last executing test programs: 55.457208872s ago: executing program 1 (id=2956): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x136c, r0, 0xd0d58b333228212f, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1350, 0x2c, 0x0, 0x1, [@nested={0x1342, 0x7e, 0x0, 0x1, [@generic="329e617420b3bd5a6c8b884ed7e995caec5addfd4229e8be5bff9f2d1d7134c8981cc81f371c65abcecad1ce4d4e753da5a889871a3b95d6755eea22aa390b41a88976da10e8df4bf947855e859f340383ad81c6fc06457118bda0f8b6442f9f297411454c657e0a09fe075942668e180efe9ae6bac86faa856e8811404dc3b0d11926f159f8b5e43b307ac98ee44683e9fb1ebb6537f7c69f321f0b926bfd799ab614e26dbf82e52a132d02425f1de81b2aab1d65fa0000d5151b0ba917e76fb41b164f52bc", @generic="c8a5ee082732e33bd3214e1a8ea9dc0539978226962450c46195587a26a98e7d3e2a9e2e4fa2e1049d73f8b2cc7fa2a10dafb9fb139ac9510075ef4b28439cf5cb37ef112b40c99d3873ff23c84cfc26e4ba5dd1b804443150a48b62e3d2f36c86be4113717ade7e95bd9756282325bfb9b275172911bd46e18b91cb3bf216edf9b86270b986549e0e18ba3141d06e1fbe8d93f21074f9e7b322315cc97bcb74b9efc78ddd88c2d31ab870d88086d1d4d7bf70", @typed={0x8, 0xbd, 0x0, 0x0, @pid}, @generic="0623225e887a445be50909e3be27854c39c2596ad586f052e8b2762342cd61d5e321322d8e6aa5cb97933a45c12d4581af1474fc3a6537b95718a3ade379bd163323f3127515a4e693f912174bc6b57981ac59300b6ba4f8bc4b580463cc50cc94612b00104b6cb38f06a308988deb223603", @generic="aac0f62625d99be51d2ff9dcc15041ebeef87e82dbeb565cbb6a9a7b1e6e8444c78489116f504709ddec09846c4e1653af0bb438ee91e7bf7983f6782a98cf7d86585850f611565e80641a3f735a6876da79864935d2bdf580b9f3ff82386eee9b3cfaa70c647c87da6153c5b0645a4587d7cb14e60d38c2a520df9c3af08d3d2c559ba6a60dbeb1f74b73f637df91a2a08a090582503038aadafde9e1330a3ed4738ce0448fa918c2aa32cdffbe5fb0479eadf3e169ba52e1f7d6e7286e97ac9873a3d3f1d6a1d3da3b441c95cf3c6be4eaa5416959f171934bd6", @nested={0x1065, 0x3, 0x0, 0x1, [@generic="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", @generic="c72616bb3b0d623e32333758dab336b505dfe7a5b525b7cbad86bbab8f7be4a4909ffa3a283b988f0ecb405e685e657b0625123d21c83ebb389a8e36d64c6a83e0fc886fbd5761f42796e6da622210a670ce20f1cd838db8cf", @typed={0x8, 0x16, 0x0, 0x0, @pid}]}, @typed={0x8, 0x106, 0x0, 0x0, @uid}]}, @typed={0x8, 0x61, 0x0, 0x0, @pid}]}]}, 0x136c}}, 0x4000000) 55.343671609s ago: executing program 1 (id=2957): rseq$auto(&(0x7f0000000000)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x5ce, "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"}, 0x8000, 0x0, 0x6) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) (async, rerun: 32) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x48, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\x87\x02\x1c\xfd\xac\xc7\xaa\n\xf9\x19\xc4#<^\x91\x1d\xda\xc4m\xef\xff(i\xc6@\x91_\vBj\x0eQ\xceV\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 32) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x81, 0x0) (async, rerun: 32) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) (async) munlock$auto(0x9, 0x29b9) 53.095119403s ago: executing program 1 (id=2969): r0 = socket(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_RECONFIGURE(r1, 0x0, 0x40010) sendmsg$auto_NBD_CMD_RECONFIGURE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40440) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x801, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x1) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) mmap$auto(0x2, 0x800, 0x0, 0x40000eb1, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x24040084) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc8, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_MAC={0x97, 0x6, "36bb1d654680dc0515751919398a2d79a21772261ffdd3f575710362d074ea74f14f37a9034acaf1ea696d74ae355aef7a25e6f8bf407c9b54fc55fdf8297eba024ac17b25574ad8a837baf7e9a37e489857747caee8defb01a2745e2a62c1f1aa75531d19663dd5d0ef55456739dbc658f8a62698065ccd35df49ef857894951ac62b996eb741db039bafded8275ee359a06a"}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x14, 0xcd, "16867dabee279883dffa107223d17a6b"}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4080}, 0x404e000) close_range$auto(0x2, 0x8000, 0x0) 50.906631135s ago: executing program 1 (id=2981): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x800) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(0x0, r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000b00)={'veth0_to_bridge\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x20000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r6, 0x0, 0x20000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nl80211(0x0, r8) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8, 0x2, r14}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8, 0x2, r14}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}, @HSR_A_IF2_AGE={0x8, 0x4, 0x4b3d}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="0000fdff", @ANYRES16=0x0, @ANYBLOB="10002abd7000ffdbdf250300000005000500050000000c00018008000100", @ANYRES32=r4, @ANYBLOB="05000200020000000c00018008000300bce50000840001800800030007000000140002006d61637365633000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="1400020073797a6b616c6c6572300000000000001400020076657468305f6d616376746170000000080003000600000008000100", @ANYRES32=r11, @ANYBLOB="140002007767320000000000000000000000000008000100", @ANYRES32=r12, @ANYBLOB="050003000500000005000300070000006800018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="08000300070000000800030000000000140002007663616e30000000000000000000000014000200766c616e3000000000000000000000001400020070696d72656731000000000000000000050003000c000000"], 0x140}, 0x1, 0x0, 0x0, 0x4040}, 0x40) 50.619264437s ago: executing program 1 (id=2983): io_uring_setup$auto(0x6, 0x0) (async) r0 = io_uring_setup$auto(0x6, 0x0) setreuid$auto(0x1, 0x0) (async) setreuid$auto(0x1, 0x0) tkill$auto(0x1, 0x7) (async) tkill$auto(0x1, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000380), r1) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40048840}, 0x40) (async) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40048840}, 0x40) swapon$auto(0x0, 0x3) r3 = io_uring_setup$auto(0x3, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x4, 0x200, 0x8, 0xffffffffffffffff, [0x200, 0x101, 0x24000000], {0x9, 0x9, 0x8, 0x3, 0x1, 0xfffffff1, 0xcc52, 0x1, 0xa}, {0x0, 0x6, 0x7, 0x4, 0x43, 0x5, 0x4, 0x7, 0x9}}) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) mknod$auto(&(0x7f0000000040)=':}%-\x00', 0x100, 0xf203) (async) mknod$auto(&(0x7f0000000040)=':}%-\x00', 0x100, 0xf203) mq_open$auto(&(0x7f00000020c0)='.\xf1\x00', 0x56a, 0x2d, 0x0) (async) mq_open$auto(&(0x7f00000020c0)='.\xf1\x00', 0x56a, 0x2d, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'hsr0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x200}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_IFINDEX={0x8, 0x2, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x200}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_IFINDEX={0x8, 0x2, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_STATS_GET(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b8050000", @ANYRES16=r2, @ANYBLOB="000128bd7000fcdbdf25200000004800028008000300070000001400020076657468315f6d61637674617000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030006000800080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="11010380d61dfd7da3d188c9957e288995ed28d48e0e2c330fc8d409beeda417e92ea9797e5184ae229854e7993f5029d377b7f17c68366c75ba9087287cb948924e8e7cfdd7c4fb5199661325c100198004008280040084800400cf800400ab801400dd00fe8000000000000000000000000000aa040047800c00b9000000000000000000ae57f9b6529dcc94dac325786980cbab992fc5b9e605dd05974bac9f293890432ca89ef14d9bca292afa038804e250e2c4a7c0378244b7b2e72de681d0c14f966e61d5beb2182a9f666213f0a0e35314c087941707469cc5732b14244c8830178918e557552c9da5a4f3a01f52929ea18e3064c1029697760d11297238a96b4fbf5811df4132d65c6a00000000000008000500ac06000008000500070000004b030380eecf7073fbfc00a5bc122fc3f832a016a4d5adf595fe831da383887b1d6d98b3bc8a2f75a1320c9106419188e6847fedcacbf30d1a0d476e4239ba7a97e6e888c8be6c0ddbb752c18b74425d109565c55188c8d5510f87ba4e124e993470fe37255885e8c75a493a2949de5818c348327b7e6fad738f6de395d37fa1056369807682d0fa0a527eb59058426ad5493f6cbb562b2769ff73a97b1504587cc69cfac2d7d94b1d83cd708e8ba73ad96f547c1adab1fb10e3208d13b27b33ab87c52ca82a1f3a996ccb8104e01c5bdc5ef544d227d8864f5007132603597e62b5e300e6b6f5049f619e84522b4d39a8b30051171f4561afe799081ec56c4d40dab4006ee3d4a56966a19a25119042ae11ec4c134483c69523e49cc5b120062f24d109bcbd6907420a489b72a9c6e6170441f619a5d1576a64ff9e76fb5501379570eafb814cc92563e55f8cbabea741cb78d8f76fa5ca72bdcce9b79644ddbd65491cfd407b06b8db2c0701d0acf4944d7144eefce12838d8770d870fbc52820d35b6afb2e68d19dec06456a9136643040223722bae7a6e00ca3f58077eac0f69a972ccd06def004e141db64ad1d4ccdbc726e12874cfb3337af4835a7ca7aa12e647f9b7593843d272ccd262af7dc6146a73527be6840659f9cdd60a286914f8c84ba94711314ae2ca829a0dc37342044477d90f151342b80298756c61cfc7efe0a4e438986264273c30856ded8ac1bccd38cbb683e2cd637eebb5d3b32a57257a333bbe3230a15c7b740c7cc2183a0003002f70726f632f7468726561642d73656c662f6e65742f7270632f617574682e7270637365632e636f6e746578742f6368616e6e656c0000000c00cb000200000000000000b1fbec46a01952b5cf00b6bba7e6878b08bb68d76b8961a297ad2b4261da09cda5785de99f6b98b7367772df012653b2d576e266a725a242019429ca9af04f6e702949cd76a2a67ed16484cbb904907766d03c44e0335253072d598d34c9b7bbc16505dded38736da29f122c1e0704110439403717e6aef86431ce0b148da7bac79bbdbca1c349f59dcc6d01fc7ca5c2b6bc5130c473144ff9fe7427dcbd73dd5002c4d7cd44a5a15b0295c8687e52feea3f1de72d8b30eef4b3137b96fa748242228c2caa65418c8361d69c51eff16bdd17aa00c7000380b2000180bf18e797611ad6aa0114436f852325ce659fe39d590113c1f8ab0e92b9f414008300fc01000000000000000000000000000108002800", @ANYRES32=0x0, @ANYBLOB="172224d0b670d9ef878668f9a7f8aa1c397680dca27aa47a6b5dd45f0adb4bf0bdf36e305c013339900bc69631dd87e70b9baf01ad1d0ae94b0a16f37de6b4fc3d6cbdb91a3f753e4f93a7798f4bf30de662780f8ff43507218350194943566cae28d69b61279f9e040089800400208004003b800000d11aa780b349705bbd8e7c416e399b0008000500810000001c00028008000100", @ANYRES32=r5, @ANYBLOB="080003000000000008000100", @ANYRES32=r6, @ANYBLOB], 0x5b8}, 0x1, 0x0, 0x0, 0x48c0}, 0x40040) lseek$auto(0x0, 0x0, 0x1) r7 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r7, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xfc0f}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) (async) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) mlock$auto(0x4, 0x0) mlock$auto(0x7c88, 0x7fff) (async) mlock$auto(0x7c88, 0x7fff) setsockopt$auto(r3, 0x3, 0xb720, &(0x7f0000000200)='-@@{]:)&\xf3]\x00', 0x1608) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mlock2$auto(0x1, 0x8001, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) 50.15503039s ago: executing program 1 (id=2986): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000015c0), r1) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) setitimer$auto(0x2, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x8}}, 0x0) unshare$auto(0x40000080) socket(0xa, 0x3, 0x100) setitimer$auto(0x2, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_STATION(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000002440)={0x14, r2, 0x4bcedae9142a5f4d, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40004001}, 0x800) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r4, 0x560a, 0x7) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) 49.84010583s ago: executing program 32 (id=2986): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000015c0), r1) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) setitimer$auto(0x2, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x8}}, 0x0) unshare$auto(0x40000080) socket(0xa, 0x3, 0x100) setitimer$auto(0x2, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_STATION(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000002440)={0x14, r2, 0x4bcedae9142a5f4d, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40004001}, 0x800) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r4, 0x560a, 0x7) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) 35.311780067s ago: executing program 3 (id=3060): kcmp$auto(0x1, 0x1, 0x4, 0x7ff, 0xe) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x20000, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) timer_create$auto(0x7, &(0x7f0000000000)={@sival_int=0x88, @inferred, 0x4, @_tid}, 0x0) mmap$auto(0x0, 0x20009, 0xe, 0xeb1, 0x403, 0x8000) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_vdpa(0x0, 0xffffffffffffffff) io_uring_register$auto(0x2, 0x14, 0x0, 0x7) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0x1) set_mempolicy$auto(0x8000, 0x0, 0x3936) r1 