last executing test programs: 6m53.889390506s ago: executing program 1 (id=474): msgctl$auto(0x9, 0x3, &(0x7f0000000180)={{0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffa9b, 0x2, 0x4, 0x4}, 0x0, 0x0, 0x8000, 0x4, 0x5, 0x0, 0xa, 0x4, 0xd, 0x5}) rt_sigaction$auto(0x1, &(0x7f00000001c0)={&(0x7f0000000080)=0x0, 0x7fffffffffffffff, 0x0, {0x5}}, 0x0, 0x8) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) rt_sigaction$auto(0x4, &(0x7f0000000300)={&(0x7f0000000000)=0x0, 0x0, 0x0, {0x43}}, 0x0, 0x8) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/limit\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000040)='\x01\x00^\xa2\x02\x00\x00\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xb2s\x83\xbd\xc5_%\xc1\xa3\xd0\x95Hq\xf4zG\x01[{\x17\x05I\xe0\xb1d)\x06z8L\xe6&[\xa9X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2\xec\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a', 0x3) write$auto(0x1, &(0x7f0000000140)=')@\\\x00', 0x3) r1 = gettid() r2 = getpgid$auto(r1) rt_sigqueueinfo$auto(r2, 0x4, 0x0) 6m53.623818095s ago: executing program 1 (id=476): r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x12b000, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f000000c380)={0x5, 0x1, 0x100000, 0x100000, 0x0, 0x1, 0x2, 0xfffffffffffffffb, 0x0, 0x8, 0x0, 0x9}) close_range$auto(0x0, 0xfffffffffffff000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/250, 0xfa) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) bpf$auto(0x2, &(0x7f00000001c0)=@batch={0x8000000000009, 0x80000001, 0x10008, 0x8250, 0xa6d5, 0xffffffffffffffff, 0x7, 0x6}, 0x103) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0xf, 0x8000000000000000, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/006/001\x00', 0xa901, 0x0) capset$auto(0x0, 0x0) ioctl$auto(r3, 0xc0105500, r3) ioctl$auto(r0, 0xe, r0) 6m53.514889647s ago: executing program 1 (id=477): openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, 0x0, 0x121c01, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) mlockall$auto(0xe) r1 = openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) write$auto(r1, &(0x7f0000002740)='-1,\'$*@[}\x00', 0x2) connect$auto(0x3, &(0x7f00000000c0), 0x55) read$auto(0x3, 0x0, 0xf34) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) recvmmsg$auto(0x4, &(0x7f0000000200)={{0x0, 0x4, &(0x7f0000000140)={0x0, 0x4da}, 0x3, 0x0, 0x7, 0xa00}, 0x1000}, 0xffffffff, 0xff, 0x0) r3 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000240), r2) sendmsg$auto_IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x3c, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_ED_LIST={0x1f, 0x16, "f6c5456cc6bf81cd3124d001d8b0264fc739e91ed019cd99f4c072"}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_NETDEV_CMD_NAPI_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fba400000000f2ff0000021f4de56a4703000000d6f3110aa45aeb6b5e9bd8abc396aa49249256bdf3aa705dd10c661480cb20a3c8f0eca3d46ee322e8719e1239716cd1307d8553a60d7af3b758fd1e98676fd435929103f6"], 0x1c}}, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x2682, 0x0) read$auto_rfcomm_dlc_debugfs_fops_(r4, &(0x7f0000000080)=""/96, 0x60) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)={0x18, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000001440)={0xb50, r7, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xb34, 0x1a, "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"}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0xe0}]}, 0xb50}}, 0x4001) close_range$auto(0x2, 0x8000, 0x0) 6m52.513555879s ago: executing program 1 (id=483): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x6, 0x15, 0x1000, 0x100000001, 0xc, 0x9, 0x0, 0xfffffffffffffffe, 0x7ff, 0xd59, 0x101, 0xff, 0x2, 0x80000001]}, 0x0, 0x0) read$auto(0x4, 0x0, 0xfdef) read$auto(0xffffffffffffffff, &(0x7f0000000000)='$-]&@\x00', 0x5) getsockopt$auto(r1, 0x3d, 0x40, 0x0, &(0x7f0000000100)=0x8) recvfrom$auto(0x3, 0x0, 0x2395, 0x40000100, 0x0, 0xfffffffffffffffd) setrlimit$auto(0x1000000007, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) openat$auto_userio_fops_userio(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) read$auto(0x3, 0x0, 0x7) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x200, 0x1000000014, 0x9b72, 0x2, 0x8000) keyctl$auto(0x2000000000000017, 0x3ff, 0x0, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) memfd_create$auto(0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) mmap$auto(0x0, 0x9, 0x4, 0x8000000008011, 0x3, 0x0) 6m51.550753275s ago: executing program 1 (id=488): rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) migrate_pages$auto(0x1, 0x9, 0x0, &(0x7f0000000840)=0x2) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) accept4$auto(0xffffffffffffffff, 0x0, 0x0, 0xbdfc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000000), r0) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x20, 0x1, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x14, 0xf, 0x0, 0x0, @ipv6=@private1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x448c0) 6m50.601620314s ago: executing program 1 (id=491): unshare$auto(0x40000080) r0 = openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/debug/bdi/1:15/wb_stats\x00', 0x40, 0x0) pread64$auto(r0, &(0x7f0000002cc0)='&,\x00', 0x8, 0x81) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon1\x00', 0x4ad03, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000040c0)='/dev/bus/usb/001/001\x00', 0x8800, 0x0) ioctl$auto_MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000080)={0x7fff, 0x22fb}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) 6m50.261176782s ago: executing program 32 (id=491): unshare$auto(0x40000080) r0 = openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/debug/bdi/1:15/wb_stats\x00', 0x40, 0x0) pread64$auto(r0, &(0x7f0000002cc0)='&,\x00', 0x8, 0x81) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon1\x00', 0x4ad03, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000040c0)='/dev/bus/usb/001/001\x00', 0x8800, 0x0) ioctl$auto_MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000080)={0x7fff, 0x22fb}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) 1m46.397364131s ago: executing program 0 (id=2033): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev7\x00', 0x1600, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0xc0585604, 0x38) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) ioctl$auto(r0, 0x400c4d00, 0x5) r1 = socket(0x11, 0x3, 0x6) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r1, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="50a80000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25410000006606b200bd216c768a85226d251043b2734d1d6c0bb47da713ef1463e0a66f70c5a0d8ce3958584ae05c6731e44cd5d646410994bcc383437db885ce33fd743aa6983f10ada2405334bf7722358729acb9b98f9fa8f4aef1cc6be9597f1642fab497802e14ac9d2a89ea2d8956fdac213900a72ea65ed04d7428491024ff2ee8719ef60ad49a9a1790fa6da0c9bfaff341327bce0ae42f1ef3468e461ab3f893bf6499a91de9c41fe02ae2d95b99e0b25e337e2e73fc88843bd8f6d20567071d2dc8dc4b6ed981203c4f21632d7170bd87bd34f4f6bcb47ff5a49d597fa5354b3e89d17d8d4dcb164f3153267ae5e8c692387e8197e28fa66f93607f3059905b3ca56ebe96a29491a0c3aed3a39ba7ee0daa6078113a2b5009275e5aafee271745ffcafbda6cb191281a8fbd6d998625c132525bb648dc703f7c172c697b4adc573f91fcbce1ade26fbf7d4771ab1ff623d42e7dfa11c2da6cd6b423e733c4ee0bd2338acb1d3b84e9a2978ea6f91f70739e8878230326ab159f31bf13bd4b2c19df4e6473850b7eedbe6d4a045b359db06030115409ab07d68f579545dc72c85ea5997760a7b5e65d136e8a9e93bfbdd327bab68007b70640ebda5b66efda937b3e82a24fa6ba6f0dad5a74071e6eb221e6ddd0d1c521c233f92f9daace88068f8ca732fb2e1e64ead88985de8614c0ace8998cc26c1b06a4be41cac1329af727833148e618fae2b39fa8c03fc2ec54109b6850f911e6f7d3a9fa373c5eecf0cf29438986a9efa75dbbb41c9a0de436430929cf3d80ef4a659d0d269af0332054e55ff3e074d89e76fc4802962ec0c9bfe42f52989eb73cf5873377c5ce2a7d5777d3eb9e67874d608f43da342be5383c293e3e3f48c54f73fd057735166ae4104b6cc1d07c4e07077dd0150ce994916d22730a28f6c98936738da1487896db36f071ddb4945cdfc64db18d1c6f892c82ed44426b0e988251466ceea1e18e74555456cf621e3240f16e75305812101393236c290120f32f9857bd7e743607df5018f0b16a6bdcb1bca19af85d5ac1c9390b5ab1172a4c12ab781ea438d719d3244592b775878cfc3186979d64a2e5f92ba5b2a4446e9c36baaa71ae2746df1a1dede7d6297a322347f40c28a9ac1c74ae031e39463b28e44bfa1434c1cf5922c01487b71c09963f7bb9c3880c82b7c659d366f6d66f1b4732d67b785b2789fc6f2ea3c6f52d2f58ffa35ad7136dbd3728b8f0e526cab79174bfeaf3c95c422b38072419abf0daed6a03ba7311bb3b2c1763a7230aaded8d841ea9399056c5ebd0fe1f30ecd5d93848b3baff4d686fb9b0646d6bee776fc9b67a7198c0e15d94feb5780f60a7938224e8d513e8c0520112ddcc79d389c947e0222d89eda33e29f3e188e0af0c9ee1ed05a2c2daa9d3b840802a44bb1672b2401436e0d5d022206fd382bb58cd11a9251903bd37f895edfadffb13bf2d8ecde70be2fe8c3f356137ad48014bffdeaae4141f79cc95f80100fabdb89c4a3c651d7692b7f631b3ab0155361967659f12bcd47ff3bbd690050b5aa04a24380f3afebd8384bba67ade498a1b4c0fd151cee6db96bb3a487c9a98d87e9dd8db240302fadb9636005e8c606b41778e1571144d29db8401ad93853462d661999a3b408a782a556344dc901277568798e24c6389cc214068512085cf0051b7cea412cfc07c2b7fcd77e6c63184500cd276c4cf59fa54a6c3a61a9abd3df3b75825f7077f2a600a2952a5624d7f9f9df62190d0c4b13739728135ac4c67ecb1d77895d5547ba7ea3a70850aa8b25dded918f53900f2a1534f5efca50eb315edc9f14f62f09207a49fc66ceb4151ae5e31f16d7f3b5d3b3a109d53c985a4d749213f2e7601a29293b0d375491af1ac282379fcf906b76fef11b8faecb65c074d44b4774b8bdb79b8cbd4aab44b9e1116d2b13440c1955ae726a0a0a584fb2f5fbbac070b785889bd021a6299877faea8180aff6bf80f22844352740c8f7fa487b3b7f9bd0e615d9d545ad0539abc19f36a30dab6f94d0036d81b0a3563786e2cf7b3297e3a05457d68f14d8fb473c746e4fefd11731a533eed8aae0e7e226976d68a07398e43ed1d0206d152a1e2569ea83312620a3a9d71c6657ebcc6f4a2aa4ae4af15ef6eebc890386d06aa6b97d987b0b1de890e7af453a92a366f161e4c5548e2abb3728b6235adf2fb5a86c375945d73744bc5a5ef64f1c77ec80dca82e7fa384ea169e629de4fc746ab0d848655bf201c7ca4646c3c848bb5c94436683e962c3d0d3d9844c034d869bf3817601a550000080005000200000008001001080000006000c80002d852ccfd7a5f9956eb2098d25553fb1c639444384bf254701ce28bc619b5f6fe7661c5980cec53c9b6928e551973e45fdbae3b063e2b7a6ad8737cd2bcdd52f954c07ec57efe48821059d0c180c5e48be66732109f220902ff0c4f"], 0x6ec}}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r2, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="5d8928bd7000fcdbdf6502000000000002000c0004800400f98002000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) futex_wake$auto(0x0, 0x7, 0x0, 0x82) futex_wake$auto(&(0x7f0000000800)="3c06fc22667e9980715ab58e486b39705cbabf23f1c21a173ba608184f084f47b0384e3e1c9a8c64f39eacd0cf420a5314fd68aac1a378cbfdffd9a358ab14fb13ad97bf5bfeeb957498238e9eddc28e346827230f8133cf2d2fae90e8a2bcd9e61dd526e15169b84e2f6c3338761d4b03f643a5e3c2b1e0b97987dea4847a25877c2a161eb98e10588db22b8229c8443654416c5cc4ee4e77d4517bd8d1b0e3b4d26813dcc1639e55920b4720ed1e99ab79c051d9ef60bb2c6ece64f95c", 0x6, 0x6, 0xffffff11) r4 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) write$auto_proc_mem_operations_base(r4, &(0x7f0000001680)="a7", 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/hugetlb.2MB.numa_stat\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000000c0)=""/17, 0x11) r6 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ubifs/chk_index\x00', 0x40aa2, 0x0) write$auto_dfs_global_fops_debug(r6, &(0x7f0000000d80)='0', 0x1) lseek$auto(r6, 0xf, 0xb9e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 1m46.1050468s ago: executing program 0 (id=2035): r0 = socket(0xa, 0x2, 0x0) r1 = openat$auto_output_bpc_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Writeback-1/output_bpc\x00', 0x4800, 0x0) close_range$auto(r0, r1, 0x1) timerfd_create$auto(0x9, 0x0) socket(0xa, 0x3, 0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = open(0x0, 0xc162, 0x0) ftruncate$auto(r2, 0xdaaf) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e21, @multicast1}, 0x55) sendfile$auto(r0, r2, 0x0, 0xce) 1m45.899058603s ago: executing program 0 (id=2037): sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x8) write$auto(0x3, 0x0, 0x1a000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m45.665442455s ago: executing program 0 (id=2040): close_range$auto(0x2, 0x8000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0x15, 0x5, 0x0) setsockopt$auto(0x3, 0x114, 0x1d, 0x0, 0xa0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) r0 = fsopen$auto(0x0, 0x1) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x1e, 0x4, 0x7fffffff, 0x8}, 0x6f4) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) r2 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mouse0\x00', 0x341, 0x0) write$auto_mousedev_fops_mousedev(r2, &(0x7f0000000000)="8a25feff", 0x4) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$auto(0x3, &(0x7f0000000000)=@link_detach={r0}, 0x4) ioctl$auto(0x3, 0x400caed0, r0) 1m44.602580014s ago: executing program 0 (id=2043): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r0, 0x80045113, 0x3) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='afs\x00', 0x7, 0x0) 1m44.395258022s ago: executing program 0 (id=2044): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x42a83, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4000000000008000) (async) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munmap$auto(0x20001000, 0x7) (async) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8003) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) mmap$auto(0xfffffffffffffffe, 0x8, 0x8003, 0xeb3, 0xfffffffffffffff9, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) modify_ldt$auto(0x11, 0x0, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8000, 0x0) (async) socketpair$auto(0x1e, 0x1, 0x0, 0x0) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TCFLSH2(r1, 0x80047437, 0x0) (async) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x11e789c}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) 1m44.007636874s ago: executing program 33 (id=2044): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x42a83, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4000000000008000) (async) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munmap$auto(0x20001000, 0x7) (async) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8003) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) mmap$auto(0xfffffffffffffffe, 0x8, 0x8003, 0xeb3, 0xfffffffffffffff9, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) modify_ldt$auto(0x11, 0x0, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8000, 0x0) (async) socketpair$auto(0x1e, 0x1, 0x0, 0x0) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TCFLSH2(r1, 0x80047437, 0x0) (async) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x11e789c}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) 49.317939091s ago: executing program 4 (id=2318): openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000140), 0x141002, 0x0) syz_clone3(&(0x7f0000002300)={0x2000, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/26, 0x1a, &(0x7f0000001300)=""/4096, &(0x7f0000000280)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) mmap$auto(0xaf55856, 0x2020009, 0x3, 0xeb1, r0, 0x8000) prctl$auto(0x35, 0xffffffffffffffff, 0x10, 0x0, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/trace\x00', 0x80800, 0x0) read$auto(0x3, 0x0, 0x400000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x6ec82, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub7/status\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000000c0)=""/9, 0x9) unshare$auto(0x40000080) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x101000, 0x0) read$auto(r2, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) 48.431606625s ago: executing program 4 (id=2322): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) ioctl$auto(0xc8, 0xffffffff800454dd, 0x4000000000008) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), r2) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES64=r0, @ANYBLOB="09002cbd7000fbdbdf25020000002b47b6390be0343762fdc642ce76d4a37323cf0fc1e14a777eda28222f66e271e302e4a2c65ae56b0a017e5283"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x808) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0xa01c2, 0x84) getcwd$auto(0x0, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) r3 = inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0x4000e6e) open(&(0x7f0000000280)='./file0\x00', 0xf6196aa00e0f625b, 0x0) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, 0x0, 0x121c01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x41, 0x1, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x4, 0x0, 0xffffffff, 0x0, 0x0) sendmsg$auto_NETDEV_CMD_NAPI_GET(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYBLOB="01002dbd7000fba400000000f2ff0000021f4de56a4703000000d6f3110aa45aeb6b5e9bd8abc396aa49249256bdf3aa705dd10c661480cb20a3c8f0eca3d46ee322e8719e1239716cd1307d8553a60d7af3b758fd1e98676fd4359291"], 0x1c}}, 0x20000000) close_range$auto(0x2, 0x8, 0x0) 47.299687627s ago: executing program 4 (id=2327): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x15) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x23, 0x0, 0x8) r1 = timerfd_create$auto(0x0, 0x0) mq_notify$auto(r1, &(0x7f0000000000)={@sival_ptr=&(0x7f0000000080)="3a8942503effd6e7bcd7df7074ad193e2b0fd30759f0f63eecd2a5c8aeb87326330d50da0a23a4a429651ba6c2dd3d280dc898666fd54b436472ca0572aadf6578752f5791ea18f92061d1b3c60edcbb831f6c538eeaa7adf3cd61e5afe03ffdd6da642052be43fea99f29c4fe6e13c2a34852c04947fb93921506e304c67fb3a8661619659828c7865abe95b86ee4862e15761bc8d88fb24fa74c45e72547a5da1b309c7b4f49930203a4d447d4bece3b75d6e3e3713ce9c3f36f526a3f9b958bfc05", @raw=0x200, 0x3}) eventfd$auto(0xfffffffb) sysfs$auto(0x2, 0x4, 0x4) mincore$auto(0x1000, 0x8001, 0x0) io_uring_setup$auto(0x8, 0x0) io_uring_enter$auto(r0, 0xcd00, 0xcd00, 0x7, 0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0xdd, 0x8000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/gretap0/mcast_resolicit\x00', 0x101000, 0x0) read$auto(r2, 0x0, 0x1ff) 46.665780993s ago: executing program 4 (id=2331): openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000140), 0x141002, 0x0) syz_clone3(&(0x7f0000002300)={0x2000, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000200), {0x24}, &(0x7f0000000240)=""/26, 0x1a, &(0x7f0000001300)=""/4096, &(0x7f0000000280)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) mmap$auto(0xaf55856, 0x2020009, 0x3, 0xeb1, r0, 0x8000) prctl$auto(0x35, 0xffffffffffffffff, 0x10, 0x0, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/trace\x00', 0x80800, 0x0) read$auto(0x3, 0x0, 0x400000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x6ec82, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub7/status\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000000c0)=""/9, 0x9) unshare$auto(0x40000080) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x101000, 0x0) read$auto(r2, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) 44.27896718s ago: executing program 4 (id=2339): io_uring_setup$auto(0x0, &(0x7f0000000000)={0x6, 0x66, 0x2, 0x14, 0x8, 0x4, 0xffffffffffffffff, [0x9, 0x34, 0x7fffffff], {0x101, 0x6, 0x4355, 