last executing test programs: 1m26.012651932s ago: executing program 3 (id=496): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0) preadv2$auto(r0, &(0x7f0000000080)={&(0x7f0000000100), 0x2}, 0x3, 0x4, 0x800, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x60342, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r2, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000000)={0x2c, r3, 0x301, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PHY_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x840, 0x0) ioctl$auto(0x3, 0xc10c5541, 0xb551) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x3, 0x5, 0x7, 0x0) socket(0x2, 0x5, 0x0) getsockopt$auto(0x6, 0x8, 0x7d, 0x0, &(0x7f00000000c0)=0x10000) r4 = open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x2000, 0xb5d1af1605322c72) open_by_handle_at$auto(r4, &(0x7f0000000040)={0x8, 0x2, "9700000000000000"}, 0x400002) write$auto(r1, 0x0, 0xfffffdef) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x430b41, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000080)=0x10000) 1m25.473409466s ago: executing program 3 (id=501): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x2, 0x801, 0x106) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0xa, 0x801, 0x84) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x6, 0x0) r2 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_prog_fd=r1}, 0xa3) bpf$auto(0x1, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x80000000, 0xc, 0xb, 0x5}, 0x7) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigtimedwait$auto(&(0x7f0000000040)={0x7fffffff}, 0x0, 0x0, 0x8) 1m24.218138331s ago: executing program 3 (id=507): syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) socket(0x11, 0x80003, 0x300) (async, rerun: 64) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec20\x00', 0x1, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="2f212cbd7010ca705d845526cc0008000380", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$auto_CEC_ADAP_S_PHYS_ADDR(r0, 0x40026102, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x121002, 0x0) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x0, 0x0) (async) epoll_create$auto(0x4) (async, rerun: 64) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) (async, rerun: 64) fcntl$auto(0x0, 0x407, 0x100000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x600000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) (async) r5 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x2, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8, 0x0) ioctl$auto(r4, 0x2282, r5) 1m21.711518844s ago: executing program 3 (id=521): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x8, 0x0) io_uring_register$auto(0x2, 0x21, &(0x7f0000000000), 0x1000) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000180)=0x1) sendmsg$auto_NL80211_CMD_NEW_KEY(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="0c50b73ddab5e609a6238a3d4ef828480c3ba8c030b6f937bc278c68af90112ede9460872f5ddfc9a19d0c5d9c3b638b20d15f2b8ee7fe1b52f70c8e3021e7420bc3c18394362ed99baddf3d6653c0952f97ef9635700b415de0289e6b0311f53be9503ac382a365401a8a", @ANYRESHEX=r2, @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='J'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/options/test_nop_accept\x00', 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/numa/demotion_enabled\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000020c0)=""/4123, 0x8f8) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) bpf$auto(0x1e, &(0x7f00000000c0)=@raw_tracepoint={0x1009, 0xffffffffffffffff, 0x0, 0x4}, 0x5) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x3, 0x7fffffffffffffff, 0xffffffffffffff01, 0x11, r5, 0x10000) 1m21.464242075s ago: executing program 3 (id=523): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) open(&(0x7f0000000080)='.\x00', 0x0, 0x1f2) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) open(0x0, 0x22240, 0x155) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x4, &(0x7f0000000000), 0x1) 1m20.769684399s ago: executing program 3 (id=528): read$auto_fops_u32_ro_(0xffffffffffffffff, &(0x7f0000000000)=""/109, 0x6d) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xd, 0x0, 0x0, 0x0, 0x20) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r0 = fsopen$auto(0x0, 0x3) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0xa, 0x801, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x40, r3, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x6, 0x0, 0x1, [@nested={0x4, 0x1}, @nested={0x4, 0x83}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), r2) r5 = socket(0x2, 0x801, 0x100) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'veth0_to_bridge\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_ifindex=r7, r5, 0x9c, 0x0, 0x1, @relative_fd, 0x5}, 0x96) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r4, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) socket(0x15, 0x5, 0x0) setsockopt$auto(0x3, 0x114, 0x8, 0xffffffffffffffff, 0x4) bind$auto(r0, &(0x7f0000000080)=@can={0x1d, r7}, 0x2c51) r8 = getsockopt$auto(r1, 0x84, 0x75, 0x0, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) mmap$auto(0x0, 0x9, 0xff7, 0x8000000008012, 0x1000000004, 0x0) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x45, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffbffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffa, 0x8, 0x4000000000, 0x7]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYRES32=r8], 0x1ac}, 0x1, 0x0, 0x0, 0x4801}, 0x44080) 1m5.652771689s ago: executing program 32 (id=528): read$auto_fops_u32_ro_(0xffffffffffffffff, &(0x7f0000000000)=""/109, 0x6d) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xd, 0x0, 0x0, 0x0, 0x20) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r0 = fsopen$auto(0x0, 0x3) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0xa, 0x801, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x40, r3, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x6, 0x0, 0x1, [@nested={0x4, 0x1}, @nested={0x4, 0x83}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), r2) r5 = socket(0x2, 0x801, 0x100) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'veth0_to_bridge\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_ifindex=r7, r5, 0x9c, 0x0, 0x1, @relative_fd, 0x5}, 0x96) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r4, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) socket(0x15, 0x5, 0x0) setsockopt$auto(0x3, 0x114, 0x8, 0xffffffffffffffff, 0x4) bind$auto(r0, &(0x7f0000000080)=@can={0x1d, r7}, 0x2c51) r8 = getsockopt$auto(r1, 0x84, 0x75, 0x0, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) mmap$auto(0x0, 0x9, 0xff7, 0x8000000008012, 0x1000000004, 0x0) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x45, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffbffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffa, 0x8, 0x4000000000, 0x7]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYRES32=r8], 0x1ac}, 0x1, 0x0, 0x0, 0x4801}, 0x44080) 7.787570202s ago: executing program 0 (id=871): r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) (async) r1 = memfd_secret$auto(0x1) read$auto_fops_u32_ro_(r1, &(0x7f0000000000)=""/109, 0x6d) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) (async, rerun: 32) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async, rerun: 32) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r2 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000080), 0xdaea6d7da654cc89, 0x0) fsetxattr$auto(r2, 0x0, &(0x7f0000000380)="1d4080909aa93cf6e18811747cb7ab188fac88b82819d46b339b520ae8ed1cadce286935c92d753dfd31454de619a6a03125487f5c9b50c352688d3f8083ab6682ad96d4fa13ce1b5e5ac90ccf1792eccc886e0a870a3ae79c64615e95b29ca082101a51217f71d3476485d47d39b90b1620159f218be0e8bcbca9c8e9aef321bf29f7d2b56f6f469237331950eefa08ef8ac9c02ef5e649cc3d651b21c53267e652b47bd4acf9da59e0c984afc182ef19800b9e27cb65fe01326c362bfa15ad63aca624e86a6298bf173d2622bf5ca1416f", 0x7, 0x10001) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x801, 0x84) (async) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) (async) r3 = socket(0x10, 0x2, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x401, 0x1ff, 0x7, 0x48, 0x6ab, 0x1ffdf, 0x80000007, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x2, 0x10001, 0x80, 0x100000000, 0x800000, 0x3400, 0x8, 0x200, 0x800, 0x84, [0x1, 0x0, 0x800000000000, 0x50100000000000, 0x0, 0x401, 0x0, 0x6, 0x70624ce6, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffbffd, 0xfffffffffffffffd, 0x1, 0x400000040000000, 0xffffffffffffffff, 0x5, 0x4, 0x2000000800000000, 0x7, 0x0, 0x400000000005b8, 0xc, 0x0, 0x1000000000, 0x0, 0x11af, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0x400, 0x9, 0xa34, 0x0, 0x3, 0x6, 0x8, 0x7, 0x7, 0x2]}, 0x1fe, 0xd) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x405040, 0x0) (async, rerun: 32) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x5) (async) ioctl$auto(r5, 0x4008af10, r4) (async, rerun: 32) openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f00000000c0), 0x292400, 0x0) (rerun: 32) bpf$auto(0x5, 0x0, 0x40) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mbind$auto(0x6, 0xa2c, 0xff, &(0x7f0000000100)=0x7, 0x699b, 0x5) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) ioctl$auto_PPPIOCSMRU(r0, 0x40047438, 0x0) 7.541159827s ago: executing program 0 (id=873): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = memfd_create$auto(0x0, 0xe) r2 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) syz_genetlink_get_family_id$auto_nl802154(0x0, r2) stat$auto(&(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$auto_NL802154_CMD_NEW_SEC_LEVEL(r1, 0x0, 0x20004000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2200, 0x0) openat$auto_generic(0xffffffffffffff9c, 0x0, 0xa0101, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) shutdown$auto(0x200000003, 0x2) 6.993346142s ago: executing program 1 (id=875): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 6.722731895s ago: executing program 1 (id=877): r0 = socket(0x10, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) r1 = fcntl$auto(0x3, 0x4, 0xa553) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x40084, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x0, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x3, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffa, 0x3, 0xa38, 0x40000000000000, 0x0, 0xfffffffffffffffc, 0x9, 0x4000000000, 0x0, 0x0, 0xc8]}, 0x1fe, 0x200d) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000002f80), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001500), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, 0x0) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d00)={0x104, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xed6b}, @NL80211_ATTR_REG_ALPHA2={0xe8, 0x21, "c0a34d52f486b5975554b0a6469d0b50afcee2c42116443b7df37193b87f8822dac1239eb160ce07f4c13e018b72503ca2689d69cd3f599c561047ef74e3d90c6e8fec4fcc5d11ca31830fe297e2750ce0a7c4f2eac918d6389ab1bc096474b9fffa92f7fb9d3045dd55ab286066d8476fe3dde759d654fde77de585d271e964e75721ec0fb4d4a4452f6fbfb05853551892cfbfc5bdeeff2b2a56b65277c246b33ed75691e6e395fb69bf69a9652416abff42abe83f5b7a07e745ed3330295c32609781120aae8fe81539794c15801809b34de6ba4de1cc48fb4906908246beff867c07"}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x40) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) write$auto(0x3, 0x0, 0xfdef) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x9}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x1000}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) sendmsg$auto_GTP_CMD_NEWPDP(r3, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000040)={0x34, r4, 0x5, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, 0x5}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x6}, @GTPA_O_TEI={0x8, 0x9, 0x401}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c000}, 0x80) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), r2) r8 = waitid$auto(0x9, r1, &(0x7f0000000480)={@siginfo_0_0={0x690, 0x7, 0xf, @_sigsys={&(0x7f00000003c0)="7c4605e709d1bf43326d74360a15a7c16925a18fa3a0b38785988ab1eb9e6b32af412a1ec5d92c5b6a69cb03742586efd7d3754a7511d50425aa7d021783747ef23ea6034f8e7a116e272a3379b7baf6230b2480ecbacff37ed3f12bc490443ea3284fcd536537e6eaf6050243902966eca015c16fee02caef83ad1d8bec7c9d765ed893adf775617660abf4a07bb2d6b533552d3540", 0x10000, 0x1eb}}}, 0x6, &(0x7f0000000500)={{0x5d0, 0x1}, {0x1, 0x7fffffffffffffff}, 0x61be14f2, 0x7, 0xd9c, 0x4, 0x8cc7, 0x84, 0x5, 0x9, 0x100, 0x5, 0x1000, 0x4, 0x6, 0xfffffffffffffbff}) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000c80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c40)={&(0x7f00000005c0)={0x65c, r7, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_IE_PROBE_RESP={0x1c1, 0x7f, "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"}, @NL80211_ATTR_QOS_MAP={0x55, 0xc7, "a10851f8e7242eef0c40742c4135aa61ac870b7a3ee8626dfa0e6abcd874210c6bba662d4914d4e9f5c23c99fc06b8c2c58d6e93360981be1c1c965de1f9e97e8578f970a8130b4db7affcd35fa5ddb9d9"}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x23, 