last executing test programs: 27m19.814467967s ago: executing program 0 (id=279): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vidtv.0/media0/power/runtime_status\x00', 0x2082, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x0) r1 = socket(0xa, 0x801, 0x84) clone$auto(0x20003b46, 0x1, 0x0, 0x0, 0x20000000020002) getsockopt$auto(0x6, 0x84, 0x7b, 0x0, &(0x7f0000000280)=0x10000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/neigh/netdevsim3/mcast_resolicit\x00', 0x282, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x800000000040ebf, r0, 0x0) r2 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x2, 0x0) read$auto_page_owner_stack_operations_page_owner(r2, &(0x7f0000000000)=""/20, 0x14) sendmsg$auto_IOAM6_CMD_DUMP_NAMESPACES(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x4004) setns(r2, 0x20000) write$auto(r0, 0x0, 0x100085) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/i8042/serio0/softrepeat\x00', 0x1a1942, 0x0) openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) socket(0x18, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000180), 0x54) write$auto(r3, &(0x7f0000000000)='-\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mincore$auto(0x0, 0x10000, 0x0) r4 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0) pwrite64$auto(r4, 0x0, 0x2, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000100)=""/190, 0xbe) 27m16.75647248s ago: executing program 0 (id=289): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.list\x00', 0x48a22, 0x0) read$auto(r0, 0x0, 0x40000000000ded) r1 = openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim4/ports/2/udp_ports_table0\x00', 0x60002, 0x0) close_range$auto(0xffffffffffffffff, r1, 0x4) setsockopt$auto(r1, 0x9, 0x0, &(0x7f00000000c0)='/sys/kernel/security/integrity/evm/evm_xattrs\x00', 0x8001) openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu0/stats\x00', 0x8aa02, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) io_uring_setup$auto(0x7, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xc048ae65, 0x0) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000280), 0x1e9282, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0xa8602, 0x0) readv$auto(0x4, &(0x7f0000000240)={0x0, 0x2}, 0x1) ioctl$auto(r2, 0x5, r1) 27m9.861043436s ago: executing program 0 (id=322): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap$auto(0x0, 0x1, 0x4000000000df, 0x44eb2, 0x3, 0x300000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ipvlan1\x00'}) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x81, 0x0) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/apparmor/prev\x00', 0x200200, 0x0) sendmsg$auto_OVS_DP_CMD_DEL(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000ffdbdf250200000008000900", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000500000100000c0001006970766c616e310008000200", @ANYRES32=0x0, @ANYBLOB="71da3ad27e8d240852180a0b0560a6cec6461eadd2c9cf16c544357f31c3ae60b0d509be268a8445842e18692e7ab99d70584a22"], 0x40}}, 0x4000004) r1 = socket(0x3, 0x4, 0x5) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x3, &(0x7f00000000c0)={0x0, 0xf32}, 0x2, 0x0, 0xfffffffffffffffd, 0x4}, 0x8}, 0x100, 0x5, &(0x7f0000000180)={0x5, 0xcb}) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/dev_snmp6/veth0\x00', 0x8cb16dc98dc40ef9, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) mmap$auto(0x7fffffffffffffff, 0x202000b, 0x3, 0x17, r1, 0x8000) ioctl$auto_USB_RAW_IOCTL_INIT(r2, 0x41015500, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socketpair$auto(0x1e, 0x8000000, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_freeze_timeout\x00', 0x40000, 0x0) open(0x0, 0x64842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x22082, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x5) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003e00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) 27m8.801306506s ago: executing program 0 (id=330): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x6, 0x0) socket(0x2, 0x6, 0x0) sysfs$auto(0x2, 0x0, 0x0) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) epoll_ctl$auto(0x5, 0x3, r0, 0x0) epoll_wait$auto(0x5, 0x0, 0x2, 0xfffffffd) shmat$auto(0x5, &(0x7f0000000000)='#{\x00', 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x102, 0x0) read$auto(0x3, 0x0, 0x400000) 27m8.129900871s ago: executing program 0 (id=333): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x7e, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x6) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r1 = socket(0xa, 0x801, 0x84) setsockopt$auto(r1, 0x10000000084, 0x0, 0x0, 0x10) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x7f, 0x200000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x18, 0x17) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex_requeue$auto(0x0, 0x80, 0x2, 0x101) bpf$auto(0x23, 0x0, 0x101) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) socket(0x18, 0x5, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0xe280000000000010, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f00000000c0), 0x55) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) 27m2.16118334s ago: executing program 0 (id=361): socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) poll$auto(0x0, 0x80, 0x400400) syz_open_procfs$namespace(0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_l2cap_debugfs_fops_(r0, &(0x7f0000000240)=""/177, 0xb1) timer_create$auto(0xfd28, 0x0, 0x0) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x4, 0x4}, {0x0, 0x83}}, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x0, 0x40, 0x0, 0x5f) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), 0xffffffffffffffff) eventfd$auto(0x3) socket(0xa, 0x2, 0x88) 26m47.013813937s ago: executing program 32 (id=361): socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) poll$auto(0x0, 0x80, 0x400400) syz_open_procfs$namespace(0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_l2cap_debugfs_fops_(r0, &(0x7f0000000240)=""/177, 0xb1) timer_create$auto(0xfd28, 0x0, 0x0) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x4, 0x4}, {0x0, 0x83}}, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x0, 0x40, 0x0, 0x5f) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), 0xffffffffffffffff) eventfd$auto(0x3) socket(0xa, 0x2, 0x88) 26m3.15174887s ago: executing program 2 (id=609): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vidtv.0/media0/power/runtime_status\x00', 0x2082, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x0) r1 = socket(0xa, 0x801, 0x84) clone$auto(0x20003b46, 0x1, 0x0, 0x0, 0x20000000020002) getsockopt$auto(0x6, 0x84, 0x7b, 0x0, &(0x7f0000000280)=0x10000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/neigh/netdevsim3/mcast_resolicit\x00', 0x282, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x800000000040ebf, r0, 0x0) r2 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x2, 0x0) read$auto_page_owner_stack_operations_page_owner(r2, &(0x7f0000000000)=""/20, 0x14) sendmsg$auto_IOAM6_CMD_DUMP_NAMESPACES(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x4004) write$auto(r0, 0x0, 0x100085) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/i8042/serio0/softrepeat\x00', 0x1a1942, 0x0) openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) socket(0x18, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000180), 0x54) write$auto(r3, &(0x7f0000000000)='-\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4) dup2$auto(r2, r2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mincore$auto(0x0, 0x10000, 0x0) r4 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0) pwrite64$auto(r4, 0x0, 0x2, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000100)=""/190, 0xbe) 26m2.139397542s ago: executing program 2 (id=611): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000006740), r0) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={&(0x7f0000006780)={0x14, r1, 0x9, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000020}, 0x8000) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x6) mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x56a, 0xb275, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x2, 0x0) ppoll$auto(&(0x7f0000000000)={r2, 0x2, 0xffff}, 0x5, 0x0, 0x0, 0x8) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000440)="1dca160c260271d69fe56a7e839d6ebf2a0572d9173d882674a5c0acdadb0ee83a0e2c2e06dbf46ff5efc3faebeb487f0415bbf9", 0x34) socket(0x2b, 0x1, 0x1) listen$auto(0x3, 0x81) ioctl$auto(0x3, 0x5411, 0xfffffffffffff4e0) mq_timedreceive$auto(0x8, 0x0, 0xfffffffd, 0x0, 0x0) mq_timedsend$auto(0x8, 0x0, 0x100, 0x9, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptys2\x00', 0x424402, 0x0) ioctl$auto(0x3, 0x400c4d02, 0x5) sysfs$auto(0x2, 0x10000000000003c, 0x4) fsopen$auto(0x0, 0x1) 26m1.774589291s ago: executing program 2 (id=615): prctl$auto(0x59616d61, 0xffffffffffffffff, 0xa, 0x208, 0xfff) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x15\x00p\x01\x99\x88c\x14\r>\x14\x1a\xd3\xd3\x1d\xf8?\xdb\xdb\xc1\xf5\xe3o\x8e\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\xe5}\xea\x1b\x95\xafQ;_L\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x10\x00\x00\x00\x00\x00/TX:\x8a\xddf\xa9H0\x06\xe7\xd2\xe2\xf6^\xfdo\x00\x9a>T\xd5\x1e\xe3\xeb\x89q\a\xd6h\xc9\xbc\x8f\x1dBk\x95\x174\xdc\x03\x05> -\xb6\x9d[\xe42(\xe4\n\x98u\xc9\xa1\xc4Zb\x04\xc2\xf1 \x8a\xbe]\xde\xfd8u\xb4\xde\xb3\xa1T/\xdfx\x14Y\xfe\x1e\x1f\x91\x19\xb7\xfc\xcd\x7fl\xb3\xa8#\xa0\xb9P\x8d\x04C\x87\xebR\x93\x12\x18H&N\x8b\'i)\xab@\xaf\xcb\xda\x00\x067\xce\xd6V4\xc2\xeeX\xb4\xe9\f\xee\xe8\xd8\x91\x1b\xcd\x00j\x14H\xcc-\x14\xde\xaaN\x87\x8d\x9b\xa05\xacHX\xc1\xce\x91\xee\xad\r\xbe\xb2&f\xa3\xe2\x8bp\xba\x8a\"\xf1\xfc\xa13\xfe\xe0JG\xe1v\x82s}v~`X%pJ\xbf\xc3`\xa9\x8f\"l\xc7XX\xa4\xb6\x0e\xbe\xa0wy\xfe\x03n+k\xf149*(\x15\xaa\xc2\x8aB\xf1\xbb$M\xfe%\xc7\x84\xf0\xa4}bd\xac\xa8T\xda\xffm\x86\xca\x80\xde3\xa7\xba\xc7Y]\xd7\xa2\xec)\xd6\xad\xbcI\x10\xa3#\xd4/J\xa8\x14\x1b<\x04\xbd\x89\xefQf\xc0Q\x92\x92\xa7\x99\xcf\xaekR\xf5\xb7\x14r[\x9fx\xaf+\xb3@\xf4\x83\xbf\xc7e\xe7\xc2\xd6\x10\x0fk\xee)\x92\bO\xa1\x1a\x9e\xef:5\x1e\x1c\"9\xd8\xdf\xa9C\xe2SHG6\xf2\xd5.\x12]\x17J\x8b\xc52\xe9\x9e\xbc\xdc\xae\xef\xed\xf9\xa6\x9e-\x92pZ\x12j/\x1dD{\xac\x17\\O\xee\x11\x10$\x12\xfc \xb0\xb7cA;\xa1,\x040\xa7\xd9\xb2\x19@1\x92\x10\xc4\xc0\x1f\x1d\xe1\xf6\x80lW\v,\xa2\x134no\xa0\x00l\xd8\xe4\xd3\x16\xd3%\x8b\xf5\x1e\x12{\xe6\xdb\xde\a\xdedH\x90\xf7\x19\xff\xcb\xacC\xeadOf\xb8\x15\xc39\xefLt\t\x11\xa1\x0e\x85\xac\xcc+\xc0\xb4.\xaa3>\xc0\x96\x84\xd5\x02\xc1\x94=\xb0\xfe\xda\x1d\xe9\xa7\xe1\xcf\x80|k\xdd\x95\xc9\xb0y\xb4\xbd\xc2W\x9c\xa4\x80\x13\xbc\x7fb=y\xdb]U\xd1HC\xe1\xa7\x94q\xb0C\xb8\x86\xd0\x9d\xe0\x8aD\x91x\'\xd6\x17\xd1\x9d\x16\xa7oZ\x8a\xce:\x9e@\xca\x17\x05f+\xee\xd8\xe6D\x9e\xb18Aw', 0xe, 0x3) 26m1.565179952s ago: executing program 2 (id=616): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x1, 0x2, 0x0) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0xa, 0x3, 0x73) setsockopt$auto(r1, 0xff, 0x7, 0x0, 0xfff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0x4010ae68, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r0, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) landlock_create_ruleset$auto(&(0x7f00000007c0)={0x1}, 0x8, 0x0) acct$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) 26m1.120547892s ago: executing program 2 (id=620): r0 = socket(0x2, 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/devices/pci0000:00/0000:00:03.0/vendor\x00', 0x0, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x20c57, 0x4, 0x2, 0xc0eb1, r1, 0x7) sysfs$auto(0x2, 0x19, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = memfd_create$auto(0x0, 0xe) r3 = socket(0x2, 0x1, 0x106) connect$auto(r2, 0x0, 0x55) setsockopt$auto(r3, 0x1, 0x21, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x7}, 0x800009}, 0x5, 0x20000000) 26m0.85707062s ago: executing program 2 (id=623): mmap$auto(0x3ff, 0x20009, 0xdf, 0xeb6, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x11, 0x80003, 0x300) sysfs$auto(0x2, 0x100000000000037, 0x0) setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000002bc0), 0x400, 0x0) read$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000002c00)=""/51, 0x33) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) (async) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x71, 0x0, &(0x7f0000000280)=0x22a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) socket(0x2, 0x1, 0x0) (async) r3 = socket(0x2, 0x1, 0x0) getsockopt$auto(r3, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x3b) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) ioctl$auto(0x3, 0x5406, 0x38) (async) ioctl$auto(0x3, 0x5406, 0x38) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 25m45.830442933s ago: executing program 33 (id=623): mmap$auto(0x3ff, 0x20009, 0xdf, 0xeb6, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x11, 0x80003, 0x300) sysfs$auto(0x2, 0x100000000000037, 0x0) setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000002bc0), 0x400, 0x0) read$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000002c00)=""/51, 0x33) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) (async) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x71, 0x0, &(0x7f0000000280)=0x22a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) socket(0x2, 0x1, 0x0) (async) r3 = socket(0x2, 0x1, 0x0) getsockopt$auto(r3, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x3b) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) ioctl$auto(0x3, 0x5406, 0x38) (async) ioctl$auto(0x3, 0x5406, 0x38) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 24m14.478055965s ago: executing program 4 (id=974): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x6, 0x8, 0x8) r0 = socket(0x29, 0x5, 0x0) write$auto(0x3, 0x0, 0xfffffdef) sendmmsg$auto(r0, 0x0, 0x9a6, 0x3ec0) r1 = fcntl$auto(0x3, 0x4, 0xa553) r2 = socket(0xa, 0x800, 0x0) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) close_range$auto(0xffffffffffffffff, r1, 0xd0) select$auto(0x5, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x8000000000000201, 0x9, 0x3, 0x6, 0x7, 0xd886, 0x5e58296b, 0x341, 0x41, 0x7, 0x200, 0x8, 0xc]}, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001080), r3) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x50114) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0xffc, 0x7, 0xfffffffd, 0x0, 0xee01, 0x0, 0x6, 0x1, 0x5, 0xc0f, 0x2, 0x7ff, 0x92bc, 0xffffffff, 0x6, 0x3}) r6 = getuid() setreuid$auto(r5, r6) msgctl$auto(0x3, 0xfffffff7, &(0x7f0000000180)={{0x2, 0xffffffffffffffff, 0xee01, 0x6, 0x9, 0x6, 0x4}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x4, 0x2b9, 0x80, 0x5, 0x80000000, 0x2, 0x9, 0x10, 0x9}) sendmsg$auto_L2TP_CMD_SESSION_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x78, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_STATS={0x20, 0x1e, 0x0, 0x1, [@typed={0x8, 0x11d, 0x0, 0x0, @uid=r6}, @typed={0x14, 0x129, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, 0xffffffff}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x1ff}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0xb}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xff}, @L2TP_ATTR_STATS={0xc, 0x1e, 0x0, 0x1, [@typed={0x8, 0x5c, 0x0, 0x0, @uid=r7}]}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x40}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) connect$auto(r2, &(0x7f0000000140), 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3ec0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x2, 0x0) r8 = openat$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffff9c, &(0x7f0000001440), 0x101000, 0x0) ioctl$auto__dev_ioctl_fops_dev_ioctl(r8, 0x10000, 0x0) 24m11.035773394s ago: executing program 4 (id=988): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vidtv.0/media0/power/runtime_status\x00', 0x2082, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x801, 0x84) clone$auto(0x20003b46, 0x1, 0x0, 0x0, 0x20000000020002) getsockopt$auto(0x6, 0x84, 0x7b, 0x0, &(0x7f0000000280)=0x10000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/neigh/netdevsim3/mcast_resolicit\x00', 0x282, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x800000000040ebf, r0, 0x0) r2 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x2, 0x0) read$auto_page_owner_stack_operations_page_owner(r2, &(0x7f0000000000)=""/20, 0x14) sendmsg$auto_IOAM6_CMD_DUMP_NAMESPACES(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x4004) setns(r2, 0x20000) write$auto(r0, 0x0, 0x100085) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/i8042/serio0/softrepeat\x00', 0x1a1942, 0x0) openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) socket(0x18, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000180), 0x54) write$auto(r3, &(0x7f0000000000)='-\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4) dup2$auto(r2, r2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mincore$auto(0x0, 0x10000, 0x0) r4 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0) pwrite64$auto(r4, 0x0, 0x2, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000100)=""/190, 0xbe) 24m10.442807247s ago: executing program 4 (id=992): openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000180), 0x480, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0) close_range$auto(0x0, 0x1, 0x0) fanotify_init$auto(0x8000000000000000, 0x1) fanotify_mark$auto(0x400000000000, 0x101, 0x40000000009, 0x4, 0x0) ioctl$auto(0x3, 0x541b, 0x38) 24m9.738840977s ago: executing program 4 (id=995): futex$auto(0x0, 0x85, 0x2, 0x0, 0x0, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x6, 0x0) socket(0x2, 0x6, 0x0) sysfs$auto(0xd, 0x0, 0x0) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) socket(0x2, 0x1, 0x0) sendmsg$auto_NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x40010) sendmsg$auto_NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x40440) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) mmap$auto(0x2, 0x800, 0x0, 0x40000eb1, 0x5, 0x7) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x24040084) madvise$auto(0x0, 0x200007, 0x8) socket$nl_generic(0x10, 0x3, 0x5) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x4000) 24m5.989697993s ago: executing program 4 (id=1007): select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x1, 0x1, 0x3, 0x6ac6, 0x0, 0x7, 0x6d3a, 0x5, 0x6]}, 0x0) 24m5.309072529s ago: executing program 4 (id=1009): mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netstat\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) mknod$auto(&(0x7f0000000b00)='X))\x00', 0xa, 0x7ff) lstat$auto(&(0x7f0000000180)='X))\x00', 0x0) socket(0x28, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9) r1 = pipe$auto(0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/current_tracer\x00', 0x20000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r2 = openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000001140), 0x101000, 0x0) write$auto(r2, &(0x7f0000001180)='-\x00', 0x9012) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (fail_nth: 8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) bpf$auto(0xff000000, 0x0, 0x2) r3 = pipe$auto(0x0) r4 = geteuid() sendmsg$auto_MACSEC_CMD_UPD_RXSA(r1, &(0x7f0000001980)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001940)={&(0x7f0000001340)=ANY=[@ANYBLOB="00060000", @ANYRES16=0x0, @ANYBLOB="00002bbd7000fedbdf2509000000d8000980b5005980d89b1f2a661ddef25597fd4aebe41f773e89db2eec36ba070b7475e7d9496d7b8ee11ada7ef1a1f8d25891871e7b82e2021304d422ce011698b620ad8ba293b82a24e1f344766432fff33e9388210fc39c356e21ecbe6bd38d34aa7fb3178ae2c9d8cf48fdd0f4d0b8edc7d63eaf123a257c2c6ef008beedcda715f875f8df761c04001a8008009c00feffffff08000e00", @ANYRES32=0x0, @ANYBLOB="14007800fc010000000000000000000000000001040021800400488000000014002300fc01000000000000000000000000000008004500", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00\x00\x00\b\x00Z\x00', @ANYRES32, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB], 0x600}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f00000019c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="3e93ff84797e6c39b751142e34235bf49788fdd28aa8450c563bedeb9b87d674baf35ac86c323b7c67299eb2d99e5d5f0ef8abd73b359cc15c717eb0814f9746008300273f9396e1b0da786bc71a0556ce9451c43c1f62c70977bc1a8e942be0d0c7a1e68176a4036e902798dbeb"], 0x1c}, 0x1, 0x0, 0x0, 0x24000055}, 0x4) mq_notify$auto(r3, &(0x7f0000001100)={@sival_int=0x34, @raw=0xffff, 0x7, @_sigev_thread={&(0x7f00000000c0)=&(0x7f0000000080)=0x7, &(0x7f0000000100)="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"}}) 23m50.181617884s ago: executing program 34 (id=1009): mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netstat\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) mknod$auto(&(0x7f0000000b00)='X))\x00', 0xa, 0x7ff) lstat$auto(&(0x7f0000000180)='X))\x00', 0x0) socket(0x28, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9) r1 = pipe$auto(0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/current_tracer\x00', 0x20000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r2 = openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000001140), 0x101000, 0x0) write$auto(r2, &(0x7f0000001180)='-\x00', 0x9012) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (fail_nth: 8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) bpf$auto(0xff000000, 0x0, 0x2) r3 = pipe$auto(0x0) r4 = geteuid() sendmsg$auto_MACSEC_CMD_UPD_RXSA(r1, &(0x7f0000001980)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001940)={&(0x7f0000001340)=ANY=[@ANYBLOB="00060000", @ANYRES16=0x0, @ANYBLOB="00002bbd7000fedbdf2509000000d8000980b5005980d89b1f2a661ddef25597fd4aebe41f773e89db2eec36ba070b7475e7d9496d7b8ee11ada7ef1a1f8d25891871e7b82e2021304d422ce011698b620ad8ba293b82a24e1f344766432fff33e9388210fc39c356e21ecbe6bd38d34aa7fb3178ae2c9d8cf48fdd0f4d0b8edc7d63eaf123a257c2c6ef008beedcda715f875f8df761c04001a8008009c00feffffff08000e00", @ANYRES32=0x0, @ANYBLOB="14007800fc010000000000000000000000000001040021800400488000000014002300fc01000000000000000000000000000008004500", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00\x00\x00\b\x00Z\x00', @ANYRES32, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB], 0x600}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f00000019c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="3e93ff84797e6c39b751142e34235bf49788fdd28aa8450c563bedeb9b87d674baf35ac86c323b7c67299eb2d99e5d5f0ef8abd73b359cc15c717eb0814f9746008300273f9396e1b0da786bc71a0556ce9451c43c1f62c70977bc1a8e942be0d0c7a1e68176a4036e902798dbeb"], 0x1c}, 0x1, 0x0, 0x0, 0x24000055}, 0x4) mq_notify$auto(r3, &(0x7f0000001100)={@sival_int=0x34, @raw=0xffff, 0x7, @_sigev_thread={&(0x7f00000000c0)=&(0x7f0000000080)=0x7, &(0x7f0000000100)="6f82f2842310fb2bdd039af8e7be831e15033c0344a607fae4567942d79cc4a908ecc6ba34accacdeabfbf51d1f5c767b75db2afa5b0b0edb030c4a2757b60fc55de3a2de9d4fdad143eb9167cf6e38240d0628532c8b1b91090d59699de411242200e25afb1e954ad4af49950b5343ae5afcb57f93e1b03f5a35639ede32e548e5568d2e8cf923610a1e52743c26a773e374b5e8fa1bd0749492ce4b5d64335c537e304c676918928562961cc48c6572be62daad373cfa180a3c515debbd7cdd3710c712c5b20b808feeb39f3faa28189ee8448e7eb57f71abc1a1a443977ff211b92246e9c987da7ca86afb2c9a636ca3f5231291d6f904ca2e30d6f7356d171ed88b219a925effd82038e473229e2c154a74826599a84f9ef769adfd286f9af08e89370db69de43a263163c2dd468830fcf5219745df79f4d28167a79db31e72db5a2f6a2925b390fccb59453f27c72e70d85e89dbfc91347e5622cbe84ce06c46bee53fb555db6cd8f24cd064f4720a6951ae0d568729059bb18386cd0878df4c7a1f4c81e79be1b6d8e82f0afec6a319eb0e4ba4814b2181d77b88f99733786629be3f266d5b8dc8e6d53accc830c3cd183a2fa91a1b99e64af2bb7d4bb023673b6a0e314fb6517ab1e6c7b0a20208d12948e859c7f9e83d5abef3cb3d7e4027e2d46dfd3d4f572dfdfa23e29b43a10c4017f4060e5931100a1970d959446f63a0f900536e386f01a744a570f9c586b48c3c0f1b92820dab885abced65f1771c179154cd7ebb7bc7bcefb8a37db6b93a5c10b8dc8d283d1c2170e9e137cdad4124fb089d4595efbaf02e681db2e56c2838f4e018631bcb82fefbc427661fe646c3096e4c89dcdad3fcc20afdc99d242c7af955af63ab42f0f67c192b05734e660c9c6aba3533150aa8d0e00d488e540a36d51a5b6cfaa83bde30ae3ec05cba45f8784e1685c536b2f996d9c12da449a0c956395ac76658e73274c94be0ea41a6181358c4f3eecad38b4645ff2ba6bce8e6df4bbe6099ebc5099029bcf9875885ffb6321bbac2083aa186d59b4f10f30610dcf04e61d1e225795b6e573eeeb1e158a7710c9893cbd72cdea5d64c17b73a10e8260a7b7864b06f92f2224e20d65dc741fe1a9c1270c14ac7f4e50604e9cb9a9646d43f1a8d2d6bf08738a59f6fdb7135ea30b6f9c098175e0b5d4debb2d063c6d201921fc42081f763c534d1bdf749c3874f084b3bf477622e52537b5a5ac93893068c18c43471e9ea7a98ca2bad6388bfe3939dc18464c9495fa336703387a3d23a243a159662506ea31bbb69be39a10e401f0de77385136fc5f5eecd82a472544ab7ba338ce5b57f26a189fb0885f90b9f36343f4b3402e9bdcdeb43a3442579dfedf97a8c6702135e780ae337083361235a5250c4bd389b1873ac9143944b6ac366dc53dfa62a807cdec7771cb450035d99ef9ad8faa4182697f2abda2b78509b28328a06c9d85bf1867f8ee2a41f1975b0dce326a73743a42446f20fa6bf9bc604744fcb703e832263563ccc900883842396487b278fd3127c569baff3653bf889e819dab188376491bd5f63d9641a4039f1216b6537685d8acb863a2358ef29c115e6b44f345f8453da9771fc2df611c207e081243a9d682141f477ce1c653d0bc0a9f2f55eaa811d5087953e903127d013e505c4da6e218887d392a319b9615bda80d66f594ad5d5ec25908c02cede27928e305ef0b348c3c5b67601dba86f3a792535c74d3def210c51503faedfbf02f2f4235d571f6beccc051a0c229ece2e029e2ef55b676b752df299cbd251e0989d9f4d767ffbae2128684062fdaadac3f2d6dd5db3f00910e9a8c3fd744d4479e316055d1fd78798436865c1efdd8a1f9c91fcc6c0e44d2b8cdcf1c5e8cb46980caef15245d9d233565c4da99056f55605bbb1d685d711f13e37e4577471d49c55cf36a9576e838c48f7604c0f6e95b8aeb190fe6759a68e61195d7c21638b4c31d7318c441955993d96220842f2252c4f254c81ab6332f7811d75ada84d1c36dc68c15100abf86cd030eb6c0091d347a444770d28af92f3367f1d663a58c1ac87def8489dbbae413046fec91f195af6fbd7002a396b4c02ef6319feb1cf3bfcfbfd99ff009ce125a14fe90411e903e918996673cbfa2b17467a4ecb1a62adcc0576234265116d5a42a0971c102d19aadc2a7502e5969d381c20fe496e8cd10f034e0ae03761cdf4648cece967542b4df47f8d07707e4f827b7a60a9231337ec60615f2561e957e9ccd0613d30ac2222ebec551bd2c2a899ba63109dacedf0e4f0dea665feac7f14ad08536ca80f9a07165c891f0558f4f30b3b9b8f55751f62abd568c8420b8dfd8070c00d17e767ff9c0d57600f767cbbc60a363a9bc715cb74ca4ccc64cddf99833100eae9a0d70440a71a4988754da5cc340a5f8640dbd4791fa9ae65862a5e7960a266456429e7934c1e2c98220f78d8a2332cbf30eb52d78cfb3ab7a18c8e0757312653eedb0ca6fef2f8a981ba31bd368e893549c927de2e5e40d1ed72a2fad92d58748bbe885cebd57c8d3af7498fd32ca9daee44ac290c7975b63e5a62fe9232c9e1ddc75a343905481e2692da55b4bc9bb926672e3217ccd426dc5b1b9795868337f1313a8a8f66aa9ccd5e75ec569c439f2134cfb22962c50780e3c0f20ac60e3887b1e3bbce2c6a55f7bd58bd6105d7a9fc798d2d1bb9a8f68ce1386b70fd7b6cef84bc04989c29ac9f371ada7246a8c86e7f74ae8d5f9d39e1a9c30803a3c681812d2b773690c2a386cf1dc17788756cbe3d2cc3875071b80bf1869d2c7009be1c097a960a1e10f81c049b77c6ecd3d9c0a06bbed4c86245fdbb4d0f0aba861ee46d2a78140ea69dfa991dab8d04d9737015a765684ff3a491fe9a6298a28f2b18916d6c452b76e074d0b922184f67b146384657452473382b8c27908e9c4bc325d540733926b2d0f24149d60880f4992ddac357de3805e4ff5c341a4ec8de74cd0f8fb7a89b88ce41e39185d66090e5e5bd46a0adc1cbcbfa2791268362ac70a8cc00fa373c586ba4c90ff1e044348b1986b521b6ae63dc13fc11d5aa5a6d2bd53a6dfcaa232a17460f6ca2cc1a108e94dbf52d53cdfe12f488f3eb4baf7744fa815b60f399326fe27b6436189150b472661e0a2d9c8f6f129b6c2624d4308506c543895ca665caad0f0cc238bbd58edd8eb54ffed2502c8619851c37d404bb31c04c691634d7d8c2a971573535565d34afd1e4c4e073647d942c4ebc77ee8a5a74665e8fb1c868e247cade6cf828d006ed0a7d15e3910d1ad35a29c48e84cbdb2dcb827571cc9547a464d9c3ab4b7cae78accd7e63ee546d804891073ee4d3643a71b24ac6e197af31097a98c7fe284de4edae15e97d7640f4ee7aa33ed51ca46e1a32862a5f06b333a774532d4d8ac554f51d73ace286c607b79234ba36025273cafe370ecc9a6efe41d69236039383037c85c97e49f67251a6f2295f5201cfdf5674840e5abb717a655a779f3e9889ca4384c3c8a0c343a37d7efc26d9d8666611ec2697f2872c6b58dd2bfc8e3cfe93e26f43059ce2bbd56a7dbfa428c51399834dec287eff5390e40752e0ac633ab66ec9c8b37eb98295b1850b0bc6d77a502708758783fa339b6593d731d4acb77747edbf0179d46a78e4e75e76a634d97183148b36ebad01a65b21069858557c46ec905ad7b7ca4084a36f9459ca3fe9d8f0c0dc2501e8ed7b2bd595e0a254f91bafe9f23e6b73964993a21d27f316b9bb4122d99cc9e246fa16f6ba0ae02b44eab55f56f9528a82dac42600aef0636005c82e44268de4c80fedc023294363dd15cb99263ce3cbe6a308809f60bad0a302cb2511524c8bea03e77d52ba4537cf068004464fca44e31290e8cd240fe7549ac47ac11c34558c53a55db330b1f36f1b97d89a9a6416734e310327992863776c808c826d2ce2f218883697d032cda108b6e71bda3b7378578c3fb6ca3596e4962762630b135134f6cbda165bb0494d886a44a504f696859fb18a7807b6db620b00a48414dc16d3673b1da3340583b38ec171f6eb5371c696c292f50b539a15b8bff2d522a08a73b1dbe8a4eaa6fedfbbbdb5a14f998f8d19c9e84d846afcd95f6a2fabcaa74dcb5118009a35f7fa03c42867166a99e4b5a113eb754ed6cb49107d2ad1238e9a2ef7b497d15c2baeec1cd34682328afb7510a0e4ff080cb79e5ec8065007d482fce02da1589d8908b580b0d11e8ec88d80c88e9abc37d6f995d939062e95567d888a86e4161aaed53c59a83827b3a2fa5d43e5da17f93304772a09ced75724c304c514c3393b2cab66f3e25a0acc639f44991aa185e9e1f29d078d3ae56695bcfdedb1f3dee562bf61282afb3b13ce6704a265c7f0f03416af6f6480ec979c1301ee7cdd870644b56f546a43aa210787fc3de4fac1cc09191d46dcbd9a65eab702ba9e1573917e8e50847288a653ec23102536d6e47bb2115ef6c4333d2539cd1ae2ad911a12212274114d2931159f01c6a0487687407ad17b86e8b39e0217ab9b10c22a83dd94431235b0c7f298fdcf2ec25748f19b8c0577ecddaf6b942b686690e646c5a15cf5c33e48ca44cb8b7acc90924ac94bb442b406b38a6de8611f8797cf38959c531bd44b38900f811fe9585cb08783168e1eeb0477fc5eb5986b0a4b0408f36b5d101a32c3300bcb230b761d45b433f40bcfbe221903ac47585da32c166d6bcb21b1091d0bc38aafbb78cf8ec68f17eedcc74a25a2ec076f695abaaa0028f8b2f3a3223737ff2b40be1f5142e19466af69bc11ffe0fcb0c713f9a074647cdaf489aa11d43de887d5e9531e9eea44efa938532477f6e583b9a52129dc0f5d3294b50fa9b94b694833cbcf5ccc7d25a8c0fd933d84c5c13e1d3c6268f1bdfbaa8cd43e604cf8dfaee173de325da3b735e767b9fbc22895faa31361810abb0c23989a5bb135927eeef513a882208933cb30ae36553d6de484ec1946cbe4a13c70c145b806ec6dc9f507cd26b0ab8344876c67ac3c517619c38e2b4ed10cf481d3aeb56a2bbe4b0a2ed9a10d7bab2ff3010012fb7ed2492347d05e1ffb93beae51cd0cc1506f03378264d4d92621b6c2a532c4c79a32233a68e12d44034672ec99c6b40910f25dca9faa69c6ae908428123bb76add3bf61f564013b2d476162adf835ac0a00449ebb924665882bb25fa66bce726b1af1f135f1d82d740c082b93a4258998b4f6321f95210b9c38fa3f05d66bb546f1e4a2800d446ddadd999f42bed865ce797d86ff235a528a04dfc7fb7a3a5f1853cfa934589a88688d0631758a475c84e7e4adee9d6d62396c7e19f77e5a9f9527568dfa428b22e8b2fc19355fc631257a256af0a23eddfe7145b387cfb92b13eef900bdc0ca3583772c617122bbf79e1ed1968a2b15d5a113855f62d6fa42d56f95db69e5a4207ae61f1f5946e05d639b79c9deec34b2ab09dee87ea060fb0c803f9711ff3845c70e56a5c5f085e9912d2d222cb88ca85a0c3de05f317d59f0d88febc7038156401a2a987837f4bc1ad906bf1da795b89c01a2a4a2edb5318f2c907f62311820974992881c5887df033bd6299c31a964266075faa980709a2cf2e2b7a8152acdb53d3a89ca35109ed9ba71d6578bee3a8109f7df0a395a9984cc8849937063f45ad14cac774315db7c5b32572693eecb715731552b081079a304553ce989ef7f00f962514342ce553b2adeea1037fe81efaf8556a64439f90a71d6394bc368656c1a5000"}}) 