11508] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 394.618370][T11508] ? __pfx_lock_release+0x10/0x10 [ 394.623421][T11508] ? trace_lock_acquire+0x14e/0x1f0 [ 394.628661][T11508] ? lock_acquire+0x2f/0xb0 [ 394.633187][T11508] ? __fget_files+0x40/0x3a0 [ 394.637812][T11508] ? __fget_files+0x206/0x3a0 [ 394.642525][T11508] security_file_ioctl+0x9b/0x240 [ 394.647596][T11508] __x64_sys_ioctl+0xb7/0x200 [ 394.652303][T11508] do_syscall_64+0xcd/0x250 [ 394.656881][T11508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.662807][T11508] RIP: 0033:0x7fae1e185d29 [ 394.667245][T11508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.686906][T11508] RSP: 002b:00007fae1ef10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 394.695359][T11508] RAX: ffffffffffffffda RBX: 00007fae1e375fa0 RCX: 00007fae1e185d29 [ 394.703359][T11508] RDX: 0000000000000000 RSI: 0000000040045402 RDI: 0000000000000003 [ 394.711357][T11508] RBP: 00007fae1ef10090 R08: 0000000000000000 R09: 0000000000000000 [ 394.719351][T11508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.727345][T11508] R13: 0000000000000000 R14: 00007fae1e375fa0 R15: 00007ffc4c7ccab8 [ 394.735363][T11508] [ 394.738462][ C0] vkms_vblank_simulate: vblank timer overrun [ 394.792125][T11508] ERROR: Out of memory at tomoyo_realpath_from_path. [ 394.808276][T11463] db_root: cannot open:  [ 395.231387][T11518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1331'. [ 395.246580][T11518] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 395.773724][T11530] db_root: cannot open:  [ 395.786895][T11511] db_root: cannot open:  [ 396.160180][T11532] db_root: cannot open:  [ 396.338841][T11536] db_root: cannot open:  [ 396.434351][T11540] FAULT_INJECTION: forcing a failure. [ 396.434351][T11540] name failslab, interval 1, probability 0, space 0, times 0 [ 396.462172][T11540] CPU: 0 UID: 0 PID: 11540 Comm: syz.3.1338 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 396.472998][T11540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 396.483080][T11540] Call Trace: [ 396.486371][T11540] [ 396.489313][T11540] dump_stack_lvl+0x16c/0x1f0 [ 396.494030][T11540] should_fail_ex+0x497/0x5b0 [ 396.498745][T11540] ? fs_reclaim_acquire+0xae/0x150 [ 396.503891][T11540] should_failslab+0xc2/0x120 [ 396.508608][T11540] __kmalloc_noprof+0xce/0x4f0 [ 396.513418][T11540] ? d_absolute_path+0x137/0x1b0 [ 396.518395][T11540] ? tomoyo_encode2+0x100/0x3e0 [ 396.523280][T11540] tomoyo_encode2+0x100/0x3e0 [ 396.527992][T11540] tomoyo_realpath_from_path+0x1a7/0x710 [ 396.533665][T11540] tomoyo_path_number_perm+0x248/0x5b0 [ 396.539164][T11540] ? tomoyo_path_number_perm+0x235/0x5b0 [ 396.544841][T11540] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 396.550893][T11540] ? __pfx_lock_release+0x10/0x10 [ 396.555942][T11540] ? trace_lock_acquire+0x14e/0x1f0 [ 396.561186][T11540] ? lock_acquire+0x2f/0xb0 [ 396.565714][T11540] ? __fget_files+0x40/0x3a0 [ 396.570346][T11540] ? __fget_files+0x206/0x3a0 [ 396.575065][T11540] security_file_ioctl+0x9b/0x240 [ 396.580119][T11540] __x64_sys_ioctl+0xb7/0x200 [ 396.584835][T11540] do_syscall_64+0xcd/0x250 [ 396.589374][T11540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.595299][T11540] RIP: 0033:0x7f4b1e785d29 [ 396.599736][T11540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.619377][T11540] RSP: 002b:00007f4b1f536038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.627823][T11540] RAX: ffffffffffffffda RBX: 00007f4b1e975fa0 RCX: 00007f4b1e785d29 [ 396.635821][T11540] RDX: 0000000000000000 RSI: 0000000040045402 RDI: 0000000000000003 [ 396.643817][T11540] RBP: 00007f4b1f536090 R08: 0000000000000000 R09: 0000000000000000 [ 396.651817][T11540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.659812][T11540] R13: 0000000000000000 R14: 00007f4b1e975fa0 R15: 00007fff2b244068 [ 396.667823][T11540] [ 396.670874][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.696726][T11540] ERROR: Out of memory at tomoyo_realpath_from_path. [ 396.830608][T11540] db_root: cannot open:  [ 397.665175][T11545] db_root: cannot open:  [ 398.331262][T11558] db_root: cannot open:  [ 398.659065][T11578] db_root: cannot open:  [ 399.597464][T11607] nfs: Unknown parameter '~p9kj|3M%' [ 399.734752][T11584] db_root: cannot open:  [ 399.943916][T11617] db_root: cannot open:  [ 400.271443][T11622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1357'. [ 400.346813][T11622] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 400.472273][T11625] Invalid ELF header magic: != ELF [ 400.565515][T11622] db_root: cannot open:  [ 400.744205][T11638] db_root: cannot open:  [ 401.113181][T11619] db_root: cannot open:  [ 401.328164][T11645] db_root: cannot open:  [ 402.197538][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 402.210342][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 402.219060][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 402.229124][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 402.237153][ T5835] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 402.244644][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 402.397397][T11673] chnl_net:caif_netlink_parms(): no params data found [ 402.464797][T11663] db_root: cannot open:  [ 402.518361][T11673] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.532375][T11682] db_root: cannot open:  [ 402.536339][T11673] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.568271][T11673] bridge_slave_0: entered allmulticast mode [ 402.583189][T11673] bridge_slave_0: entered promiscuous mode [ 402.605246][T11684] db_root: cannot open:  [ 402.612990][T11673] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.622513][T11673] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.636947][T11673] bridge_slave_1: entered allmulticast mode [ 402.643998][T11673] bridge_slave_1: entered promiscuous mode [ 402.703333][T11673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.718464][T11673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.733223][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1375'. [ 402.815107][T11673] team0: Port device