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002880)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="aa5316947cedeeb30623bd4da974eaff9dd9687705aeac4c2697d1d4bccc784b2302a9f01d999bca9451abb7aded09b58b06ecb6bc14b255678415b7594950e4c2a192652f59e50fadc57818695e89b2def0b18946e4c085585a9198a1db5009b4bdde7e788711930e03272871a5b807c8b837da14d1ef9f71942f014144e76592ddb2095f0b84", @ANYBLOB="010b27bd7000fcdbdf250500000008000300", @ANYRESDEC=r2, @ANYBLOB="715a69ffd7734ac9b572e807288d6a"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000084) sendmsg$auto_NL80211_CMD_NEW_MPATH(r0, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000026c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="e0000000eaed4e8da56898e9f112c6cc05ec74c8e99527fab198dc6610c959bd7d31a06f0d9af98a6cec", @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf251700000008004a00070000009a007d808d5e4a3947ab741f1966556e00000000f80b0000000000f6ff3d000000000000853b76386916aac5fa57f4c4a6fb15ab8a216b3c25eb996fde64e50df25b2d65861e640eae016d554ba29fefe40fb04cac6fa0644a99d2630554dbdc13c4e21de9074b8beed98c316864d14776549add7c8e6ab29ccef95c75865c5994c22e75e9571612717d1dbb536a622214d99a7ab62dd3d59a9000001f0015015581ce8419173ac4f8619501fbd24fa9518c8b0fc1c85df8bfe105000600100000000000"], 0xe0}, 0x1, 0x0, 0x0, 0xc0}, 0x800) write$auto(r1, 0x0, 0x80c3) r5 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000001080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000010c0)={'wg1\x00'}) stat$auto(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)={0xed, 0x8, 0x6, 0x400, 0xffffffffffffffff, 0xee01, 0x0, 0x3fe5, 0x10001, 0x40, 0x3, 0xfffffffffffffff8, 0x7f, 0x2aa, 0x3, 0x1, 0x1}) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x5) sendmsg$auto_NCSI_CMD_PKG_INFO(r0, &(0x7f0000002540)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002500)={&(0x7f0000002940)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010027bd7000ffdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x4008050) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pipe2$auto(0x0, 0x80) close_range$auto(0x7, 0xfffffffffffffff8, 0x2) bpf$auto(0x10, 0x0, 0x9) socket(0x1, 0x803, 0x0) 34.862430505s ago: executing program 3 (id=3065): mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xff69, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 34.556264917s ago: executing program 3 (id=3067): r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/extfrag/extfrag_index\x00', 0x180, 0x0) read$auto_proc_pid_maps_operations_internal(r0, 0x0, 0x0) 34.313479241s ago: executing program 3 (id=3069): unshare$auto(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa1\x00', 0x48080, 0x0) (async) r1 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa1\x00', 0x48080, 0x0) poll$auto(&(0x7f0000000b00)={r1, 0x6, 0x1}, 0x1, 0x4) setns(r0, 0x0) mount$auto(0x0, 0x0, 0x0, 0x100000, 0x0) (async) mount$auto(0x0, 0x0, 0x0, 0x100000, 0x0) syz_clone(0x14220000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x14220000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_max_receive_size\x00', 0x103742, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000040), 0x82900, 0x0) (async) r3 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000040), 0x82900, 0x0) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x15, 0x1000, 0x47, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x3]}, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) (async) r4 = open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc6) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) socket(0x10, 0x2, 0x0) (async) r5 = socket(0x10, 0x2, 0x0) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000007180)='/sys/devices/virtual/block/zram0/debug_stat\x00', 0x80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f00000071c0)=""/118, 0x76) (async) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f00000071c0)=""/118, 0x76) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000001200), r2) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES16=r6], 0x1ac}}, 0x40000) sendmsg$auto_NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r6, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x4000004) read$auto_ima_htable_violations_ops_ima_fs(r4, &(0x7f0000000100)=""/4096, 0x1000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x40001, 0x0) mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0) (async) mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0) pidfd_getfd$auto(0xffffffffffffffff, r3, 0x7) 33.771358687s ago: executing program 3 (id=3072): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) ioctl$auto(0x3, 0xc040564a, 0x38) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r1, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) recvmsg$auto(0xffffffffffffffff, 0x0, 0x4) ioctl$auto(r0, 0x560a, 0x7) (fail_nth: 2) 32.607224518s ago: executing program 3 (id=3080): openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003e00), r0) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="09032bbd7000fedbdf250b000000080001000819"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) writev$auto(0x4, &(0x7f0000000080)={&(0x7f0000000000), 0xe0de}, 0x2) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, 0x0, 0x300) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x40200, 0x0) ioctl$auto_VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000100)=0x2) mmap$auto(0x10000000, 0x0, 0x4000000000df, 0x210, r2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x2, 0x0) r4 = socket(0x2, 0x6, 0x0) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bdi/1:7/wb_stats\x00', 0x2080, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) connect$auto(r4, &(0x7f0000000000)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x7fff}, 0x55) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/zswap/parameters/enabled\x00', 0xa001, 0x0) write$auto(r5, 0x0, 0x3) 32.295452686s ago: executing program 33 (id=3080): openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003e00), r0) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="09032bbd7000fedbdf250b000000080001000819"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) writev$auto(0x4, &(0x7f0000000080)={&(0x7f0000000000), 0xe0de}, 0x2) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, 0x0, 0x300) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x40200, 0x0) ioctl$auto_VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000100)=0x2) mmap$auto(0x10000000, 0x0, 0x4000000000df, 0x210, r2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x2, 0x0) r4 = socket(0x2, 0x6, 0x0) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bdi/1:7/wb_stats\x00', 0x2080, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) connect$auto(r4, &(0x7f0000000000)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x7fff}, 0x55) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/zswap/parameters/enabled\x00', 0xa001, 0x0) write$auto(r5, 0x0, 0x3) 8.962928781s ago: executing program 0 (id=3224): r0 = socket(0x6, 0x800, 0x83) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'pimreg1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macvtap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x14c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffffff01}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x66}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8001}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x4}, @ETHTOOL_A_CHANNELS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffff3939}]}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffffc}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_CHANNELS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40000}, 0x80d4) mprotect$auto(0xfff, 0x80000000, 0x4) r8 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000440), r0) sendmsg$auto_IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x40, r8, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x7}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000061}, 0x14) r9 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000580), 0x4000, 0x0) read$auto_mISDN_fops_timerdev(r9, &(0x7f00000005c0)=""/71, 0x47) ioctl$auto_IMADDTIMER(r9, 0x80044940, &(0x7f0000000640)=0x8) r10 = semctl$auto(0xff, 0x161, 0x3, 0x8) r11 = prctl$auto(0x2, 0x1, r10, 0x2, 0x3) r12 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000006c0), r11) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r0, &(0x7f0000000f40)={&(0x7f0000000680), 0xc, &(0x7f0000000f00)={&(0x7f0000000700)={0x6d0, r12, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@IOAM6_ATTR_SC_DATA={0x105, 0x5, "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"}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x1}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x2}, @IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_DATA={0x2af, 0x5, "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"}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x200}, @IOAM6_ATTR_SC_DATA={0x1cc, 0x5, "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"}, @IOAM6_ATTR_SC_DATA={0x108, 0x5, "21a0cef941d607e6ec9b9c35032618e89b14a19c40c529f2dccd6b2fd23b39a764b691ccccf2c6ed57eff176b4f2a48be70f1ddd9f9a5dbc545e75e43b88768b09b012c88d9e104e1d67952935f1682534a3633c079a9a0ab02c681112446022bd1dad3eb6d3b0dfd3a318642fd113d7421822373543544db9586810414fd773f960e1891a0590765849d7d724bb9e972ac7e6df230e23c14884d66998f854b9bcc46f7c63e5e157fb723ec2e6163c59aaa2b9d79481a4fb21f6c5eed1ed64743b7b7dee64fc4f42f07ff9378466b9ca05353caee0df0b381f71e857d014e64f77975edfae7c9a759ed9cc14e9fa263d32b4fabd75ca32e32901cb347ae48eb2f42e4f62"}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x217}]}, 0x6d0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) r13 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000f80), 0x20000, 0x0) read$auto_rtc_dev_fops_dev(r13, &(0x7f0000000fc0)=""/174, 0xae) sendmsg$auto_IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x3c, r8, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x9}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xd5}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x9}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x2402c801) r14 = semctl$auto(0x0, 0x80, 0x3, 0x3) r15 = getpgid(r10) syz_clone3(&(0x7f0000001380)={0xa01080, &(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000001200), {0x17}, &(0x7f0000001240)=""/15, 0xf, &(0x7f0000001280)=""/158, &(0x7f0000001340)=[r10, r14, r15], 0x3, {r11}}, 0x58) sysfs$auto(0x6c, 0x4f000000000000, 0x5) r16 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000001440), r11) sendmsg$auto_ILA_CMD_FLUSH(r11, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x50, r16, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0xe6}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x2}, @ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x3}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x7}, @ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x1c}, @ILA_ATTR_IFINDEX={0x8, 0x4, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040880}, 0x44001) ioctl$auto_RTC_AIE_ON(r11, 0x7001, 0x0) cachestat$auto(0xffffffffffffffff, &(0x7f0000001600)={0x100, 0xd}, &(0x7f0000001640)={0xfffffffffffffffe, 0x8fb, 0x3, 0xffffffffffffffc0, 0x2}, 0xff) 8.683911275s ago: executing program 0 (id=3226): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) bind$auto(r0, &(0x7f0000000000)=@isdn={0x22, 0x81, 0x8a, 0x5}, 0x4) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x7, 0x109, 0x6, 0x11, r0, 0x7ffd) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 8.334083477s ago: executing program 0 (id=3230): r0 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400002, 0x0) pread64$auto(r0, &(0x7f0000000040)='-#\x00', 0x8, 0x3) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlock$auto(0x5f9a, 0x8) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) socket(0x28, 0x5, 0x0) settimeofday$auto(&(0x7f0000000180)={0x1ed5d7403, 0x1}, 0x0) connect$auto(0x3, &(0x7f0000000180), 0x54) write$auto(0x3, 0x0, 0x10001) socket(0xf, 0x3, 0x2) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd70000180140002400072696467655f736c6176655f310000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtdblock0\x00', 0xa0100, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(r3, 0x0, 0x400000) r4 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x20000000, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x0, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x3, 0x0, 0x0, 0x8000006, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffa, 0x3, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000]}, 0x1fe, 0x200d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r5 = socket(0x10, 0x2, 0x0) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES16=r6], 0x1ac}}, 0x40000) 5.417388074s ago: executing program 4 (id=3245): r0 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) write$auto_safesetid_gid_file_fops_securityfs(r0, &(0x7f0000000080)="354ed09a3cfee5cf2f3150f8bb93fcffa9cdd0588410cf4f78194f7b3d3b8a67134b52c330fc76fb56e7711db4e05a8643f5616c648aad6f5803f20f12e04469ac8cb722e2c68fdc4d11f35418cb398125c5d6afec2afe97f01e611c3af71b2a5f2b199952cc60dc7f0febbda51d63b32aa572b332d3a3ab30c47e805d0fe0bd53494b479f41c648a8b2651892ff3de98cf98b8a7db50f5a78651331b83cdb161b841c0e1930419f387a0972688e6ba1e2b894664b21dd7d0e016ab6", 