Extracting prog: 51m57.103682105s Minimizing prog: 13m13.869171028s Simplifying prog options: 0s Extracting C: 31.147531948s Simplifying C: 10m3.991410312s extracting reproducer from 24 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-close_range$auto-openat$auto_tracing_saved_cmdlines_fops_trace-socket$nl_generic-socket-openat$auto_configfs_file_operations_configfs_internal-futex$auto-mmap$auto-move_pages$auto-writev$auto detailed listing: executing program 0: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0x7}, 0x3) program did not crash single: failed to extract reproducer bisect: bisecting 24 programs with base timeout 30s testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 17, 24, 18, 21, 17, 30, 6, 12, 26, 6, 9, 7, 14, 17, 3, 20, 29, 6, 15, 21, 10, 30, 10] detailed listing: executing program 0: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mbind$auto(0x9, 0x84, 0x4, &(0x7f0000000000), 0x80000000, 0x7f) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0xc, 0x0, 0x0, 0x1a, 0x9, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0) shutdown$auto(0x200000003, 0x2) sysfs$auto(0x2, 0x1b, 0x0) mmap$auto(0x401, 0x6, 0x8, 0x15, 0xd, 0x6) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = socket(0x18, 0x5, 0x1) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioperm$auto(0x7, 0x6, 0x2) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$auto(0x4, 0x0, 0x33c) clone$auto(0xd2d4, 0x101, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) io_uring_setup$auto(0xfffff800, &(0x7f0000001380)={0x3, 0x3, 0x3, 0x7ff, 0x0, 0x6, r0, [0x4f33, 0x0, 0x7], {0x1, 0x2, 0x2ec, 0x4, 0xb, 0x26, 0x0, 0x8, 0x5d97}, {0x2, 0xab, 0x101, 0x10001, 0x0, 0x0, 0x0, 0x9, 0x5}}) r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000000c0), 0xffffffffffffffff) shmctl$auto(0xaf, 0x4b4, &(0x7f0000000200)={{0x400, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x6, 0x8, 0x8}, 0x5, 0x5, 0xfffffffffffffd04, 0xc4, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000100)="abf3c23492179108f06e1a0b71a353022071bd177ddeeccfe24021828a0a7659e8f5820c138478eb6ae3cbbb0175b55806d650fe97a8696d0f89756ede724b75f5604fd091002cb417d806a1cb640fe1c2db385a4c6a2c45aeadbf93e7fe488fca0835026c29db0d7ef23f7060dad8409fbc0b7771d0e449ef3f205d9fa7e7fc08bd91228d956901eaf4d4c4c8ef8ccb348b850018e4902c0ff707c6eed6", &(0x7f00000001c0)="eee6739562697c7322dc4346ab0bebcb98fa42f0379feb23fc4ddb36f985d7b5bb345f6561c60008de9b364e32caf313eaf7be6eb24c0b2f"}) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000001340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001300)={&(0x7f00000059c0)={0x21e0, r2, 0x200, 0x70bd2a, 0xb728, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0x1}, @OVS_METER_ATTR_BANDS={0x118f, 0x4, 0x0, 0x1, [@generic="7d7c3aae57db7ba1bf979e1a80bbc86703babbaa8fca9093ad8014ad9cd7e903b9c2d5a4455a38f90421e0e3f2519450d0b364b44184b0ae4caaf69fc07568dbbbf6c687e5015d4a7e92c944396c96390ed1df4dccddcad015c84eb9108386815d140e0407462afad447e3c95442f2121c5436a7477eb746fb6e2c7aec413c541aa182d569f3c87bf1a8f81ea13150528f206b631174edc65dce3aa270a56f441592f903defdc25e7e5d370b99747a1f3f6eac15e8b930714940885cb4b799ecfd4f6bf095c6e43f4248387c736eb83cb8fb5fbf697089da", @typed={0x8, 0x52, 0x0, 0x0, @uid=r3}, @nested={0x58, 0xf2, 0x0, 0x1, [@typed={0x8, 0x11c, 0x0, 0x0, @pid}, @generic="f14db138f292220575ce31c226c2024a4a39a7ae9b8805bfec8464e08e5ffc9ec49a97f2412c61ace752a4223e5defde90b641d2a8cd2fb6880499a03e", @generic="6f2629ff2cca3cdcca9a101977eefa"]}, @generic="d66580a618a1e6c6dd41ee3f488e97c6a72f0afbbf4777e07096ee18952a5540b169b54c22e5af9793785673be6595c0afd6de42b7a98d8154e7f0ff8659121b959401bd0bc4b44828e1e1f57fe98b04b8882a", @generic="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"]}, @OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x1030, 0x4, 0x0, 0x1, [@nested={0x1f, 0xea, 0x0, 0x1, [@generic="d3822d576b2468a1d0d728fa50f0564d04143dd48fcf73", @nested={0x4, 0x116}]}, @generic="d97248fb485d65f5cde803fdd2f84d4ac201eff7216f0213fcbea652bf7da484a035f3a8b51b4277a471e0e1adb91baf4c650755a7fbe9c01b0d1ee79aaf05970a9bdc1f1a383eeae371b49217ce01e70ba7d86d3e1ee27b4c8a0d00338d49792142787050de0fa3b2d8137628be3350211800b14821df649ce2d6b57f39fb6d97cbf66f17d44ef6b111776d5ae04e72e82d27b9b1ffd4183d044546f4f0f832793ccc86366dfee72f4017ba576dcb53b3da49e3ddcfadf4db55bf08be90547cca6b44d63ac1b3397bf917b9332bafb6d19946a9fa27aa394884f9603695a382964c0c0718407f4c3988881efc69457910892f010fa4a3a68319e974b583cb0c880dbd6f6d2f0c60eceefb4905447c811f9ee025f99483ec227d47401009b54ad9bddeef693a372c7beccd3048fcfd02bf87ed1eee00b7cce05ed7e891d936bf6dd4490f18bebc6c51978bd0319483e2b5fd0c815c4330a24d8516bcb14d07fbb76a3c472ac0d89cc9c501af8fa91930810c6e98714c4bd3e4deb11414d4b1f585b32f92ba388ff9700e852ab79fabb98514a9e33ffa1470793b1bedc742d5d07ffcb19fa41be3a0d33e79fb9efbc7483010e436f446f673560db3622f4dce1b2345da7598f5a7b496a6bacfe9806b8dd616d5711ce96e73cc62f85f49fd34e5b83ec322b67819e9aaa95ed1a0d651aff9071cf150077fa0aad9306f1a0527d69c9d1f9903fa99776a4c087540e90e510ca0f14e9c7c261326dac45081f42bf01781075c981c70c632ce89320ca804f73a115cca13658813627571a5e503305c68214ded27cc9bee1b1329cbfb7cd0f42d1f21553fdf89f1fbdee5c629f0ed5c55fef954dec238fd8b5182e8b5fe98cafda7625eb62dd3d45b6f18c02c332eb96574b424b4b3c4f045c4c05ece2f83fe5b8d09d78da3f8aa078ef620d9bd37b6546233c31b7de5f8e12dce32bcc929e178576af0be8797302ae03fac88e875e98ba981351403e9a84c6983db20629eef3324f72297775a44976d5c3908e5ee0359cd86ed456bdf208444d05240976f1d12e0f774228b9056eef0ef53c19808caebc68d535f4fefaee1c19388dde658dbb1e581fc68b0ef74cd2a54c7059465d8bc51772b0f4fb6a10d3d94f77c31aafd8a5e2b01834356b84b2c2ec0c7b02b9a434718750a92b1c29ceb936e0e2b7d41e698225d92cb731f070487de4fc7885802eb8f8e844b3f75dff627eb0ba6710dfb3624f3e861ae5b7bd29193f16a487288dc97cb99ee594fc0299f60bd2936ed405293a2246c80a54e1dad513804eef0d2a59c229649104a42935f27b45da