21m19.509145197s ago: executing program 1 (id=1561): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vidtv.0/media0/power/runtime_status\x00', 0x2082, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x0) r1 = socket(0xa, 0x801, 0x84) clone$auto(0x20003b46, 0x1, 0x0, 0x0, 0x20000000020002) getsockopt$auto(0x6, 0x84, 0x7b, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/neigh/netdevsim3/mcast_resolicit\x00', 0x282, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x800000000040ebf, r0, 0x0) r2 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x2, 0x0) read$auto_page_owner_stack_operations_page_owner(r2, &(0x7f0000000000)=""/20, 0x14) sendmsg$auto_IOAM6_CMD_DUMP_NAMESPACES(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x4004) setns(r2, 0x20000) write$auto(r0, 0x0, 0x100085) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/i8042/serio0/softrepeat\x00', 0x1a1942, 0x0) openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) socket(0x18, 0x5, 0x0) connect$auto(0x3, 0x0, 0x54) write$auto(r3, &(0x7f0000000000)='-\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4) dup2$auto(r2, r2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mincore$auto(0x0, 0x10000, 0x0) r4 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0) pwrite64$auto(r4, 0x0, 0x2, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000100)=""/190, 0xbe) 21m16.470172488s ago: executing program 1 (id=1566): mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x4000008000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x21, 0x5, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x55) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x88542, 0x0) socket(0x10, 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1c8340, 0x0) write$auto(r0, 0x0, 0x8) socket(0x2, 0x1, 0x0) socket(0x22, 0x3, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket(0x2, 0x6, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x1, 0x1, 0x3, 0x6ac6, 0x0, 0x7, 0x6d3a, 0x5, 0x6]}, 0x0) 21m14.813220248s ago: executing program 1 (id=1569): unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x2) socket(0x1d, 0x2, 0x2) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x4, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x2, 0x3, 0x5, 0x7}, 0x3, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0x49, &(0x7f0000000040)='!\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)={0x1c, r2, 0x13ebbac2338983f3, 0x70b927, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x4008000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2282, 0x0) read$auto(r5, 0x0, 0x80) write$auto(r5, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = waitid$auto(0x9, 0xffffffffffffffff, &(0x7f0000000380)={@siginfo_0_0={0x8, 0x5, 0x401, @_sigfault={&(0x7f00000019c0)="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", @_perf={0x5, 0x1, 0x7f}}}}, 0x9, &(0x7f0000000400)={{0x0, 0xf59}, {0xfffffffffffffff8, 0x8}, 0x4, 0xbc59, 0x1000, 0x12a9, 0x5, 0x28, 0x1, 0x4, 0x5, 0x2, 0xfffffffffffff506, 0x9, 0x6, 0x180000000000}) r7 = syz_clone3(&(0x7f00000001c0)={0x8000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), {0x15}, &(0x7f0000000140)=""/7, 0x7, &(0x7f00000009c0)=""/4096, &(0x7f0000000180)=[0xffffffffffffffff, r6], 0x2}, 0x58) syz_open_procfs$namespace(r7, &(0x7f0000000240)='ns/mnt\x00') 21m11.229204705s ago: executing program 1 (id=1577): mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x4000008000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x21, 0x5, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x55) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x88542, 0x0) socket(0x10, 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1c8340, 0x0) write$auto(r0, 0x0, 0x8) socket(0x2, 0x1, 0x0) socket(0x22, 0x3, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) socket(0x2, 0x6, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) 21m9.812026013s ago: executing program 1 (id=1581): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x18, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {0x4, 0x0, 0xe703}, [@HWSIM_ATTR_NO_VIF={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x40000) 21m3.86900276s ago: executing program 1 (id=1594): open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000000)='./file0\x00', 0xe63e, 0x20) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x100000000000035, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x3) pread64$auto(0x0, 0x0, 0x1, 0x100000000000f) 20m48.718229092s ago: executing program 35 (id=1594): open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000000)='./file0\x00', 0xe63e, 0x20) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x100000000000035, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x3) pread64$auto(0x0, 0x0, 0x1, 0x100000000000f) 13m35.413155289s ago: executing program 7 (id=5986): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8000, 0x0) ioctl$auto(0x3, 0x1274, 0x38) (fail_nth: 3) io_uring_setup$auto(0x0, &(0x7f0000000000)={0x6, 0x66, 0x2, 0x14, 0x8, 0x4, 0xffffffffffffffff, [0x9, 0x34, 0x7fffffff], {0x101, 0x6, 0x4355, 0x80000000, 0xa5, 0x7, 0xb, 0xba90, 0x5}, {0xfffffc00, 0x6, 0x0, 0x401, 0x8, 0x8, 0x0, 0x7, 0x6}}) lstat$auto(&(0x7f0000000000)='./file1\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}}, 0x20044000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x103, 0x0) socket(0x2, 0x5, 0x6) connect$auto(0x3, &(0x7f00000000c0), 0x55) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x400000) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) write$auto(0x3, 0x0, 0xffd8) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) 13m34.909210215s ago: executing program 7 (id=5991): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8000, 0x0) ioctl$auto(0x3, 0x1274, 0x38) r0 = io_uring_setup$auto(0x0, &(0x7f0000000000)={0x6, 0x66, 0x2, 0x14, 0x8, 0x4, 0xffffffffffffffff, [0x9, 0x34, 0x7fffffff], {0x101, 0x6, 0x4355, 0x80000000, 0xa5, 0x7, 0xb, 0xba90, 0x5}, {0xfffffc00, 0x6, 0x0, 0x401, 0x8, 0x8, 0x0, 0x7, 0x1ff}}) lstat$auto(&(0x7f0000000000)='./file1\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) mmap$auto(0x0, 0x20009, 0x4000004000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}}, 0x20044000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x103, 0x0) socket(0x5, 0x1, 0x6) connect$auto(0x3, &(0x7f00000000c0), 0x55) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x400000) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) write$auto(0x3, 0x0, 0xffd8) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) r4 = socket(0x2, 0x5, 0x0) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) mmap$auto(0x10, 0x2020009, 0x3, 0x200ebd, r0, 0x3) socket(0x2, 0x6, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = gettid() tkill$auto(r5, 0x7) 13m34.712336732s ago: executing program 7 (id=5993): socket(0x2, 0x3, 0xa) (async) socket(0xa, 0x801, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x801, 0x84) (async) mmap$auto(0x0, 0x2, 0xdf, 0x9b72, 0x2, 0x8000) (async) getsockopt$auto(0x6, 0x84, 0x84, 0x0, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf251600000283000180140002006e65746465767369ae00f903304aa0ede66d300000000000000500030004000000a19b04004000300b8b36efeba247d1abf1bfa0be219eabbbb4ac3031e041e7060fd9d730deab992dfcc7f55ebfd51f8b74b9530d3a97bae7a049d8c7ed0e07817e02dbc577bc980b703b329c445d8c93ebb643a8aa5ebac489ea5a9c"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) (async) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) timer_create$auto(0x4, 0x0, 0x0) (async) socket(0x2a, 0x1, 0x0) (async) bind$auto(0x3, &(0x7f0000000080), 0x6b) (async) connect$auto(0x3, &(0x7f00000000c0), 0x55) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40) (async) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) gettid() (async) connect$auto(0xffffffffffffffff, 0x0, 0x55) (async) mmap$auto(0x0, 0x5, 0x3, 0x16, 0x3, 0x8400) (async) unshare$auto(0x40000080) (async) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async) madvise$auto(0x0, 0x20200, 0x15) (async) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x4040, 0x0) ioctl$auto_def_blk_fops_fs(r2, 0x6, 0x0) 13m34.549238116s ago: executing program 7 (id=5996): sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000306b87000fedbdf250300000004000800040003800c0016"], 0x28}}, 0x4c810) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x17, 0x0) r1 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004) mmap$auto(0x1, 0x9, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_RECONFIGURE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x53}, 0x1, 0x0, 0x0, 0x84}, 0x10) bpf$auto(0x8, &(0x7f0000000480)=@bpf_attr_11={0x1, 0x1c000, 0x4, 0x9, 0x505, 0x1, 0x3, r1}, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) semctl$auto(0x4, 0x5, 0x8, 0xfffffffffffffffb) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000)="5e80", 0x2) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 13m34.444143352s ago: executing program 7 (id=5999): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xc, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x2, 0x7, 0x5, 0x7}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x23, 0x0, 0x8) r0 = socket(0x10, 0x2, 0x0) removexattr$auto(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=']-\x98+\x00') sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x1800}, 0x40000) 13m34.195354053s ago: executing program 7 (id=6006): r0 = socket(0x10, 0x2, 0xc) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r1, 0x0, 0xe) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) tee$auto(0x32c8, 0x7, 0x0, 0x5) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon9\x00', 0xfdc1542579eced7f, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf2502000000110001006f76735f646174617061746880000000"], 0x28}, 0x1, 0x0, 0x0, 0x20040c04}, 0xc0804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) waitid$auto(0x9, 0x4, 0x0, 0x80000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) fanotify_init$auto(0x5, 0x2000000000002) inotify_init1$auto(0x3000000000000) socket(0x15, 0x5, 0x0) getsockopt$auto(0x2, 0x114, 0x2721, 0xfffffffffffffffc, 0x0) r2 = open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x138) open_by_handle_at$auto(r2, &(0x7f0000000040)={0x8, 0x2, "0200000000000000"}, 0x2) read$auto(0x4, 0x0, 0x20) mmap$auto(0xfffffffffffffffa, 0x40010000402008, 0xdf, 0x49b72, r0, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mlock$auto(0xfbe8, 0x4) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/011/001\x00', 0x121002, 0x0) readlink$auto(&(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000200)='/proc/self/pagemap\x00', 0x80000000) 13m18.997365007s ago: executing program 36 (id=6006): r0 = socket(0x10, 0x2, 0xc) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r1, 0x0, 0xe) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) tee$auto(0x32c8, 0x7, 0x0, 0x5) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon9\x00', 0xfdc1542579eced7f, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf2502000000110001006f76735f646174617061746880000000"], 0x28}, 0x1, 0x0, 0x0, 0x20040c04}, 0xc0804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) waitid$auto(0x9, 0x4, 0x0, 0x80000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) fanotify_init$auto(0x5, 0x2000000000002) inotify_init1$auto(0x3000000000000) socket(0x15, 0x5, 0x0) getsockopt$auto(0x2, 0x114, 0x2721, 0xfffffffffffffffc, 0x0) r2 = open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x138) open_by_handle_at$auto(r2, &(0x7f0000000040)={0x8, 0x2, "0200000000000000"}, 0x2) read$auto(0x4, 0x0, 0x20) mmap$auto(0xfffffffffffffffa, 0x40010000402008, 0xdf, 0x49b72, r0, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mlock$auto(0xfbe8, 0x4) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/011/001\x00', 0x121002, 0x0) readlink$auto(&(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000200)='/proc/self/pagemap\x00', 0x80000000) 39.17918748s ago: executing program 5 (id=10351): sched_setattr$auto(0x0, &(0x7f0000000740)={0x1, 0x7, 0x1, 0x7, 0x0, 0x7fffffff, 0x1, 0x7, 0x7, 0x9}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = getpgrp(0xffffffffffffffff) r1 = prctl$auto(0x1000000003b, 0x1, r0, 0x6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram12/events_async\x00', 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) read$auto_proc_pid_maps_operations_internal(r1, &(0x7f0000000080)=""/84, 0x54) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x11, 0x80003, 0x300) socket(0xa, 0x801, 0x84) newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x1000) getsockopt$auto(0x6, 0x84, 0xd, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1c8340, 0x0) fsmount$auto(r2, 0x3, 0xffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf250201000008000300", @ANYRES32=r4, @ANYBLOB="b1002500"], 0xd0}, 0x1, 0x0, 0x0, 0x4000023}, 0x80) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x100000000, 0x8, 0x29, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x5, 0x5, 0x6, 0x8, 0xae, 0xa, 0x2, 0x7, 0x5, 0x7, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1000000, 0x64, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x80000000000, 0x400000000000000, 0x0, 0x8000000000000000, 0x80000000000000, 0x3, 0xfffffffffffffffd, 0x0, 0xfffffffffffffbfe, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffe, 0xa, 0xfffffffffffffffe]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x4004000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 38.750931174s ago: executing program 5 (id=10352): sched_setattr$auto(0x0, &(0x7f0000000740)={0x1, 0x7, 0x1, 0x7, 0x0, 0x7fffffff, 0x1, 0x7, 0x7, 0x9}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = getpgrp(0xffffffffffffffff) r1 = prctl$auto(0x1000000003b, 0x1, r0, 0x6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) read$auto_proc_pid_cmdline_ops_base(r1, &(0x7f0000000040)=""/34, 0x22) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram12/events_async\x00', 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) read$auto_proc_pid_maps_operations_internal(r1, &(0x7f0000000080)=""/84, 0x54) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x11, 0x80003, 0x300) socket(0xa, 0x801, 0x84) newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x1000) getsockopt$auto(0x6, 0x84, 0xd, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1c8340, 0x0) fsmount$auto(0xffffffffffffffff, 0x3, 0xffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf250201000008000300", @ANYRES32=r3, @ANYBLOB="b1002500"], 0xd0}, 0x1, 0x0, 0x0, 0x4000023}, 0x80) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x100000000, 0x8, 0x29, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x5, 0x5, 0x6, 0x8, 0xae, 0xa, 0x2, 0x7, 0x5, 0x7, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1000000, 0x64, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x80000000000, 0x400000000000000, 0x0, 0x8000000000000000, 0x80000000000000, 0x3, 0xfffffffffffffffd, 0x0, 0xfffffffffffffbfe, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffe, 0xa, 0xfffffffffffffffe]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x4004000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 37.852161455s ago: executing program 5 (id=10356): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x100000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) stat$auto(0x0, 0x0) madvise$auto(0x0, 0x2003f0, 0x11) ioctl$auto_RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x8, 0x300000000000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000380)={0x4, 0x3ff, [{0xffffffffffffffff}]}) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), r0) r1 = io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8000, 0x0) ioctl$auto(0x3, 0xc0481273, 0x38) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x5, 0x1ff, 0x7, 0x5, 0x4909b6f8, 0x1ffdd, 0x5, 0x3, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x4080, 0x4, 0x0, 0x7, 0x2000, 0x200, 0x8001, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x1000002000, 0x0, 0x5, 0x70624ce7, 0xefde, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xee, 0xfffffffffffffffd, 0x400000000005b4, 0x8, 0x0, 0x0, 0x0, 0x6, 0xffffffffbfffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0xb, 0xa38, 0x0, 0x6, 0xfffffffffffffffc, 0x2, 0x3, 0x4, 0x0, 0x9]}, 0x1fe, 0xd) r3 = socket(0x10, 0x2, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r2, @ANYRESHEX=r1, @ANYRES16=r3, @ANYBLOB="245dad54aff146495c08b94ea82a9e74a972cbe855ba5687b5bdf1805adc04834be8c660c33ca1efa8e18e005556717d2e546b", @ANYRESDEC=r3, @ANYRESOCT=r3, @ANYRES64=r2, @ANYBLOB="1c1600990353513648c0ea8f174af65d6a7fc16f7be362dff7e33c6f96dbd804"], 0x1ac}}, 0x40000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101300, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000040)=""/192, 0xc0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000100)=""/31, 0x1f) recvmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000000), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x107601, 0x0) ioctl$auto(0x3, 0x1276, 0x7) 37.331746039s ago: executing program 5 (id=10361): sched_setattr$auto(0x0, &(0x7f0000000740)={0x1, 0x7, 0x1, 0x7, 0x0, 0x7fffffff, 0x1, 0x7, 0x7, 0x9}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = getpgrp(0xffffffffffffffff) r1 = prctl$auto(0x1000000003b, 0x1, r0, 0x6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram12/events_async\x00', 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) read$auto_proc_pid_maps_operations_internal(r1, &(0x7f0000000080)=""/84, 0x54) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x11, 0x80003, 0x300) socket(0xa, 0x801, 0x84) newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x1000) getsockopt$auto(0x6, 0x84, 0xd, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1c8340, 0x0) fsmount$auto(r2, 0x3, 0xffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf250201000008000300", @ANYRES32=r4, @ANYBLOB="b1002500"], 0xd0}, 0x1, 0x0, 0x0, 0x4000023}, 0x80) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x100000000, 0x8, 0x29, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x5, 0x5, 0x6, 0x8, 0xae, 0xa, 0x2, 0x7, 0x5, 0x7, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1000000, 0x64, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x80000000000, 0x400000000000000, 0x0, 0x8000000000000000, 0x80000000000000, 0x3, 0xfffffffffffffffd, 0x0, 0xfffffffffffffbfe, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffe, 0xa, 0xfffffffffffffffe]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x4004000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 37.158669449s ago: executing program 5 (id=10363): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) sendfile$auto(r0, r0, 0x0, 0x80000001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) getpid() fcntl$getown(r1, 0x9) capget$auto(0x0, 0x0) r2 = getpid() process_vm_readv$auto(r2, 0x0, 0x1, 0x0, 0x6, 0x0) getpid() syz_clone3(0x0, 0x0) open(0x0, 0x22240, 0x155) mmap$auto_fb_fops_fb_chrdev(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000008, 0x810, r1, 0x9e) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) io_uring_enter$auto(0xffffffffffffffff, 0x100, 0xffff230a, 0x9, 0x0, 0x7fff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) write$auto_proc_clear_refs_operations_internal(r3, 0x0, 0xffffff4b) tkill$auto(0x1, 0x7) r4 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/lru_gen\x00', 0x12b902, 0x0) write$auto_lru_gen_rw_fops_vmscan(r4, 0x0, 0x0) 33.929564012s ago: executing program 5 (id=10376): r0 = open(&(0x7f0000000000)='./file0\x00', 0x22240, 0x0) r1 = fcntl$auto(r0, 0xa, 0x5) read$auto_sc_seq_fops_netdebug(r0, &(0x7f0000000100)=""/224, 0xe0) (async) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) (async) timer_create$auto(0xfffffffa, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8050) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) io_uring_setup$auto(0x1, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x189000, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) (async) ioctl$auto_TIOCSTI2(r2, 0x5412, 0x0) (async) socketpair$auto(0x5, 0x9, 0x5, &(0x7f0000000000)=0x65354075) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) timer_settime$auto(0x100000, 0xffff8003, &(0x7f00000000c0)={{0x10000000000f, 0x8e3}, {0x5, 0x4000fff}}, 0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 33.637822098s ago: executing program 37 (id=10376): r0 = open(&(0x7f0000000000)='./file0\x00', 0x22240, 0x0) r1 = fcntl$auto(r0, 0xa, 0x5) read$auto_sc_seq_fops_netdebug(r0, &(0x7f0000000100)=""/224, 0xe0) (async) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) (async) timer_create$auto(0xfffffffa, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8050) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) io_uring_setup$auto(0x1, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x189000, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) (async) ioctl$auto_TIOCSTI2(r2, 0x5412, 0x0) (async) socketpair$auto(0x5, 0x9, 0x5, &(0x7f0000000000)=0x65354075) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) timer_settime$auto(0x100000, 0xffff8003, &(0x7f00000000c0)={{0x10000000000f, 0x8e3}, {0x5, 0x4000fff}}, 0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 15.041393717s ago: executing program 6 (id=10458): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x60000, 0x0) poll$auto(&(0x7f0000000040)={r0, 0x7, 0x45}, 0x0, 0x2) ioctl$auto_COMEDI_INSN(r1, 0x8028640c, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/pts/ptmx\x00', 0x783182, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) prctl$auto(0xf, 0x2, 0x7, 0x2, 0x1) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/netfilter/nf_log\x00', 0x8e40, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000080)=""/248, 0xf8) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/nullb/features\x00', 0x40283, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x9, 0x0, 0x6) ioctl$auto_TCFLSH2(r2, 0x80047437, 0x0) 14.670507289s ago: executing program 6 (id=10459): setreuid$auto(0x0, 0xee00) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r0 = geteuid() setreuid$auto(r0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) fstat$auto(r1, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x43403d05, 0x0) setrlimit$auto(0x6, &(0x7f0000000000)={0x1, 0x7}) r2 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') execveat$auto(r2, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r3, 0x0, 0xb4d3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_proc_clear_refs_operations_internal(0xffffffffffffffff, 0x0, 0xffffff4b) write$auto(0x3, 0x0, 0xfdef) pread64$auto(r3, &(0x7f0000000100)='/proc/comedi\x00', 0xffff, 0xa) setuid$auto(r0) r4 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/lru_gen\x00', 0x12b902, 0x0) r5 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/prev\x00', 0xd80, 0x0) write$auto(r5, &(0x7f0000000000)='+*,-@,(}{+\xf2\\^6#\\*\x00', 0x81) write$auto_lru_gen_rw_fops_vmscan(r4, 0x0, 0x0) 14.513463899s ago: executing program 6 (id=10460): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010005000000fbdbdf2504fdff0008000c00020000003895678ed8eec378aa7d08ddfee9"], 0x1c}, 0x1, 0x0, 0x0, 0x44004811}, 0x40000c0) 14.026580933s ago: executing program 6 (id=10464): r0 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, 0x0, 0x121c01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x4, 0x0, 0xffffffff, 0x0, 0x0) sendmsg$auto_NETDEV_CMD_NAPI_GET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYBLOB="01002dbd7000fba400000000f2ff0000021f4de56a4703000000d6f3110aa45aeb6b5e9bd8abc396aa49249256bdf3aa705dd10c661480cb20a3c8f0eca3d46ee322e8719e1239716cd1307d8553a60d7af3b758fd1e98676fd4359291"], 0x1c}}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x2682, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)={0x18, r4, 0x1, 0x70bd2e, 0x25dfdbfc, {}, [@HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) getpid() msgctl$auto(0xa, 0x0, &(0x7f00000003c0)={{0x9, 0x0, 0xee00, 0x6, 0x4, 0x101, 0x2}, &(0x7f00000001c0)=0x6, &(0x7f0000000240)=0x2, 0x91, 0x7, 0x0, 0x0, 0x38, 0x8000, 0x4, 0x4, @inferred=0xffffffffffffffff, @raw=0x8}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r6) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x28, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40d0}, 0x40000) close_range$auto(0x2, 0x8000, 0x0) io_uring_register$auto(0x2, 0xb, 0x0, 0x7f) r8 = openat$auto(r2, &(0x7f00000004c0)='./file0\x00', 0x3ff, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000024c0)={0x8a4, r7, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x9}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_FILS_KEK={0x14, 0xf2, "dcbfb7cfece3989e2f7aed1f4d10a8e9"}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x7d3, 0x84, 0x0, 0x1, [@typed={0x8, 0xe7, 0x0, 0x0, @fd=r8}, @generic="0f5d60ee2e0417a4320fec83a31ea58852ca2fded43264517853daafe5b3b3b129c5aa98e8121b2ee31d976e191dc22e74752bc959cc238142d662b0565e247df43176160d01f06cbd80946c660b639a868f4db27cf68d2b6a8dbfc0b4e2b2f68e2a2d96bdfe531c13300885d183607048815d95ab3d8d13736b7ffd0fef5ee012a3c27c698d8b1438707340d69807974521bac8c07904c76a80558c83b72301b6852901e0a0b400920c99e24a06ac2aeeced74cb4ab4bb981331845439210d713a1d8ad9314f8ce55e61ca80a332cfcb23d18e5b08bb93096f6123a9b", @generic="3dcd5840e8353d163d08c63dcdac67d74754bfdb6e2dcb51bba8cd878907c1b10f23591d7dfe4f67ebb66430bcafd17ae2ba87f18fe5cfccbf84437dfa1dd6a50c4f3224e2666541d75ae47e40af89c22536ce04ffef5cadb08035bb9595378c7412a0156478bc9f804ee9ef3b598527418b6efb5ca70f7e25a5b0e8", @generic="5c4e4290c121133c4af730798327f3e2edf81d642acc370214f967b3cebc6f9acfc435ee07d1d1b670db132fb14d1a8df12bf83261dea0fbcff08b4b5fc98596bc", @nested={0x57b, 0x89, 0x0, 0x1, [@nested={0x44d, 0x14b, 0x0, 0x1, [@nested={0x10, 0xac, 0x0, 0x1, [@nested={0x4, 0x13e}, @nested={0x4, 0x15}, @nested={0x4, 0x4}]}, @nested={0x16a, 0x5e, 0x0, 0x1, [@generic="c243f7c5262c5ec1e7ec81b3a24b35c1e9357529aaeb0074eb9cb6cbc134e1b33fe1aae1388acb58973a6f8abca5e14077117c126aa25187a2188b744358ed775429be981c02b5700bb8bb97aeb7e50f210d43e7c359169dfc6e9d7ab4e0854a5f2f7a2c0f91b06b203d79add3abc3524dfe25088e830c", @typed={0xc, 0x10f, 0x0, 0x0, @u64=0xe9e}, @typed={0x8, 0x132, 0x0, 0x0, @fd=r0}, @generic="aa8eff01e1f50cdef33256825e03175e7a00f24cf4590a6c427b93cd915cf353ce833a6670adfabd0afaa5d2b54906025acf91651704ca1ec895e26cb5b98f5e7a687e8a3c963ab67c60815bded938181a7c0024bad75f25c0e80f5b7d0aa674848247cc9e8369a72e3ccdd5f91a2e6c05451b7f3a006f5825f089b458c339e68940b2d0854bfed6fb365c00b7778797166f1d308df4cd551b702a8c6301ab5f75451da5c830046139699e704e6ecf60a225c3bc03f4f19d0e37185be439c0ab3515c580142022a4bb575efcfb658fd328cac38f7c0460dae7bbe6"]}, @nested={0x8, 0xd9, 0x0, 0x1, [@nested={0x4, 0xcd}]}, @typed={0x14, 0x9b, 0x0, 0x0, @ipv6=@mcast2}, @generic="63998faccd7b4e7889c0b3dd257d605329e298324a8459692259a49d3e4df94c5d20b9e98058b47e47ed518db87247d9f4f485f7533399c0f8d75aa942756eedbb0ec8fcf3f736ea2e171597adc5015f754f25972630430eb2f745a07ddbdb9e242f25dbe347277ef63b06472b23087a21442b9011ca4a2d6f70712c9a4723d5250814dc8d57ff86579110f5fefc8fd16722de109b610935d48c071f71ccc2760649bd7efbf6336f92b9b05cd5", @typed={0x8, 0x13e, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x14, 0x115, 0x0, 0x0, @ipv6=@empty}, @generic="9e199e8161fefe06c106bc2733f795482597150cec785d9dfae7a2c1b99e750c1257562e7653d5d5cc0015f1406b242a2d5820eac6e1a781ba26fdf7c2c909d9dd0dfee3aafe2c8bf82824a576e0bd3ad80765cd91ef6670d863f6ed15902385180ab242556ccf1a4ba3f519ea018601f681eb0f2bb26b1e9ce6f1514861bc1ccea1c5e930f90ba48cb933b5f8ad29af84aa4301ffec9eabe91d5731f1c082ce3716aab85dabb342e82d021ff3f9759613241abfd58775f6b90fb8b792becd6cebd26704e1cda630b479ef53c300b748b37b8535f846de7f978cab85", @nested={0x104, 0xa0, 0x0, 0x1, [@typed={0x8, 0x2b, 0x0, 0x0, @pid}, @typed={0xc, 0x133, 0x0, 0x0, @u64=0x5}, @generic="76e6b496f941a89add33b2b5a861ff33514131070d446cb47c19ea7947c773db372e4c24a4e5d5636ee66bda02ca26767e5bf3bd2f99ad05d7c17327038d65dfe40abdac9bb2fe5c51c49fbaa7f52422c86ba489857825d6754c5c928b174a2cc253fa2d6c860b434a5f1932b8b19649498be0f52f376a472b869c0e1e8804dfe3164d2af8ad08eecd9da59c2beca4357b78ebdb41da83b65d980aea632589c222f6a5ea4da92fd31cf11a7ec9eb65a6cac77f8eb1c4a2d6007f1a797a6c3114ee3f785b26e88bc12e7d7a98c4b95a35b1daaa3cab0f4cee71f1bda7", @typed={0x8, 0x96, 0x0, 0x0, @pid=r5}, @typed={0x8, 0xf9, 0x0, 0x0, @ipv4=@local}]}, @typed={0x7, 0x5, 0x0, 0x0, @str=':]\x00'}]}, @nested={0x4, 0xd6}, @typed={0x4, 0x70}, @nested={0x4, 0x14a}, @typed={0x8, 0x9d, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x8, 0x101, 0x0, 0x0, @u32=0x4}, @typed={0xa, 0x12c, 0x0, 0x0, @str='\\..:.