0xcd, "30f4240b157fec8176938b8b55279f595313bb2da0599719319a5a62859e09"}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x5}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_COLOR_CHANGE_COLOR={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x80}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x3eb, 0x75, 0x0, 0x1, [@generic="51312ef2d64d378789ccc2d7cbe22c047c84ca1f3aaf", @nested={0x1e7, 0xab, 0x0, 0x1, [@generic="5e60caa3518656155350968e63b481e4fb908b24499cf976c7de6f9902ab244dd52ee79fee019b6de4a29b2c2d2b45a2f33e448c6c3d16874c44df3babbba6db39a8d1217342545b3af045f965dc6100dc31a8d031e92306e7d4b72be00cc1f44b5a2f60c7342647f9eb50dccb101d7079b57d01f1b25889ed11295dc3523a12693d90feca1af8ac4453e68cf0dcc5d6778b0dd7bb5cccb39108e97afd2bf2fa21933b3d41a169d37ab2b7d604f73d2d5067906e38c94ed609118ccb5a8044946df17e99d8a4e456ef4164969502a96bfafb958432ab7bd838ecb70415b82669a8ca623178ab1ce2855d10", @generic="d8c850cb8770711b855e44af32e99b6d816ae04e08274869cdc6222ecab40b05d06d7b339e66e51b7ca68f80cb8f51217b3b497745cfca1e3fb631b54881c2db2a3c77f5b53d9efd2214fcaa67480c597f5b8b42534d669c6b7a9646fb250e8fb30d5d86e1f261a5a3d275961d3839eaf7ee48cde22897cd76c4b8b5caa841ea11bc0f661341f5bc824a04e99444a860d7b03f20b04dd6f551317e9de7f2509927cd8f8a805d27579cc4ee5bc859de91e517cf5eaf3bc7c89d41dfd23e94dba9b2fd755f7b9dab3cafd48f5327d8e26fb1a35b99", @typed={0x8, 0x3f, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x4, 0x51}, @typed={0x8, 0x52, 0x0, 0x0, @pid=r8}, @nested={0x4, 0x87}, @nested={0x4, 0x71}, @typed={0x8, 0x12, 0x0, 0x0, @fd=r6}]}, @nested={0x155, 0x5d, 0x0, 0x1, [@generic="9e09bc11b7f67bb5522ed2c56be54a96acbcf2b1081ffcf6450c8e104ff65e4a77ef9b75a168f5196ac4a2bc4a034776f3ebaa12a87da2aedb9f34a3ff65a5261154e8221bef498e0d42d114b9f66712e47183e6226104d2e758520c99434d276dd26b8e182c2eda8e2b9fc6af9bb0863ae03f3f09b259ae636ce6b5ff541c89925424d852bfb0204b0926706368e13616838bb574c095c2017216c91cb715906196f33cbc10f2c151df2341929ae07dbfbf2aee3871ad5eeea53131ded3a0d09c0187bebe3af553494713", @nested={0x4, 0x5b}, @nested={0x4, 0xab}, @generic="2ef2b66557175b4e68c4903dfe9a783fb5e8a5", @generic="a4b1692b702b2e78f5da51f32d5201bef493d29ec1f4ad8369e555d64780db6b34aaf3f410a47cc6ddb2a3fc82c8632e64b9429826f7b7c870187f3e1655ef7ab1f5758d5ab636f6b71e096febd5d90d18a7a2a8c986557cf9869e5d34f0f46f388a44", @typed={0x6, 0x3f, 0x0, 0x0, @str='!\x00'}]}, @generic="535849e820adad80576456f3d953ae8aad92a5409843a5696e294629bb0929a81693c6548a9fa3f826b15de0065794ef1639ace9210c22ac66b744cf8ecac4b7c4287c4ed13b3881c0482c601ff514bdddcb8cd76f0503aee80304637c60b0ccf36fbe9f654e2ce4b529ee89af39624ab66ac0f45104ac7c9687c2c62f4fef583e59cda8588600d51965622e297f318bce"]}]}, 0x65c}, 0x1, 0x0, 0x0, 0x800}, 0x20000014) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) 6.37964245s ago: executing program 2 (id=878): syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_DISASSOCIATE(r0, &(0x7f0000001280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001240)={&(0x7f0000000080)={0x1190, 0x0, 0x300, 0xd4e, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x1171, 0x2b, 0x0, 0x1, [@generic="ee30f3c0ecd9bd3f45ff1e8f73ac96d40e90af967d37969a51a649c01278706989fb1c3550252db86e782a171316e1ca29940557bc119895d0c28cee57fd7c34875f0a2f16220907a673519c2559386972bd93acd848b4217fbc100fa73fadab7117d977c558740598ccbbd4953f1c9beb36cb23cedcbd964df51b834d611a2b418ff05e5d649f2372dd23e227a7d52dfcf55b078237782ceadace52568eaed21eaa01cd581b46fda7933ceb06bf3034162057af1c54f1484996f2081149ee051f9d11667b983c2c7c9ba73fbf32ef684ebcc35fc2d9e873a28ce12e6e015576f6786a4eb402d019d022982615a093ccba5ac1dc82323e1c299a2404c75b27eb00ca8c286bd99ce55992030a1c30aacca3d8f333215c877ae39b42f2b3d2d430082866d9be8137f48202e11472ceee4085971ae4a54e13dc5f15227cb87aed980a54eb139f8334ae44644ab8bb1a6223cfd5342a17813a96bff6b882e539fd8ae9c3f96a4fb83e2b9d729ceb6a5ba7f426e7d210a278d6521884f05db0a0df1e9fc77453e7d0aae94cd72953753aa4a4adc1050151dded607ae3db991ffd54a4afafce713233d91dd31c5db91063a3a2ae794ceb0090b113c8cdda187d665b5b6736bc556f1c6c3f909f92ee4a78634dbbb0e264bb36425ae973388371f5bfe44254bc42b3b097d12ce5411e553d4917e290a3b70df9609603bbfa67af9ea4096b27d0e8b6641ef15965f2ba3582bf3ff56956ab2a84b5b17ae852a221dae6fd85dee85a9214ff607ce88613a6d4aa61232780cc263c88e396ea4b589fff21eccf812eeb81f84f91110d236adde2ee91eee2cb926d0623fe58f29f98aac3d75053c2962004d5c07f96de852c2f7c0e0c1b995a76a1e65290d1e632ae63dac431f0421d2336d03144ca439c0474926a08b3a51f31647f657aabd8c68151f16f2c04b8f11b245ae593d4cb7f00f25766c661425ba6bae75558dae32c04f8bd0f15ba87f11244759649df84a26f579902479233598b322cb2ba35ac23e05065a3a5dcac0f3fc95b59b5370c565f2b4622bbda9d5c3e792bdd81abfb3898ac041067c1e35efcd253f6072a40a70026e0d2bb2ac3d6ec3da7ac68884c6e04032387dfdc07d0d14367b0324d222711d4104334ba483dab337a87a2ed5d16f415fb4aa0da8d7635cff65558052f1160f933cbdb46905db01ec015782c3511eac605cdee5b7b0b376c0aeb7c905cfcbcc955907a2946f5b77d8b50a41bd8d039fe03ad1634827219f8d9dad593b3fba57d521a49c80b26c27149ac905aecc0557e612a755d9eb9beb4992eaadef591829cb3143e0138e2089c5ef1a5898d4e653af0e24f8a5badab5ef813f3cb76cf965fa0b235fc8c98938b1ac7aeced0e2531036b8a10e0786415cdc15ff915fff981bf5095066e2ae601db6bcd49813a6755d7febd26ba80f8e725349b09e08b448fc50a7bee10ece5e8c8466bfd504582467823b3af1e6184509a9e73d081b3bb87c6771438fbf6c8c0886c199a685a6980694f58589768af05ccb4bb4882f7c6c315e122c317e45832e308d5914ff96c0ff9d3c3603167913153db26fde1ff0466c8544c358b12735bb21bb6664e3ff1d96af52155912a187cc7debcc8da1ec760da864d13eb54e985581bc71c0de0b9aa59e3fe9caf7f7a8bbc0dbbe9e7d579d376cf31957293127c5d797879c7e8e3b45740468019859e6de5dde87830fb97de149fcfde9e4d24f91b189e4dafd25337024d2a37819afce63bd5f91f26bd456e57b3e6c472e38ebc1c156c0d758e0518a8a210d0858fdd2ba034a90a0181498cdc4454c15c64ec975c8ab2494ca0dad060b656145d22112d422ce46437874afbe69cace6d4b724a72bc641ce92cfb8b1d1f0c4eef9efe35e7613bf9a6fce5d1df2950cf23e5b5041c394df6b0c0c7297142c6d40f907a18d72537b799bb00bda0d25866f9da03b6bbc1a53abb4c23f36af46421cb29836a9c6b5309898bf4d32edae40d5d96bdd401541fd82aa495017258493f5eb4eb1d8fabd9c1a0d13f04cd707a857a28a71569d13808f3af681da2055b4f9562609d31b15428e4983a5791d5ee2daff750d7712e02f9605448b7818f60317f5bfecb286c861c98d5a3a2868a6d9aaf9fdc2018104eba7eb2c052b810f09c0b00eced84ef6b35b568da7c049fc92346eb619a31aca8d31dee7d4e89b014cfa8c272adc288bb779b63616d4eb84162eede66ac2d9bd19d1625cc84e6760bd9d5f38dce2787bbf57ce9c51680277073309dff1ceca336d30c4c724251cafbbb773374275766eaebff6408c37a1800a7e3deee079d3ee40dbcf1df6840dc0c4a4d12200c60a3ffae56f705a05bdb37f4e038b58bf15e05f98e3024fb67245f6e83e8871aa04d09a708a710c76084847bbda4381a4e1c04eec137923ea20aa77e9cf33cbd521b401627e4f5d5a2e7c9b300bc981bbeed18b80be3b6d107e4eb4840507e1c545dfa8f9b4dcb5660e6609ee7cef4534ce5dd46fba46f4841c5743792a64897e1f3ceec37d550f8bfab2a47c53c28b2c41b7708b344a420f00808cbbba0d13ff810342be2d66c5f9785adfdb47a12035f4b6d9574c097d191205cb97c9eacc9698c2dc408ea7cb10025e253070dde4f8f7d48924e5c3a4fa1a13579cb2e70ba1f3633d6ec20e5400797171182c6fceaf0038a7eb60d120fcfe07a467a04f0c32a6b84288630a19dd20aaa7996c05d92c8c4c0e9da528222bf672a2793df6e9ced2c57acf674010425b8f4835438eca353ed44b968cfd082092658940b38bd0f3f85d49da9c2f43310fb71a1589faaf77ff856fc634bd760c9070995dd8426358712f6a244ffb6e5abecf148defd25807074352533304f3daeaa25bf53d2ec83fe25a67d183aa93db9bc4aef603abcb16819fcc29ba0f2f2fd1afabfaa25d9596319435ba1ee9c35f6df36b7c20b77426dfa09947f2b8eeeeef8b72d58b2453b6fe668066a18631d5cfebb0b5959bfc5dab746ac76c93d34c2f0c1ed54f4fa623ffbb2fefb29d83fef6bc47c642cc9a266c70a50c56a6f6ef01b67bfd4f474bf73ab7a26e2187a60c810436924e0b11d5efc089a4e52b58814dee37f6c248e841a84ba3cd2a069034a2fdb5bc592fb5a40230063f969b752ce20736cb6c85f43093ed9431e70924b9b0acd3b72fa405a4d2493908f892a340f1c46bfb378ac0a9a7ea6acf368eb333c01fbeacd920f17938d0b85d269fb1e090b5a74306517c5cd791b3ecc44f8afc13325e3638bec3aa0031368b4aa794b48603ae7e29cf70ecca93024a6917595dac7cefb7b434198467bd14f3e57bfa319e12776074128cca0688aa5e24a82eed44e969efc4c0691204d2d63aada60a5e3d1364db2a1f0a0b9a8a47e82c6c1fcdfec38862a7ca6bf7eb60466429f49c948f736801c356cc2b29af2ec2731c907f49e181b39e6f8d40be141efe67ae90c8124cabf07d1aa1baa8cc01185ca03b5adf731ea8d4b731e02621608980def0aa57fa8a68a354c1b9074faec84dea9bee9e532f533b3b34f4694bc9051307f612c1651474062bd6ac5d14d19c13127fc3fba96dd7f110b75ce5a6781ff768bab9b66288fca3b2ffd44eb3902f9d46d20d6fd8fafac1d096bb31233840d9dc602d51ac7311b209a2cc075a0bd2aa9dd8946ba0192868d93760623a6936f7ef13f9ce45cab7fa279c8aa3c1d154ff53d6b900b2a06742dc19940d68ebdd531873099fa0de970e8d005b7c7ca459e531819612dc096876e5259b9b56b3f1f75b9bf17daace3ac03d509d8c211a555ded540a87eaff88c9478dabdbc2f7118b51fb8ffabcc70ce7f2267ba73e7ac074a97460a3d302318c69784d3f13837dac2ffc6a66fe585de88adb31ab5611131714ddf756afb0dd353d8b2e29ac5bf57f34d9ad950a406e9a77227fbc1ba9fa8cc9148726f7f7528f1801b66ce6c9b6b76b93bda223a03010e9525f989973a216879d5db76c2ed21c6966f20444f336bb1263b414a6a45780c6112a98d5551f4a0e8620da356392b5b7be7505405304654deeda68d79b50b33972ef5adcf99fb5bb12e4098ce2a3e8fba0c56b6c2ef7e4a144677eb7f5b6c8cf38f125c145a02cee04963bfdd71755c237108cb2f7ff0179f617a9b15a3327f7c1f03ead911d1950a9486e5d52726ed9b1c85aa1150fd1482ee21d0f5b639b4601843476111bc9aa4f4079549c8bdd41142b5e7d6928768ef7a18418ae2c50966502d7770bafe9bbfdfb3def50f0185472c691e1ba3b17b3a95d7acea18433f158a4dd587ecf120fb4238f26cdeece17b7d083cb0a11a92d8136c3c2f8647d20c2ba827dff1666f2c67330b0dc84e752c978710912f4811721f55841d4c236ee126e31a31d31215701020733f9df92b5ca8a7661ea782740114785eeb969ce8c641b99d6dc6626d511da83c6af9c616a866895d2ecf1086064c94682898656d8cfef88fb8bcc3ec6beb44069a2c7875f7a7a146e021f7c9d1b6632bf0f9920f89e4e6a9895a29cda0e61b7b2e9b30c6f58342a97e4990c3d4a778e39154ca9fb54658a2bf60453a8012fa4bd669e4fb4da1eed104374344cb3dee157fbab18ed9c8097f2c74e6a08250a8d8d812511763200698b7902fb85bd6b95fc1a113d78e20ee7bc4718286bbe21386a476acbb19d2477c47a0a211d9faed04633a5e0f4935f1f0e9b8ecb1d9e3509d60484dde57df1de05eb9b46636d2d61891ec50fc28474ce822c3a095f1e8895191f09ffb21c3c1a8da88c75faf4961c57929446c5358696206c77314bd7484f7d413881d042c0f2539d93d1ca92c3fe2406c075c3ba2ef209750378a5ce1c35656495ffcdcad4347c3246dea27ad35ae4c1239d988a134f798d5c1e02bde59ba641b540df7d938ecd9cfaf07bb4773953139cfc7f5eb31124379a441f11540470dcfe484ac0cfc1b923eaa5981f7fe79a742f5d78b60fd022b0706248d2ffccb86f517d500e19439ff1c8c8501fcecbd7c0a92ce37660bdfa988253a4ce2bc8e87e88eaef314caffccc1850475dcb2093dde2a0dd45c1aa98e033b4605e09037cd210f6f51fe1dc8837020db2cf124db7f2552b42e84578d9a5c557345e9b0cc28937198289265688cd33eda2ac894746ad430b5866e994995cba9c2a1e83ccea4660bc0e95b951a0320594b2729b0b37e1be69548ac53ee179f496983dd374dab8ee234f4c3b28050e061aaa9b165e0a27ab84023c0c8741bd53addfb4820754b453e95812f08539e1a4ac3f5a33c445001031a4fb177a6b33b3d00256383de8ef74f772d7f4860e15400ab8e867e68e0733c7083a59cb5d7562a1645c6fe98a61fb7ed7e2da6dd2423d0d7daf15aecc41905a0b9e78a1d9328ea2c6c1c781a59acd18751791089293a4cf9e1c4c54de3528844f54cb68a5f11fb06176f28897221d978aec32d1fe0d1470684f3f510f17eafe8385b7e493d6910a22cd5cafceed03db5d5341c0e1dca14b04aff49726e3b6a00b9160e29d90e5afabd3e4e39eb16904988ceeae0e937dc82bd8fed9f08027555f6db4c7ed2efd2332e77c611fbcbf93d74658cb2a8cb057f3b5af5c939fb8b0b7b41acd544f07552923303f7d14276d904e469a2fde234ea275d0e9a9e90b191edea910e1a122e0737799b1058d91e08475ed6b07ff158e72c6546c44b95548b1a1da0e0b018de5d8c52dcd4b23f6f191ec6ec5fda454052c37a744babdff9408fb3243eb3e504fbb533abbf081927fc79f1d464ed4230a673e0b1a95328", @typed={0x41, 0x8f, 0x0, 0x0, @binary="0e220cd21dc8d63551f26749c90a6b7cfe15e9cfcb68f964d8acc65926e6f5d53581bf7c050853b0cacc947e66c9ef119f18934607809e741ce014c697"}, @generic="d15afdea5e148315daeb5f12d0d670478b17162464a6a27778e3247de1634dc6bac01771c75413a3cfeef2cbff24535346364d8028c2ccf3270ffe3f4b69ec261e5caa94b39de1a939a983cba01b27a76dcb01f8fc479d2efe6da7a5d6d2632bb201aa509bed8305952f745d5531e82d192c3e6e66b59b4ded50c95adbc464b2f1522dc9484fcc9df0c012c2880e", @generic="4e6a7f92dae63b073414233c9be4efc090ea757a6f9806c359fda8f99ff278fcc00c3476adf19887a02b435509f7be40a1a3a0a246bbe36da803780ac48c8aec465a395adaeda83f9ff420b042fcae8fef835677917f8aea7df6becfc6906d84960aa80c9754ea28a751f55b2e1733edf3d908f0ee2c6a3d00e33ce6265854", @nested={0x1c, 0xf3, 0x0, 0x1, [@typed={0x14, 0x109, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0x69}]}]}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x1}]}, 0x1190}, 0x1, 0x0, 0x0, 0x20008021}, 0x40000) (async) fcntl$auto(0xff80000000000000, 0x406, 0x1) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8003) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) write$auto(0x3, 0x0, 0x100082) (async) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) (async) write$auto_msr_fops_msr(0xffffffffffffffff, 0x0, 0x0) (async) fcntl$auto(0x0, 0x407, 0x100000) (async) r1 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) ioctl$auto_NVRAM_SETCKS(r1, 0x7041, 0x0) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) futex$auto(&(0x7f0000000080)=0x5, 0xb, 0x1, 0x0, 0x0, 0xfffffff8) (async) r3 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000140)='/proc/devices\x00', 0x800, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, 0x0) (async) read$auto_proc_mountinfo_operations_mnt_namespace(r3, &(0x7f0000001100)=""/4096, 0x1000) (async) ioctl$auto_snd_seq_f_ops_seq_clientmgr(r2, 