team_slave_0 added [ 402.834457][T11673] team0: Port device team_slave_1 added [ 402.900539][T11689] can: request_module (can-proto-0) failed. [ 402.970319][T11673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.996852][T11673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.045138][T11673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.170573][T11673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.183674][T11673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.265960][T11673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.374971][T11673] hsr_slave_0: entered promiscuous mode [ 403.381667][T11673] hsr_slave_1: entered promiscuous mode [ 403.392072][T11673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.400570][T11673] Cannot create hsr debugfs directory [ 403.583146][T11687] db_root: cannot open:  [ 403.662346][T11673] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 403.689197][T11673] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 403.769257][T11673] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 403.819784][T11673] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 403.997419][T11673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.014420][T11714] db_root: cannot open:  [ 404.034978][T11673] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.080158][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.087315][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.135092][ T3008] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.142303][ T3008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.326750][ T5838] Bluetooth: hci3: command tx timeout [ 404.620841][T11673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.932545][T11738] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1384'. [ 404.946692][T11738] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 405.221916][T11673] veth0_vlan: entered promiscuous mode [ 405.259021][T11673] veth1_vlan: entered promiscuous mode [ 405.335610][T11673] veth0_macvtap: entered promiscuous mode [ 405.350270][T11673] veth1_macvtap: entered promiscuous mode [ 405.408422][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.437603][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.456959][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.481127][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.540662][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.556558][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.567678][T11673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.577774][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.588302][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.598222][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.608771][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.618704][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.629257][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.639171][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.649739][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.661665][T11673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.673350][T11673] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.682205][T11673] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.691046][T11673] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.699818][T11673] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.862239][ T2864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.888527][ T2864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.948255][ T8132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.969998][ T8132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.416865][ T5838] Bluetooth: hci3: command tx timeout [ 407.257529][T11782] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1397'. [ 407.305933][T11782] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1397'. [ 407.452609][T11785] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1398'. [ 407.507600][T11785] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 407.910138][T11794] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1400'. [ 408.486812][ T5838] Bluetooth: hci3: command tx timeout [ 410.312182][T11818] ima: policy update failed [ 410.363081][ T29] audit: type=1802 audit(4294967416.413:18): pid=11818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.1407" res=0 errno=0 [ 410.583097][ T5838] Bluetooth: hci3: command tx timeout [ 410.809804][T11829] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1408'. [ 410.856578][T11832] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1408'. [ 411.249908][T11836] Invalid ELF header magic: != ELF [ 411.921923][T11695] db_root: cannot open:  [ 412.770337][T11854] netlink: 330 bytes leftover after parsing attributes in process `syz.7.1415'. [ 412.809340][T11854] binder: 11853:11854 ioctl 400c620e 9 returned -22 [ 414.004449][T11721] db_root: cannot open:  [ 414.721564][T11875] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1422'. [ 414.745669][T11875] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 414.852516][T11873] db_root: cannot open:  [ 415.183841][T11887] db_root: cannot open:  [ 415.527218][T11896] FAULT_INJECTION: forcing a failure. [ 415.527218][T11896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.556522][T11896] CPU: 1 UID: 0 PID: 11896 Comm: syz.5.1425 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 415.567348][T11896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 415.577461][T11896] Call Trace: [ 415.580762][T11896] [ 415.583715][T11896] dump_stack_lvl+0x16c/0x1f0 [ 415.588432][T11896] should_fail_ex+0x497/0x5b0 [ 415.593148][T11896] _copy_from_user+0x2e/0xd0 [ 415.597783][T11896] sg_io+0x2da/0xd80 [ 415.601725][T11896] scsi_cdrom_send_packet+0x28b/0x660 [ 415.607146][T11896] ? __pfx_scsi_cdrom_send_packet+0x10/0x10 [ 415.613088][T11896] ? find_held_lock+0x2d/0x110 [ 415.617893][T11896] ? tomoyo_path_number_perm+0x298/0x5b0 [ 415.623561][T11896] ? __pfx_lock_release+0x10/0x10 [ 415.628608][T11896] scsi_ioctl+0x146/0x1840 [ 415.633036][T11896] ? __pfx___might_resched+0x10/0x10 [ 