0edb461e390074b20327ef7e97f80c4c5e14cb59e95b1962460f52c90ce56a218f6f5fa41f38260d7cd87fd7e98b0d15824a363b6b15b2671ca531d9713d9b49e731703b1c5e75adb595c9f3298951568ee1ac4809b90062b649567eb8e4f89e139dbd0fc829955c245bc9423c2d6ac017c208b5b19f21064861b88f93e4771223cef92c293147ec28204059dddf4b016633b4d80e27a9d2c0061a9fdce96195f24a26039697d8a325c9bcc5aae73360219de053125572b43de6b107ac7c75e1895f9f3392b0baa5f6650a447a9df3796898f0293bd0f5928e12905049e3cf5628383e5a7aa302101bcc432ce8564ed869f0e8e40bb6fc05a9cb877e8a8ce08f91c10f3fadc01203b0b28285a8817a1b9f5ebadb6c1524049ab8301e09e7e188fc389ae1355c2846b80d00decbc01845b7e6baa1ff6a647501c92475c4cc833cfb3b1ad3a435554d17958493d71d1116af3d64bc7cc43cc53bd862bd2ee62bff7e04684b53e2328365645d4147476c4726de35d06118583fe0faf40704325749c35a017aef2904c55fbf377c2022336747c0a757f08fff49f47c7d558dd7564cd294332c2a26d0bf31af151fcbf679fe44beb30b498b86d38131d2e553894cc11b3ff5f0299d6479f1009bfd8805c2d36d5e6701e497bc14b6ca3e49bc3da8a3420e7ba0417006512730e58c5cc4e6790a6ca9c5ab13de2e49da757a1ddb0e22e6c3731ebd286e3df62a04056386f5761fb089f817e2741961a025013662f89afb42c10a19e23019bc57d1595d209c68a179f2179ac431bd42ca9706eaae638719bd1fe4d436227ec9f393f999551b624a2584ecfd18d659e140cb870f1ce71fe1f54badbce1863ffd2b46fab52b328a14496e51966d547882c83d5a26a168fbb6767245088715c51860d2ed820157d99409856c90a190216a8188b8b9bb7c2aa8c7fbb3b6662da4dfbe6f96eeef3dd53e8eec4ce52a899708982dce04c4948d9c01be7b24eee7bb2f5a840f12be59648313f5a79f4aa3bcdba9902fe1ff17f6a2667a80333c73e44507140c29073f1ee6f6e679c7fb42c66741d0c265be6ad8c32060405d83b703e7f6a02051413b2fb0d72685742fdc9c14a721b071d9688ec5aee41cb8c2986a7e6bf49faf39dc6133eb7bfcdb1f84ce3c5ca82b3d2c76b490efd46cbaace44d8985f77f5d3976cd7802911babd03bcc3a41622e8679d4bd33596532ad1f1c871c73c674188938866e9cd0b7c2e0f620f82d3950e296b43eb2af2a93adbeb41c759396f92a4ee710e2612861af7d0c179e3cd697aa053e5314aedd39a1e5feb7b6ff156fc5cac21b580d746887e33b698d326b9e8d0adeabe996ca303f17bdff0b55d96515710bbb5bc1d21f837d1ec8a62351884179f82cbe849ed4d0a41ff37c0315b05215566fb749be7b0022866850b25ca1e37f5411a32a2300a098aa84757c51acc8efbcbf87862bb9cbd4574845caebf3b9ae12465fb6d74022d8a9ddaca0a4a9b644bcd5ed2cb0d8b464e75f34bcb5b0cd47ed2e6faf8bbd6cd170abff21d8f4e0139581114aa58f8098db2e280f00054a6b5c6d90eb115e340a0e31e64e56c5a58beff47dbd417d2521287e3731850cd7012423c93fa6ea99f30aa288c97696717eff65a8a4b6c567df7bf6d70c9a81a78dc600ddf2560ca7d1ebc61b22367fecc5778878a99bda42884fdff88276247cbcdab410a3ab315a0e132884d43d20c9cf84f2e547f8609d939040b738b000167e6cc231de16eaa6a94237297900e389a9538c2633f12f8670c57a8504bbdf7bce3fff27a2fd74e13dd75626c0493b81114482a08f67083b3a3fb32ca34a56615d6d48b145f15098a38f86a2c9da0ea21302956a556e669ac69575873cd086a8de3b5f3c67bce41528492c5648c8deb80c56d415562943a8bfa7e7eddfe44eb34aec68b1818b0303479cc314c83f6156758b1d44b770957e10a612d917fec8af1e0ab5a351d9fa4fbd9ba6da2bd12446b362580f452c720a1eb1470f20f4a3b2f82390458d1171725c2d058cde8bf7bb1e5b4e037f0df1dce39e16177d50bcf9c172aad1dddc38e95f0f5c53cef68eadb5334940e15b6e22403f0b55ce252fb77dfe37921feb962f51a005d45e31da4efd9f5f335a3fc657a2c0d0640010bae8c7fc683b036da30575287c699a64819a4de9980cac1b75582c975498925ed6465fbd3e196acf961fe9293b18f6185fc77d08c90a935584cdb77c35b9f4421b78aa3fb129f93a3f0aaaca0188acfd32ac0f3df2a8fad2cd169b90a9deb2faac4e1c2e09fe4856c9ec53442d643f7cad2e600a73eedd3b56d76a9fe28e00bbf91f68cbeac42c07936e27ee42c37db1a51d6be3f7e2543a8e6f271cc0538fdc9e7c33d1d1f79af299537acab068d825d4c7587944eafb0c921a4d7a45149cd3c653178bec3924cd420bdb1574546e42f638e9c5f068235af15a11dd469de8cbdd8fd1e90c78e7cbf5613cf2b7d4cc54969eb6e3a6ec58d55375ab4887126edfd95814fe7d518956e7983378dc02aa700d7060406501d6edb02b4555210eefbee13e64f1fa4bb7ed65836b452c28d5b32895cb42a28611db6d39a029d073c9062ede344f3aa7217e0c2e1feea5aebad7cbb4cc3665f52b18b0afd0254f06447c78f0dc0e65a5a66fb3fafde1c77a27fe7bbd929ece89654091f41c1660c0ae95edfa9bb8bbb9e03dd40a66f132ac580f6e0c21fe26302282a26a039d658fa4046a8358cb206f9f484fb6b85363192c6e94aac307f72810deab590b52a8905d26e92fa3c12ac675fe0fe9a7109f0d540e3a4bde24d0a3a9ba4b52a1fdee8c4336f204439f7952321daabee5b8b7626f0d1280f229f8419569c6142283f1e8c970078ec2573923fdda57af92b0d5559e569af7b36301ec6f7b33cb26598059536779cef30b2242de0fc71f3aa1b8e0056e6c9661ae42dba7160fa5b2769aea5df57a968402e4b271b80abed9b5fe2ea593451c7d937294e6e7d5aeeee052a5cf65c083b124717962ce1e25d85c9ee97ac606b6ea740b11b12bb7e092528a59d8fe34db7ad0b839490b607b2d572f66d90e6d6b0364c35f1f74fb9b769cab36fe7378084be3281f6a619d4d340526028cd6a069c14b641b325c6edb4752222603c8aca0c8dcf63f8eeacb0e9d28b6e80cfa45592a27a00801ccd57a79899e9fc94d1d9307c8e8fcbb4d286340e4c16c4df8445df84b71cd8cb07cd1cbb61c374f0d794662c42183443ebd40dee2ecda1eae376008173224209fe49519d7c5623964a9a273af9c26b9a1771ed0aaadfeac49905394e373459ddf69e8ec714f91bbd2fe3e8f7e173aa79c874c987a5b674ef494218a2aef4d97c52da5f750d86d0e7efb6a1aeae4fbfbce701917caf30d25cce620d41636485712f9638af95b7e985c046bb8e4bfc2ff16af2325be8b501cf184002e1d56ca04a63510a4fdcae86d07eca1aa4e0be4dd1b931b7a1c4b561eba38443eb1d843282b117d72731b6a7ef5c78c7836e10a8af6476ccd1ecc4a147f864f4f97566b8010eee7150df9657dfaf4e111e5d19035e5c73c6bac35f69f27593f913e091b8f5db72c00b6746570b88b9d1918ab0115dc7735253ecf38a5e3a84c5e59ec4261ef87c8a3877349f0f7ddeb2132dda82230799ba5b8e5196063b087c7544345d10504290ccf36f1259e5de3e30e35a563489e5f9193e3ae9ece63e05877bfbc947db0a9c09a5324d756836678b35eed27ef74c056dcb666c39966aedd2cd744772f89a662a81446649f8be93c066914482e22241533d950dcf4f27619fbb066e90ecc61a9c0a8d9558788080312dfc8721f650ec6a32c608bb2245a351cd2e2dca2ca820bdcb20acbdf4de978a02b4b014650e9ca015c963085bcb1f07348a22642d6e9bf57689548494af11ff7c0af66e09c0c3e4464d263eb560845d534f10531714dd906e3246a172fa512b94d737d2caaeb3126c8f13c11124ce88d33dd6d84b7ce875754c2f14294711944997b2d2cfe24e16a6f803446510802d14aef74f7aae3254448ae668df6b850b0410e82f978450dde2b84f979fc562f64dbc265e01a6a05addb32bc1814c6a489faf3fb51be9f8cbd6461c30eb68b7daae77f7d0c849ea82c3effdb7d3bea4e694390e5fe3e6a510096b09004e320dcaf5c06f3b2071ea554c58533cb3371e431266803604b64dbf537e7ddf9a91232f250779dafb56c6f9f002aef771c3f451a18deb14cbbe25cfed9e7c7b200220fbee8826e0ab9dbd3157ff4e234e16596b04637b8d5760c984ab78596cc49691e66c1d5559bf1410a092cc1da408cf04641ca120ca85cfb5a246cf1eea26b6e56fafc759e8e9a1d6e5c9147f703ad8a73c987ced3b4e184dd53a169328781d4087fb0199c1c041322eacfed7b392762ede46170c54c34069f5b3ae7d5bfbd97f659cbd05", @typed={0x8, 