0x1, &(0x7f0000000280)) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) (async) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) (async) madvise$auto(0x205, 0x1, 0x9) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x2400c040) unshare$auto(0x40000080) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) 6.342650123s ago: executing program 1 (id=879): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0x2, 0x8000) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x2a482, 0x0) ioctl$auto(r1, 0x1269, 0x8) mmap$auto(0x0, 0x40009, 0xdf, 0x18, r0, 0x28003) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000f9dbdf250100000006000200000000000500070010000000080009009c781e2108000a000800000014001f000000000000000080000000000000000014002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) socket(0x2, 0x1, 0x106) openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0x6a40c1, 0x0) socket(0x2, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/nbd1/queue/max_sectors_kb\x00', 0x88200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2c, 0x80002, 0x3) clone$auto(0x7fff, 0xff, 0x0, 0x0, 0x7) socket(0x2, 0x1, 0x0) socket(0x23, 0x2, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x541c, r5) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x10000, 0x1001, 0xa, 0x8000000008011, r0, 0x10000000000) socket(0x2, 0x3, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) 5.831641793s ago: executing program 0 (id=882): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x3, 0xfff00001) socket(0x2, 0x3, 0xa) r1 = epoll_create$auto(0x2) ioctl$auto_hpet_fops_hpet(r1, 0x963, &(0x7f00000000c0)="045f57f393592afb6d39be89a1e0849f00e26f9f751b31016f72d40a963c35cb6a5422bf47f1471a878df868a935c04e708a61955a7916bb631a16002736d044e3e9d4bd3b86a7a7e103ff28c7f214a9726deea7fdd351b9362c6740a551b976b9bddb3635636fdba4da442670915b0563b89cbc43a39915b5cbaef40228775a8b8bfeab7f6437c76244b5c78c61fef1af0ad0c9a9226829f8aa8c80cf3b31") socket(0xa, 0x6, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2, 0x0) sendmsg$auto_NL80211_CMD_STOP_AP(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xc}, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x17, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) 5.659645838s ago: executing program 2 (id=883): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = userfaultfd$auto(0x40) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b4c, 0x38) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mouse0\x00', 0x430a00, 0x0) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3ec0ce7a6c76ef1d}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x24040005) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ioctl$auto_RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000180)={0x592, 0x2, 0xba, 0x4f, 0x3, 0x5, 0x5, 0x4, 0x22}) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x4020009, 0xe1, 0xeb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x55) 5.293765533s ago: executing program 1 (id=884): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r0 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) (async) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) setsockopt$auto(r0, 0x10000000084, 0x7b, 0x0, 0xd) write$auto(0x3, 0x0, 0xffd8) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x7, 0x0, 0x5, 0xffffffff, 0x2000000000210006, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x3, 0x3, 0x105, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [0x1b16, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc06f, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc3d0, 0x107, 0x6, 0x0, 0x80000001, 0x4, 0x0, 0x80000000000, 0xff]}, 0x1fe, 0x81) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x3, 0x100) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x82001, 0x0) (async) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000009c0), 0x8002, 0x0) (async) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) 4.471548627s ago: executing program 1 (id=886): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) socket(0x2, 0xa, 0xe57a) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100cda4429629bd7100f9db5f250200000000000000", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x3, 0xa505}, 0x800}, 0x8, 0x4008) openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000100), 0x480800, 0x0) 4.449837436s ago: executing program 0 (id=887): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000040c0)={&(0x7f0000004140)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000000) sendmmsg$auto(r0, &(0x7f00000000c0)={{&(0x7f0000000000)="04c68c661784eada3724b8d6925eb05315cb5dc7650256ff48db", 0x8, &(0x7f0000000080)={&(0x7f0000000040)="fe34391b5b636130e80971e88711313f5e75f0794fa51155", 0x7fff}, 0x2, &(0x7f0000000140)="8a20a603a0a4b3f2593dbca1db1c9beb7f1410699dffb300b1511a093335176736aa936cdbc31cd552eab6c3d8ec1a3b7bab3c83dbc015a043bbec5f7fa8fb8b2c7d13ab5666d5e0ded872d62b0ecba2ec64eff06d9cf86d668bfe8e717f96a70fbe8c676796479e1a50e7334af9becda8ac463fc2e77d8bdbb7a74ed97a510d3253712ff98fe762cba2f8aebb8f2b4d0ca2c4eac85c80b64bdf0f9e194f59d86820928cd9316e5b9fa66b0b9e50e4e211a7686aa89470970e61a0e4f5015d34848e973f2efafb9b54a69b2255733f18c05bd314c619c423ee6b7a", 0x8000000000000001, 0x100}, 0x8001}, 0x1, 0x5) 3.887658833s ago: executing program 4 (id=889): syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x12882, 0x0) shmctl$auto(0x7073, 0x0, &(0x7f00000002c0)={{0x8, 0x0, 0xffffffffffffffff, 0x4, 0xfffffff8, 0x6, 0x29c}, 0x634, 0x0, 0x2, 0x7, @raw=0x8, @inferred, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000200)="d95436bb3bf40fe061aeb00e5f18ca07d50c58d50c4cd4e49ffc082bdc6e2041b4daecd7bd034a574e430ba909fe0e93f2b6fcfd54488dfc3a0fd86da1f15c0fcb5d4e6cfb3e3b4d42c59658d08cd376c99b9ccaf798a7d3d7924c28f8da6f2a2d61dcbe07f5212dd5d49616b18b8d5ceed567f7815518badd2a6b717b34b09d954538c40a295bafb05379859b4183"}) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x342, 0xffeb) (fail_nth: 3) 3.831839693s ago: executing program 0 (id=890): bpf$auto(0x3, &(0x7f0000000000)=@bpf_attr_1={0xffffffffffffffff, 0x2, @value=0x8, 0x2}, 0x9f) bpf$auto(0xff, &(0x7f0000000180)=@iter_create={r0, 0xffffff01}, 0x1) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b70, 0x7, 0x28000) bpf$auto(0x8, &(0x7f0000000000)=@bpf_attr_5={@target_fd=0x880, 0x9, 0x37, 0x37, 0x80, @relative_id=0x6, 0x3}, 0xc63) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) socket(0xa, 0x2, 0x0) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) ioctl$auto(0x3, 0x8925, 0x38) r2 = socket(0x2, 0x801, 0x106) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0xf7374674b920089e) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x20044851) recvmmsg$auto(r2, &(0x7f0000000180)={{0x0, 0xcb7e, 0x0, 0x5, 0x0, 0x2}, 0x800}, 0x10a, 0x8, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) mlock$auto(0xfbe8, 0x4) mlock$auto(0x6, 0x3) r3 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HSR_C_GET_NODE_LIST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fddbdf250500000008000200"], 0x1c}, 0x1, 0x6000, 0x0, 0x20000080}, 0x20000800) mlock$auto(0xa, 0x3) 3.739442475s ago: executing program 2 (id=891): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = memfd_create$auto(0x0, 0xe) r2 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) syz_genetlink_get_family_id$auto_nl802154(0x0, r2) stat$auto(&(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$auto_NL802154_CMD_NEW_SEC_LEVEL(r1, 0x0, 0x20004000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2200, 0x0) r3 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0xa0101, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r3, 0x0, 0x24010010) shutdown$auto(0x200000003, 0x2) 3.432615791s ago: executing program 1 (id=892): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00ff0100"}, 0x55) unshare$auto(0x40000080) 3.259579336s ago: executing program 4 (id=893): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x10000, 0x1001, 0xa, 0x8000000008011, r0, 0x10000000000) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) select$auto(0x8, &(0x7f0000000240)={[0x8, 0x8, 0x3, 0x4, 0xffffffffffff7fff, 0x8000, 0x4, 0x5, 0xd3b, 0x34, 0x5, 0x0, 0x5, 0x5, 0x3, 0x5]}, 0x0, 0x0, 0x0) dup2$auto(0x0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f00000001c0), r1) sendmsg$auto_NBD_CMD_DISCONNECT(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)={0x14, r2, 0x1, 0x70bd2d, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000884) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), r1) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0x7) 2.936748069s ago: executing program 4 (id=894): open(&(0x7f0000000080)='./file0\x00', 0x614000, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msgsnd$auto(0x5, 0x0, 0x5, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0xfbe8, 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000001640), 0x200840, 0x0) ppoll$auto(0x0, 0x1, 0x0, 0x0, 0x8) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r2, 0x0, 0x0) mlock$auto(0x8001, 0xb) mlock$auto(0x1ff, 0x5) futex_waitv$auto(0x0, 0x77, 0x100, 0x0, 0x62bd) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x28, r3, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x60040440}, 0x800) r5 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r6 = set_tid_address$auto(&(0x7f00000000c0)=0x400000) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x98, r3, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x7b, 0x2d, 0x0, 0x1, [@typed={0x8, 0x146, 0x0, 0x0, @fd=r5}, @generic="76ac42a31b1b3b48f6603b2cacb387237d", @generic="6d34e819737b529af5e3176ab6c5e446e190b8d5b0968d2d4c810fd7bd8666d3f398f4208aa4126ee4e7dd6eb70356e26d1a41f2931a89c58ffadebc23c4", @generic="20de625a5cc66a3110a78ae2501751ade4ffd981888d3ed6d58b16aa5435f871"]}, @NL802154_ATTR_PID={0x8, 0x1c, r6}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x0) mprotect$auto(0x20001000, 0xeb, 0x6) bpf$auto(0xb, 0x0, 0x3) fanotify_init$auto(0x5, 0x2) 2.469464933s ago: executing program 2 (id=895): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) socket(0x34, 0x3, 0x8) ioctl$auto_KVM_CHECK_EXTENSION(r0, 0xae03, 0x60) 1.185666658s ago: executing program 2 (id=896): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram3/queue/stable_writes\x00', 0x182, 0x0) r1 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, r1, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) r2 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x102000, 0x0) io_uring_setup$auto(0x1, 0x0) readv$auto(r2, &(0x7f00000001c0)={0x0, 0x8}, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x582, 0x0) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) open_tree$auto(r3, 0x0, 0x1001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xc18, 0x8000) openat$auto_ima_measurements_count_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000080), 0x200040, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) sendfile$auto(r0, r0, 0x0, 0x6) 728.367969ms ago: executing program 4 (id=897): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="7201", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 343.683516ms ago: executing program 4 (id=898): r0 = socket(0xa, 0x801, 0x84) (async) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) (async) rseq$auto(&(0x7f0000000000)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x7ffe, 0x0, 0x6) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x7, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0xc0603d0f, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0008, 0x19) (async) setsockopt$auto(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x8000) (async) mmap$auto(0x0, 0x4, 0x100000000400003, 0x10, r0, 0x800000000009) (async) io_uring_setup$auto(0x1, 0x0) (async) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x9) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @loopback}, 0x6a) listen$auto(0x3, 0x81) 295.969725ms ago: executing program 0 (id=899): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x5fffffd, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x204180, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) syz_clone3(&(0x7f0000000200)={0x383281180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x6f, 0x0, &(0x7f0000000000)=0x9000c) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x1, 0x0, 0x8004) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) 131.610325ms ago: executing program 4 (id=900): close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) r0 = getpid() pidfd_open$auto(r0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91\vI\x1eRN8\x99\x88ds\x1cJr\xde:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18\x89\v\xea\x1b\x95\xaf\xee\xe69\x8d(<\xc7+\x83\xfcQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd3\x81Y\xa3Fp\v\xdc\xe2\xc3\xc3\xdbS\xdc\xfd\xbf\xd1\x14^\xbe\xa2', 0xfdef, 0x0) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd0e, 0x0) socket(0xa, 0x801, 0x84) r2 = epoll_create$auto(0x3e) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x2}, 0x4, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x14, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x0, 0x4, 0xd59, 0x101, 0xff, 0xffffffffffffffff, 0x80080001]}, 0x0, 0x0) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8000, 