0x80000000, 0xa5, 0x7, 0xb, 0xba90, 0x5}, {0xfffffc00, 0x6, 0x0, 0x401, 0x8, 0x8, 0x0, 0x7, 0x6}}) (async) lstat$auto(&(0x7f0000000000)='./file1\x00', 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x2, 0x6, 0x0) (async) r2 = bpf$auto(0x1000004, 0x0, 0xc) read$auto_evdev_fops_evdev(r2, &(0x7f0000002b80)=""/4096, 0x1000) (async) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100cda4429629bd7100f9db5f250200000000000000", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) sendmsg$auto_NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf148}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x40) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}}, 0x20044000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x103, 0x0) 43.931329606s ago: executing program 4 (id=2342): socketpair$auto(0x4, 0x2, 0x1, &(0x7f0000000080)=0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000040), 0x60801, 0x0) request_key$auto(&(0x7f00000000c0)='nfsd\x00', &(0x7f0000000100)='nfsd\x00', &(0x7f0000000140)=']\x00', 0x0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x100000, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x3fff, 0xad3, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) clone$auto(0x9, 0x3, 0x0, 0x0, 0x7) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x59, &(0x7f0000005340)={&(0x7f0000000000)={0x14, r3, 0x1, 0x70bd2b, 0x25df9bfc}, 0x14}, 0x1, 0x0, 0x0, 0x2004c010}, 0x20000000) 28.745095078s ago: executing program 34 (id=2342): socketpair$auto(0x4, 0x2, 0x1, &(0x7f0000000080)=0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000040), 0x60801, 0x0) request_key$auto(&(0x7f00000000c0)='nfsd\x00', &(0x7f0000000100)='nfsd\x00', &(0x7f0000000140)=']\x00', 0x0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x100000, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x3fff, 0xad3, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) clone$auto(0x9, 0x3, 0x0, 0x0, 0x7) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x59, &(0x7f0000005340)={&(0x7f0000000000)={0x14, r3, 0x1, 0x70bd2b, 0x25df9bfc}, 0x14}, 0x1, 0x0, 0x0, 0x2004c010}, 0x20000000) 6.741973181s ago: executing program 5 (id=2474): set_mempolicy$auto(0x4006, &(0x7f0000000000)=0xc, 0x7) mmap$auto(0x0, 0xb, 0x5, 0xeb1, 0x3ff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0xfbe8, 0xc) r0 = gettid() pidfd_open$auto(r0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x28, 0x5, 0x0) r1 = socket(0xa, 0x2, 0x3a) select$auto(0x3, 0x0, &(0x7f0000000100)={[0xd, 0x7, 0x0, 0xc, 0x9, 0x3, 0x6, 0x2, 0x9, 0x5e58296f, 0x4000000000000000, 0xa, 0x4, 0x5, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140), 0x55) sendmsg$auto_NL80211_CMD_DEL_PMK(r1, &(0x7f0000000280)={0x0, 0x30, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="fd40325f174118e944c780000000", @ANYRES16=0x0, @ANYBLOB="00032bbd7000fcdbdf257c000000060098001f0f00006100cd00ed24902ee38606f21f105577c16404acc014e328b39742b9b95c48521412e23ce533ebec40c1f3cb3852f231d2fc44e01a723ff84b2cd779a05e901278803206528f3f8bcb12f759b10107d8cd85b1b87fe557d00fbda9c9eb05b05630000000"], 0x5a8}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x0, 0x10a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto(0xffffffffffffffff, 0x400454d9, 0x5c8c) mlockall$auto(0x7) mprotect$auto(0x1fffeffc, 0x3, 0xb5cc) mmap$auto(0x0, 0xe119, 0xdf, 0x19, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/module/psmouse/parameters/proto\x00', 0x20a42, 0x0) write$auto(0x3, 0x0, 0x3f00) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 5.678102173s ago: executing program 5 (id=2478): unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x400008, 0x6, 0x9b72, 0x3, 0x8000) ioctl$auto(0x3, 0x8108551b, 0x1) msync$auto(0x3, 0x2af5, 0x9) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') r0 = socket(0x2b, 0x5, 0xffffffff) getsockopt$auto(r0, 0x0, 0x4, 0x0, &(0x7f0000000140)=0x49) acct$auto(0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/ksm_merging_pages\x00', 0x4000, 0x0) mkdir$auto(0x0, 0x9) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c03", 0x49}, 0xfffffffffffffffa, &(0x7f0000000400)="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", 0x5, 0x1}, 0x405}, 0x2, 0x100) socket(0x2, 0x2, 0x1) socket(0x2, 0x1, 0x0) inotify_init1$auto(0x2) rename$auto(&(0x7f0000000280)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000003c0), 0xffffffffffffffff) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/controlC0\x00', 0x218002, 0x0) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r2, &(0x7f00000056c0)={0x0, 0x0, &(0x7f0000005680)={&(0x7f0000000200)={0x20, r3, 0xbb484b3ccf0b22b, 0x70bd2b, 0x25dfdbfb, {}, [@MACSEC_ATTR_SA_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x40094) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) write$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffffff, &(0x7f0000000080)="d43c61ac60892f3d60d49e9313cb0f20e844d3235eb0696f527abb5299cdac2c7cca4559c1a31f6ee630fc679e399a0ea6f4c1a2cd173eb70baa49a95687d6f1b6aa98c4452ee9ab9f864566e9c6b2d4c4f335f03922be50b4c840673f834e5b5ed8e18a8a0c82198639ee20d7dd36d4095ead6a6325e815bec98e08f5577da2b807c43a4ea6909652ea10f42539342be452a42019fac3fed56ed77b6a", 0x9d) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000001100)='/proc/self/attr/apparmor/exec\x00', 0x181a00, 0x0) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) setreuid$auto(0x15, 0x5) 5.385585187s ago: executing program 6 (id=2480): sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x24004054) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010b27bd7000fda5c5a62073660008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040080) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(r3, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x2, 0x2, 0x0, 0x0, 0x2) socket(0x10, 0x3, 0x6) socket(0x22, 0x2, 0x2) r5 = socket(0x2b, 0x1, 0x1) setsockopt$auto(0x6, 0x8000000000000006, 0x7, 0x0, 0x7ffffc) r6 = syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000040), r0) sendmsg$auto_NET_DM_CMD_STATS_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r5, @ANYRES16=r6, @ANYBLOB="010029bd7000fedbdf250800000005000100030003000000000000000000a825571fc3b8f81d42f76e1e9b3728e1e4320acb691856423f0c3e5e76790397b6915516d3fbeaa7e9daaf5fe9c7bbbe2051814d57966b882f23427646bf6ef10bf3e8d07e89cc9fa02cd622de70a5a38b9d30da8bc5c3ab07193cc4a364b764f806c258be5493e2a3fcdcf592cb7fc64d53a103c645a0fbb1bd0e16447745a654521e149d79e89b9cd86d813e10"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x8, &(0x7f00000001c0)="e91953b4785d013864d94542b23a79ca42a8805672de3b12e3a0a72f90af0e0a064eb93524c67841d257f71cf65f41d9384235419ad40e299d6442c5ea6f6779bc15c7fb0ee32ad41db1cbf6e73803b0fd02b6964fbd80e6763604da1abe512a0e17fd350e2cac5e2aae8e9bf1b5fe90d0cdcb27126b24528c4067e89cd2c0953ce736639a5730bdfd26bc55a6c4c645db43cdf1ad4ce5bf10fee0a71ebac4bcd472a1343ac87a90c8f5e93ff79b1f853c2d0321b35c27fa28df327e3ed007c1aa122528a621be8170b8a92509b2dc", 0x6) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mlockall$auto(0x7) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) 5.211740392s ago: executing program 3 (id=2481): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ptys8/power/autosuspend_delay_ms\x00', 0x103100, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x9, 0x7, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x1, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x1}}}, 0x66) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000000), 0x10, 0x0, 0x9, 0x0, 0x0, 0xb}, 0x800009}, 0x5, 0x20000000) close_range$auto(0x2, r0, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x2, 0x0, 0x400}, 0x4}, 0xfff, 0xb07e) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r2 = getuid() setresuid$auto(0x0, r2, 0xee00) setuid$auto(r2) 4.55764508s ago: executing program 5 (id=2482): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20008841) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x21c03, &(0x7f0000000000)={0x0, 0x5}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/cgroup.max.descendants\x00', 0x0, 0x0) mprotect$auto(0x1ffff000, 0x10000000800, 0xd) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) bpf$auto(0xc, &(0x7f0000000000)=@bpf_attr_7={@btf_id=0x8, 0x80000000, 0x60}, 0x3) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r1 = socket(0x10, 0x2, 0x0) socket(0x2, 0x1, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x200}, @HSR_A_IF2_AGE={0x8, 0x4, 0x5}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_IFINDEX={0x8}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF1_AGE={0x8, 0x3, 0x400400}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x9c0a7fc06f585e63) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180), 0x2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0xb, 0x4008) mknod$auto(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x1001, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40000, 0x104, 0x2c}, 0x18) open(&(0x7f0000000000)='./file0\x00', 0xa01, 0xe) 4.399462277s ago: executing program 3 (id=2483): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') setresuid$auto(0x0, 0x8, 0x8000) open_by_handle_at$auto(r0, 0x0, 0xfffffffd) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000002500), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_DEL(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x103c, r2, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@OVS_FLOW_ATTR_ACTIONS={0x1020, 0x2, 0x0, 0x1, [@generic="694b30411673b8473b6516166a45d84ea87e3ca8b7b03a7cb60992b26dc2683040e98dd2a156e5c04d1549f45110a76710b785e9776cc05f4546d62f1dba0ef3190b2db6ed7f73b2e56ef7e2e5b99730ca307c48ce96469e0bdad8d9211de196b7912a46e49b7a2e849079b4c842aa2b6b317221384a388221a5881e4265c0e0d07e1c8fc6723c21092f9704a7e628076ad7e4a1b771936637c71539323b3d3d64c0cd6aa70b0275a729e5213ba672a07648b8e53621ce2a353905c94120e68884991f27d9b7ec82e2906d2707a9c357e8a4ee863901ce86646391082bb6b80f85ba988e047493b90ec1e4b7097c7ea6ee151a1b521f170147947a56ec89d0dc9352a6d884db7e9cc78916cc00e99fa78a3c84fac670d735c65c33f8c37635aaa0f5b6acbdcb0f6cf668af755eaa81ff385c92c13e43978d4339a19eb5be3271bf3cd761171a4b70be18f1f258a897ed5d7ce7986ed46b74536e72858d1a4ed20f2eb9387ed836d4ab09fafea03752e77383e31d5f979e8ca8da4c824c6a0eb7e08700c4fd52ab31461ec634d1c4b4062fafd80bae135c314b59779ea7d92729315e9017684fc9b467a25e4298ddf0b49d1cfe2911af85414bb2bf217f585fac408d38128d8ebf897d6259b243f5758c8260467c5d06837773b5355244ce168e811657545416006f0beb6d5f64c5d32137155f049a7e61d32848d57d9e7a88944cfa5ee3aa5d5a7ad4cc50602b295ded266dd01b18ef5c24c2a49a9b9012ce6c1981c83f40a4fa30bc162cdeee77cca0e67e5072e9148d12bfd08c8c36e602747af5f9b4b2b2e28ededf2466b99defaee98e0366c7b94539d08803992ed8b101398ebdfe0c271ba6da6a84dccb6569f7514bd670e8b855ecdd3dbb67c1096793d1005585744457eca1f2cf9d92f3d21e6f65707831bdb1f0771c4de4efe0b8cd115d66c68a21c641a0433b5c573e09f159aea75eadaeeed48e407b7f607a73a846c862e2c48cdd09d1c46787632a83caddb3ae705cc510e02e06819c1703d5450b9ff00cee9a288ca70bbadd396cd6806566b80fc5e77c38362024a09aa20338e2057f060f9cf409fc0e6a1024111bfedc04e0940579878fb4d995918012b2e1874595aad205723fb42fcca145536ab710070701400e2a5f944e1f5894a687515b7f0c55e67dce9bd3a3879608b58df18a94114cd4cab42a23583511f0897a83009067884145550cc2e7550483cd7f3c3dbd88846ee45ce1020d634753001009ed08f8943cf7244b558cb2191242089fef63c293c80cd19b254390845bc564915b46c688937c2e7008690fa68c87cd1549f8f6d59af6961aaf12c8c877a610192013e62537e38299dd893e1cb7b362e72b29e5c17a631986e41d47b3f271e16351dd77abc307f656fef53b5360cb0904f5e4ab9f1f4acb74e51fa961b6609608dff67d205e8e9ce4da9563bd7d8b57a054e02e91b695dd3fbcbc2fea6983bd5c8b15176d23c40205f20e8bd987f69f3542cdc2f2b1557de6f4ea8211705be2eccd685c5c18407e364b01ad831d68c8be66bb84a6d34750f6e4a92026119049d9ebe878bca92e4588f673b8613b4d77a0f1d1ab80779d6a18b15d83e517523a99bd05fdc829691419f82eeb51bf1fa1f7873e7ae2a8c909e31be118e90015b68295e8187546ab9aaf7a49a949224b734e1f5eac8e41d8b6fef90c033d7e3d8806a307f602fcb59d708434ef932ee09d6165f683cedd8dd060d799f1ff261f4633e880ae5905d24fbb79b3bbd9a7c49050c9c256a86975f86e734cd92a3319991b615caa35c0e68c6bb7217b019fc052efb687552acf4d632b245615c437f0339d68b6c3f21e949faf0423449214ed4e9a0f3a86733333a4310b73aaa3dc5c3caad433dab08cd9e225f1aec7bc7d47db4752857721449578b5576fa2482521a0aac3e6c19343c7514d054eba45372c8f26decc7d7d3531bef9628c053974ed2fffe6867b7e85e9dc1e487efec83881094aa0c5073ed753c9a867178780f84671fc779493605f7765dd87a378219e8d064117a735ec40fad5bd07b05a99d39cce74de87e7eed397e579e64e10860afe7ac6c42b8c65e758979f7ee87c42943fea8a695d8bc0c602d825ed8ab304422ebe3697ab147765d66d74fe0937169e0b56eb978f4ae92597e601d782f266b1002ee2135831442c57013c7e80e9f3a8afda72029dac8c0e52e741b56372cc779ad85fc64e773e55371b83cd4bd63604f551a07887e6497b298aa32646c70b6fe661318e7fd2f9fb584ec8449b107e1d144fbb3ed0a6d6b0e179534abb2c1fd37cc1f58af277782921070d0a343824c8f5881a3bf53aa1413736b007ed658c2f132272cda8792dd403cfd109ca8f6f231a6ed7b3fc211f7e558a14aa149aa5e9c005d7b7fb3b67a8b06e4987a7c989b2e766f22a8f63de1b8583cb30bf1195e74a3dc04589075e8c3db096d6693328d9459737cbc1f4b5cffb728fce6a393b61353772c8e33f3389d0e6f4070673b319f8b1541faf205b220085e7bea75359611259764a441e8cc2dc96df0ddabf71a43a07d2ea0a5a2efac9c886706d1418d446113f69866c8a19deb2bedaa76398ebbdcdc0e075a77d10a5f2943788247dfb95461a62ce2f4fbf7398fdf00071fa240801c38d39b593e087c305e9c09daf3f6f03054293fb7523130c9ea9607f641007192aab4ee5960dc8d00b304ec74d11168f9855c1686dd4e6694224b29141e86bbef7a5a7590607b629c180d0870db6ff62c15d2b1e66b4f70be1844c5dc0c68a6ac9be798f7e2ff9fd739842ec01b5410e44bea80d990fd97fe55735f88583164a2347c1088c48695cf814d5316caae28f37fdd3ffcb0999a4d9a655eb3281d331ae065c449fabeeae6d977f281141203ac9fb549c6155f7bd8d97194126f6308638fd3132f224a7557c2d1e61ca6f1e00cbfe767041869168466eecafa858bed07b9df446338df204a0498daba5c7aaf3656bf4ec0d537e19f09e6f9ec3895181ddaaacb855e7a5746f80e36723fb53eb151bbf7de1eae1c34186d3b4455f19e206a3ef2009c70a54c2011c2df6ffe866e078238c3bcd284c9d560685cc4362b6071f3b0be4975f8a9089ecbd00284a9d4d7678a1555e557f6d5c904fa42105bba1910301ce472e4b569cb16c303d877ff5bb36f1b89f360607a8d166b5f63e5c493af9494fd1458a86d3bcc12899a58817ccc0efdc90183a66c3a344558718ba43341ff37e2193ad4eee41fad5f387aae9aa41c3ec4f193836146009daf9a71264595f32b7e6d9c3ee4da9af287133f0ccc20490be30d43e2ce661463a0f0656cc8df22b3f3df82137b1a82711dd8f31995fdc28d00373e60ca7bc41c59e79fe12148c4f0e0ed966d798f1c900d6e2c8cb21c8397a317e84824a3f540c5d0225d52076ed78aab26734ae9aec888b70584c8d0f7a39e87ac92f6964b419b4cca8465520a09ce0bfbc83267b848061897d19d64e8bca572f5c7a90fae6e208290d2a862c0b81dc215a692ef93f8e14240bfd348c7825e254ccf4b61b167c3757b22a44a1ccff81704236566f1e78cb85d6b10ba3661e363a88af3964feaa93579c2ebe26c6f693b9d9bb374ab1fb54ead9176e5285a8762d74329b4b02c15f5e50696239c0f2e54d8cd0780162bf1b07ecd10c66f8419065be1a24462f323ebb57378eca91d9278dcc530118cdf01d9f3e539f8dbe34d9e1d2c88d9cdaa9e40f3d37f5a37cd3bfb2e07d8ccfce82e5d842fa67b0eda506cb67fef1d917bf305c1bc5fd54ba5d2286fab2a1ab0ac32a5ece244c90b7740a13f9d5215e4244475cebf641d442072ced1b12bc150a7cc4a831133a412ef41bfaaf5bf3c53f0dd2e26727c58fa37370cc9edc5df81ee235f33f28ea030ef662a063e13de23e9ea8f72baeed5496402f3616ce10e41115649e372b4ed0dc9927ce0e993ddb3c61db828df5ed1687fd7dc0ca119bf66526f430a413a6607b244b1227364b86eed200108b6b1a6f21ccd6c18310e3077c3f49df530c9f54f26028eb5434a2deb758fd775126ca55b5c9871bec92d7e66ec8d8c7d323f87da621f262f38ff7466d5509d7e37373920be0c78630c10a8871cd308ff8e779b88fcbecf7e8f5de95a9c72af83c9c599968d47ec9bab5a7a00189f32129ddc98e13ea3160b2e113e7e61aca812a5b1677d0f56d2b4baa7e487020d378f64ad36aa4467a12fac2cffddaa8f6c2ba469f8a503cce81d1474cbcc515f09aae89f0fe09d4f1f44ee91cb2047be45bc95f9fd77cb9a9cad5127b296aca0f0143b8be678e7ebbf9658033c5fdc6e20de48d4bee6dbd58e4523415c15c9deb589b644479e1df2dda3b5b0c81d86d50025b2a40b2e15846a67c552f8a1502f70c0dbff893940321a3b63a2bf984b397fb0a97ad6b5374d06a22aba4c05683ded4285cc93174eb0310ca25f6d691021f74f5924abe733adbcc1d2ad9a841c23fe3ee51c6f83a820d3bb9cc0c0c49d12b81f85b213aab751979c861f64055c4cf16c9480251dbf83a3de4defbd7d240444a59b7a75a683a77fdb3b4f9e1d803ba09d4cae8d5aca9d73ff4d94758f2542f11b0ebee4f3d63f95a9086919d80c08039bd22f78d305708357fc221637bf6720b60abddab5b2b5beca7f09527762edab37f15f0564c86cda2a0f671be6eb226fbf7848c016eba6cd60b22953d42c16e14211fce79e288b7083f45f954ce2f80528061f3e8ec52abccb799532a640e61902b462e4ea844f9aa87b9376e29bdf922bafa148ed4c43a3771c61e3d0ee951ce26586889057b42df035f86e02232056cca1673512ff1acce21651c5bfd8533c4889cf2c5e3bf4d020268b1c77a41d2ca4e09c1e7c51144904c9cd4894c92b07f8d98af139ad3606dad6a40ae99523c203d949eb81b631426cfbcc56a9faa08186e51344e7c5a9d6b8caafa6736e1db9d7d475df4b573300700fe61b92623e428f92aa47d1b2a5be14f6f1c3b64aab8bcd516bb5f61ae20c2ea276322ec6e179ce8293af0968d8c0dcdbad77b4241b0040e968dc04cb9b1184d1e3fe1de412a1c45caee3147e8cd6698da2070e53884285ac0aa1fb6b10a88508b01bf6abfca2edc7060fcbcdd47fab5d44b58a649692aefca1daa08510ecebc03e3a23838bf3ddb7961a20d8fbda0b8a58c1b03f0f6365c7247d5475e5f94131820e27e0e8aa1d00e8f55305ccce7292ee7f5c94e888feec94ed31d2a65c95732f3c6ca714de08a479d56eae6b5faca7896593ce38eba173a0403886b3e8319522b97317827647c07c613a31e73de4cc692566dbf1ffeaab810a8885727bb9566523b2975c5caef43409776c2afe9d40d0aab8a51a4dd831b6450f234a3234346af710034c18205d76897589bec05a1e6fe356331b970539084a22b0e8a3fc2c79cb07ffc4a84cef76b396923f9a5f1947632360e53db0833192c9440435ded2a77a1316671414b514eda76bee6894b71ef7db5ddca2adaba1bbc2818caeeea4afbc28780fce840df216930d5f4aec52dc151545e34b6c2677ad05d7965c9c34de2cedd710417552aec2a5efe669fd90d6def12fe600a02c3f67ba7db2883817d584b032bdeb3d51d17f61816d5ed838fa01d84c49308db9ed5721a251e27c1e9b5a4428eb2b5137fc4097eca4a42e29f324dc936e4f17bf058f50450ed9543692290dca083a89a9d7df467d5592924472ecc7dfc4013d4b02a05a9ba53fc86a896573e3bd13175332eff2353a2518d83f449c43c54fe17a4", @nested={0x8, 0x133, 0x0, 0x1, [@nested={0x4, 0xfe}]}, @typed={0x14, 0x9, 0x0, 0x0, @ipv6=@empty}]}, @OVS_FLOW_ATTR_UFID={0x5, 0x9, 0x13}]}, 0x103c}, 0x1, 0x0, 0x0, 0x4005}, 0x40) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x101002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000000), r4) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) tgkill$auto(0x0, 0x7, 0x9) ioctl$auto(r5, 0x8010550e, 0xf15) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001280), r3) sendmsg$auto_L2TP_CMD_SESSION_GET(r1, &(0x7f0000001340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, r6, 0x10, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x24000014) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(0x4, &(0x7f0000000200)={{0x0, 0x4, &(0x7f0000000140)={0x0, 0x4da}, 0x4, 0x0, 0x8, 0x800}, 0x3}, 0x7, 0xe, 0x0) write$auto(0x3, 0x0, 0xfdef) sendmsg$auto_OVS_FLOW_CMD_SET(r1, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf00080000000000000000070000e3000000a5e51cc76cca2a2eb366ceddfea184860acd5b991c68278fa56b0c7aed3f6f3a1399e7700b15a50c48c98e0a3b63d284bbe5d53dd31d4ada7d743f6b80a626dd1085c312e5cd72f68bba45dd8a58874fd0aaf5b4556b3bdd"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20) 3.748772089s ago: executing program 3 (id=2485): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0xc8000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) adjtimex$auto(&(0x7f0000000000)={0x6, 