0xbc) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/thread-self/net/igmp\x00', 0x20000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfs\x00', 0x2000, 0x0) socket(0xa, 0x806, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0xf177b588f2e821dc, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) socket(0xa, 0x2, 0x88) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYBLOB='\n'], 0x18}, 0x1, 0x0, 0x0, 0x64048001}, 0x80) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0xa6ff, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000000) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000e80)=""/215, 0xd7) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x20000, 0x0) 5.243922255s ago: executing program 0 (id=3246): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = getpid() connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x55) pipe2$auto(&(0x7f00000000c0), 0x9) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x14}}, 0x800) ioctl$auto_KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x21) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x400, 0x0) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000200), 0xe0080, 0x0) ioctl$auto_I2C_RDWR(r1, 0x707, 0x700) 5.227444547s ago: executing program 4 (id=3247): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) epoll_pwait$auto(0x2, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x4) r0 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x102000, 0x0) ioctl$auto(r0, 0x80044941, 0x0) socket(0x1e, 0x4, 0x0) mincore$auto(0x0, 0x80000000, &(0x7f00000000c0)='/dev/dsp1\x00') openat2$auto(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x6, 0x2, 0x8001}, 0x0) socket(0x1e, 0x4, 0x0) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x200000, 0x0) flistxattr$auto(0xffffffffffffffff, 0x0, 0xfffffffffffffffe) setitimer$auto(0x2, &(0x7f0000000000)={{0x100000000000002, 0x7f}, {0x800000004, 0x2}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x100000006, 0x0, 0xa, 0xfffffffffffffffe, 0x0) connect$auto(0x3, &(0x7f0000000140), 0x55) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x5, 0x3, 0x19, 0x940, 0x1, 0x3, 0x6, 0x4, 0x80, 0x5, 0x2, 0x9, 0xb0, 0x9, 0x2, 0x3, 0x5, 0x7}, 0x4, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socketpair$auto(0x3, 0x1, 0x8000000000000000, 0x0) rseq$auto(&(0x7f0000000380)={0x8, 0x6, 0x3, 0x1, 0x2, 0x7f}, 0xff, 0x7, 0x6) sendmmsg$auto(0x3, 0x0, 0xb, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto_evdev_fops_evdev(r1, 0x40104593, 0x0) 4.980581615s ago: executing program 0 (id=3249): ioperm$auto(0x7, 0x6, 0x2) (async, rerun: 64) time$auto(0x0) (rerun: 64) r0 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2a002, 0x32) lseek$auto(r0, 0x4, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) setregid$auto(0x5, 0x6) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) process_mrelease$auto(0x4, 0x0) sendfile$auto(0x6, 0x3, 0x0, 0xc01) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) mmap$auto(0x1e, 0x2020009, 0x3, 0xeb1, r1, 0x8000) write$auto(0x4, 0x0, 0x7) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) setreuid$auto(0x8, 0x9d7) (async) r2 = socket(0x2, 0x1, 0x0) getsockopt$auto(r2, 0x6, 0x23, 0x0, &(0x7f00000000c0)=0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x91, 0x2, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mmap$auto(0x0, 0x2, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x3, 0xa) (async, rerun: 64) read$auto(0x3, 0x0, 0x7) (async, rerun: 64) unshare$auto(0x40000080) (async) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r3, 0x40025504, 0xea3) (async) fallocate$auto(r3, 0xffffffff, 0xea, 0x8000) (async) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 4.688949575s ago: executing program 4 (id=3252): r0 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400002, 0x0) pread64$auto(r0, &(0x7f0000000040)='-#\x00', 0x8, 0x3) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlock$auto(0x5f9a, 0x8) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) socket(0x28, 0x5, 0x0) settimeofday$auto(&(0x7f0000000180)={0x1ed5d7403, 0x1}, 0x0) connect$auto(0x3, &(0x7f0000000180), 0x54) write$auto(0x3, 0x0, 0x10001) socket(0xf, 0x3, 0x2) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd70000180140002400072696467655f736c6176655f310000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xa0100, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(r3, 0x0, 0x400000) r4 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x20000000, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x0, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x3, 0x0, 0x0, 0x8000006, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffa, 0x3, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000]}, 0x1fe, 0x200d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r5 = socket(0x10, 0x2, 0x0) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES16=r6], 0x1ac}}, 0x40000) 3.9817262s ago: executing program 0 (id=3255): mmap$auto(0x0, 0x8000000000004, 0x7fff, 0x40ebf, 0xffffffffffffffff, 0x300000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000003d40), r1) sendmsg$auto_CGROUPSTATS_CMD_GET(r0, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="652d28bd7000fbdbdf250400000008000100", @ANYRES32, @ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x404c080}, 0x4044010) close_range$auto(0x2, 0x8, 0x0) dup2$auto(r1, r0) socket(0x2, 0x5, 0x2) setreuid$auto(0x0, 0x2) r3 = openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/comm\x00', 0x40002, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) mmap$auto(0x0, 0xa, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x5cb) ioctl$auto(0x3, 0x227c, 0x38) write$auto(r3, 0x0, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/ipvlan0/proxy_delay\x00', 0x202, 0x0) memfd_create$auto(&(0x7f00000001c0)='\\&(-$},{\x00', 0x8001) sendfile$auto(r4, r4, 0x0, 0x1) socket(0x2, 0x1, 0x0) setsockopt$auto(0x4, 0x0, 0x8000000041, 0xfffffffffffffffc, 0x70) signalfd$auto(0x3, 0xfffffffffffffffe, 0x1) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyr0\x00', 0xce100, 0x0) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0xa, 0xfffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop7\x00', 0x6a742, 0x0) ioctl$auto(r6, 0x125d, 0x8) capget$auto(0x0, 0xfffffffffffffffe) setsockopt$auto(0x3, 0x10000000084, 0x77, 0x0, 0xd) 2.298885419s ago: executing program 5 (id=3261): mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8000, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x5, 0x100005, 0x1, 0xfffffffc, 0x7}, {0x4, 0xfff, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) ioctl$auto(0x3, 0x2276, 0x38) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000100), 0x1091c3, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) socket(0xa, 0x3, 0x2f) setsockopt$auto(0x3, 0x29, 0x7, 0xffffffffffffffff, 0x3) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) writev$auto(r0, &(0x7f0000000000)={&(0x7f0000000080)="5002e1d811051a410975337b11fa62ecd3de54f436132943d5f8b59fb3185d3d924b3caa3c05a85f7fefab43cb2d80aab78ec9bdb1df2098abf7f9048a0d9dc1fa504f1467d9731959ce7a172c", 0x100000000}, 0x6) 2.296554268s ago: executing program 2 (id=3262): r0 = socket(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_RECONFIGURE(r1, 0x0, 0x40010) sendmsg$auto_NBD_CMD_RECONFIGURE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40440) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x801, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x1) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x24040084) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc8, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_MAC={0x97, 0x6, "36bb1d654680dc0515751919398a2d79a21772261ffdd3f575710362d074ea74f14f37a9034acaf1ea696d74ae355aef7a25e6f8bf407c9b54fc55fdf8297eba024ac17b25574ad8a837baf7e9a37e489857747caee8defb01a2745e2a62c1f1aa75531d19663dd5d0ef55456739dbc658f8a62698065ccd35df49ef857894951ac62b996eb741db039bafded8275ee359a06a"}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x14, 0xcd, "16867dabee279883dffa107223d17a6b"}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4080}, 0x404e000) madvise$auto(0x0, 0x200007, 0x8) close_range$auto(0x2, 0x8000, 0x0) 1.808063451s ago: executing program 2 (id=3263): openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000001100), 0x42, 0x0) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000000), 0x55) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="01817e0103"], 0x148}, 0x1, 0x0, 0x0, 0x80}, 0x80) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3, 0x0) io_uring_register$auto(0x2, 0x2, &(0x7f0000000040), 0x86) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x503000, 0x0) io_uring_register$auto(0x2, 0x6, &(0x7f0000000180), 0x86) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) r1 = socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statx$auto(0x2, 0x0, 0x1000, 0xbdfa, 0x0) setsockopt$auto(r1, 0x29, 0x14, 0x0, 0x56b) close_range$auto(0x2, 0x8, 0x0) 1.707396945s ago: executing program 5 (id=3264): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setitimer$auto(0x2, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r1, 0xc0145401, 0x0) r2 = socket(0x1d, 0x2, 0x7) getsockopt$auto(r2, 0x6b, 0x3, 0xfffffffffffffffe, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="04e57aba795eb037bf00", @ANYRES16=0x0, @ANYBLOB="0d560300d0060000006502"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="18"], 0x1ac}}, 0x40000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x6, 0x1}, 0x5}, 0x3, 0x0) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec13\x00', 0x30d001, 0x0) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0x0, 0x200}, 0x0) ioctl$auto_CEC_ADAP_G_CONNECTOR_INFO(r4, 0x8044610a, &(0x7f0000000180)={0x1, @raw=[0x7, 0x4, 0x9, 0x5, 0x3, 0x9, 0x5d53, 0x6, 0x0, 0x101, 0x8000, 0x8, 0x2, 0xe, 0x10, 0x1]}) 1.529562308s ago: executing program 4 (id=3265): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000001100)={0x5b00, "90036ae67173ea1838997fb48998eff70a283e71b6cf83eed3d700d764fae68b", @inferred=0xffffffffffffffff}) dup2$auto(0x0, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000000c0)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4089c}, 0x2400c810) r6 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) r7 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) r8 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r2) sendmsg$auto_HWSIM_CMD_GET_RADIO(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000001140)={0x1020, r8, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@HWSIM_ATTR_TX_INFO_FLAGS={0x1004, 0x15, "568978d86d112247ad8361627d134934de914e63ddddef6f6c41b3f7716f1dabfc8459c8d8143caae33a7628a75452bee0d5e9ed6dee8b49862259cefe48a68a265b726091602499326c28d9b4e8dc54d94ab7d8ef935f1f762dc1f5ec8b53f2d03837ba57f7ebe0e0e39ee8c517569cc4a82527839b985aa115eea3790872528b03ebbcc3bca01606ace858e91b528631e1f7e708e752c14d2bc683e97774250a67aa1016971c7b8a3f2e47f71d6c71d8fcfc87d1deb7f9f048373ae4632af3f3f4bd34d78713bf3c6e393597e4d345308266c35c0cd8e9f7f6015d311e04109042e315e21619ee57483423216fa7e52e06ff50ae1c708bd8df65e1f2334bf120147a56a4692677fbe4a297e3b7d23aead9111894bf4a3be9e38454fb6429863f06c75040967976426a57ab0f3e4990204d71271899bf8b9ad7687b4b27cac3ea92f5b82098ae4ef2ebc91e26f1f91826084afa6b8af25c4419cf338cf78958042ecc3404f417b69302544903de8676485e9ac6cd7b6f49abb3ddd5c0de9c410ab9484bd4570b42833a989b51bbc276755b26d69e359f88297e2975180a20b5c29d1913d5fd73b3b1bc9733b8962e5249c9b609fadf6b8d2af4ae28ed74c833fffc7bc55f622a1eda8b2c1aa1fdb29ed44880ae465837f87b5a685d5c0f0740304c3d640840117fcc3242000b49bea067eef62e51e94c79f3d4d720e9ee3b140fd570e2078b04743bb66df3867900731711e43c62a8da41d9a897e28f7d5ffb4d486aea833a47736e555ec09fa4f14231ed60ed23c2ef19b07719d3f2e84602e9beb08d88254c3bc51e925a12bc1950e79928451337ff50be47a7c57a4a0050a29ee0b80c8ed29fdfa67c4c47d52c67ea5391aa12f36484f747fac6b9218983faa22673db0a26528422db852a129c7d16f3a6b63a60a19165dd0897e3f745e9d2e7bcb836c2ced2f45158de5ef55efaff797609a6351deae172b183bf0c88ff8a81840e00e5bf4b70c8dc733f44108cdc2423fe60f7bdcc34c82fa523134f3da2c005436ae66f3ea463b35278af9638212734454b5a015fab92b62b77806ec90712ff0dc66d64d6b9221ccf3d566013100c5d41c1be85f4bd72f15257b06cf367d445bcc3766817af12de2ec663c38f7eb30cc7f65c233f696fb290dfa3b48284150342043cb04761e59b3a439ace7508e80e5faaf9b1241b2bff858e5dae3a6462f0ccae39aefa3460df8b7c4d84ea29b4b7757756cabb8364fb77b0705c6b6eb1a4d2408b6aa6ef4ff20a0502b2aad16cca3f0d9a95c129ec9d27acf4d587100cacc64fe8ae937d2ffb2e89dd106bf21ce22843281f13ebc385e5d6e74d6329ccad7afebdebb0ec36bbb5614683d15d2547528a6f2f6bff4d9e9c52dc851a452470f8566b3a4106cd638060e58ac599c896a378096e98bdcdd9cb5d996458d63b3a0943bf0eb21b42c66fc2a6d2b892be1bf9ec32fa8fcb684a0a4305895f108bd1bca4ebdd5f80e98c924f094f413be8838c14fb6ee372186f3b3ecea3f3dcbb17140808dcef71ac70bed99d431c717b44552c50b5a41b390585297eaedd4b79cb15ebae6eecdb881e85fe8ed0c54b499e5275897b88a3cb426e08dc49d233949e3