\x00'}, @generic="b16b2d1f1d4c5501e2c06881e31525160c377c52280fc2c5cc2de1bd87cc62aeeb380fe9b65de1d9e3198b1099ee0d33c7d87b723635c70702e3edfbacc9de0249ef32ea08c36a54a4e8df379718ed1e97558c0e49a6ad0358c312d0c798e533a53981b192ffcbe01b963bc5de35bc65142f6169022a667d6e3d022fedd4b30eaeb7abc809f8460275243f5e274b2ef6bdb52b68efb62aadd39791dac51db9218b0cc705b1a9dd9617b149531b65680fed43c2335da19a675b17f4804ce1a588aa81f66d194f0d930a82cf400bc5d18f2470dd174fe359a102cb59c63c0f824f210ec09dca4280a8b63c99941666664b6c62230b1320e5", @typed={0x8, 0xbd, 0x0, 0x0, @u32=0x1}]}, @typed={0x8, 0x4d, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="3eff1a694b4573ed910330f5b7ee7f306b5bd2dfadeb4be9aab4d0fbecad1dbe80e1656c9d2e6729e5a2debdeb37143dcbcf86eff25628352ffa61669ded6f41e8f3ee70a378b4db90fa37ae2af0b29ae31ea75d36d637a7de19bcbe5214eda483a554f26e8dc3bcdf55b15b9aae470b3a017a4d7895dcb5dde552d7f6b95ecb5ecb484cebf02e4c0ba3cc1d261778edf611b0f8f94510c885220e4cf73c3605607f324bc22c7dc371"]}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x89, 0xbb, "290777d8b19b3514a6193813235cc6e72c140f22c6e8bccfbaf6c7536dba21cde1b04f7815bb85eb0426b89c562f9ecaa24dedafa14c5cfeffa97c21bbd42b350353f2162a1f7b872d9cdf32b4db4387537436af41afec80410aa859b1514af4eee01aa4261beffcc02a7869162647c54c1ceafae0249dea92be9e07c9432b71a3cef379e6"}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}]}, 0x8a4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 13.257407805s ago: executing program 6 (id=10471): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x106) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bond0\x00'}) mmap$auto(0x0, 0x4, 0x9, 0xeb1, 0x401, 0x7ffe) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = fanotify_init$auto(0x1f53, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x0) r2 = openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim2/ports/0/udp_ports_reset\x00', 0x12002, 0x0) fanotify_mark$auto(r2, 0x8, 0x9, r1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r3 = socket(0x10, 0x2, 0x15) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) sysfs$auto(0x2, 0x4, 0x4) mincore$auto(0x1000, 0x8001, 0x0) io_uring_enter$auto(r3, 0x90, 0xcd00, 0x7, 0x0, 0xffffffffffffffff) socket(0xf, 0x80000, 0x80010000) timer_settime$auto(0xffff, 0x5, &(0x7f0000000000)={{0x6, 0xfffffffffffffe00}, {0x3, 0xf}}, &(0x7f0000000080)={{0x1000}, {0x1, 0x3}}) 13.091369322s ago: executing program 6 (id=10474): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3ff, 0x8000) socket(0xa, 0x5, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140), 0x55) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1a000, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0xfffffff5) connect$auto(0x3, &(0x7f0000000180), 0x55) 9.777139928s ago: executing program 3 (id=10491): socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) ioctl$auto(0x3, 0x5411, 0x26) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CTRL_CMD_GETFAMILY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="efff"], 0x1c}, 0x1, 0x0, 0x0, 0x20040880}, 0x800) read$auto(r0, 0x0, 0x2005) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x78d082, 0x0) ioctl$auto_evdev_fops_evdev(r1, 0x40104593, 0x0) 9.516741789s ago: executing program 3 (id=10492): r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x6e) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000dc0)={0x3c, r0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_MODULE_EEPROM_LENGTH={0x8, 0x3, 0x7}, @ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0xb2}, @ETHTOOL_A_MODULE_EEPROM_HEADER={0x11, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004084}, 0x82) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x2, 0x0) getsockopt$auto(0x4, 0x1, 0x47, 0x0, 0x0) r2 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r3 = socket(0x2, 0x3, 0xa) close_range$auto(0x2, 0xfffffffffffff000, 0x2) bpf$auto(0x8000000000000020, 0xffffffffffffffff, 0x0) creat$auto(&(0x7f0000000040)='X))\x00', 0x5) epoll_ctl$auto(r3, 0x8, r3, &(0x7f0000000000)={0x693, 0x7}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) setreuid$auto(0x6, 0xa) socket(0x2b, 0x1, 0x1) getsockopt$auto(0x4, 0x6, 0x2a, 0xfffffffffffffffc, 0x0) pread64$auto(r2, &(0x7f0000000000)='\x00', 0x100000000, 0xe) readv$auto(r2, &(0x7f00000000c0)={&(0x7f0000000040)="c523097ef0c53f9081c9c8e7c48bf8700e8ba2fabc5d8d63ca7cd05ff36a98cc66e258d95cade831e417804084805c8212e681907c7ebad056c623cb3e52a6037a9fdacc7fa9c000094b2a98366271dc50a6e8cb5d77e4af687643ab78ab7d0fcd55144d6826ec7e6446f53975313c24e8f46ebdf1887350ceac141989c4", 0x4}, 0x200) 9.274113708s ago: executing program 3 (id=10493): r0 = socket(0x10, 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/modalias\x00', 0x80000, 0x0) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) socketpair$auto(0x1, 0x5, 0x9, 0x0) preadv$auto(0x40000000000003, 0x0, 0x6, 0x8, 0x5) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r3 = openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/free_buffer\x00', 0x200, 0x0) mprotect$auto(0x1ffff000, 0x8000000000002001, 0x4) socket(0x2b, 0x1, 0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40080, 0x0) openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x602742, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) unshare$auto(0x60a767c1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto(r4, 0x0, 0xb) close_range$auto(r4, r3, 0x9) close_range$auto(0x2, 0x8, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000000)=""/53, 0x35) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ifb1/queues/tx-0/byte_queue_limits/limit_min\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000001100)=""/4105, 0x1009) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f000000a500), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r5, &(0x7f000000a5c0)={0x0, 0x0, &(0x7f000000a580)={&(0x7f0000000080)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x20008000) sendmsg$auto_NL80211_CMD_ADD_LINK_STA(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x560, r7, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_FRAME_MATCH={0x16, 0x5b, "de29c66aeabc42dbc9f2ac964ee726e5d7cc"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x6}, @NL80211_ATTR_SAR_SPEC={0x514, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0xfffffdba}, @NL80211_SAR_ATTR_SPECS={0x118, 0x2, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x16}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1ae}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xf9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6ec}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xe}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x200}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x60}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x80000001}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x1a3}, @NL80211_SAR_ATTR_SPECS={0x4c, 0x2, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xc}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x10}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffff370b}]}]}, @NL80211_SAR_ATTR_SPECS={0x178, 0x2, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xa}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x200}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xd}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x101}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x48}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x80000000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x40}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x76da}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x17}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x80000001}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8405}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x40}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffffff9f}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9f480000}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1a6a170}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffff9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xa7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfffffffa}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffffff81}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffffb}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xe}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x101}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1000}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}]}]}, @NL80211_SAR_ATTR_SPECS={0x198, 0x2, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x47}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xb}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7fff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1bc}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4008}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1328}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x800}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x400}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x45c}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xe6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xa55}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xf}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x457}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1000}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x62}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1d}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xdc09}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xd169}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffffe}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x28f8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x10}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3ac0737c}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x100}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x401}, @NL80211_SAR_ATTR_SPECS={0x7c, 0x2, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x40}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8000}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffffffee}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfffffffd}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8000}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}]}]}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xfffff32e}]}, 0x560}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) 9.02654367s ago: executing program 9 (id=10496): openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, 0x0, 0x80a01, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x8a880, 0x0) chown$auto(0x0, 0x0, 0x0) read$auto(0x3, 0x0, 0x80) syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f00000000c0), 0xffffffffffffffff) r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x0) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) syz_genetlink_get_family_id$auto_cifs(0x0, r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(0xffffffffffffffff, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x408d1}, 0x4010) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x101, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$auto(0x4, 0x0, 0x80) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sysinfo$auto(0x0) ioctl$auto(r1, 0x900064b9, 0x71fc) waitid$auto(0x3, 0xffffffffffffffff, 0x0, 0x1, 0x0) 8.871642186s ago: executing program 3 (id=10497): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x100000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) stat$auto(0x0, 0x0) madvise$auto(0x0, 0x2003f0, 0x11) ioctl$auto_RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x8, 0x300000000000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000380)={0x4, 0x3ff, [{0xffffffffffffffff}]}) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), r0) r1 = io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8000, 0x0) ioctl$auto(0x3, 0xc0481273, 0x38) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x5, 0x1ff, 0x7, 0x5, 0x4909b6f8, 0x1ffdd, 0x5, 0x3, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x4080, 0x4, 0x0, 0x7, 0x2000, 0x200, 0x8001, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x1000002000, 0x0, 0x5, 0x70624ce7, 0xefde, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xee, 0xfffffffffffffffd, 0x400000000005b4, 0x8, 0x0, 0x0, 0x0, 0x6, 0xffffffffbfffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0xb, 0xa38, 0x0, 0x6, 0xfffffffffffffffc, 0x2, 0x3, 0x4, 0x0, 0x9]}, 0x1fe, 0xd) r3 = socket(0x10, 0x2, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r2, @ANYRESHEX=r1, @ANYRES16=r3, @ANYRESDEC=r3, @ANYRESOCT=r3, @ANYRES64=r2, @ANYBLOB="1c1600990353513648c0ea8f174af65d6a7fc16f7be362dff7e33c6f96dbd80459"], 0x1ac}}, 0x40000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101300, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000040)=""/192, 0xc0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000100)=""/31, 0x1f) recvmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000000), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x107601, 0x0) ioctl$auto(0x3, 0x1276, 0x7) 7.741588224s ago: executing program 3 (id=10498): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x10000006, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyzf\x00', 0x28800, 0x0) getuid() openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/lockd/nlm_end_grace\x00', 0xc0000, 0x0) close_range$auto(0x2, 0x8, 0x0) getuid() r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x100, 0x0) read$auto_proc_mem_operations_base(r0, &(0x7f0000000080)=""/51, 0x33) setfsgid$auto(0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0xfffffffffffffffe, 0x8, 0x1000000004, 0xbb, 0x2, 0x8000) tkill$auto(0x1, 0x7) socketpair$auto(0x1e, 0x10000, 0x551, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(r1, 0x0, 0x10000007, 0xe, 0x0) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0x22040, 0x75) pipe2$auto(&(0x7f0000000040), 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.408191106s ago: executing program 9 (id=10499): r0 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, 0x0, 0x121c01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x4, 0x0, 0xffffffff, 0x0, 0x0) sendmsg$auto_NETDEV_CMD_NAPI_GET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYBLOB="01002dbd7000fba400000000f2ff0000021f4de56a4703000000d6f3110aa45aeb6b5e9bd8abc396aa49249256bdf3aa705dd10c661480cb20a3c8f0eca3d46ee322e8719e1239716cd1307d8553a60d7af3b758fd1e98676fd4359291"], 0x1c}}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x2682, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)={0x18, r4, 0x1, 0x70bd2e, 0x25dfdbfc, {}, [@HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) getpid() msgctl$auto(0xa, 0x0, &(0x7f00000003c0)={{0x9, 0x0, 0xee00, 0x6, 0x4, 0x101, 0x2}, &(0x7f00000001c0)=0x6, &(0x7f0000000240)=0x2, 0x91, 0x7, 0x0, 0x0, 0x38, 0x8000, 0x4, 0x4, @inferred=0xffffffffffffffff, @raw=0x8}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r6) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x28, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40d0}, 0x40000) close_range$auto(0x2, 0x8000, 0x0) io_uring_register$auto(0x2, 0xb, 0x0, 0x7f) r8 = openat$auto(r2, &(0x7f00000004c0)='./file0\x00', 0x3ff, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000024c0)={0x89c, r7, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x9}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_FILS_KEK={0x14, 0xf2, "dcbfb7cfece3989e2f7aed1f4d10a8e9"}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x7cb, 0x84, 0x0, 0x1, [@typed={0x8, 0xe7, 0x0, 0x0, @fd=r8}, @generic="0f5d60ee2e0417a4320fec83a31ea58852ca2fded43264517853daafe5b3b3b129c5aa98e8121b2ee31d976e191dc22e74752bc959cc238142d662b0565e247df43176160d01f06cbd80946c660b639a868f4db27cf68d2b6a8dbfc0b4e2b2f68e2a2d96bdfe531c13300885d183607048815d95ab3d8d13736b7ffd0fef5ee012a3c27c698d8b1438707340d69807974521bac8c07904c76a80558c83b72301b6852901e0a0b400920c99e24a06ac2aeeced74cb4ab4bb981331845439210d713a1d8ad9314f8ce55e61ca80a332cfcb23d18e5b08bb93096f6123a9b", @generic="3dcd5840e8353d163d08c63dcdac67d74754bfdb6e2dcb51bba8cd878907c1b10f23591d7dfe4f67ebb66430bcafd17ae2ba87f18fe5cfccbf84437dfa1dd6a50c4f3224e2666541d75ae47e40af89c22536ce04ffef5cadb08035bb9595378c7412a0156478bc9f804ee9ef3b598527418b6efb5ca70f7e25a5b0e8", @generic="5c4e4290c121133c4af730798327f3e2edf81d642acc370214f967b3cebc6f9acfc435ee07d1d1b670db132fb14d1a8df12bf83261dea0fbcff08b4b5fc98596bc", @nested={0x573, 0x89, 0x0, 0x1, [@nested={0x445, 0x14b, 0x0, 0x1, [@nested={0x10, 0xac, 0x0, 0x1, [@nested={0x4, 0x13e}, @nested={0x4, 0x15}, @nested={0x4, 0x4}]}, @nested={0x16a, 0x5e, 0x0, 0x1, [@generic="c243f7c5262c5ec1e7ec81b3a24b35c1e9357529aaeb0074eb9cb6cbc134e1b33fe1aae1388acb58973a6f8abca5e14077117c126aa25187a2188b744358ed775429be981c02b5700bb8bb97aeb7e50f210d43e7c359169dfc6e9d7ab4e0854a5f2f7a2c0f91b06b203d79add3abc3524dfe25088e830c", @typed={0xc, 0x10f, 0x0, 0x0, @u64=0xe9e}, @typed={0x8, 0x132, 0x0, 0x0, @fd=r0}, @generic="aa8eff01e1f50cdef33256825e03175e7a00f24cf4590a6c427b93cd915cf353ce833a6670adfabd0afaa5d2b54906025acf91651704ca1ec895e26cb5b98f5e7a687e8a3c963ab67c60815bded938181a7c0024bad75f25c0e80f5b7d0aa674848247cc9e8369a72e3ccdd5f91a2e6c05451b7f3a006f5825f089b458c339e68940b2d0854bfed6fb365c00b7778797166f1d308df4cd551b702a8c6301ab5f75451da5c830046139699e704e6ecf60a225c3bc03f4f19d0e37185be439c0ab3515c580142022a4bb575efcfb658fd328cac38f7c0460dae7bbe6"]}, @nested={0x8, 0xd9, 0x0, 0x1, [@nested={0x4, 0xcd}]}, @typed={0x14, 0x9b, 0x0, 0x0, @ipv6=@mcast2}, @generic="63998faccd7b4e7889c0b3dd257d605329e298324a8459692259a49d3e4df94c5d20b9e98058b47e47ed518db87247d9f4f485f7533399c0f8d75aa942756eedbb0ec8fcf3f736ea2e171597adc5015f754f25972630430eb2f745a07ddbdb9e242f25dbe347277ef63b06472b23087a21442b9011ca4a2d6f70712c9a4723d5250814dc8d57ff86579110f5fefc8fd16722de109b610935d48c071f71ccc2760649bd7efbf6336f92b9b05cd5", @typed={0x8, 0x13e, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x14, 0x115, 0x0, 0x0, @ipv6=@empty}, @generic="9e199e8161fefe06c106bc2733f795482597150cec785d9dfae7a2c1b99e750c1257562e7653d5d5cc0015f1406b242a2d5820eac6e1a781ba26fdf7c2c909d9dd0dfee3aafe2c8bf82824a576e0bd3ad80765cd91ef6670d863f6ed15902385180ab242556ccf1a4ba3f519ea018601f681eb0f2bb26b1e9ce6f1514861bc1ccea1c5e930f90ba48cb933b5f8ad29af84aa4301ffec9eabe91d5731f1c082ce3716aab85dabb342e82d021ff3f9759613241abfd58775f6b90fb8b792becd6cebd26704e1cda630b479ef53c300b748b37b8535f846de7f978cab85", @nested={0xf9, 0xa0, 0x0, 0x1, [@typed={0x8, 0x2b, 0x0, 0x0, @pid}, @generic="76e6b496f941a89add33b2b5a861ff33514131070d446cb47c19ea7947c773db372e4c24a4e5d5636ee66bda02ca26767e5bf3bd2f99ad05d7c17327038d65dfe40abdac9bb2fe5c51c49fbaa7f52422c86ba489857825d6754c5c928b174a2cc253fa2d6c860b434a5f1932b8b19649498be0f52f376a472b869c0e1e8804dfe3164d2af8ad08eecd9da59c2beca4357b78ebdb41da83b65d980aea632589c222f6a5ea4da92fd31cf11a7ec9eb65a6cac77f8eb1c4a2d6007f1a797a6c3114ee3f785b26e88bc12e7d7a98c4b95a35b1daaa3cab0f4cee71f1bda783", @typed={0x8, 0x96, 0x0, 0x0, @pid=r5}, @typed={0x8, 0xf9, 0x0, 0x0, @ipv4=@local}]}, @typed={0x7, 0x5, 0x0, 0x0, @str=':]\x00'}]}, @nested={0x4, 0xd6}, @typed={0x4, 0x70}, @nested={0x4, 0x14a}, @typed={0x8, 0x9d, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x8, 0x101, 0x0, 0x0, @u32=0x4}, @typed={0xa, 0x12c, 0x0, 0x0, @str='\\..:.\x00'}, @generic="b16b2d1f1d4c5501e2c06881e31525160c377c52280fc2c5cc2de1bd87cc62aeeb380fe9b65de1d9e3198b1099ee0d33c7d87b723635c70702e3edfbacc9de0249ef32ea08c36a54a4e8df379718ed1e97558c0e49a6ad0358c312d0c798e533a53981b192ffcbe01b963bc5de35bc65142f6169022a667d6e3d022fedd4b30eaeb7abc809f8460275243f5e274b2ef6bdb52b68efb62aadd39791dac51db9218b0cc705b1a9dd9617b149531b65680fed43c2335da19a675b17f4804ce1a588aa81f66d194f0d930a82cf400bc5d18f2470dd174fe359a102cb59c63c0f824f210ec09dca4280a8b63c99941666664b6c62230b1320e5", @typed={0x8, 0xbd, 0x0, 0x0, @u32=0x1}]}, @typed={0x8, 0x4d, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="3eff1a694b4573ed910330f5b7ee7f306b5bd2dfadeb4be9aab4d0fbecad1dbe80e1656c9d2e6729e5a2debdeb37143dcbcf86eff25628352ffa61669ded6f41e8f3ee70a378b4db90fa37ae2af0b29ae31ea75d36d637a7de19bcbe5214eda483a554f26e8dc3bcdf55b15b9aae470b3a017a4d7895dcb5dde552d7f6b95ecb5ecb484cebf02e4c0ba3cc1d261778edf611b0f8f94510c885220e4cf73c3605607f324bc22c7dc371"]}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x89, 0xbb, "290777d8b19b3514a6193813235cc6e72c140f22c6e8bccfbaf6c7536dba21cde1b04f7815bb85eb0426b89c562f9ecaa24dedafa14c5cfeffa97c21bbd42b350353f2162a1f7b872d9cdf32b4db4387537436af41afec80410aa859b1514af4eee01aa4261beffcc02a7869162647c54c1ceafae0249dea92be9e07c9432b71a3cef379e6"}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}]}, 0x89c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 6.854099694s ago: executing program 3 (id=10500): r0 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, 0x0, 0x121c01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x4, 0x0, 0xffffffff, 0x0, 0x0) sendmsg$auto_NETDEV_CMD_NAPI_GET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYBLOB="01002dbd7000fba400000000f2ff0000021f4de56a4703000000d6f3110aa45aeb6b5e9bd8abc396aa49249256bdf3aa705dd10c661480cb20a3c8f0eca3d46ee322e8719e1239716cd1307d8553a60d7af3b758fd1e98676fd4359291"], 0x1c}}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x2682, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)={0x18, r4, 0x1, 0x70bd2e, 0x25dfdbfc, {}, [@HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) getpid() msgctl$auto(0xa, 0x0, &(0x7f00000003c0)={{0x9, 0x0, 0xee00, 0x6, 0x4, 0x101, 0x2}, &(0x7f00000001c0)=0x6, &(0x7f0000000240)=0x2, 0x91, 0x7, 0x0, 0x0, 0x38, 0x8000, 0x4, 0x4, @inferred=0xffffffffffffffff, @raw=0x8}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r6) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x28, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40d0}, 0x40000) close_range$auto(0x2, 0x8000, 0x0) io_uring_register$auto(0x2, 0xb, 0x0, 0x7f) r8 = openat$auto(r2, &(0x7f00000004c0)='./file0\x00', 0x3ff, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000024c0)={0x89c, r7, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x9}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_FILS_KEK={0x14, 0xf2, "dcbfb7cfece3989e2f7aed1f4d10a8e9"}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x7cb, 0x84, 0x0, 0x1, [@typed={0x8, 0xe7, 0x0, 0x0, @fd=r8}, @generic="0f5d60ee2e0417a4320fec83a31ea58852ca2fded43264517853daafe5b3b3b129c5aa98e8121b2ee31d976e191dc22e74752bc959cc238142d662b0565e247df43176160d01f06cbd80946c660b639a868f4db27cf68d2b6a8dbfc0b4e2b2f68e2a2d96bdfe531c13300885d183607048815d95ab3d8d13736b7ffd0fef5ee012a3c27c698d8b1438707340d69807974521bac8c07904c76a80558c83b72301b6852901e0a0b400920c99e24a06ac2aeeced74cb4ab4bb981331845439210d713a1d8ad9314f8ce55e61ca80a332cfcb23d18e5b08bb93096f6123a9b", @generic="3dcd5840e8353d163d08c63dcdac67d74754bfdb6e2dcb51bba8cd878907c1b10f23591d7dfe4f67ebb66430bcafd17ae2ba87f18fe5cfccbf84437dfa1dd6a50c4f3224e2666541d75ae47e40af89c22536ce04ffef5cadb08035bb9595378c7412a0156478bc9f804ee9ef3b598527418b6efb5ca70f7e25a5b0e8", @generic="5c4e4290c121133c4af730798327f3e2edf81d642acc370214f967b3cebc6f9acfc435ee07d1d1b670db132fb14d1a8df12bf83261dea0fbcff08b4b5fc98596bc", @nested={0x573, 0x89, 0x0, 0x1, [@nested={0x445, 0x14b, 0x0, 0x1, [@nested={0x10, 0xac, 0x0, 0x1, [@nested={0x4, 0x13e}, @nested={0x4, 0x15}, @nested={0x4, 0x4}]}, @nested={0x16a, 0x5e, 0x0, 0x1, [@generic="c243f7c5262c5ec1e7ec81b3a24b35c1e9357529aaeb0074eb9cb6cbc134e1b33fe1aae1388acb58973a6f8abca5e14077117c126aa25187a2188b744358ed775429be981c02b5700bb8bb97aeb7e50f210d43e7c359169dfc6e9d7ab4e0854a5f2f7a2c0f91b06b203d79add3abc3524dfe25088e830c", @typed={0xc, 0x10f, 0x0, 0x0, @u64=0xe9e}, @typed={0x8, 0x132, 0x0, 0x0, @fd=r0}, @generic="aa8eff01e1f50cdef33256825e03175e7a00f24cf4590a6c427b93cd915cf353ce833a6670adfabd0afaa5d2b54906025acf91651704ca1ec895e26cb5b98f5e7a687e8a3c963ab67c60815bded938181a7c0024bad75f25c0e80f5b7d0aa674848247cc9e8369a72e3ccdd5f91a2e6c05451b7f3a006f5825f089b458c339e68940b2d0854bfed6fb365c00b7778797166f1d308df4cd551b702a8c6301ab5f75451da5c830046139699e704e6ecf60a225c3bc03f4f19d0e37185be439c0ab3515c580142022a4bb575efcfb658fd328cac38f7c0460dae7bbe6"]}, @nested={0x8, 0xd9, 0x0, 0x1, [@nested={0x4, 0xcd}]}, @typed={0x14, 0x9b, 0x0, 0x0, @ipv6=@mcast2}, @generic="63998faccd7b4e7889c0b3dd257d605329e298324a8459692259a49d3e4df94c5d20b9e98058b47e47ed518db87247d9f4f485f7533399c0f8d75aa942756eedbb0ec8fcf3f736ea2e171597adc5015f754f25972630430eb2f745a07ddbdb9e242f25dbe347277ef63b06472b23087a21442b9011ca4a2d6f70712c9a4723d5250814dc8d57ff86579110f5fefc8fd16722de109b610935d48c071f71ccc2760649bd7efbf6336f92b9b05cd5", @typed={0x8, 0x13e, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x14, 0x115, 0x0, 0x0, @ipv6=@empty}, @generic="9e199e8161fefe06c106bc2733f795482597150cec785d9dfae7a2c1b99e750c1257562e7653d5d5cc0015f1406b242a2d5820eac6e1a781ba26fdf7c2c909d9dd0dfee3aafe2c8bf82824a576e0bd3ad80765cd91ef6670d863f6ed15902385180ab242556ccf1a4ba3f519ea018601f681eb0f2bb26b1e9ce6f1514861bc1ccea1c5e930f90ba48cb933b5f8ad29af84aa4301ffec9eabe91d5731f1c082ce3716aab85dabb342e82d021ff3f9759613241abfd58775f6b90fb8b792becd6cebd26704e1cda630b479ef53c300b748b37b8535f846de7f978cab85", @nested={0xf9, 0xa0, 0x0, 0x1, [@typed={0x8, 0x2b, 0x0, 0x0, @pid}, @generic="76e6b496f941a89add33b2b5a861ff33514131070d446cb47c19ea7947c773db372e4c24a4e5d5636ee66bda02ca26767e5bf3bd2f99ad05d7c17327038d65dfe40abdac9bb2fe5c51c49fbaa7f52422c86ba489857825d6754c5c928b174a2cc253fa2d6c860b434a5f1932b8b19649498be0f52f376a472b869c0e1e8804dfe3164d2af8ad08eecd9da59c2beca4357b78ebdb41da83b65d980aea632589c222f6a5ea4da92fd31cf11a7ec9eb65a6cac77f8eb1c4a2d6007f1a797a6c3114ee3f785b26e88bc12e7d7a98c4b95a35b1daaa3cab0f4cee71f1bda783", @typed={0x8, 0x96, 0x0, 0x0, @pid=r5}, @typed={0x8, 0xf9, 0x0, 0x0, @ipv4=@local}]}, @typed={0x7, 0x5, 0x0, 0x0, @str=':]\x00'}]}, @nested={0x4, 0xd6}, @typed={0x4, 0x70}, @nested={0x4, 0x14a}, @typed={0x8, 0x9d, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x8, 0x101, 0x0, 0x0, @u32=0x4}, @typed={0xa, 0x12c, 0x0, 0x0, @str='\\..:.