0x0) setxattrat$auto(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f00000000c0)={0x69fc, 0x6, 0x7}, 0x5d8) ioctl$auto(0x3, 0xc0481273, 0x38) ioctl$auto(0x3, 0x1276, 0x7) 0s ago: executing program 2 (id=901): syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x12882, 0x0) shmctl$auto(0x7073, 0x0, &(0x7f00000002c0)={{0x8, 0x0, 0xffffffffffffffff, 0x4, 0xfffffff8, 0x6, 0x29c}, 0x634, 0x0, 0x2, 0x7, @raw=0x8, @inferred, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000200)="d95436bb3bf40fe061aeb00e5f18ca07d50c58d50c4cd4e49ffc082bdc6e2041b4daecd7bd034a574e430ba909fe0e93f2b6fcfd54488dfc3a0fd86da1f15c0fcb5d4e6cfb3e3b4d42c59658d08cd376c99b9ccaf798a7d3d7924c28f8da6f2a2d61dcbe07f5212dd5d49616b18b8d5ceed567f7815518badd2a6b717b34b09d954538c40a295bafb05379859b4183"}) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x342, 0xffeb) (fail_nth: 4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.107' (ED25519) to the list of known hosts. [ 66.075212][ T5818] cgroup: Unknown subsys name 'net' [ 66.230390][ T5818] cgroup: Unknown subsys name 'cpuset' [ 66.239300][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.598965][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.514804][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.532254][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.539988][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.549312][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.559825][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.568421][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.588397][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.597575][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.599345][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.605616][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.613842][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.620051][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.626988][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.633440][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.640613][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.647625][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.654325][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.662659][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.668705][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.677501][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.683263][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.696179][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.696245][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.696256][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.109095][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 70.149826][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 70.189667][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 70.249297][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 70.300186][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.308138][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.315461][ T5830] bridge_slave_0: entered allmulticast mode [ 70.323338][ T5830] bridge_slave_0: entered promiscuous mode [ 70.336442][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.343808][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.351166][ T5830] bridge_slave_1: entered allmulticast mode [ 70.358466][ T5830] bridge_slave_1: entered promiscuous mode [ 70.419701][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.427358][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.434510][ T5827] bridge_slave_0: entered allmulticast mode [ 70.441646][ T5827] bridge_slave_0: entered promiscuous mode [ 70.456654][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.466329][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.474397][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.481840][ T5827] bridge_slave_1: entered allmulticast mode [ 70.489003][ T5827] bridge_slave_1: entered promiscuous mode [ 70.506037][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.551273][ T5830] team0: Port device team_slave_0 added [ 70.563130][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.572836][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.580439][ T5834] bridge_slave_0: entered allmulticast mode [ 70.588326][ T5834] bridge_slave_0: entered promiscuous mode [ 70.603246][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.615210][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.627261][ T5830] team0: Port device team_slave_1 added [ 70.633561][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.641670][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.649202][ T5834] bridge_slave_1: entered allmulticast mode [ 70.656022][ T5834] bridge_slave_1: entered promiscuous mode [ 70.700227][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.710310][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.718697][ T5829] bridge_slave_0: entered allmulticast mode [ 70.725270][ T5829] bridge_slave_0: entered promiscuous mode [ 70.733788][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.740937][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.748593][ T5829] bridge_slave_1: entered allmulticast mode [ 70.755190][ T5829] bridge_slave_1: entered promiscuous mode [ 70.780514][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.791543][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.811129][ T5827] team0: Port device team_slave_0 added [ 70.820667][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.827700][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.854052][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.890099][ T5827] team0: Port device team_slave_1 added [ 70.896319][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.906096][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.932705][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.947136][ T5834] team0: Port device team_slave_0 added [ 70.955223][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.998091][ T5834] team0: Port device team_slave_1 added [ 71.014082][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.032341][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.040179][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.066788][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.098862][ T5830] hsr_slave_0: entered promiscuous mode [ 71.105167][ T5830] hsr_slave_1: entered promiscuous mode [ 71.123025][ T5829] team0: Port device team_slave_0 added [ 71.130901][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.137982][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.164125][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.183586][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.191014][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.217542][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.232265][ T5829] team0: Port device team_slave_1 added [ 71.270931][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.278156][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.304595][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.340640][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.350258][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.377047][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.391446][ T5827] hsr_slave_0: entered promiscuous mode [ 71.398257][ T5827] hsr_slave_1: entered promiscuous mode [ 71.404748][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.412724][ T5827] Cannot create hsr debugfs directory [ 71.457366][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.464352][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.490712][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.520394][ T5834] hsr_slave_0: entered promiscuous mode [ 71.526469][ T5834] hsr_slave_1: entered promiscuous mode [ 71.532485][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.540456][ T5834] Cannot create hsr debugfs directory [ 71.634147][ T5829] hsr_slave_0: entered promiscuous mode [ 71.640789][ T5829] hsr_slave_1: entered promiscuous mode [ 71.649751][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.657518][ T5829] Cannot create hsr debugfs directory [ 71.732168][ T5842] Bluetooth: hci3: command tx timeout [ 71.806769][ T5842] Bluetooth: hci1: command tx timeout [ 71.812746][ T55] Bluetooth: hci0: command tx timeout [ 71.818852][ T5839] Bluetooth: hci2: command tx timeout [ 71.826208][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.833948][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.858031][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.882313][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.906459][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.923752][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.949277][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.960091][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.969952][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.982805][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.054195][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.063928][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.076141][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.085680][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.160687][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.181404][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.194271][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.204868][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.293055][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.349715][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.370950][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.383335][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.420833][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.428144][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.440977][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.458979][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.466092][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.475430][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.482583][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.501575][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.529673][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.536848][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.563269][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.580577][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.587717][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.607295][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.614456][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.692791][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.719845][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.727031][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.748270][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.755431][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.843233][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.921186][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.994160][ T5830] veth0_vlan: entered promiscuous mode [ 73.023229][ T5830] veth1_vlan: entered promiscuous mode [ 73.092499][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.111805][ T5830] veth0_macvtap: entered promiscuous mode [ 73.134243][ T5830] veth1_macvtap: entered promiscuous mode [ 73.207637][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.220179][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.239421][ T5827] veth0_vlan: entered promiscuous mode [ 73.254901][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.264229][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.280912][ T5827] veth1_vlan: entered promiscuous mode [ 73.295123][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.305129][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.314581][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.323895][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.391529][ T5827] veth0_macvtap: entered promiscuous mode [ 73.406468][ T5834] veth0_vlan: entered promiscuous mode [ 73.415581][ T5827] veth1_macvtap: entered promiscuous mode [ 73.432676][ T5834] veth1_vlan: entered promiscuous mode [ 73.517776][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.529254][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.535444][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.542912][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.549462][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.578243][ T5829] veth0_vlan: entered promiscuous mode [ 73.595590][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.606422][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.621146][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.631960][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.641403][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.651940][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.661210][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.680655][ T5829] veth1_vlan: entered promiscuous mode [ 73.697094][ T3493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.706642][ T3493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.715430][ T5834] veth0_macvtap: entered promiscuous mode [ 73.739158][ T5834] veth1_macvtap: entered promiscuous mode [ 73.807625][ T55] Bluetooth: hci3: command tx timeout [ 73.820039][ T5829] veth0_macvtap: entered promiscuous mode [ 73.821784][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.854577][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.869270][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.880623][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.892860][ T55] Bluetooth: hci0: command tx timeout [ 73.892892][ T5842] Bluetooth: hci1: command tx timeout [ 73.898460][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.903906][ T5839] Bluetooth: hci2: command tx timeout [ 73.916240][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.936399][ T3513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.957918][ T5829] veth1_macvtap: entered promiscuous mode [ 73.964947][ T3513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.976121][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.001223][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.022956][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.035040][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.048201][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.115200][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.128130][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.143555][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.147323][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.165562][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.176612][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.184295][ T5891] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.199096][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.223474][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.238423][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.252170][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.264965][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.275621][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.295030][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.365840][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.378135][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.388323][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.399210][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.409361][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.420144][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.432772][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.487077][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.495844][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.511869][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.520723][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.599764][ T3513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.609107][ T3513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.671001][ T5899] Zero length message leads to an empty skb [ 74.685261][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.701562][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.802879][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.851489][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.954053][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.966207][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.700114][ T5914] ======================================================= [ 75.700114][ T5914] WARNING: The mand mount option has been deprecated and [ 75.700114][ T5914] and is ignored by this kernel. Remove the mand [ 75.700114][ T5914] option from the mount to silence this warning. [ 75.700114][ T5914] ======================================================= [ 75.889042][ T5839] Bluetooth: hci3: command tx timeout [ 75.968682][ T5839] Bluetooth: hci0: command tx timeout [ 75.974146][ T5839] Bluetooth: hci2: command tx timeout [ 75.979748][ T5842] Bluetooth: hci1: command tx timeout [ 77.498677][ T5936] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 77.508585][ T5936] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 77.593353][ T5936] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 77.669014][ T5936] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 77.675076][ T5936] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 77.844996][ T5936] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 77.892674][ T5936] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 77.926796][ T5936] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 77.967437][ T5839] Bluetooth: hci3: command tx timeout [ 77.978219][ T5936] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 78.005451][ T5936] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 78.032601][ T5936] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 78.138267][ T5936] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 79.037851][ T5963] mmap: syz.2.16 (5963) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 79.406775][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 79.513532][ T5961] netlink: 'syz.1.17': attribute type 19 has an invalid length. [ 79.596871][ T5961] netlink: 334 bytes leftover after parsing attributes in process `syz.1.17'. [ 79.731079][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 79.970772][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 80.047306][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 80.300809][ T5982] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.487008][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 81.806703][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 82.056599][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 82.136768][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 82.429182][ T6000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25'. [ 83.566688][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.886672][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 84.136566][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 84.211335][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 84.650846][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28'. [ 84.736927][ T6009] mmap: syz.2.27 (6009): VmData 37658624 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 85.947773][ T6043] futex_wake_op: syz.0.36 tries to shift op by 64; fix this program [ 86.036980][ T6043] loop5: detected capacity change from 0 to 8192 [ 87.197192][ T831] cfg80211: failed to load regulatory.db [ 89.401689][ T6095] serio: Serial port ptm0 [ 90.779472][ T6116] bdi 43:96: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 91.338354][ T6128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.56'. [ 91.447422][ T6123] syz.3.54 uses obsolete (PF_INET,SOCK_PACKET) [ 93.080592][ T6150] netlink: zone id is out of range [ 93.659427][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 93.993311][ T6181] netlink: 166 bytes leftover after parsing attributes in process `syz.3.70'. [ 94.102041][ T6182] netlink: 28 bytes leftover after parsing attributes in process `syz.3.70'. [ 98.720759][ T6250] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.120206][ T6267] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 99.133791][ T6267] ep_00: uevent: failed to send synthetic uevent: -22 [ 99.961155][ T6288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.96'. [ 100.029688][ T6277] netlink: 334 bytes leftover after parsing attributes in process `syz.0.93'. [ 100.099596][ T6291] netlink: 334 bytes leftover after parsing attributes in process `syz.0.93'. [ 101.752567][ T6313] netlink: 330 bytes leftover after parsing attributes in process `syz.3.103'. [ 101.786746][ T6313] mac80211_hwsim hwsim2 : renamed from wlan0 (while UP) [ 103.260192][ T29] audit: type=1326 audit(6032161641.527:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.2.108" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fedab985d29 code=0x0 [ 103.337174][ T6331] Process accounting resumed [ 105.419663][ T6346] netlink: 338 bytes leftover after parsing attributes in process `syz.3.112'. [ 105.452266][ T6346] netlink: 338 bytes leftover after parsing attributes in process `syz.3.112'. [ 105.533635][ T6354] netlink: 110 bytes leftover after parsing attributes in process `syz.3.112'. [ 105.665033][ T6354] veth0_macvtap: left promiscuous mode [ 106.067269][ T6388] process 'syz.0.123' launched './file0' with NULL argv: empty string added [ 107.394759][ T6433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.134'. [ 107.421199][ T6433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.134'. [ 107.422105][ T6432] netlink: 28 bytes leftover after parsing attributes in process `syz.0.134'. [ 107.554848][ T6433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.134'. [ 107.556170][ T6432] netlink: 28 bytes leftover after parsing attributes in process `syz.0.134'. [ 107.596861][ T6433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.134'. [ 107.633922][ T6433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.134'. [ 109.694681][ T29] audit: type=1326 audit(6032161647.957:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.2.146" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fedab985d29 code=0x0 [ 109.786295][ T6490] Process accounting resumed [ 111.166767][ T29] audit: type=1800 audit(6032161649.427:4): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.155" name="discovery_nqn" dev="configfs" ino=9691 res=0 errno=0 [ 111.672794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 111.694310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.737174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.796883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c0!!! [ 111.805839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c0!!! [ 111.815684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.726603][ T6561] mkiss: ax0: crc mode is auto. [ 114.567149][ T6609] random: crng reseeded on system resumption [ 117.830023][ T6687] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.536870912.4294967293), cmd(3) [ 120.251346][ T6742] erspan0: entered allmulticast mode [ 120.786667][ T29] audit: type=1800 audit(6032161671.049:5): pid=6764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.210" name="discovery_nqn" dev="configfs" ino=11354 res=0 errno=0 [ 122.784812][ T6795] __nla_validate_parse: 59 callbacks suppressed [ 122.784832][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'. [ 129.751925][ T6945] FAULT_INJECTION: forcing a failure. [ 129.751925][ T6945] name failslab, interval 1, probability 0, space 0, times 1 [ 129.776590][ T6945] CPU: 1 UID: 0 PID: 6945 Comm: syz.3.256 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 [ 129.787250][ T6945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 129.797362][ T6945] Call Trace: [ 129.800679][ T6945] [ 129.803647][ T6945] dump_stack_lvl+0x16c/0x1f0 [ 129.808403][ T6945] should_fail_ex+0x497/0x5b0 [ 129.813133][ T6945] ? fs_reclaim_acquire+0xae/0x150 [ 129.818296][ T6945] should_failslab+0xc2/0x120 [ 129.823043][ T6945] __kmalloc_cache_noprof+0x68/0x420 [ 129.828398][ T6945] rfkill_fop_open+0x1ad/0x750 [ 129.833231][ T6945] ? __pfx_rfkill_fop_open+0x10/0x10 [ 129.838569][ T6945] misc_open+0x35a/0x420 [ 129.842951][ T6945] ? __pfx_misc_open+0x10/0x10 [ 129.847771][ T6945] chrdev_open+0x237/0x6a0 [ 129.852273][ T6945] ? __pfx_apparmor_file_open+0x10/0x10 [ 129.857838][ T6945] ? __pfx_chrdev_open+0x10/0x10 [ 129.862819][ T6945] do_dentry_open+0xf59/0x1ea0 [ 129.867625][ T6945] ? __pfx_chrdev_open+0x10/0x10 [ 129.872578][ T6945] ? inode_permission+0xdd/0x5f0 [ 129.877549][ T6945] vfs_open+0x82/0x3f0 [ 129.881647][ T6945] ? may_open+0x1f2/0x400 [ 129.885991][ T6945] path_openat+0x1e6a/0x2d60 [ 129.890625][ T6945] ? __pfx_path_openat+0x10/0x10 [ 129.895582][ T6945] ? __pfx___lock_acquire+0x10/0x10 [ 129.900789][ T6945] ? lock_acquire.part.0+0x11b/0x380 [ 129.906080][ T6945] ? find_held_lock+0x2d/0x110 [ 129.910872][ T6945] do_filp_open+0x20c/0x470 [ 129.915402][ T6945] ? __pfx_do_filp_open+0x10/0x10 [ 129.920449][ T6945] ? find_held_lock+0x2d/0x110 [ 129.925258][ T6945] ? alloc_fd+0x41f/0x760 [ 129.929623][ T6945] do_sys_openat2+0x17a/0x1e0 [ 129.934328][ T6945] ? __pfx_do_sys_openat2+0x10/0x10 [ 129.939548][ T6945] ? __pfx___might_resched+0x10/0x10 [ 129.944855][ T6945] __x64_sys_openat+0x175/0x210 [ 129.949729][ T6945] ? __pfx___x64_sys_openat+0x10/0x10 [ 129.955163][ T6945] do_syscall_64+0xcd/0x250 [ 129.959685][ T6945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.965610][ T6945] RIP: 0033:0x7fb5f0185d29 [ 129.970043][ T6945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.989672][ T6945] RSP: 002b:00007fb5f0f00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 129.998113][ T6945] RAX: ffffffffffffffda RBX: 00007fb5f0375fa0 RCX: 00007fb5f0185d29 [ 130.006195][ T6945] RDX: 0000000000000382 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 