aafbfc93810e1249a1ba2b28d58ce9fc79530a41b1e0823e5f24c059b6881fa526459d65bdfbc47afe4c544bd203852bffe4e396ddb24f576798a2db30ad2d5eeb615c8feb9680fccba024e37b7bb76bf6e6242e3f7e7fd74d6ebc97e738398225db0c2b38ddad2c8afee599c0eecdaaa58f8fda01e0f644778a6ce5cac5581cd6647dc63ea16ac37c0bb9364d24c44e03e60a9f025cdc6867c4aa55d3917cc1cdfab7e6a58a7dc894e54926683348a31b461b81228af8fafa69f47f201402bed73843a1346256be8ead507c51b1001636f0967888228d8e83e47674b2f70880ac291266fc6380942db8992bfe9a8ba8cd470a32b5fccda75366b81389a900562c9dda12b9a82fa09d2cc6cc7863f5c9597d2fe33a7c371043ed02537a25c11a30346770600b943667fc1c10e8476e1a54c167ef186de42d50d92ffa820110501f9ac496dcebbb071c3fe745767c1484d4480d04b62b5dfc03d176dbde95c8db74bd8083132eaf1027788959bea3dc2a6bdf271eca02a017ebc857569a9bab32993078c7acf1a3ded258912c0798f7dc4f5855ac72670fb821f0e1fbc3180c7439e2a119626e08228ccff1b02828169568c0f177db8f6442e66d46fd88af42de19deea3bedf8c30f0953064e0bb97e4a4f7e21cf7e020f1c8824f2edd00551a45227ebc83ca49989a8e11fffa094a6a743dbd21f2d710424d4865e8a24bbb645e77b2d02415eb5f297f86adbd201d1c1a5e37c013430abd38d876bf48839e54649d74c26fe017824aa281ec96b2e6b13df3b9ea933f063e6ce52e9e0c874f8ccc53ba02597aa5644163de584bf2bf637a8a7434ed391129b84e0dd0a8ec06fcf70c0eb8e12c874ffa63f0a4c68b882323e7eff4263956cfe44f7c23fe1ce59027ff944e50a8e8dae544004396a2fc7ab178cc75689fc490b777523c1c934e7d34d9be831430363cb6846e46d778a84035a5e10d097e24555814957d8f851ba3c6074ec3a4588bbef41dbf717dc4659e86d99a8ec1cd44d4a996648d10363c644aecd345070e8d58b28416b3002a453658a5cc6ee25091cf14e4336e3911d5674a20bc287999b39a90a1dbcb6cd7d6ec18c030c4f9d4a49b05c8c678aefe4c0b909e984a0739aff3a70ddf3bda588501c36e04fc4598b800c19209cc1b063af174cf1a29b0cb494919f677ee88b441db613cf7e66125541b9aace517f2dbf8222d582b9fcf6f331afc85bad556e7489b93ca0a4260a59e8b8dca882747229d2b27695ff5f4df7cbc4fa5108aa774fd8adc3d7d85d52febbee77844a863a7a7fd735dc23a43234f3654b5eca9a4dedb9bc2b4aa09e6c90ff77acdf22b2f33055f8b0ead1240f36f27cce1aa3068cc48c161b9783b64cf5a097a7993291b38788f328d66145ddc0b32f932a92507a0b4005acf479b6c770a0f77c1a4d3e581f188d583b66395c2d2ba9b140035f1ba7b2cf45a3839e070dee1006510b3566104b78a0763efa486049430362da73346e3f10272bb902b282a7875f73cbd3c3072ca23412b87c78f30528ed29203d66670af2f31f00c00c00d96917edf1a3a44199f53130d1bfb4d857e9a205aa33710f8128064183fe3da2c6bf372440258f43cad38078d79227827e82d0fb71eda2ed4db1ee053f235fa1ee9a27e441c11f600cade9640d6ff7b932c22c6d08f9b230b2287e892af73544d088462859595aadad3a7d16d8b366e190a5b6a72b8b6b75628467b02d44c97c353764804a84d4d5d6fc1f508c9e34daa404e7bbc29cb17b32908ff02ceb3226cc2aa4c6fc6b8561ee8da18535bcba3b4c094e5077b4b8dc1272eb690c0e1b9172bce31928fbb0d5e4133431ddc926c2fd2ffc0d68e78bbff8a91249524bde85bae2b94c43ede70ab2dded5b7c29eb880ddfd8caa3ce78267cb6ff0b00dd7585e4537c241cb15abcebbd0eb5a6aa6b45b9e376d4a4cf21031325f83d807efa0e98a47619908a2841b88b118af207893cdd479d2ad1f5adef5ff1c3c04d312da78e87a37dcd325142048aa390a04be7e4337df196ccdd153d26207d57da1fc54962dd907ddc36b9345387ab388621fa66f498d3e37dc7dde456d9eb113ce31d4f9a7d4e492badb54e37e91a671f7b4c95312f986d3ac1c4bd839ad3f7bddf9cf0b91b8932420d173142787ca3945f10358c17897f613a494f1e09c84223a25da9b2e8e861136af51ec4d35dbc9d1b351e0e30c7862fb5c04cfbffaac7e82acec75a94c92e9f1c7f14b3218f839f301c81b54e1d5bacbde927006fd2570243aa8c8f89ea15f8fbed90b3c4e265345d0aa13fa5a38f7328590d8c21508253bda85965b034821a0adf6c8bb39c2727d8df43519c17409cc4f85761dfb6ca9da48a30b43cbb590ea50cda8194147c4cb62432d07bb0d3ab23996c44f7a9b450bc5cb14d5b6bf34a611eaf2257514f178ef81d3314e33ab15d464a6c69d92f26c3c4c1262bbd24190d0b98c7d752c2b364758bc27b68c026de9b02f015fe598a6f1d2b2f6903ea3e4a31d15b6d0ed167b588cfb2d588923bf44dc959b0f197aad993e0bdd23fd2c8bbd7e6899b20a1058a83fe4f699003fc8ee067933c838b0156877a5562c1120b049b97490b5037562cf562cc42509bcb5087a1a53311ac6ed166d8bc5a1509b7221fc7a4b1e51813cc7ee695cdea61daa1c7f0139f3dfe735ffe7d6e12cedc7b340e4d10b0532e5b7a70958951bdad79a5cad815ae0cfe72f66e8a360ae85b2e83dfab354f3b22f4793c98008cf76f2786cb798180af2559c24c18864c9fcd84f5e0851943ad505ecbf206a4c43000b26b7421d52a84e1be119d80c1a92e73c4d99f0ed57df4cb36aff0a208c3569f19c6ec6b8a8ba79ff3e11c041375f925f288209f8d93b69e9572535099210fd0b7437757f1d8c4d8f12cfeebad435354d8e538a150f4f987c99540888981c5ad9a96a03ec064bc6d9422ca2e6b9da2cbb1a1cd1840bd9392f64dfbc899eddffbe3dfc21f321d030e06e31dae8e557492a8d291ca1a11e6b60b7f06e2f035c9763400713dd17d0418ba716631df7e2efddccfb09cd3615bdb09b86dfcbe35a8ee824b80fa4ccb784b591a31db3a42705cb9e8ba8df995219c3e8f8813d84356850917aae00b07a64d769f05bc11faa2f06b05177f4e73f5e37254737bbe39cc12e5edf36ca669c6010df71557b6d9565a1b81d80fd56151acba9d64ef2cd8f9cb48bd2100ee8c48827fb0e0b4eec42c553426916e0faf07f4561813ec7fc45994599be465973748074ae233a0bc05244a31d5f2a9af5317ec67e94a3200908e04a21f3f950b2a24105b8e5666b436a5debaa62f681623377fc209ae9ca9c46dd99a4ca4bd3e3f172e0213692b21adc81e4615b12d8c30ee6ab39fb2c08406e7a086e6abeb8b1bb9818faf6fc4c5201882321bf6fac9022e09933e6fb59b6f821b7cbd2753d966fc5d219122b36f8f47b3f32de2ca059cf2de684e8d0e2d8ade3bbd418a6fb11b41806d9568346ded4d1db728ef5f91f01fba09f5859b79fc5c7da233052b0e8c62693360d1d18e8d064756e42b142d0998117b8e9c9eb97486cfffd659edadd26fc4a319179afa0534284f1858565019bf4d0bac48f141e63343dbffa022feaec451b69230aa390f81de9a3a10fdb9348796c34ce8d864fc05d6a5b5f7c7c43444d60df56a0beb2f1442de411e05130ff55ac04c206f3a0ac5cf959711b9e3bdc32b50ee0dc21292fa5051baec3240e4ddac905574025c217e8f61cd7db2f65119df97b28b5013d75bb095bf87fce074a37326c037e9468addb328d25ab76f856fb22c5d6ccb534e2b33cd39d578116cf9e29b2d59bca14f7b2b83b53d14e708ab09c185fd0b53921d771e4f0ba471a7c15d0f7488587a3753811e2856b0dc9608da2b70275519a8fa293d52cfe89c5a577c11916d9007277b9892d7ee67efa554e13bbd69c6d139c130b8aa545372cf7e9e542b3cffee509a4d4ffa08635df66725dc01686afbe4d69e58f37eee96e48246b62a0dfee3f52277cc9d96c7677f45959dd894afb1bb4611688db5dd3915d10f7372e486e4e4fa5cffff420c816b82650ba1011f33565ff9e627051168eba2194374ca8d966c2743fc4620737998fc189ec3f62007707bb055546"}, @HWSIM_ATTR_RX_RATE={0x8, 0x5, 0x9}]}, 0x1020}, 0x1, 0x0, 0x0, 0x20008814}, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) write$auto(r6, &(0x7f00000000c0)='/dev/\b\x00\x00\x00\x00\x00\x00\x00\x00\xc1d&\xa2\x1a\x96n\xad\xb2\xa5\x03\xef,9+\xe3\x86/.\xdf\x80\xd0W\xcb\xabU5\x14~\xd6\xedP\x11\xdb\x8f\xa4{\x8e\xf5\xe0\xb8\xa6\xcc\x1c\'\xc4\'!>\xfem\x82\x8a\x11\x9c\xfc\x9cy5, \xea\xa3T\x95-\x1ee\x976\xea\xed{/\x86\xae\x9fk\x13g(\x139\xbc\x87_\xc9\x8bH]\x12\xdc\xcc$\xb3b8\xebP,5\xe4\xaa\xc1e\x00\xe6\xcf(', 0xd7) openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x20002, 0x0) open(0x0, 0x0, 0x6f) socket(0x10, 0x2, 0x0) ioctl$auto_NS_GET_PID_FROM_PIDNS(r1, 0x8004b706, &(0x7f00000001c0)=0xff) bind$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x24, 0x400000}, 0x68) madvise$auto(0x4, 0x7, 0x81) r9 = socket(0x10, 0x2, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) bind$auto(r9, &(0x7f0000000000)=@in={0x2, 0x2, @local}, 0x68) 1.525463247s ago: executing program 2 (id=3266): ioperm$auto(0x1000, 0x40, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_bridge\x00', 0x0}) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x540a3080}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x18, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) pwrite64$auto(r0, &(0x7f0000000480)='./#-(]+:\x00', 0x66, 0x1e) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf250300000008000300000200000600070000000000080002008d98c8f1e52d86c0168b9820fb6fe6f3f5ce05bcb1ca587b3418383d0a156e59b1a5a748fc730271650260d10fb4f45fad8be928363419d5", @ANYRES32=r1, @ANYRESDEC=r0], 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaabb00000a000500aaaaaaaaaa3700000800040010000000080002", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) capset$auto(0x0, 0x0) ioctl$auto_VHOST_SET_FEATURES2(0xffffffffffffffff, 0x4008af00, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x4001e}, 0x40000) 1.245769708s ago: executing program 4 (id=3267): openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0x20282, 0x0) socket(0xf, 0x6, 0x0) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x15, 0x5, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', 0x0, 0x10001, 0x0) close_range$auto(0x0, 0xe903, 0x2) r3 = socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) setsockopt$auto(0x2, 0x1, 0x50, &(0x7f0000000000)='\x00', 0x40) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0xb6) ustat$auto(0x801, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) rt_tgsigqueueinfo$auto(0x0, 0x0, 0x21, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000080), 0x222000, 0x0) r5 = gettid() openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="94060000", @ANYRES16=0x0, @ANYBLOB="000825bd7000fedbdf2563000000050019017c00000005005300400000000400d00008006b0004000000040021015d067d80cc00628008008600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="ab000680acbd36b4f4ee79a1689706adf9431edef0566949a5e0af0dfa590a440864246e4c54cf52c5ccd3ab3594856c51ef7956c527a5ead4b382cdd751df6156c2ead9d2224df611092531060d0367859380016534648661d6c0ba75f65501ce80b27fef34a83e3c4babab06c7d3dd4f60ef2db4640bcbfa73242d076096ec020670b716172004e175dba1504d08005600ec5bce12bab18ba236caa98e7f1248f94c832ee95fd0eead47c202d54f9500", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00'], 0x694}, 0x1, 0x0, 0x0, 0x40400}, 0x48000) bpf$auto(0x22, &(0x7f0000000100)=@bpf_attr_4={0x8, 0xffffffffffffffff, 0x5}, 0x101) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f00000001c0), 0x80000000, 0x0, 0x9, 0x0, 0x1, 0x4}, 0x1000004) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00'}) bpf$auto(0xfffffffd, &(0x7f00000000c0)=@raw_tracepoint={0x4, r3, 0x0, 0x2}, 0xf) 1.245199718s ago: executing program 2 (id=3268): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x800) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(0x0, r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000b00)={'veth0_to_bridge\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x20000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r6, 0x0, 0x20000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nl80211(0x0, r8) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8, 0x2, r14}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8, 0x2, r14}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}, @HSR_A_IF2_AGE={0x8, 0x4, 0x4b3d}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="0000fdff", @ANYRES16=0x0, @ANYBLOB="10002abd7000ffdbdf250300000005000500050000000c00018008000100", @ANYRES32=r4, @ANYBLOB="05000200020000000c00018008000300bce50000840001800800030007000000140002006d61637365633000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="1400020073797a6b616c6c6572300000000000001400020076657468305f6d616376746170000000080003000600000008000100", @ANYRES32=r11, @ANYBLOB="140002007767320000000000000000000000000008000100", @ANYRES32=r12, @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="08000300070000000800030000000000140002007663616e30000000000000000000000014000200766c616e3000000000000000000000001400020070696d72656731000000000000000000050003000c000000"], 0x140}, 0x1, 0x0, 0x0, 0x4040}, 0x40) 1.213345396s ago: executing program 5 (id=3269): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x800) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(0x0, r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000b00)={'veth0_to_bridge\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x20000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r6, 0x0, 0x20000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nl80211(0x0, r8) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8, 0x2, r14}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8, 0x2, r14}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}, @HSR_A_IF2_AGE={0x8, 0x4, 0x4b3d}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="0000fdff", @ANYRES16=0x0, @ANYBLOB="10002abd7000ffdbdf250300000005000500050000000c00018008000100", @ANYRES32=r4, @ANYBLOB="05000200020000000c00018008000300bce50000840001800800030007000000140002006d61637365633000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="1400020073797a6b616c6c6572300000000000001400020076657468305f6d616376746170000000080003000600000008000100", @ANYRES32=r11, @ANYBLOB="140002007767320000000000000000000000000008000100", @ANYRES32=r12, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="08000300070000000800030000000000140002007663616e30000000000000000000000014000200766c616e3000000000000000000000001400020070696d72656731000000000000000000050003000c000000"], 0x140}, 0x1, 0x0, 0x0, 0x4040}, 0x40) 849.081028ms ago: executing program 5 (id=3270): mmap$auto(0x1, 0x2000b, 0x4000000000df, 0xeb1, 0x401, 0x800200008000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x501000, 0x0) ioctl$auto_IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) newfstatat$auto(0xffffffffffffff9c, 0x0, &(0x7f0000000380)={0x5, 0x6, 0xa9, 0x4, 0x0, 0xee01, 0x0, 0x6, 0x3, 0x0, 0x4, 0x8, 0xbc, 0x1, 0x4, 0x0, 0x53}, 0x1) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0xf000000) 644.940793ms ago: executing program 5 (id=3271): mmap$auto(0x0, 0x2020009, 0x2000003, 0xeb2, 0xfffffffffffffffb, 0x8000) r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) ppoll$auto(&(0x7f00000000c0)={r0, 0xf7f, 0x81}, 0x10, 0x0, 0x0, 0x8) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000001fc0)=""/83, 0x53) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x29, 0x2, 0x0) setsockopt$auto(r1, 0x119, 0x4, 0x0, 0x5) sendfile$auto(r1, r0, &(0x7f0000000040)=0x40007, 0xc44) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/028/001\x00', 0xa901, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = gettid() close_range$auto(0x2, 0x8, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x940, 0x1ffe0, 0x8003, 0x6, 0x6, 0x7, 0x5, 0x200000000006, 0x9, 0x6, 0x9, 0x2, 0x3, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000]}, 0x1fe, 0x7) r4 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000001f00)='/sys/kernel/debug/block/nbd11/hctx0/dispatch\x00', 0x80000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r4, &(0x7f0000001f40)=""/220, 0xdc) kill$auto(r3, 0x11) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="57e72dbd7000ffdbdf250d00000008000300", @ANYRES32, @ANYBLOB="c6103e3c8f5cb1b511d71ca12437e476168e22129b3af778b4780a0c5f42ea511c9a0564f53b3c0a54531c2e738758e095bcc75de6d7e2cbbfc44ec6"], 0x1c}}, 0x10) 620.36378ms ago: executing program 2 (id=3272): r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) ioctl$auto_RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x3, {0x5, 0x4, 0x9, 0x7, 0x2, 0x73, 0x5, 0xffff, 0xaa}}) 364.432103ms ago: executing program 2 (id=3273): mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x10001, 0x8000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}, 0x1, 0x0, 0x0, 0x4044000}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x80800, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x7, 0x9, 0xa, 0xcd4, 0x3, 0x8000) sendfile$auto(0x6, 0x3, 0x0, 0x8000) pread64$auto(r0, &(0x7f0000000240)='\x00', 0x5, 0xfffffffffffffffd) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/pcm0c/sub7/sw_params\x00', 0x129000, 0x0) r2 = openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000180), 0x208002, 0x0) poll$auto(&(0x7f00000001c0)={r2, 0xe8e, 0x1e9f}, 0x5, 0x10001) pread64$auto(r1, 0x0, 0xf429, 0x100) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="27852bbd7000fbdbdf2507000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40448d4) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munmap$auto(0x20001000, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0xfffffffffffffffe, 0x8, 0x8003, 0xeb3, 0xfffffffffffffff9, 0x8000) rmdir$auto(&(0x7f0000000080)='./file0\x00') read$auto(0x3, 0x0, 0x400000) socket(0x10, 0x3, 0x6) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 59.551356ms ago: executing program 4 (id=3274): r0 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400002, 0x0) pread64$auto(r0, &(0x7f0000000040)='-#\x00', 0x8, 0x3) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlock$auto(0x5f9a, 0x8) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) socket(0x28, 0x5, 0x0) settimeofday$auto(&(0x7f0000000180)={0x1ed5d7403, 0x1}, 0x0) connect$auto(0x3, &(0x7f0000000180), 0x54) write$auto(0x3, 0x0, 0x10001) socket(0xf, 0x3, 0x2) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd70000180140002400072696467655f736c6176655f310000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xa0100, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(r3, 0x0, 0x400000) r4 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x20000000, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x0, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x3, 0x0, 0x0, 0x8000006, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffa, 0x3, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000]}, 0x1fe, 0x200d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r5 = socket(0x10, 0x2, 0x0) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES16=r6], 0x1ac}}, 0x40000) 0s ago: executing program 5 (id=3275): bind$auto(0x2, 0x0, 0x5) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x342, 0x0) getpeername$auto(0x3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram0\x00', 0x200, 0x0) read$auto(r0, 0x0, 0x80000001) socket(0x28, 0x1, 0x0) ioctl$auto(0x3, 0x5411, 0x3) r1 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x1, 0x0) listmount$auto(&(0x7f0000000040)={0x1c, @inferred, 0x80000024, 0x800000876e, 0x2}, 0x0, 0x74240, 0x1) write$auto_proc_pid_attr_operations_base(r1, 0x0, 0x18) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x6, 0x5, 0x7) socket(0x1d, 0x2, 0x2) socket(0x2, 0x1, 0x106) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x4) setrlimit$auto(0x0, &(0x7f0000000000)={0x0, 0x3ff}) unshare$auto(0x20000080) unshare$auto(0x3ff) mmap$auto(0xffffffff, 0x4, 0x8, 0xfffffffffffffffd, 0x1, 0x7) setitimer$auto(0x2, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x8}}, 0x0) ioctl$auto(0xc8, 0x400454e2, 0x0) mmap$auto(0x0, 0x400005, 0x6, 0x110, 0x5, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) kernel console output (not intermixed with test programs): n. [ 383.139561][T10910] Use struct sctp_sack_info instead [ 383.165525][T10910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1474'. [ 383.427200][T10917] sctp: [Deprecated]: syz.0.1477 (pid 10917) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.427200][T10917] Use struct sctp_sack_info instead [ 383.458695][T10917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1477'. [ 383.514410][T10920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1478'. [ 383.993700][T10933] sctp: [Deprecated]: syz.0.1489 (pid 10933) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.993700][T10933] Use struct sctp_sack_info instead [ 386.188321][T10984] sctp: [Deprecated]: syz.2.1492 (pid 10984) Use of struct sctp_assoc_value in delayed_ack socket option. [ 386.188321][T10984] Use struct sctp_sack_info instead [ 386.318778][T10992] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1493'. [ 388.858751][T11029] sctp: [Deprecated]: syz.1.1503 (pid 11029) Use of struct sctp_assoc_value in delayed_ack socket option. [ 388.858751][T11029] Use struct sctp_sack_info instead [ 388.927137][T11031] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1504'. [ 390.495957][T11077] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1514'. [ 390.497270][T11075] sctp: [Deprecated]: syz.1.1513 (pid 11075) Use of struct sctp_assoc_value in delayed_ack socket option. [ 390.497270][T11075] Use struct sctp_sack_info instead [ 390.627452][T11077] team0 (unregistering): Port device team_slave_1 removed [ 390.645759][T11075] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1513'. [ 390.874539][T11088] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1518'. [ 391.215359][T11099] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1522'. [ 391.237553][T11099] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1522'. [ 391.282144][T11099] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1522'. [ 392.902701][T11113] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1526'. [ 393.039223][T11119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1529'. [ 393.845825][T11135] sctp: [Deprecated]: syz.1.1533 (pid 11135) Use of struct sctp_assoc_value in delayed_ack socket option. [ 393.845825][T11135] Use struct sctp_sack_info instead [ 393.873292][T11135] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1533'. [ 393.989322][T11137] sctp: [Deprecated]: syz.1.1534 (pid 11137) Use of struct sctp_assoc_value in delayed_ack socket option. [ 393.989322][T11137] Use struct sctp_sack_info instead [ 394.120593][T11139] sctp: [Deprecated]: syz.1.1535 (pid 11139) Use of struct sctp_assoc_value in delayed_ack socket option. [ 394.120593][T11139] Use struct sctp_sack_info instead [ 394.269244][T11142] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1537'. [ 396.274060][T11169] sctp: [Deprecated]: syz.2.1543 (pid 11169) Use of struct sctp_assoc_value in delayed_ack socket option. [ 396.274060][T11169] Use struct sctp_sack_info instead [ 396.302542][T11169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1543'. [ 396.345408][T11168] sctp: [Deprecated]: syz.3.1545 (pid 11168) Use of struct sctp_assoc_value in delayed_ack socket option. [ 396.345408][T11168] Use struct sctp_sack_info instead [ 396.390927][T11172] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1546'. [ 396.498008][T11171] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1546'. [ 396.556288][T11171] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1546'. [ 397.764321][T11194] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1551'. [ 397.786158][T11192] sctp: [Deprecated]: syz.3.1553 (pid 11192) Use of struct sctp_assoc_value in delayed_ack socket option. [ 397.786158][T11192] Use struct sctp_sack_info instead [ 397.862981][T11193] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1551'. [ 397.924744][T11193] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1551'. [ 397.991226][T11203] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1556'. [ 398.891022][T11215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 399.607647][T11236] sctp: [Deprecated]: syz.0.1564 (pid 11236) Use of struct sctp_assoc_value in delayed_ack socket option. [ 399.607647][T11236] Use struct sctp_sack_info instead [ 402.868070][T11308] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1584'. [ 403.575547][T11320] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1596'. [ 403.672816][T11321] sctp: [Deprecated]: syz.2.1588 (pid 11321) Use of struct sctp_assoc_value in delayed_ack socket option. [ 403.672816][T11321] Use struct sctp_sack_info instead [ 403.784685][T11327] sctp: [Deprecated]: syz.2.1591 (pid 11327) Use of struct sctp_assoc_value in delayed_ack socket option. [ 403.784685][T11327] Use struct sctp_sack_info instead [ 406.214237][T11374] sctp: [Deprecated]: syz.0.1602 (pid 11374) Use of struct sctp_assoc_value in delayed_ack socket option. [ 406.214237][T11374] Use struct sctp_sack_info instead [ 406.330837][T11379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1603'. [ 407.228792][T11402] sctp: [Deprecated]: syz.1.1610 (pid 11402) Use of struct sctp_assoc_value in delayed_ack socket option. [ 407.228792][T11402] Use struct sctp_sack_info instead [ 410.992091][T11477] securityfs: Unknown parameter 'gid' [ 411.073912][T11478] sctp: [Deprecated]: syz.3.1621 (pid 11478) Use of struct sctp_assoc_value in delayed_ack socket option. [ 411.073912][T11478] Use struct sctp_sack_info instead [ 411.258322][T11486] sctp: [Deprecated]: syz.2.1632 (pid 11486) Use of struct sctp_assoc_value in delayed_ack socket option. [ 411.258322][T11486] Use struct sctp_sack_info instead [ 413.383634][T11546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1649'. [ 413.436025][T11550] nfsd: Unknown parameter '' [ 413.488198][T11555] securityfs: Unknown parameter 'gid' [ 413.982246][T11563] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 414.295560][T11583] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1659'. [ 414.417567][T11591] securityfs: Unknown parameter 'gid' getty: ttyS0: read error: Resource temporarily unavailable [ 415.482201][T11635] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1670'. [ 415.752962][T11640] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1673'. [ 417.268464][T11694] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1685'. [ 424.278121][T11817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1717'. [ 424.760308][T11827] can0: slcan on ptm0. [ 424.839636][T11826] can0 (unregistered): slcan off ptm0. [ 425.909596][T11856] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1728'. syzkaller syzkaller login: [ 428.292049][T11898] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1739'. [ 431.048071][T11934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1749'. [ 433.581136][T11978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1759'. [ 433.799514][T11984] delete_channel: no stack [ 434.012072][T11989] can0: slcan on ptm0. [ 434.070042][T11989] can0 (unregistered): slcan off ptm0. [ 436.056904][T12049] netlink: 'syz.2.1770': attribute type 1 has an invalid length. [ 436.071838][T12051] netlink: 'syz.2.1770': attribute type 1 has an invalid length. [ 436.110279][T12052] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1771'.