415.638325][T11896] ? __pfx_scsi_ioctl+0x10/0x10 [ 415.643188][T11896] ? scsi_block_when_processing_errors+0x2c1/0x380 [ 415.649692][T11896] ? __pfx_scsi_block_when_processing_errors+0x10/0x10 [ 415.656559][T11896] sd_ioctl+0x1b1/0x2c0 [ 415.660729][T11896] ? __pfx_sd_ioctl+0x10/0x10 [ 415.665413][T11896] blkdev_ioctl+0x273/0x670 [ 415.669926][T11896] ? __pfx_blkdev_ioctl+0x10/0x10 [ 415.674957][T11896] ? __fget_files+0x206/0x3a0 [ 415.679642][T11896] ? __pfx_blkdev_ioctl+0x10/0x10 [ 415.684677][T11896] __x64_sys_ioctl+0x190/0x200 [ 415.689460][T11896] do_syscall_64+0xcd/0x250 [ 415.693980][T11896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.699883][T11896] RIP: 0033:0x7eff4ab85d29 [ 415.704301][T11896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.723919][T11896] RSP: 002b:00007eff4b8e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 415.732344][T11896] RAX: ffffffffffffffda RBX: 00007eff4ad75fa0 RCX: 00007eff4ab85d29 [ 415.740318][T11896] RDX: 0000000000000005 RSI: 0000000000005393 RDI: 0000000000000004 [ 415.748290][T11896] RBP: 00007eff4b8e1090 R08: 0000000000000000 R09: 0000000000000000 [ 415.756266][T11896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.764239][T11896] R13: 0000000000000000 R14: 00007eff4ad75fa0 R15: 00007fff1af3a6f8 [ 415.772222][T11896] [ 415.870872][T11894] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1426'. [ 416.008530][T11892] db_root: cannot open:  [ 416.642753][T11905] db_root: cannot open:  [ 416.892463][T11915] db_root: cannot open:  [ 417.115348][T11921] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1432'. [ 417.155361][T11922] FAULT_INJECTION: forcing a failure. [ 417.155361][T11922] name failslab, interval 1, probability 0, space 0, times 0 [ 417.167417][T11921] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 417.185215][T11922] CPU: 1 UID: 0 PID: 11922 Comm: syz.3.1433 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 417.196025][T11922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 417.206106][T11922] Call Trace: [ 417.209407][T11922] [ 417.212365][T11922] dump_stack_lvl+0x16c/0x1f0 [ 417.217078][T11922] should_fail_ex+0x497/0x5b0 [ 417.221790][T11922] ? fs_reclaim_acquire+0xae/0x150 [ 417.226937][T11922] should_failslab+0xc2/0x120 [ 417.231654][T11922] __kmalloc_node_noprof+0xd1/0x520 [ 417.236891][T11922] ? __pfx___mutex_lock+0x10/0x10 [ 417.241945][T11922] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 417.247444][T11922] __kvmalloc_node_noprof+0xad/0x1a0 [ 417.252785][T11922] traverse.part.0.constprop.0+0x392/0x640 [ 417.258618][T11922] ? __pfx_lock_release+0x10/0x10 [ 417.263682][T11922] seq_read_iter+0x934/0x12b0 [ 417.268406][T11922] seq_read+0x39f/0x4e0 [ 417.272593][T11922] ? __pfx_seq_read+0x10/0x10 [ 417.277320][T11922] ? __pfx_seq_read+0x10/0x10 [ 417.282025][T11922] proc_reg_read+0x23d/0x330 [ 417.286645][T11922] ? __pfx_proc_reg_read+0x10/0x10 [ 417.291786][T11922] vfs_read+0x1df/0xbe0 [ 417.295972][T11922] ? __fget_files+0x1fc/0x3a0 [ 417.300682][T11922] ? __pfx_lock_release+0x10/0x10 [ 417.305731][T11922] ? __pfx_vfs_read+0x10/0x10 [ 417.310440][T11922] ? lock_acquire+0x2f/0xb0 [ 417.314969][T11922] ? __fget_files+0x40/0x3a0 [ 417.319595][T11922] ? __fget_files+0x206/0x3a0 [ 417.324312][T11922] __x64_sys_pread64+0x1f6/0x250 [ 417.329284][T11922] ? __pfx___x64_sys_pread64+0x10/0x10 [ 417.334789][T11922] do_syscall_64+0xcd/0x250 [ 417.339327][T11922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.345255][T11922] RIP: 0033:0x7f4b1e785d29 [ 417.349694][T11922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.369335][T11922] RSP: 002b:00007f4b1f515038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 417.377778][T11922] RAX: ffffffffffffffda RBX: 00007f4b1e976080 RCX: 00007f4b1e785d29 [ 417.385772][T11922] RDX: 000000000000594c RSI: 0000000000000000 RDI: 0000000000000003 [ 417.393767][T11922] RBP: 00007f4b1f515090 R08: 0000000000000000 R09: 0000000000000000 [ 417.401764][T11922] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 417.409764][T11922] R13: 0000000000000000 R14: 00007f4b1e976080 R15: 00007fff2b244068 [ 417.417777][T11922] [ 417.545719][T11924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1434'. [ 418.033041][T11920] db_root: cannot open:  [ 418.509988][T11944] FAULT_INJECTION: forcing a failure. [ 418.509988][T11944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.546337][T11944] CPU: 0 UID: 0 PID: 11944 Comm: syz.5.1438 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 418.557168][T11944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 418.567246][T11944] Call Trace: [ 418.570541][T11944] [ 418.573488][T11944] dump_stack_lvl+0x16c/0x1f0 [ 418.578199][T11944] should_fail_ex+0x497/0x5b0 [ 418.582911][T11944] _copy_to_user+0x32/0xd0 [ 418.587360][T11944] scsi_cdrom_send_packet+0x3b6/0x660 [ 418.592776][T11944] ? __pfx_scsi_cdrom_send_packet+0x10/0x10 [ 418.598717][T11944] ? find_held_lock+0x2d/0x110 [ 418.603516][T11944] ? tomoyo_path_number_perm+0x298/0x5b0 [ 418.609183][T11944] ? __pfx_lock_release+0x10/0x10 [ 418.614247][T11944] scsi_ioctl+0x146/0x1840 [ 418.618698][T11944] ? __pfx___might_resched+0x10/0x10 [ 418.624008][T11944] ? __pfx_scsi_ioctl+0x10/0x10 [ 418.628906][T11944] ? scsi_block_when_processing_errors+0x2c1/0x380 [ 418.635434][T11944] ? __pfx_scsi_block_when_processing_errors+0x10/0x10 [ 418.642337][T11944] sd_ioctl+0x1b1/0x2c0 [ 418.646546][T11944] ? __pfx_sd_ioctl+0x10/0x10 [ 418.651258][T11944] blkdev_ioctl+0x273/0x670 [ 418.655795][T11944] ? __pfx_blkdev_ioctl+0x10/0x10 [ 418.660848][T11944] ? __fget_files+0x206/0x3a0 [ 418.665562][T11944] ? __pfx_blkdev_ioctl+0x10/0x10 [ 418.670623][T11944] __x64_sys_ioctl+0x190/0x200 [ 418.675418][T11944] do_syscall_64+0xcd/0x250 [ 418.679963][T11944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.685889][T11944] RIP: 0033:0x7eff4ab85d29 [ 418.690328][T11944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.709971][T11944] RSP: 002b:00007eff4b8e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.718416][T11944] RAX: ffffffffffffffda RBX: 00007eff4ad75fa0 RCX: 00007eff4ab85d29 [ 418.726414][T11944] RDX: 0000000000000005 RSI: 0000000000005393 RDI: 0000000000000004 [ 418.734401][T11944] RBP: 00007eff4b8e1090 R08: 0000000000000000 R09: 0000000000000000 [ 418.742392][T11944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.750383][T11944] R13: 0000000000000000 R14: 00007eff4ad75fa0 R15: 00007fff1af3a6f8 [ 418.758396][T11944] [ 419.072567][T11936] db_root: cannot open:  [ 419.345235][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1443'. [ 419.374823][T11958] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 419.530276][T11956] db_root: cannot open:  [ 419.653034][T11970] FAULT_INJECTION: forcing a failure. [ 419.653034][T11970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.696713][T11970] CPU: 0 UID: 0 PID: 11970 Comm: syz.3.1446 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 419.707534][T11970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 419.717594][T11970] Call Trace: [ 419.720886][T11970] [ 419.723824][T11970] dump_stack_lvl+0x16c/0x1f0 [ 419.728513][T11970] should_fail_ex+0x497/0x5b0 [ 419.733210][T11970] _copy_to_iter+0x4a5/0x1400 [ 419.737908][T11970] ? __pfx__copy_to_iter+0x10/0x10 [ 419.743039][T11970] ? __virt_addr_valid+0x1a4/0x590 [ 419.748164][T11970] ? __virt_addr_valid+0x5e/0x590 [ 419.753209][T11970] ? __phys_addr_symbol+0x30/0x80 [ 419.758242][T11970] ? __check_object_size+0x488/0x710 [ 419.763543][T11970] seq_read_iter+0x725/0x12b0 [ 419.768235][T11970] seq_read+0x39f/0x4e0 [ 419.772393][T11970] ? __pfx_seq_read+0x10/0x10 [ 419.777115][T11970] ? __pfx_seq_read+0x10/0x10 [ 419.781795][T11970] proc_reg_read+0x23d/0x330 [ 419.786394][T11970] ? __pfx_proc_reg_read+0x10/0x10 [ 419.791516][T11970] vfs_read+0x1df/0xbe0 [ 419.795678][T11970] ? __fget_files+0x1fc/0x3a0 [ 419.800363][T11970] ? __pfx_lock_release+0x10/0x10 [ 419.805390][T11970] ? __pfx_vfs_read+0x10/0x10 [ 419.810077][T11970] ? lock_acquire+0x2f/0xb0 [ 419.814580][T11970] ? __fget_files+0x40/0x3a0 [ 419.819184][T11970] ? __fget_files+0x206/0x3a0 [ 419.823871][T11970] __x64_sys_pread64+0x1f6/0x250 [ 419.828815][T11970] ? __pfx___x64_sys_pread64+0x10/0x10 [ 419.834285][T11970] do_syscall_64+0xcd/0x250 [ 419.838799][T11970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.844699][T11970] RIP: 0033:0x7f4b1e785d29 [ 419.849122][T11970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.868735][T11970] RSP: 002b:00007f4b1f536038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 419.877153][T11970] RAX: ffffffffffffffda RBX: 00007f4b1e975fa0 RCX: 00007f4b1e785d29 [ 419.885138][T11970] RDX: 000000000000594c RSI: 0000000000000000 RDI: 0000000000000004 [ 419.893111][T11970] RBP: 00007f4b1f536090 R08: 0000000000000000 R09: 0000000000000000 [ 419.901083][T11970] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 419.909055][T11970] R13: 0000000000000000 R14: 00007f4b1e975fa0 R15: 00007fff2b244068 [ 419.917040][T11970] [ 420.595537][T11970] db_root: cannot open:  [ 421.012798][T11984] Process accounting paused [ 421.760511][T11997] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1451'. [ 422.097948][T12004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1454'. [ 422.135734][T12004] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 422.717905][T12008] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1456'. [ 422.740161][T12008] bridge_slave_1: left allmulticast mode [ 422.745845][T12008] bridge_slave_1: left promiscuous mode [ 422.779266][T12008] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.890784][T12008] bridge_slave_0: left allmulticast mode [ 422.911080][T12008] bridge_slave_0: left promiscuous mode [ 422.963406][T12008] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.214789][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1466'. [ 424.242471][T12044] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 424.544046][T12047] mmap: syz.6.1468 (12047): VmData 37601280 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 428.722820][T12101] netlink: 'syz.5.1483': attribute type 9 has an invalid length. [ 428.752403][T12101] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1483'. [ 429.547789][T12108] netlink: 326 bytes leftover after parsing attributes in process `syz.5.1484'. [ 429.607960][T12108] veth1_macvtap: left promiscuous mode [ 429.609392][T12115] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1486'. [ 429.695362][T12115] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 429.780060][T12118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1487'. [ 429.817119][T12118] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 430.070544][T12122] FAULT_INJECTION: forcing a failure. [ 430.070544][T12122] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 430.085829][T12122] CPU: 0 UID: 0 PID: 12122 Comm: syz.5.1490 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 430.096635][T12122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 430.106714][T12122] Call Trace: [ 430.110013][T12122] [ 430.112966][T12122] dump_stack_lvl+0x16c/0x1f0 [ 430.117684][T12122] should_fail_ex+0x497/0x5b0 [ 430.122402][T12122] ? fs_reclaim_acquire+0xae/0x150 [ 430.127550][T12122] should_fail_alloc_page+0xe7/0x130 [ 430.132877][T12122] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 430.139072][T12122] __alloc_pages_noprof+0x190/0x25b0 [ 430.144400][T12122] ? __pfx_mark_lock+0x10/0x10 [ 430.149198][T12122] ? __pfx___lock_acquire+0x10/0x10 [ 430.154420][T12122] ? mark_lock+0xb5/0xc60 [ 430.158784][T12122] ? hlock_class+0x4e/0x130 [ 430.163322][T12122] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 430.169081][T12122] ? find_held_lock+0x2d/0x110 [ 430.173879][T12122] ? hlock_class+0x4e/0x130 [ 430.178411][T12122] ? __lock_acquire+0xcc5/0x3c40 [ 430.183378][T12122] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 430.189305][T12122] ? policy_nodemask+0xea/0x4e0 [ 430.194203][T12122] alloc_pages_mpol_noprof+0x2c9/0x610 [ 430.199707][T12122] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 430.205727][T12122] ? find_held_lock+0x2d/0x110 [ 430.210531][T12122] folio_alloc_mpol_noprof+0x36/0xd0 [ 