0x59, 0x0, 0x0, @pid=r4}, @typed={0x4, 0x148}]}]}, 0x21e0}, 0x1, 0x0, 0x0, 0x20000820}, 0x43840) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/ep_81/type\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x71d) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x8080, 0x0) executing program 0: mmap$auto(0x0, 0x20009, 0x7ff, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x0) pipe$auto(0x0) socket(0xa, 0x2, 0x88) socketpair$auto(0x1e, 0x1, 0x4, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TCFLSH2(r0, 0x541b, 0xfdfd) executing program 1: close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) rseq$auto(&(0x7f00000000c0)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r1 = gettid() prctl$auto(0x1000000003b, 0x1, r1, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sync_file_range$auto(r0, 0x0, 0x1, 0x7) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/console\x00', 0x1c9c02, 0x0) read$auto(r2, 0x0, 0x200) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mknod$auto(0x0, 0x1081, 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$auto_MON_IOCX_GETX(r3, 0x4018920a, 0x0) setresuid$auto(0x8, 0x0, 0x4) setpriority$auto(0x2, 0x8, 0x8) executing program 0: mmap$auto(0x20, 0x400008, 0x9, 0x9b7f, 0x2, 0x8000000000000000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) close_range$auto(0x2, r0, 0x0) socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) connect$auto(0x3, 0x0, 0x55) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) madvise$auto(0xfff, 0xe, 0x0) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sysfs$auto(0x2, 0x0, 0xb) executing program 0: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setgroups$auto(0xe32, &(0x7f0000000040)=0x9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fffe000) madvise$auto(0x0, 0x53, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) pselect6$auto(0x101, &(0x7f0000000080)={[0x6, 0x7, 0xffffffffffffffff, 0x3, 0x1, 0x6, 0x9, 0x7, 0x1, 0x4, 0x9, 0x4, 0x4, 0x7, 0xcb2a, 0x9]}, &(0x7f0000000100)={[0xffff, 0x3, 0xfffffffffffff31a, 0x7, 0x590, 0x8, 0x1d4, 0x4, 0x6, 0x7, 0x5, 0x7, 0x80, 0x8, 0x0, 0x1]}, &(0x7f0000000180)={[0xa9, 0x4, 0x4, 0x1, 0x3, 0x6, 0xcbd0, 0x200000001, 0x1f, 0xfffffffffffffffd, 0x7ff, 0x8000000000000001, 0x4, 0x7f, 0x91, 0x7]}, &(0x7f0000000000)={0x899, 0x5}, &(0x7f0000000200)) ppoll$auto(&(0x7f0000000280)={0xffffffffffffffff, 0x6, 0x9}, 0x9, &(0x7f00000002c0)={0x8000000000000001, 0x8001}, &(0x7f0000000300)={0x7ff}, 0x8) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r2, 0x1002, 0x0, 0x0, 0x0, 0x2) r3 = memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00T\x00'/40, 0x9) fallocate$auto(0x3, 0x0, 0xe, 0x8ec8) finit_module$auto(0x3, 0xfffffffffffffffe, 0x2) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040800}, 0x40850) mq_notify$auto(r3, &(0x7f0000000200)={@sival_int=0x8, @raw=0x8, 0xeb, @_tid=r2}) mremap$auto(0x6, 0xad, 0x6, 0x7, 0x4) executing program 1: mmap$auto(0x0, 0x20009, 0x7ff, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x0) pipe$auto(0x0) socket(0xa, 0x2, 0x88) socketpair$auto(0x1e, 0x1, 0x4, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TCFLSH2(r0, 0x541b, 0xfdfd) executing program 3: openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14f602, 0x0) mmap$auto(0x9d7, 0x810004, 0xffb, 0x28000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) mmap$auto(0x5, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) socket(0xa, 0x80000, 0x3a) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x3, 0x6) (async) socket(0x1d, 0x7ff, 0x4) (async) socket(0x1e, 0x4, 0x40002) (async) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, 0x0) (async) r2 = pidfd_open$auto(0x1, 0x0) (async) socket(0x10, 0x2, 0x0) setsockopt$auto(0x5, 0x104000000000010e, 0x1, 0x0, 0x16) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x2, 0x10) (async) read$auto_proc_loginuid_operations_base(r2, &(0x7f0000000040)=""/25, 0x19) (async) modify_ldt$auto(0x12, 0xfffffffffffffffc, 0xdd7) (async) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) (async) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x69) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) executing program 1: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x80002, 0x73) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) executing program 3: close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x13, 0x3, 0x180000000) r0 = socket(0x10, 0x2, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/version\x00', 0x0, 0x0) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000140)='-$!\x00\xfa\xef\t\xa4\xe9\xb2r\x8cQ \xa6\xb7v\x93\xb6\b\xba\xfe\x1e\xab\xe7KC6z\x1a\xf0\x83~\xcd\x9a\x83\b\xb6\xb2\xd6PR\xbe\xec\xea\t\xde.