\x00'}, @generic="b16b2d1f1d4c5501e2c06881e31525160c377c52280fc2c5cc2de1bd87cc62aeeb380fe9b65de1d9e3198b1099ee0d33c7d87b723635c70702e3edfbacc9de0249ef32ea08c36a54a4e8df379718ed1e97558c0e49a6ad0358c312d0c798e533a53981b192ffcbe01b963bc5de35bc65142f6169022a667d6e3d022fedd4b30eaeb7abc809f8460275243f5e274b2ef6bdb52b68efb62aadd39791dac51db9218b0cc705b1a9dd9617b149531b65680fed43c2335da19a675b17f4804ce1a588aa81f66d194f0d930a82cf400bc5d18f2470dd174fe359a102cb59c63c0f824f210ec09dca4280a8b63c99941666664b6c62230b1320e5", @typed={0x8, 0xbd, 0x0, 0x0, @u32=0x1}]}, @typed={0x8, 0x4d, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="3eff1a694b4573ed910330f5b7ee7f306b5bd2dfadeb4be9aab4d0fbecad1dbe80e1656c9d2e6729e5a2debdeb37143dcbcf86eff25628352ffa61669ded6f41e8f3ee70a378b4db90fa37ae2af0b29ae31ea75d36d637a7de19bcbe5214eda483a554f26e8dc3bcdf55b15b9aae470b3a017a4d7895dcb5dde552d7f6b95ecb5ecb484cebf02e4c0ba3cc1d261778edf611b0f8f94510c885220e4cf73c3605607f324bc22c7dc371"]}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x89, 0xbb, "290777d8b19b3514a6193813235cc6e72c140f22c6e8bccfbaf6c7536dba21cde1b04f7815bb85eb0426b89c562f9ecaa24dedafa14c5cfeffa97c21bbd42b350353f2162a1f7b872d9cdf32b4db4387537436af41afec80410aa859b1514af4eee01aa4261beffcc02a7869162647c54c1ceafae0249dea92be9e07c9432b71a3cef379e6"}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}]}, 0x89c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 6.589594493s ago: executing program 38 (id=10500): r0 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, 0x0, 0x121c01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x4, 0x0, 0xffffffff, 0x0, 0x0) sendmsg$auto_NETDEV_CMD_NAPI_GET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYBLOB="01002dbd7000fba400000000f2ff0000021f4de56a4703000000d6f3110aa45aeb6b5e9bd8abc396aa49249256bdf3aa705dd10c661480cb20a3c8f0eca3d46ee322e8719e1239716cd1307d8553a60d7af3b758fd1e98676fd4359291"], 0x1c}}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x2682, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)={0x18, r4, 0x1, 0x70bd2e, 0x25dfdbfc, {}, [@HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) getpid() msgctl$auto(0xa, 0x0, &(0x7f00000003c0)={{0x9, 0x0, 0xee00, 0x6, 0x4, 0x101, 0x2}, &(0x7f00000001c0)=0x6, &(0x7f0000000240)=0x2, 0x91, 0x7, 0x0, 0x0, 0x38, 0x8000, 0x4, 0x4, @inferred=0xffffffffffffffff, @raw=0x8}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r6) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x28, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40d0}, 0x40000) close_range$auto(0x2, 0x8000, 0x0) io_uring_register$auto(0x2, 0xb, 0x0, 0x7f) r8 = openat$auto(r2, &(0x7f00000004c0)='./file0\x00', 0x3ff, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000024c0)={0x89c, r7, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x9}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_FILS_KEK={0x14, 0xf2, "dcbfb7cfece3989e2f7aed1f4d10a8e9"}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x7cb, 0x84, 0x0, 0x1, [@typed={0x8, 0xe7, 0x0, 0x0, @fd=r8}, @generic="0f5d60ee2e0417a4320fec83a31ea58852ca2fded43264517853daafe5b3b3b129c5aa98e8121b2ee31d976e191dc22e74752bc959cc238142d662b0565e247df43176160d01f06cbd80946c660b639a868f4db27cf68d2b6a8dbfc0b4e2b2f68e2a2d96bdfe531c13300885d183607048815d95ab3d8d13736b7ffd0fef5ee012a3c27c698d8b1438707340d69807974521bac8c07904c76a80558c83b72301b6852901e0a0b400920c99e24a06ac2aeeced74cb4ab4bb981331845439210d713a1d8ad9314f8ce55e61ca80a332cfcb23d18e5b08bb93096f6123a9b", @generic="3dcd5840e8353d163d08c63dcdac67d74754bfdb6e2dcb51bba8cd878907c1b10f23591d7dfe4f67ebb66430bcafd17ae2ba87f18fe5cfccbf84437dfa1dd6a50c4f3224e2666541d75ae47e40af89c22536ce04ffef5cadb08035bb9595378c7412a0156478bc9f804ee9ef3b598527418b6efb5ca70f7e25a5b0e8", @generic="5c4e4290c121133c4af730798327f3e2edf81d642acc370214f967b3cebc6f9acfc435ee07d1d1b670db132fb14d1a8df12bf83261dea0fbcff08b4b5fc98596bc", @nested={0x573, 0x89, 0x0, 0x1, [@nested={0x445, 0x14b, 0x0, 0x1, [@nested={0x10, 0xac, 0x0, 0x1, [@nested={0x4, 0x13e}, @nested={0x4, 0x15}, @nested={0x4, 0x4}]}, @nested={0x16a, 0x5e, 0x0, 0x1, [@generic="c243f7c5262c5ec1e7ec81b3a24b35c1e9357529aaeb0074eb9cb6cbc134e1b33fe1aae1388acb58973a6f8abca5e14077117c126aa25187a2188b744358ed775429be981c02b5700bb8bb97aeb7e50f210d43e7c359169dfc6e9d7ab4e0854a5f2f7a2c0f91b06b203d79add3abc3524dfe25088e830c", @typed={0xc, 0x10f, 0x0, 0x0, @u64=0xe9e}, @typed={0x8, 0x132, 0x0, 0x0, @fd=r0}, @generic="aa8eff01e1f50cdef33256825e03175e7a00f24cf4590a6c427b93cd915cf353ce833a6670adfabd0afaa5d2b54906025acf91651704ca1ec895e26cb5b98f5e7a687e8a3c963ab67c60815bded938181a7c0024bad75f25c0e80f5b7d0aa674848247cc9e8369a72e3ccdd5f91a2e6c05451b7f3a006f5825f089b458c339e68940b2d0854bfed6fb365c00b7778797166f1d308df4cd551b702a8c6301ab5f75451da5c830046139699e704e6ecf60a225c3bc03f4f19d0e37185be439c0ab3515c580142022a4bb575efcfb658fd328cac38f7c0460dae7bbe6"]}, @nested={0x8, 0xd9, 0x0, 0x1, [@nested={0x4, 0xcd}]}, @typed={0x14, 0x9b, 0x0, 0x0, @ipv6=@mcast2}, @generic="63998faccd7b4e7889c0b3dd257d605329e298324a8459692259a49d3e4df94c5d20b9e98058b47e47ed518db87247d9f4f485f7533399c0f8d75aa942756eedbb0ec8fcf3f736ea2e171597adc5015f754f25972630430eb2f745a07ddbdb9e242f25dbe347277ef63b06472b23087a21442b9011ca4a2d6f70712c9a4723d5250814dc8d57ff86579110f5fefc8fd16722de109b610935d48c071f71ccc2760649bd7efbf6336f92b9b05cd5", @typed={0x8, 0x13e, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x14, 0x115, 0x0, 0x0, @ipv6=@empty}, @generic="9e199e8161fefe06c106bc2733f795482597150cec785d9dfae7a2c1b99e750c1257562e7653d5d5cc0015f1406b242a2d5820eac6e1a781ba26fdf7c2c909d9dd0dfee3aafe2c8bf82824a576e0bd3ad80765cd91ef6670d863f6ed15902385180ab242556ccf1a4ba3f519ea018601f681eb0f2bb26b1e9ce6f1514861bc1ccea1c5e930f90ba48cb933b5f8ad29af84aa4301ffec9eabe91d5731f1c082ce3716aab85dabb342e82d021ff3f9759613241abfd58775f6b90fb8b792becd6cebd26704e1cda630b479ef53c300b748b37b8535f846de7f978cab85", @nested={0xf9, 0xa0, 0x0, 0x1, [@typed={0x8, 0x2b, 0x0, 0x0, @pid}, @generic="76e6b496f941a89add33b2b5a861ff33514131070d446cb47c19ea7947c773db372e4c24a4e5d5636ee66bda02ca26767e5bf3bd2f99ad05d7c17327038d65dfe40abdac9bb2fe5c51c49fbaa7f52422c86ba489857825d6754c5c928b174a2cc253fa2d6c860b434a5f1932b8b19649498be0f52f376a472b869c0e1e8804dfe3164d2af8ad08eecd9da59c2beca4357b78ebdb41da83b65d980aea632589c222f6a5ea4da92fd31cf11a7ec9eb65a6cac77f8eb1c4a2d6007f1a797a6c3114ee3f785b26e88bc12e7d7a98c4b95a35b1daaa3cab0f4cee71f1bda783", @typed={0x8, 0x96, 0x0, 0x0, @pid=r5}, @typed={0x8, 0xf9, 0x0, 0x0, @ipv4=@local}]}, @typed={0x7, 0x5, 0x0, 0x0, @str=':]\x00'}]}, @nested={0x4, 0xd6}, @typed={0x4, 0x70}, @nested={0x4, 0x14a}, @typed={0x8, 0x9d, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x8, 0x101, 0x0, 0x0, @u32=0x4}, @typed={0xa, 0x12c, 0x0, 0x0, @str='\\..:.\x00'}, @generic="b16b2d1f1d4c5501e2c06881e31525160c377c52280fc2c5cc2de1bd87cc62aeeb380fe9b65de1d9e3198b1099ee0d33c7d87b723635c70702e3edfbacc9de0249ef32ea08c36a54a4e8df379718ed1e97558c0e49a6ad0358c312d0c798e533a53981b192ffcbe01b963bc5de35bc65142f6169022a667d6e3d022fedd4b30eaeb7abc809f8460275243f5e274b2ef6bdb52b68efb62aadd39791dac51db9218b0cc705b1a9dd9617b149531b65680fed43c2335da19a675b17f4804ce1a588aa81f66d194f0d930a82cf400bc5d18f2470dd174fe359a102cb59c63c0f824f210ec09dca4280a8b63c99941666664b6c62230b1320e5", @typed={0x8, 0xbd, 0x0, 0x0, @u32=0x1}]}, @typed={0x8, 0x4d, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="3eff1a694b4573ed910330f5b7ee7f306b5bd2dfadeb4be9aab4d0fbecad1dbe80e1656c9d2e6729e5a2debdeb37143dcbcf86eff25628352ffa61669ded6f41e8f3ee70a378b4db90fa37ae2af0b29ae31ea75d36d637a7de19bcbe5214eda483a554f26e8dc3bcdf55b15b9aae470b3a017a4d7895dcb5dde552d7f6b95ecb5ecb484cebf02e4c0ba3cc1d261778edf611b0f8f94510c885220e4cf73c3605607f324bc22c7dc371"]}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x89, 0xbb, "290777d8b19b3514a6193813235cc6e72c140f22c6e8bccfbaf6c7536dba21cde1b04f7815bb85eb0426b89c562f9ecaa24dedafa14c5cfeffa97c21bbd42b350353f2162a1f7b872d9cdf32b4db4387537436af41afec80410aa859b1514af4eee01aa4261beffcc02a7869162647c54c1ceafae0249dea92be9e07c9432b71a3cef379e6"}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}]}, 0x89c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 6.077204305s ago: executing program 8 (id=10504): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x3, 0xa) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x0) connect$auto(0x3, &(0x7f00000018c0), 0x55) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0x3, &(0x7f00000000c0)={{0x0, 0x9, 0x0, 0x105, 0x0, 0x4, 0x3}, 0xed7138c}, 0x46, 0x1000000) 5.921884676s ago: executing program 9 (id=10505): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x6, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x189900, 0x0) lseek$auto(r1, 0x5, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) select$auto(0x5, &(0x7f0000000080)={[0x20000009, 0xfffffffffffffffc, 0x9, 0x1, 0xc, 0x3, 0x3, 0x1ffe000, 0xcac, 0x2, 0xf, 0xf, 0x0, 0x202, 0x6, 0x1]}, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r2, 0x0, 0x200000c0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x3, 0x0) poll$auto(0x0, 0x7, 0x8) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xc008aec1, 0x88) socket(0x10, 0x2, 0x14) listen$auto(0x3, 0x81) read$auto(0x3, 0x0, 0x80) ppoll$auto(0x0, 0xc, 0x0, 0x0, 0x8) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0x0) write$auto(r3, 0x0, 0x8a) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) 5.796022142s ago: executing program 8 (id=10506): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0xfffffffe) open(0x0, 0x22240, 0x155) socket(0x2, 0x3, 0xa) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x0) connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x0, @multicast1}, 0x55) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_options\x00', 0x2, 0x0) write$auto_tracing_iter_fops_trace(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x2, 0x2, 0x88) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) setsockopt$auto(r3, 0x1, 0x3e, 0x0, 0x6) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) sendmmsg$auto(0x3, 0x0, 0x3, 0x1c) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x240048d5) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7002ffdbdf2502d6322c09"], 0x24}, 0x1, 0x0, 0x0, 0x40000061}, 0x8004) r4 = socket(0x10, 0x2, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) select$auto(0x5, &(0x7f0000000080)={[0x20000009, 0xfffffffffffffffc, 0x9, 0x5, 0xc, 0x3, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x202, 0x6, 0x1]}, 0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) r5 = openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000640), 0x201, 0x0) write$auto_kernel_debug_fops_orangefs_debugfs(r5, &(0x7f0000000680)='/', 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x3, 0x67) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x200000000008000) sendmmsg$auto(0x3, &(0x7f00000000c0)={{0x0, 0x9, 0x0, 0x105, 0x0, 0x4, 0x3}, 0xed7138c}, 0x46, 0x0) 4.806119364s ago: executing program 9 (id=10507): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x6, 0x0) setsockopt$auto(0x4, 0x1, 0xf, &(0x7f00000002c0)='\x05\x00\x06J\xd4~&\xe3a\xe9\x14\x01\xdc\x85\r\x00\x00\x00\x00\x00\xee\xcc8\xe2\x7fi\x01\xaf\x06E\xff\xff\xff\xff\xff\xff\xff\xff\tL\xb9\x8dv\xf2\x93\x7f\xe18\b\x00\x00\x00\x00\x00\x00\x00\xbd\x94\x06\xc3\xac\xc0\xd9\xa1J2_\xe3\xae\x00\x00\x00\x00a\x93d$\x05\x8a\a\x00R\b\x0e\xfd\x06\xca`\xf6\xfc\x91 g\xa5m\x1a9H\x14\x14\x97\xc1\xc5\x94\x91 \x968C\xc1v!w\x0f\xcc\xf5\xb5!F$\xa4\x9e\xf7\x98~\x98\x88\x06\x14@N\xddM*\xfd\x85R\xb6koe\xe8\xfaF\xf0\\\x9c\x85\xc7+\x81\xa4+\x9f-\x00\xedS\xeb\x1c2\xffy\xaa\x14n#\x1f\xde\x02\xd4\x87I\xb5V(\x00\xa9E\x14\xe3\xf8*\xfd\xcc\x0e\xe4\xbc\xa0\nv\xd9n\xf3\xf9\xed\xc5\x95\fT\xe4\xd6\xfa\x99I\x81\xb4\xb2\xff\xa2\xb3BL\xc1\x9c\x80U\x88\xdb\xcap\xcf\v\x00\x00\x00\x00\x00\x9f\xcf\xa4?\x86\x8d\x10\\\xc7\xb6\x93\t\x98\x8f\xb9B\xdb\x11\xae\xef/\xd5f7ok\x84\xcbddf\xe3\x9c\x1b\x13\xf3\xbdv\x83\xa3\x95o@\xe6\xb8B\x06k\x83\xd4\xad\'\x8b\xa9\xb2\xd38\xe3\xb6\xfb\xa0x\x06\xc7B4\x9e12\\\xd6\xecD\x8bV7D\x8a\x97\xa5\x17\xf6HC\xe0\x03\x00\x00\x00\"S\xc9\x01&\xb0S+\xa0\xf4\xb07o\x12{Q\xe5\xeb\x9b\x9d\xc2\xee0\xa7Y\x12\x1d\xcd\xfb', 0xd) socket(0x1, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x0, 0x0) fsopen$auto(0x0, 0x1) epoll_create$auto(0x2) sysfs$auto(0x2, 0x1e, 0x0) epoll_ctl$auto(0x5, 0x5, 0x8000000000000000, 0x0) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000000c0)={0x9, &(0x7f0000000040)={0x5, 0x9, 0x9, @inferred=r1}}) listen$auto(r0, 0x26da) r2 = socket(0x11, 0x3, 0x300) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x5, 0x20000000) timer_create$auto(0x0, &(0x7f0000000180)={@sival_int=0x7, @raw=0x7dd}, &(0x7f00000001c0)=0x6) setsockopt$auto(r2, 0x107, 0x11, 0x0, 0x8004) r4 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), r2) sendmsg$auto_GTP_CMD_NEWPDP(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r4, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_FAMILY={0x5, 0xd, 0x80}, @GTPA_VERSION={0x8, 0x2, 0x9}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 2.657641416s ago: executing program 9 (id=10508): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010005000000fbdbdf250400000020000c00020000003895678ed8eec378aa7d08ddfee9"], 0x1c}, 0x1, 0x0, 0x0, 0x44004811}, 0x40000c0) 2.235089362s ago: executing program 8 (id=10509): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/netfs/requests\x00', 0x8000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f00000004c0)=""/4096, 0x1000) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000200)=""/236, 0xec) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x106) r1 = open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x2000, 0xb5d1af1605322c72) r2 = open_by_handle_at$auto(r1, &(0x7f0000000040)={0x8, 0x2, "9700000000000000"}, 0x2) write$auto_dynamic_events_ops_trace_dynevent(r2, &(0x7f00000001c0)="655073ffff", 0x5) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) chroot$auto(&(0x7f0000000040)='.\x00') sendto$auto(0x3, 0x0, 0x79, 0x2, &(0x7f0000000440)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}}}, 0x20) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff) mincore$auto(0x1000, 0x8001, 0x0) io_uring_setup$auto(0x6a, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x90, 0xcd00, 0x7, 0x0, 0xffffffffffffffff) 1.400600314s ago: executing program 9 (id=10510): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x108000) (async) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x19d0, r0, 0x8000) (async) socket(0xa, 0x801, 0x100) (async) getpeername$auto(0x3, 0x0, 0x0) (async) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x7f, 0x200000000eb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0x18, 0x17) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x2c74, 0x401, 0x14000000000) (async) r1 = bpf$auto(0x23, 0x0, 0x101) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async) socket(0x25, 0xa, 0x2) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) memfd_create$auto(0x0, 0xe) connect$auto(0x3, &(0x7f00000000c0), 0x55) (async) r2 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x7}, @NL80211_ATTR_WDEV={0xc, 0x99, 0x8}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20}, 0x40) (async) madvise$auto(0x0, 0x24, 0xc01) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mmap$auto(0x0, 0x2020009, 0x20003, 0x4000000000000eb1, r1, 0x8400) 1.132429799s ago: executing program 8 (id=10511): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x5, 0x106) r0 = socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x5, &(0x7f0000000080)={0x2, 0xd, 0xe, 0x20006, 0x7, 0x7, 0xffffffffffffffff, [0x0, 0xfffffffe, 0xfffefffa], {0x6, 0x10000006, 0x5, 0xa, 0xb, 0x7f, 0x101, 0x6, 0x2}, {0x6d38, 0x1, 0x252, 0x3, 0xfffffff9, 0x40, 0xfffffe00, 0x10000008, 0xfffffffc}}) io_uring_register$auto(0x2, 0x21, 0x0, 0x1) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000040), r0) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000000), r1) r2 = socket(0x10, 0x2, 0x15) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/platform/reg-dummy/regulator/regulator.0/suspend_standby_state\x00', 0x700, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/4096, 0x1000) socketpair$auto(0x3, 0x5, 0x7, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mincore$auto(0x0, 0x9, 0x0) sysfs$auto(0x2, 0x4, 0x4) r4 = io_uring_setup$auto(0x6a, 0x0) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), r1) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r5, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@CTRL_ATTR_OP={0x8, 0xa, 0xfffffffd}, @CTRL_ATTR_OP={0x8, 0xa, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x4010) io_uring_enter$auto(r2, 0x90, 0xcd00, 0x7, 0x0, 0xffffffffffffffff) 778.502077ms ago: executing program 8 (id=10512): r0 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, 0x0, 0x121c01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x4, 0x0, 0xffffffff, 0x0, 0x0) sendmsg$auto_NETDEV_CMD_NAPI_GET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYBLOB="01002dbd7000fba400000000f2ff0000021f4de56a4703000000d6f3110aa45aeb6b5e9bd8abc396aa49249256bdf3aa705dd10c661480cb20a3c8f0eca3d46ee322e8719e1239716cd1307d8553a60d7af3b758fd1e98676fd4359291"], 0x1c}}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x2682, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)={0x18, r4, 0x1, 0x70bd2e, 0x25dfdbfc, {}, [@HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) getpid() msgctl$auto(0xa, 0x0, &(0x7f00000003c0)={{0x9, 0x0, 0xee00, 0x6, 0x4, 0x101, 0x2}, &(0x7f00000001c0)=0x6, &(0x7f0000000240)=0x2, 0x91, 0x7, 0x0, 0x0, 0x38, 0x8000, 0x4, 0x4, @inferred=0xffffffffffffffff, @raw=0x8}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r6) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x28, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40d0}, 0x40000) close_range$auto(0x2, 0x8000, 0x0) io_uring_register$auto(0x2, 0xb, 0x0, 0x7f) r8 = openat$auto(r2, &(0x7f00000004c0)='./file0\x00', 0x3ff, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000024c0)={0x89c, r7, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x9}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_FILS_KEK={0x14, 0xf2, "dcbfb7cfece3989e2f7aed1f4d10a8e9"}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x7cb, 0x84, 0x0, 0x1, [@typed={0x8, 0xe7, 0x0, 0x0, @fd=r8}, @generic="0f5d60ee2e0417a4320fec83a31ea58852ca2fded43264517853daafe5b3b3b129c5aa98e8121b2ee31d976e191dc22e74752bc959cc238142d662b0565e247df43176160d01f06cbd80946c660b639a868f4db27cf68d2b6a8dbfc0b4e2b2f68e2a2d96bdfe531c13300885d183607048815d95ab3d8d13736b7ffd0fef5ee012a3c27c698d8b1438707340d69807974521bac8c07904c76a80558c83b72301b6852901e0a0b400920c99e24a06ac2aeeced74cb4ab4bb981331845439210d713a1d8ad9314f8ce55e61ca80a332cfcb23d18e5b08bb93096f6123a9b", @generic="3dcd5840e8353d163d08c63dcdac67d74754bfdb6e2dcb51bba8cd878907c1b10f23591d7dfe4f67ebb66430bcafd17ae2ba87f18fe5cfccbf84437dfa1dd6a50c4f3224e2666541d75ae47e40af89c22536ce04ffef5cadb08035bb9595378c7412a0156478bc9f804ee9ef3b598527418b6efb5ca70f7e25a5b0e8", @generic="5c4e4290c121133c4af730798327f3e2edf81d642acc370214f967b3cebc6f9acfc435ee07d1d1b670db132fb14d1a8df12bf83261dea0fbcff08b4b5fc98596bc", @nested={0x573, 0x89, 0x0, 0x1, [@nested={0x445, 0x14b, 0x0, 0x1, [@nested={0x10, 0xac, 0x0, 0x1, [@nested={0x4, 0x13e}, @nested={0x4, 0x15}, @nested={0x4, 0x4}]}, @nested={0x16a, 0x5e, 0x0, 0x1, [@generic="c243f7c5262c5ec1e7ec81b3a24b35c1e9357529aaeb0074eb9cb6cbc134e1b33fe1aae1388acb58973a6f8abca5e14077117c126aa25187a2188b744358ed775429be981c02b5700bb8bb97aeb7e50f210d43e7c359169dfc6e9d7ab4e0854a5f2f7a2c0f91b06b203d79add3abc3524dfe25088e830c", @typed={0xc, 0x10f, 0x0, 0x0, @u64=0xe9e}, @typed={0x8, 0x132, 0x0, 0x0, @fd=r0}, @generic="aa8eff01e1f50cdef33256825e03175e7a00f24cf4590a6c427b93cd915cf353ce833a6670adfabd0afaa5d2b54906025acf91651704ca1ec895e26cb5b98f5e7a687e8a3c963ab67c60815bded938181a7c0024bad75f25c0e80f5b7d0aa674848247cc9e8369a72e3ccdd5f91a2e6c05451b7f3a006f5825f089b458c339e68940b2d0854bfed6fb365c00b7778797166f1d308df4cd551b702a8c6301ab5f75451da5c830046139699e704e6ecf60a225c3bc03f4f19d0e37185be439c0ab3515c580142022a4bb575efcfb658fd328cac38f7c0460dae7bbe6"]}, @nested={0x8, 0xd9, 0x0, 0x1, [@nested={0x4, 0xcd}]}, @typed={0x14, 0x9b, 0x0, 0x0, @ipv6=@mcast2}, @generic="63998faccd7b4e7889c0b3dd257d605329e298324a8459692259a49d3e4df94c5d20b9e98058b47e47ed518db87247d9f4f485f7533399c0f8d75aa942756eedbb0ec8fcf3f736ea2e171597adc5015f754f25972630430eb2f745a07ddbdb9e242f25dbe347277ef63b06472b23087a21442b9011ca4a2d6f70712c9a4723d5250814dc8d57ff86579110f5fefc8fd16722de109b610935d48c071f71ccc2760649bd7efbf6336f92b9b05cd5", @typed={0x8, 0x13e, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x14, 0x115, 0x0, 0x0, @ipv6=@empty}, @generic="9e199e8161fefe06c106bc2733f795482597150cec785d9dfae7a2c1b99e750c1257562e7653d5d5cc0015f1406b242a2d5820eac6e1a781ba26fdf7c2c909d9dd0dfee3aafe2c8bf82824a576e0bd3ad80765cd91ef6670d863f6ed15902385180ab242556ccf1a4ba3f519ea018601f681eb0f2bb26b1e9ce6f1514861bc1ccea1c5e930f90ba48cb933b5f8ad29af84aa4301ffec9eabe91d5731f1c082ce3716aab85dabb342e82d021ff3f9759613241abfd58775f6b90fb8b792becd6cebd26704e1cda630b479ef53c300b748b37b8535f846de7f978cab85", @nested={0xf9, 0xa0, 0x0, 0x1, [@typed={0x8, 0x2b, 0x0, 0x0, @pid}, @generic="76e6b496f941a89add33b2b5a861ff33514131070d446cb47c19ea7947c773db372e4c24a4e5d5636ee66bda02ca26767e5bf3bd2f99ad05d7c17327038d65dfe40abdac9bb2fe5c51c49fbaa7f52422c86ba489857825d6754c5c928b174a2cc253fa2d6c860b434a5f1932b8b19649498be0f52f376a472b869c0e1e8804dfe3164d2af8ad08eecd9da59c2beca4357b78ebdb41da83b65d980aea632589c222f6a5ea4da92fd31cf11a7ec9eb65a6cac77f8eb1c4a2d6007f1a797a6c3114ee3f785b26e88bc12e7d7a98c4b95a35b1daaa3cab0f4cee71f1bda783", @typed={0x8, 0x96, 0x0, 0x0, @pid=r5}, @typed={0x8, 0xf9, 0x0, 0x0, @ipv4=@local}]}, @typed={0x7, 0x5, 0x0, 0x0, @str=':]\x00'}]}, @nested={0x4, 0xd6}, @typed={0x4, 0x70}, @nested={0x4, 0x14a}, @typed={0x8, 0x9d, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x8, 0x101, 0x0, 0x0, @u32=0x4}, @typed={0xa, 0x12c, 0x0, 0x0, @str='\\..:.\x00'}, @generic="b16b2d1f1d4c5501e2c06881e31525160c377c52280fc2c5cc2de1bd87cc62aeeb380fe9b65de1d9e3198b1099ee0d33c7d87b723635c70702e3edfbacc9de0249ef32ea08c36a54a4e8df379718ed1e97558c0e49a6ad0358c312d0c798e533a53981b192ffcbe01b963bc5de35bc65142f6169022a667d6e3d022fedd4b30eaeb7abc809f8460275243f5e274b2ef6bdb52b68efb62aadd39791dac51db9218b0cc705b1a9dd9617b149531b65680fed43c2335da19a675b17f4804ce1a588aa81f66d194f0d930a82cf400bc5d18f2470dd174fe359a102cb59c63c0f824f210ec09dca4280a8b63c99941666664b6c62230b1320e5", @typed={0x8, 0xbd, 0x0, 0x0, @u32=0x1}]}, @typed={0x8, 0x4d, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="3eff1a694b4573ed910330f5b7ee7f306b5bd2dfadeb4be9aab4d0fbecad1dbe80e1656c9d2e6729e5a2debdeb37143dcbcf86eff25628352ffa61669ded6f41e8f3ee70a378b4db90fa37ae2af0b29ae31ea75d36d637a7de19bcbe5214eda483a554f26e8dc3bcdf55b15b9aae470b3a017a4d7895dcb5dde552d7f6b95ecb5ecb484cebf02e4c0ba3cc1d261778edf611b0f8f94510c885220e4cf73c3605607f324bc22c7dc371"]}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x89, 0xbb, "290777d8b19b3514a6193813235cc6e72c140f22c6e8bccfbaf6c7536dba21cde1b04f7815bb85eb0426b89c562f9ecaa24dedafa14c5cfeffa97c21bbd42b350353f2162a1f7b872d9cdf32b4db4387537436af41afec80410aa859b1514af4eee01aa4261beffcc02a7869162647c54c1ceafae0249dea92be9e07c9432b71a3cef379e6"}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}]}, 0x89c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 0s ago: executing program 8 (id=10513): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x800, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mlockall$auto(0x7) madvise$auto(0x0, 0x7, 0xfffffffa) socket(0xa, 0x801, 0x84) socket(0xa, 0x801, 0x84) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffe) getsockopt$auto(r0, 0x3, 0x1747, &(0x7f0000000000)='\x00', &(0x7f0000000040)=0xf7) ioctl$auto_TCFLSH2(r0, 0x80047437, 0x0) kernel console output (not intermixed with test programs): has an invalid length. [ 1481.359934][ T1663] ieee80211 phy363: Selected rate control algorithm 'minstrel_ht' [ 1482.279442][ T1675] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8650'. [ 1482.506532][ T1671] CIFS mount error: No usable UNC path provided in device string! [ 1482.506532][ T1671] [ 1482.626924][ T1671] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1483.008629][ T1679] ima: policy update failed [ 1483.111353][ T29] audit: type=1802 audit(2176.700:99): pid=1679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.8653" res=0 errno=0 [ 1483.129227][ C0] vkms_vblank_simulate: vblank timer overrun [ 1483.724280][ T1694] ieee80211 phy364: Selected rate control algorithm 'minstrel_ht' [ 1485.038625][ T1719] ima: policy update failed [ 1485.051950][ T29] audit: type=1802 audit(2178.640:100): pid=1719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.8665" res=0 errno=0 [ 1485.198547][ T1722] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1485.605653][ T1734] netlink: 'syz.8.8672': attribute type 4 has an invalid length. [ 1485.708540][ T1734] netlink: 314 bytes leftover after parsing attributes in process `syz.8.8672'. [ 1485.824975][ T1734] IPv6: NLM_F_CREATE should be specified when creating new route [ 1485.962849][ T1734] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1486.509299][ T1749] ieee80211 phy365: Selected rate control algorithm 'minstrel_ht' [ 1487.849845][ T1778] netlink: 342 bytes leftover after parsing attributes in process `syz.5.8684'. [ 1488.059352][ T874] Bluetooth: hci5: command 0x0406 tx timeout [ 1489.179353][ T1789] Process accounting resumed [ 1489.752309][ T1804] FAULT_INJECTION: forcing a failure. [ 1489.752309][ T1804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1489.908515][ T1804] CPU: 0 UID: 0 PID: 1804 Comm: syz.5.8694 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 1489.920298][ T1804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1489.931368][ T1804] Call Trace: [ 1489.934964][ T1804] [ 1489.938170][ T1804] dump_stack_lvl+0x16c/0x1f0 [ 1489.943324][ T1804] should_fail_ex+0x497/0x5b0 [ 1489.948519][ T1804] _copy_to_user+0x32/0xd0 [ 1489.953374][ T1804] simple_read_from_buffer+0xd0/0x160 [ 1489.959307][ T1804] proc_fail_nth_read+0x198/0x270 [ 1489.964833][ T1804] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1489.970928][ T1804] ? bpf_lsm_file_permission+0x9/0x10 [ 1489.976829][ T1804] ? security_file_permission+0x71/0x210 [ 1489.983012][ T1804] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1489.989110][ T1804] vfs_read+0x1df/0xbe0 [ 1489.993763][ T1804] ? __fget_files+0x1fc/0x3a0 [ 1489.999002][ T1804] ? __pfx___mutex_lock+0x10/0x10 [ 1490.004517][ T1804] ? __pfx_vfs_read+0x10/0x10 [ 1490.009650][ T1804] ? __fget_files+0x206/0x3a0 [ 1490.014791][ T1804] ksys_read+0x12b/0x250 [ 1490.019519][ T1804] ? __pfx_ksys_read+0x10/0x10 [ 1490.024762][ T1804] ? rcu_is_watching+0x12/0xc0 [ 1490.029997][ T1804] ? rcu_is_watching+0x12/0xc0 [ 1490.035348][ T1804] do_syscall_64+0xcd/0x250 [ 1490.040290][ T1804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.046781][ T1804] RIP: 0033:0x7fbf1758473c [ 1490.051640][ T1804] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1490.073197][ T1804] RSP: 002b:00007fbf1831b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1490.082441][ T1804] RAX: ffffffffffffffda RBX: 00007fbf17775fa0 RCX: 00007fbf1758473c [ 1490.091235][ T1804] RDX: 000000000000000f RSI: 00007fbf1831b0a0 RDI: 0000000000000004 [ 1490.100018][ T1804] RBP: 00007fbf1831b090 R08: 0000000000000000 R09: 0000000000000000 [ 1490.108774][ T1804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1490.117528][ T1804] R13: 0000000000000000 R14: 00007fbf17775fa0 R15: 00007ffdac814838 [ 1490.126308][ T1804] [ 1490.129668][ C0] vkms_vblank_simulate: vblank timer overrun [ 1491.651808][ T1838] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8706'. [ 1492.960272][ T1861] ieee80211 phy366: Selected rate control algorithm 'minstrel_ht' [ 1493.178659][ T874] Bluetooth: hci1: command 0x0406 tx timeout [ 1493.292610][ T1864] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8713'. [ 1493.660019][ T1876] nla_validate_range_unsigned: 4 callbacks suppressed [ 1493.660036][ T1876] netlink: 'syz.6.8718': attribute type 11 has an invalid length. [ 1493.870856][ T1876] netlink: 'syz.6.8718': attribute type 11 has an invalid length. [ 1493.983009][ T1876] netlink: 'syz.6.8718': attribute type 11 has an invalid length. [ 1494.084779][ T1876] netlink: 'syz.6.8718': attribute type 11 has an invalid length. [ 1494.153661][ T1876] netlink: 'syz.6.8718': attribute type 11 has an invalid length. [ 1494.207164][ T1876] netlink: 'syz.6.8718': attribute type 11 has an invalid length. [ 1494.267514][ T1876] netlink: 'syz.6.8718': attribute type 11 has an invalid length. [ 1494.640332][ T1890] ieee80211 phy367: Selected rate control algorithm 'minstrel_ht' [ 1495.208560][ T1917] netlink: 'syz.5.8733': attribute type 11 has an invalid length. [ 1495.279013][ T1917] netlink: 'syz.5.8733': attribute type 11 has an invalid length. [ 1495.287750][ T1917] netlink: 'syz.5.8733': attribute type 11 has an invalid length. [ 1495.977130][ T1946] ieee80211 phy368: Selected rate control algorithm 'minstrel_ht' [ 1496.309499][ T1960] netlink: 342 bytes leftover after parsing attributes in process `syz.3.8746'. [ 1497.522673][ T2001] ieee80211 phy369: Selected rate control algorithm 'minstrel_ht' [ 1497.935715][ T2019] nfs: Unknown parameter 'DGzиiFϢ&MjoC#oXo\FBnj>./file0' [ 1498.342903][ T2033] ieee80211 phy370: Selected rate control algorithm 'minstrel_ht' [ 1498.355397][ T2034] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8768'. [ 1499.182570][ T2054] ieee80211 phy371: Selected