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    syzkaller syzkaller login: [ 609.293217][T15855] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2858'. [ 609.625598][T15854] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2858'. [ 609.659552][T15854] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2858'. [ 609.750425][T15854] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2858'. [ 610.056488][T15861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2859'. [ 610.343456][ T29] audit: type=1326 audit(8277292036.110:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15858 comm="syz.0.2860" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3fce985d29 code=0x0 [ 613.621566][T15911] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2871'. [ 613.709624][T15912] FAULT_INJECTION: forcing a failure. [ 613.709624][T15912] name failslab, interval 1, probability 0, space 0, times 0 [ 613.808307][T15912] CPU: 1 UID: 0 PID: 15912 Comm: syz.0.2870 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 613.821282][T15912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 613.833365][T15912] Call Trace: [ 613.837307][T15912] [ 613.840843][T15912] dump_stack_lvl+0x16c/0x1f0 [ 613.846484][T15912] should_fail_ex+0x497/0x5b0 [ 613.852125][T15912] ? fs_reclaim_acquire+0xae/0x150 [ 613.858299][T15912] should_failslab+0xc2/0x120 [ 613.863926][T15912] __kmalloc_noprof+0xce/0x4f0 [ 613.869640][T15912] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 613.876404][T15912] ? tomoyo_realpath_from_path+0xbf/0x710 [ 613.883272][T15912] tomoyo_realpath_from_path+0xbf/0x710 [ 613.889926][T15912] ? tomoyo_path_number_perm+0x235/0x5b0 [ 613.896689][T15912] tomoyo_path_number_perm+0x248/0x5b0 [ 613.903239][T15912] ? tomoyo_path_number_perm+0x235/0x5b0 [ 613.909997][T15912] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 613.917192][T15912] ? __pfx_lock_release+0x10/0x10 [ 613.923211][T15912] ? trace_lock_acquire+0x14e/0x1f0 [ 613.929450][T15912] ? lock_acquire+0x2f/0xb0 [ 613.934847][T15912] ? __fget_files+0x40/0x3a0 [ 613.940355][T15912] ? __fget_files+0x206/0x3a0 [ 613.945968][T15912] security_file_ioctl+0x9b/0x240 [ 613.951992][T15912] __x64_sys_ioctl+0xb7/0x200 [ 613.957600][T15912] do_syscall_64+0xcd/0x250 [ 613.963004][T15912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.970074][T15912] RIP: 0033:0x7f3fce985d29 [ 613.975361][T15912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.998886][T15912] RSP: 002b:00007f3fcf873038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 614.008978][T15912] RAX: ffffffffffffffda RBX: 00007f3fceb76080 RCX: 00007f3fce985d29 [ 614.018534][T15912] RDX: 0000000000000000 RSI: 0000000040084503 RDI: 0000000000000003 [ 614.028103][T15912] RBP: 00007f3fcf873090 R08: 0000000000000000 R09: 0000000000000000 [ 614.037664][T15912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.047219][T15912] R13: 0000000000000000 R14: 00007f3fceb76080 R15: 00007fff7eaee0e8 [ 614.056789][T15912] [ 614.060455][ C1] vkms_vblank_simulate: vblank timer overrun [ 614.137084][T15912] ERROR: Out of memory at tomoyo_realpath_from_path. [ 615.225903][T15932] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2874'. [ 616.873887][T15977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2893'. [ 616.966092][T15981] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2891'. [ 617.342007][T15973] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2891'. [ 617.440808][T15973] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2891'. [ 617.581378][T15973] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2891'. [ 619.410412][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2906'. [ 619.554737][T16029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.575605][T16029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.854527][T16031] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2908'. [ 619.921059][T16031] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2908'. [ 619.958134][T16031] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2908'. [ 620.448156][T16050] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 620.464114][T16050] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 620.480443][T16050] veth1_virt_wifi: entered allmulticast mode [ 620.505187][T16050] veth1_virt_wifi: left allmulticast mode [ 620.940802][T16060] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000010006 [ 621.499386][T16070] __nla_validate_parse: 1 callbacks suppressed [ 621.499407][T16070] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2918'. [ 621.648946][T16066] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2918'. [ 621.676115][T16066] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2918'. [ 621.728411][T16066] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2918'. [ 621.937460][T16080] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2920'. [ 621.975263][T16078] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2920'. [ 621.988808][T16078] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2920'. [ 622.026083][T16078] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2920'. [ 622.961060][T16094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2925'. [ 624.344682][T16118] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2932'. [ 624.610960][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.618619][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.927517][T16164] __nla_validate_parse: 9 callbacks suppressed [ 626.927540][T16164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2948'. [ 627.290368][T16171] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2951'. [ 627.326600][T16171] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2951'. [ 627.371173][T16171] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2951'. [ 627.468050][T16171] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2951'. [ 628.775612][T16191] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2959'. [ 629.942763][T16222] Process accounting resumed [ 631.456252][T16259] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2977'. [ 632.351020][T16266] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2980'. [ 632.470444][T16266] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2980'. [ 632.501107][T16266] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2980'. [ 632.608977][T16266] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2980'. [ 633.351447][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 633.363747][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 633.374826][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 633.384262][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 633.395470][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 633.404341][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 633.851475][T16299] chnl_net:caif_netlink_parms(): no params data found [ 634.012645][T16299] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.038022][T16299] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.046708][T16299] bridge_slave_0: entered allmulticast mode [ 634.056383][T16299] bridge_slave_0: entered promiscuous mode [ 634.065592][T16299] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.074434][T16299] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.083186][T16299] bridge_slave_1: entered allmulticast mode [ 634.093574][T16299] bridge_slave_1: entered promiscuous mode [ 634.152489][T16299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.182224][T16299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.272862][T16299] team0: Port device team_slave_0 added [ 634.301461][T16299] team0: Port device team_slave_1 added [ 634.380325][T16299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.390062][T16299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.457899][T16299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.480644][T16299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.507885][T16299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.567844][T16299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.659882][T16299] hsr_slave_0: entered promiscuous mode [ 634.668829][T16299] hsr_slave_1: entered promiscuous mode [ 634.688460][T16299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 634.698365][T16299] Cannot create hsr debugfs directory [ 635.202009][T16299] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 635.304985][T16326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2994'. [ 635.326242][T16326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2994'. [ 635.488107][T13732] Bluetooth: hci0: command tx timeout [ 636.034380][T16299] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 636.114109][T16299] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 636.155254][T16299] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 636.414587][T16299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.469246][T16299] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.517190][ T7639] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.525809][ T7639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.559141][ T9549] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.567691][ T9549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.909778][T16299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.456925][T16299] veth0_vlan: entered promiscuous mode [ 637.469258][T16299] veth1_vlan: entered promiscuous mode [ 637.496332][T16299] veth0_macvtap: entered promiscuous mode [ 637.518012][T16299] veth1_macvtap: entered promiscuous mode [ 637.555732][T16299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.569952][T13732] Bluetooth: hci0: command tx timeout [ 637.581757][T16299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.594445][T16299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.610247][T16299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.623666][T16299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.636714][T16299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.648916][T16299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.661777][T16299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.680173][T16299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.696725][T16299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.709509][T16299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.737969][T16299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.757948][T16299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.797871][T16299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.818993][T16299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.840915][T16299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.882421][T16299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.936806][T16299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.977869][T16299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.017443][T16299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.041209][T16299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.079995][T16299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.092668][T16299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.104732][T16299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.117982][T16299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.130275][T16299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.144471][T16299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.156692][T16299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.169655][T16299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.181511][T16299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.194104][T16299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.208121][T16299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.222522][T16377] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3002'. [ 638.326667][T16373] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3002'. [ 638.345525][T16299] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.356670][T16299] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.375813][T16299] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.387221][T16299] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.399923][T16389] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3002'. [ 638.413141][T16383] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3002'. [ 638.559420][ T9549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.585750][ T9549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.620841][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.631910][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.123967][T16411] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3012'. [ 639.145672][T16411] Process accounting resumed [ 639.573379][T16427] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3015'. [ 639.647947][T13732] Bluetooth: hci0: command tx timeout [ 639.666256][T16424] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3015'. [ 639.683399][T16424] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3015'. [ 639.726234][T16424] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3015'. [ 640.863184][T16443] [U] Ln [ 640.867735][T16443] [U] 9zG-aoP]:]V [ 640.948462][T16446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3020'. [ 640.998670][T16446] vcan0: entered promiscuous mode [ 641.729492][T13732] Bluetooth: hci0: command tx timeout [ 642.218099][T16461] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 