\xc6%\x16\xc8\\\xb2\xe86\xe1\x84k\xa8\x02\xcb\xc9 \x1flY\xcb\xfa\xd9\xe0\xb8\x93\x12\xbc\xcf\xc2\'\x90\x9d\x1c\xb0\x1d\xb8\x80\xb4V\x9c\xf6J\xe8\"\xef@\xcd t\xe8\xe9Ip\xa74\x82\xb0\x9a\xecj\x9f\x8f\x9a\xe22\x8e\xce1\x9d\x0fW\xe7\xfb\"[\x17\x83\xfc}\xc7\xab\x93\xe4\x1ekP1\x01\bB\xbf*a\x93\xbd\xa7\xc8', 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) executing program 3: r0 = socket(0x11, 0x2, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0xfebf0c436aa031f1) seccomp$auto(0x1, 0x8, &(0x7f0000000400)) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptywd\x00', 0x40c01, 0x0) getpeername$auto(r0, 0x0, 0x0) cachestat$auto(r0, &(0x7f0000000040)={0x1ff, 0x6}, &(0x7f00000000c0)={0x41e9, 0x2, 0x2, 0x8, 0x3ff}, 0xfffff000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES8], 0x24}, 0x1, 0x0, 0x0, 0x20040014}, 0x2600c880) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) mmap$auto(0x0, 0x8, 0x1040000016, 0x13, 0x3, 0x400180000000) read$auto(0x3, 0x0, 0x7) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/geneve0/proxy_ndp\x00', 0x82000, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) executing program 1: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_3={0x1c, 0xa8b, 0x18c, 0x6a, 0x0, 0x3405, 0x3, 0x9, 0xfffffff5, "63ace816ef77cf00", 0x0, 0x549, 0x4, 0x7, 0x0, 0x1009, 0x4, 0xffffffffffffffff, 0xe, 0x2000005, @attach_btf_obj_fd=0x3, 0x166, 0x1, 0x4000000000006, 0x8, 0x48200003, 0xa7be}, 0x7) read$auto_proc_setgroups_operations_base(r0, &(0x7f00000000c0)=""/90, 0x5a) socket(0x3, 0x6, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(0x3, 0x6, 0xb, 0x0, 0x0) executing program 2: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) executing program 0: close_range$auto(0x0, 0xfffffffffffff000, 0x2) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d96, 0x110, 0x4}, 0x77, 0x0, 0x0, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000000)=@link_create={@map_fd=r0, @target_ifindex=r1, 0x7, 0x10001, @bpf_attr_link_create_4_1={0xd}}, 0xa3) bpf$auto(0x15, 0x0, 0x0) executing program 3: close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x0, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x3, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffff8, 0x3, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000]}, 0x1fe, 0x200d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000034c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8, 0x2, r3}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8, 0x2, r3}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) socket(0x11, 0x80000, 0x6) setsockopt$auto(0x3, 0x0, 0x23, 0x0, 0x4) executing program 1: mmap$auto(0x0, 0x20009, 0x7ff, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x0) pipe$auto(0x0) socket(0xa, 0x2, 0x88) socketpair$auto(0x1e, 0x1, 0x4, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TCFLSH2(r0, 0x541b, 0xfdfd) executing program 2: r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/hugetlb.2MB.numa_stat\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/17, 0x11) shmat$auto(0x1, &(0x7f0000000000)='./cgroup.cpu/hugetlb.2MB.numa_stat\x00', 0x6) executing program 3: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x40802, 0x0) r0 = socket(0x15, 0x5, 0x0) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r1, 0xc0105702, &(0x7f0000000080)={0x6, 0x0, r0}) r3 = getsockopt$auto(r0, 0x114, 0x271b, 0xfffffffffffffffc, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32=r7, @ANYBLOB="1400018008000200060000000800010003"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, r9, 0x301, 0x70bc2b, 0x25dfdc02, {}, [@ETHTOOL_A_RSS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8086}, 0x4010) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000001600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000180)={0x13f8, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff9}]}, @ETHTOOL_A_FEATURES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8001}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1b4, 0x3, 0x0, 0x1, [@nested={0x4, 0x84}, @nested={0x1aa, 0x93, 0x0, 0x1, [@nested={0x4, 0x11f}, @typed={0xb5, 0xd4, 0x0, 0x0, @binary="904f696e3e6b68e53513727371ecd2c50e52e563ca3442758f827d63786d8be8d26a7b23682b9882601d106a476ced955f67024c0865c9e2252f0ff0c6d85e2848c2984f0f449886431361aa344862f761248a465f1559c5d3709e7e785159a5ee10ecbad4684140b9c36c30bb80aa37114fd6059961dd2730ebc91b266c4e61e6b9728f46ef2c03b703c0b2878097fc0260ad107544176bce23a4d2abcfed363bd3233fd1fe59ca23e0bd82db8c937634"}, @generic="ecc8aa4ab36cdcab3864b24e8c2ef6c788dda03d9bb53e21d4d7e168af74e77ba3b7cc0a518c505713b7a849a49571e5f3efe8f5a864b3fecc02163042a1173f0d7ea76e3efb1bf351dbdd4ed97bfad0b7edf733da8d9239e0a9e6884a0ff16df657eae209eb8a80dff51ecd66f7df7f86da6d22e5ae7c6f8dd5a7fb19149f6c212cc4a18a98463dcf543dcc83aa4c5f5c6c9a121ac760d72013bbb8da043746c1df5a19801fd5dd7d7365908b9312052d69e6361c90cd24bd6875b17125fe43b0b3b79569f2d76bc5a3a4d9e4ec0d46b1ace6cb68fb799f0243211b861c41f79fc6cd6bcb0c69e371e3"]}]}, @ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1038, 0x3, 0x0, 0x1, [@nested={0x1010, 0x117, 0x0, 0x1, [@nested={0x4, 0x12c}, @typed={0x8, 0x8f, 0x0, 0x0, @ipv4=@empty}, @generic="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"]}, @typed={0x14, 0x128, 0x0, 0x0, @ipv6=@mcast2}, @typed={0xc, 0x89, 0x0, 0x0, @u64=0xfffffffffffffff8}, @typed={0x4, 0x7b}]}, @ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_FEATURES_WANTED={0x5, 0x3, 0x0, 0x1, [@generic="8d"]}, @ETHTOOL_A_FEATURES_WANTED={0xc0, 0x3, 0x0, 0x1, [@nested={0xb1, 0xc0, 0x0, 0x1, [@typed={0x4, 0x38}, @generic="d5a82948741c4b69aa2c6cef5905f34ca5cbae4336a9c14c42f81baf58333f751d9d86897dfc680ccd6b667613a1386c777f9f2880b0428cb9305aec528b337a1600760115988e5debc6baa0ff2b1c0d5dd8efff298e57fa35689e68fefd0ed876fb9d7150c5a9b4fd66c3dfccf944182f85456f5a19b83021a64fee5d42bad28da3646914f0d1ca8daa3a16a009e7438594476947700521d90b936374be0cd32b2175960d3a29f7ce"]}, @typed={0x8, 0x33, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x13f8}, 0x1, 0x0, 0x0, 0x4040005}, 0x4000040) shmctl$auto(0x0, 0xc, 0x0) executing program 0: mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) (async) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) r0 = socket(0x1e, 0x5, 0x2dd) (async) mmap$auto(0x6, 0x400008, 0xdf, 0x9b72, 0x2, 0x7ffe) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 32) io_uring_setup$auto(0x6, 0x0) (async) madvise$auto(0x0, 0x3, 0x400) open(0x0, 