130.014178][ T6945] RBP: 00007fb5f0201b08 R08: 0000000000000000 R09: 0000000000000000 [ 130.022152][ T6945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.030312][ T6945] R13: 0000000000000000 R14: 00007fb5f0375fa0 R15: 00007ffd0fbe0db8 [ 130.038321][ T6945] [ 131.333611][ T6972] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 131.668738][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'. [ 133.256907][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.263264][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.648587][ T7001] FAULT_INJECTION: forcing a failure. [ 133.648587][ T7001] name failslab, interval 1, probability 0, space 0, times 0 [ 133.846590][ T7001] CPU: 0 UID: 0 PID: 7001 Comm: syz.0.270 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 [ 133.857349][ T7001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 133.867457][ T7001] Call Trace: [ 133.870775][ T7001] [ 133.873742][ T7001] dump_stack_lvl+0x16c/0x1f0 [ 133.878473][ T7001] should_fail_ex+0x497/0x5b0 [ 133.883293][ T7001] ? fs_reclaim_acquire+0xae/0x150 [ 133.888483][ T7001] should_failslab+0xc2/0x120 [ 133.893259][ T7001] __kmalloc_cache_noprof+0x68/0x420 [ 133.898635][ T7001] rfkill_fop_open+0x1ad/0x750 [ 133.903471][ T7001] ? __pfx_rfkill_fop_open+0x10/0x10 [ 133.908848][ T7001] misc_open+0x35a/0x420 [ 133.913151][ T7001] ? __pfx_misc_open+0x10/0x10 [ 133.918157][ T7001] chrdev_open+0x237/0x6a0 [ 133.922628][ T7001] ? __pfx_apparmor_file_open+0x10/0x10 [ 133.928228][ T7001] ? __pfx_chrdev_open+0x10/0x10 [ 133.933252][ T7001] do_dentry_open+0xf59/0x1ea0 [ 133.938163][ T7001] ? __pfx_chrdev_open+0x10/0x10 [ 133.943251][ T7001] ? inode_permission+0xdd/0x5f0 [ 133.948242][ T7001] vfs_open+0x82/0x3f0 [ 133.952343][ T7001] ? may_open+0x1f2/0x400 [ 133.956705][ T7001] path_openat+0x1e6a/0x2d60 [ 133.961323][ T7001] ? __pfx_path_openat+0x10/0x10 [ 133.966274][ T7001] ? __pfx___lock_acquire+0x10/0x10 [ 133.971482][ T7001] ? lock_acquire.part.0+0x11b/0x380 [ 133.976776][ T7001] ? find_held_lock+0x2d/0x110 [ 133.981556][ T7001] do_filp_open+0x20c/0x470 [ 133.986100][ T7001] ? __pfx_do_filp_open+0x10/0x10 [ 133.991138][ T7001] ? find_held_lock+0x2d/0x110 [ 133.995932][ T7001] ? alloc_fd+0x41f/0x760 [ 134.000280][ T7001] do_sys_openat2+0x17a/0x1e0 [ 134.004979][ T7001] ? __pfx_do_sys_openat2+0x10/0x10 [ 134.010203][ T7001] ? __pfx___might_resched+0x10/0x10 [ 134.015512][ T7001] __x64_sys_openat+0x175/0x210 [ 134.020391][ T7001] ? __pfx___x64_sys_openat+0x10/0x10 [ 134.025882][ T7001] do_syscall_64+0xcd/0x250 [ 134.030408][ T7001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.036442][ T7001] RIP: 0033:0x7f545b585d29 [ 134.040873][ T7001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.060496][ T7001] RSP: 002b:00007f545c42f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 134.068921][ T7001] RAX: ffffffffffffffda RBX: 00007f545b775fa0 RCX: 00007f545b585d29 [ 134.076903][ T7001] RDX: 0000000000000382 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 134.085484][ T7001] RBP: 00007f545b601b08 R08: 0000000000000000 R09: 0000000000000000 [ 134.093481][ T7001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.101559][ T7001] R13: 0000000000000000 R14: 00007f545b775fa0 R15: 00007fff54f96398 [ 134.110022][ T7001] [ 145.012423][ T7257] Invalid ELF header magic: != ELF [ 146.224505][ T7292] Invalid ELF header magic: != ELF [ 146.580067][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.343'. [ 146.606802][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.343'. [ 149.460410][ T7385] netlink: 334 bytes leftover after parsing attributes in process `syz.1.364'. [ 150.685830][ T7410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.372'. [ 150.704874][ T7410] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 152.890599][ T7465] netlink: del zone limit has 4 unknown bytes [ 155.881875][ T7549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.409'. [ 158.060006][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.429'. [ 158.227775][ T7630] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.430'. [ 164.556635][ T29] audit: type=1800 audit(4294967330.047:6): pid=7754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.460" name="dbroot" dev="configfs" ino=14194 res=0 errno=0 [ 164.614819][ T29] audit: type=1804 audit(4294967330.047:7): pid=7754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.460" name="/newroot/sys/kernel/config/target/dbroot" dev="configfs" ino=14194 res=1 errno=0 [ 165.142571][ T7758] netlink: 80 bytes leftover after parsing attributes in process `syz.2.461'. [ 167.871930][ T7814] misc userio: Invalid payload size [ 168.908283][ T7827] netlink: 330 bytes leftover after parsing attributes in process `syz.0.477'. [ 168.950214][ T7819] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 170.010690][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.483'. [ 171.126519][ T7882] mkiss: ax0: crc mode is auto. [ 172.247412][ T7907] netlink: 342 bytes leftover after parsing attributes in process `syz.1.495'. [ 173.374738][ T7927] netlink: 20 bytes leftover after parsing attributes in process `syz.0.498'. [ 174.391789][ T7953] netlink: 266 bytes leftover after parsing attributes in process `syz.1.506'. [ 174.416796][ T7953] IPv6: NLM_F_CREATE should be specified when creating new route [ 174.449274][ T7922] netlink: 20 bytes leftover after parsing attributes in process `syz.0.498'. [ 174.615548][ T7959] Invalid ELF header magic: != ELF [ 174.788759][ T7937] Invalid ELF header magic: != ELF [ 175.269452][ T7985] delete_channel: no stack [ 175.368820][ T7957] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 175.398026][ T7957] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 175.404116][ T7957] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 175.426824][ T7957] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 176.662516][ T8007] bridge0: port 3(veth1_to_hsr) entered blocking state [ 176.694630][ T8007] bridge0: port 3(veth1_to_hsr) entered disabled state [ 176.726850][ T8007] veth1_to_hsr: entered allmulticast mode [ 176.733465][ T8007] veth1_to_hsr: entered promiscuous mode [ 176.810639][ T8007] bridge0: port 3(veth1_to_hsr) entered blocking state [ 176.818911][ T8007] bridge0: port 3(veth1_to_hsr) entered forwarding state [ 177.328438][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 177.496525][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 177.501140][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 177.502582][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 179.389124][ T8039] syz.2.530 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 180.204006][ T8067] Invalid ELF header magic: != ELF [ 183.545780][ T8111] netlink: set zone limit has 4 unknown bytes [ 184.130387][ T8112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.548'. [ 185.407536][ T8153] Process accounting resumed [ 187.648282][ T8183] sp0: Synchronizing with TNC [ 188.594053][ T8184] [U] [ 189.406833][ T8201] ima: policy update failed [ 189.436674][ T29] audit: type=1802 audit(4294967354.927:8): pid=8201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.567" res=0 errno=0 [ 189.671629][ T8208] netlink: 342 bytes leftover after parsing attributes in process `syz.1.569'. [ 190.507777][ T8218] netlink: 244 bytes leftover after parsing attributes in process `syz.0.571'. [ 192.756758][ T8262] netlink: 1 bytes leftover after parsing attributes in process `syz.1.582'. [ 193.934343][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 193.944420][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 193.953774][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 193.973376][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 193.987999][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 193.995536][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 194.339997][ T8288] chnl_net:caif_netlink_parms(): no params data found [ 194.510121][ T8288] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.556372][ T8288] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.590498][ T8288] bridge_slave_0: entered allmulticast mode [ 194.607869][ T8288] bridge_slave_0: entered promiscuous mode [ 194.616048][ T8288] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.635353][ T8288] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.647467][ T8288] bridge_slave_1: entered allmulticast mode [ 194.664573][ T8288] bridge_slave_1: entered promiscuous mode [ 194.693750][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.701275][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.778637][ T8288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.799319][ T8288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.949987][ T8288] team0: Port device team_slave_0 added [ 194.978798][ T8288] team0: Port device team_slave_1 added [ 195.067260][ T8288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.074303][ T8288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.100694][ T8288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.113506][ T8288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.120796][ T8288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.147244][ T8288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.465928][ T8288] hsr_slave_0: entered promiscuous mode [ 195.506101][ T8288] hsr_slave_1: entered promiscuous mode [ 195.535248][ T8288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.549403][ T8288] Cannot create hsr debugfs directory [ 196.056811][ T5839] Bluetooth: hci2: command tx timeout [ 196.359837][ T8288] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 196.405263][ T8288] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 196.430669][ T8288] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 196.531515][ T8288] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 196.783590][ T8288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.839970][ T8288] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.003680][ T3429] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.010904][ T3429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.052970][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.060238][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.615385][ T8288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.127467][ T5839] Bluetooth: hci2: command tx timeout [ 198.254950][ T8288] veth0_vlan: entered promiscuous mode [ 198.424705][ T8288] veth1_vlan: entered promiscuous mode [ 198.596774][ T8288] veth0_macvtap: entered promiscuous mode [ 198.606747][ T8288] veth1_macvtap: entered promiscuous mode [ 198.622347][ T8288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.633232][ T8288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.643487][ T8288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.654067][ T8288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.664257][ T8288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.675353][ T8288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.685665][ T8288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.696552][ T8288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.708873][ T8288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.719084][ T8288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.729731][ T8288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.740581][ T8288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.752102][ T8288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.762228][ T8288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.773024][ T8288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.783202][ T8288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.794268][ T8288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.806218][ T8288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.816312][ T8288] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.825147][ T8288] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.834033][ T8288] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.843189][ T8288] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.284879][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.293343][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.302844][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.310785][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.207666][ T5839] Bluetooth: hci2: command tx timeout [ 202.287296][ T5839] Bluetooth: hci2: command tx timeout [ 203.206063][ T8489] ovs_: entered promiscuous mode [ 203.240608][ T8492] openvswitch: ovs_: Dropping previously announced user features [ 203.369195][ T8495] : Can't lookup blockdev [ 204.274108][ T8499] Invalid ELF header magic: != ELF [ 205.047271][ T8506] netlink: 32 bytes leftover after parsing attributes in process `syz.0.630'. [ 206.617810][ T8533] netlink: 'syz.2.637': attribute type 1 has an invalid length. [ 206.683958][ T8533] netlink: 'syz.2.637': attribute type 1 has an invalid length. [ 207.423123][ T8552] bridge0: port 3(veth1_to_hsr) entered blocking state [ 207.491750][ T8552] bridge0: port 3(veth1_to_hsr) entered disabled state [ 