0x0, 0xc, 0xb3, 0x0, 0x4, 0x40, 0x0, 0x4, 0xfffffffffffffff9, 0x6, {0x0, 0x1}, 0x401, 0x7, 0x0, 0x1, 0x0, 0xffffffffffffffcc, 0x3, 0x1, 0x1000, 0x5}) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0x4040ae77, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mbind$auto(0x0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2) 3.63866285s ago: executing program 5 (id=2486): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x10, 0x2, 0x0) (async) r0 = fanotify_init$auto(0x5, 0x2000000000002) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_NOOP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc8c0}, 0x40010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r3) sendmsg$auto_TIPC_NL_MON_SET(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001800)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4050014}, 0x8000) (async) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r0) sendmsg$auto_NL802154_CMD_ASSOCIATE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x7b, 0x2d, 0x0, 0x1, [@typed={0x4, 0x31}, @nested={0x18, 0xd4, 0x0, 0x1, [@nested={0x4, 0x121}, @nested={0x4, 0x89}, @typed={0x8, 0xf5, 0x0, 0x0, @u32=0x396}, @nested={0x4, 0x65}]}, @generic="03d9bcd2fe468b9647dc1122c6e0345c25b41a48a06aa07e67faadcc13ff8562fab84ce734d10ab8be70c5382a54101392587920996d090c9a63271347c643ea334fb544bdf951", @nested={0x14, 0x82, 0x0, 0x1, [@nested={0x4, 0x8}, @typed={0x8, 0x13c, 0x0, 0x0, @pid}, @nested={0x4, 0x93}]}]}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) dup2$auto(0x0, 0x3) (async) write$auto(0xca, 0x0, 0x10) (async) madvise$auto(0x9, 0x5, 0x1a0000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) getpeername$auto(0x3, 0x0, 0x0) 3.506434272s ago: executing program 2 (id=2487): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:03.0/resource0\x00', 0x103000, 0x0) read$auto(r1, 0x0, 0x12) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0xe6e) r2 = inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(r2, 0x0, 0x2) open(&(0x7f0000000040)='X))\x00', 0x165943, 0x1d0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.95212017s ago: executing program 6 (id=2488): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r2}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r0}, @NETDEV_A_DMABUF_QUEUES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) clock_adjtime$auto(0xa, &(0x7f00000002c0)={0x10000, 0x0, 0x2, 0x8000000000000001, 0x0, 0x7f, 0xf1, 0x0, 0x6, 0x8, 0x2, {0x381cdc1f, 0x3}, 0x2, 0x7fffffff, 0x3, 0x9, 0x0, 0x3, 0x4, 0x5, 0x7, 0xf, 0x4}) 2.635903884s ago: executing program 5 (id=2489): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) r0 = socket(0x2a, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40) write$auto(0x3, 0x0, 0xfffffdef) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000002d, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r1 = gettid() connect$auto(0xffffffffffffffff, 0x0, 0x55) mmap$auto(0x0, 0x5, 0x3, 0x16, 0x3, 0x8000) sendfile$auto(0x6, 0xffffffffffffffff, 0x0, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0x20200, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = open(&(0x7f0000000200)='./cgroup\x00', 0x400, 0x23) fchdir$auto(r2) mkdir$auto(&(0x7f0000000140)='MAC80211_HWSIM\x00', 0x1) rmdir$auto(&(0x7f0000000340)='MAC80211_HWSIM\x00') process_vm_readv$auto(r1, &(0x7f0000000040)={0x0, 0x8}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0) move_pages$auto(r1, 0x4, &(0x7f0000000100)=&(0x7f0000000040), &(0x7f0000000140)=0x3, 0x0, 0x0) madvise$auto(0xd, 0x7, 0x6) 2.484469328s ago: executing program 6 (id=2490): r0 = socket(0x2, 0x801, 0x106) (async) r1 = socket(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', 0x0}) (async) sendmsg$auto_ILA_CMD_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x14, 0x0, 0x39b68c9c0fe85e47, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB="63eaad1b", @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) (async) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x3a) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x405, 0x8000) move_pages$auto(0x1, 0x9, 0x0, 0x0, 0x0, 0x2) (async) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) (async) io_uring_setup$auto(0x6, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) write$auto(r0, &(0x7f0000000000)='*\x00', 0xfd) 2.431199726s ago: executing program 2 (id=2491): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0xa41c2, 0x84) (async) socket(0x2, 0x801, 0x100) (async) pipe$auto(&(0x7f0000000080)=0xffffffffffffffff) fcntl$auto(r0, 0x4, 0xa553) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) (async) sendfile$auto(0x6, 0x3, 0x0, 0xfffffdef) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) clock_getres$auto(0x0, &(0x7f0000000080)={0x6, 0x41}) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video18\x00', 0x802, 0x0) (async) mmap$auto(0x0, 0x4, 0x10000000000, 0x11, 0x3, 0x100000000) (async) readv$auto(0x4, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0xa5) (async) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_GET(r2, &(0x7f0000001440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001400)={&(0x7f0000000280)=ANY=[@ANYBLOB="501a0020", @ANYRES16=r3, @ANYBLOB="000125bd7000ffdbdf25120000003b110380484061bd98fefe993c877ad918069d18f988c18c10afeb34db172d0f43b7187df7586f467996e62b281d2a19d0d7c2b203e92f5e0921bd91693d84f8fb7525ae36aa2af48f5a0e404c843ba724e3d6c76c84acab5f149c3abaa4c125c3bffa8f59aebc6df6b9c6dffa98ce62426ed13e51ca8dbc8924e91a8571d6b95831e8fe58bec7fabd997a24865878a910f3804bd12886e803ae8ee70cb2aa59f89eed5f95039e3516d826c06b98d4836e1f837b4fd2d16413768a9f60dad77e37398ef6234a21406f140b4034daa0339962dd251eeb9c8154d84f1f616d9c72d95fe242ced38a4acd0557cb408cda10c1ddfeca46f09656dfedfdb5f9a90e1dd452babd6b8f1c0867e2c77d9b13832ab01e2bcf98db7291a0e1dc5c250dfc7fdf0d88a93f6ec48804001d800400588004002180e7a0f13d02f611a8ba9f5ee39c027a83a8f8d70b87c1d17bfc2b8d0f7b5f97f68acb74cbd81dec21033841b3dfc185fccab6e832ef18265c7bbb5f20209e95a58805bdc4897db5e543a40cc97e4e79790f4908d1558d58f13519000a8f1fdf5e6ade5ba15d08eb959156001a9805a57d7618b3bdcc19f296597aebd7ec19e384c952fa765ab5f0f81fba77acffa2280058700dacc4f7a97b3be6ea0f85d508e81ef1480d9e44a3aa63786668ea914d4f91230ec9b27f6800b914dd3102cb69774db63b0c73298ed19dc72310d971bc67b0182c3451d9b3ddd8959e1adc8c7aadf92b8af8619164a70227e511b1bb8554268ee43c51a78721520147b938d9f8b47313efad2db0184b59600dba37a6c89381627909449f0e0b307c2c6f928737569bd6081ac39f3fc9d36c7107a6618abf13b5e445a29bd0ef0a33974ad49d53ee3a4eaee3a814c65d07a6afef7a2fdee229c4ace2a760442269f04f6bdd1a88331ed06ecb90501db19ff286f7c456fedaf738419e0f2e473d601f138a3e81202bee4dd20cefb5174b552174a871673e69dc42f01a4db69a449cf8e92b1044fabe4b29999495c7a53763479894687e73f647b3f4e742b41cca6bce103aeb58b0d1cae1f5e02dc6f5f39f1aefb5b03904f76e70005d4ce33e9911d1a1c44373d4998cce03c9b5a5b102fc3a033b8cb5eb5defc7ff14422f96bb7242b3c0217398831e6d7e7b93309485d64bab56d60c2bb272dea20cb69493dfc9f57391e5e8c4f363193deb9be481eb67568a29ee7295bf00da45cda30ae1296186adc82b223704bb12f5231b54bde7a8ccdce3eab442ff42bdab9870ab2dc5ac29df561ed129c6821a01aed9b908fec2c7d3ec6d589e312cf5dbf58d61cb1adc2d0102565b4c88a56b0419bcfb4f4b76a1d2f34bc47deae1d77fc12415119206b5419546070cc76e9a077a98039bdee8a8c2687a89be0a0753fbef21edb9da51645228b448ddddd4a35451f02e4aae216be9a94091d627e97e9ec2f91f5c4e6d8bf1dbcf93bdce4a69e75b123cdb5e53897ea0676c732d0a9a7bc7c05f21ede9e7498910959e0a4e38d49d59e6dafa34d8ab9d516fc22aa62d3631fafb314d9ab47dad213f847969adeb1635446530a6ec054d03a14f750b8f4e8ec44ec15a81067167b5691f8eeb8ad2a75e07b1e45047975e83b1765d92a04e47cba37510e9f08514bce269b512326ad84888f78725bae317fde665ab29fb23454ee8c4397bee366673a5af390835109e95cd2a9f864e34a863e11b603d8ab0a6b48ceb5a7e0deca7909eb3b73890ba28d5eb721939b5a5bbc525e9358b1a7dafdadc2504ce3814a08303bddcda761f8b3f3f9e59cdd75c177eb222d41615416480376caacd34f6282a60bcc474bb8a8d77116ab26fe23463420dfc9a103b843511ac8078563db48ee5612bbf57a42e108f65968434817cb207838be6bd4220175275b045c9451297f502408d0b9c0d63f7f0efd16789692de62637f3ea6a0b37f973de770247b149c0d83adc440f5904347651be948541fe1ca1c60f56ea9f15d6f5c323270307b9d21c3494cb111be2785f284b5c94465b21e895db94b53f206cdb67c07c994bc8ffc2d9c8c466e6bf2acfd32c8f051825d90964af134d02b4a977f68b25341660ca9be5d77233aeccfa727494265bf0d65cd39ef674e4282bd303b01f43180cc38defec6b508dc95668e2dbe7cca22482f82135ead2b66cacec0a597b86ced9b272cb3bc83f1a2ffe60d083e24ca02841eca74b9e9cf37daea389a37167b0777b6a4ed56b3417b51c38ad8a682119a62f18a36c3212529350fe4840e8e987aa30fae4616089129411469c24d2b1b2ee5328cb292a0baa5e0783543e5c5c596438c1a4f4815dd1c61d74d5d2310081e818b633054576bfd6196355633ba5de0e5193bbab15482a88f8fcb0eff7fcd2a159289546dbc2014216dda9adc3ffd942679aa661fe8980cb7465d20c0ead82e64f6a4f37e55813f5ab0eeb2a5532016dce8ef8974f39e6f460bb5a5b46d2bc929a1140f97777c17a796f6f825d84ab70acb9c689b029dfbc70b3ca8bd6da272f09aaf39a156774d3173f2d1b57d603089727a85a3d1fe255017917a9e0caba773d938e2b7953f0c0e38a4b2b01ef3848b9e0a05f842e571c539a16a3dd260d6c3ca053846186b2c68ff95db159a035b92932d67f47a932ded28f9da20dbf459e29e31db87776cb761548b246f206a7da18b3e5909de59537d618ee07ae3e90bda746be3e05bce107d8caf44d286fb40fcd7ae1f35de9a5d0667ffada98bc229015d51fa169586842da6dadf5b83d0e6a975b69225277cf653a06cd7a154c6907298ed19a4b6995b7c5e843490f555ecca627a42b7bf4b21729225fa9bfda74ff8a6f5508ed3ad8fcca557f7e824ada7665b646d5c48893a3f2d998bbdef1ca0792954ea21e656800284c1b8b076f26ef2fcb83bc5e7c4e33fde6135aab5dee28e1a08b576e8a2196fe786fa3cf14e11b41d879659eac01bcbb55fedf515de00ea58c7e97d4685682ef574a35e6f533d0f92c8dbfd5ee4f092f72d4447efbc4b7b24a67c151fd15decadde81928dc99f811f41fe6f892a5c9d7e6cb9492932fe8c7c0ff832d916344db60bc5f6f5fb60c27f51b29731d71fe3f85555d6e4115e32870e61406b07df6cfaebfe2c32067538bf936802a7ced798877927fa66a2b62926385932dfcd6d7e88f4529d76fb1a1c8cd8353f71d2fb22b9aba7549903d7782da2deaa23bcacb7a7f869a4f9de8c693451b6a5018c3d1f87b44777a55ec349efafd2198c5cba9819c875cbbb83432a238f64d2c9e31dd65fa5929388956755a7e0369147171f941e911688cadcabcb6da38db91547e825258d4b6768ca67b2c82d1f0dd5f277b2c2bd85c64fdcd8dc86b152fc1b324c735bae2210f0d253d7aedc6a22649c266485d8e2b1a81035cdf5aa5a4e133531657e287c8e3e353d78c9f209839e85389542211cd84cbdbe8c9681f83b284adb6def10499867cccf3ad7b7a7caf25e301f79c37affda4fb3e16ffef2dbd388e4f856c51cda109be9036a9b2aef7f6f302c23bbe84864d45431678f42379c334acefd796f468682c58e7860b880fd825077d20e8e3e4fea00bf164cd8ad4480c304b74591f57722efe9bb3e685c3b95a9d3ea570fdb489bf8390071c4f98682b05b04e179da824bf5dc073d342b6c156f6c6a943697f9755fd9dfeaa7f5dc6899b1ca192d04300ac542c0ce326166a5049d7d2d7570050020c317258957970021a54c5e6b64e2e045f22170d34952ab44d145145e99035fd5408fea9251f747dbf4d5bb73a8909a9e5fd6ab2132f03ca518fc78656dcc4fe95af0504be453aa50edf5302622a64d9807548fff3eb08069d0d2927ea8eb94dc61f3a3b4f6bfe2e1374cce1b5aac25bae897dc0412bd216582c6e8579a93b01cf85558faa409dbfcae88ed05017b5360c0315fb21b4dc08100dab3605541f74544e03b07fa581d6648cd37d5625fae2c97bd878d33a513edbdf0a571d3fbfc5b9f7d2341101b033e315d1241768dfeb52e7159b494c6e3f1394f678ee0d5ac6882a43c7ca60e6748191811e8df9bd0ed8d8cae94cba2892031aa23ce26e2bc740994876333ed93b48c41c4a51adec85a1062e94f05b441a83b6dc21a26e8261a698196439d2c6081a486d7a7e73e7ab57d30c68bd97916ebea85ec344e753c560bf36464368ae851daa647dfce2833f2b1881f6e11e6db6d139b7af6660f8f2a2ec8b77c1a70fcf3c57f04a37f8b4f6c8b3e5dd61982d65767002f8fc36ae1f3b082f22a1757ee96e3bb337695dfd128d6fa6eec992942613ecf95c541cf39d00742398ada56293e6011144bc81201221d0c87f60a48982ce01c3827bfa2139f8c86b05360bc9a1c34831d8f926fe4ffc63a9812b07f4b3f51fd356aa65ad2301cadb38140d811b2eea2beae15739b3ad0e36ccd6a285edf1a27965038b9ac8003ca555bd94c759dd7874c194549c2962f37fcd39ed99777aed351affda6c7015a9237e2c58864acbd2cd79cac72edf211a6b5b1bfa28bdcec38cd6fa16c9e448567d8bc584202c8a603b2e064594a7f26ca25c5caeb8f75def81bb7e4de490719e7017705220870a96206dfd95655814b9f9bf0ceb5c5de38d9dd9db6df609ffc65c0bfcd615edb2d2283c8105e0931da6bb4251a43fcf7935c10a132d5c93c2937465340438a20567ef5c86b9f5741248741783b6ac00a11028fcd375cfe6325b0b17ea5ed39df69be2792c3e56cfc27689ac31092222ce31ceab813428ced551f354c1c8c6bf9c84ef246e5f9cb92716c6fdedf0159129d921313f00cb8e01b0bfb5715879ea7ac41fd08afd6d6344d8b579900fd2a339e8cf910153195621352790cfea207c8c4b124d82dfc6bf572a446dcb9b979adfc14abc86248db60965e236bc016eaa4f50e219d0b724a1bc1340ca46ee1723472d9c1e9d320cd4403ae3d69a36e901bc7a3ad2686bd28596a0326173b46ca43ee7b8c3dc7ff60cf12d1d3391d3f376a551081c4dc2184ddc0b2f1aa28d44d49610956c24d4cb415353ecfeaa002a5d7addb3beec976d87ab43895683a1ba09dcbc1655bd7fab98609dbf35bf9386e858915b5ff4876c979918396cb017c4490df993dfb0db5d92d7f1982b21aff2905d826837087f46b63d7b40bce656efdaac96e0444061fd9c2e4aaf73a35084fc933a1eddb35f13ed5ec9301f59fbda48eb3d479bcbab37662cafddeb8559b096ec6ac1c8b8ffa315b9cbb65398c39d169c5fa1bcb32f02c7893363587a4cb7c6850aac2c14c0d83bc53f31b8d941ef604cc8b5e5a46a8024de6268fe5e0d48f59cbbef3172395c6fc8c0071dc433ad64eff29439add5dce72eba1f5ebaf9ff37770c61828a0a5f17275d89392eba90c2393128033216a761a45a96f59fc2bacf34d13f9cb1b87bbdadf6af49ad63f8874dfb99320bd027df251c5bfaa8a428c5a0fc2a14ea22d7c0515a5dcb211bf06a76f66b37ccea916b5df6233542c605761b363615e4906f7b389234ead0617f6cc61f8c7c6564120949b1e074c01ef8f5419bf367fd36d510e4a262332a4f50250cbb37f1538246454969e11a7e2c98d1e3ceb774d9227afadcb55b0ef5a87b7ec8ba1543fde0cd7867ad1f781b5e83399a8b840f1c4fe92ade503150498fdee09fa63beb2cdf4ed9ec84f5a310532c69256c993fe312cdc4fc93dcf90d31b181de6b4df1848c8f7ea4f051d607e4b03aaf01401618739534127227eafa5194def9c1c8e7a718c0687d0993453a9d64e0121b4af8ba56b86474e424dde3b6e601fcd1efdccebd8dbcf791cc4a809664b40187ce029edd56be7f577dceaf144866ac59c00694e02fc8ed6e8dee9e159195bb7f12b8fae5386e778d10c5c3879a9b87b1a25ae9afd2c2ce2491deeafabef94a7add7814d3ecbd4dd30764157b28d4b258f0b0e6a9ce36aea3d721c7b038a9b6681b2b79bf19e05d82d692324276a6cb77ad674f37b452eb75e07dbee838d90131f21ec244970af4a76906ce0b392fcf7bcfc47119eb17748ec3d4a1cd8b711bbd84ee4b40cdada31ca34e9feb9b17a76c0764eb1b78f973da7f6252bec89dec9f3405f028a249495a43e99aa4fa4c9a51bef3461b3b1f6875cba136b11719e9a5eedca87f5386a8afc26c8729fdb1a8c701ef623a7b96c6dce283ea2bab83bdec0262162b2d557dffae907e2dfa54a796c07bd87ac585789eb637c8ae04008f8000000000"], 0x1150}}, 0x8000) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x20000000) (async) getdents64$auto(r2, &(0x7f00000014c0)={0x0, 0x2, 0x4, 0x9, "f8beb2ece52060b0df3d54fff88dae5883d44de1bcd51c2a25c6007bcac2e3cdfa472ad0b9d7c1ed24f2f2982d52afd770918516168537217b37bd7ee65ee1e186661554afcfe9750ace3d905702e231e6bea009f669d25f481dde95d81e61da4330451a6f99c614311491b7c024901abcf7593f0a9e52d3bfb392231d4107e50130ff782aa3d6f0b59bad89ee0add86eea6"}, 0x7fff) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82082, 0x0) truncate$auto(&(0x7f0000001480)='./file0\x00', 0x7fff) 2.071975886s ago: executing program 2 (id=2492): mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) (async) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x5, 0x0, 0x0) io_uring_enter$auto(r0, 0x0, 0x4b, 0x7, &(0x7f0000000040)="59a1e9b2f44bb7476542dfb01990be36c3edce46d3118f2759b4ae914ad9f379be49", 0x101) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0) (async) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0) ioctl$auto(r1, 0xc0306201, 0x9) (async) ioctl$auto(r1, 0xc0306201, 0x9) ioctl$auto(r1, 0x1, r1) unshare$auto(0x9) 1.934275459s ago: executing program 6 (id=2493): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) clone$auto(0xd2d2, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_11={0x80000000000021, 0x200000003, 0x5, 0x7, 0x1, 0x6f, 0x9dd8, 0xe98e}, 0x6f4) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000ac0), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf25020000000c00018008000127463b0be418b3cb7b", @ANYRES32=r3, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0xc880}, 0x20000) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="00042bbd7000fbdbdf2528000000080005000300000044000180140002006261746164765f736c6176655f30000008000300030000000800030001000000080001007413aaaa55a00787b5ed668279fc3e275d294fc7a1e7e731459d323761205183f283545a8f", @ANYRES32, @ANYBLOB="14000200626f6e64300000000000000000000000080006000000010008000600030000001400018008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4040000}, 0x4001) r4 = socket(0x10, 0x2, 0x6) setsockopt$auto(r4, 0x104000000000010e, 0x1, 0x0, 0x16) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r5, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r6 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r6, 0x10f, 0x87, 0x0, 0x14) r7 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r7, 0x10f, 0x87, 0x0, 0x14) socket(0x848000000015, 0x805, 0x0) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e1838a00"}, 0x1c) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) 1.831017945s ago: executing program 2 (id=2494): bind$auto(0x2, 0x0, 0x5) (async) bind$auto(0x2, 0x0, 0x5) getpeername$auto(0x3, 0x0, 0x0) (async) getpeername$auto(0x3, 0x0, 0x0) setrlimit$auto(0x0, &(0x7f0000000000)={0x0, 0x200800}) unshare$auto(0x20000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x20, 0x70bd29, 0x25dfdbff, {}, [@OVS_METER_ATTR_CLEAR={0x4}, @OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048040}, 0x4000000) (async) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x20, 0x70bd29, 0x25dfdbff, {}, [@OVS_METER_ATTR_CLEAR={0x4}, @OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048040}, 0x4000000) setitimer$auto(0x2, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x8}}, 0x0) unshare$auto(0x40000080) 1.403979772s ago: executing program 2 (id=2495): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr9/carrier_changes\x00', 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/4096, 0x1000) socket(0x23, 0x80805, 0x0) mmap$auto(0x4, 0xff, 0xdf, 0x15, 0x2, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1a000, 0x0) 1.158733327s ago: executing program 3 (id=2496): openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000003440)='/sys/devices/virtual/net/rose12/statistics/collisions\x00', 0x22100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003480)=""/247, 0xf7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x1000, 0x400006, 0xdf, 0xbb7e, r0, 0x6) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x103000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpeername$auto(0x3, 0x0, 0x0) madvise$auto(0x80000000000, 0xffffffffffff0005, 0x19) mremap$auto(0x3, 0x3, 0x5, 0xfffffffffffffffc, 0x280000001) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x80) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(r1, 0x0, 0x2009a7, 0x20000008) open(0x0, 0xae63e, 0x124) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004) connect$auto(0x3, &(0x7f0000000140), 0x55) statx$auto(r1, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x14, &(0x7f0000000180)={0xbb13, 0x9, 0x0, 0x9, 0x0, 0x0, 0xffff, 0x401, 0x40, 0x5, 0x9, 0x9, {0x4, 0x1}, {0x40, 0x401}, {0x8, 0x4}, {0x1000, 0x8001}, 0x6, 0xfffffffe, 0x40, 0xfffffffd, 0x5, 0x5a16, 0x8, 0x9190, 0xe47, 0x6, 0x7, 0x7, [0x12e0000000000000, 0x3, 0x8828, 0x4, 0x0, 0x200000000000400, 0x9, 0xd, 