0x1a1043, 0x2a) (async) bind$auto(0x3, 0x0, 0x6b) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) (async) connect$auto(r0, &(0x7f0000000040)=@can, 0x8) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002900fedbdf254a0000000800030037bfbe6a75bb55c0351b6798e09bb1150cd7e98ec6", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) (async) unshare$auto(0x40000080) (async) socket(0xa, 0x3, 0x3a) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) (async) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r0) (async) mbind$auto(0x0, 0x100080004, 0x8, 0x0, 0x6, 0x9) (async) connect$auto(0xffffffffffffffff, 0x0, 0x55) (async) mmap$auto(0x0, 0x5, 0x3, 0x77010, 0x3, 0x8000) (async) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0x20200, 0x15) executing program 2: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x80002, 0x73) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) executing program 1: rt_sigaction$auto(0x1, &(0x7f00000001c0)={&(0x7f0000000080)=0x0, 0x7fffffffffffffff, 0x0, {0x5}}, 0x0, 0x8) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) unshare$auto(0x4) rt_sigaction$auto(0x4, &(0x7f0000000300)={&(0x7f0000000240)=0x0, 0x0, 0x0, {0x1}}, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlockall$auto(0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x0, 0x0) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000640), 0x201, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) clock_settime$auto(0x9, &(0x7f0000000000)={0x7, 0xb66b}) r0 = gettid() rt_sigqueueinfo$auto(r0, 0x1, 0x0) executing program 3: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setgroups$auto(0xe32, &(0x7f0000000040)=0x9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fffe000) madvise$auto(0x0, 0x53, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) pselect6$auto(0x101, &(0x7f0000000080)={[0x6, 0x7, 0xffffffffffffffff, 0x3, 0x1, 0x6, 0x9, 0x7, 0x1, 0x4, 0x9, 0x4, 0x4, 0x7, 0xcb2a, 0x9]}, &(0x7f0000000100)={[0xffff, 0x3, 0xfffffffffffff31a, 0x7, 0x590, 0x8, 0x1d4, 0x4, 0x6, 0x7, 0x5, 0x7, 0x80, 0x8, 0x0, 0x1]}, &(0x7f0000000180)={[0xa9, 0x4, 0x4, 0x1, 0x3, 0x6, 0xcbd0, 0x200000001, 0x1f, 0xfffffffffffffffd, 0x7ff, 0x8000000000000001, 0x4, 0x7f, 0x91, 0x7]}, &(0x7f0000000000)={0x899, 0x5}, &(0x7f0000000200)) ppoll$auto(&(0x7f0000000280)={0xffffffffffffffff, 0x6, 0x9}, 0x9, &(0x7f00000002c0)={0x8000000000000001, 0x8001}, &(0x7f0000000300)={0x7ff}, 0x8) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r2, 0x1002, 0x0, 0x0, 0x0, 0x2) r3 = memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00T\x00'/40, 0x9) fallocate$auto(0x3, 0x0, 0xe, 0x8ec8) finit_module$auto(0x3, 0xfffffffffffffffe, 0x2) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040800}, 0x40850) mq_notify$auto(r3, &(0x7f0000000200)={@sival_int=0x8, @raw=0x8, 0xeb, @_tid=r2}) mremap$auto(0x6, 0xad, 0x6, 0x7, 0x4) executing program 2: mknod$auto(&(0x7f0000000100)='X))\x00', 0x83c1, 0x803) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mlock$auto(0xfbe8, 0x3) mlock$auto(0x7c88, 0x7ffe) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x34, 0x65f, 0x1ffde, 0x7, 0x3, 0x20000002, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x200000000001, 0x0, 0xffffffffefffffff, 0x200000000000004, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x1000, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x10006]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xe}}, 0x6, 0x4008) executing program 2: madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x4, 0x4000000020df, 0x40eb2, 0x402, 0x300000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f00000008c0)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0xc, 0x4, 0x0, 0x1, [@nested={0x8, 0x29, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b4a, 0x9) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x424, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}, @HWSIM_ATTR_NO_VIF={0x4}, @HWSIM_ATTR_MULTI_RADIO={0x4}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}, @HWSIM_ATTR_PERM_ADDR={0x29, 0x16, "fcda6e4144739456eca21047435b1fe828ba98ccb550c3d4d332d53f96e1be02e896a1a2b0"}, @HWSIM_ATTR_MULTI_RADIO={0x4}, @HWSIM_ATTR_TX_INFO_FLAGS={0xfa, 0x15, "6031f0c376d33fd9e693abb9cb17ad677fb44c0eb7594a288a96e332ab44ef5b2a677f3f4a9c9a95b669ad0513d6b6c129e9e1fe2a4d43989169abb793decd8e464ebeec02f3db9706ed00a0a1e0ef33ef2a94a21d0487097442fb60c46f3b63aa81cf74638de43824c33b55e8325f3fc424cf376e130e2c645edb60b9e7e5a3b4d4b4b47598ad6874265aa33465f6d7e72801d7537fc1b2a7545d44f30100ae4f9a8c240f92b719f8790567e76f2ca1442052a646fe6c5287e5de235606f2846b34e2bf323a0b9fcfb3c8d8669280e06dd7ebfd877667f39d9c5d7d4e2b3222c0f52407e277a916d1a8dfddeaaba5b16a29bbe1bda1"}, @HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_FRAME={0x294, 0x3, "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"}, @HWSIM_ATTR_ADDR_TRANSMITTER={0x39, 0x2, "028897c197e183be4a2f29b655475324700bbcf572a2257ed7578abaa9a17a07cfb52f95b506366da5bc157dfddea430cfdac71a5d"}]}, 0x424}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_DEL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc004}, 0x8004) madvise$auto(0x0, 0x3, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6227, 0x1000, 0x0, 0x100000000, 0xffffffffffffffff) socket(0x26, 0x80805, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x1f53, 0x2000000000002) r5 = open(&(0x7f0000000000)='./file0\x00', 0x4bb43, 0x100) fanotify_mark$auto(0x0, 0x201, 0x4, r5, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mlockall$auto(0x7) r6 = socket(0x2, 0x3, 0xa) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x2, 0x8, 0x0) r7 = socket(0x2, 0x80802, 0x0) r8 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000080), r7) sendmsg$auto_NLBL_CIPSOV4_C_LISTALL(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x401020}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, r8, 