430.215843][T12122] shmem_alloc_folio+0x135/0x160 [ 430.220822][T12122] shmem_alloc_and_add_folio+0x48b/0xc00 [ 430.226484][T12122] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 430.232402][T12122] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 430.238583][T12122] ? shmem_huge_global_enabled+0x176/0x250 [ 430.244428][T12122] ? shmem_allowable_huge_orders+0xcd/0x3e0 [ 430.250395][T12122] shmem_get_folio_gfp+0x689/0x1530 [ 430.255631][T12122] ? mark_lock+0xb5/0xc60 [ 430.259999][T12122] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 430.265657][T12122] ? __pfx_mark_lock+0x10/0x10 [ 430.270465][T12122] shmem_fault+0x200/0xae0 [ 430.274915][T12122] ? __pfx_shmem_fault+0x10/0x10 [ 430.279890][T12122] ? __pfx_lock_release+0x10/0x10 [ 430.284942][T12122] ? __mod_memcg_lruvec_state+0x53c/0x750 [ 430.290694][T12122] ? __pfx_filemap_map_pages+0x10/0x10 [ 430.296186][T12122] ? mark_held_locks+0x9f/0xe0 [ 430.300988][T12122] ? pte_alloc_one+0x2a3/0x390 [ 430.305783][T12122] ? __pfx_filemap_map_pages+0x10/0x10 [ 430.311270][T12122] __do_fault+0x10a/0x490 [ 430.315626][T12122] ? __pfx_filemap_map_pages+0x10/0x10 [ 430.321110][T12122] do_pte_missing+0x1a8/0x3e00 [ 430.325922][T12122] __handle_mm_fault+0x103c/0x2a40 [ 430.331085][T12122] ? __pfx___handle_mm_fault+0x10/0x10 [ 430.336577][T12122] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 430.342253][T12122] ? find_vma+0xc0/0x140 [ 430.346528][T12122] ? __pfx_find_vma+0x10/0x10 [ 430.351228][T12122] ? __lock_acquire+0xcc5/0x3c40 [ 430.356193][T12122] handle_mm_fault+0x3fa/0xaa0 [ 430.360999][T12122] do_user_addr_fault+0x7a3/0x13f0 [ 430.366146][T12122] exc_page_fault+0x5c/0xc0 [ 430.370686][T12122] asm_exc_page_fault+0x26/0x30 [ 430.375571][T12122] RIP: 0010:rep_movs_alternative+0x15/0x70 [ 430.381422][T12122] Code: cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 [ 430.401057][T12122] RSP: 0018:ffffc90003d979c0 EFLAGS: 00050202 [ 430.407155][T12122] RAX: 0000000000000079 RBX: 0000000000000000 RCX: 0000000000000002 [ 430.415147][T12122] RDX: ffffed1006069802 RSI: ffff88803034c007 RDI: 0000000000000000 [ 430.423142][T12122] RBP: ffffc90003d97bd0 R08: 0000000000000000 R09: ffffed1006069801 [ 430.431139][T12122] R10: ffff88803034c008 R11: 0000000000000001 R12: 0000000000000002 [ 430.439136][T12122] R13: ffff88803034c007 R14: 0000000000000000 R15: 0000000000000002 [ 430.447144][T12122] _copy_to_iter+0x52f/0x1400 [ 430.451870][T12122] ? __pfx__copy_to_iter+0x10/0x10 [ 430.457025][T12122] ? __virt_addr_valid+0x1a4/0x590 [ 430.462178][T12122] ? __virt_addr_valid+0x5e/0x590 [ 430.467237][T12122] ? __phys_addr_symbol+0x30/0x80 [ 430.472294][T12122] ? __check_object_size+0x488/0x710 [ 430.477619][T12122] seq_read_iter+0x725/0x12b0 [ 430.482335][T12122] seq_read+0x39f/0x4e0 [ 430.486517][T12122] ? __pfx_seq_read+0x10/0x10 [ 430.491250][T12122] ? __pfx_seq_read+0x10/0x10 [ 430.495959][T12122] proc_reg_read+0x23d/0x330 [ 430.500582][T12122] ? __pfx_proc_reg_read+0x10/0x10 [ 430.505726][T12122] vfs_read+0x1df/0xbe0 [ 430.509922][T12122] ? __fget_files+0x1fc/0x3a0 [ 430.514630][T12122] ? __pfx_lock_release+0x10/0x10 [ 430.519688][T12122] ? __pfx_vfs_read+0x10/0x10 [ 430.524408][T12122] ? lock_acquire+0x2f/0xb0 [ 430.528943][T12122] ? __fget_files+0x40/0x3a0 [ 430.533573][T12122] ? __fget_files+0x206/0x3a0 [ 430.538303][T12122] __x64_sys_pread64+0x1f6/0x250 [ 430.543278][T12122] ? __pfx___x64_sys_pread64+0x10/0x10 [ 430.548779][T12122] do_syscall_64+0xcd/0x250 [ 430.553320][T12122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.559255][T12122] RIP: 0033:0x7eff4ab85d29 [ 430.563701][T12122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.583339][T12122] RSP: 002b:00007eff4b8e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 430.591787][T12122] RAX: ffffffffffffffda RBX: 00007eff4ad75fa0 RCX: 00007eff4ab85d29 [ 430.599784][T12122] RDX: 000000000000594c RSI: 0000000000000000 RDI: 0000000000000004 [ 430.607778][T12122] RBP: 00007eff4b8e1090 R08: 0000000000000000 R09: 0000000000000000 [ 430.615779][T12122] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 430.623773][T12122] R13: 0000000000000000 R14: 00007eff4ad75fa0 R15: 00007fff1af3a6f8 [ 430.631793][T12122] [ 432.567530][T12181] FAULT_INJECTION: forcing a failure. [ 432.567530][T12181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.613238][T12181] CPU: 0 UID: 0 PID: 12181 Comm: syz.5.1503 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 432.624063][T12181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 432.634143][T12181] Call Trace: [ 432.637446][T12181] [ 432.640394][T12181] dump_stack_lvl+0x16c/0x1f0 [ 432.645103][T12181] should_fail_ex+0x497/0x5b0 [ 432.649821][T12181] _copy_to_iter+0x4a5/0x1400 [ 432.654540][T12181] ? __pfx__copy_to_iter+0x10/0x10 [ 432.659684][T12181] ? __virt_addr_valid+0x1a4/0x590 [ 432.664833][T12181] ? __virt_addr_valid+0x5e/0x590 [ 432.669884][T12181] ? __phys_addr_symbol+0x30/0x80 [ 432.674917][T12181] ? __check_object_size+0x488/0x710 [ 432.680217][T12181] seq_read_iter+0xd00/0x12b0 [ 432.684914][T12181] seq_read+0x39f/0x4e0 [ 432.689079][T12181] ? __pfx_seq_read+0x10/0x10 [ 432.693778][T12181] ? __pfx_seq_read+0x10/0x10 [ 432.698460][T12181] proc_reg_read+0x23d/0x330 [ 432.703055][T12181] ? __pfx_proc_reg_read+0x10/0x10 [ 432.708174][T12181] vfs_read+0x1df/0xbe0 [ 432.712352][T12181] ? __fget_files+0x1fc/0x3a0 [ 432.717043][T12181] ? __pfx_lock_release+0x10/0x10 [ 432.722072][T12181] ? __pfx_vfs_read+0x10/0x10 [ 432.726761][T12181] ? lock_acquire+0x2f/0xb0 [ 432.731268][T12181] ? __fget_files+0x40/0x3a0 [ 432.735871][T12181] ? __fget_files+0x206/0x3a0 [ 432.740564][T12181] __x64_sys_pread64+0x1f6/0x250 [ 432.745513][T12181] ? __pfx___x64_sys_pread64+0x10/0x10 [ 432.750991][T12181] do_syscall_64+0xcd/0x250 [ 432.755512][T12181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.761417][T12181] RIP: 0033:0x7eff4ab85d29 [ 432.765836][T12181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.785451][T12181] RSP: 002b:00007eff4b8e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 432.793871][T12181] RAX: ffffffffffffffda RBX: 00007eff4ad75fa0 