0x200]}) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f00000005c0)="d6d00f", 0x3) recvmmsg$auto(0x3, 0x0, 0x80000025, 0x0, 0x0) read$auto(0x4, 0x0, 0xfdef) mmap$auto(0x4, 0x4, 0x400, 0xeb1, 0xffffffffffffffff, 0x8000) msgrcv$auto(0x0, 0x0, 0x1000, 0x8000000000000000, 0xb5) msgsnd$auto(0xffff7fff, &(0x7f0000000000)={0xfffffffffffffffd, 0x5}, 0x8, 0x1004) 1.129106701s ago: executing program 2 (id=2497): r0 = socket$nl_generic(0x10, 0x3, 0x10) getuid() setfsuid$auto(0xee01) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x7b8}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000140)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) 801.60697ms ago: executing program 6 (id=2498): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd10/state\x00', 0x189e42, 0x0) write$auto(r0, 0x0, 0xf) mlockall$auto(0x7) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x6) r2 = getsockopt$auto(0x4, 0x6, 0x17, 0xfffffffffffffffc, 0x0) set_mempolicy$auto(0x2005, &(0x7f0000000080)=0x87e, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000033, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x1, 0x8000, 0x0) mmap$auto(0x4, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/query\x00', 0x200000, 0x0) ioctl$auto_binder_fops_binder_internal(r2, 0xb6, &(0x7f0000000100)="4d590c71ea7a5f9393808bc5436407fd18ea01cb66d1c5568fa303111b7bcf426dae6d51d8924240db176c347a06200124cfe4abb0f0ba1e2b22cb3aa6406d505c3f3a31ba1ff1cff2a70e98f359e609804aa052af5a739ccc78766ea1e032b56aedf29892958e79fc39b6ec9e9fbf91fc73687b2791bc4a47ed9bd37f331bfc41089d0047734c04f31a1e5ad96519e68d530c8ac598eaa08e809503db7463040564b79fd87a") openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd15/hctx0/cpu0/poll_rq_list\x00', 0x88201, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r1) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd10/state\x00', 0x189e42, 0x0) (async) write$auto(r0, 0x0, 0xf) (async) mlockall$auto(0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1d, 0x2, 0x6) (async) getsockopt$auto(0x4, 0x6, 0x17, 0xfffffffffffffffc, 0x0) (async) set_mempolicy$auto(0x2005, &(0x7f0000000080)=0x87e, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) sysfs$auto(0x2, 0x100000000000033, 0x0) (async) fsopen$auto(0x0, 0x1) (async) close_range$auto(0x1, 0x8000, 0x0) (async) mmap$auto(0x4, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/query\x00', 0x200000, 0x0) (async) ioctl$auto_binder_fops_binder_internal(r2, 0xb6, &(0x7f0000000100)="4d590c71ea7a5f9393808bc5436407fd18ea01cb66d1c5568fa303111b7bcf426dae6d51d8924240db176c347a06200124cfe4abb0f0ba1e2b22cb3aa6406d505c3f3a31ba1ff1cff2a70e98f359e609804aa052af5a739ccc78766ea1e032b56aedf29892958e79fc39b6ec9e9fbf91fc73687b2791bc4a47ed9bd37f331bfc41089d0047734c04f31a1e5ad96519e68d530c8ac598eaa08e809503db7463040564b79fd87a") (async) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd15/hctx0/cpu0/poll_rq_list\x00', 0x88201, 0x0) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r1) (async) 461.129057ms ago: executing program 5 (id=2499): keyctl$auto(0x5, 0xfffffffd, 0x8, 0x0, 0xb8b) keyctl$auto(0x11, 0xfffffffd, 0x8, 0x4, 0x9) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/query\x00', 0xc8040, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) mmap$auto(0x3, 0x400008, 0xdf, 0x9b72, 0x5, 0x8000) sysfs$auto(0x2, 0x1e, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) bind$auto(0x3, &(0x7f0000000080)=@qipcrtr={0x2a, 0x4, 0xfffffffe}, 0x6b) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x80a00, 0x0) mmap$auto(0x0, 0x2, 0x1, 0x15, 0x0, 0x7ffb) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r0 = openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) pread64$auto(r0, 0x0, 0x5bbcf9f5, 0x100000001) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) chdir$auto(&(0x7f00000000c0)='./file0\x00') mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x3, 0xffffffff, 0x0, 0x9, 0x2) read$auto_proc_pid_smaps_operations_internal(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) ioctl$auto_evdev_fops_evdev(0xffffffffffffffff, 0xfffeffff80004521, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram1\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x80000001) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0xc, 0x0, 0x0, 0x9}, 0x7}, 0x10000003, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 228.802236ms ago: executing program 3 (id=2500): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) kexec_load$auto(0x100, 0x1, &(0x7f0000000080)={@buf=0x0, 0x2, 0x3e0000000000, 0x3000}, 0x4) ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000100)={0x22, 0x0, r2}) read$auto_cgwb_debug_stats_fops_(r3, &(0x7f0000000140)=""/239, 0xef) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000050}, 0x40d8) 15.889063ms ago: executing program 6 (id=2501): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x19d0, 0xfffffffffffffffa, 0x8000) mkdir$auto(0x0, 0x8001) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, 0x0, 0x4044820) mount$auto(0x0, &(0x7f0000000100), 0x0, 0x100000, 0x0) unshare$auto(0x20000) setns(0xffffffffffffffff, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x100000000005d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) fcntl$auto(0xff80000000000000, 0x4, 0xfffffffffffffffc) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x448, r3, 0xa01, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_PROBE_RESP={0x406, 0x91, "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"}, @NL80211_ATTR_PMKID={0x21, 0x55, "a004d3b396409919ad312791653935cf3a85d36fb0ce8ad7db128ec56c"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8001}]}, 0x448}, 0x1, 0x0, 0x0, 0x40}, 0x800) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) clone$auto(0x20003b44, 0x2, 0x0, 0x0, 0x2) ioctl$auto(0x3, 0x800005411, 0x38) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) clone$auto(0x440f, 0x6, &(0x7f00000000c0)=0x10001, &(0x7f0000000180)=0x9, 0x8) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x5, 0x100005, 0x1, 0x0, 0x7}, {0x4, 0xfff, 0xffff7fff, 0x2, 0xc005, 0x200, 0x3, 0x0, 0x3}}) madvise$auto(0x108000, 0x800034, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 0s ago: executing program 3 (id=2502): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x3, 0x0) access$auto(&(0x7f0000000000)='}[,&*}\x00', 0x7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x40100, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x3, 0x0) (async) access$auto(&(0x7f0000000000)='}[,&*}\x00', 0x7) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x40100, 0x0) (async) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) (async) kernel console output (not intermixed with test programs): wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.144282][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.165673][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.231122][ T5895] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.311547][ T5900] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 73.322437][ T5900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.338082][ T5900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.358755][ T5900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.370769][ T5900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.629920][ T5906] process 'syz.3.6' launched '' with NULL argv: empty string added [ 73.759415][ T29] audit: type=1800 audit(1735201056.040:2): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2" name="dbroot" dev="configfs" ino=6781 res=0 errno=0 [ 74.547381][ T5926] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.577600][ T5834] Bluetooth: hci1: command tx timeout [ 74.719736][ T5834] Bluetooth: hci3: command tx timeout [ 74.720273][ T5828] Bluetooth: hci0: command tx timeout [ 74.730666][ T5834] Bluetooth: hci2: command tx timeout [ 75.253647][ T5938] Process accounting resumed [ 75.941023][ T5954] Zero length message leads to an empty skb [ 76.010181][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'. [ 76.066544][ T5954] hsr_slave_0: entered allmulticast mode [ 76.631402][ T5957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16'. [ 76.640465][ T5828] Bluetooth: hci1: command tx timeout [ 76.797570][ T5828] Bluetooth: hci2: command tx timeout [ 76.799101][ T5834] Bluetooth: hci3: command tx timeout [ 76.809396][ T5834] Bluetooth: hci0: command tx timeout [ 80.971136][ T6017] vivid-013: ================= START STATUS ================= [ 80.993438][ T6017] vivid-013: Generate PTS: true [ 81.022501][ T6017] vivid-013: Generate SCR: true [ 81.050985][ T6017] tpg source WxH: 640x360 (Y'CbCr) [ 81.056210][ T6017] tpg field: 1 [ 81.088442][ T6017] tpg crop: 640x360@0x0 [ 81.092671][ T6017] tpg compose: 640x360@0x0 [ 81.135657][ T6017] tpg colorspace: 8 [ 81.140186][ T6017] tpg transfer function: 0/0 [ 81.155018][ T6017] tpg Y'CbCr encoding: 0/0 [ 81.162202][ T6017] tpg quantization: 0/0 [ 81.162938][ T6022] netlink: 74 bytes leftover after parsing attributes in process `syz.2.31'. [ 81.166453][ T6017] tpg RGB range: 0/2 [ 81.194292][ T6017] vivid-013: ================== END STATUS ================== [ 81.938411][ T830] cfg80211: failed to load regulatory.db [ 82.737746][ T6049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.38'. [ 82.794256][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.39'. [ 82.905999][ T6053] Invalid ELF header magic: != ELF [ 83.074304][ T6049] team0 (unregistering): Port device team_slave_0 removed [ 83.110470][ T6049] team0 (unregistering): Port device team_slave_1 removed [ 83.549385][ T6064] openvswitch: netlink: Key 5 has unexpected len 4 expected 2 [ 83.725584][ T6074] ubi0: attaching mtd0 [ 83.741132][ T6074] ubi0: scanning is finished [ 83.749527][ T6074] ubi0: empty MTD device detected [ 83.760268][ T6074] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 83.942973][ T6074] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 85.368255][ T6146] can: request_module (can-proto-0) failed. [ 88.535812][ T6227] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 88.567674][ T6227] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 89.018467][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.82'. [ 89.968875][ T6266] netlink: 146 bytes leftover after parsing attributes in process `syz.0.91'. [ 90.041637][ T6258] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.491054][ T6287] mkiss: ax0: crc mode is auto. [ 90.792643][ T6291] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 90.840855][ T6291] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 90.976799][ T6295] netlink: 342 bytes leftover after parsing attributes in process `syz.3.95'. [ 90.989056][ T6295] netlink: 274 bytes leftover after parsing attributes in process `syz.3.95'. [ 91.106509][ T6298] syz.3.96 uses obsolete (PF_INET,SOCK_PACKET) [ 92.709622][ T29] audit: type=1807 audit(1735201075.000:3): UNKNOWN=$ res=0 [ 92.730988][ T29] audit: type=1802 audit(1735201075.020:4): pid=6339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.108" res=0 errno=0 [ 93.083898][ T6335] ima: policy update failed [ 93.113879][ T29] audit: type=1802 audit(1735201075.410:5): pid=6335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.108" res=0 errno=0 [ 93.509689][ T6358] capability: warning: `syz.3.112' uses 32-bit capabilities (legacy support in use) [ 93.591912][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.113'. [ 93.916252][ T6368] Process accounting resumed [ 94.055170][ T6374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.118'. [ 94.338337][ T6379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.958813][ T6392] ptrace attach of "./syz-executor exec"[5826] was attempted by "\x09.o}iE_tlĬ5iDUC71FS\x1bc۝3̻!B%ָVָ7u#[]\x0c0LC\x0cJ\x0bQ.;'%pDo({>& %U~\x09qO ^V囬4RT9R`rá!M!lr_Jn>|O]\x0aTzц\x1b $jX},Tbۅ_vuG\x0cm21DYޛvZw9[B2,Yȩ/5uF'q*E\x0a 2Ե1z5\x0d60Stk8O^;IV~ƋB,0'\x5c',2/\x09\x1bhl_'x__(l53=$0YX,hs3مG?tN߯q֟QׇK_S(`4\x0b-Ol{40k' >**;!$\x5cڦz/v<A$9<~e8稽/h̓\x0a^%7l:SzCE爛\x09^3W{*B%cIG4\x220nG(k\x09cGbBT2(XC!`4_|y<@Wʓp8.0CܣasBFu _YS9GrRjG+~ձ*}\x0d[ Ԅ \x0aT<4H]RA\x0a?\x09b]͠BaM|dD?g&18R_\x1bvW/DJZEt^\x5cB>XޡDEȜp`7TN}$]E|$==b^oSXDt\x0dZU5*նcZwB [ 95.517265][ T29] audit: type=1800 audit(8277292037.150:6): pid=6399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.122" name="version" dev="configfs" ino=9915 res=0 errno=0 [ 95.608335][ C1] vkms_vblank_simulate: vblank timer overrun [ 95.628881][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.482374][ T6435] netlink: 16 bytes leftover after parsing attributes in process `syz.2.132'. [ 97.833331][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.135'. [ 98.449821][ T6489] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [4]. [ 98.839270][ T6497] Process accounting resumed [ 99.289134][ T6506] netlink: 28 bytes leftover after parsing attributes in process `syz.3.147'. [ 99.303896][ T6506] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 99.841079][ T6528] netlink: 350 bytes leftover after parsing attributes in process `syz.0.153'. [ 100.128779][ T6534] netlink: 334 bytes leftover after parsing attributes in process `syz.0.155'. [ 100.147564][ T6534] netlink: 334 bytes leftover after parsing attributes in process `syz.0.155'. [ 100.933486][ T6561] netlink: 28 bytes leftover after parsing attributes in process `syz.1.161'. [ 102.014825][ T6583] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000010006 [ 102.600281][ T6608] netlink: zone id is out of range [ 105.026909][ T6664] mmap: syz.3.184 (6664) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.270011][ T6667] netlink: 28 bytes leftover after parsing attributes in process `syz.3.186'. [ 105.307263][ T6667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.326602][ T6667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.378003][ T6667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.401020][ T6667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.149373][ T6738] netlink: 330 bytes leftover after parsing attributes in process `syz.1.201'. [ 107.551562][ T6744] netlink: 146 bytes leftover after parsing attributes in process `syz.2.204'. [ 107.752714][ T6745] HfR: entered promiscuous mode [ 108.008984][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.205'. [ 108.087274][ T6742] HfR: left promiscuous mode [ 108.102941][ T6750] Invalid ELF header magic: != ELF [ 108.798630][ T6757] netlink: 334 bytes leftover after parsing attributes in process `syz.0.209'. [ 108.818715][ T6757] netlink: 334 bytes leftover after parsing attributes in process `syz.0.209'. [ 109.262913][ T6764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.208'. [ 109.753680][ T6764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.775592][ T6764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.821000][ T6764] bond0 (unregistering): Released all slaves [ 110.290696][ C1] sd 0:0:1:0: [sda] tag#4891 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 110.301250][ C1] sd 0:0:1:0: [sda] tag#4891 CDB: Write(6) 0a 00 00 00 00 00 00 00 00 00 00 00 [ 111.752737][ T6840] random: crng reseeded on system resumption [ 111.948604][ T6842] netlink: 338 bytes leftover after parsing attributes in process `syz.2.227'. [ 112.003313][ T6842] netlink: 338 bytes leftover after parsing attributes in process `syz.2.227'. [ 112.012944][ T6841] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[6841] [ 112.968797][ T6856] bcache: register_bcache() error : failed to open device [ 113.703241][ T6876] Process accounting resumed [ 113.712534][ T6876] bridge0: port 3(team0) entered blocking state [ 113.719054][ T6876] bridge0: port 3(team0) entered disabled state [ 113.727603][ T6876] team0: entered allmulticast mode [ 113.732757][ T6876] team_slave_0: entered allmulticast mode [ 113.748963][ T6876] team_slave_1: entered allmulticast mode [ 113.792211][ T6876] team0: entered promiscuous mode [ 113.807353][ T6876] team_slave_0: entered promiscuous mode [ 113.817339][ T6876] team_slave_1: entered promiscuous mode [ 113.834972][ T6876] bridge0: port 3(team0) entered blocking state [ 113.841559][ T6876] bridge0: port 3(team0) entered forwarding state [ 114.281750][ T6898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.238'. [ 116.379876][ T6954] nbd: must specify an index to disconnect [ 116.692458][ T6964] netlink: 330 bytes leftover after parsing attributes in process `syz.2.251'. [ 118.084103][ T7009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.256'. [ 118.721407][ T7037] netlink: 334 bytes leftover after parsing attributes in process `syz.2.259'. [ 118.830114][ T29] audit: type=1800 audit(8277292060.470:7): pid=7041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.260" name="dbroot" dev="configfs" ino=12662 res=0 errno=0 [ 119.479080][ T7054] block nbd12: NBD_DISCONNECT [ 119.500648][ T7041] db_root: cannot open: [ 119.501644][ T7058] block nbd12: NBD_DISCONNECT [ 119.529354][ T29] audit: type=1800 audit(8277292061.170:8): pid=7041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.260" name="features" dev="configfs" ino=12704 res=0 errno=0 [ 120.194013][ T7078] device-mapper: ioctl: Unable to rename non-existent device, to [ 121.764799][ T7112] misc userio: No port type given on /dev/userio [ 124.572522][ T7161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.285'. [ 124.647672][ T7161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.285'. [ 125.350510][ T7192] netlink: 246 bytes leftover after parsing attributes in process `syz.1.294'. [ 126.382783][ T7209] netlink: 16 bytes leftover after parsing attributes in process `syz.1.297'. [ 126.911452][ T7224] openvswitch: netlink: Message has 16 unknown bytes. [ 127.299789][ T7231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.302'. [ 128.663888][ T7231] team0: Port device team_slave_0 removed [ 132.213904][ T7295] netlink: 28 bytes leftover after parsing attributes in process `syz.0.316'. [ 133.122853][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.137248][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.918665][ T7331] Line length is too long: Should be less than 4094 [ 133.973838][ T7331] vivid-013: ================= START STATUS ================= [ 133.981797][ T7331] vivid-013: Generate PTS: true [ 133.986908][ T7331] vivid-013: Generate SCR: true [ 133.992166][ T7331] tpg source WxH: 640x360 (Y'CbCr) [ 133.997614][ T7331] tpg field: 1 [ 134.001009][ T7331] tpg crop: 640x360@0x0 [ 134.007247][ T7331] tpg compose: 640x360@0x0 [ 134.011702][ T7331] tpg colorspace: 8 [ 134.015563][ T7331] tpg transfer function: 0/0 [ 134.020259][ T7331] tpg Y'CbCr encoding: 0/0 [ 134.055144][ T7331] tpg quantization: 0/0 [ 134.060786][ T7331] tpg RGB range: 0/2 [ 134.064816][ T7331] vivid-013: ================== END STATUS ================== [ 135.188862][ T7390] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 138.524048][ T7463] netlink: 88 bytes leftover after parsing attributes in process `syz.3.352'. [ 139.703528][ T7499] netlink: 146 bytes leftover after parsing attributes in process `syz.3.360'. [ 141.024435][ T7548] netlink: 342 bytes leftover after parsing attributes in process `syz.1.372'. [ 142.898008][ T7603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.388'. [ 142.997384][ T7611] block nbd9: NBD_DISCONNECT [ 144.168137][ T7629] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 144.204423][ T7629] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 144.490480][ T7629] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 144.681473][ T7629] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 144.689816][ T7629] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 144.756357][ T7629] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 144.838457][ T7629] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 144.851754][ T7649] Process accounting resumed [ 144.874642][ T7629] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 144.944068][ T7655] netlink: 338 bytes leftover after parsing attributes in process `syz.0.399'. [ 145.027066][ T7660] netlink: 338 bytes leftover after parsing attributes in process `syz.0.399'. [ 145.095093][ T7629] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 145.164656][ T7629] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 145.176431][ T7629] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 145.239726][ T7629] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 145.810474][ T7680] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 145.842299][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 146.243880][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'. [ 146.713589][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.881718][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.032924][ T7712] netlink: 28 bytes leftover after parsing attributes in process `syz.1.411'. [ 147.193534][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.338822][ T7663] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 147.913165][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.755174][ T7789] Invalid ELF header magic: != ELF [ 148.792660][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.952655][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.272385][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 149.982266][ T7810] netlink: 122 bytes leftover after parsing attributes in process `syz.0.416'. [ 149.992150][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 150.714281][ T7816] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 150.821698][ T7816] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 150.827830][ T7816] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 150.874120][ T7838] netlink: 5995 bytes leftover after parsing attributes in process `syz.0.425'. [ 150.947083][ T7816] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 150.952431][ T7840] XFS: irix_sgid_inherit sysctl option is deprecated. [ 150.982471][ T7840] netlink: 28 bytes leftover after parsing attributes in process `syz.3.428'. [ 151.550780][ T29] audit: type=1800 audit(8277292093.186:9): pid=7851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.429" name="discovery_nqn" dev="configfs" ino=15223 res=0 errno=0 [ 151.571339][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.287546][ T7863] Process accounting resumed [ 152.310942][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 152.870647][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 152.871636][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 152.950583][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 155.724318][ T7915] Invalid ELF header magic: != ELF [ 155.799057][ T7868] Invalid ELF header magic: != ELF [ 158.182147][ T7966] program syz.3.454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.177870][ T8010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.468'. [ 160.671662][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.463'. [ 160.988720][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.473'. [ 163.234247][ T8084] could not allocate digest TFM handle [ 163.705475][ T8104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.489'. [ 163.926563][ T8103] lo: entered allmulticast mode [ 164.411134][ T8108] Process accounting resumed [ 164.728317][ T7768] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.812570][ T8102] lo: left allmulticast mode [ 165.039774][ T7768] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.441641][ T7768] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.927951][ T7768] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.954361][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 165.974894][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.985436][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.004700][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 166.013786][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 166.022213][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 167.200796][ T8117] chnl_net:caif_netlink_parms(): no params data found [ 167.240807][ T7768] bridge_slave_1: left allmulticast mode [ 167.256390][ T7768] bridge_slave_1: left promiscuous mode [ 167.264454][ T7768] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.354016][ T7768] bridge_slave_0: left allmulticast mode [ 167.393272][ T7768] bridge_slave_0: left promiscuous mode [ 167.399986][ T7768] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.514469][ T8136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.498'. [ 168.063006][ T5828] Bluetooth: hci0: command tx timeout [ 168.907187][ T8117] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.914867][ T8117] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.924024][ T8117] bridge_slave_0: entered allmulticast mode [ 168.934266][ T8117] bridge_slave_0: entered promiscuous mode [ 169.004489][ T8117] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.011638][ T8117] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.058610][ T8117] bridge_slave_1: entered allmulticast mode [ 169.087609][ T8117] bridge_slave_1: entered promiscuous mode [ 169.316232][ T8157] netlink: 4763 bytes leftover after parsing attributes in process `syz.3.499'. [ 169.349317][ T8117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.613826][ T8117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.724584][ T8117] team0: Port device team_slave_0 added [ 169.773016][ T8163] Line length is too long: Should be less than 4094 [ 169.953130][ T7768] hsr_slave_1: left promiscuous mode [ 170.141978][ T5828] Bluetooth: hci0: command tx timeout [ 170.208577][ T8176] block nbd12: NBD_DISCONNECT [ 170.214693][ T8175] block nbd12: NBD_DISCONNECT [ 170.220018][ T7768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.230199][ T7768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.266568][ T7768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.278129][ T7768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.351772][ T7768] veth1_macvtap: left promiscuous mode [ 170.362054][ T7768] veth0_macvtap: left promiscuous mode [ 170.370154][ T7768] veth1_vlan: left promiscuous mode [ 170.383243][ T7768] veth0_vlan: left promiscuous mode [ 170.553000][ T8178] netlink: 146 bytes leftover after parsing attributes in process `syz.3.504'. [ 170.596299][ T8186] netlink: 28 bytes leftover after parsing attributes in process `syz.0.507'. [ 170.868714][ T8192] netlink: 28 bytes leftover after parsing attributes in process `syz.2.509'. [ 171.518837][ T7768] team0 (unregistering): Port device team_slave_1 removed [ 171.594423][ T7768] team0 (unregistering): Port device team_slave_0 removed [ 172.225072][ T5828] Bluetooth: hci0: command tx timeout [ 172.625824][ T8117] team0: Port device team_slave_1 added [ 172.754615][ T8192] geneve1: entered allmulticast mode [ 172.843063][ T8117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.851036][ T8117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.918748][ T8117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.981279][ T8117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.010264][ T8117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.068270][ T8117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.163732][ T8117] hsr_slave_0: entered promiscuous mode [ 173.183589][ T8117] hsr_slave_1: entered promiscuous mode [ 173.194665][ T8117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.210365][ T8117] Cannot create hsr debugfs directory [ 173.310752][ T8218] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 173.889839][ T8117] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 173.956836][ T8239] netlink: 330 bytes leftover after parsing attributes in process `syz.0.517'. [ 173.974796][ T8117] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 174.012854][ T8117] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 174.053130][ T8117] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 174.302628][ T8117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.342779][ T5828] Bluetooth: hci0: command tx timeout [ 174.379170][ T8117] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.460457][ T8117] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 174.470911][ T8117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.491257][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.498433][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.510099][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.517223][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.789681][ T8257] netlink: 28 bytes leftover after parsing attributes in process `syz.3.520'. [ 174.915236][ T8257] bond0: (slave bond_slave_0): Releasing backup interface [ 175.096703][ T8117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.644613][ T8117] veth0_vlan: entered promiscuous mode [ 175.712576][ T8117] veth1_vlan: entered promiscuous mode [ 175.830177][ T8117] veth0_macvtap: entered promiscuous mode [ 175.848552][ T8117] veth1_macvtap: entered promiscuous mode [ 175.916445][ T8117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.961369][ T8117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.997140][ T8117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.032334][ T8117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.084608][ T8117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.114188][ T8117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.156647][ T8117] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.190949][ T8117] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.227793][ T8117] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.269012][ T8117] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.501272][ T8308] netlink: 28 bytes leftover after parsing attributes in process `syz.3.526'. [ 176.528721][ T7740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.537295][ T7740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.703858][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.721370][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.214262][ T8337] Invalid ELF header magic: != ELF [ 178.394294][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.536'. [ 178.699791][ T8342] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 179.341419][ T8398] openvswitch: netlink: Key type 29 is not supported [ 179.981982][ T8391] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 180.064603][ T8391] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 180.096981][ T8391] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 180.103157][ T8391] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 180.267787][ T8391] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 180.417004][ T8391] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 181.193973][ T8447] svc: failed to register nfsdv3 RPC service (errno 111). [ 181.242674][ T8447] svc: failed to register nfsaclv3 RPC service (errno 111). [ 181.416295][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 181.656772][ T8446] svc: failed to register nfsdv3 RPC service (errno 111). [ 181.674157][ T8446] svc: failed to register nfsaclv3 RPC service (errno 111). [ 182.144212][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 182.150354][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 182.157352][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 183.348852][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'. [ 183.787714][ T8525] netlink: 'syz.0.562': attribute type 1 has an invalid length. [ 183.983645][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.563'. [ 184.214889][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 184.646037][ T8551] netlink: 85 bytes leftover after parsing attributes in process `syz.0.569'. [ 184.728053][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.570'. [ 184.748182][ T8556] MTRR 1 not used [ 185.045502][ T8566] ======================================================= [ 185.045502][ T8566] WARNING: The mand mount option has been deprecated and [ 185.045502][ T8566] and is ignored by this kernel. Remove the mand [ 185.045502][ T8566] option from the mount to silence this warning. [ 185.045502][ T8566] ======================================================= [ 185.408730][ T8571] netlink: zone id is out of range [ 185.429491][ T8571] netlink: zone id is out of range [ 185.448844][ T8571] netlink: zone id is out of range [ 185.471224][ T8571] netlink: del zone limit has 4 unknown bytes                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         syzkaller syzkaller login: [ 390.804927][T13091] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1590'. [ 393.800925][T13128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1600'. [ 394.406681][T13162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1611'. [ 394.458172][T13162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1611'. [ 397.071070][T13224] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1629'. [ 398.345612][T13255] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1634'. [ 398.493316][T13257] netlink: 206 bytes leftover after parsing attributes in process `syz.2.1635'. [ 399.909855][T13293] openvswitch: netlink: VXLAN extension 0 has unexpected len 1 expected 0 [ 399.964562][T13287] Invalid ELF header magic: != ELF [ 400.265765][T13302] netlink: 'syz.2.1645': attribute type 15 has an invalid length. [ 400.286539][T13302] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1645'. [ 400.307728][T13302] netlink: 'syz.2.1645': attribute type 15 has an invalid length. [ 400.315639][T13302] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1645'. [ 400.433000][T13302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1645'. [ 400.767133][T13314] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1647'. [ 400.833568][T13314] bridge0: port 3(team0) entered disabled state [ 401.149916][T13329] netlink: 74 bytes leftover after parsing attributes in process `syz.2.1650'. [ 401.635702][T13344] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1655'. [ 401.910989][T13352] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1656'. [ 403.953187][T13391] openvswitch: netlink: ERSPAN option length err (len 4912, max 255). [ 404.190824][T13394] Process accounting resumed [ 404.292402][T13393] Process accounting resumed [ 404.429035][T13396] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 404.761750][T13405] __nla_validate_parse: 1 callbacks suppressed [ 404.761771][T13405] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1670'. [ 405.547850][T13399] delete_channel: no stack [ 408.864711][T13508] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1697'. [ 409.317676][T13504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1696'. [ 409.362017][T13504] tc_dump_action: action bad kind [ 413.476203][T13618] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 413.687481][T13623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1724'. [ 414.613951][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1732'. [ 415.701755][T13684] netlink: 'syz.0.1740': attribute type 3 has an invalid length. [ 416.066026][T13701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1744'. [ 416.618871][T13720] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1749'. [ 417.150477][T13738] FAULT_INJECTION: forcing a failure. [ 417.150477][T13738] name failslab, interval 1, probability 0, space 0, times 0 [ 417.204380][T13738] CPU: 1 UID: 0 PID: 13738 Comm: syz.2.1756 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 417.215295][T13738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 417.225388][T13738] Call Trace: [ 417.228706][T13738] [ 417.231666][T13738] dump_stack_lvl+0x16c/0x1f0 [ 417.236391][T13738] should_fail_ex+0x497/0x5b0 [ 417.241119][T13738] ? fs_reclaim_acquire+0xae/0x150 [ 417.246282][T13738] should_failslab+0xc2/0x120 [ 417.251012][T13738] __kmalloc_cache_noprof+0x68/0x420 [ 417.256344][T13738] ? trace_lock_acquire+0x14e/0x1f0 [ 417.261601][T13738] alloc_pipe_info+0x10e/0x590 [ 417.266419][T13738] splice_direct_to_actor+0x793/0xa40 [ 417.271843][T13738] ? __pfx_direct_splice_actor+0x10/0x10 [ 417.277524][T13738] ? __pfx_aa_file_perm+0x10/0x10 [ 417.282599][T13738] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 417.288542][T13738] ? __fget_files+0x1fc/0x3a0 [ 417.293267][T13738] do_splice_direct+0x178/0x250 [ 417.298169][T13738] ? __pfx_do_splice_direct+0x10/0x10 [ 417.303598][T13738] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 417.309627][T13738] do_sendfile+0xaed/0xe30 [ 417.314064][T13738] ? __pfx_do_sendfile+0x10/0x10 [ 417.319118][T13738] ? __fget_files+0x206/0x3a0 [ 417.323825][T13738] __x64_sys_sendfile64+0x1da/0x220 [ 417.329041][T13738] ? ksys_write+0x1ba/0x250 [ 417.333555][T13738] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 417.339296][T13738] do_syscall_64+0xcd/0x250 [ 417.343816][T13738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.349718][T13738] RIP: 0033:0x7fb411385d29 [ 417.354137][T13738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.373762][T13738] RSP: 002b:00007fb4121e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 417.382191][T13738] RAX: ffffffffffffffda RBX: 00007fb411575fa0 RCX: 00007fb411385d29 [ 417.390271][T13738] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 417.398252][T13738] RBP: 00007fb4121e8090 R08: 0000000000000000 R09: 0000000000000000 [ 417.406229][T13738] R10: 000000007fffe000 R11: 0000000000000246 R12: 0000000000000001 [ 417.414212][T13738] R13: 0000000000000000 R14: 00007fb411575fa0 R15: 00007ffcae18f4b8 [ 417.422202][T13738] [ 417.760134][T13753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1759'. [ 418.048049][T13764] ICMPv6: process `syz.2.1763' is using deprecated sysctl (syscall) net.ipv6.neigh.virt_wifi0.retrans_time - use net.ipv6.neigh.virt_wifi0.retrans_time_ms instead [ 418.277641][T13768] FAULT_INJECTION: forcing a failure. [ 418.277641][T13768] name failslab, interval 1, probability 0, space 0, times 0 [ 418.326393][T13768] CPU: 0 UID: 0 PID: 13768 Comm: syz.2.1765 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 