0x800, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20044081}, 0x4) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/clear_refs\x00', 0x80002, 0x0) mmap$auto(0x0, 0x2, 0xeb7, 0xeb1, 0x401, 0x8000) executing program 2: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0x7}, 0x3) program crashed: KASAN: slab-out-of-bounds Read in nvmet_root_discovery_nqn_show bisect: bisecting 24 programs bisect: split chunks (needed=false): <23> bisect: split chunk #0 of len 23 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 26, 6, 9, 7, 14, 17, 3, 20, 29, 6, 15, 21, 10, 30, 10] detailed listing: executing program 3: close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x13, 0x3, 0x180000000) r0 = socket(0x10, 0x2, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/version\x00', 0x0, 0x0) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000140)='-$!\x00\xfa\xef\t\xa4\xe9\xb2r\x8cQ \xa6\xb7v\x93\xb6\b\xba\xfe\x1e\xab\xe7KC6z\x1a\xf0\x83~\xcd\x9a\x83\b\xb6\xb2\xd6PR\xbe\xec\xea\t\xde.\xc6%\x16\xc8\\\xb2\xe86\xe1\x84k\xa8\x02\xcb\xc9 \x1flY\xcb\xfa\xd9\xe0\xb8\x93\x12\xbc\xcf\xc2\'\x90\x9d\x1c\xb0\x1d\xb8\x80\xb4V\x9c\xf6J\xe8\"\xef@\xcd t\xe8\xe9Ip\xa74\x82\xb0\x9a\xecj\x9f\x8f\x9a\xe22\x8e\xce1\x9d\x0fW\xe7\xfb\"[\x17\x83\xfc}\xc7\xab\x93\xe4\x1ekP1\x01\bB\xbf*a\x93\xbd\xa7\xc8', 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) executing program 3: r0 = socket(0x11, 0x2, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0xfebf0c436aa031f1) seccomp$auto(0x1, 0x8, &(0x7f0000000400)) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptywd\x00', 0x40c01, 0x0) getpeername$auto(r0, 0x0, 0x0) cachestat$auto(r0, &(0x7f0000000040)={0x1ff, 0x6}, &(0x7f00000000c0)={0x41e9, 0x2, 0x2, 0x8, 0x3ff}, 0xfffff000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES8], 0x24}, 0x1, 0x0, 0x0, 0x20040014}, 0x2600c880) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) mmap$auto(0x0, 0x8, 0x1040000016, 0x13, 0x3, 0x400180000000) read$auto(0x3, 0x0, 0x7) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/geneve0/proxy_ndp\x00', 0x82000, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) executing program 1: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_3={0x1c, 0xa8b, 0x18c, 0x6a, 0x0, 0x3405, 0x3, 0x9, 0xfffffff5, "63ace816ef77cf00", 0x0, 0x549, 0x4, 0x7, 0x0, 0x1009, 0x4, 0xffffffffffffffff, 0xe, 0x2000005, @attach_btf_obj_fd=0x3, 0x166, 0x1, 0x4000000000006, 0x8, 0x48200003, 0xa7be}, 0x7) read$auto_proc_setgroups_operations_base(r0, &(0x7f00000000c0)=""/90, 0x5a) socket(0x3, 0x6, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(0x3, 0x6, 0xb, 0x0, 0x0) executing program 2: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) executing program 0: close_range$auto(0x0, 0xfffffffffffff000, 0x2) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d96, 0x110, 0x4}, 0x77, 0x0, 0x0, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000000)=@link_create={@map_fd=r0, @target_ifindex=r1, 0x7, 0x10001, @bpf_attr_link_create_4_1={0xd}}, 0xa3) bpf$auto(0x15, 0x0, 0x0) executing program 3: close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x0, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x3, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffff8, 0x3, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000]}, 0x1fe, 0x200d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000034c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8, 0x2, r3}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8, 0x2, r3}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) socket(0x11, 0x80000, 0x6) setsockopt$auto(0x3, 0x0, 0x23, 0x0, 0x4) executing program 1: mmap$auto(0x0, 0x20009, 0x7ff, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x0) pipe$auto(0x0) socket(0xa, 0x2, 0x88) socketpair$auto(0x1e, 0x1, 0x4, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TCFLSH2(r0, 0x541b, 0xfdfd) executing program 2: r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/hugetlb.2MB.numa_stat\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/17, 0x11) shmat$auto(0x1, &(0x7f0000000000)='./cgroup.cpu/hugetlb.2MB.numa_stat\x00', 0x6) executing program 3: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x40802, 0x0) r0 = socket(0x15, 0x5, 0x0) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r1, 0xc0105702, &(0x7f0000000080)={0x6, 0x0, r0}) r3 = getsockopt$auto(r0, 0x114, 0x271b, 0xfffffffffffffffc, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32=r7, @ANYBLOB="1400018008000200060000000800010003"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, r9, 0x301, 0x70bc2b, 0x25dfdc02, {}, [@ETHTOOL_A_RSS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8086}, 0x4010) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000001600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000180)={0x13f8, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff9}]}, @ETHTOOL_A_FEATURES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8001}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1b4, 0x3, 0x0, 0x1, [@nested={0x4, 0x84}, @nested={0x1aa, 0x93, 0x0, 0x1, [@nested={0x4, 0x11f}, @typed={0xb5, 0xd4, 0x0, 0x0, @binary="904f696e3e6b68e53513727371ecd2c50e52e563ca3442758f827d63786d8be8d26a7b23682b9882601d106a476ced955f67024c0865c9e2252f0ff0c6d85e2848c2984f0f449886431361aa344862f761248a465f1559c5d3709e7e785159a5ee10ecbad4684140b9c36c30bb80aa37114fd6059961dd2730ebc91b266c4e61e6b9728f46ef2c03b703c0b2878097fc0260ad107544176bce23a4d2abcfed363bd3233fd1fe59ca23e0bd82db8c937634"}, @generic="ecc8aa4ab36cdcab3864b24e8c2ef6c788dda03d9bb53e21d4d7e168af74e77ba3b7cc0a518c505713b7a849a49571e5f3efe8f5a864b3fecc02163042a1173f0d7ea76e3efb1bf351dbdd4ed97bfad0b7edf733da8d9239e0a9e6884a0ff16df657eae209eb8a80dff51ecd66f7df7f86da6d22e5ae7c6f8dd5a7fb19149f6c212cc4a18a98463dcf543dcc83aa4c5f5c6c9a121ac760d72013bbb8da043746c1df5a19801fd5dd7d7365908b9312052d69e6361c90cd24bd6875b17125fe43b0b3b79569f2d76bc5a3a4d9e4ec0d46b1ace6cb68fb799f0243211b861c41f79fc6cd6bcb0c69e371e3"]}]}, @ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1038, 