207.542471][ T8552] veth1_to_hsr: entered allmulticast mode [ 207.667797][ T8552] veth1_to_hsr: entered promiscuous mode [ 207.674397][ T8552] bridge0: port 3(veth1_to_hsr) entered blocking state [ 207.681536][ T8552] bridge0: port 3(veth1_to_hsr) entered forwarding state [ 210.571060][ T8606] netlink: 28 bytes leftover after parsing attributes in process `syz.1.656'. [ 211.313609][ T29] audit: type=1326 audit(4294967315.760:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8625 comm="syz.1.661" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7042185d29 code=0x0 [ 211.647679][ T8620] Invalid ELF header magic: != ELF [ 213.143954][ T8678] netlink: 342 bytes leftover after parsing attributes in process `syz.1.673'. [ 213.367143][ T8682] netlink: 'syz.0.674': attribute type 1 has an invalid length. [ 213.380780][ T8682] nbd: error processing sock list [ 213.852522][ T8702] netlink: 28 bytes leftover after parsing attributes in process `syz.1.678'. [ 213.919064][ T8702] veth1_macvtap: left promiscuous mode [ 215.001481][ T8726] netlink: 28 bytes leftover after parsing attributes in process `syz.4.686'. [ 220.646380][ T8811] scsi_dev_info_list_add_str: bad dev info string '' '' '' syzkaller syzkaller login: [ 222.799312][ T8888] capability: warning: `syz.1.727' uses 32-bit capabilities (legacy support in use) [ 223.823022][ T8911] netlink: 'syz.0.730': attribute type 1 has an invalid length. [ 225.244091][ T8947] netlink: 342 bytes leftover after parsing attributes in process `syz.1.741'. [ 225.286408][ T8833] syz.4.713: vmalloc error: size 3772416, failed to allocated page array size 7368, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 225.378039][ T8833] CPU: 0 UID: 0 PID: 8833 Comm: syz.4.713 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 [ 225.388789][ T8833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 225.398890][ T8833] Call Trace: [ 225.402195][ T8833] [ 225.405154][ T8833] dump_stack_lvl+0x16c/0x1f0 [ 225.409880][ T8833] warn_alloc+0x24d/0x3a0 [ 225.414262][ T8833] ? __pfx_warn_alloc+0x10/0x10 [ 225.419171][ T8833] ? __get_vm_area_node+0x1b0/0x2f0 [ 225.424420][ T8833] ? __get_vm_area_node+0x1dc/0x2f0 [ 225.429669][ T8833] __vmalloc_node_range_noprof+0x1105/0x1530 [ 225.435711][ T8833] ? ip_set_sockfn_get+0x185/0xc50 [ 225.440887][ T8833] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 225.447268][ T8833] ? __get_vm_area_node+0x1b0/0x2f0 [ 225.452515][ T8833] ? __get_vm_area_node+0x1dc/0x2f0 [ 225.457785][ T8833] __vmalloc_node_range_noprof+0xd85/0x1530 [ 225.463755][ T8833] ? ip_set_sockfn_get+0x185/0xc50 [ 225.468924][ T8833] ? __pfx___lock_acquire+0x10/0x10 [ 225.468961][ T8833] ? ip_set_sockfn_get+0x185/0xc50 [ 225.468996][ T8833] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 225.469031][ T8833] ? apparmor_capable+0x114/0x1d0 [ 225.469067][ T8833] ? ip_set_sockfn_get+0x185/0xc50 [ 225.496054][ T8833] vmalloc_noprof+0x6b/0x90 [ 225.500608][ T8833] ? ip_set_sockfn_get+0x185/0xc50 [ 225.505764][ T8833] ip_set_sockfn_get+0x185/0xc50 [ 225.510750][ T8833] ? __pfx_lock_release+0x10/0x10 [ 225.515823][ T8833] ? __pfx_ip_set_sockfn_get+0x10/0x10 [ 225.521333][ T8833] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 225.527358][ T8833] nf_getsockopt+0x79/0xe0 [ 225.531821][ T8833] ip_getsockopt+0x18e/0x1e0 [ 225.536446][ T8833] ? __pfx_ip_getsockopt+0x10/0x10 [ 225.541588][ T8833] ? __schedule+0xe60/0x5ad0 [ 225.546214][ T8833] ? __pfx___lock_acquire+0x10/0x10 [ 225.551456][ T8833] ipv6_getsockopt+0x230/0x280 [ 225.556270][ T8833] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 225.561611][ T8833] ? __pfx_mark_lock+0x10/0x10 [ 225.566445][ T8833] sctp_getsockopt+0x1d2/0x7ae0 [ 225.571350][ T8833] ? hlock_class+0x4e/0x130 [ 225.575905][ T8833] ? mark_lock+0xb5/0xc60 [ 225.580282][ T8833] ? aa_label_sk_perm+0x19d/0x5a0 [ 225.585367][ T8833] ? __pfx_sctp_getsockopt+0x10/0x10 [ 225.590706][ T8833] ? __lock_acquire+0x15a9/0x3c40 [ 225.595792][ T8833] ? __pfx___lock_acquire+0x10/0x10 [ 225.601044][ T8833] ? find_held_lock+0x2d/0x110 [ 225.605861][ T8833] ? __might_fault+0x13b/0x190 [ 225.610680][ T8833] ? __pfx_lock_release+0x10/0x10 [ 225.615738][ T8833] ? trace_lock_acquire+0x14e/0x1f0 [ 225.620998][ T8833] ? lock_acquire+0x2f/0xb0 [ 225.625546][ T8833] ? __might_fault+0xe3/0x190 [ 225.630272][ T8833] ? __might_fault+0xe3/0x190 [ 225.635038][ T8833] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 225.640980][ T8833] ? do_sock_getsockopt+0x3fe/0x870 [ 225.646406][ T8833] do_sock_getsockopt+0x3fe/0x870 [ 225.651479][ T8833] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 225.657073][ T8833] ? lock_acquire+0x2f/0xb0 [ 225.661617][ T8833] ? __fget_files+0x40/0x3a0 [ 225.666260][ T8833] ? __fget_files+0x206/0x3a0 [ 225.671162][ T8833] __sys_getsockopt+0x12f/0x260 [ 225.676071][ T8833] __x64_sys_getsockopt+0xbd/0x160 [ 225.681239][ T8833] ? do_syscall_64+0x91/0x250 [ 225.685978][ T8833] ? lockdep_hardirqs_on+0x7c/0x110 [ 225.691228][ T8833] do_syscall_64+0xcd/0x250 [ 225.695841][ T8833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.701794][ T8833] RIP: 0033:0x7f2b0e185d29 [ 225.706254][ T8833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.725906][ T8833] RSP: 002b:00007f2b0ef70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 225.734454][ T8833] RAX: ffffffffffffffda RBX: 00007f2b0e375fa0 RCX: 00007f2b0e185d29 [ 225.742466][ T8833] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000005 [ 225.750483][ T8833] RBP: 00007f2b0e201b08 R08: 0000000020000040 R09: 0000000000000000 [ 225.758500][ T8833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.766507][ T8833] R13: 0000000000000000 R14: 00007f2b0e375fa0 R15: 00007ffdc9962678 [ 225.774530][ T8833] [ 225.843476][ T8833] Mem-Info: [ 225.846854][ T8833] active_anon:36169 inactive_anon:0 isolated_anon:0 [ 225.846854][ T8833] active_file:18500 inactive_file:38984 isolated_file:0 [ 225.846854][ T8833] unevictable:768 dirty:783 writeback:0 [ 225.846854][ T8833] slab_reclaimable:10700 slab_unreclaimable:98154 [ 225.846854][ T8833] mapped:25507 shmem:23166 pagetables:841 [ 225.846854][ T8833] sec_pagetables:0 bounce:0 [ 225.846854][ T8833] kernel_misc_reclaimable:0 [ 225.846854][ T8833] free:1233071 free_pcp:12071 free_cma:0 [ 225.992611][ T8833] Node 0 active_anon:120976kB inactive_anon:0kB active_file:74000kB inactive_file:155928kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102028kB dirty:3128kB writeback:0kB shmem:65528kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11472kB pagetables:3264kB sec_pagetables:0kB all_unreclaimable? no [ 226.102797][ T8833] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 226.192831][ T8833] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 226.221663][ T8833] lowmem_reserve[]: 0 2491 2492 0 0 [ 226.376559][ T8833] Node 0 DMA32 free:1086024kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:113508kB inactive_anon:0kB active_file:74000kB inactive_file:155120kB unevictable:1536kB writepending:2564kB present:3129332kB managed:2551336kB mlocked:0kB bounce:0kB free_pcp:4456kB local_pcp:1916kB free_cma:0kB [ 226.460274][ T8833] lowmem_reserve[]: 0 0 0 0 0 [ 226.465212][ T8833] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:808kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 226.513164][ T8833] lowmem_reserve[]: 0 0 0 0 0 [ 226.518945][ T8833] Node 1 Normal free:3867532kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:38580kB local_pcp:23936kB free_cma:0kB [ 226.557775][ T8962] netlink: 20 bytes leftover after parsing attributes in process `syz.2.744'. [ 226.572428][ T8833] lowmem_reserve[]: 0 0 0 0 0 [ 226.577635][ T8833] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 226.611736][ T8962] netlink: 32 bytes leftover after parsing attributes in process `syz.2.744'. [ 226.632334][ T8833] Node 0 DMA32: 7251*4kB (UME) 3528*8kB (ME) 1803*16kB (ME) 1029*32kB (UME) 569*64kB (UME) 225*128kB (UME) 183*256kB (UM) 65*512kB (UM) 17*1024kB (UME) 2*2048kB (UM) 196*4096kB (M) = 1088668kB [ 226.733781][ T8833] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 226.794582][ T8833] Node 1 Normal: 60*4kB (UE) 24*8kB (UME) 55*16kB (UME) 185*32kB (UME) 96*64kB (UME) 31*128kB (UME) 12*256kB (UM) 10*512kB (UM) 4*1024kB (UME) 2*2048kB (ME) 936*4096kB (M) = 3867584kB [ 226.878531][ T8833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 226.914439][ T8833] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 226.961025][ T8833] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 226.998531][ T8833] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 227.046633][ T8833] 67591 total pagecache pages [ 227.051381][ T8833] 25 pages in swap cache [ 227.055640][ T8833] Free swap = 123728kB [ 227.082046][ T8833] Total swap = 124996kB [ 227.086277][ T8833] 2097051 pages RAM [ 227.114035][ T8833] 0 pages HighMem/MovableOnly [ 227.123769][ T8833] 427367 pages reserved [ 227.134046][ T8833] 0 pages cma reserved [ 228.295224][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'. [ 228.816140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 230.196731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 230.449436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 230.628259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 235.117166][ T9118] ptrace attach of "./syz-executor exec"[5829] was attempted by "./syz-executor exec"[9118] [ 235.619205][ T9158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.782'. [ 236.390249][ T9177] bridge0: port 4(team0) entered blocking state [ 236.445263][ T9177] bridge0: port 4(team0) entered disabled state [ 236.506228][ T9177] team0: entered allmulticast mode [ 236.525303][ T9177] team_slave_0: entered allmulticast mode [ 236.572832][ T9177] team_slave_1: entered allmulticast mode [ 236.635983][ T9177] team0: entered promiscuous mode [ 236.673893][ T9177] team_slave_0: entered promiscuous mode [ 236.690978][ T9177] team_slave_1: entered promiscuous mode [ 236.707500][ T9177] bridge0: port 4(team0) entered blocking state [ 236.713919][ T9177] bridge0: port 4(team0) entered forwarding state [ 236.780272][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.789'. [ 237.424945][ T9204] netlink: 326 bytes leftover after parsing attributes in process `syz.2.794'. [ 237.687632][ T9214] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.797'. [ 237.701588][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'. [ 239.928099][ T9284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.815'. [ 241.729913][ T9319] Invalid ELF header magic: != ELF [ 242.322578][ T9333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.828'. [ 245.714696][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'. [ 248.190846][ T9464] netlink: 342 bytes leftover after parsing attributes in process `syz.4.859'. [ 249.167552][ T9465] netlink: 146 bytes leftover after parsing attributes in process `syz.2.858'. [ 251.722560][ T9542] FAULT_INJECTION: forcing a failure. [ 251.722560][ T9542] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 251.776577][ T9542] CPU: 0 UID: 0 PID: 9542 Comm: syz.4.876 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 [ 251.787234][ T9542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 251.797310][ T9542] Call Trace: [ 251.800592][ T9542] [ 251.803524][ T9542] dump_stack_lvl+0x16c/0x1f0 [ 251.808224][ T9542] should_fail_ex+0x497/0x5b0 [ 251.812915][ T9542] strncpy_from_user+0x3b/0x2d0 [ 251.817860][ T9542] getname_flags.part.0+0x8f/0x550 [ 251.822989][ T9542] getname+0x8d/0xe0 [ 251.826892][ T9542] do_sys_openat2+0x104/0x1e0 [ 251.831582][ T9542] ? __pfx_do_sys_openat2+0x10/0x10 [ 251.836794][ T9542] ? __fget_files+0x206/0x3a0 [ 251.841498][ T9542] __x64_sys_openat+0x175/0x210 [ 251.846367][ T9542] ? __pfx___x64_sys_openat+0x10/0x10 [ 251.851754][ T9542] ? ksys_write+0x1ba/0x250 [ 251.856270][ T9542] do_syscall_64+0xcd/0x250 [ 251.860785][ T9542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.866689][ T9542] RIP: 0033:0x7f2b0e185d29 [ 251.871193][ T9542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.890813][ T9542] RSP: 002b:00007f2b0ef70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 251.899262][ T9542] RAX: ffffffffffffffda RBX: 00007f2b0e375fa0 RCX: 00007f2b0e185d29 [ 251.907389][ T9542] RDX: 0000000000000342 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 251.915378][ T9542] RBP: 00007f2b0ef70090 R08: 0000000000000000 R09: 0000000000000000 [ 251.923360][ T9542] R10: 000000000000ffeb R11: 0000000000000246 R12: 0000000000000001 [ 251.931335][ T9542] R13: 0000000000000000 R14: 00007f2b0e375fa0 R15: 00007ffdc9962678 [ 251.939326][ T9542] [ 251.966291][ T9544] netlink: 338 bytes leftover after parsing attributes in process `syz.1.877'. [ 251.976122][ T9544] netlink: 338 bytes leftover after parsing attributes in process `syz.1.877'. [ 251.987113][ T9544] netlink: 170 bytes leftover after parsing attributes in process `syz.1.877'. [ 253.453855][ T9576] netlink: 'syz.1.884': attribute type 33 has an invalid length. [ 253.555370][ T9576] netlink: 322 bytes leftover after parsing attributes in process `syz.1.884'. [ 254.617722][ T9600] FAULT_INJECTION: forcing a