rate control algorithm 'minstrel_ht' [ 1499.576951][ T2073] ieee80211 phy372: Selected rate control algorithm 'minstrel_ht' [ 1500.009812][ T2087] bond0: option packets_per_slave: invalid value ( Xnp) [ 1500.075836][ T2087] bond0: option packets_per_slave: allowed values 0 - 65535 [ 1500.145516][ T2087] bond0: option packets_per_slave: invalid value () [ 1500.186429][ T2087] bond0: option packets_per_slave: allowed values 0 - 65535 [ 1501.729696][ T2122] ieee80211 phy373: Selected rate control algorithm 'minstrel_ht' [ 1502.361124][ T2128] ieee80211 phy374: Selected rate control algorithm 'minstrel_ht' [ 1503.408093][ T2149] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 1503.544175][ T2152] ieee80211 phy375: Selected rate control algorithm 'minstrel_ht' [ 1503.942358][ T2162] ieee80211 phy376: Selected rate control algorithm 'minstrel_ht' [ 1504.377696][ T2174] ieee80211 phy377: Selected rate control algorithm 'minstrel_ht' [ 1504.750156][ T2176] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8814'. [ 1504.983573][ T2176] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8814'. [ 1504.995822][ T2185] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8817'. [ 1505.298083][ T2176] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8814'. [ 1505.509918][ T2176] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8814'. [ 1505.750917][ T2199] ieee80211 phy378: Selected rate control algorithm 'minstrel_ht' [ 1505.879168][ T2176] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8814'. [ 1506.015233][ T2176] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8814'. [ 1506.399491][ T2176] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8814'. [ 1506.481018][ T2215] FAULT_INJECTION: forcing a failure. [ 1506.481018][ T2215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1506.614737][ T2215] CPU: 0 UID: 0 PID: 2215 Comm: syz.5.8822 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 1506.626530][ T2215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1506.637591][ T2215] Call Trace: [ 1506.641189][ T2215] [ 1506.644396][ T2215] dump_stack_lvl+0x16c/0x1f0 [ 1506.649721][ T2215] should_fail_ex+0x497/0x5b0 [ 1506.654874][ T2215] _copy_from_user+0x2e/0xd0 [ 1506.659918][ T2215] copy_msghdr_from_user+0x99/0x160 [ 1506.665623][ T2215] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1506.672003][ T2215] ? rcu_is_watching+0x12/0xc0 [ 1506.677230][ T2215] ? lock_release+0x4e2/0x6f0 [ 1506.682355][ T2215] ? get_pid_task+0xfc/0x250 [ 1506.687397][ T2215] ___sys_sendmsg+0xff/0x1e0 [ 1506.692620][ T2215] ? get_pid_task+0x35/0x250 [ 1506.697672][ T2215] ? __pfx____sys_sendmsg+0x10/0x10 [ 1506.703595][ T2215] ? lock_release+0x4e2/0x6f0 [ 1506.708857][ T2215] ? __pfx_lock_release+0x10/0x10 [ 1506.714939][ T2215] ? trace_lock_acquire+0x14e/0x1f0 [ 1506.720699][ T2215] ? __fget_files+0x206/0x3a0 [ 1506.725856][ T2215] __sys_sendmsg+0x16e/0x220 [ 1506.730904][ T2215] ? __pfx___sys_sendmsg+0x10/0x10 [ 1506.736521][ T2215] ? rcu_is_watching+0x12/0xc0 [ 1506.741761][ T2215] ? rcu_is_watching+0x12/0xc0 [ 1506.747004][ T2215] do_syscall_64+0xcd/0x250 [ 1506.751946][ T2215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.758412][ T2215] RIP: 0033:0x7fbf17585d29 [ 1506.763250][ T2215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1506.784811][ T2215] RSP: 002b:00007fbf1831b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1506.794356][ T2215] RAX: ffffffffffffffda RBX: 00007fbf17775fa0 RCX: 00007fbf17585d29 [ 1506.803115][ T2215] RDX: 0000000000008840 RSI: 0000000020000480 RDI: 0000000000000004 [ 1506.812191][ T2215] RBP: 00007fbf1831b090 R08: 0000000000000000 R09: 0000000000000000 [ 1506.821535][ T2215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1506.830487][ T2215] R13: 0000000000000000 R14: 00007fbf17775fa0 R15: 00007ffdac814838 [ 1506.839247][ T2215] [ 1506.842676][ C0] vkms_vblank_simulate: vblank timer overrun [ 1507.409273][ T2225] netlink: 334 bytes leftover after parsing attributes in process `syz.6.8825'. [ 1507.918904][ T2230] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8827'. [ 1508.151785][ T2236] ieee80211 phy379: Selected rate control algorithm 'minstrel_ht' [ 1508.539990][ T874] Bluetooth: hci0: command 0x0406 tx timeout [ 1508.567411][ T2240] ieee80211 phy380: Selected rate control algorithm 'minstrel_ht' [ 1509.229055][ T2259] ieee80211 phy381: Selected rate control algorithm 'minstrel_ht' [ 1509.504759][ T2265] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 1510.440235][ T2287] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8842'. [ 1510.461395][ T2285] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8839'. [ 1510.632961][ T2290] ieee80211 phy382: Selected rate control algorithm 'minstrel_ht' [ 1510.669796][ T2285] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 1511.432957][ T2296] ieee80211 phy383: Selected rate control algorithm 'minstrel_ht' [ 1511.462626][ T2300] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 1512.813726][ T2324] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8853'. [ 1514.192027][ T2346] ieee80211 phy384: Selected rate control algorithm 'minstrel_ht' [ 1514.870472][ T2351] ieee80211 phy385: Selected rate control algorithm 'minstrel_ht' [ 1515.908849][ T2370] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8865'. [ 1516.988694][ T2396] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8872'. [ 1517.084092][ T2397] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8872'. [ 1517.200738][ T2390] IPVS: length: 11322 != 8 [ 1517.231477][ T2396] mac80211_hwsim hwsim358 wlan0: entered promiscuous mode [ 1517.324631][ T2396] mac80211_hwsim hwsim358 wlan0: entered allmulticast mode [ 1517.609057][ T2399] netlink: 342 bytes leftover after parsing attributes in process `syz.6.8868'. [ 1518.782809][ T2388] base_sock_release(ffff888088614e00) sk=ffff888085a96000 [ 1519.110273][ T2415] ieee80211 phy386: Selected rate control algorithm 'minstrel_ht' [ 1521.211854][ T2428] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8876'. [ 1521.703985][ T2435] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8878'. [ 1522.724348][ T2452] caif:caif_disconnect_client(): nothing to disconnect [ 1522.859293][ T2458] ieee80211 phy387: Selected rate control algorithm 'minstrel_ht' [ 1523.458933][ T2460] ieee80211 phy388: Selected rate control algorithm 'minstrel_ht' [ 1524.913856][ T2499] FAULT_INJECTION: forcing a failure. [ 1524.913856][ T2499] name failslab, interval 1, probability 0, space 0, times 0 [ 1524.963697][ T2497] ieee80211 phy389: Selected rate control algorithm 'minstrel_ht' [ 1525.093903][ T2499] CPU: 0 UID: 0 PID: 2499 Comm: syz.8.8895 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 1525.105684][ T2499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1525.116731][ T2499] Call Trace: [ 1525.120320][ T2499] [ 1525.123567][ T2499] dump_stack_lvl+0x16c/0x1f0 [ 1525.128797][ T2499] should_fail_ex+0x497/0x5b0 [ 1525.134029][ T2499] ? fs_reclaim_acquire+0xae/0x150 [ 1525.139632][ T2499] should_failslab+0xc2/0x120 [ 1525.144861][ T2499] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 1525.150767][ T2499] ? lock_vma_under_rcu+0x6b9/0x980 [ 1525.156479][ T2499] ? getname_flags.part.0+0x4c/0x550 [ 1525.162303][ T2499] ? __pfx___handle_mm_fault+0x10/0x10 [ 1525.168297][ T2499] getname_flags.part.0+0x4c/0x550 [ 1525.173923][ T2499] ? rcu_is_watching+0x12/0xc0 [ 1525.179358][ T2499] getname+0x8d/0xe0 [ 1525.183626][ T2499] do_sys_openat2+0x104/0x1e0 [ 1525.188769][ T2499] ? __pfx_do_sys_openat2+0x10/0x10 [ 1525.194479][ T2499] ? lock_release+0x4e2/0x6f0 [ 1525.199606][ T2499] ? do_user_addr_fault+0xe50/0x13f0 [ 1525.205414][ T2499] ? __pfx_lock_release+0x10/0x10 [ 1525.210940][ T2499] __x64_sys_openat+0x175/0x210 [ 1525.216266][ T2499] ? __pfx___x64_sys_openat+0x10/0x10 [ 1525.222182][ T2499] ? do_user_addr_fault+0x83d/0x13f0 [ 1525.228003][ T2499] ? rcu_is_watching+0x12/0xc0 [ 1525.233272][ T2499] do_syscall_64+0xcd/0x250 [ 1525.238316][ T2499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1525.244902][ T2499] RIP: 0033:0x7f18db185d29 [ 1525.249744][ T2499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1525.271312][ T2499] RSP: 002b:00007f18dbedb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1525.280595][ T2499] RAX: ffffffffffffffda RBX: 00007f18db375fa0 RCX: 00007f18db185d29 [ 1525.289473][ T2499] RDX: 0000000000000040 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 1525.298228][ T2499] RBP: 00007f18dbedb090 R08: 0000000000000000 R09: 0000000000000000 [ 1525.307009][ T2499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1525.315773][ T2499] R13: 0000000000000001 R14: 00007f18db375fa0 R15: 00007ffca80650a8 [ 1525.324539][ T2499] [ 1526.992323][ T2541] ieee80211 phy390: Selected rate control algorithm 'minstrel_ht' [ 1528.082135][ T2556] ieee80211 phy391: Selected rate control algorithm 'minstrel_ht' [ 1533.323196][ T2622] ieee80211 phy392: Selected rate control algorithm 'minstrel_ht' [ 1534.194737][ T2642] ieee80211 phy393: Selected rate control algorithm 'minstrel_ht' [ 1535.599526][ T2683] ieee80211 phy394: Selected rate control algorithm 'minstrel_ht' [ 1537.271823][ T2718] ecryptfs_miscdev_write: Error while inspecting packet size [ 1538.179553][ T2748] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8952'. [ 1538.819123][ T2763] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8955'. [ 1538.969576][ T2775] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8958'. [ 1539.040743][ T2776] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8958'. [ 1539.151335][ T2775] veth1_macvtap: entered allmulticast mode [ 1539.520156][ T2800] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8964'. [ 1540.809786][ T2843] ieee80211 phy395: Selected rate control algorithm 'minstrel_ht' [ 1541.608895][ T2873] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8978'. [ 1543.634876][ T2902] ieee80211 phy396: Selected rate control algorithm 'minstrel_ht' [ 1544.679547][ T2911] Process accounting resumed [ 1545.169493][ T2921] netlink: zone id is out of range [ 1545.209500][ T2921] netlink: zone id is out of range [ 1545.292266][ T2921] netlink: zone id is out of range [ 1545.297906][ T2921] netlink: zone id is out of range [ 1545.386122][ T2921] netlink: zone id is out of range [ 1545.428458][ T2921] netlink: zone id is out of range [ 1545.461534][ T2921] netlink: zone id is out of range [ 1545.514178][ T2921] netlink: zone id is out of range [ 1545.531401][ T2921] netlink: zone id is out of range [ 1545.564450][ T2921] netlink: zone id is out of range [ 1545.574862][ T2924] caif:caif_disconnect_client(): nothing to disconnect [ 1546.101899][ T2941] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9000'. [ 1546.345213][ T2946] ieee80211 phy397: Selected rate control algorithm 'minstrel_ht' [ 1547.983262][ T2971] ieee80211 phy398: Selected rate control algorithm 'minstrel_ht' [ 1549.323595][ T2992] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9012'. [ 1549.922351][ T3002] ieee80211 phy399: Selected rate control algorithm 'minstrel_ht' [ 1550.185007][ T3005] ieee80211 phy400: Selected rate control algorithm 'minstrel_ht' [ 1550.226426][ T3000] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(8.0.1), cmd(5) [ 1550.919675][ T3017] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(8.0.1), cmd(5) [ 1551.712141][ T3034] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9023'. [ 1552.258175][ T3047] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(8.0.1), cmd(5) [ 1552.916663][ T3066] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9036'. [ 1552.927839][ T3061] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(8.0.1), cmd(5) [ 1553.208792][ T3070] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9036'. [ 1553.266996][ T3075] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9038'. [ 1553.820008][ T3087] ieee80211 phy401: Selected rate control algorithm 'minstrel_ht' [ 1556.059916][ T3124] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9055'. [ 1556.537591][ T3128] netlink: 'syz.8.9053': attribute type 1 has an invalid length. [ 1557.519377][ T3160] ieee80211 phy402: Selected rate control algorithm 'minstrel_ht' [ 1558.749949][ T3182] ieee80211 phy403: Selected rate control algorithm 'minstrel_ht' [ 1558.934525][ T3180] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(8.0.1), cmd(5) [ 1561.293648][ T3220] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(8.0.1), cmd(5) [ 1561.521791][ T3226] ieee80211 phy404: Selected rate control algorithm 'minstrel_ht' [ 1562.965728][ T3257] blktrace: Concurrent blktraces are not allowed on sg0 [ 1562.985404][ T3258] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(8.0.1), cmd(5) [ 1563.321658][ T3264] ieee80211 phy405: Selected rate control algorithm 'minstrel_ht' [ 1563.718211][ T3269] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(8.0.1), cmd(5) [ 1564.585910][ T3289] blktrace: Concurrent blktraces are not allowed on sg0 [ 1564.629226][ T3300] ieee80211 phy406: Selected rate control algorithm 'minstrel_ht' [ 1564.819007][ T3302] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1564.819007][ T3302] :0 is already present [ 1565.319007][ T3327] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9120'. [ 1565.388669][ T3327] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9120'. [ 1565.575349][ T3337] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1565.629518][ T3340] ieee80211 phy407: Selected rate control algorithm 'minstrel_ht' [ 1565.928908][ T3341] caif:caif_disconnect_client(): nothing to disconnect [ 1566.303277][ T3364] ieee80211 phy408: Selected rate control algorithm 'minstrel_ht' [ 1568.079608][ T3408] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(8.0.1), cmd(5) [ 1568.284501][ T3417] ieee80211 phy409: Selected rate control algorithm 'minstrel_ht' [ 1568.822663][ T3430] ieee80211 phy410: Selected rate control algorithm 'minstrel_ht' [ 1569.769055][ T3455] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(8.0.1), cmd(5) [ 1570.233761][ T3467] ieee80211 phy411: Selected rate control algorithm 'minstrel_ht' [ 1571.099150][ T3492] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(8.0.1), cmd(5) [ 1571.526414][ T3505] ieee80211 phy412: Selected rate control algorithm 'minstrel_ht' [ 1571.656201][ T3514] FAULT_INJECTION: forcing a failure. [ 1571.656201][ T3514] name failslab, interval 1, probability 0, space 0, times 0 [ 1571.730649][ T3514] CPU: 0 UID: 0 PID: 3514 Comm: syz.8.9176 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 1571.742406][ T3514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1571.753455][ T3514] Call Trace: [ 1571.757042][ T3514] [ 1571.760241][ T3514] dump_stack_lvl+0x16c/0x1f0 [ 1571.765369][ T3514] should_fail_ex+0x497/0x5b0 [ 1571.770492][ T3514] ? fs_reclaim_acquire+0xae/0x150 [ 1571.776092][ T3514] should_failslab+0xc2/0x120 [ 1571.781218][ T3514] __kmalloc_node_noprof+0xd1/0x520 [ 1571.786918][ T3514] ? __pfx_lock_release+0x10/0x10 [ 1571.792421][ T3514] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 1571.798424][ T3514] __kvmalloc_node_noprof+0xad/0x1a0 [ 1571.804214][ T3514] seq_read_iter+0x82a/0x12b0 [ 1571.809335][ T3514] ? __mutex_trylock_common+0xea/0x250 [ 1571.815314][ T3514] ? apparmor_file_permission+0x251/0x400 [ 1571.821588][ T3514] proc_reg_read_iter+0x21d/0x310 [ 1571.827093][ T3514] vfs_read+0x87f/0xbe0 [ 1571.831642][ T3514] ? __pfx_vfs_read+0x10/0x10 [ 1571.836767][ T3514] ksys_read+0x12b/0x250 [ 1571.841428][ T3514] ? __pfx_ksys_read+0x10/0x10 [ 1571.846646][ T3514] ? rcu_is_watching+0x12/0xc0 [ 1571.851868][ T3514] ? rcu_is_watching+0x12/0xc0 [ 1571.857087][ T3514] do_syscall_64+0xcd/0x250 [ 1571.862020][ T3514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.868485][ T3514] RIP: 0033:0x7f18db185d29 [ 1571.873317][ T3514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1571.894865][ T3514] RSP: 002b:00007f18dbedb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1571.904094][ T3514] RAX: ffffffffffffffda RBX: 00007f18db375fa0 RCX: 00007f18db185d29 [ 1571.912836][ T3514] RDX: 0000000000001000 RSI: 00000000200004c0 RDI: 0000000000000003 [ 1571.921581][ T3514] RBP: 00007f18dbedb090 R08: 0000000000000000 R09: 0000000000000000 [ 1571.930324][ T3514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1571.939070][ T3514] R13: 0000000000000000 R14: 00007f18db375fa0 R15: 00007ffca80650a8 [ 1571.947824][ T3514] [ 1571.951146][ C0] vkms_vblank_simulate: vblank timer overrun [ 1573.266963][ T3539] ieee80211 phy413: Selected rate control algorithm 'minstrel_ht' [ 1573.561026][ T3545] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(8.0.1), cmd(5) [ 1574.367578][ T3555] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1574.367578][ T3555] :0 is already present [ 1574.555363][ T3561] ieee80211 phy414: Selected rate control algorithm 'minstrel_ht' [ 1575.085782][ T3571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9191'. [ 1575.098458][ T874] Bluetooth: hci4: command 0x0406 tx timeout [ 1575.174998][ T3571] ieee80211 phy415: Selected rate control algorithm 'minstrel_ht' [ 1575.639048][ T3584] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(8.0.1), cmd(5) [ 1575.769244][ T3589] FAULT_INJECTION: forcing a failure. [ 1575.769244][ T3589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1575.844936][ T3589] CPU: 0 UID: 0 PID: 3589 Comm: syz.3.9195 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 1575.856701][ T3589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1575.867745][ T3589] Call Trace: [ 1575.871334][ T3589] [ 1575.874539][ T3589] dump_stack_lvl+0x16c/0x1f0 [ 1575.879673][ T3589] should_fail_ex+0x497/0x5b0 [ 1575.884803][ T3589] _copy_to_user+0x32/0xd0 [ 1575.889659][ T3589] simple_read_from_buffer+0xd0/0x160 [ 1575.895560][ T3589] proc_fail_nth_read+0x198/0x270 [ 1575.901082][ T3589] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1575.907173][ T3589] ? bpf_lsm_file_permission+0x9/0x10 [ 1575.913093][ T3589] ? security_file_permission+0x71/0x210 [ 1575.919290][ T3589] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1575.925379][ T3589] vfs_read+0x1df/0xbe0 [ 1575.929946][ T3589] ? __fget_files+0x1fc/0x3a0 [ 1575.935073][ T3589] ? __pfx___mutex_lock+0x10/0x10 [ 1575.940606][ T3589] ? __pfx_vfs_read+0x10/0x10 [ 1575.945734][ T3589] ? __fget_files+0x206/0x3a0 [ 1575.950878][ T3589] ksys_read+0x12b/0x250 [ 1575.955529][ T3589] ? __pfx_ksys_read+0x10/0x10 [ 1575.960771][ T3589] ? rcu_is_watching+0x12/0xc0 [ 1575.966000][ T3589] ? rcu_is_watching+0x12/0xc0 [ 1575.971226][ T3589] do_syscall_64+0xcd/0x250 [ 1575.976164][ T3589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.982633][ T3589] RIP: 0033:0x7fd585f8473c [ 1575.987470][ T3589] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1576.009020][ T3589] RSP: 002b:00007fd586da2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1576.018268][ T3589] RAX: ffffffffffffffda RBX: 00007fd586175fa0 RCX: 00007fd585f8473c [ 1576.027035][ T3589] RDX: 000000000000000f RSI: 00007fd586da20a0 RDI: 0000000000000004 [ 1576.035903][ T3589] RBP: 00007fd586da2090 R08: 0000000000000000 R09: 0000000000000000 [ 1576.044676][ T3589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1576.053424][ T3589] R13: 0000000000000000 R14: 00007fd586175fa0 R15: 00007ffd0d425768 [ 1576.062183][ T3589] [ 1577.001622][ T3617] ieee80211 phy416: Selected rate control algorithm 'minstrel_ht' [ 1577.166689][ T3626] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(8.0.1), cmd(5) [ 1577.630559][ T3647] ieee80211 phy417: Selected rate control algorithm 'minstrel_ht' [ 1577.895616][ T3651] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1577.895616][ T3651] :0 is already present [ 1578.129417][ T3671] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(8.0.1), cmd(5) [ 1579.178933][ T3686] [U]  [ 1579.390360][ T3708] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(8.0.1), cmd(5) [ 1579.574100][ T3707] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1579.574100][ T3707] :0 is already present [ 1580.107102][ T3729] FAULT_INJECTION: forcing a failure. [ 1580.107102][ T3729] name failslab, interval 1, probability 0, space 0, times 0 [ 1580.121313][ T3729] CPU: 0 UID: 0 PID: 3729 Comm: syz.3.9238 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 1580.133081][ T3729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1580.144182][ T3729] Call Trace: [ 1580.147774][ T3729] [ 1580.151091][ T3729] dump_stack_lvl+0x16c/0x1f0 [ 1580.156353][ T3729] should_fail_ex+0x497/0x5b0 [ 1580.161525][ T3729] ? trace_lock_acquire+0x14e/0x1f0 [ 1580.167244][ T3729] should_failslab+0xc2/0x120 [ 1580.172400][ T3729] __kmalloc_noprof+0xce/0x4f0 [ 1580.177629][ T3729] ? io_cqring_event_overflow+0xcb/0x6f0 [ 1580.183814][ T3729] io_cqring_event_overflow+0xcb/0x6f0 [ 1580.189832][ T3729] __io_submit_flush_completions+0xf1a/0x1fd0 [ 1580.196526][ T3729] io_submit_sqes+0xa13/0x25f0 [ 1580.201772][ T3729] __do_sys_io_uring_enter+0xd43/0x1620 [ 1580.207864][ T3729] ? lock_release+0x4e2/0x6f0 [ 1580.212989][ T3729] ? do_user_addr_fault+0xe50/0x13f0 [ 1580.218805][ T3729] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1580.225390][ T3729] ? __pfx___up_read+0x10/0x10 [ 1580.230626][ T3729] ? ksys_write+0x1ba/0x250 [ 1580.235563][ T3729] ? __pfx_ksys_write+0x10/0x10 [ 1580.240889][ T3729] ? rcu_is_watching+0x12/0xc0 [ 1580.246136][ T3729] ? rcu_is_watching+0x12/0xc0 [ 1580.251381][ T3729] do_syscall_64+0xcd/0x250 [ 1580.256361][ T3729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.262945][ T3729] RIP: 0033:0x7fd585f85d29 [ 1580.267798][ T3729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1580.289358][ T3729] RSP: 002b:00007fd586da2038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1580.298602][ T3729] RAX: ffffffffffffffda RBX: 00007fd586175fa0 RCX: 00007fd585f85d29 [ 1580.307352][ T3729] RDX: 000000000000cd00 RSI: 0000000000000001 RDI: 0000000000000003 [ 1580.316106][ T3729] RBP: 00007fd586da2090 R08: 0000000000000000 R09: ffffffffffffffff [ 1580.324862][ T3729] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 1580.333625][ T3729] R13: 0000000000000000 R14: 00007fd586175fa0 R15: 00007ffd0d425768 [ 1580.342403][ T3729] [ 1580.345818][ C0] vkms_vblank_simulate: vblank timer overrun [ 1581.476682][ T3747] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1581.476682][ T3747] :0 is already present [ 1581.918200][ T3762] FAULT_INJECTION: forcing a failure. [ 1581.918200][ T3762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1582.083758][ T3762] CPU: 0 UID: 0 PID: 3762 Comm: syz.6.9249 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 1582.095533][ T3762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1582.106590][ T3762] Call Trace: [ 1582.110197][ T3762] [ 1582.113420][ T3762] dump_stack_lvl+0x16c/0x1f0 [ 1582.118585][ T3762] should_fail_ex+0x497/0x5b0 [ 1582.123723][ T3762] _copy_from_user+0x2e/0xd0 [ 1582.128756][ T3762] copy_msghdr_from_user+0x99/0x160 [ 1582.134846][ T3762] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1582.141225][ T3762] ? rcu_is_watching+0x12/0xc0 [ 1582.146483][ T3762] ? lock_release+0x4e2/0x6f0 [ 1582.151606][ T3762] ? get_pid_task+0xfc/0x250 [ 1582.156658][ T3762] ___sys_sendmsg+0xff/0x1e0 [ 1582.161697][ T3762] ? get_pid_task+0x35/0x250 [ 1582.166735][ T3762] ? __pfx____sys_sendmsg+0x10/0x10 [ 1582.172440][ T3762] ? lock_release+0x4e2/0x6f0 [ 1582.177567][ T3762] ? __pfx_lock_release+0x10/0x10 [ 1582.183273][ T3762] ? trace_lock_acquire+0x14e/0x1f0 [ 1582.188994][ T3762] ? __fget_files+0x206/0x3a0 [ 1582.194137][ T3762] __sys_sendmsg+0x16e/0x220 [ 1582.199183][ T3762] ? __pfx___sys_sendmsg+0x10/0x10 [ 1582.204817][ T3762] ? rcu_is_watching+0x12/0xc0 [ 1582.210057][ T3762] ? rcu_is_watching+0x12/0xc0 [ 1582.215318][ T3762] do_syscall_64+0xcd/0x250 [ 1582.220287][ T3762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1582.226759][ T3762] RIP: 0033:0x7f2396985d29 [ 1582.231599][ T3762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1582.253153][ T3762] RSP: 002b:00007f239780e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1582.262412][ T3762] RAX: ffffffffffffffda RBX: 00007f2396b75fa0 RCX: 00007f2396985d29 [ 1582.271164][ T3762] RDX: 00000000240000c8 RSI: 0000000020000b40 RDI: 0000000000000003 [ 1582.279928][ T3762] RBP: 00007f239780e090 R08: 0000000000000000 R09: 0000000000000000 [ 1582.288699][ T3762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1582.297490][ T3762] R13: 0000000000000000 R14: 00007f2396b75fa0 R15: 00007ffdbe7f8048 [ 1582.306252][ T3762] [ 1582.309688][ C0] vkms_vblank_simulate: vblank timer overrun [ 1583.052062][ T3780] Process accounting resumed [ 1584.936252][ T3808] ieee80211 phy418: Selected rate control algorithm 'minstrel_ht' [ 1585.531851][ T3825] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(8.0.1), cmd(5) [ 1585.742011][ T3830] ieee80211 phy419: Selected rate control algorithm 'minstrel_ht' [ 1586.062950][ T3835] ieee80211 phy420: Selected rate control algorithm 'minstrel_ht' [ 1586.916776][ T3864] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(8.0.1), cmd(5) [ 1587.142797][ T3870] FAULT_INJECTION: forcing a failure. [ 1587.142797][ T3870] name failslab, interval 1, probability 0, space 0, times 0 [ 1587.169629][ T3871] FAULT_INJECTION: forcing a failure. [ 1587.169629][ T3871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1587.256602][ T3871] CPU: 0 UID: 0 PID: 3871 Comm: syz.6.9282 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 1587.268376][ T3871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1587.279429][ T3871] Call Trace: [ 1587.283039][ T3871] [ 1587.286248][ T3871] dump_stack_lvl+0x16c/0x1f0 [ 1587.291508][ T3871] should_fail_ex+0x497/0x5b0 [ 1587.296651][ T3871] _copy_to_user+0x32/0xd0 [ 1587.301501][ T3871] simple_read_from_buffer+0xd0/0x160 [ 1587.307404][ T3871] proc_fail_nth_read+0x198/0x270 [ 1587.312920][ T3871] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1587.319010][ T3871] ? bpf_lsm_file_permission+0x9/0x10 [ 1587.324915][ T3871] ? security_file_permission+0x71/0x210 [ 1587.331117][ T3871] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1587.337207][ T3871] vfs_read+0x1df/0xbe0 [ 1587.341771][ T3871] ? __pfx_vfs_read+0x10/0x10 [ 1587.346995][ T3871] ? fput+0x67/0x440 [ 1587.351265][ T3871] ? __do_sys_io_uring_enter+0x5fb/0x1620 [ 1587.357541][ T3871] ? lock_release+0x4e2/0x6f0 [ 1587.362671][ T3871] ? do_user_addr_fault+0xe50/0x13f0 [ 1587.368484][ T3871] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1587.375060][ T3871] ? __pfx___up_read+0x10/0x10 [ 1587.380283][ T3871] ksys_read+0x12b/0x250 [ 1587.384934][ T3871] ? __pfx_ksys_read+0x10/0x10 [ 1587.390150][ T3871] ? rcu_is_watching+0x12/0xc0 [ 1587.395373][ T3871] ? rcu_is_watching+0x12/0xc0 [ 1587.400605][ T3871] do_syscall_64+0xcd/0x250 [ 1587.405549][ T3871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1587.412014][ T3871] RIP: 0033:0x7f239698473c [ 1587.416848][ T3871] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1587.438423][ T3871] RSP: 002b:00007f239780e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1587.447664][ T3871] RAX: ffffffffffffffda RBX: 00007f2396b75fa0 RCX: 00007f239698473c [ 1587.456414][ T3871] RDX: 000000000000000f RSI: 00007f239780e0a0 RDI: 0000000000000004 [ 1587.465163][ T3871] RBP: 00007f239780e090 R08: 0000000000000000 R09: ffffffffffffffff [ 1587.473912][ T3871] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 1587.482659][ T3871] R13: 0000000000000000 R14: 00007f2396b75fa0 R15: 00007ffdbe7f8048 [ 1587.491410][ T3871] [ 1587.494851][ C0] vkms_vblank_simulate: vblank timer overrun [ 1587.510769][ T3870] CPU: 0 UID: 0 PID: 3870 Comm: syz.5.9279 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 1587.522525][ T3870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1587.533568][ T3870] Call Trace: [ 1587.537154][ T3870] [ 1587.540359][ T3870] dump_stack_lvl+0x16c/0x1f0 [ 1587.545489][ T3870] should_fail_ex+0x497/0x5b0 [ 1587.550616][ T3870] ? fs_reclaim_acquire+0xae/0x150 [ 1587.556215][ T3870] should_failslab+0xc2/0x120 [ 1587.561344][ T3870] __kmalloc_node_track_caller_noprof+0xcf/0x520 [ 1587.568286][ T3870] ? lock_acquire+0x2f/0xb0 [ 1587.573223][ T3870] ? proc_simple_write+0xc7/0x1b0 [ 1587.578733][ T3870] memdup_user_nul+0x2b/0x110 [ 1587.583864][ T3870] proc_simple_write+0xc7/0x1b0 [ 1587.589184][ T3870] ? __pfx_proc_simple_write+0x10/0x10 [ 1587.595176][ T3870] proc_reg_write+0x23d/0x330 [ 1587.600325][ T3870] ? __pfx_proc_reg_write+0x10/0x10 [ 1587.606036][ T3870] vfs_write+0x24c/0x1150 [ 1587.610792][ T3870] ? __fget_files+0x1fc/0x3a0 [ 1587.615921][ T3870] ? __pfx___mutex_lock+0x10/0x10 [ 1587.621435][ T3870] ? __pfx_vfs_write+0x10/0x10 [ 1587.626694][ T3870] ? __fget_files+0x206/0x3a0 [ 1587.631828][ T3870] ksys_write+0x12b/0x250 [ 1587.636625][ T3870] ? __pfx_ksys_write+0x10/0x10 [ 1587.641944][ T3870] ? rcu_is_watching+0x12/0xc0 [ 1587.647165][ T3870] ? rcu_is_watching+0x12/0xc0 [ 1587.652388][ T3870] do_syscall_64+0xcd/0x250 [ 1587.657329][ T3870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1587.663802][ T3870] RIP: 0033:0x7fbf17585d29 [ 1587.668683][ T3870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1587.690247][ T3870] RSP: 002b:00007fbf1831b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1587.699483][ T3870] RAX: ffffffffffffffda RBX: 00007fbf17775fa0 RCX: 00007fbf17585d29 [ 1587.708235][ T3870] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000004 [ 1587.717029][ T3870] RBP: 00007fbf1831b090 R08: 0000000000000000 R09: 0000000000000000 [ 1587.725797][ T3870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1587.734552][ T3870] R13: 0000000000000000 R14: 00007fbf17775fa0 R15: 00007ffdac814838 [ 1587.743312][ T3870] [ 1587.746726][ C0] vkms_vblank_simulate: vblank timer overrun [ 1588.630803][ T3890] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9286'. [ 1588.896074][ T3897] ieee80211 phy421: Selected rate control algorithm 'minstrel_ht' [ 1589.092889][ T3908] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(8.0.1), cmd(5) [ 1590.489151][ T3938] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9302'. [ 1590.599288][ T3945] random: crng reseeded on system resumption [ 1590.653123][ T3945] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 1590.787111][ T3945] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 1590.851574][ T3945] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 1590.893850][ T3955] ieee80211 phy422: Selected rate control algorithm 'minstrel_ht' [ 1591.092217][ T3945] PM: hibernation: Basic memory bitmaps created [ 1591.264791][ T3943] PM: hibernation: Basic memory bitmaps freed [ 1591.699679][ T3981] gspca_gl860.sensor: string doesn't fit in 6 chars. [ 1591.807784][ T3978] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1591.807784][ T3978] :0 is already present [ 1592.415399][ T3997] random: crng reseeded on system resumption [ 1592.467141][ T3997] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 1592.592248][ T3997] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 1592.665959][ T4004] ieee80211 phy423: Selected rate control algorithm 'minstrel_ht' [ 1592.679001][ T3997] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 1592.934845][ T3997] PM: hibernation: Basic memory bitmaps created [ 1593.127916][ T3994] PM: hibernation: Basic memory bitmaps freed [ 1593.298388][ T4013] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9323'. [ 1593.335618][ T4015] netlink: 'syz.3.9324': attribute type 1 has an invalid length. [ 1593.398093][ T4015] binder: 4014:4015 ioctl c0046209 9 returned -22 [ 1593.476805][ T4018] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9325'. [ 1593.556617][ T4018] ieee80211 phy424: Selected rate control algorithm 'minstrel_ht' [ 1593.978510][ T4029] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9329'. [ 1594.104378][ T4024] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1594.104378][ T4024] :0 is already present [ 1594.214725][ T4037] ieee80211 phy425: Selected rate control algorithm 'minstrel_ht' [ 1594.818482][ T4056] FAULT_INJECTION: forcing a failure. [ 1594.818482][ T4056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1594.967764][ T4056] CPU: 0 UID: 0 PID: 4056 Comm: syz.8.9337 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 1594.979649][ T4056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1594.990696][ T4056] Call Trace: [ 1594.994288][ T4056] [ 1594.997493][ T4056] dump_stack_lvl+0x16c/0x1f0 [ 1595.002626][ T4056] should_fail_ex+0x497/0x5b0 [ 1595.007759][ T4056] _copy_from_user+0x2e/0xd0 [ 1595.012827][ T4056] copy_msghdr_from_user+0x99/0x160 [ 1595.018533][ T4056] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1595.024911][ T4056] ? rcu_is_watching+0x12/0xc0 [ 1595.030224][ T4056] ? lock_release+0x4e2/0x6f0 [ 1595.035387][ T4056] ? get_pid_task+0xfc/0x250 [ 1595.040433][ T4056] ___sys_sendmsg+0xff/0x1e0 [ 1595.045477][ T4056] ? get_pid_task+0x35/0x250 [ 1595.050532][ T4056] ? __pfx____sys_sendmsg+0x10/0x10 [ 1595.056239][ T4056] ? lock_release+0x4e2/0x6f0 [ 1595.061380][ T4056] ? __pfx_lock_release+0x10/0x10 [ 1595.066973][ T4056] ? trace_lock_acquire+0x14e/0x1f0 [ 1595.072689][ T4056] ? __fget_files+0x206/0x3a0 [ 1595.077841][ T4056] __sys_sendmsg+0x16e/0x220 [ 1595.082895][ T4056] ? __pfx___sys_sendmsg+0x10/0x10 [ 1595.088529][ T4056] ? rcu_is_watching+0x12/0xc0 [ 1595.093787][ T4056] ? rcu_is_watching+0x12/0xc0 [ 1595.099012][ T4056] do_syscall_64+0xcd/0x250 [ 1595.104550][ T4056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1595.111064][ T4056] RIP: 0033:0x7f18db185d29 [ 1595.115919][ T4056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1595.137480][ T4056] RSP: 002b:00007f18dbedb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1595.146773][ T4056] RAX: ffffffffffffffda RBX: 00007f18db375fa0 RCX: 00007f18db185d29 [ 1595.155534][ T4056] RDX: 0000000000000010 RSI: 0000000020002580 RDI: 0000000000000003 [ 1595.164361][ T4056] RBP: 00007f18dbedb090 R08: 0000000000000000 R09: 0000000000000000 [ 1595.173120][ T4056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1595.181910][ T4056] R13: 0000000000000000 R14: 00007f18db375fa0 R15: 00007ffca80650a8 [ 1595.190669][ T4056] [ 1595.194087][ C0] vkms_vblank_simulate: vblank timer overrun [ 1596.317619][ T4082] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1596.317619][ T4082] :0 is already present [ 1596.527056][ T4088] ieee80211 phy426: Selected rate control algorithm 'minstrel_ht' [ 1597.717661][ T4120] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1597.717661][ T4120] :0 is already present [ 1598.026737][ T4124] ieee80211 phy427: Selected rate control algorithm 'minstrel_ht' [ 1598.249265][ T4135] mkiss: ax0: crc mode is auto. [ 1598.802341][ T4148] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1598.802341][ T4148] :0 is already present [ 1599.693159][ T4172] ieee80211 phy428: Selected rate control algorithm 'minstrel_ht' [ 1600.269980][ T4167] blktrace: Concurrent blktraces are not allowed on sg0 [ 1600.294476][ T4182] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9375'. [ 1600.474078][ T4188] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9377'. [ 1600.611963][ T4188] ieee80211 phy429: Selected rate control algorithm 'minstrel_ht' [ 1601.157859][ T4200] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9380'. [ 1601.208883][ T4200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1601.237539][ T4202] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(8.0.1), cmd(5) [ 1601.280325][ T4200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1601.717372][ T4212] ieee80211 phy430: Selected rate control algorithm 'minstrel_ht' [ 1603.021937][ T4244] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(5) [ 1603.610279][ T4255] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1603.610279][ T4255] :0 is already present [ 1603.686577][ T4257] ieee80211 phy431: Selected rate control algorithm 'minstrel_ht' [ 1604.767003][ T4277] ieee80211 phy432: Selected rate control algorithm 'minstrel_ht' [ 1605.107446][ T4275] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1605.107446][ T4275] :0 is already present [ 1605.729272][ T4296] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9409'. [ 1605.808716][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1605.870799][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1605.961918][ T4302] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1605.961918][ T4302] :0 is already present [ 1606.601718][ T4319] netlink: 334 bytes leftover after parsing attributes in process `syz.6.9417'. [ 1606.669895][ T4321] ieee80211 phy433: Selected rate control algorithm 'minstrel_ht' [ 1607.659646][ T4346] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1607.659646][ T4346] :0 is already present [ 1608.623392][ T4386] binder: 4385:4386 unknown command 0 [ 1608.669787][ T4386] binder: 4385:4386 ioctl c0306201 9 returned -22 [ 1608.821522][ T4394] FAULT_INJECTION: forcing a failure. [ 1608.821522][ T4394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1608.884397][ T4396] Process accounting resumed [ 1608.934500][ T4394] CPU: 0 UID: 0 PID: 4394 Comm: syz.3.9439 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 1608.946269][ T4394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1608.957321][ T4394] Call Trace: [ 1608.960911][ T4394] [ 1608.964119][ T4394] dump_stack_lvl+0x16c/0x1f0 [ 1608.969257][ T4394] should_fail_ex+0x497/0x5b0 [ 1608.974413][ T4394] _copy_to_iter+0x29b/0x1400 [ 1608.979548][ T4394] ? trace_lock_acquire+0x14e/0x1f0 [ 1608.985253][ T4394] ? __pfx_lock_release+0x10/0x10 [ 1608.990764][ T4394] ? __virt_addr_valid+0x1a4/0x590 [ 1608.996371][ T4394] ? __pfx__copy_to_iter+0x10/0x10 [ 1609.001979][ T4394] ? __virt_addr_valid+0x1a4/0x590 [ 1609.007593][ T4394] ? __virt_addr_valid+0x5e/0x590 [ 1609.013124][ T4394] ? __phys_addr_symbol+0x30/0x80 [ 1609.018636][ T4394] ? __check_object_size+0x488/0x710 [ 1609.024438][ T4394] seq_read_iter+0xd00/0x12b0 [ 1609.029589][ T4394] kernfs_fop_read_iter+0x414/0x580 [ 1609.035294][ T4394] ? rw_verify_area+0xd0/0x700 [ 1609.040518][ T4394] vfs_read+0x87f/0xbe0 [ 1609.045074][ T4394] ? __pfx_vfs_read+0x10/0x10 [ 1609.050207][ T4394] ksys_read+0x12b/0x250 [ 1609.054884][ T4394] ? __pfx_ksys_read+0x10/0x10 [ 1609.060130][ T4394] ? rcu_is_watching+0x12/0xc0 [ 1609.065358][ T4394] ? rcu_is_watching+0x12/0xc0 [ 1609.070582][ T4394] do_syscall_64+0xcd/0x250 [ 1609.075523][ T4394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.082013][ T4394] RIP: 0033:0x7fd585f85d29 [ 1609.086852][ T4394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1609.108407][ T4394] RSP: 002b:00007fd586da2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1609.117644][ T4394] RAX: ffffffffffffffda RBX: 00007fd586175fa0 RCX: 00007fd585f85d29 [ 1609.126396][ T4394] RDX: 00000000000000c0 RSI: 0000000020001100 RDI: 0000000000000003 [ 1609.135147][ T4394] RBP: 00007fd586da2090 R08: 0000000000000000 R09: 0000000000000000 [ 1609.143898][ T4394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1609.152657][ T4394] R13: 0000000000000000 R14: 00007fd586175fa0 R15: 00007ffd0d425768 [ 1609.161414][ T4394] [ 1609.164814][ C0] vkms_vblank_simulate: vblank timer overrun [ 1609.388033][ T4401] ieee80211 phy434: Selected rate control algorithm 'minstrel_ht' [ 1610.625919][ T4430] ieee80211 phy435: Selected rate control algorithm 'minstrel_ht' [ 1611.358726][ T4444] ieee80211 phy436: Selected rate control algorithm 'minstrel_ht' [ 1612.749288][ T4471] ieee80211 phy437: Selected rate control algorithm 'minstrel_ht' [ 1613.778608][ T4492] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9465'. [ 1614.531184][ T4506] ptrace attach of "./syz-executor exec"[1284] was attempted by "./syz-executor exec"[4506] [ 1615.374902][ T4501] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1615.374902][ T4501] :0 is already present [ 1616.059139][ T4535] FAULT_INJECTION: forcing a failure. [ 1616.059139][ T4535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1616.270447][ T4535] CPU: 0 UID: 0 PID: 4535 Comm: syz.6.9483 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 1616.282237][ T4535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1616.293297][ T4535] Call Trace: [ 1616.296896][ T4535] [ 1616.300102][ T4535] dump_stack_lvl+0x16c/0x1f0 [ 1616.305239][ T4535] should_fail_ex+0x497/0x5b0 [ 1616.310418][ T4535] _copy_to_user+0x32/0xd0 [ 1616.315277][ T4535] simple_read_from_buffer+0xd0/0x160 [ 1616.321190][ T4535] proc_fail_nth_read+0x198/0x270 [ 1616.326731][ T4535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1616.332826][ T4535] ? bpf_lsm_file_permission+0x9/0x10 [ 1616.338731][ T4535] ? security_file_permission+0x71/0x210 [ 1616.345009][ T4535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1616.351098][ T4535] vfs_read+0x1df/0xbe0 [ 1616.355670][ T4535] ? __fget_files+0x1fc/0x3a0 [ 1616.360818][ T4535] ? __pfx___mutex_lock+0x10/0x10 [ 1616.366351][ T4535] ? __pfx_vfs_read+0x10/0x10 [ 1616.371550][ T4535] ? __fget_files+0x206/0x3a0 [ 1616.376700][ T4535] ksys_read+0x12b/0x250 [ 1616.381368][ T4535] ? __pfx_ksys_read+0x10/0x10 [ 1616.386615][ T4535] ? rcu_is_watching+0x12/0xc0 [ 1616.391841][ T4535] ? rcu_is_watching+0x12/0xc0 [ 1616.397083][ T4535] do_syscall_64+0xcd/0x250 [ 1616.402153][ T4535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.408652][ T4535] RIP: 0033:0x7f239698473c [ 1616.413497][ T4535] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1616.435064][ T4535] RSP: 002b:00007f239780e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1616.444357][ T4535] RAX: ffffffffffffffda RBX: 00007f2396b75fa0 RCX: 00007f239698473c [ 1616.453109][ T4535] RDX: 000000000000000f RSI: 00007f239780e0a0 RDI: 0000000000000004 [ 1616.461858][ T4535] RBP: 00007f239780e090 R08: 0000000000000000 R09: 0000000000000000 [ 1616.470628][ T4535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1616.479518][ T4535] R13: 0000000000000000 R14: 00007f2396b75fa0 R15: 00007ffdbe7f8048 [ 1616.488379][ T4535] [ 1616.966222][ T4546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9488'. [ 1617.015517][ T4546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9488'. [ 1617.048996][ T4543] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1617.048996][ T4543] :0 is already present [ 1617.592153][ T4562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9493'. [ 1617.654823][ T4563] netlink: 'syz.5.9494': attribute type 28 has an invalid length. [ 1617.701491][ T4563] netlink: 334 bytes leftover after parsing attributes in process `syz.5.9494'. [ 1618.006047][ T4564] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1618.006047][ T4564] :0 is already present [ 1620.371342][ T4601] ieee80211 phy438: Selected rate control algorithm 'minstrel_ht' [ 1622.430225][ T4653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9519'. [ 1623.137198][ T4667] FAULT_INJECTION: forcing a failure. [ 1623.137198][ T4667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1623.355419][ T4667] CPU: 0 UID: 0 PID: 4667 Comm: syz.6.9525 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 1623.367201][ T4667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1623.378252][ T4667] Call Trace: [ 1623.381843][ T4667] [ 1623.385050][ T4667] dump_stack_lvl+0x16c/0x1f0 [ 1623.390211][ T4667] should_fail_ex+0x497/0x5b0 [ 1623.395345][ T4667] _copy_from_user+0x2e/0xd0 [ 1623.400492][ T4667] copy_msghdr_from_user+0x99/0x160 [ 1623.406200][ T4667] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1623.412576][ T4667] ? _kstrtoull+0x146/0x200 [ 1623.417513][ T4667] ? __pfx__kstrtoull+0x10/0x10 [ 1623.422832][ T4667] ? lock_release+0x4e2/0x6f0 [ 1623.427959][ T4667] ___sys_sendmsg+0xff/0x1e0 [ 1623.433000][ T4667] ? __pfx____sys_sendmsg+0x10/0x10 [ 1623.438709][ T4667] ? __pfx_kstrtouint+0x10/0x10 [ 1623.444032][ T4667] ? trace_lock_acquire+0x14e/0x1f0 [ 1623.449751][ T4667] ? folio_unlock+0x7d/0xd0 [ 1623.454688][ T4667] ? __pfx_lock_release+0x10/0x10 [ 1623.460197][ T4667] ? proc_fail_nth_write+0xa0/0x250 [ 1623.465907][ T4667] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1623.472092][ T4667] ? ksys_write+0x12b/0x250 [ 1623.477028][ T4667] __sys_sendmmsg+0x201/0x420 [ 1623.482161][ T4667] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1623.487871][ T4667] ? ksys_write+0x1ba/0x250 [ 1623.492810][ T4667] ? __pfx_ksys_write+0x10/0x10 [ 1623.498138][ T4667] __x64_sys_sendmmsg+0x9c/0x100 [ 1623.503558][ T4667] do_syscall_64+0xcd/0x250 [ 1623.508498][ T4667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.514983][ T4667] RIP: 0033:0x7f2396985d29 [ 1623.519915][ T4667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1623.541466][ T4667] RSP: 002b:00007f239780e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1623.550703][ T4667] RAX: ffffffffffffffda RBX: 00007f2396b75fa0 RCX: 00007f2396985d29 [ 1623.559471][ T4667] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 1623.568222][ T4667] RBP: 00007f239780e090 R08: 0000000000000000 R09: 0000000000000000 [ 1623.576990][ T4667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1623.585743][ T4667] R13: 0000000000000000 R14: 00007f2396b75fa0 R15: 00007ffdbe7f8048 [ 1623.594516][ T4667] [ 1625.639604][ T4702] netlink: 192 bytes leftover after parsing attributes in process `syz.8.9533'. [ 1625.729511][ T4700] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1625.729511][ T4700] :0 is already present [ 1625.991601][ T4707] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9534'. [ 1627.044766][ T4715] could not allocate digest TFM handle binfmt_misc [ 1628.041896][ T4746] ieee80211 phy439: Selected rate control algorithm 'minstrel_ht' [ 1628.060614][ T4736] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1628.060614][ T4736] :0 is already present [ 1628.100868][ T4734] ptrace attach of "./syz-executor exec"[32507] was attempted by "./syz-executor exec"[4734] [ 1629.259692][ T4770] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1630.089698][ T4789] ieee80211 phy440: Selected rate control algorithm 'minstrel_ht' [ 1631.522089][ T4805] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9561'. [ 1634.579274][ T4812] netlink: 192 bytes leftover after parsing attributes in process `syz.6.9563'. [ 1636.183782][ T4838] netlink: 192 bytes leftover after parsing attributes in process `syz.3.9573'. [ 1637.399429][ T4868] ieee80211 phy441: Selected rate control algorithm 'minstrel_ht' [ 1639.634851][ T4920] ieee80211 phy442: Selected rate control algorithm 'minstrel_ht' [ 1640.005587][ T4930] udc dummy_udc.0: soft-connect without a gadget driver [ 1640.563774][ T4942] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9601'. [ 1640.949120][ T4946] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1640.949120][ T4946] :0 is already present [ 1640.964497][ T4950] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9604'. [ 1641.513601][ T4967] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1641.513601][ T4967] :0 is already present [ 1641.541506][ T4965] ieee80211 phy443: Selected rate control algorithm 'minstrel_ht' [ 1641.916048][ T4974] lo: entered allmulticast mode [ 1642.010974][ T4973] lo: left allmulticast mode [ 1642.743333][ T4995] ieee80211 phy444: Selected rate control algorithm 'minstrel_ht' [ 1643.569259][ T5011] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1643.569259][ T5011] :0 is already present [ 1643.874774][ T5020] ieee80211 phy445: Selected rate control algorithm 'minstrel_ht' [ 1644.375388][ T5025] ieee80211 phy446: Selected rate control algorithm 'minstrel_ht' [ 1644.462625][ T5028] Process accounting resumed [ 1644.594452][ T5031] udc dummy_udc.0: soft-connect without a gadget driver [ 1645.176601][ T5050] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1645.176601][ T5050] :0 is already present [ 1645.423613][ T5057] net_ratelimit: 19 callbacks suppressed [ 1645.423627][ T5057] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1646.010278][ T5065] Process accounting resumed [ 1646.383576][ T5079] udc dummy_udc.0: soft-connect without a gadget driver [ 1646.712450][ T5089] netlink: 'syz.5.9647': attribute type 39 has an invalid length. [ 1646.848879][ T5089] netlink: 330 bytes leftover after parsing attributes in process `syz.5.9647'. [ 1646.933500][ T5103] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9651'. [ 1647.026125][ T5107] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1647.225710][ T5105] caif:caif_disconnect_client(): nothing to disconnect [ 1647.389545][ T5117] snd_aloop snd_aloop.0: control 5:-2147483647:1:IA>/[k [ 1660.041264][ T5341] dump_stack_lvl+0x16c/0x1f0 [ 1660.046409][ T5341] should_fail_ex+0x497/0x5b0 [ 1660.051707][ T5341] _copy_to_user+0x32/0xd0 [ 1660.056614][ T5341] simple_read_from_buffer+0xd0/0x160 [ 1660.062529][ T5341] proc_fail_nth_read+0x198/0x270 [ 1660.068052][ T5341] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1660.074238][ T5341] ? bpf_lsm_file_permission+0x9/0x10 [ 1660.080140][ T5341] ? security_file_permission+0x71/0x210 [ 1660.086321][ T5341] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1660.092413][ T5341] vfs_read+0x1df/0xbe0 [ 1660.096972][ T5341] ? __fget_files+0x1fc/0x3a0 [ 1660.102102][ T5341] ? __pfx___mutex_lock+0x10/0x10 [ 1660.107617][ T5341] ? __pfx_vfs_read+0x10/0x10 [ 1660.112776][ T5341] ? __fget_files+0x206/0x3a0 [ 1660.118010][ T5341] ksys_read+0x12b/0x250 [ 1660.122752][ T5341] ? __pfx_ksys_read+0x10/0x10 [ 1660.127993][ T5341] ? rcu_is_watching+0x12/0xc0 [ 1660.133225][ T5341] ? rcu_is_watching+0x12/0xc0 [ 1660.138450][ T5341] do_syscall_64+0xcd/0x250 [ 1660.143405][ T5341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1660.149873][ T5341] RIP: 0033:0x7f18db18473c [ 1660.154716][ T5341] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1660.176280][ T5341] RSP: 002b:00007f18dbedb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1660.185518][ T5341] RAX: ffffffffffffffda RBX: 00007f18db375fa0 RCX: 00007f18db18473c [ 1660.194289][ T5341] RDX: 000000000000000f RSI: 00007f18dbedb0a0 RDI: 0000000000000004 [ 1660.203051][ T5341] RBP: 00007f18dbedb090 R08: 0000000000000000 R09: 0000000000000000 [ 1660.211800][ T5341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1660.220550][ T5341] R13: 0000000000000000 R14: 00007f18db375fa0 R15: 00007ffca80650a8 [ 1660.229321][ T5341] [ 1660.232685][ C0] vkms_vblank_simulate: vblank timer overrun [ 1660.438364][ T1286] Bluetooth: hci4: command 0x0406 tx timeout [ 1660.458543][ T5350] ieee80211 phy451: Selected rate control algorithm 'minstrel_ht' [ 1660.991766][ T5319] blktrace: Concurrent blktraces are not allowed on sg0 [ 1662.120705][ T5380] ieee80211 phy452: Selected rate control algorithm 'minstrel_ht' [ 1663.018734][ T5392] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1663.062522][ T5392] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1663.221358][ T5392] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1663.353182][ T5392] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1663.397776][ T5392] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1663.558443][ T5395] ieee80211 phy453: Selected rate control algorithm 'minstrel_ht' [ 1664.477084][ T5411] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1665.098423][ T1286] Bluetooth: hci5: command 0x0406 tx timeout [ 1665.105078][ T874] Bluetooth: hci2: command 0x0406 tx timeout [ 1665.258639][ T874] Bluetooth: hci1: command 0x0406 tx timeout [ 1665.419844][ T874] Bluetooth: hci4: command 0x0406 tx timeout [ 1665.426491][ T1286] Bluetooth: hci0: command 0x0406 tx timeout [ 1666.093842][ T5435] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9739'. [ 1666.106047][ T5437] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9740'. [ 1666.222027][ T5435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1666.439272][ T5435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1668.473380][ T5517] dlm: non-version read from control device 135 [ 1669.261743][ T5543] netlink: del zone limit has 8 unknown bytes [ 1669.374343][ T5545] ieee80211 phy454: Selected rate control algorithm 'minstrel_ht' [ 1670.137511][ T5561] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9779'. [ 1671.625409][ T5597] ieee80211 phy455: Selected rate control algorithm 'minstrel_ht' [ 1671.938032][ T5603] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9793'. [ 1672.790731][ T5631] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9802'. [ 1673.281548][ T5641] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1673.339130][ T5641] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1673.426434][ T5641] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1673.515442][ T5641] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1673.628532][ T5641] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1674.921882][ T5683] FAULT_INJECTION: forcing a failure. [ 1674.921882][ T5683] name failslab, interval 1, probability 0, space 0, times 0 [ 1675.009888][ T5683] CPU: 0 UID: 0 PID: 5683 Comm: syz.8.9818 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 1675.021652][ T5683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1675.032699][ T5683] Call Trace: [ 1675.036293][ T5683] [ 1675.039497][ T5683] dump_stack_lvl+0x16c/0x1f0 [ 1675.044629][ T5683] should_fail_ex+0x497/0x5b0 [ 1675.049804][ T5683] ? fs_reclaim_acquire+0xae/0x150 [ 1675.055425][ T5683] should_failslab+0xc2/0x120 [ 1675.060579][ T5683] __kmalloc_noprof+0xce/0x4f0 [ 1675.065806][ T5683] ? tomoyo_realpath_from_path+0xbf/0x710 [ 1675.072082][ T5683] tomoyo_realpath_from_path+0xbf/0x710 [ 1675.078163][ T5683] ? tomoyo_path_number_perm+0x235/0x5b0 [ 1675.084346][ T5683] tomoyo_path_number_perm+0x248/0x5b0 [ 1675.090356][ T5683] ? tomoyo_path_number_perm+0x235/0x5b0 [ 1675.096559][ T5683] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1675.103144][ T5683] ? rcu_is_watching+0x12/0xc0 [ 1675.108375][ T5683] ? preempt_count_add+0x76/0x150 [ 1675.113892][ T5683] ? __pfx_lock_release+0x10/0x10 [ 1675.119411][ T5683] ? trace_lock_acquire+0x14e/0x1f0 [ 1675.125133][ T5683] ? __fget_files+0x40/0x3a0 [ 1675.130166][ T5683] ? lock_acquire+0x2f/0xb0 [ 1675.135099][ T5683] ? __fget_files+0x40/0x3a0 [ 1675.140146][ T5683] ? __fget_files+0x206/0x3a0 [ 1675.145286][ T5683] security_file_ioctl+0x9b/0x240 [ 1675.150819][ T5683] __x64_sys_ioctl+0xb7/0x200 [ 1675.155942][ T5683] do_syscall_64+0xcd/0x250 [ 1675.160898][ T5683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.167401][ T5683] RIP: 0033:0x7f18db185d29 [ 1675.172242][ T5683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1675.193798][ T5683] RSP: 002b:00007f18dbedb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1675.203046][ T5683] RAX: ffffffffffffffda RBX: 00007f18db375fa0 RCX: 00007f18db185d29 [ 1675.211812][ T5683] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 1675.220567][ T5683] RBP: 00007f18dbedb090 R08: 0000000000000000 R09: 0000000000000000 [ 1675.229322][ T5683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1675.238078][ T5683] R13: 0000000000000000 R14: 00007f18db375fa0 R15: 00007ffca80650a8 [ 1675.246838][ T5683] [ 1675.250200][ C0] vkms_vblank_simulate: vblank timer overrun [ 1675.490928][ T874] Bluetooth: hci5: command 0x0406 tx timeout [ 1675.497687][ T874] Bluetooth: hci2: command 0x0406 tx timeout [ 1675.504753][ T874] Bluetooth: hci1: command 0x0406 tx timeout [ 1675.691760][ T1286] Bluetooth: hci0: command 0x0406 tx timeout [ 1675.704054][ T1286] Bluetooth: hci4: command 0x0406 tx timeout [ 1676.252249][ T5660] Process accounting paused [ 1676.543563][ T5683] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1676.980561][ T5718] ieee80211 phy456: Selected rate control algorithm 'minstrel_ht' [ 1677.415945][ T5728] ieee80211 phy457: Selected rate control algorithm 'minstrel_ht' [ 1678.950724][ T5742] Process accounting resumed [ 1679.758075][ T5782] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1679.758075][ T5782] :0 is already present [ 1680.786551][ T29] audit: type=1326 audit(4294969670.376:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5801 comm="syz.3.9855" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd585f85d29 code=0x0 [ 1681.105831][ T5803] Process accounting resumed [ 1681.119697][ T5820] ieee80211 phy458: Selected rate control algorithm 'minstrel_ht' [ 1681.795826][ T5834] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1681.795826][ T5834] :0 is already present [ 1681.930136][ T5853] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9867'. [ 1682.019242][ T5853] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9867'. [ 1683.303064][ T5903] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1683.303064][ T5903] :0 is already present [ 1683.434744][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9879'. [ 1683.509969][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9879'. [ 1683.558907][ T5886] Process accounting resumed [ 1684.044556][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9886'. [ 1684.085332][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9886'. [ 1686.676665][ T5999] FAULT_INJECTION: forcing a failure. [ 1686.676665][ T5999] name failslab, interval 1, probability 0, space 0, times 0 [ 1686.691381][ T5999] CPU: 0 UID: 0 PID: 5999 Comm: syz.8.9909 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 1686.703117][ T5999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1686.714164][ T5999] Call Trace: [ 1686.717753][ T5999] [ 1686.720965][ T5999] dump_stack_lvl+0x16c/0x1f0 [ 1686.726099][ T5999] should_fail_ex+0x497/0x5b0 [ 1686.731232][ T5999] ? trace_lock_acquire+0x14e/0x1f0 [ 1686.736962][ T5999] should_failslab+0xc2/0x120 [ 1686.742097][ T5999] __kmalloc_noprof+0xce/0x4f0 [ 1686.747331][ T5999] ? io_cqring_event_overflow+0xcb/0x6f0 [ 1686.753510][ T5999] io_cqring_event_overflow+0xcb/0x6f0 [ 1686.759499][ T5999] __io_submit_flush_completions+0xf1a/0x1fd0 [ 1686.768645][ T5999] io_submit_sqes+0xa13/0x25f0 [ 1686.773948][ T5999] __do_sys_io_uring_enter+0xd43/0x1620 [ 1686.780044][ T5999] ? lock_release+0x4e2/0x6f0 [ 1686.785173][ T5999] ? do_user_addr_fault+0xe50/0x13f0 [ 1686.790969][ T5999] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1686.797530][ T5999] ? __pfx___up_read+0x10/0x10 [ 1686.802753][ T5999] ? ksys_write+0x1ba/0x250 [ 1686.807689][ T5999] ? __pfx_ksys_write+0x10/0x10 [ 1686.813012][ T5999] ? rcu_is_watching+0x12/0xc0 [ 1686.818244][ T5999] ? rcu_is_watching+0x12/0xc0 [ 1686.823472][ T5999] do_syscall_64+0xcd/0x250 [ 1686.828713][ T5999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.835183][ T5999] RIP: 0033:0x7f18db185d29 [ 1686.840034][ T5999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1686.861593][ T5999] RSP: 002b:00007f18dbedb038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1686.870832][ T5999] RAX: ffffffffffffffda RBX: 00007f18db375fa0 RCX: 00007f18db185d29 [ 1686.879587][ T5999] RDX: 000000000000cd00 RSI: 0000000000000090 RDI: 0000000000000003 [ 1686.888350][ T5999] RBP: 00007f18dbedb090 R08: 0000000000000000 R09: ffffffffffffffff [ 1686.897102][ T5999] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 1686.905855][ T5999] R13: 0000000000000000 R14: 00007f18db375fa0 R15: 00007ffca80650a8 [ 1686.914610][ T5999] [ 1686.917922][ C0] vkms_vblank_simulate: vblank timer overrun [ 1687.399415][ T6007] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1687.399415][ T6007] :0 is already present [ 1688.245367][ T6033] ieee80211 phy459: Selected rate control algorithm 'minstrel_ht' [ 1688.730247][ T6048] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1688.730247][ T6048] :0 is already present [ 1688.825673][ T6051] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9926'. [ 1689.876591][ T6079] ieee80211 phy460: Selected rate control algorithm 'minstrel_ht' [ 1690.639031][ T6103] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1690.639031][ T6103] :0 is already present [ 1691.057123][ T6116] ieee80211 phy461: Selected rate control algorithm 'minstrel_ht' [ 1691.655220][ T29] audit: type=1800 audit(4294969681.236:102): pid=6136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9950" name="lu_gp_id" dev="configfs" ino=179655 res=0 errno=0 [ 1692.662002][ T6161] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9959'. [ 1693.095474][ T6179] ieee80211 phy462: Selected rate control algorithm 'minstrel_ht' [ 1693.943830][ T6207] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9973'. [ 1694.340386][ T6218] proc: Bad value for 'gid' [ 1694.578808][ T6225] FAULT_INJECTION: forcing a failure. [ 1694.578808][ T6225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1694.681267][ T6225] CPU: 0 UID: 0 PID: 6225 Comm: syz.5.9979 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 1694.693035][ T6225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1694.704077][ T6225] Call Trace: [ 1694.707687][ T6225] [ 1694.710893][ T6225] dump_stack_lvl+0x16c/0x1f0 [ 1694.716025][ T6225] should_fail_ex+0x497/0x5b0 [ 1694.721158][ T6225] _copy_to_user+0x32/0xd0 [ 1694.726007][ T6225] simple_read_from_buffer+0xd0/0x160 [ 1694.731906][ T6225] proc_fail_nth_read+0x198/0x270 [ 1694.737421][ T6225] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1694.743505][ T6225] ? bpf_lsm_file_permission+0x9/0x10 [ 1694.749422][ T6225] ? security_file_permission+0x71/0x210 [ 1694.755608][ T6225] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1694.761697][ T6225] vfs_read+0x1df/0xbe0 [ 1694.766268][ T6225] ? __pfx_vfs_read+0x10/0x10 [ 1694.771396][ T6225] ? fput+0x67/0x440 [ 1694.775664][ T6225] ? __do_sys_io_uring_enter+0x5fb/0x1620 [ 1694.781945][ T6225] ? lock_release+0x4e2/0x6f0 [ 1694.787071][ T6225] ? do_user_addr_fault+0xe50/0x13f0 [ 1694.792876][ T6225] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1694.799441][ T6225] ? __pfx___up_read+0x10/0x10 [ 1694.804666][ T6225] ksys_read+0x12b/0x250 [ 1694.809317][ T6225] ? __pfx_ksys_read+0x10/0x10 [ 1694.814541][ T6225] ? rcu_is_watching+0x12/0xc0 [ 1694.819768][ T6225] ? rcu_is_watching+0x12/0xc0 [ 1694.824993][ T6225] do_syscall_64+0xcd/0x250 [ 1694.829958][ T6225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1694.836429][ T6225] RIP: 0033:0x7fbf1758473c [ 1694.841268][ T6225] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1694.862822][ T6225] RSP: 002b:00007fbf1831b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1694.872054][ T6225] RAX: ffffffffffffffda RBX: 00007fbf17775fa0 RCX: 00007fbf1758473c [ 1694.880806][ T6225] RDX: 000000000000000f RSI: 00007fbf1831b0a0 RDI: 0000000000000004 [ 1694.889556][ T6225] RBP: 00007fbf1831b090 R08: 0000000000000000 R09: ffffffffffffffff [ 1694.898308][ T6225] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 1694.907059][ T6225] R13: 0000000000000000 R14: 00007fbf17775fa0 R15: 00007ffdac814838 [ 1694.915815][ T6225] [ 1694.919255][ C0] vkms_vblank_simulate: vblank timer overrun [ 1695.173028][ T6231] ieee80211 phy463: Selected rate control algorithm 'minstrel_ht' [ 1695.654143][ T6246] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9985'. [ 1697.410287][ T6286] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9996'. [ 1697.452115][ T6280] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1697.452115][ T6280] :0 is already present [ 1697.683212][ T6292] ieee80211 phy464: Selected rate control algorithm 'minstrel_ht' [ 1698.510943][ T6310] netlink: 'syz.5.10001': attribute type 2 has an invalid length. [ 1698.968602][ T6316] ieee80211 phy465: Selected rate control algorithm 'minstrel_ht' [ 1700.715433][ T6336] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1700.715433][ T6336] :0 is already present [ 1701.164938][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10012'. [ 1701.246664][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10012'. [ 1701.700134][ T6361] ieee80211 phy466: Selected rate control algorithm 'minstrel_ht' [ 1701.861591][ T6365] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10016'. c υR[^~O ?/*'/V JzrkU'\X[ 1703.145585][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10027'. [ 1703.228610][ T6400] tc_dump_action: action bad kind [ 1703.785352][ T6412] sp0: Synchronizing with TNC [ 1704.294657][ T6422] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10031'. [ 1704.850044][ T6449] netlink: 74 bytes leftover after parsing attributes in process `syz.8.10035'. [ 1705.543099][ T6459] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10040'. [ 1706.179377][ T6467] ieee80211 phy467: Selected rate control algorithm 'minstrel_ht' [ 1706.344272][ T6471] FAULT_INJECTION: forcing a failure. [ 1706.344272][ T6471] name failslab, interval 1, probability 0, space 0, times 0 [ 1706.483320][ T6471] CPU: 0 UID: 0 PID: 6471 Comm: syz.6.10045 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 1706.495178][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1706.506222][ T6471] Call Trace: [ 1706.509809][ T6471] [ 1706.513036][ T6471] dump_stack_lvl+0x16c/0x1f0 [ 1706.518169][ T6471] should_fail_ex+0x497/0x5b0 [ 1706.523307][ T6471] ? fs_reclaim_acquire+0xae/0x150 [ 1706.528914][ T6471] should_failslab+0xc2/0x120 [ 1706.534047][ T6471] __kmalloc_noprof+0xce/0x4f0 [ 1706.539275][ T6471] ? tomoyo_realpath_from_path+0xbf/0x710 [ 1706.545558][ T6471] tomoyo_realpath_from_path+0xbf/0x710 [ 1706.551641][ T6471] ? tomoyo_path_number_perm+0x235/0x5b0 [ 1706.557826][ T6471] tomoyo_path_number_perm+0x248/0x5b0 [ 1706.563834][ T6471] ? tomoyo_path_number_perm+0x235/0x5b0 [ 1706.570018][ T6471] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1706.576588][ T6471] ? rcu_is_watching+0x12/0xc0 [ 1706.581818][ T6471] ? preempt_count_add+0x76/0x150 [ 1706.587366][ T6471] ? __pfx_lock_release+0x10/0x10 [ 1706.592872][ T6471] ? trace_lock_acquire+0x14e/0x1f0 [ 1706.598579][ T6471] ? __fget_files+0x40/0x3a0 [ 1706.603625][ T6471] ? lock_acquire+0x2f/0xb0 [ 1706.608557][ T6471] ? __fget_files+0x40/0x3a0 [ 1706.613588][ T6471] ? __fget_files+0x206/0x3a0 [ 1706.618719][ T6471] security_file_ioctl+0x9b/0x240 [ 1706.624228][ T6471] __x64_sys_ioctl+0xb7/0x200 [ 1706.629366][ T6471] do_syscall_64+0xcd/0x250 [ 1706.634310][ T6471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.640796][ T6471] RIP: 0033:0x7f2396985d29 [ 1706.645635][ T6471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1706.667207][ T6471] RSP: 002b:00007f239780e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1706.676445][ T6471] RAX: ffffffffffffffda RBX: 00007f2396b75fa0 RCX: 00007f2396985d29 [ 1706.685197][ T6471] RDX: 0000000000000000 RSI: 0000000080047456 RDI: 0000000000000005 [ 1706.693964][ T6471] RBP: 00007f239780e090 R08: 0000000000000000 R09: 0000000000000000 [ 1706.702715][ T6471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1706.711467][ T6471] R13: 0000000000000000 R14: 00007f2396b75fa0 R15: 00007ffdbe7f8048 [ 1706.720247][ T6471] [ 1709.499030][ T6471] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1709.789806][ T6516] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10057'. [ 1710.117255][ T6522] ieee80211 phy468: Selected rate control algorithm 'minstrel_ht' [ 1711.002129][ T6538] FAULT_INJECTION: forcing a failure. [ 1711.002129][ T6538] name failslab, interval 1, probability 0, space 0, times 0 [ 1711.084743][ T6538] CPU: 0 UID: 0 PID: 6538 Comm: syz.5.10062 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 1711.096600][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1711.107660][ T6538] Call Trace: [ 1711.111264][ T6538] [ 1711.114469][ T6538] dump_stack_lvl+0x16c/0x1f0 [ 1711.119600][ T6538] should_fail_ex+0x497/0x5b0 [ 1711.124729][ T6538] ? fs_reclaim_acquire+0xae/0x150 [ 1711.130338][ T6538] should_failslab+0xc2/0x120 [ 1711.135467][ T6538] __kmalloc_noprof+0xce/0x4f0 [ 1711.140710][ T6538] ? d_absolute_path+0x137/0x1b0 [ 1711.146126][ T6538] ? tomoyo_encode2+0x100/0x3e0 [ 1711.151449][ T6538] tomoyo_encode2+0x100/0x3e0 [ 1711.156573][ T6538] tomoyo_realpath_from_path+0x1a7/0x710 [ 1711.162779][ T6538] tomoyo_path_number_perm+0x248/0x5b0 [ 1711.168788][ T6538] ? tomoyo_path_number_perm+0x235/0x5b0 [ 1711.174979][ T6538] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1711.181557][ T6538] ? rcu_is_watching+0x12/0xc0 [ 1711.186782][ T6538] ? preempt_count_add+0x76/0x150 [ 1711.192313][ T6538] ? __pfx_lock_release+0x10/0x10 [ 1711.197841][ T6538] ? trace_lock_acquire+0x14e/0x1f0 [ 1711.203550][ T6538] ? __fget_files+0x40/0x3a0 [ 1711.208604][ T6538] ? lock_acquire+0x2f/0xb0 [ 1711.213535][ T6538] ? __fget_files+0x40/0x3a0 [ 1711.218568][ T6538] ? __fget_files+0x206/0x3a0 [ 1711.223720][ T6538] security_file_ioctl+0x9b/0x240 [ 1711.229231][ T6538] __x64_sys_ioctl+0xb7/0x200 [ 1711.234359][ T6538] do_syscall_64+0xcd/0x250 [ 1711.239300][ T6538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.245770][ T6538] RIP: 0033:0x7fbf17585d29 [ 1711.250631][ T6538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1711.272197][ T6538] RSP: 002b:00007fbf1831b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1711.281447][ T6538] RAX: ffffffffffffffda RBX: 00007fbf17775fa0 RCX: 00007fbf17585d29 [ 1711.290196][ T6538] RDX: 0000000000000024 RSI: 0000000000004c82 RDI: 0000000000000003 [ 1711.298948][ T6538] RBP: 00007fbf1831b090 R08: 0000000000000000 R09: 0000000000000000 [ 1711.307709][ T6538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1711.316471][ T6538] R13: 0000000000000000 R14: 00007fbf17775fa0 R15: 00007ffdac814838 [ 1711.325257][ T6538] [ 1711.873110][ T6545] sp0: Synchronizing with TNC [ 1712.146293][ T6549] mkiss: ax0: crc mode is auto. [ 1712.313487][ T6538] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1712.657185][ T6559] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10068'. [ 1712.852605][ T6561] ieee80211 phy469: Selected rate control algorithm 'minstrel_ht' [ 1715.739006][ T6602] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10083'. [ 1716.032855][ T6608] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10084'. [ 1716.858976][ T6615] netlink: 330 bytes leftover after parsing attributes in process `syz.5.10085'. [ 1717.682578][ T6627] ieee80211 phy470: Selected rate control algorithm 'minstrel_ht' [ 1718.993453][ T6653] netlink: 504 bytes leftover after parsing attributes in process `syz.6.10097'. [ 1719.984353][ T6663] caif:caif_disconnect_client(): nothing to disconnect [ 1720.616248][ T6676] block nbd67: Unsupported socket: shutdown callout must be supported. [ 1721.066516][ T6697] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10107'. [ 1722.937197][ T6730] ieee80211 phy471: Selected rate control algorithm 'minstrel_ht' [ 1723.117330][ T6735] FAULT_INJECTION: forcing a failure. [ 1723.117330][ T6735] name failslab, interval 1, probability 0, space 0, times 0 [ 1723.179187][ T6735] CPU: 0 UID: 0 PID: 6735 Comm: syz.5.10118 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 1723.191054][ T6735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1723.202110][ T6735] Call Trace: [ 1723.205697][ T6735] [ 1723.208901][ T6735] dump_stack_lvl+0x16c/0x1f0 [ 1723.214033][ T6735] should_fail_ex+0x497/0x5b0 [ 1723.219277][ T6735] ? fs_reclaim_acquire+0xae/0x150 [ 1723.224918][ T6735] should_failslab+0xc2/0x120 [ 1723.230075][ T6735] __kmalloc_noprof+0xce/0x4f0 [ 1723.235309][ T6735] ? tomoyo_realpath_from_path+0xbf/0x710 [ 1723.241591][ T6735] tomoyo_realpath_from_path+0xbf/0x710 [ 1723.247684][ T6735] ? tomoyo_path_number_perm+0x235/0x5b0 [ 1723.253870][ T6735] tomoyo_path_number_perm+0x248/0x5b0 [ 1723.259861][ T6735] ? tomoyo_path_number_perm+0x235/0x5b0 [ 1723.266086][ T6735] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1723.272652][ T6735] ? rcu_is_watching+0x12/0xc0 [ 1723.277880][ T6735] ? preempt_count_add+0x76/0x150 [ 1723.283400][ T6735] ? __pfx_lock_release+0x10/0x10 [ 1723.288902][ T6735] ? trace_lock_acquire+0x14e/0x1f0 [ 1723.294601][ T6735] ? __fget_files+0x40/0x3a0 [ 1723.299627][ T6735] ? lock_acquire+0x2f/0xb0 [ 1723.304554][ T6735] ? __fget_files+0x40/0x3a0 [ 1723.309579][ T6735] ? __fget_files+0x206/0x3a0 [ 1723.314706][ T6735] security_file_ioctl+0x9b/0x240 [ 1723.320215][ T6735] __x64_sys_ioctl+0xb7/0x200 [ 1723.325335][ T6735] do_syscall_64+0xcd/0x250 [ 1723.330271][ T6735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.336738][ T6735] RIP: 0033:0x7fbf17585d29 [ 1723.341583][ T6735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1723.363131][ T6735] RSP: 002b:00007fbf182d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1723.372366][ T6735] RAX: ffffffffffffffda RBX: 00007fbf17776160 RCX: 00007fbf17585d29 [ 1723.381112][ T6735] RDX: 00000000000071fc RSI: 00000000900064b9 RDI: 0000000000000005 [ 1723.389857][ T6735] RBP: 00007fbf182d9090 R08: 0000000000000000 R09: 0000000000000000 [ 1723.398601][ T6735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1723.407351][ T6735] R13: 0000000000000001 R14: 00007fbf17776160 R15: 00007ffdac814838 [ 1723.416101][ T6735] [ 1723.419450][ C0] vkms_vblank_simulate: vblank timer overrun [ 1724.410723][ T6735] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1725.028185][ T6756] caif:caif_disconnect_client(): nothing to disconnect [ 1725.184110][ T6761] Process accounting resumed [ 1725.231157][ T6764] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1725.698125][ T6779] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1726.284887][ T6794] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10141'. [ 1726.381094][ T6797] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 1726.460095][ T6797] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 1726.829238][ T29] audit: type=1804 audit(4294967327.530:103): pid=6788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.10130" name="/newroot/sys/kernel/tracing/free_buffer" dev="tracefs" ino=209 res=1 errno=0 [ 1726.854280][ C0] vkms_vblank_simulate: vblank timer overrun [ 1727.164824][ T6820] caif:caif_disconnect_client(): nothing to disconnect [ 1727.994947][ T6846] ieee80211 phy472: Selected rate control algorithm 'minstrel_ht' [ 1728.759034][ T6865] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1728.989159][ T6876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10156'. [ 1730.476901][ T6898] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 1730.563121][ T6898] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 1732.663743][ T29] audit: type=1804 audit(4294967333.350:104): pid=6920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.10172" name="/newroot/sys/kernel/tracing/free_buffer" dev="tracefs" ino=209 res=1 errno=0 [ 1732.688841][ C0] vkms_vblank_simulate: vblank timer overrun [ 1732.964009][ T6928] netlink: 324 bytes leftover after parsing attributes in process `syz.6.10174'. [ 1733.512410][ T6932] ieee80211 phy473: Selected rate control algorithm 'minstrel_ht' [ 1734.368505][ T6923] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1734.368505][ T6923] :0 is already present [ 1735.382456][ T6970] ieee80211 phy474: Selected rate control algorithm 'minstrel_ht' [ 1736.182444][ T6992] netlink: 146 bytes leftover after parsing attributes in process `syz.5.10193'. [ 1736.246303][ T6993] netlink: 146 bytes leftover after parsing attributes in process `syz.5.10193'. [ 1736.324074][ T6994] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10194'. [ 1736.669675][ T7003] erspan0: entered allmulticast mode [ 1736.867051][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1736.878455][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1738.095205][ T7035] kAFS: No cell specified [ 1738.130277][ T7036] ieee80211 phy475: Selected rate control algorithm 'minstrel_ht' [ 1738.463364][ T7042] mkiss: ax0: crc mode is auto. [ 1738.949408][ T7041] base_sock_release(ffff88807a36b000) sk=ffff8880b11eb000 [ 1739.600579][ T7059] caif:caif_disconnect_client(): nothing to disconnect [ 1740.066680][ T7080] ieee80211 phy476: Selected rate control algorithm 'minstrel_ht' [ 1740.169203][ T7085] kAFS: No cell specified [ 1742.798806][ T7131] kAFS: No cell specified [ 1742.826587][ T7132] ieee80211 phy477: Selected rate control algorithm 'minstrel_ht' [ 1743.561349][ T7151] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1743.623992][ T7151] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1744.564125][ T7178] ieee80211 phy478: Selected rate control algorithm 'minstrel_ht' [ 1746.238619][ T7218] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10256'. [ 1746.296283][ T7218] netlink: 334 bytes leftover after parsing attributes in process `syz.3.10256'. [ 1746.729788][ T7229] sctp: [Deprecated]: syz.6.10258 (pid 7229) Use of int in max_burst socket option. [ 1746.729788][ T7229] Use struct sctp_assoc_value instead [ 1747.914095][ T7253] ieee80211 phy479: Selected rate control algorithm 'minstrel_ht' [ 1748.293604][ T7262] ieee80211 phy480: Selected rate control algorithm 'minstrel_ht' [ 1750.452412][ T7303] ieee80211 phy481: Selected rate control algorithm 'minstrel_ht' [ 1750.549322][ T7305] netlink: 122 bytes leftover after parsing attributes in process `syz.5.10282'. [ 1750.601963][ T7305] netlink: 122 bytes leftover after parsing attributes in process `syz.5.10282'. [ 1752.160306][ T7338] ieee80211 phy482: Selected rate control algorithm 'minstrel_ht' [ 1752.327637][ T7330] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1752.327637][ T7330] :0 is already present [ 1752.824335][ T7352] FAULT_INJECTION: forcing a failure. [ 1752.824335][ T7352] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.922545][ T7352] CPU: 0 UID: 0 PID: 7352 Comm: syz.3.10295 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 1752.934403][ T7352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1752.945449][ T7352] Call Trace: [ 1752.949035][ T7352] [ 1752.952240][ T7352] dump_stack_lvl+0x16c/0x1f0 [ 1752.957394][ T7352] should_fail_ex+0x497/0x5b0 [ 1752.962523][ T7352] ? fs_reclaim_acquire+0xae/0x150 [ 1752.968129][ T7352] should_failslab+0xc2/0x120 [ 1752.973259][ T7352] __kmalloc_noprof+0xce/0x4f0 [ 1752.978491][ T7352] ? tomoyo_encode2+0x100/0x3e0 [ 1752.983812][ T7352] tomoyo_encode2+0x100/0x3e0 [ 1752.988943][ T7352] tomoyo_realpath_from_path+0x1a7/0x710 [ 1752.995122][ T7352] ? tomoyo_path_number_perm+0x235/0x5b0 [ 1753.001308][ T7352] tomoyo_path_number_perm+0x248/0x5b0 [ 1753.007330][ T7352] ? tomoyo_path_number_perm+0x235/0x5b0 [ 1753.013516][ T7352] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1753.020096][ T7352] ? rcu_is_watching+0x12/0xc0 [ 1753.025322][ T7352] ? preempt_count_add+0x76/0x150 [ 1753.030852][ T7352] ? __pfx_lock_release+0x10/0x10 [ 1753.036363][ T7352] ? trace_lock_acquire+0x14e/0x1f0 [ 1753.042082][ T7352] ? __fget_files+0x40/0x3a0 [ 1753.047127][ T7352] ? lock_acquire+0x2f/0xb0 [ 1753.052082][ T7352] ? __fget_files+0x40/0x3a0 [ 1753.057131][ T7352] ? __fget_files+0x206/0x3a0 [ 1753.062257][ T7352] security_file_ioctl+0x9b/0x240 [ 1753.067779][ T7352] __x64_sys_ioctl+0xb7/0x200 [ 1753.072906][ T7352] do_syscall_64+0xcd/0x250 [ 1753.077845][ T7352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1753.084310][ T7352] RIP: 0033:0x7fd585f85d29 [ 1753.089147][ T7352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1753.110702][ T7352] RSP: 002b:00007fd586da2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1753.119938][ T7352] RAX: ffffffffffffffda RBX: 00007fd586175fa0 RCX: 00007fd585f85d29 [ 1753.128691][ T7352] RDX: 0000000000000000 RSI: 0000000080047437 RDI: 0000000000000005 [ 1753.137460][ T7352] RBP: 00007fd586da2090 R08: 0000000000000000 R09: 0000000000000000 [ 1753.146310][ T7352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1753.155058][ T7352] R13: 0000000000000000 R14: 00007fd586175fa0 R15: 00007ffd0d425768 [ 1753.163834][ T7352] [ 1753.167247][ C0] vkms_vblank_simulate: vblank timer overrun [ 1754.147464][ T7352] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1754.670929][ T7384] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10308'. [ 1755.027331][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10309'. [ 1755.342483][ T7396] Process accounting paused [ 1755.883068][ T7404] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1755.962896][ T7414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10317'. [ 1755.973736][ T7404] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1756.058669][ T7404] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1756.065249][ T7404] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1756.174019][ T7415] ieee80211 phy483: Selected rate control algorithm 'minstrel_ht' [ 1756.190232][ T7404] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1756.929973][ T7421] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1756.929973][ T7421] :0 is already present [ 1757.900906][ T1286] Bluetooth: hci2: command 0x0406 tx timeout [ 1758.059199][ T1286] Bluetooth: hci5: command 0x0406 tx timeout [ 1758.138423][ T1286] Bluetooth: hci0: command 0x0406 tx timeout [ 1758.145129][ T1286] Bluetooth: hci1: command 0x0406 tx timeout [ 1758.221340][ T1286] Bluetooth: hci4: command 0x0406 tx timeout [ 1758.367775][ T7455] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 1759.539119][ T7480] ieee80211 phy484: Selected rate control algorithm 'minstrel_ht' [ 1760.323005][ T7497] netlink: 'syz.3.10341': attribute type 2 has an invalid length. [ 1760.753250][ T7515] ieee80211 phy485: Selected rate control algorithm 'minstrel_ht' [ 1761.579783][ T7533] ieee80211 phy486: Selected rate control algorithm 'minstrel_ht' [ 1761.878999][ T7540] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10351'. [ 1762.219883][ T7549] FAULT_INJECTION: forcing a failure. [ 1762.219883][ T7549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1762.304500][ T7549] CPU: 0 UID: 0 PID: 7549 Comm: syz.3.10353 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 1762.316357][ T7549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1762.327419][ T7549] Call Trace: [ 1762.331010][ T7549] [ 1762.334214][ T7549] dump_stack_lvl+0x16c/0x1f0 [ 1762.339345][ T7549] should_fail_ex+0x497/0x5b0 [ 1762.344473][ T7549] _copy_from_user+0x2e/0xd0 [ 1762.349524][ T7549] copy_msghdr_from_user+0x99/0x160 [ 1762.355228][ T7549] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1762.361603][ T7549] ? _kstrtoull+0x146/0x200 [ 1762.366555][ T7549] ? __pfx__kstrtoull+0x10/0x10 [ 1762.371886][ T7549] ? lock_release+0x4e2/0x6f0 [ 1762.377016][ T7549] ___sys_sendmsg+0xff/0x1e0 [ 1762.382065][ T7549] ? __pfx____sys_sendmsg+0x10/0x10 [ 1762.387767][ T7549] ? __pfx_kstrtouint+0x10/0x10 [ 1762.393083][ T7549] ? trace_lock_acquire+0x14e/0x1f0 [ 1762.398783][ T7549] ? folio_unlock+0x7d/0xd0 [ 1762.403721][ T7549] __sys_sendmmsg+0x201/0x420 [ 1762.408870][ T7549] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1762.414597][ T7549] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1762.421172][ T7549] ? fput+0x67/0x440 [ 1762.425513][ T7549] ? ksys_write+0x1ba/0x250 [ 1762.430466][ T7549] ? __pfx_ksys_write+0x10/0x10 [ 1762.435790][ T7549] __x64_sys_sendmmsg+0x9c/0x100 [ 1762.441227][ T7549] do_syscall_64+0xcd/0x250 [ 1762.446183][ T7549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1762.452678][ T7549] RIP: 0033:0x7fd585f85d29 [ 1762.457527][ T7549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1762.479107][ T7549] RSP: 002b:00007fd586da2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1762.488343][ T7549] RAX: ffffffffffffffda RBX: 00007fd586175fa0 RCX: 00007fd585f85d29 [ 1762.497112][ T7549] RDX: 0000000000000046 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1762.505863][ T7549] RBP: 00007fd586da2090 R08: 0000000000000000 R09: 0000000000000000 [ 1762.514616][ T7549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1762.523368][ T7549] R13: 0000000000000000 R14: 00007fd586175fa0 R15: 00007ffd0d425768 [ 1762.532129][ T7549] [ 1762.535535][ C0] vkms_vblank_simulate: vblank timer overrun [ 1762.549356][ T7552] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10352'. [ 1763.600826][ T7569] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10361'. [ 1763.969889][ T7580] block nbd12: Cannot use ioctl interface on a netlink controlled device. [ 1764.098106][ T7583] sp0: Synchronizing with TNC [ 1764.244960][ T7588] FAULT_INJECTION: forcing a failure. [ 1764.244960][ T7588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1764.464238][ T7588] CPU: 0 UID: 0 PID: 7588 Comm: syz.8.10367 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 1764.476101][ T7588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1764.487182][ T7588] Call Trace: [ 1764.490774][ T7588] [ 1764.493984][ T7588] dump_stack_lvl+0x16c/0x1f0 [ 1764.499119][ T7588] should_fail_ex+0x497/0x5b0 [ 1764.504267][ T7588] _copy_from_user+0x2e/0xd0 [ 1764.509307][ T7588] snd_seq_oss_write+0x398/0x7b0 [ 1764.514724][ T7588] ? folio_unlock+0x7d/0xd0 [ 1764.519677][ T7588] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1764.525671][ T7588] ? rcu_is_watching+0x12/0xc0 [ 1764.530901][ T7588] ? lock_release+0x4e2/0x6f0 [ 1764.536044][ T7588] ? apparmor_file_permission+0x251/0x400 [ 1764.542345][ T7588] ? __pfx_odev_write+0x10/0x10 [ 1764.547662][ T7588] odev_write+0x51/0xa0 [ 1764.552213][ T7588] vfs_write+0x24c/0x1150 [ 1764.556961][ T7588] ? __fget_files+0x1fc/0x3a0 [ 1764.562104][ T7588] ? __pfx_lock_release+0x10/0x10 [ 1764.567613][ T7588] ? __pfx_vfs_write+0x10/0x10 [ 1764.572874][ T7588] ? __fget_files+0x40/0x3a0 [ 1764.577938][ T7588] ? lock_acquire+0x2f/0xb0 [ 1764.582900][ T7588] ? __fget_files+0x40/0x3a0 [ 1764.587948][ T7588] ? __fget_files+0x206/0x3a0 [ 1764.593094][ T7588] ksys_write+0x12b/0x250 [ 1764.597839][ T7588] ? __pfx_ksys_write+0x10/0x10 [ 1764.603165][ T7588] ? rcu_is_watching+0x12/0xc0 [ 1764.608391][ T7588] ? rcu_is_watching+0x12/0xc0 [ 1764.613616][ T7588] do_syscall_64+0xcd/0x250 [ 1764.618562][ T7588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1764.625034][ T7588] RIP: 0033:0x7f18db185d29 [ 1764.629874][ T7588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1764.651833][ T7588] RSP: 002b:00007f18d8ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1764.661165][ T7588] RAX: ffffffffffffffda RBX: 00007f18db376080 RCX: 00007f18db185d29 [ 1764.669913][ T7588] RDX: 0000000000000034 RSI: 0000000020000440 RDI: 0000000000000003 [ 1764.678662][ T7588] RBP: 00007f18d8ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1764.687411][ T7588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1764.696161][ T7588] R13: 0000000000000001 R14: 00007f18db376080 R15: 00007ffca80650a8 [ 1764.704919][ T7588] [ 1764.708395][ C0] vkms_vblank_simulate: vblank timer overrun [ 1766.479686][ T7603] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10372'. [ 1766.658646][ T7607] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1767.693887][ T874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1767.702534][ T874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1767.713543][ T874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1767.721971][ T874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1767.730386][ T874] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1767.738559][ T874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1768.118398][ T7623] block nbd67: Unsupported socket: shutdown callout must be supported. [ 1768.156279][ T7618] chnl_net:caif_netlink_parms(): no params data found [ 1768.869975][ T7618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1768.913546][ T7618] bridge0: port 1(bridge_slave_0) entered disabled state [ 1768.963766][ T7618] bridge_slave_0: entered allmulticast mode [ 1769.004697][ T7618] bridge_slave_0: entered promiscuous mode [ 1769.079329][ T7618] bridge0: port 2(bridge_slave_1) entered blocking state [ 1769.131191][ T7618] bridge0: port 2(bridge_slave_1) entered disabled state [ 1769.178993][ T7618] bridge_slave_1: entered allmulticast mode [ 1769.222146][ T7618] bridge_slave_1: entered promiscuous mode [ 1769.604618][ T7618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1769.683890][ T7618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1769.823192][ T874] Bluetooth: hci0: command tx timeout [ 1770.066407][ T7618] team0: Port device team_slave_0 added [ 1770.115751][ T7618] team0: Port device team_slave_1 added [ 1770.214267][ T7618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1770.259635][ T7618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1770.403389][ T7618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1770.480000][ T7618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1770.522302][ T7618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1770.664506][ T7618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1770.805813][ T7618] hsr_slave_0: entered promiscuous mode [ 1770.841819][ T7618] hsr_slave_1: entered promiscuous mode [ 1770.873250][ T7618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1770.908408][ T7618] Cannot create hsr debugfs directory [ 1771.207825][ T7618] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1771.251689][ T7618] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1771.297140][ T7618] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1771.353910][ T7618] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1771.611607][ T7618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1771.681844][ T7618] 8021q: adding VLAN 0 to HW filter on device team0 [ 1771.731852][ T7667] ieee80211 phy487: Selected rate control algorithm 'minstrel_ht' [ 1771.898500][ T874] Bluetooth: hci0: command tx timeout [ 1771.915364][T31628] bridge0: port 1(bridge_slave_0) entered blocking state [ 1771.923202][T31628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1771.995928][T31628] bridge0: port 2(bridge_slave_1) entered blocking state [ 1772.003761][T31628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1772.134578][ T7618] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1772.194985][ T7618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1772.362202][ T7675] ieee80211 phy488: Selected rate control algorithm 'minstrel_ht' [ 1772.745732][ T7618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1773.075433][ T7688] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1773.267459][ T7618] veth0_vlan: entered promiscuous mode [ 1773.321709][ T7618] veth1_vlan: entered promiscuous mode [ 1773.435529][ T7618] veth0_macvtap: entered promiscuous mode [ 1773.479432][ T7618] veth1_macvtap: entered promiscuous mode [ 1773.559260][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1773.611321][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1773.671403][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1773.722140][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1773.778634][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1773.818927][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1773.874724][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1773.938454][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1773.973301][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1773.985366][ T874] Bluetooth: hci0: command tx timeout [ 1774.043752][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.103064][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1774.163558][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.216043][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1774.282683][ T7697] Falling back ldisc for ptm0. [ 1774.290353][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.344144][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1774.419789][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.463225][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1774.520096][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.584767][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1774.646196][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.689688][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1774.754313][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.811737][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1774.864407][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.911698][ T7618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1774.983353][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1775.054230][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1775.109696][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1775.173105][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1775.224458][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1775.297960][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1775.354977][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1775.389335][ T7712] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10403'. [ 1775.413085][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1775.460569][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1775.510250][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1775.556504][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1775.601960][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1775.664626][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1775.725780][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1775.772529][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1775.816473][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1775.863150][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1775.914005][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1775.964766][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1776.014757][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.056529][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1776.068556][ T874] Bluetooth: hci0: command tx timeout [ 1776.109798][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.153673][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1776.200762][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.241897][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1776.286680][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.332788][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1776.384464][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.425049][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1776.475400][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.519965][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1776.579106][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.621623][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1776.674108][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.710867][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1776.756135][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.800591][ T7618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1776.848477][ T7714] ieee80211 phy489: Selected rate control algorithm 'minstrel_ht' [ 1777.008031][ T7618] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.067637][ T7618] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.112306][ T7618] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.141532][ T7618] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.316935][ T7618] ieee80211 phy490: Selected rate control algorithm 'minstrel_ht' [ 1777.561735][T31635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1777.572080][ T7618] ieee80211 phy491: Selected rate control algorithm 'minstrel_ht' [ 1777.616024][T31635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1777.794780][T31621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1777.846337][T31621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1778.053832][ T7734] ieee80211 phy492: Selected rate control algorithm 'minstrel_ht' [ 1778.509845][ T7743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10412'. [ 1778.741711][ T7750] ieee80211 phy493: Selected rate control algorithm 'minstrel_ht' [ 1779.448356][ T7764] block nbd67: Unsupported socket: shutdown callout must be supported. [ 1780.228080][ T7775] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1780.228080][ T7775] :0 is already present [ 1780.649787][ T7791] caif:caif_disconnect_client(): nothing to disconnect [ 1781.245442][ T7796] ieee80211 phy494: Selected rate control algorithm 'minstrel_ht' [ 1781.406487][ T7806] FAULT_INJECTION: forcing a failure. [ 1781.406487][ T7806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1781.504733][ T7806] CPU: 0 UID: 0 PID: 7806 Comm: syz.8.10428 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 1781.516597][ T7806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1781.527641][ T7806] Call Trace: [ 1781.531228][ T7806] [ 1781.534430][ T7806] dump_stack_lvl+0x16c/0x1f0 [ 1781.539566][ T7806] should_fail_ex+0x497/0x5b0 [ 1781.544701][ T7806] _copy_from_user+0x2e/0xd0 [ 1781.549738][ T7806] move_addr_to_kernel+0x68/0x160 [ 1781.555263][ T7806] __sys_bind+0x11c/0x260 [ 1781.560007][ T7806] ? __pfx___sys_bind+0x10/0x10 [ 1781.565323][ T7806] ? __fget_files+0x206/0x3a0 [ 1781.570459][ T7806] ? __pfx_ksys_write+0x10/0x10 [ 1781.575789][ T7806] ? rcu_is_watching+0x12/0xc0 [ 1781.581014][ T7806] __x64_sys_bind+0x72/0xb0 [ 1781.585951][ T7806] do_syscall_64+0xcd/0x250 [ 1781.590894][ T7806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1781.597379][ T7806] RIP: 0033:0x7f18db185d29 [ 1781.602218][ T7806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1781.623782][ T7806] RSP: 002b:00007f18dbedb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1781.633211][ T7806] RAX: ffffffffffffffda RBX: 00007f18db375fa0 RCX: 00007f18db185d29 [ 1781.641966][ T7806] RDX: 000000000000006b RSI: 0000000020000080 RDI: 0000000000000003 [ 1781.650741][ T7806] RBP: 00007f18dbedb090 R08: 0000000000000000 R09: 0000000000000000 [ 1781.659531][ T7806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1781.668378][ T7806] R13: 0000000000000000 R14: 00007f18db375fa0 R15: 00007ffca80650a8 [ 1781.677229][ T7806] [ 1782.650330][ T29] audit: type=1804 audit(4294967383.350:105): pid=7823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.10431" name="/newroot/sys/kernel/tracing/free_buffer" dev="tracefs" ino=209 res=1 errno=0 [ 1782.851327][ T29] audit: type=1804 audit(4294967383.380:106): pid=7823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.10431" name="/newroot/sys/kernel/tracing/free_buffer" dev="tracefs" ino=209 res=1 errno=0 [ 1783.090339][ T29] audit: type=1804 audit(4294967383.380:107): pid=7823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.10431" name="/newroot/sys/kernel/tracing/free_buffer" dev="tracefs" ino=209 res=1 errno=0 [ 1783.301645][ T29] audit: type=1804 audit(4294967383.400:108): pid=7823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.10431" name="/newroot/sys/kernel/tracing/free_buffer" dev="tracefs" ino=209 res=1 errno=0 [ 1783.551552][ T7847] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1783.551552][ T7847] :0 is already present [ 1784.329777][ T7864] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10442'. [ 1784.717253][ T7889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10449'. [ 1784.803657][ T7889] nbd: must specify a size in bytes for the device [ 1785.090912][ T7906] netlink: 'syz.6.10453': attribute type 1 has an invalid length. [ 1785.369906][ T7916] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10456'. [ 1785.881779][ T29] audit: type=1800 audit(4294967386.580:109): pid=7925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm=FFFFF2FFFFFFF2FFFFFFF2FFFFFFF2 name="features" dev="configfs" ino=189456 res=0 errno=0 [ 1785.905961][ C0] vkms_vblank_simulate: vblank timer overrun [ 1786.449393][ T7931] ieee80211 phy495: Selected rate control algorithm 'minstrel_ht' [ 1786.612571][ T7900] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1786.612571][ T7900] :0 is already present [ 1786.720229][ T7909] Process accounting resumed [ 1787.020304][ T29] audit: type=1800 audit(4294967387.710:110): pid=7949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.10466" name="lu_gp_id" dev="configfs" ino=189599 res=0 errno=0 [ 1787.063944][ T7945] ieee80211 phy496: Selected rate control algorithm 'minstrel_ht' [ 1787.784257][ T7974] tipc: Started in network mode [ 1787.826794][ T7974] tipc: Node identity ee00, cluster identity 4711 [ 1787.864920][ T7974] tipc: Node number set to 60928 [ 1788.022301][ T7985] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1788.505595][T32326] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 1788.589823][ T1286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1788.597753][ T1286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1788.606901][ T1286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1788.615528][ T1286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1788.624861][ T1286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1788.636629][ T1286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1788.655554][T31625] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.835927][T31625] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.945967][ T7993] snd_aloop snd_aloop.0: control 1:6:6:^ [ 1788.945967][ T7993] :0 is already present [ 1788.961733][ T8005] ieee80211 phy497: Selected rate control algorithm 'minstrel_ht' [ 1789.191249][T31625] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1789.403245][T31625] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1789.822352][T31625] bridge_slave_1: left allmulticast mode [ 1789.854044][T31625] bridge_slave_1: left promiscuous mode [ 1789.898996][T31625] bridge0: port 2(bridge_slave_1) entered disabled state [ 1790.002130][T31625] bridge_slave_0: left allmulticast mode [ 1790.048344][T31625] bridge_slave_0: left promiscuous mode [ 1790.073758][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10487'. [ 1790.088355][T31625] bridge0: port 1(bridge_slave_0) entered disabled state [ 1790.464843][T31625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1790.597303][T31625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1790.673825][T31625] bond0 (unregistering): Released all slaves [ 1790.699472][ T874] Bluetooth: hci1: command tx timeout [ 1790.743469][ T8061] netlink: 342 bytes leftover after parsing attributes in process `syz.3.10489'. [ 1790.762169][ T7996] chnl_net:caif_netlink_parms(): no params data found [ 1790.832326][ T8044] ieee80211 phy498: Selected rate control algorithm 'minstrel_ht' [ 1791.569471][ T7996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1791.577271][ T7996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1791.688853][ T7996] bridge_slave_0: entered allmulticast mode [ 1791.732981][ T7996] bridge_slave_0: entered promiscuous mode [ 1791.902115][ T7996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1791.938124][ T7996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1791.994874][ T7996] bridge_slave_1: entered allmulticast mode [ 1792.037263][ T7996] bridge_slave_1: entered promiscuous mode [ 1792.275281][ T7996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1792.353764][ T7996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1792.578336][ T8076] caif:caif_disconnect_client(): nothing to disconnect [ 1792.690869][ T7996] team0: Port device team_slave_0 added [ 1792.741320][ T7996] team0: Port device team_slave_1 added [ 1792.781144][ T874] Bluetooth: hci1: command tx timeout [ 1793.199475][ T7996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1793.238434][ T7996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1793.266928][ C0] vkms_vblank_simulate: vblank timer overrun [ 1793.461738][ T7996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1793.533959][ T7996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1793.571547][ T7996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1793.600018][ C0] vkms_vblank_simulate: vblank timer overrun [ 1793.754976][ T7996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1793.872175][ T6025] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 1793.914000][ T8111] ieee80211 phy499: Selected rate control algorithm 'minstrel_ht' [ 1794.407813][ T7996] hsr_slave_0: entered promiscuous mode [ 1794.449630][ T7996] hsr_slave_1: entered promiscuous mode [ 1794.518858][ T7996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1794.527449][ T7996] Cannot create hsr debugfs directory [ 1794.858582][ T874] Bluetooth: hci1: command tx timeout [ 1794.997136][ T1286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1795.012358][ T1286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1795.023995][ T1286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1795.036099][ T1286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1795.044698][ T1286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1795.053594][ T1286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1795.813481][ T8135] chnl_net:caif_netlink_parms(): no params data found [ 1796.360597][ T8135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1796.398335][ T8135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1796.406382][ T8135] bridge_slave_0: entered allmulticast mode [ 1796.474813][ T8135] bridge_slave_0: entered promiscuous mode [ 1796.645475][T31625] hsr_slave_0: left promiscuous mode [ 1796.693609][T31625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1796.735201][T31625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1796.811409][T31625] veth1_macvtap: left promiscuous mode [ 1796.817501][T31625] veth0_macvtap: left promiscuous mode [ 1796.890703][T31625] veth1_vlan: left promiscuous mode [ 1796.896527][T31625] veth0_vlan: left promiscuous mode [ 1796.938430][ T1286] Bluetooth: hci1: command tx timeout [ 1797.098643][ T1286] Bluetooth: hci3: command tx timeout [ 1797.405465][T31625] team0 (unregistering): Port device team_slave_1 removed [ 1797.501504][T31625] team0 (unregistering): Port device team_slave_0 removed [ 1797.751506][ T8135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1797.798565][ T8135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.842170][ T8135] bridge_slave_1: entered allmulticast mode [ 1797.879064][ T8135] bridge_slave_1: entered promiscuous mode [ 1797.942532][ T7996] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1797.982786][ T7996] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1798.080973][ T8135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1798.140364][ T7996] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1798.182145][ T7996] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1798.269262][ T8135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1798.315778][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1798.324824][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1798.414805][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10508'. [ 1798.449343][ T8135] team0: Port device team_slave_0 added [ 1798.456845][ T8135] team0: Port device team_slave_1 added [ 1798.672537][ T8183] ieee80211 phy500: Selected rate control algorithm 'minstrel_ht' [ 1798.901854][ T8135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1798.936976][ T8135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1799.072750][ T8135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1799.149474][ T8135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1799.178422][ T1286] Bluetooth: hci3: command tx timeout [ 1799.217940][ T8135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1799.351649][ T8135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1799.617019][ T8135] hsr_slave_0: entered promiscuous mode [ 1799.682491][ T8135] hsr_slave_1: entered promiscuous mode [ 1799.736749][ T8135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1799.792104][ T8135] Cannot create hsr debugfs directory [ 1800.053637][ T7996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1800.257958][ T7996] 8021q: adding VLAN 0 to HW filter on device team0 [ 1800.320694][ T8239] ieee80211 phy501: Selected rate control algorithm 'minstrel_ht' [ 1800.576667][T31625] bridge0: port 1(bridge_slave_0) entered blocking state [ 1800.584531][T31625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1800.795338][T31625] bridge0: port 2(bridge_slave_1) entered blocking state [ 1800.803179][T31625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1801.142821][ T8135] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 1801.156691][ T8135] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1801.165929][ T8135] CPU: 0 UID: 0 PID: 8135 Comm: syz-executor Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 1801.177870][ T8135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1801.188919][ T8135] RIP: 0010:sctp_inetaddr_event+0x160/0x6d0 [ 1801.195396][ T8135] Code: 00 00 00 00 00 fc ff df 48 89 44 24 28 48 c1 e8 03 4c 01 e0 48 89 44 24 18 eb 2e e8 9a e3 3c f7 48 89 e8 49 89 ee 48 c1 e8 03 <42> 80 3c 20 00 0f 85 46 04 00 00 48 39 2c 24 48 89 eb 48 8b 45 00 [ 1801.217015][ T8135] RSP: 0018:ffffc9000ba77430 EFLAGS: 00010246 [ 1801.223671][ T8135] RAX: 0000000000000000 RBX: ffff888024354b00 RCX: ffffffff8a5c6bb2 [ 1801.232437][ T8135] RDX: ffff888097a3bc00 RSI: ffffffff8a5c6b56 RDI: 0000000000000003 [ 1801.241204][ T8135] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000002 [ 1801.249956][ T8135] R10: 0000000000000000 R11: ffff8880b8629458 R12: dffffc0000000000 [ 1801.258704][ T8135] R13: ffff888061359e00 R14: 0000000000000000 R15: 0000000000000000 [ 1801.267454][ T8135] FS: 000055557667a500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1801.277263][ T8135] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1801.284487][ T8135] CR2: 00007fff60982428 CR3: 000000006d632000 CR4: 00000000003526f0 [ 1801.293256][ T8135] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1801.302035][ T8135] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1801.310790][ T8135] Call Trace: [ 1801.314398][ T8135] [ 1801.317616][ T8135] ? die_addr+0x3b/0xa0 [ 1801.322175][ T8135] ? exc_general_protection+0x155/0x230 [ 1801.328266][ T8135] ? asm_exc_general_protection+0x26/0x30 [ 1801.334568][ T8135] ? sctp_inetaddr_event+0x1b2/0x6d0 [ 1801.340383][ T8135] ? sctp_inetaddr_event+0x156/0x6d0 [ 1801.346178][ T8135] ? sctp_inetaddr_event+0x160/0x6d0 [ 1801.351987][ T8135] notifier_call_chain+0xb7/0x410 [ 1801.357501][ T8135] ? __pfx_sctp_inetaddr_event+0x10/0x10 [ 1801.363702][ T8135] blocking_notifier_call_chain+0x69/0xa0 [ 1801.369988][ T8135] __inet_del_ifa+0x3dd/0xf40 [ 1801.375127][ T8135] inetdev_event+0x5c5/0x16b0 [ 1801.380262][ T8135] ? __pfx_inetdev_event+0x10/0x10 [ 1801.385895][ T8135] ? cfg802154_netdev_notifier_call+0x391/0xa00 [ 1801.392749][ T8135] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1801.399217][ T8135] notifier_call_chain+0xb7/0x410 [ 1801.404732][ T8135] ? __pfx_inetdev_event+0x10/0x10 [ 1801.410346][ T8135] call_netdevice_notifiers_info+0xbe/0x140 [ 1801.416824][ T8135] unregister_netdevice_many_notify+0x8d5/0x1e60 [ 1801.423777][ T8135] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1801.430263][ T8135] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1801.437698][ T8135] ? rcu_is_watching+0x12/0xc0 [ 1801.442932][ T8135] ? nsim_destroy+0x6f/0x6b0 [ 1801.447975][ T8135] ? __pfx___mutex_lock+0x10/0x10 [ 1801.453491][ T8135] ? __pfx_lock_release+0x10/0x10 [ 1801.459006][ T8135] unregister_netdevice_queue+0x307/0x3f0 [ 1801.465293][ T8135] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1801.472174][ T8135] nsim_destroy+0x107/0x6b0 [ 1801.477120][ T8135] __nsim_dev_port_del+0x189/0x240 [ 1801.482732][ T8135] nsim_dev_reload_destroy+0x108/0x4d0 [ 1801.488728][ T8135] nsim_drv_remove+0x52/0x1d0 [ 1801.493865][ T8135] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1801.499663][ T8135] device_remove+0xc8/0x170 [ 1801.504624][ T8135] device_release_driver_internal+0x44a/0x610 [ 1801.511286][ T8135] bus_remove_device+0x22f/0x420 [ 1801.516705][ T8135] device_del+0x396/0x9f0 [ 1801.521455][ T8135] ? __pfx_device_del+0x10/0x10 [ 1801.526781][ T8135] device_unregister+0x1d/0xc0 [ 1801.532008][ T8135] del_device_store+0x346/0x4b0 [ 1801.537326][ T8135] ? __pfx_del_device_store+0x10/0x10 [ 1801.543220][ T8135] ? rcu_is_watching+0x12/0xc0 [ 1801.548465][ T8135] ? trace_lock_acquire+0x14e/0x1f0 [ 1801.554172][ T8135] ? kernfs_fop_write_iter+0x29e/0x500 [ 1801.560281][ T8135] ? __pfx_del_device_store+0x10/0x10 [ 1801.566180][ T8135] bus_attr_store+0x71/0xb0 [ 1801.571118][ T8135] ? __pfx_bus_attr_store+0x10/0x10 [ 1801.576835][ T8135] sysfs_kf_write+0x117/0x170 [ 1801.582005][ T8135] kernfs_fop_write_iter+0x33d/0x500 [ 1801.587833][ T8135] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1801.593552][ T8135] vfs_write+0x5ae/0x1150 [ 1801.598297][ T8135] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1801.604773][ T8135] ? __pfx_vfs_write+0x10/0x10 [ 1801.610024][ T8135] ? __pfx_do_sys_openat2+0x10/0x10 [ 1801.615743][ T8135] ksys_write+0x12b/0x250 [ 1801.620493][ T8135] ? __pfx_ksys_write+0x10/0x10 [ 1801.625833][ T8135] ? rcu_is_watching+0x12/0xc0 [ 1801.631066][ T8135] ? rcu_is_watching+0x12/0xc0 [ 1801.636293][ T8135] do_syscall_64+0xcd/0x250 [ 1801.641260][ T8135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.647730][ T8135] RIP: 0033:0x7f362db847df [ 1801.652588][ T8135] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1801.674149][ T8135] RSP: 002b:00007ffd007cde50 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1801.683389][ T8135] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f362db847df [ 1801.692145][ T8135] RDX: 0000000000000001 RSI: 00007ffd007cdea0 RDI: 0000000000000005 [ 1801.700894][ T8135] RBP: 00007f362dc02cb5 R08: 0000000000000000 R09: 00007ffd007cdca7 [ 1801.709651][ T8135] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1801.718404][ T8135] R13: 00007ffd007cdea0 R14: 00007f362e8a4620 R15: 0000000000000003 [ 1801.727159][ T8135] [ 1801.730458][ T8135] Modules linked in: [ 1801.734897][ T8135] ---[ end trace 0000000000000000 ]--- [ 1801.740910][ T8135] RIP: 0010:sctp_inetaddr_event+0x160/0x6d0 [ 1801.747390][ T8135] Code: 00 00 00 00 00 fc ff df 48 89 44 24 28 48 c1 e8 03 4c 01 e0 48 89 44 24 18 eb 2e e8 9a e3 3c f7 48 89 e8 49 89 ee 48 c1 e8 03 <42> 80 3c 20 00 0f 85 46 04 00 00 48 39 2c 24 48 89 eb 48 8b 45 00 [ 1801.769006][ T8135] RSP: 0018:ffffc9000ba77430 EFLAGS: 00010246 [ 1801.775664][ T8135] RAX: 0000000000000000 RBX: ffff888024354b00 RCX: ffffffff8a5c6bb2 [ 1801.784442][ T8135] RDX: ffff888097a3bc00 RSI: ffffffff8a5c6b56 RDI: 0000000000000003 [ 1801.793235][ T8135] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000002 [ 1801.802008][ T8135] R10: 0000000000000000 R11: ffff8880b8629458 R12: dffffc0000000000 [ 1801.810783][ T8135] R13: ffff888061359e00 R14: 0000000000000000 R15: 0000000000000000 [ 1801.819561][ T8135] FS: 000055557667a500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1801.829397][ T8135] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1801.836630][ T8135] CR2: 00007fff60982428 CR3: 000000006d632000 CR4: 00000000003526f0 [ 1801.845421][ T8135] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1801.854199][ T8135] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1801.862979][ T8135] Kernel panic - not syncing: Fatal exception in interrupt [ 1801.870945][ T8135] Kernel Offset: disabled [ 1801.875708][ T8135] Rebooting in 86400 seconds..