0x3, 0x0, 0x1, [@nested={0x1010, 0x117, 0x0, 0x1, [@nested={0x4, 0x12c}, @typed={0x8, 0x8f, 0x0, 0x0, @ipv4=@empty}, @generic="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"]}, @typed={0x14, 0x128, 0x0, 0x0, @ipv6=@mcast2}, @typed={0xc, 0x89, 0x0, 0x0, @u64=0xfffffffffffffff8}, @typed={0x4, 0x7b}]}, @ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_FEATURES_WANTED={0x5, 0x3, 0x0, 0x1, [@generic="8d"]}, @ETHTOOL_A_FEATURES_WANTED={0xc0, 0x3, 0x0, 0x1, [@nested={0xb1, 0xc0, 0x0, 0x1, [@typed={0x4, 0x38}, @generic="d5a82948741c4b69aa2c6cef5905f34ca5cbae4336a9c14c42f81baf58333f751d9d86897dfc680ccd6b667613a1386c777f9f2880b0428cb9305aec528b337a1600760115988e5debc6baa0ff2b1c0d5dd8efff298e57fa35689e68fefd0ed876fb9d7150c5a9b4fd66c3dfccf944182f85456f5a19b83021a64fee5d42bad28da3646914f0d1ca8daa3a16a009e7438594476947700521d90b936374be0cd32b2175960d3a29f7ce"]}, @typed={0x8, 0x33, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x13f8}, 0x1, 0x0, 0x0, 0x4040005}, 0x4000040) shmctl$auto(0x0, 0xc, 0x0) executing program 0: mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) (async) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) r0 = socket(0x1e, 0x5, 0x2dd) (async) mmap$auto(0x6, 0x400008, 0xdf, 0x9b72, 0x2, 0x7ffe) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 32) io_uring_setup$auto(0x6, 0x0) (async) madvise$auto(0x0, 0x3, 0x400) open(0x0, 0x1a1043, 0x2a) (async) bind$auto(0x3, 0x0, 0x6b) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) (async) connect$auto(r0, &(0x7f0000000040)=@can, 0x8) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002900fedbdf254a0000000800030037bfbe6a75bb55c0351b6798e09bb1150cd7e98ec6", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) (async) unshare$auto(0x40000080) (async) socket(0xa, 0x3, 0x3a) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) (async) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r0) (async) mbind$auto(0x0, 0x100080004, 0x8, 0x0, 0x6, 0x9) (async) connect$auto(0xffffffffffffffff, 0x0, 0x55) (async) mmap$auto(0x0, 0x5, 0x3, 0x77010, 0x3, 0x8000) (async) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0x20200, 0x15) executing program 2: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x80002, 0x73) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) executing program 1: rt_sigaction$auto(0x1, &(0x7f00000001c0)={&(0x7f0000000080)=0x0, 0x7fffffffffffffff, 0x0, {0x5}}, 0x0, 0x8) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) unshare$auto(0x4) rt_sigaction$auto(0x4, &(0x7f0000000300)={&(0x7f0000000240)=0x0, 0x0, 0x0, {0x1}}, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlockall$auto(0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x0, 0x0) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000640), 0x201, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) clock_settime$auto(0x9, &(0x7f0000000000)={0x7, 0xb66b}) r0 = gettid() rt_sigqueueinfo$auto(r0, 0x1, 0x0) executing program 3: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setgroups$auto(0xe32, &(0x7f0000000040)=0x9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fffe000) madvise$auto(0x0, 0x53, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) pselect6$auto(0x101, &(0x7f0000000080)={[0x6, 0x7, 0xffffffffffffffff, 0x3, 0x1, 0x6, 0x9, 0x7, 0x1, 0x4, 0x9, 0x4, 0x4, 0x7, 0xcb2a, 0x9]}, &(0x7f0000000100)={[0xffff, 0x3, 0xfffffffffffff31a, 0x7, 0x590, 0x8, 0x1d4, 0x4, 0x6, 0x7, 0x5, 0x7, 0x80, 0x8, 0x0, 0x1]}, &(0x7f0000000180)={[0xa9, 0x4, 0x4, 0x1, 0x3, 0x6, 0xcbd0, 0x200000001, 0x1f, 0xfffffffffffffffd, 0x7ff, 0x8000000000000001, 0x4, 0x7f, 0x91, 0x7]}, &(0x7f0000000000)={0x899, 0x5}, &(0x7f0000000200)) ppoll$auto(&(0x7f0000000280)={0xffffffffffffffff, 0x6, 0x9}, 0x9, &(0x7f00000002c0)={0x8000000000000001, 0x8001}, &(0x7f0000000300)={0x7ff}, 0x8) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r2, 0x1002, 0x0, 0x0, 0x0, 0x2) r3 = memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00T\x00'/40, 0x9) fallocate$auto(0x3, 0x0, 0xe, 0x8ec8) finit_module$auto(0x3, 0xfffffffffffffffe, 0x2) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040800}, 0x40850) mq_notify$auto(r3, &(0x7f0000000200)={@sival_int=0x8, @raw=0x8, 0xeb, @_tid=r2}) mremap$auto(0x6, 0xad, 0x6, 0x7, 0x4) executing program 2: mknod$auto(&(0x7f0000000100)='X))\x00', 0x83c1, 0x803) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mlock$auto(0xfbe8, 0x3) mlock$auto(0x7c88, 0x7ffe) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x34, 0x65f, 0x1ffde, 0x7, 0x3, 0x20000002, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x200000000001, 0x0, 0xffffffffefffffff, 0x200000000000004, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x1000, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x10006]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xe}}, 0x6, 0x4008) executing program 2: madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x4, 0x4000000020df, 0x40eb2, 0x402, 0x300000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f00000008c0)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0xc, 0x4, 0x0, 0x1, [@nested={0x8, 0x29, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b4a, 0x9) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x424, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}, @HWSIM_ATTR_NO_VIF={0x4}, @HWSIM_ATTR_MULTI_RADIO={0x4}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}, @HWSIM_ATTR_PERM_ADDR={0x29, 0x16, "fcda6e4144739456eca21047435b1fe828ba98ccb550c3d4d332d53f96e1be02e896a1a2b0"}, @HWSIM_ATTR_MULTI_RADIO={0x4}, @HWSIM_ATTR_TX_INFO_FLAGS={0xfa, 