418.337502][T13768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 418.347779][T13768] Call Trace: [ 418.351095][T13768] [ 418.354057][T13768] dump_stack_lvl+0x16c/0x1f0 [ 418.358795][T13768] should_fail_ex+0x497/0x5b0 [ 418.363523][T13768] ? fs_reclaim_acquire+0xae/0x150 [ 418.368700][T13768] should_failslab+0xc2/0x120 [ 418.373442][T13768] __kmalloc_noprof+0xce/0x4f0 [ 418.378258][T13768] ? bpf_lsm_capable+0x9/0x10 [ 418.382980][T13768] ? alloc_pipe_info+0x1ec/0x590 [ 418.387983][T13768] alloc_pipe_info+0x1ec/0x590 [ 418.392859][T13768] splice_direct_to_actor+0x793/0xa40 [ 418.398376][T13768] ? __pfx_direct_splice_actor+0x10/0x10 [ 418.404069][T13768] ? __pfx_aa_file_perm+0x10/0x10 [ 418.409252][T13768] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 418.415171][T13768] ? __fget_files+0x1fc/0x3a0 [ 418.419880][T13768] do_splice_direct+0x178/0x250 [ 418.424761][T13768] ? __pfx_do_splice_direct+0x10/0x10 [ 418.430152][T13768] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 418.436068][T13768] do_sendfile+0xaed/0xe30 [ 418.440548][T13768] ? __pfx_do_sendfile+0x10/0x10 [ 418.445495][T13768] ? __fget_files+0x206/0x3a0 [ 418.450284][T13768] __x64_sys_sendfile64+0x1da/0x220 [ 418.455611][T13768] ? ksys_write+0x1ba/0x250 [ 418.460159][T13768] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 418.466684][T13768] do_syscall_64+0xcd/0x250 [ 418.471208][T13768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.477122][T13768] RIP: 0033:0x7fb411385d29 [ 418.481539][T13768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.501262][T13768] RSP: 002b:00007fb4121e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 418.509688][T13768] RAX: ffffffffffffffda RBX: 00007fb411575fa0 RCX: 00007fb411385d29 [ 418.517683][T13768] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 418.525683][T13768] RBP: 00007fb4121e8090 R08: 0000000000000000 R09: 0000000000000000 [ 418.533666][T13768] R10: 000000007fffe000 R11: 0000000000000246 R12: 0000000000000001 [ 418.541820][T13768] R13: 0000000000000000 R14: 00007fb411575fa0 R15: 00007ffcae18f4b8 [ 418.549825][T13768] [ 418.743782][T13772] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1766'. [ 421.618563][ T29] audit: type=1800 audit(4294967550.148:22): pid=13850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1782" name="lu_gp_id" dev="configfs" ino=42243 res=0 errno=0 [ 422.294896][T13850] ip_vti0: entered allmulticast mode [ 423.941819][ T29] audit: type=1326 audit(4294967552.490:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13893 comm="syz.3.1792" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7269585d29 code=0x0 [ 423.982478][ T29] audit: type=1326 audit(4294967552.500:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13893 comm="syz.3.1792" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7269585d29 code=0x0 [ 424.457090][T13905] netlink: 266 bytes leftover after parsing attributes in process `syz.2.1794'. [ 424.490462][T13905] IPv6: NLM_F_CREATE should be specified when creating new route [ 424.867787][T13910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1795'. [ 424.889784][T13910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1795'. [ 425.019318][T13917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1797'. [ 425.426688][T13931] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1802'. [ 427.237300][T13968] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1811'. [ 427.299520][T13969] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1811'. [ 429.510507][T14002] can: request_module (can-proto-0) failed. [ 429.518207][T14002] kernel read not supported for file /#)-\&[} (pid: 14002 comm: syz.2.1816) [ 429.542688][ T29] audit: type=1800 audit(4294967558.119:25): pid=14002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1816" name="#)-\&[}" dev="mqueue" ino=31469 res=0 errno=0 [ 429.923507][T14019] size and base must be multiples of 4 kiB [ 429.929581][T14019] CPU: 0 UID: 0 PID: 14019 Comm: syz.2.1821 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 429.940397][T14019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 429.950487][T14019] Call Trace: [ 429.953792][T14019] [ 429.956747][T14019] dump_stack_lvl+0x16c/0x1f0 [ 429.961472][T14019] mtrr_del+0xd1/0x110 [ 429.965585][T14019] mtrr_ioctl+0x900/0xcd0 [ 429.969936][T14019] ? __pfx_mtrr_ioctl+0x10/0x10 [ 429.974816][T14019] ? __pfx_mtrr_ioctl+0x10/0x10 [ 429.979684][T14019] proc_reg_unlocked_ioctl+0x226/0x320 [ 429.985155][T14019] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 429.991147][T14019] __x64_sys_ioctl+0x190/0x200 [ 429.995916][T14019] do_syscall_64+0xcd/0x250 [ 430.000433][T14019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.006376][T14019] RIP: 0033:0x7fb411385d29 [ 430.010795][T14019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.030418][T14019] RSP: 002b:00007fb4121e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 430.038841][T14019] RAX: ffffffffffffffda RBX: 00007fb411575fa0 RCX: 00007fb411385d29 [ 430.046827][T14019] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000015 [ 430.054810][T14019] RBP: 00007fb411401aa8 R08: 0000000000000000 R09: 0000000000000000 [ 430.062786][T14019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.070763][T14019] R13: 0000000000000000 R14: 00007fb411575fa0 R15: 00007ffcae18f4b8 [ 430.078843][T14019] [ 430.453223][T14025] HfR: entered promiscuous mode [ 431.106110][T14053] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1831'. [ 432.388803][T14098] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1842'. [ 433.182046][T14120] Invalid ELF header magic: != ELF [ 433.861757][T14143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1853'. [ 434.134921][T14146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1854'. [ 434.775500][T14159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1856'. [ 434.817932][T14159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1856'. [ 435.791243][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1863'. [ 436.382678][T14188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1864'. [ 440.002527][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.013392][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.665796][T14331] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1900'. [ 441.689926][T14331] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 442.695945][T14339] netlink: 'syz.4.1903': attribute type 1 has an invalid length. [ 444.815163][T14379] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1910'. [ 446.388856][T14406] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1917'. [ 446.853727][T14420] netlink: 'syz.0.1921': attribute type 11 has an invalid length. [ 447.943457][T14453] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1930'. [ 448.436100][T14465] capability: warning: `syz.3.1934' uses deprecated v2 capabilities in a way that may be insecure [ 448.775073][T14459] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1932'. [ 448.851837][T14459] veth0_macvtap: left promiscuous mode [ 452.280822][T14529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1950'. [ 452.346041][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1950'. [ 452.401367][T14532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1950'. [ 452.468595][T14544] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1952'. [ 456.327173][T14570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1959'. [ 457.694668][T14612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1964'. [ 460.734030][T14689] rds_bind: 56 callbacks suppressed [ 460.734051][T14689] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 461.714183][T14729] netlink: 'syz.3.1994': attribute type 2 has an invalid length. [ 461.744272][T14729] netlink: 674 bytes leftover after parsing attributes in process `syz.3.1994'. [ 462.356277][T14746] HSR: entered promiscuous mode [ 463.098900][T14770] syz.4.2003 (14770): drop_caches: 0 [ 463.230386][T14780] Invalid ELF header magic: != ELF [ 463.819564][T14790] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2007'. [ 464.772540][T14823] ubi0: attaching mtd0 [ 464.780184][T14823] ubi0: scanning is finished [ 464.785102][T14823] ubi0: empty MTD device detected [ 464.791112][T14823] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 465.030212][T14829] Process accounting resumed [ 465.147785][T14823] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 471.774912][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 471.794479][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 471.814380][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 471.825244][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 471.832965][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 471.841498][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 472.852917][T14959] chnl_net:caif_netlink_parms(): no params data found [ 473.204394][T14959] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.221845][T14959] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.255157][T14959] bridge_slave_0: entered allmulticast mode [ 473.310177][T14959] bridge_slave_0: entered promiscuous mode [ 473.353987][T14959] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.376480][T14959] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.398819][T14959] bridge_slave_1: entered allmulticast mode [ 473.421095][T14959] bridge_slave_1: entered promiscuous mode [ 473.857288][T14959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.904805][ T5834] Bluetooth: hci4: command tx timeout [ 473.911026][T14959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.151027][T14959] team0: Port device team_slave_0 added [ 474.307927][T14959] team0: Port device team_slave_1 added [ 474.581718][T14959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.588705][T14959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.614852][T14959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.669968][T14959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.677272][T14959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.709209][T14959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.114471][T14959] hsr_slave_0: entered promiscuous mode [ 475.141245][T14959] hsr_slave_1: entered promiscuous mode [ 475.160202][T14959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 475.210527][T14959] Cannot create hsr debugfs directory [ 475.975687][ T5834] Bluetooth: hci4: command tx timeout [ 476.047535][T14959] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 476.072488][T14959] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 476.104699][T14959] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 476.129184][T14959] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 476.295108][T14959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.337272][T14959] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.367034][ T7769] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.374233][ T7769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.421280][ T7769] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.428434][ T7769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.455826][T14959] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 476.466795][T14959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 476.613843][T15063] RDS: rds_bind could not find a transport for ::ffff:172.30.65.3, load rds_tcp or rds_rdma? [ 476.763674][T14959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.229342][T14959] veth0_vlan: entered promiscuous mode [ 477.254931][T14959] veth1_vlan: entered promiscuous mode [ 477.271915][T15097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2072'. [ 477.310802][T14959] veth0_macvtap: entered promiscuous mode [ 477.324141][T14959] veth1_macvtap: entered promiscuous mode [ 477.374025][T14959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.388666][T14959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.416307][T14959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.456201][T14959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.478809][T14959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.489382][T14959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.506382][T14959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.517067][T15100] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2073'. [ 477.530308][T14959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.544276][T14959] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.569562][T14959] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.598173][T14959] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.607889][T14959] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.835277][ T7741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.866486][ T7741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.030501][ T7763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.041976][ T5834] Bluetooth: hci4: command tx timeout [ 478.058924][ T7763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.116775][ T5834] Bluetooth: hci4: command tx timeout [ 482.191622][T15178] udc dummy_udc.0: soft-connect without a gadget driver [ 482.203914][T15176] lo: entered allmulticast mode [ 482.305577][T15174] lo: left allmulticast mode [ 482.836346][T15201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2095'. [ 482.891523][T15203] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 483.057710][T15205] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 483.179137][T15209] netlink: 'syz.2.2098': attribute type 1 has an invalid length. [ 484.444664][T15240] netlink: 'syz.4.2104': attribute type 11 has an invalid length. [ 484.559184][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 484.565563][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 486.372019][T15259] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2110'. [ 486.807848][T15259] bond0: (slave bond_slave_1): Releasing backup interface [ 487.905601][T15276] Invalid ELF header magic: != ELF [ 488.646851][T15298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2120'. [ 489.325379][T15316] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2126'. [ 489.956699][T15322] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2127'. [ 490.363545][T15332] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2123'. [ 490.431569][T15337] netlink: 74 bytes leftover after parsing attributes in process `syz.4.2130'. [ 490.473683][T15332] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2123'. [ 491.289508][T15352] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2134'. [ 492.706582][T15390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2144'. [ 492.715500][T15390] tc_dump_action: action bad kind [ 496.443781][T15427] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2152'. [ 496.454325][T15427] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2152'. [ 496.464484][T15427] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2152'. [ 496.513947][T15427] netlink: 302 bytes leftover after parsing attributes in process `syz.5.2152'. [ 496.794634][T15436] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 496.841610][T15436] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 496.855810][T15436] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 496.863438][T15436] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 496.873679][T15436] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 496.881368][T15436] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 496.896727][T15436] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 496.914798][T15441] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2157'. [ 497.204318][ T29] audit: type=1800 audit(4294967635.135:26): pid=15450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm=FFFFF2FFFFFFF2FFFFFFF2FFFFFFF2 name="features" dev="configfs" ino=49034 res=0 errno=0 [ 497.516277][T15463] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2165'. [ 498.814188][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 498.893771][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 498.900417][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 498.907081][ T5834] Bluetooth: hci4: command 0x0c1a tx timeout [ 499.368296][T15506] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2176'. [ 500.962818][T15496] Bluetooth: hci4: command 0x0c1a tx timeout [ 500.969276][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 500.979687][T15547] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2189'. [ 501.133706][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.140491][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.388943][T15561] netlink: 130 bytes leftover after parsing attributes in process `syz.2.2192'. [ 501.889370][T15567] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2195'. [ 503.040193][T15496] Bluetooth: hci4: command 0x0c1a tx timeout [ 504.841327][T15626] openvswitch: netlink: Message has 8 unknown bytes. [ 506.313492][T15667] Process accounting resumed [ 506.711769][T15680] netlink: 246 bytes leftover after parsing attributes in process `syz.3.2221'. [ 506.852974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 507.275893][T15691] nbd: nbd7 already in use [ 507.329792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 507.338285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 507.347056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 507.369599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 507.464610][T15700] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 507.863359][T15710] netlink: 178 bytes leftover after parsing attributes in process `syz.5.2230'. [ 508.377961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 508.387220][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 508.409214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 508.460376][T15699] kexec: Could not allocate control_code_buffer [ 509.010932][T15736] bridge0: port 3(veth1_to_hsr) entered blocking state [ 509.020950][T15736] bridge0: port 3(veth1_to_hsr) entered disabled state [ 509.028025][T15736] veth1_to_hsr: entered allmulticast mode [ 509.090100][T15736] veth1_to_hsr: entered promiscuous mode [ 509.100985][T15740] futex_wake_op: syz.4.2236 tries to shift op by 64; fix this program [ 510.376059][T15758] lo: entered allmulticast mode [ 511.209695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 512.481222][T15800] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2253'. [ 513.594279][T15760] lo: left allmulticast mode [ 514.433089][T15848] QAT: Invalid ioctl 1077171216 [ 514.853101][T15862] Process accounting resumed [ 516.082886][T15889] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2273'. [ 516.120414][T15889] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2273'. [ 517.577414][T15913] block nbd12: NBD_DISCONNECT [ 518.575411][T15934] netlink: 'syz.5.2285': attribute type 11 has an invalid length. [ 519.661776][T15951] could not allocate digest TFM handle [ 