642.235714][T16461] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 642.243872][T16461] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 642.258608][T16461] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 642.273512][T16461] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 642.291223][T16461] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 643.013895][T16495] Process accounting resumed [ 643.276485][T16502] __nla_validate_parse: 5 callbacks suppressed [ 643.276508][T16502] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3037'. [ 643.339530][T16502] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3037'. [ 643.453361][T16501] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3037'. [ 643.507176][T16508] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3039'. [ 643.571151][T16506] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3039'. [ 643.620327][T16506] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3039'. [ 643.739228][T16508] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3039'. [ 643.799335][T16515] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3040'. [ 643.973896][T16510] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3040'. [ 644.006351][T16510] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3040'. [ 644.128340][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 644.287968][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 644.287990][T13732] Bluetooth: hci2: command 0x0c1a tx timeout [ 644.295199][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 646.368909][T13732] Bluetooth: hci0: command 0x0c1a tx timeout [ 648.448015][T13732] Bluetooth: hci0: command 0x0c1a tx timeout [ 649.498650][T16543] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 649.529829][T16644] __nla_validate_parse: 4 callbacks suppressed [ 649.529850][T16644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3073'. [ 651.055367][T16670] svc: failed to register nfsdv3 RPC service (errno 111). [ 651.082655][T16670] svc: failed to register nfsaclv3 RPC service (errno 111). [ 651.228267][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 651.240718][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 651.252522][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 651.263378][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 651.276674][ T5832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 651.290415][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 651.782038][T16679] chnl_net:caif_netlink_parms(): no params data found [ 652.024996][T16679] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.058548][T16679] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.097336][T16679] bridge_slave_0: entered allmulticast mode [ 652.130802][T16679] bridge_slave_0: entered promiscuous mode [ 652.174315][T16679] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.194153][T16679] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.213659][T16679] bridge_slave_1: entered allmulticast mode [ 652.229379][T16679] bridge_slave_1: entered promiscuous mode [ 652.326414][T16705] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3090'. [ 652.439972][T16692] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3087'. [ 652.543138][T16137] udevd[16137]: inotify_add_watch(7, /dev/sda1, 10) failed: No such file or directory [ 652.649747][T16679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.663441][T16679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.823664][T16679] team0: Port device team_slave_0 added [ 652.834913][T16679] team0: Port device team_slave_1 added [ 652.989564][T16692] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3087'. [ 653.058590][T16698] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3087'. [ 653.071429][T16706] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3087'. [ 653.130785][T16679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.158069][T16679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.225274][T16714] netlink: 'syz.4.3092': attribute type 1 has an invalid length. [ 653.234697][T16679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.270020][T16679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.288003][T16679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.328707][T13732] Bluetooth: hci1: command tx timeout [ 653.347991][T16679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.465624][T16679] hsr_slave_0: entered promiscuous mode [ 653.498832][T16679] hsr_slave_1: entered promiscuous mode [ 653.521156][T16679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 653.546324][T16679] Cannot create hsr debugfs directory [ 653.941399][T16679] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 653.967137][T16679] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 653.993737][T16679] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 654.007997][T16679] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 654.141431][T16679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.175941][T16679] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.193494][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.202052][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.226777][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.235460][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.562152][T16679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.815495][T16679] veth0_vlan: entered promiscuous mode [ 654.833235][T16679] veth1_vlan: entered promiscuous mode [ 654.883009][T16679] veth0_macvtap: entered promiscuous mode [ 654.910358][T16679] veth1_macvtap: entered promiscuous mode [ 654.969871][T16679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.982702][T16737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3096'. [ 655.030886][T16679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.064898][T16679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.084161][T16679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.096555][T16679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.109947][T16679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.122294][T16679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.134907][T16679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.147092][T16679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.159930][T16679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.171985][T16679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.184570][T16679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.196477][T16679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.209620][T16679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.221860][T16679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.234569][T16679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.248410][T16679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.410023][T13732] Bluetooth: hci1: command tx timeout [ 655.526055][T16737] team0: Port device team_slave_0 removed [ 655.594058][T16679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.608434][T16679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.636641][T16679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.664481][T16679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.684128][T16679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.698165][T16679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.711762][T16679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.730709][T16679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.742812][T16679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.755732][T16679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.768473][T16679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.782299][T16679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.795629][T16679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.824764][T16679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.845825][T16679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.859424][T16679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.872374][T16679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.885454][T16679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.912639][T16679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.956118][T16679] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.017841][T16679] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.041290][T16679] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.077876][T16679] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.310894][ T9530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.345784][ T9530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.412988][ T3647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.448125][ T3647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.800045][T16769] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3081'. [ 656.848376][T16769] vcan0: entered promiscuous mode [ 657.039163][T16778] Process accounting resumed [ 657.488048][T13732] Bluetooth: hci1: command tx timeout [ 658.418015][T16818] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3116'. [ 658.447072][T16819] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3117'. [ 658.468768][T16819] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3117'. [ 658.497261][T16819] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3117'. [ 659.072625][T16825] HSR: entered promiscuous mode [ 659.201465][T16828] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3119'. [ 659.268142][T16828] vcan0: entered promiscuous mode [ 659.567929][T13732] Bluetooth: hci1: command tx timeout [ 660.032433][T16851] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3130'. [ 661.186916][T16878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3136'. [ 661.394336][T16886] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3137'. [ 661.421966][T16884] can: request_module (can-proto-0) failed. [ 661.478945][T16881] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3137'. [ 661.539412][T16881] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3137'. [ 661.674719][T16886] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3137'. [ 661.966786][T16893] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3140'. [ 663.369038][T16942] Process accounting resumed [ 664.073674][T16961] serio: Serial port ptm0 [ 664.119691][T16962] block nbd9: NBD_DISCONNECT [ 664.128692][T16962] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [65011]. [ 665.343546][T16989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3170'. [ 666.313958][T17022] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3181'. [ 666.349746][T17010] netlink: 'syz.2.3178': attribute type 1 has an invalid length. [ 666.632098][T17022] team0 (unregistering): Port device team_slave_1 removed [ 669.331766][T17089] Falling back ldisc for ttyS2. [ 669.557090][T17087] svc: failed to register nfsdv3 RPC service (errno 101). [ 669.717928][T17087] svc: failed to register nfsaclv3 RPC service (errno 101). [ 671.449261][T17120] Process accounting resumed [ 671.928280][T17131] serio: Serial port ptm0 [ 671.999769][T17132] block nbd9: NBD_DISCONNECT [ 672.029799][T17132] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [65011]. [ 672.998005][T17153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3217'. [ 673.061842][T17155] Process accounting resumed [ 673.415395][T17161] Process accounting resumed [ 673.441175][T17160] serio: Serial port ptm0 [ 673.503689][T17167] block nbd9: NBD_DISCONNECT [ 673.570334][T17167] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [65011]. [ 673.686741][T17172] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3223'. [ 674.113908][T17172] team0 (unregistering): Port device team_slave_0 removed [ 674.171654][T17172] team0 (unregistering): Port device team_slave_1 removed [ 674.480386][T17186] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3225'. [ 674.491094][T17187] sg_write: data in/out 2059/169 bytes for SCSI command 0x57-- guessing data in; [ 674.491094][T17187] program syz.2.3228 not setting count and/or reply_len properly [ 674.544547][T17189] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3229'. [ 674.576604][T17189] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3229'. [ 674.588022][T17182] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3225'. [ 674.601315][T17182] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3225'. [ 674.659694][T17193] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3229'. [ 674.677737][T17186] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3225'. [ 674.698449][T17189] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3229'. [ 674.966124][T17200] FAULT_INJECTION: forcing a failure. [ 674.966124][T17200] name failslab, interval 1, probability 0, space 0, times 0 [ 674.998945][T17200] CPU: 1 UID: 0 PID: 17200 Comm: syz.5.3232 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 