RCX: 00007eff4ab85d29 [ 432.801845][T12181] RDX: 000000000000594c RSI: 0000000000000000 RDI: 0000000000000004 [ 432.809817][T12181] RBP: 00007eff4b8e1090 R08: 0000000000000000 R09: 0000000000000000 [ 432.817793][T12181] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 432.825762][T12181] R13: 0000000000000000 R14: 00007eff4ad75fa0 R15: 00007fff1af3a6f8 [ 432.833750][T12181] [ 432.930615][T12182] netlink: zone id is out of range [ 432.986090][T12182] netlink: set zone limit has 8 unknown bytes [ 434.507623][T12210] ubi13: attaching mtd0 [ 434.512074][T12210] ubi13 error: ubi_attach_mtd_dev: bad VID header (131085) or data offsets (131149) [ 436.107216][T12240] FAULT_INJECTION: forcing a failure. [ 436.107216][T12240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.210088][T12240] CPU: 0 UID: 0 PID: 12240 Comm: syz.7.1519 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 436.220909][T12240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 436.230994][T12240] Call Trace: [ 436.234288][T12240] [ 436.237236][T12240] dump_stack_lvl+0x16c/0x1f0 [ 436.241949][T12240] should_fail_ex+0x497/0x5b0 [ 436.246668][T12240] _copy_to_user+0x32/0xd0 [ 436.251122][T12240] simple_read_from_buffer+0xd0/0x160 [ 436.256528][T12240] proc_fail_nth_read+0x198/0x270 [ 436.261588][T12240] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 436.267158][T12240] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 436.272718][T12240] vfs_read+0x1df/0xbe0 [ 436.276880][T12240] ? __fget_files+0x1fc/0x3a0 [ 436.281567][T12240] ? __pfx___mutex_lock+0x10/0x10 [ 436.286609][T12240] ? __pfx_vfs_read+0x10/0x10 [ 436.291314][T12240] ? __fget_files+0x206/0x3a0 [ 436.296003][T12240] ksys_read+0x12b/0x250 [ 436.300249][T12240] ? __pfx_ksys_read+0x10/0x10 [ 436.305028][T12240] do_syscall_64+0xcd/0x250 [ 436.309540][T12240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.315440][T12240] RIP: 0033:0x7fdb6978473c [ 436.319855][T12240] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 436.339464][T12240] RSP: 002b:00007fdb675f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 436.347883][T12240] RAX: ffffffffffffffda RBX: 00007fdb69975fa0 RCX: 00007fdb6978473c [ 436.355858][T12240] RDX: 000000000000000f RSI: 00007fdb675f60a0 RDI: 0000000000000005 [ 436.363827][T12240] RBP: 00007fdb675f6090 R08: 0000000000000000 R09: 0000000000000000 [ 436.371799][T12240] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 436.379772][T12240] R13: 0000000000000000 R14: 00007fdb69975fa0 R15: 00007ffd4fa63fc8 [ 436.387757][T12240] [ 436.390875][ C0] vkms_vblank_simulate: vblank timer overrun [ 438.688123][T12290] random: crng reseeded on system resumption [ 438.746909][T12291] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1532'. [ 440.337073][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.343407][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.093525][T12321] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1539'. [ 441.236583][T12321] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 444.114243][T12376] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1552'. [ 444.304261][T12376] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 445.019665][T12385] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 445.336960][T12396] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 445.977472][T12386] kexec: Could not allocate control_code_buffer [ 447.039054][T12421] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1564'. [ 447.056971][T12421] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 448.411925][T12424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1565'. [ 449.006621][T12443] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1569'. [ 451.110589][T12474] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1577'. [ 451.247114][T12475] Process accounting resumed [ 451.251931][T12475] db_root: cannot open:  [ 451.385896][T12478] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1577'. [ 452.264597][T12479] db_root: cannot open:  [ 452.331743][T12504] netlink: 338 bytes leftover after parsing attributes in process `syz.6.1581'. [ 453.402369][T12507] db_root: cannot open:  [ 453.994785][T12526] db_root: cannot open:  [ 454.416323][T12536] bridge0: port 3(veth1_to_hsr) entered blocking state [ 454.513483][T12536] bridge0: port 3(veth1_to_hsr) entered disabled state [ 454.538484][T12536] veth1_to_hsr: entered allmulticast mode [ 454.596400][T12536] veth1_to_hsr: entered promiscuous mode [ 454.645389][T12536] bridge0: port 3(veth1_to_hsr) entered blocking state [ 454.652419][T12536] bridge0: port 3(veth1_to_hsr) entered forwarding state [ 455.073393][T12541] netlink: 'syz.6.1591': attribute type 4 has an invalid length. [ 455.106719][T12541] netlink: 314 bytes leftover after parsing attributes in process `syz.6.1591'. [ 455.165846][T12542] netlink: 'syz.6.1591': attribute type 4 has an invalid length. [ 455.183540][T12537] db_root: cannot open:  [ 455.236496][T12542] netlink: 314 bytes leftover after parsing attributes in process `syz.6.1591'. [ 455.901311][T12547] db_root: cannot open:  [ 456.348994][T12557] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 456.436816][T12557] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 456.443730][T12557] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 456.511727][T12557] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 456.587786][T12556] db_root: cannot open:  [ 456.617426][T12557] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 456.646881][T12557] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 456.809157][T12557] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 456.838903][T12557] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 456.873231][T12557] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 456.909884][T12557] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 457.048335][T12557] db_root: cannot open:  [ 457.576697][T12569] db_root: cannot open:  [ 457.581435][T12573] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1601'. [ 458.409050][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 