519.680746][T15958] tc_dump_action: action bad kind [ 520.880055][T15975] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 521.559173][T15997] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 521.925725][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 521.938845][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 521.953812][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 521.975104][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 521.982803][ T5828] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 521.990297][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 522.428809][T15998] chnl_net:caif_netlink_parms(): no params data found [ 522.677847][T15998] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.695328][T15998] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.723952][T15998] bridge_slave_0: entered allmulticast mode [ 522.731618][T15998] bridge_slave_0: entered promiscuous mode [ 522.752077][T15998] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.763392][T15998] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.779515][T15998] bridge_slave_1: entered allmulticast mode [ 522.787742][T15998] bridge_slave_1: entered promiscuous mode [ 523.050173][T15998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.080294][T15998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.414231][T15998] team0: Port device team_slave_0 added [ 523.456787][T15998] team0: Port device team_slave_1 added [ 523.488514][T16035] netlink: 122 bytes leftover after parsing attributes in process `syz.2.2311'. [ 523.631961][T15998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.646717][T15998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.739040][T15998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.829666][T15998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.853751][T15998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.918372][T15998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.042787][ T5828] Bluetooth: hci1: command tx timeout [ 524.110215][T15998] hsr_slave_0: entered promiscuous mode [ 524.117436][T15998] hsr_slave_1: entered promiscuous mode [ 524.123945][T15998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 524.135969][T15998] Cannot create hsr debugfs directory [ 524.849513][T15998] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.247616][T15998] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.569411][T15998] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.815366][T15998] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.845313][T16070] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 526.114058][ T5828] Bluetooth: hci1: command tx timeout [ 526.256375][T15998] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 526.346569][T15998] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 526.433179][T15998] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 526.502484][T15998] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 526.948712][T15998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.072489][T15998] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.100795][T16095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2325'. [ 527.123883][ T7731] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.131071][ T7731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.170050][ T7769] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.177267][ T7769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.560256][T15998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.672161][T15998] veth0_vlan: entered promiscuous mode [ 527.709071][T15998] veth1_vlan: entered promiscuous mode [ 527.773000][T15998] veth0_macvtap: entered promiscuous mode [ 527.801752][T15998] veth1_macvtap: entered promiscuous mode [ 527.884807][T15998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.927604][T15998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.965075][T15998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.992300][T15998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.023467][T15998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.035526][T15998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.049520][T15998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.071192][T15998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.101882][T15998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.117271][T15998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.141444][T15998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.172312][T15998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.181983][ T5828] Bluetooth: hci1: command tx timeout [ 528.232317][T15998] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.260917][T15998] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.270727][T15998] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.279454][T15998] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.383673][T16119] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 528.488375][ T7769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.509542][ T7769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.585852][ T7731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.593892][ T7731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.769377][T16128] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 529.325552][T16130] block nbd0: Unsupported socket: shutdown callout must be supported. [ 530.253974][ T5828] Bluetooth: hci1: command tx timeout [ 531.155416][T16170] erspan0: entered allmulticast mode [ 531.365915][T16177] [U]  [ 531.368776][T16177] [U] [ 531.371493][T16177] [U] [ 531.374217][T16177] [U] [ 531.424948][T16177] [U] [ 531.427721][T16177] [U] [ 531.430439][T16177] [U] [ 531.433163][T16177] [U] [ 531.473587][T16177] [U] [ 531.476356][T16177] [U] [ 531.479080][T16177] [U] [ 531.481804][T16177] [U] [ 531.507050][T16177] [U] [ 531.509820][T16177] [U] [ 531.512547][T16177] [U] [ 531.515271][T16177] [U] [ 531.519097][T16177] [U] [ 531.521840][T16177] [U] [ 531.524572][T16177] [U] [ 531.527290][T16177] [U] [ 531.530716][T16177] [U] [ 531.533460][T16177] [U] [ 531.536178][T16177] [U] [ 531.538899][T16177] [U] [ 531.544166][T16177] [U] [ 531.546921][T16177] [U] [ 531.549646][T16177] [U] [ 531.552379][T16177] [U] [ 531.564668][T16177] [U] [ 531.567418][T16177] [U] [ 531.570143][T16177] [U] [ 531.572875][T16177] [U] [ 531.606703][T16177] [U] [ 531.609470][T16177] [U] [ 531.612191][T16177] [U] [ 531.614916][T16177] [U] [ 531.644447][T16177] [U] [ 531.647212][T16177] [U] [ 531.649934][T16177] [U] [ 531.652654][T16177] [U] [ 531.665930][T16177] [U] [ 531.668679][T16177] [U] [ 531.671403][T16177] [U] [ 531.674125][T16177] [U] [ 531.704217][T16177] [U] [ 531.706987][T16177] [U] [ 531.709710][T16177] [U] [ 531.712498][T16177] [U] [ 531.752832][T16177] [U] [ 531.755603][T16177] [U] [ 531.758334][T16177] [U] [ 531.761053][T16177] [U] [ 531.802092][T16177] [U] [ 531.804883][T16177] [U] [ 531.807613][T16177] [U] [ 531.810338][T16177] [U] [ 531.862549][T16177] [U] [ 531.865312][T16177] [U] [ 531.868037][T16177] [U] [ 531.870762][T16177] [U] [ 531.877838][T16177] [U] [ 531.880589][T16177] [U] [ 531.883308][T16177] [U] [ 531.886016][T16177] [U] [ 531.892128][T16177] [U] [ 531.894871][T16177] [U] [ 531.897585][T16177] [U] [ 531.900304][T16177] [U] [ 531.912141][T16177] [U] [ 531.914876][T16177] [U] [ 531.917569][T16177] [U] [ 531.920259][T16177] [U] [ 531.950924][T16177] [U] [ 531.953687][T16177] [U] [ 531.956406][T16177] [U] [ 531.959129][T16177] [U] [ 532.018259][T16177] [U] [ 532.021028][T16177] [U] [ 532.023748][T16177] [U] [ 532.026464][T16177] [U] [ 532.075342][T16177] [U] [ 532.078112][T16177] [U] [ 532.080836][T16177] [U] [ 532.083557][T16177] [U] [ 532.111163][T16177] [U] [ 532.113931][T16177] [U] [ 532.116653][T16177] [U] [ 532.119371][T16177] [U] [ 532.143202][T16177] [U] [ 532.145962][T16177] [U] [ 532.148684][T16177] [U] [ 532.151415][T16177] [U] [ 532.183885][T16177] [U] [ 532.202679][T16210] ima: Unable to open file: /sys/kerne߳security/integrity/ima/policy (-2) [ 532.411128][T16206] ima: policy update failed [ 532.469721][ T29] audit: type=1802 audit(4294967670.589:27): pid=16206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2346" res=0 errno=0 [ 533.482853][T15496] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 533.510669][T15496] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 533.519376][T15496] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 533.537315][T15496] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 533.551025][T15496] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 533.565321][T15496] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 533.820860][T16236] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 534.098366][T16232] chnl_net:caif_netlink_parms(): no params data found [ 534.411690][T16232] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.419470][T16232] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.426776][T16232] bridge_slave_0: entered allmulticast mode [ 534.433913][T16232] bridge_slave_0: entered promiscuous mode [ 534.441705][T16232] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.448964][T16232] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.456694][T16232] bridge_slave_1: entered allmulticast mode [ 534.463848][T16232] bridge_slave_1: entered promiscuous mode [ 534.556058][T16232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.576441][T16232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.681543][T16232] team0: Port device team_slave_0 added [ 534.709789][T16232] team0: Port device team_slave_1 added [ 534.765493][T16232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.773277][T16232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.799188][ C1] vkms_vblank_simulate: vblank timer overrun [ 534.814041][T16232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.838795][T16232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.845897][T16232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.904983][T16232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.945853][T16250] syz.3.2356 (16250): attempted to duplicate a private mapping with mremap. This is not supported. [ 534.977979][T16232] hsr_slave_0: entered promiscuous mode [ 534.989708][T16232] hsr_slave_1: entered promiscuous mode [ 534.999625][T16232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 535.011046][T16232] Cannot create hsr debugfs directory [ 535.203044][T16232] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.319039][T16232] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.412136][T16232] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.450688][T16266] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 535.460347][T16266] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 535.494835][T16232] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.661647][T16232] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 535.662323][T15496] Bluetooth: hci3: command tx timeout [ 535.681121][T16232] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 535.691698][T16232] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 535.700719][T16232] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 535.768360][T16232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.788472][T16232] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.808187][ T7731] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.815350][ T7731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.833681][ T7731] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.840808][ T7731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.131723][T16232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.211017][T16232] veth0_vlan: entered promiscuous mode [ 536.232740][T16232] veth1_vlan: entered promiscuous mode [ 536.261056][T16232] veth0_macvtap: entered promiscuous mode [ 536.282239][T16232] veth1_macvtap: entered promiscuous mode [ 536.328532][T16232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.352053][T16232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.368682][T16232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.395377][T16232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.417163][T16232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.435968][T16232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.447596][T16232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.461346][T16232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.472012][T16232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.492400][T16232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.514873][T16232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.527736][T16232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.557606][T16232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.594858][T16232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.605824][T16232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.630167][T16232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.659742][T16232] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.668650][T16232] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.686987][T16232] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.708416][T16232] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.879976][ T7731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.909169][ T7731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.977997][T10428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.995894][T10428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.726067][T16311] ecryptfs_miscdev_write: Error while inspecting packet size [ 537.739226][T15496] Bluetooth: hci3: command tx timeout [ 537.782579][T16311] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [28945]. [ 539.800776][T15496] Bluetooth: hci3: command tx timeout [ 541.870758][T15496] Bluetooth: hci3: command tx timeout [ 543.762994][T16388] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2386'. [ 546.969265][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 546.996050][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 547.005629][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 547.017814][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 547.028404][ T5828] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 547.037095][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 547.683321][T16460] chnl_net:caif_netlink_parms(): no params data found [ 548.296652][T16460] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.303838][T16460] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.312778][T16484] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 548.326762][T16460] bridge_slave_0: entered allmulticast mode [ 548.333916][T16460] bridge_slave_0: entered promiscuous mode [ 548.366416][T16460] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.382552][T16460] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.394792][T16460] bridge_slave_1: entered allmulticast mode [ 548.417156][T16460] bridge_slave_1: entered promiscuous mode [ 548.723244][T16460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.823285][T16460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.970813][T16460] team0: Port device team_slave_0 added [ 548.988884][T16460] team0: Port device team_slave_1 added [ 549.112742][ T5828] Bluetooth: hci2: command tx timeout [ 549.352464][T16460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.359749][T16460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.451002][T16460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.499882][T16460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.512463][T16460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.629207][T16460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.192083][T16460] hsr_slave_0: entered promiscuous mode [ 550.214056][T16460] hsr_slave_1: entered promiscuous mode [ 550.296671][T16460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 550.304298][T16460] Cannot create hsr debugfs directory [ 551.102050][T16460] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 551.121985][T16460] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 551.191887][ T5828] Bluetooth: hci2: command tx timeout [ 551.213933][T16460] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 551.423511][T16460] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 551.790601][T16460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.826173][T16460] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.882578][T10428] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.889775][T10428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.939211][T10428] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.946365][T10428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.365197][T16460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.637643][T16520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2415'. [ 552.903041][T16460] veth0_vlan: entered promiscuous mode [ 552.924174][T16460] veth1_vlan: entered promiscuous mode [ 552.991009][T16460] veth0_macvtap: entered promiscuous mode [ 553.022613][T16460] veth1_macvtap: entered promiscuous mode [ 553.096237][T16460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.126389][T16460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.165619][T16460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.205260][T16460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.242781][T16460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.260698][ T5828] Bluetooth: hci2: command tx timeout [ 553.305289][T16460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.340853][T16460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.381304][T16460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.393855][T16460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.404417][T16460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.415000][T16460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.425150][T16460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.436036][T16460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.446661][T16460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.457814][T16460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.467842][T16460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.478338][T16460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.488258][T16460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.499002][T16460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.512233][T16460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.555172][T16460] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.564323][T16460] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.576053][T16460] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.593345][T16460] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.034188][ T7731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.050307][ T7731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.151496][ T7763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.182507][ T7763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.320208][ T5828] Bluetooth: hci2: command tx timeout [ 556.790131][T16555] syz.3.2420: vmalloc error: size 3653632, failed to allocated page array size 7136, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 556.829003][T16555] CPU: 1 UID: 0 PID: 16555 Comm: syz.3.2420 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 556.839843][T16555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 556.849937][T16555] Call Trace: [ 556.853251][T16555] [ 556.856215][T16555] dump_stack_lvl+0x16c/0x1f0 [ 556.860944][T16555] warn_alloc+0x24d/0x3a0 [ 556.865316][T16555] ? __pfx_warn_alloc+0x10/0x10 [ 556.870215][T16555] ? __get_vm_area_node+0x1b0/0x2f0 [ 556.875455][T16555] ? __get_vm_area_node+0x1dc/0x2f0 [ 556.880704][T16555] __vmalloc_node_range_noprof+0x1105/0x1530 [ 556.886734][T16555] ? ip_set_sockfn_get+0x185/0xc50 [ 556.891882][T16555] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 556.898265][T16555] ? __get_vm_area_node+0x1b0/0x2f0 [ 556.903500][T16555] ? __get_vm_area_node+0x1dc/0x2f0 [ 556.908735][T16555] __vmalloc_node_range_noprof+0xd85/0x1530 [ 556.914665][T16555] ? ip_set_sockfn_get+0x185/0xc50 [ 556.919807][T16555] ? __pfx___lock_acquire+0x10/0x10 [ 556.925040][T16555] ? ip_set_sockfn_get+0x185/0xc50 [ 556.930188][T16555] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 556.936557][T16555] ? apparmor_capable+0x114/0x1d0 [ 556.941618][T16555] ? ip_set_sockfn_get+0x185/0xc50 [ 556.946761][T16555] vmalloc_noprof+0x6b/0x90 [ 556.951295][T16555] ? ip_set_sockfn_get+0x185/0xc50 [ 556.956444][T16555] ip_set_sockfn_get+0x185/0xc50 [ 556.961410][T16555] ? __pfx_lock_release+0x10/0x10 [ 556.966465][T16555] ? __pfx_ip_set_sockfn_get+0x10/0x10 [ 556.971959][T16555] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 556.977990][T16555] nf_getsockopt+0x79/0xe0 [ 556.982450][T16555] ip_getsockopt+0x18e/0x1e0 [ 556.987073][T16555] ? __pfx_ip_getsockopt+0x10/0x10 [ 556.992216][T16555] ? __schedule+0xe60/0x5ad0 [ 556.996841][T16555] ? __pfx___lock_acquire+0x10/0x10 [ 557.002077][T16555] ipv6_getsockopt+0x230/0x280 [ 557.006873][T16555] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 557.012188][T16555] ? __pfx_mark_lock+0x10/0x10 [ 557.017007][T16555] sctp_getsockopt+0x1d2/0x7ae0 [ 557.021898][T16555] ? hlock_class+0x4e/0x130 [ 557.026434][T16555] ? mark_lock+0xb5/0xc60 [ 557.030800][T16555] ? aa_label_sk_perm+0x19d/0x5a0 [ 557.035871][T16555] ? __pfx_sctp_getsockopt+0x10/0x10 [ 557.041197][T16555] ? __lock_acquire+0x15a9/0x3c40 [ 557.046273][T16555] ? __pfx___lock_acquire+0x10/0x10 [ 557.051509][T16555] ? find_held_lock+0x2d/0x110 [ 557.056486][T16555] ? __might_fault+0x13b/0x190 [ 557.061290][T16555] ? __pfx_lock_release+0x10/0x10 [ 557.066340][T16555] ? trace_lock_acquire+0x14e/0x1f0 [ 557.071578][T16555] ? lock_acquire+0x2f/0xb0 [ 557.076728][T16555] ? __might_fault+0xe3/0x190 [ 557.081449][T16555] ? __might_fault+0xe3/0x190 [ 557.086166][T16555] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 557.092095][T16555] ? do_sock_getsockopt+0x3fe/0x870 [ 557.097324][T16555] do_sock_getsockopt+0x3fe/0x870 [ 557.102388][T16555] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 557.107962][T16555] ? lock_acquire+0x2f/0xb0 [ 557.112582][T16555] ? __fget_files+0x40/0x3a0 [ 557.117210][T16555] ? __fget_files+0x206/0x3a0 [ 557.121949][T16555] __sys_getsockopt+0x12f/0x260 [ 557.126922][T16555] __x64_sys_getsockopt+0xbd/0x160 [ 557.132077][T16555] ? do_syscall_64+0x91/0x250 [ 557.136791][T16555] ? lockdep_hardirqs_on+0x7c/0x110 [ 557.142030][T16555] do_syscall_64+0xcd/0x250 [ 557.146568][T16555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.152498][T16555] RIP: 0033:0x7fe6eb985d29 [ 557.156940][T16555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.176581][T16555] RSP: 002b:00007fe6ec7ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 557.185030][T16555] RAX: ffffffffffffffda RBX: 00007fe6ebb76080 RCX: 00007fe6eb985d29 [ 557.193033][T16555] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000004 [ 557.201035][T16555] RBP: 00007fe6eba01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 557.209051][T16555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.217056][T16555] R13: 0000000000000000 R14: 00007fe6ebb76080 R15: 00007ffd7662ab98 [ 557.225076][T16555] [ 557.233659][T16555] Mem-Info: [ 557.236818][T16555] active_anon:62982 inactive_anon:0 isolated_anon:0 [ 557.236818][T16555] active_file:3265 inactive_file:45370 isolated_file:0 [ 557.236818][T16555] unevictable:8246 dirty:432 writeback:0 [ 557.236818][T16555] slab_reclaimable:12055 slab_unreclaimable:107982 [ 557.236818][T16555] mapped:51703 shmem:41206 pagetables:992 [ 557.236818][T16555] sec_pagetables:0 bounce:0 [ 557.236818][T16555] kernel_misc_reclaimable:0 [ 557.236818][T16555] free:1185423 free_pcp:7833 free_cma:0 [ 557.311190][T16555] Node 0 active_anon:258976kB inactive_anon:0kB active_file:13116kB inactive_file:181396kB unevictable:24596kB isolated(anon):88kB isolated(file):0kB mapped:203332kB dirty:1800kB writeback:0kB shmem:163716kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB writeback_tmp:0kB kernel_stack:13216kB pagetables:3868kB sec_pagetables:0kB all_unreclaimable? no [ 557.369578][T16555] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:20kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 557.416504][T16555] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 557.479136][T16555] lowmem_reserve[]: 0 2491 2492 0 0 [ 557.484469][T16555] Node 0 DMA32 free:845052kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:271740kB inactive_anon:0kB active_file:13116kB inactive_file:191776kB unevictable:3896kB writepending:1900kB present:3129332kB managed:2551336kB mlocked:2360kB bounce:0kB free_pcp:8728kB local_pcp:4288kB free_cma:0kB [ 557.556218][T16555] lowmem_reserve[]: 0 0 0 0 0 [ 557.576401][T16555] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 557.628113][T16555] lowmem_reserve[]: 0 0 0 0 0 [ 557.633021][T16555] Node 1 Normal free:3876920kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:25600kB local_pcp:20864kB free_cma:0kB [ 557.707591][T16555] lowmem_reserve[]: 0 0 0 0 0 [ 557.712683][T16555] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 557.759247][T16555] Node 0 DMA32: 213*4kB (UME) 26*8kB (UME) 180*16kB (UM) 2702*32kB (UME) 1838*64kB (UME) 887*128kB (UME) 539*256kB (UME) 210*512kB (ME) 57*1024kB (M) 2*2048kB (ME) 52*4096kB (M) = 842532kB [ 557.815703][T16555] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 557.854407][T16555] Node 1 Normal: 2*4kB (ME) 2*8kB (ME) 2*16kB (UE) 178*32kB (UME) 91*64kB (U) 26*128kB (UME) 30*256kB (UME) 20*512kB (UME) 14*1024kB (UME) 14*2048kB (UME) 928*4096kB (M) = 3876920kB [ 557.916616][T16555] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 557.932824][T16555] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 557.954075][T16555] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 557.964175][T16555] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 557.996065][T16555] 92338 total pagecache pages [ 558.000841][T16555] 1 pages in swap cache [ 558.006513][T16555] Free swap = 124392kB [ 558.010700][T16555] Total swap = 124996kB [ 558.015287][T16555] 2097051 pages RAM [ 558.042436][T16555] 0 pages HighMem/MovableOnly [ 558.053921][T16555] 427367 pages reserved [ 558.069181][T16555] 0 pages cma reserved [ 558.589773][T16607] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2434'. [ 558.658238][T16607] openvswitch: netlink: Key type 119 is out of range max 32 [ 559.139218][T16600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2433'. [ 560.234793][T16624] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 560.530832][T16631] netlink: 'syz.2.2437': attribute type 1 has an invalid length. [ 561.406171][T16660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2446'. [ 561.450197][T16660] openvswitch: netlink: Key type 119 is out of range max 32 [ 562.303470][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.312363][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.630327][T16688] delete_channel: no stack [ 564.938143][T16705] could not allocate digest TFM handle [ 565.035580][T16714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2456'. [ 565.109241][T16714] openvswitch: netlink: Key type 119 is out of range max 32 [ 565.711672][T16729] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2460'. [ 565.744854][T16729] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2460'. [ 565.765016][T16729] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2460'. [ 567.037405][T16736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2461'. [ 567.759203][T16770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.815882][T16770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.021326][T16777] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2471'. [ 568.056060][T16777] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2471'. [ 568.090689][T16777] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2471'. [ 568.129553][T16777] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2471'. [ 568.173797][T16777] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2471'. [ 569.825436][T16810] Process accounting resumed [ 570.943184][T16830] __nla_validate_parse: 1 callbacks suppressed [ 570.943207][T16830] netlink: 306 bytes leftover after parsing attributes in process `syz.5.2482'. [ 571.318077][T16835] delete_channel: no stack [ 573.009284][T16872] binder: 16871:16872 ioctl 1 3 returned -22 [ 574.439596][T16892] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 575.061354][T16908] [ 575.063731][T16908] ====================================================== [ 575.070765][T16908] WARNING: possible circular locking dependency detected [ 575.077801][T16908] 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 Not tainted [ 575.084934][T16908] ------------------------------------------------------ [ 575.091970][T16908] syz.5.2499/16908 is trying to acquire lock: [ 575.098056][T16908] ffff8881433f8a70 (&q->q_usage_counter(io)#2){++++}-{0:0}, at: submit_bio_noacct_nocheck+0x892/0xd70 [ 575.109079][T16908] [ 575.109079][T16908] but task is already holding lock: [ 575.116466][T16908] ffff888023482040 (mapping.invalidate_lock#2){.+.+}-{4:4}, at: page_cache_ra_unbounded+0x173/0x750 [ 575.127326][T16908] [ 575.127326][T16908] which lock already depends on the new lock. [ 575.127326][T16908] [ 575.137761][T16908] [ 575.137761][T16908] the existing dependency chain (in reverse order) is: [ 575.146803][T16908] [ 575.146803][T16908] -> #4 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 575.155367][T16908] down_read+0x9a/0x330 [ 575.160169][T16908] filemap_fault+0x2e0/0x2820 [ 575.165408][T16908] __do_fault+0x10a/0x490 [ 575.170381][T16908] do_pte_missing+0xebd/0x3e00 [ 575.175678][T16908] __handle_mm_fault+0x103c/0x2a40 [ 575.181316][T16908] handle_mm_fault+0x3fa/0xaa0 [ 575.186612][T16908] __get_user_pages+0x8d9/0x3b50 [ 575.192078][T16908] populate_vma_page_range+0x27f/0x3a0 [ 575.198065][T16908] __mm_populate+0x1d6/0x380 [ 575.203186][T16908] vm_mmap_pgoff+0x293/0x360 [ 575.208305][T16908] ksys_mmap_pgoff+0x32c/0x5c0 [ 575.213593][T16908] __x64_sys_mmap+0x125/0x190 [ 575.218880][T16908] do_syscall_64+0xcd/0x250 [ 575.223908][T16908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.230330][T16908] [ 575.230330][T16908] -> #3 (&mm->mmap_lock){++++}-{4:4}: [ 575.237896][T16908] __might_fault+0x11b/0x190 [ 575.243019][T16908] _copy_from_user+0x29/0xd0 [ 575.248139][T16908] __blk_trace_setup+0xa8/0x180 [ 575.253536][T16908] blk_trace_setup+0x47/0x70 [ 575.258674][T16908] sg_ioctl+0x7a3/0x26b0 [ 575.263453][T16908] __x64_sys_ioctl+0x190/0x200 [ 575.268748][T16908] do_syscall_64+0xcd/0x250 [ 575.273786][T16908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.280211][T16908] [ 575.280211][T16908] -> #2 (&q->debugfs_mutex){+.+.}-{4:4}: [ 575.288037][T16908] __mutex_lock+0x19b/0xa60 [ 575.293064][T16908] blk_register_queue+0x13c/0x4f0 [ 575.298621][T16908] add_disk_fwnode+0x785/0x1300 [ 575.304001][T16908] brd_alloc.isra.0+0x50a/0x7c0 [ 575.309379][T16908] brd_init+0x12b/0x1d0 [ 575.314054][T16908] do_one_initcall+0x128/0x630 [ 575.319346][T16908] kernel_init_freeable+0x58f/0x8b0 [ 575.325079][T16908] kernel_init+0x1c/0x2b0 [ 575.330027][T16908] ret_from_fork+0x45/0x80 [ 575.334964][T16908] ret_from_fork_asm+0x1a/0x30 [ 575.340254][T16908] [ 575.340254][T16908] -> #1 (&q->sysfs_lock){+.+.}-{4:4}: [ 575.347816][T16908] __mutex_lock+0x19b/0xa60 [ 575.352840][T16908] queue_attr_store+0xe2/0x170 [ 575.358124][T16908] sysfs_kf_write+0x117/0x170 [ 575.363324][T16908] kernfs_fop_write_iter+0x33d/0x500 [ 575.369131][T16908] vfs_write+0x5ae/0x1150 [ 575.373982][T16908] ksys_write+0x12b/0x250 [ 575.378834][T16908] do_syscall_64+0xcd/0x250 [ 575.383859][T16908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.390276][T16908] [ 575.390276][T16908] -> #0 (&q->q_usage_counter(io)#2){++++}-{0:0}: [ 575.398799][T16908] __lock_acquire+0x249e/0x3c40 [ 575.404167][T16908] lock_acquire.part.0+0x11b/0x380 [ 575.409797][T16908] __submit_bio+0x49c/0x540 [ 575.414829][T16908] submit_bio_noacct_nocheck+0x892/0xd70 [ 575.420992][T16908] submit_bio_noacct+0x93a/0x1e20 [ 575.426642][T16908] mpage_readahead+0x41d/0x590 [ 575.431937][T16908] read_pages+0x1a8/0xdc0 [ 575.436786][T16908] page_cache_ra_unbounded+0x3dc/0x750 [ 575.442777][T16908] page_cache_ra_order+0x8f2/0xc80 [ 575.448418][T16908] page_cache_sync_ra+0x4b4/0x9c0 [ 575.453980][T16908] filemap_get_pages+0xd7b/0x1be0 [ 575.459550][T16908] filemap_read+0x3ca/0xd70 [ 575.464581][T16908] blkdev_read_iter+0x187/0x480 [ 575.469955][T16908] vfs_read+0x87f/0xbe0 [ 575.474635][T16908] ksys_read+0x12b/0x250 [ 575.479402][T16908] do_syscall_64+0xcd/0x250 [ 575.484434][T16908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.490849][T16908] [ 575.490849][T16908] other info that might help us debug this: [ 575.490849][T16908] [ 575.501071][T16908] Chain exists of: [ 575.501071][T16908] &q->q_usage_counter(io)#2 --> &mm->mmap_lock --> mapping.invalidate_lock#2 [ 575.501071][T16908] [ 575.515780][T16908] Possible unsafe locking scenario: [ 575.515780][T16908] [ 575.523219][T16908] CPU0 CPU1 [ 575.528573][T16908] ---- ---- [ 575.533926][T16908] rlock(mapping.invalidate_lock#2); [ 575.539303][T16908] lock(&mm->mmap_lock); [ 575.546149][T16908] lock(mapping.invalidate_lock#2); [ 575.553961][T16908] rlock(&q->q_usage_counter(io)#2); [ 575.559396][T16908] [ 575.559396][T16908] *** DEADLOCK *** [ 575.559396][T16908] [ 575.567537][T16908] 1 lock held by syz.5.2499/16908: [ 575.572649][T16908] #0: ffff888023482040 (mapping.invalidate_lock#2){.+.+}-{4:4}, at: page_cache_ra_unbounded+0x173/0x750 [ 575.583893][T16908] [ 575.583893][T16908] stack backtrace: [ 575.590038][T16908] CPU: 1 UID: 0 PID: 16908 Comm: syz.5.2499 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 575.600806][T16908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 575.610873][T16908] Call Trace: [ 575.614501][T16908] [ 575.617440][T16908] dump_stack_lvl+0x116/0x1f0 [ 575.622212][T16908] print_circular_bug+0x41c/0x610 [ 575.627251][T16908] check_noncircular+0x31a/0x400 [ 575.632202][T16908] ? __pfx_check_noncircular+0x10/0x10 [ 575.637673][T16908] ? lockdep_lock+0xc6/0x200 [ 575.642354][T16908] ? __pfx_lockdep_lock+0x10/0x10 [ 575.647387][T16908] __lock_acquire+0x249e/0x3c40 [ 575.652244][T16908] ? __pfx___lock_acquire+0x10/0x10 [ 575.657449][T16908] lock_acquire.part.0+0x11b/0x380 [ 575.662563][T16908] ? submit_bio_noacct_nocheck+0x892/0xd70 [ 575.668379][T16908] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 575.674011][T16908] ? rcu_is_watching+0x12/0xc0 [ 575.678781][T16908] ? trace_lock_acquire+0x14e/0x1f0 [ 575.683982][T16908] ? submit_bio_noacct_nocheck+0x892/0xd70 [ 575.689798][T16908] ? lock_acquire+0x2f/0xb0 [ 575.694298][T16908] ? submit_bio_noacct_nocheck+0x892/0xd70 [ 575.700112][T16908] __submit_bio+0x49c/0x540 [ 575.704624][T16908] ? submit_bio_noacct_nocheck+0x892/0xd70 [ 575.710437][T16908] ? __pfx___submit_bio+0x10/0x10 [ 575.715481][T16908] ? trace_lock_acquire+0x14e/0x1f0 [ 575.720700][T16908] ? submit_bio_noacct_nocheck+0x892/0xd70 [ 575.726526][T16908] submit_bio_noacct_nocheck+0x892/0xd70 [ 575.732180][T16908] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 575.738354][T16908] ? __pfx___might_resched+0x10/0x10 [ 575.743644][T16908] ? __pfx_xa_load+0x10/0x10 [ 575.748243][T16908] submit_bio_noacct+0x93a/0x1e20 [ 575.753279][T16908] mpage_readahead+0x41d/0x590 [ 575.758064][T16908] ? __pfx_mpage_readahead+0x10/0x10 [ 575.763364][T16908] ? __pfx_blkdev_get_block+0x10/0x10 [ 575.768734][T16908] ? __folio_batch_add_and_move+0x5f3/0xc60 [ 575.774635][T16908] ? __pfx_lock_release+0x10/0x10 [ 575.779657][T16908] ? __pfx_blkdev_readahead+0x10/0x10 [ 575.785040][T16908] read_pages+0x1a8/0xdc0 [ 575.789382][T16908] ? __folio_batch_add_and_move+0x689/0xc60 [ 575.795285][T16908] ? __folio_batch_add_and_move+0x612/0xc60 [ 575.801189][T16908] ? __pfx_read_pages+0x10/0x10 [ 575.806047][T16908] ? find_held_lock+0x2d/0x110 [ 575.810819][T16908] page_cache_ra_unbounded+0x3dc/0x750 [ 575.816290][T16908] page_cache_ra_order+0x8f2/0xc80 [ 575.821432][T16908] page_cache_sync_ra+0x4b4/0x9c0 [ 575.826471][T16908] filemap_get_pages+0xd7b/0x1be0 [ 575.831508][T16908] ? __pfx_filemap_get_pages+0x10/0x10 [ 575.836983][T16908] ? __pfx___might_resched+0x10/0x10 [ 575.842272][T16908] ? find_held_lock+0x2d/0x110 [ 575.847050][T16908] filemap_read+0x3ca/0xd70 [ 575.851569][T16908] ? __pfx_filemap_read+0x10/0x10 [ 575.856606][T16908] ? do_raw_spin_unlock+0x172/0x230 [ 575.861810][T16908] blkdev_read_iter+0x187/0x480 [ 575.866751][T16908] vfs_read+0x87f/0xbe0 [ 575.870911][T16908] ? __pfx_vfs_read+0x10/0x10 [ 575.875594][T16908] ? do_futex+0x123/0x350 [ 575.879930][T16908] ? __fget_files+0x40/0x3a0 [ 575.884526][T16908] ksys_read+0x12b/0x250 [ 575.888770][T16908] ? __pfx_ksys_read+0x10/0x10 [ 575.893534][T16908] do_syscall_64+0xcd/0x250 [ 575.898042][T16908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.903952][T16908] RIP: 0033:0x7fcaff185d29 [ 575.908384][T16908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.928002][T16908] RSP: 002b:00007fcafff54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 575.936429][T16908] RAX: ffffffffffffffda RBX: 00007fcaff375fa0 RCX: 00007fcaff185d29 [ 575.944403][T16908] RDX: 0000000080000001 RSI: 0000000000000000 RDI: 0000000000000005 [ 575.952463][T16908] RBP: 00007fcaff201aa8 R08: 0000000000000000 R09: 0000000000000000 [ 575.960430][T16908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.968402][T16908] R13: 0000000000000000 R14: 00007fcaff375fa0 R15: 00007ffc095e6418 [ 575.976467][T16908] [ 576.073264][T16919] netlink: 'syz.6.2501': attribute type 11 has an invalid length.