675.011917][T17200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 675.024005][T17200] Call Trace: [ 675.027948][T17200] [ 675.031474][T17200] dump_stack_lvl+0x16c/0x1f0 [ 675.037117][T17200] should_fail_ex+0x497/0x5b0 [ 675.042749][T17200] ? fs_reclaim_acquire+0xae/0x150 [ 675.048904][T17200] should_failslab+0xc2/0x120 [ 675.054581][T17200] __kmalloc_noprof+0xce/0x4f0 [ 675.060321][T17200] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 675.067093][T17200] ? tomoyo_realpath_from_path+0xbf/0x710 [ 675.073986][T17200] tomoyo_realpath_from_path+0xbf/0x710 [ 675.080667][T17200] ? tomoyo_path_number_perm+0x235/0x5b0 [ 675.087470][T17200] tomoyo_path_number_perm+0x248/0x5b0 [ 675.094056][T17200] ? tomoyo_path_number_perm+0x235/0x5b0 [ 675.100849][T17200] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 675.108083][T17200] ? __pfx_lock_release+0x10/0x10 [ 675.114125][T17200] ? trace_lock_acquire+0x14e/0x1f0 [ 675.120368][T17200] ? lock_acquire+0x2f/0xb0 [ 675.125764][T17200] ? __fget_files+0x40/0x3a0 [ 675.131277][T17200] ? __fget_files+0x206/0x3a0 [ 675.136889][T17200] security_file_ioctl+0x9b/0x240 [ 675.142918][T17200] __x64_sys_ioctl+0xb7/0x200 [ 675.148526][T17200] do_syscall_64+0xcd/0x250 [ 675.153929][T17200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.160998][T17200] RIP: 0033:0x7f1b5d585d29 [ 675.166308][T17200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.189835][T17200] RSP: 002b:00007f1b5e2e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 675.199929][T17200] RAX: ffffffffffffffda RBX: 00007f1b5d775fa0 RCX: 00007f1b5d585d29 [ 675.209489][T17200] RDX: 0000000000000002 RSI: 00000000400455cb RDI: 0000000000000011 [ 675.219048][T17200] RBP: 00007f1b5e2e1090 R08: 0000000000000000 R09: 0000000000000000 [ 675.228605][T17200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.238159][T17200] R13: 0000000000000000 R14: 00007f1b5d775fa0 R15: 00007ffcf7a1bf78 [ 675.247733][T17200] [ 675.251479][ C1] vkms_vblank_simulate: vblank timer overrun [ 675.328239][T17200] ERROR: Out of memory at tomoyo_realpath_from_path. [ 678.481184][T17274] __nla_validate_parse: 11 callbacks suppressed [ 678.481205][T17274] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3252'. [ 678.508273][T17267] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3250'. [ 678.569529][T17267] lo: entered promiscuous mode [ 678.575399][T17267] lo: entered allmulticast mode [ 678.612179][T17272] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3252'. [ 678.630125][T17272] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3252'. [ 678.734975][T17274] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3252'. [ 681.540701][T17323] sg_write: data in/out 2059/169 bytes for SCSI command 0x57-- guessing data in; [ 681.540701][T17323] program syz.4.3265 not setting count and/or reply_len properly [ 683.047035][ T29] audit: type=1804 audit(8277292039.640:47): pid=17357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3275" name="/newroot/sys/kernel/tracing/per_cpu/cpu1/trace" dev="tracefs" ino=1108 res=1 errno=0 [ 683.141235][T17358] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3274'. [ 683.218044][T17354] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3274'. [ 683.241136][T17354] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3274'. [ 683.317644][T17358] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3274'. [ 683.399281][T17357] [ 683.402113][T17357] ====================================================== [ 683.410536][T17357] WARNING: possible circular locking dependency detected [ 683.418965][T17357] 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 Not tainted [ 683.427507][T17357] ------------------------------------------------------ [ 683.435933][T17357] syz.5.3275/17357 is trying to acquire lock: [ 683.443222][T17357] ffff888143b080a8 (&q->q_usage_counter(io)){++++}-{0:0}, at: submit_bio_noacct_nocheck+0x892/0xd70 [ 683.456204][T17357] [ 683.456204][T17357] but task is already holding lock: [ 683.465029][T17357] ffff8880234814c0 (mapping.invalidate_lock#2){++++}-{4:4}, at: page_cache_ra_unbounded+0x173/0x750 [ 683.477979][T17357] [ 683.477979][T17357] which lock already depends on the new lock. [ 683.477979][T17357] [ 683.490449][T17357] [ 683.490449][T17357] the existing dependency chain (in reverse order) is: [ 683.501249][T17357] [ 683.501249][T17357] -> #4 (mapping.invalidate_lock#2){++++}-{4:4}: [ 683.511468][T17357] down_read+0x9a/0x330 [ 683.517078][T17357] filemap_fault+0x2e0/0x2820 [ 683.523341][T17357] __do_fault+0x10a/0x490 [ 683.529151][T17357] do_pte_missing+0xebd/0x3e00 [ 683.535504][T17357] __handle_mm_fault+0x103c/0x2a40 [ 683.542273][T17357] handle_mm_fault+0x3fa/0xaa0 [ 683.548617][T17357] __get_user_pages+0x8d9/0x3b50 [ 683.555168][T17357] __gup_longterm_locked+0x211/0x1870 [ 683.562236][T17357] gup_fast_fallback+0x1802/0x2690 [ 683.568989][T17357] pin_user_pages_fast+0xa8/0x100 [ 683.575639][T17357] iov_iter_extract_pages+0x3a5/0x2010 [ 683.582810][T17357] bio_iov_iter_get_pages+0x37c/0x1100 [ 683.589978][T17357] blkdev_direct_IO+0x1054/0x1ad0 [ 683.596612][T17357] blkdev_write_iter+0x6f9/0xd40 [ 683.603158][T17357] vfs_write+0x5ae/0x1150 [ 683.608979][T17357] ksys_write+0x12b/0x250 [ 683.614799][T17357] do_syscall_64+0xcd/0x250 [ 683.620828][T17357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.628519][T17357] [ 683.628519][T17357] -> #3 (&mm->mmap_lock){++++}-{4:4}: [ 683.637577][T17357] __might_fault+0x11b/0x190 [ 683.643711][T17357] _copy_from_user+0x29/0xd0 [ 683.649842][T17357] __blk_trace_setup+0xa8/0x180 [ 683.656278][T17357] blk_trace_setup+0x47/0x70 [ 683.662397][T17357] sg_ioctl+0x7a3/0x26b0 [ 683.668108][T17357] __x64_sys_ioctl+0x190/0x200 [ 683.674433][T17357] do_syscall_64+0xcd/0x250 [ 683.680450][T17357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.688139][T17357] [ 683.688139][T17357] -> #2 (&q->debugfs_mutex){+.+.}-{4:4}: [ 683.697504][T17357] __mutex_lock+0x19b/0xa60 [ 683.703523][T17357] blk_register_queue+0x13c/0x4f0 [ 683.710168][T17357] add_disk_fwnode+0x785/0x1300 [ 683.716609][T17357] brd_alloc.isra.0+0x50a/0x7c0 [ 683.723048][T17357] brd_init+0x12b/0x1d0 [ 683.728641][T17357] do_one_initcall+0x128/0x630 [ 683.734976][T17357] kernel_init_freeable+0x58f/0x8b0 [ 683.741832][T17357] kernel_init+0x1c/0x2b0 [ 683.747650][T17357] ret_from_fork+0x45/0x80 [ 683.753558][T17357] ret_from_fork_asm+0x1a/0x30 [ 683.759894][T17357] [ 683.759894][T17357] -> #1 (&q->sysfs_lock){+.+.}-{4:4}: [ 683.768949][T17357] __mutex_lock+0x19b/0xa60 [ 683.774967][T17357] queue_attr_store+0xe2/0x170 [ 683.781295][T17357] sysfs_kf_write+0x117/0x170 [ 683.787526][T17357] kernfs_fop_write_iter+0x33d/0x500 [ 683.794483][T17357] vfs_write+0x5ae/0x1150 [ 683.800287][T17357] ksys_write+0x12b/0x250 [ 683.806090][T17357] do_syscall_64+0xcd/0x250 [ 683.812109][T17357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.819797][T17357] [ 683.819797][T17357] -> #0 (&q->q_usage_counter(io)){++++}-{0:0}: [ 683.829790][T17357] __lock_acquire+0x249e/0x3c40 [ 683.836219][T17357] lock_acquire.part.0+0x11b/0x380 [ 683.842964][T17357] __submit_bio+0x49c/0x540 [ 683.848992][T17357] submit_bio_noacct_nocheck+0x892/0xd70 [ 683.856374][T17357] submit_bio_noacct+0x93a/0x1e20 [ 683.863022][T17357] mpage_readahead+0x41d/0x590 [ 683.869355][T17357] read_pages+0x1a8/0xdc0 [ 683.875163][T17357] page_cache_ra_unbounded+0x3dc/0x750 [ 683.882325][T17357] page_cache_ra_order+0x8f2/0xc80 [ 683.889072][T17357] page_cache_sync_ra+0x4b4/0x9c0 [ 683.895716][T17357] filemap_get_pages+0xd7b/0x1be0 [ 683.902374][T17357] filemap_read+0x3ca/0xd70 [ 683.908393][T17357] blkdev_read_iter+0x187/0x480 [ 683.914828][T17357] vfs_read+0x87f/0xbe0 [ 683.920424][T17357] ksys_read+0x12b/0x250 [ 683.926128][T17357] do_syscall_64+0xcd/0x250 [ 683.932147][T17357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.939837][T17357] [ 683.939837][T17357] other info that might help us debug this: [ 683.939837][T17357] [ 683.952092][T17357] Chain exists of: [ 683.952092][T17357] &q->q_usage_counter(io) --> &mm->mmap_lock --> mapping.invalidate_lock#2 [ 683.952092][T17357] [ 683.969500][T17357] Possible unsafe locking scenario: [ 683.969500][T17357] [ 683.978417][T17357] CPU0 CPU1 [ 683.984832][T17357] ---- ---- [ 683.991246][T17357] rlock(mapping.invalidate_lock#2); [ 683.997683][T17357] lock(&mm->mmap_lock); [ 684.005882][T17357] lock(mapping.invalidate_lock#2); [ 684.015241][T17357] rlock(&q->q_usage_counter(io)); [ 684.021464][T17357] [ 684.021464][T17357] *** DEADLOCK *** [ 684.021464][T17357] [ 684.031215][T17357] 1 lock held by syz.5.3275/17357: [ 684.037330][T17357] #0: ffff8880234814c0 (mapping.invalidate_lock#2){++++}-{4:4}, at: page_cache_ra_unbounded+0x173/0x750 [ 684.050806][T17357] [ 684.050806][T17357] stack backtrace: [ 684.057854][T17357] CPU: 0 UID: 0 PID: 17357 Comm: syz.5.3275 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 684.070756][T17357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 684.082808][T17357] Call Trace: [ 684.086725][T17357] [ 684.090233][T17357] dump_stack_lvl+0x116/0x1f0 [ 684.095835][T17357] print_circular_bug+0x41c/0x610 [ 684.101860][T17357] check_noncircular+0x31a/0x400 [ 684.107784][T17357] ? __pfx_check_noncircular+0x10/0x10 [ 684.114336][T17357] ? lockdep_lock+0xc6/0x200 [ 684.119837][T17357] ? __pfx_lockdep_lock+0x10/0x10 [ 684.125858][T17357] __lock_acquire+0x249e/0x3c40 [ 684.131681][T17357] ? __pfx___lock_acquire+0x10/0x10 [ 684.137919][T17357] lock_acquire.part.0+0x11b/0x380 [ 684.144048][T17357] ? submit_bio_noacct_nocheck+0x892/0xd70 [ 684.151015][T17357] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 684.157764][T17357] ? rcu_is_watching+0x12/0xc0 [ 684.163479][T17357] ? trace_lock_acquire+0x14e/0x1f0 [ 684.169712][T17357] ? submit_bio_noacct_nocheck+0x892/0xd70 [ 684.176682][T17357] ? lock_acquire+0x2f/0xb0 [ 684.182078][T17357] ? submit_bio_noacct_nocheck+0x892/0xd70 [ 684.189043][T17357] __submit_bio+0x49c/0x540 [ 684.194446][T17357] ? submit_bio_noacct_nocheck+0x892/0xd70 [ 684.201415][T17357] ? __pfx___submit_bio+0x10/0x10 [ 684.207437][T17357] ? trace_lock_acquire+0x14e/0x1f0 [ 684.213672][T17357] ? submit_bio_noacct_nocheck+0x892/0xd70 [ 684.220640][T17357] submit_bio_noacct_nocheck+0x892/0xd70 [ 684.227395][T17357] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 684.234777][T17357] ? __pfx___might_resched+0x10/0x10 [ 684.241109][T17357] ? __pfx_xa_load+0x10/0x10 [ 684.246623][T17357] submit_bio_noacct+0x93a/0x1e20 [ 684.252652][T17357] mpage_readahead+0x41d/0x590 [ 684.258365][T17357] ? __pfx_mpage_readahead+0x10/0x10 [ 684.264708][T17357] ? __pfx_blkdev_get_block+0x10/0x10 [ 684.271145][T17357] ? __folio_batch_add_and_move+0x5f3/0xc60 [ 684.278211][T17357] ? __pfx_lock_release+0x10/0x10 [ 684.284229][T17357] ? __pfx_blkdev_readahead+0x10/0x10 [ 684.290670][T17357] read_pages+0x1a8/0xdc0 [ 684.295862][T17357] ? __folio_batch_add_and_move+0x689/0xc60 [ 684.302927][T17357] ? __folio_batch_add_and_move+0x612/0xc60 [ 684.309992][T17357] ? __pfx_read_pages+0x10/0x10 [ 684.315805][T17357] ? find_held_lock+0x2d/0x110 [ 684.321513][T17357] page_cache_ra_unbounded+0x3dc/0x750 [ 684.328060][T17357] page_cache_ra_order+0x8f2/0xc80 [ 684.334188][T17357] page_cache_sync_ra+0x4b4/0x9c0 [ 684.340207][T17357] filemap_get_pages+0xd7b/0x1be0 [ 684.346230][T17357] ? __pfx_filemap_get_pages+0x10/0x10 [ 684.352774][T17357] ? __pfx___might_resched+0x10/0x10 [ 684.359106][T17357] ? find_held_lock+0x2d/0x110 [ 684.364834][T17357] filemap_read+0x3ca/0xd70 [ 684.370255][T17357] ? __pfx_filemap_read+0x10/0x10 [ 684.376300][T17357] blkdev_read_iter+0x187/0x480 [ 684.382126][T17357] vfs_read+0x87f/0xbe0 [ 684.387112][T17357] ? __pfx_vfs_read+0x10/0x10 [ 684.392719][T17357] ? do_futex+0x123/0x350 [ 684.397922][T17357] ? __fget_files+0x40/0x3a0 [ 684.403423][T17357] ksys_read+0x12b/0x250 [ 684.408504][T17357] ? __pfx_ksys_read+0x10/0x10 [ 684.414210][T17357] do_syscall_64+0xcd/0x250 [ 684.419606][T17357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.426668][T17357] RIP: 0033:0x7f1b5d585d29 [ 684.431955][T17357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.455481][T17357] RSP: 002b:00007f1b5e2e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 684.465568][T17357] RAX: ffffffffffffffda RBX: 00007f1b5d775fa0 RCX: 00007f1b5d585d29 [ 684.475121][T17357] RDX: 0000000080000001 RSI: 0000000000000000 RDI: 0000000000000003 [ 684.484671][T17357] RBP: 00007f1b5d601aa8 R08: 0000000000000000 R09: 0000000000000000 [ 684.494224][T17357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.503772][T17357] R13: 0000000000000000 R14: 00007f1b5d775fa0 R15: 00007ffcf7a1bf78 [ 684.513329][T17357] [ 684.539373][T17352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3273'. [ 684.557790][T17352] tc_dump_action: action bad kind [ 686.049435][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.056985][ T1296] ieee802154 phy1 wpan1: encryption failed: -22