458.487400][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 458.656626][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 458.842985][T12579] db_root: cannot open:  [ 458.886579][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 459.519793][T12616] lo: entered allmulticast mode [ 459.667713][T12616] lo: left allmulticast mode [ 460.576621][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 460.696878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 460.726958][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 460.977275][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 461.539299][T12648] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 461.610416][T12648] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 462.498776][T12517] db_root: cannot open:  [ 462.646663][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 462.824227][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 463.056512][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 466.698742][T12603] db_root: cannot open:  [ 466.951226][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 466.958237][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 467.137322][T12706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1637'. [ 467.697025][T12700] db_root: cannot open:  [ 468.616710][T12714] db_root: cannot open:  [ 469.258714][T12726] db_root: cannot open:  [ 470.326228][ T29] audit: type=1806 audit(4294967476.373:19): xattr="" res=-22 [ 474.421415][T12738] db_root: cannot open:  [ 475.223582][T12791] db_root: cannot open:  [ 476.270353][T12813] db_root: cannot open:  [ 476.684348][T12827] db_root: cannot open:  [ 476.739934][T12707] db_root: cannot open:  [ 478.009783][T12831] db_root: cannot open:  [ 478.244196][T12863] db_root: cannot open:  [ 479.129805][T12877] db_root: cannot open:  [ 479.649767][T12896] can0: slcan on pty212. [ 479.866601][T12895] can0 (unregistered): slcan off pty212. [ 480.905618][T12934] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1690'. [ 481.001333][T12934] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 481.056814][T12900] db_root: cannot open:  [ 482.081631][T12960] Process accounting paused [ 483.751311][T12993] kAFS: bad VL server IP address [ 485.523641][T13030] lo: entered allmulticast mode [ 485.538019][T13030] lo: left allmulticast mode [ 490.030738][T13106] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1726'. [ 491.825650][T13134] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1735'. [ 493.266891][T13162] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 493.573281][T13166] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1745'. [ 493.589208][T13166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.610742][T13166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.646874][T13164] [ 493.649255][T13164] ====================================================== [ 493.656283][T13164] WARNING: possible circular locking dependency detected [ 493.663310][T13164] 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 Not tainted [ 493.670426][T13164] ------------------------------------------------------ [ 493.677449][T13164] syz.7.1744/13164 is trying to acquire lock: [ 493.683521][T13164] ffff888148c959c0 (mapping.invalidate_lock#2){++++}-{4:4}, at: page_cache_ra_unbounded+0x173/0x750 [ 493.694362][T13164] [ 493.694362][T13164] but task is already holding lock: [ 493.701735][T13164] ffff88802a51b2a0 (&mm->mmap_lock){++++}-{4:4}, at: faultin_page_range+0x348/0x980 [ 493.711179][T13164] [ 493.711179][T13164] which lock already depends on the new lock. [ 493.711179][T13164] [ 493.721591][T13164] [ 493.721591][T13164] the existing dependency chain (in reverse order) is: [ 493.730621][T13164] [ 493.730621][T13164] -> #4 (&mm->mmap_lock){++++}-{4:4}: [ 493.738212][T13164] __might_fault+0x11b/0x190 [ 493.743358][T13164] _copy_from_user+0x29/0xd0 [ 493.748499][T13164] __blk_trace_setup+0xa8/0x180 [ 493.753901][T13164] blk_trace_setup+0x47/0x70 [ 493.759034][T13164] sg_ioctl+0x7a3/0x26b0 [ 493.763862][T13164] __x64_sys_ioctl+0x190/0x200 [ 493.769176][T13164] do_syscall_64+0xcd/0x250 [ 493.774228][T13164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.780669][T13164] [ 493.780669][T13164] -> #3 (&q->debugfs_mutex){+.+.}-{4:4}: [ 493.788517][T13164] __mutex_lock+0x19b/0xa60 [ 493.793565][T13164] blk_register_queue+0x13c/0x4f0 [ 493.799133][T13164] add_disk_fwnode+0x785/0x1300 [ 493.804541][T13164] brd_alloc.isra.0+0x50a/0x7c0 [ 493.809938][T13164] brd_init+0x12b/0x1d0 [ 493.814637][T13164] do_one_initcall+0x128/0x630 [ 493.819958][T13164] kernel_init_freeable+0x58f/0x8b0 [ 493.825706][T13164] kernel_init+0x1c/0x2b0 [ 493.830586][T13164] ret_from_fork+0x45/0x80 [ 493.835542][T13164] ret_from_fork_asm+0x1a/0x30 [ 493.840859][T13164] [ 493.840859][T13164] -> #2 (&q->sysfs_lock){+.+.}-{4:4}: [ 493.848449][T13164] __mutex_lock+0x19b/0xa60 [ 493.853508][T13164] queue_attr_store+0xe2/0x170 [ 493.858823][T13164] sysfs_kf_write+0x117/0x170 [ 493.864054][T13164] kernfs_fop_write_iter+0x33d/0x500 [ 493.869902][T13164] vfs_write+0x5ae/0x1150 [ 493.874777][T13164] ksys_write+0x12b/0x250 [ 493.879648][T13164] do_syscall_64+0xcd/0x250 [ 493.884699][T13164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.891141][T13164] [ 493.891141][T13164] -> #1 (&q->q_usage_counter(io)#10){++++}-{0:0}: [ 493.899790][T13164] __submit_bio+0x49c/0x540 [ 493.904850][T13164] submit_bio_noacct_nocheck+0x892/0xd70 [ 493.911044][T13164] submit_bio_noacct+0x93a/0x1e20 [ 493.916618][T13164] mpage_readahead+0x41d/0x590 [ 493.921934][T13164] read_pages+0x1a8/0xdc0 [ 493.926803][T13164] page_cache_ra_unbounded+0x3dc/0x750 [ 493.932807][T13164] page_cache_ra_order+0x8f2/0xc80 [ 493.938463][T13164] page_cache_sync_ra+0x4b4/0x9c0 [ 493.944030][T13164] filemap_get_pages+0xd7b/0x1be0 [ 493.949600][T13164] filemap_splice_read+0x5cc/0xd00 [ 493.955269][T13164] do_splice_read+0x282/0x370 [ 493.960490][T13164] splice_file_to_pipe+0x109/0x120 [ 493.966144][T13164] do_sendfile+0x3fd/0xe30 [ 493.971104][T13164] __x64_sys_sendfile64+0x1da/0x220 [ 