failure. [ 254.617722][ T9600] name failslab, interval 1, probability 0, space 0, times 0 [ 254.662303][ T9600] CPU: 1 UID: 0 PID: 9600 Comm: syz.4.889 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 [ 254.672976][ T9600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 254.683079][ T9600] Call Trace: [ 254.686385][ T9600] [ 254.689348][ T9600] dump_stack_lvl+0x16c/0x1f0 [ 254.694069][ T9600] should_fail_ex+0x497/0x5b0 [ 254.698787][ T9600] ? fs_reclaim_acquire+0xae/0x150 [ 254.703937][ T9600] should_failslab+0xc2/0x120 [ 254.708753][ T9600] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 254.714176][ T9600] ? alloc_empty_file+0x73/0x1e0 [ 254.719168][ T9600] alloc_empty_file+0x73/0x1e0 [ 254.723984][ T9600] path_openat+0xe1/0x2d60 [ 254.728445][ T9600] ? hlock_class+0x4e/0x130 [ 254.732993][ T9600] ? __lock_acquire+0x15a9/0x3c40 [ 254.738074][ T9600] ? __pfx_path_openat+0x10/0x10 [ 254.743050][ T9600] ? __pfx___lock_acquire+0x10/0x10 [ 254.748289][ T9600] ? lock_acquire.part.0+0x11b/0x380 [ 254.753607][ T9600] ? find_held_lock+0x2d/0x110 [ 254.758412][ T9600] do_filp_open+0x20c/0x470 [ 254.762959][ T9600] ? __pfx_do_filp_open+0x10/0x10 [ 254.768055][ T9600] ? find_held_lock+0x2d/0x110 [ 254.772881][ T9600] ? alloc_fd+0x41f/0x760 [ 254.777258][ T9600] do_sys_openat2+0x17a/0x1e0 [ 254.781985][ T9600] ? __pfx_do_sys_openat2+0x10/0x10 [ 254.787242][ T9600] ? __fget_files+0x206/0x3a0 [ 254.791965][ T9600] __x64_sys_openat+0x175/0x210 [ 254.796866][ T9600] ? __pfx___x64_sys_openat+0x10/0x10 [ 254.802281][ T9600] ? ksys_write+0x1ba/0x250 [ 254.806924][ T9600] do_syscall_64+0xcd/0x250 [ 254.811464][ T9600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.817480][ T9600] RIP: 0033:0x7f2b0e185d29 [ 254.821921][ T9600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.841563][ T9600] RSP: 002b:00007f2b0ef70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 254.850026][ T9600] RAX: ffffffffffffffda RBX: 00007f2b0e375fa0 RCX: 00007f2b0e185d29 [ 254.858034][ T9600] RDX: 0000000000000342 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 254.866049][ T9600] RBP: 00007f2b0ef70090 R08: 0000000000000000 R09: 0000000000000000 [ 254.874058][ T9600] R10: 000000000000ffeb R11: 0000000000000246 R12: 0000000000000001 [ 254.882067][ T9600] R13: 0000000000000000 R14: 00007f2b0e375fa0 R15: 00007ffdc9962678 [ 254.890087][ T9600] [ 255.261477][ T9610] nbd: must specify an index to disconnect [ 256.220615][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.227399][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.331558][ T9656] [ 258.333937][ T9656] ====================================================== [ 258.341013][ T9656] WARNING: possible circular locking dependency detected [ 258.348048][ T9656] 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 Not tainted [ 258.355185][ T9656] ------------------------------------------------------ [ 258.362216][ T9656] syz.4.900/9656 is trying to acquire lock: [ 258.368124][ T9656] ffff88807cdc01e0 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xe3/0x190 [ 258.377060][ T9656] [ 258.377060][ T9656] but task is already holding lock: [ 258.384443][ T9656] ffff888025c492e0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x33/0x70 [ 258.393725][ T9656] [ 258.393725][ T9656] which lock already depends on the new lock. [ 258.393725][ T9656] [ 258.404147][ T9656] [ 258.404147][ T9656] the existing dependency chain (in reverse order) is: [ 258.413183][ T9656] [ 258.413183][ T9656] -> #4 (&q->debugfs_mutex){+.+.}-{4:4}: [ 258.421130][ T9656] __mutex_lock+0x19b/0xa60 [ 258.426195][ T9656] blk_register_queue+0x13c/0x4f0 [ 258.431780][ T9656] add_disk_fwnode+0x785/0x1300 [ 258.437179][ T9656] brd_alloc.isra.0+0x50a/0x7c0 [ 258.442563][ T9656] brd_init+0x12b/0x1d0 [ 258.447238][ T9656] do_one_initcall+0x128/0x630 [ 258.452543][ T9656] kernel_init_freeable+0x58f/0x8b0 [ 258.458270][ T9656] kernel_init+0x1c/0x2b0 [ 258.463128][ T9656] ret_from_fork+0x45/0x80 [ 258.468065][ T9656] ret_from_fork_asm+0x1a/0x30 [ 258.473357][ T9656] [ 258.473357][ T9656] -> #3 (&q->sysfs_lock){+.+.}-{4:4}: [ 258.480930][ T9656] __mutex_lock+0x19b/0xa60 [ 258.485968][ T9656] queue_attr_store+0xe2/0x170 [ 258.491265][ T9656] sysfs_kf_write+0x117/0x170 [ 258.496472][ T9656] kernfs_fop_write_iter+0x33d/0x500 [ 258.502283][ T9656] vfs_write+0x5ae/0x1150 [ 258.507132][ T9656] ksys_write+0x12b/0x250 [ 258.511984][ T9656] do_syscall_64+0xcd/0x250 [ 258.517012][ T9656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.523435][ T9656] [ 258.523435][ T9656] -> #2 (&q->q_usage_counter(io)){++++}-{0:0}: [ 258.531776][ T9656] __submit_bio+0x49c/0x540 [ 258.536809][ T9656] submit_bio_noacct_nocheck+0x892/0xd70 [ 258.542975][ T9656] submit_bio_noacct+0x93a/0x1e20 [ 258.548528][ T9656] mpage_readahead+0x41d/0x590 [ 258.553818][ T9656] read_pages+0x1a8/0xdc0 [ 258.558666][ T9656] page_cache_ra_unbounded+0x3dc/0x750 [ 258.564641][ T9656] page_cache_ra_order+0x8f2/0xc80 [ 258.570268][ T9656] page_cache_sync_ra+0x4b4/0x9c0 [ 258.575807][ T9656] filemap_get_pages+0xd7b/0x1be0 [ 258.581351][ T9656] filemap_splice_read+0x5cc/0xd00 [ 258.586990][ T9656] do_splice_read+0x282/0x370 [ 258.592187][ T9656] splice_file_to_pipe+0x109/0x120 [ 258.597839][ T9656] do_sendfile+0x3fd/0xe30 [ 258.602770][ T9656] __x64_sys_sendfile64+0x1da/0x220 [ 258.608491][ T9656] do_syscall_64+0xcd/0x250 [ 258.613516][ T9656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.619931][ T9656] [ 258.619931][ T9656] -> #1 (mapping.invalidate_lock#2){++++}-{4:4}: [ 258.628451][ T9656] down_read+0x9a/0x330 [ 258.633129][ T9656] filemap_fault+0x2e0/0x2820 [ 258.638332][ T9656] __do_fault+0x10a/0x490 [ 258.643185][ T9656] do_pte_missing+0xebd/0x3e00 [ 258.648469][ T9656] __handle_mm_fault+0x103c/0x2a40 [ 258.654099][ T9656] handle_mm_fault+0x3fa/0xaa0 [ 258.659382][ T9656] __get_user_pages+0x8d9/0x3b50 [ 258.664839][ T9656] __gup_longterm_locked+0x211/0x1870 [ 258.670908][ T9656] gup_fast_fallback+0x1802/0x2690 [ 258.676538][ T9656] pin_user_pages_fast+0xa8/0x100 [ 258.682092][ T9656] iov_iter_extract_pages+0x3a5/0x2010 [ 258.688079][ T9656] bio_iov_iter_get_pages+0x37c/0x1100 [ 258.694063][ T9656] blkdev_direct_IO+0x1054/0x1ad0 [ 258.699607][ T9656] blkdev_write_iter+0x6f9/0xd40 [ 258.705146][ T9656] vfs_write+0x5ae/0x1150 [ 258.709995][ T9656] ksys_write+0x12b/0x250 [ 258.714849][ T9656] do_syscall_64+0xcd/0x250 [ 258.719879][ T9656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.726295][ T9656] [ 258.726295][ T9656] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 258.733856][ T9656] __lock_acquire+0x249e/0x3c40 [ 258.739221][ T9656] lock_acquire.part.0+0x11b/0x380 [ 258.744851][ T9656] __might_fault+0x11b/0x190 [ 258.749968][ T9656] _copy_from_user+0x29/0xd0 [ 258.755081][ T9656] __blk_trace_setup+0xa8/0x180 [ 258.760456][ T9656] blk_trace_setup+0x47/0x70 [ 258.765561][ T9656] sg_ioctl+0x7a3/0x26b0 [ 258.770332][ T9656] __x64_sys_ioctl+0x190/0x200 [ 258.775618][ T9656] do_syscall_64+0xcd/0x250 [ 258.780641][ T9656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.787058][ T9656] [ 258.787058][ T9656] other info that might help us debug this: [ 258.787058][ T9656] [ 258.797275][ T9656] Chain exists of: [ 258.797275][ T9656] &mm->mmap_lock --> &q->sysfs_lock --> &q->debugfs_mutex [ 258.797275][ T9656] [ 258.810313][ T9656] Possible unsafe locking scenario: [ 258.810313][ T9656] [ 258.817757][ T9656] CPU0 CPU1 [ 258.823109][ T9656] ---- ---- [ 258.828466][ T9656] lock(&q->debugfs_mutex); [ 258.833051][ T9656] lock(&q->sysfs_lock); [ 258.839895][ T9656] lock(&q->debugfs_mutex); [ 258.846998][ T9656] rlock(&mm->mmap_lock); [ 258.851409][ T9656] [ 258.851409][ T9656] *** DEADLOCK *** [ 258.851409][ T9656] [ 258.859548][ T9656] 1 lock held by syz.4.900/9656: [ 258.864491][ T9656] #0: ffff888025c492e0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x33/0x70 [ 258.874159][ T9656] [ 258.874159][ T9656] stack backtrace: [ 258.880034][ T9656] CPU: 1 UID: 0 PID: 9656 Comm: syz.4.900 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 [ 258.890616][ T9656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 258.900664][ T9656] Call Trace: [ 258.903932][ T9656] [ 258.906859][ T9656] dump_stack_lvl+0x116/0x1f0 [ 258.911541][ T9656] print_circular_bug+0x41c/0x610 [ 258.916579][ T9656] check_noncircular+0x31a/0x400 [ 258.921526][ T9656] ? __pfx_check_noncircular+0x10/0x10 [ 258.926993][ T9656] ? lockdep_lock+0xc6/0x200 [ 258.931582][ T9656] ? __pfx_lockdep_lock+0x10/0x10 [ 258.936609][ T9656] __lock_acquire+0x249e/0x3c40 [ 258.941478][ T9656] ? __pfx___lock_acquire+0x10/0x10 [ 258.946689][ T9656] ? __pfx_mark_lock+0x10/0x10 [ 258.951475][ T9656] lock_acquire.part.0+0x11b/0x380 [ 258.956606][ T9656] ? __might_fault+0xe3/0x190 [ 258.961313][ T9656] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 258.966954][ T9656] ? rcu_is_watching+0x12/0xc0 [ 258.971727][ T9656] ? trace_lock_acquire+0x14e/0x1f0 [ 258.976931][ T9656] ? __might_fault+0xe3/0x190 [ 258.981613][ T9656] ? lock_acquire+0x2f/0xb0 [ 258.986108][ T9656] ? __might_fault+0xe3/0x190 [ 258.990791][ T9656] ? __might_fault+0xe3/0x190 [ 258.995472][ T9656] __might_fault+0x11b/0x190 [ 259.000069][ T9656] ? __might_fault+0xe3/0x190 [ 259.004756][ T9656] _copy_from_user+0x29/0xd0 [ 259.009353][ T9656] __blk_trace_setup+0xa8/0x180 [ 259.014205][ T9656] ? __pfx___blk_trace_setup+0x10/0x10 [ 259.019671][ T9656] ? do_vfs_ioctl+0x513/0x1950 [ 259.024435][ T9656] blk_trace_setup+0x47/0x70 [ 259.029027][ T9656] sg_ioctl+0x7a3/0x26b0 [ 259.033275][ T9656] ? __pfx_sg_ioctl+0x10/0x10 [ 259.037956][ T9656] ? __pfx___might_resched+0x10/0x10 [ 259.043242][ T9656] ? xfd_validate_state+0x5d/0x180 [ 259.048351][ T9656] ? __pfx_sg_ioctl+0x10/0x10 [ 259.053034][ T9656] __x64_sys_ioctl+0x190/0x200 [ 259.057799][ T9656] do_syscall_64+0xcd/0x250 [ 259.062310][ T9656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.068208][ T9656] RIP: 0033:0x7f2b0e185d29 [ 259.072619][ T9656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.092225][ T9656] RSP: 002b:00007f2b0ef70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.100638][ T9656] RAX: ffffffffffffffda RBX: 00007f2b0e375fa0 RCX: 00007f2b0e185d29 [ 259.108605][ T9656] RDX: 0000000000000038 RSI: 00000000c0481273 RDI: 0000000000000003 [ 259.116571][ T9656] RBP: 00007f2b0e201b08 R08: 0000000000000000 R09: 0000000000000000 [ 259.124539][ T9656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.132514][ T9656] R13: 0000000000000000 R14: 00007f2b0e375fa0 R15: 00007ffdc9962678 [ 259.140506][ T9656] [ 259.327285][ T9664] FAULT_INJECTION: forcing a failure. [ 259.327285][ T9664] name failslab, interval 1, probability 0, space 0, times 0 [ 259.407055][ T9664] CPU: 0 UID: 0 PID: 9664 Comm: syz.2.901 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 [ 259.417699][ T9664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 259.427774][ T9664] Call Trace: [ 259.431067][ T9664] [ 259.434007][ T9664] dump_stack_lvl+0x16c/0x1f0 [ 259.438715][ T9664] should_fail_ex+0x497/0x5b0 [ 259.443421][ T9664] ? fs_reclaim_acquire+0xae/0x150 [ 259.448555][ T9664] should_failslab+0xc2/0x120 [ 259.453272][ T9664] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 259.458674][ T9664] ? security_file_alloc+0x34/0x2b0 [ 259.463901][ T9664] security_file_alloc+0x34/0x2b0 [ 259.468958][ T9664] init_file+0x93/0x480 [ 259.473145][ T9664] alloc_empty_file+0x91/0x1e0 [ 259.477949][ T9664] path_openat+0xe1/0x2d60 [ 259.482388][ T9664] ? __x64_sys_openat+0x175/0x210 [ 259.487441][ T9664] ? do_syscall_64+0xcd/0x250 [ 259.492141][ T9664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.498243][ T9664] ? __pfx_path_openat+0x10/0x10 [ 259.503218][ T9664] do_filp_open+0x20c/0x470 [ 259.507758][ T9664] ? __pfx_do_filp_open+0x10/0x10 [ 259.512820][ T9664] ? alloc_fd+0x41f/0x760 [ 259.517175][ T9664] do_sys_openat2+0x17a/0x1e0 [ 259.521977][ T9664] ? __pfx_do_sys_openat2+0x10/0x10 [ 259.527208][ T9664] ? __fget_files+0x206/0x3a0 [ 259.531923][ T9664] __x64_sys_openat+0x175/0x210 [ 259.536809][ T9664] ? __pfx___x64_sys_openat+0x10/0x10 [ 259.542210][ T9664] ? ksys_write+0x1ba/0x250 [ 259.546998][ T9664] ? rcu_is_watching+0x12/0xc0 [ 259.551789][ T9664] ? rcu_is_watching+0x12/0xc0 [ 259.556577][ T9664] do_syscall_64+0xcd/0x250 [ 259.561107][ T9664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.567025][ T9664] RIP: 0033:0x7fedab985d29 [ 259.571453][ T9664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.591084][ T9664] RSP: 002b:00007fedac758038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 259.599518][ T9664] RAX: ffffffffffffffda RBX: 00007fedabb75fa0 RCX: 00007fedab985d29 [ 259.607511][ T9664] RDX: 0000000000000342 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 259.615498][ T9664] RBP: 00007fedac758090 R08: 0000000000000000 R09: 0000000000000000 [ 259.623486][ T9664] R10: 000000000000ffeb R11: 0000000000000246 R12: 0000000000000001 [ 259.631488][ T9664] R13: 0000000000000000 R14: 00007fedabb75fa0 R15: 00007ffc4afe4f98 [ 259.639488][ T9664] [ 260.246071][ T9660] lo: entered allmulticast mode [ 260.469260][ T9659] lo: left allmulticast mode