493.976854][T13164] do_syscall_64+0xcd/0x250 [ 493.981918][T13164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.988359][T13164] [ 493.988359][T13164] -> #0 (mapping.invalidate_lock#2){++++}-{4:4}: [ 493.996917][T13164] __lock_acquire+0x249e/0x3c40 [ 494.002311][T13164] lock_acquire.part.0+0x11b/0x380 [ 494.007963][T13164] down_read+0x9a/0x330 [ 494.012668][T13164] page_cache_ra_unbounded+0x173/0x750 [ 494.018669][T13164] page_cache_ra_order+0x8f2/0xc80 [ 494.024327][T13164] filemap_fault+0x14a5/0x2820 [ 494.029637][T13164] __do_fault+0x10a/0x490 [ 494.034502][T13164] do_pte_missing+0x1a8/0x3e00 [ 494.039814][T13164] __handle_mm_fault+0x103c/0x2a40 [ 494.045479][T13164] handle_mm_fault+0x3fa/0xaa0 [ 494.050791][T13164] __get_user_pages+0x8d9/0x3b50 [ 494.056275][T13164] faultin_page_range+0x3a8/0x980 [ 494.061847][T13164] do_madvise+0x504/0x770 [ 494.066735][T13164] __x64_sys_madvise+0xa9/0x110 [ 494.072124][T13164] do_syscall_64+0xcd/0x250 [ 494.077177][T13164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.083616][T13164] [ 494.083616][T13164] other info that might help us debug this: [ 494.083616][T13164] [ 494.093849][T13164] Chain exists of: [ 494.093849][T13164] mapping.invalidate_lock#2 --> &q->debugfs_mutex --> &mm->mmap_lock [ 494.093849][T13164] [ 494.107896][T13164] Possible unsafe locking scenario: [ 494.107896][T13164] [ 494.115355][T13164] CPU0 CPU1 [ 494.120730][T13164] ---- ---- [ 494.126105][T13164] rlock(&mm->mmap_lock); [ 494.130539][T13164] lock(&q->debugfs_mutex); [ 494.137670][T13164] lock(&mm->mmap_lock); [ 494.144539][T13164] rlock(mapping.invalidate_lock#2); [ 494.149940][T13164] [ 494.149940][T13164] *** DEADLOCK *** [ 494.149940][T13164] [ 494.158088][T13164] 1 lock held by syz.7.1744/13164: [ 494.158805][T13166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.163190][T13164] #0: ffff88802a51b2a0 (&mm->mmap_lock){++++}-{4:4}, at: faultin_page_range+0x348/0x980 [ 494.177329][T13166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.180347][T13164] [ 494.180347][T13164] stack backtrace: [ 494.180357][T13164] CPU: 0 UID: 0 PID: 13164 Comm: syz.7.1744 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 494.204132][T13164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 494.214203][T13164] Call Trace: [ 494.217495][T13164] [ 494.220438][T13164] dump_stack_lvl+0x116/0x1f0 [ 494.225144][T13164] print_circular_bug+0x41c/0x610 [ 494.230203][T13164] check_noncircular+0x31a/0x400 [ 494.235172][T13164] ? __pfx_check_noncircular+0x10/0x10 [ 494.240665][T13164] ? __pfx___lock_acquire+0x10/0x10 [ 494.245890][T13164] ? hlock_class+0x4e/0x130 [ 494.250419][T13164] ? lockdep_lock+0xc6/0x200 [ 494.255037][T13164] ? __pfx_lockdep_lock+0x10/0x10 [ 494.260088][T13164] ? find_held_lock+0x2d/0x110 [ 494.264884][T13164] __lock_acquire+0x249e/0x3c40 [ 494.269760][T13164] ? __pfx___lock_acquire+0x10/0x10 [ 494.274977][T13164] ? __pfx_mark_lock+0x10/0x10 [ 494.279776][T13164] lock_acquire.part.0+0x11b/0x380 [ 494.284908][T13164] ? page_cache_ra_unbounded+0x173/0x750 [ 494.290564][T13164] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 494.296215][T13164] ? rcu_is_watching+0x12/0xc0 [ 494.301002][T13164] ? trace_lock_acquire+0x14e/0x1f0 [ 494.306227][T13164] ? page_cache_ra_unbounded+0x173/0x750 [ 494.311891][T13164] ? lock_acquire+0x2f/0xb0 [ 494.316410][T13164] ? page_cache_ra_unbounded+0x173/0x750 [ 494.322070][T13164] down_read+0x9a/0x330 [ 494.326252][T13164] ? page_cache_ra_unbounded+0x173/0x750 [ 494.331908][T13164] ? __pfx_down_read+0x10/0x10 [ 494.336705][T13164] ? hlock_class+0x4e/0x130 [ 494.341229][T13164] ? mark_lock+0xb5/0xc60 [ 494.345589][T13164] ? __pfx___lock_acquire+0x10/0x10 [ 494.350805][T13164] ? xas_load+0x49/0x5b0 [ 494.355082][T13164] page_cache_ra_unbounded+0x173/0x750 [ 494.360570][T13164] ? find_held_lock+0x2d/0x110 [ 494.365364][T13164] page_cache_ra_order+0x8f2/0xc80 [ 494.370507][T13164] filemap_fault+0x14a5/0x2820 [ 494.375306][T13164] ? __pfx_filemap_fault+0x10/0x10 [ 494.380452][T13164] ? mark_held_locks+0x9f/0xe0 [ 494.385249][T13164] ? pte_alloc_one+0x2a3/0x390 [ 494.390039][T13164] ? __pfx_filemap_map_pages+0x10/0x10 [ 494.395527][T13164] __do_fault+0x10a/0x490 [ 494.399884][T13164] ? __pfx_filemap_map_pages+0x10/0x10 [ 494.405371][T13164] do_pte_missing+0x1a8/0x3e00 [ 494.410172][T13164] __handle_mm_fault+0x103c/0x2a40 [ 494.415313][T13164] ? __pfx_lock_release+0x10/0x10 [ 494.420355][T13164] ? trace_lock_acquire+0x14e/0x1f0 [ 494.425582][T13164] ? __pfx___handle_mm_fault+0x10/0x10 [ 494.431078][T13164] handle_mm_fault+0x3fa/0xaa0 [ 494.435872][T13164] __get_user_pages+0x8d9/0x3b50 [ 494.440843][T13164] ? __pfx___get_user_pages+0x10/0x10 [ 494.446247][T13164] ? down_read_killable+0xcc/0x380 [ 494.451389][T13164] ? __pfx_down_read_killable+0x10/0x10 [ 494.456962][T13164] ? lock_acquire+0x2f/0xb0 [ 494.461485][T13164] faultin_page_range+0x3a8/0x980 [ 494.466546][T13164] do_madvise+0x504/0x770 [ 494.470912][T13164] ? __pfx_do_madvise+0x10/0x10 [ 494.475795][T13164] ? __x64_sys_futex+0x1e1/0x4c0 [ 494.480773][T13164] ? rcu_is_watching+0x12/0xc0 [ 494.485565][T13164] __x64_sys_madvise+0xa9/0x110 [ 494.490433][T13164] ? lockdep_hardirqs_on+0x7c/0x110 [ 494.495655][T13164] do_syscall_64+0xcd/0x250 [ 494.500185][T13164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.506104][T13164] RIP: 0033:0x7fdb69785d29 [ 494.510535][T13164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.530169][T13164] RSP: 002b:00007fdb675f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 494.538614][T13164] RAX: ffffffffffffffda RBX: 00007fdb69975fa0 RCX: 00007fdb69785d29 [ 494.546610][T13164] RDX: 0000000000000017 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 494.554607][T13164] RBP: 00007fdb69801b08 R08: 0000000000000000 R09: 0000000000000000 [ 494.562600][T13164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.570588][T13164] R13: 0000000000000000 R14: 00007fdb69975fa0 R15: 00007ffd4fa63fc8 [ 494.578589][T13164] [ 501.769187][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.775548][ T1295] ieee802154 phy1 wpan1: encryption failed: -22