0x15, "6031f0c376d33fd9e693abb9cb17ad677fb44c0eb7594a288a96e332ab44ef5b2a677f3f4a9c9a95b669ad0513d6b6c129e9e1fe2a4d43989169abb793decd8e464ebeec02f3db9706ed00a0a1e0ef33ef2a94a21d0487097442fb60c46f3b63aa81cf74638de43824c33b55e8325f3fc424cf376e130e2c645edb60b9e7e5a3b4d4b4b47598ad6874265aa33465f6d7e72801d7537fc1b2a7545d44f30100ae4f9a8c240f92b719f8790567e76f2ca1442052a646fe6c5287e5de235606f2846b34e2bf323a0b9fcfb3c8d8669280e06dd7ebfd877667f39d9c5d7d4e2b3222c0f52407e277a916d1a8dfddeaaba5b16a29bbe1bda1"}, @HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_FRAME={0x294, 0x3, "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"}, @HWSIM_ATTR_ADDR_TRANSMITTER={0x39, 0x2, "028897c197e183be4a2f29b655475324700bbcf572a2257ed7578abaa9a17a07cfb52f95b506366da5bc157dfddea430cfdac71a5d"}]}, 0x424}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_DEL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc004}, 0x8004) madvise$auto(0x0, 0x3, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6227, 0x1000, 0x0, 0x100000000, 0xffffffffffffffff) socket(0x26, 0x80805, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x1f53, 0x2000000000002) r5 = open(&(0x7f0000000000)='./file0\x00', 0x4bb43, 0x100) fanotify_mark$auto(0x0, 0x201, 0x4, r5, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mlockall$auto(0x7) r6 = socket(0x2, 0x3, 0xa) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x2, 0x8, 0x0) r7 = socket(0x2, 0x80802, 0x0) r8 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000080), r7) sendmsg$auto_NLBL_CIPSOV4_C_LISTALL(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x401020}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, r8, 0x800, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20044081}, 0x4) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/clear_refs\x00', 0x80002, 0x0) mmap$auto(0x0, 0x2, 0xeb7, 0xeb1, 0x401, 0x8000) executing program 2: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0x7}, 0x3) program crashed: KASAN: slab-out-of-bounds Read in nvmet_root_discovery_nqn_show bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 29, 6, 15, 21, 10, 30, 10] detailed listing: executing program 3: mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x40802, 0x0) r0 = socket(0x15, 0x5, 0x0) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r1, 0xc0105702, &(0x7f0000000080)={0x6, 0x0, r0}) r3 = getsockopt$auto(r0, 0x114, 0x271b, 0xfffffffffffffffc, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32=r7, @ANYBLOB="1400018008000200060000000800010003"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, r9, 0x301, 0x70bc2b, 0x25dfdc02, {}, [@ETHTOOL_A_RSS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8086}, 0x4010) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000001600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000180)={0x13f8, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff9}]}, @ETHTOOL_A_FEATURES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8001}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1b4, 0x3, 0x0, 0x1, [@nested={0x4, 0x84}, @nested={0x1aa, 0x93, 0x0, 0x1, [@nested={0x4, 0x11f}, @typed={0xb5, 0xd4, 0x0, 0x0, @binary="904f696e3e6b68e53513727371ecd2c50e52e563ca3442758f827d63786d8be8d26a7b23682b9882601d106a476ced955f67024c0865c9e2252f0ff0c6d85e2848c2984f0f449886431361aa344862f761248a465f1559c5d3709e7e785159a5ee10ecbad4684140b9c36c30bb80aa37114fd6059961dd2730ebc91b266c4e61e6b9728f46ef2c03b703c0b2878097fc0260ad107544176bce23a4d2abcfed363bd3233fd1fe59ca23e0bd82db8c937634"}, @generic="ecc8aa4ab36cdcab3864b24e8c2ef6c788dda03d9bb53e21d4d7e168af74e77ba3b7cc0a518c505713b7a849a49571e5f3efe8f5a864b3fecc02163042a1173f0d7ea76e3efb1bf351dbdd4ed97bfad0b7edf733da8d9239e0a9e6884a0ff16df657eae209eb8a80dff51ecd66f7df7f86da6d22e5ae7c6f8dd5a7fb19149f6c212cc4a18a98463dcf543dcc83aa4c5f5c6c9a121ac760d72013bbb8da043746c1df5a19801fd5dd7d7365908b9312052d69e6361c90cd24bd6875b17125fe43b0b3b79569f2d76bc5a3a4d9e4ec0d46b1ace6cb68fb799f0243211b861c41f79fc6cd6bcb0c69e371e3"]}]}, @ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1038, 0x3, 0x0, 0x1, [@nested={0x1010, 0x117, 0x0, 0x1, [@nested={0x4, 0x12c}, @typed={0x8, 0x8f, 0x0, 0x0, @ipv4=@empty}, @generic="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"]}, @typed={0x14, 0x128, 0x0, 0x0, @ipv6=@mcast2}, @typed={0xc, 0x89, 0x0, 0x0, @u64=0xfffffffffffffff8}, @typed={0x4, 0x7b}]}, @ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_FEATURES_WANTED={0x5, 0x3, 0x0, 0x1, [@generic="8d"]}, @ETHTOOL_A_FEATURES_WANTED={0xc0, 0x3, 0x0, 0x1, [@nested={0xb1, 0xc0, 0x0, 0x1, [@typed={0x4, 0x38}, @generic="d5a82948741c4b69aa2c6cef5905f34ca5cbae4336a9c14c42f81baf58333f751d9d86897dfc680ccd6b667613a1386c777f9f2880b0428cb9305aec528b337a1600760115988e5debc6baa0ff2b1c0d5dd8efff298e57fa35689e68fefd0ed876fb9d7150c5a9b4fd66c3dfccf944182f85456f5a19b83021a64fee5d42bad28da3646914f0d1ca8daa3a16a009e7438594476947700521d90b936374be0cd32b2175960d3a29f7ce"]}, @typed={0x8, 0x33, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x13f8}, 0x1, 0x0, 0x0, 0x4040005}, 0x4000040) shmctl$auto(0x0, 0xc, 0x0) executing program 0: mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) (async) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) r0 = socket(0x1e, 0x5, 0x2dd) (async) mmap$auto(0x6, 0x400008, 0xdf, 0x9b72, 0x2, 0x7ffe) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 32) io_uring_setup$auto(0x6, 0x0) (async) madvise$auto(0x0, 0x3, 0x400) open(0x0, 0x1a1043, 0x2a) (async) bind$auto(0x3, 0x0, 0x6b) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) (async) connect$auto(r0, &(0x7f0000000040)=@can, 0x8) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002900fedbdf254a0000000800030037bfbe6a75bb55c0351b6798e09bb1150cd7e98ec6", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) (async) unshare$auto(0x40000080) (async) socket(0xa, 0x3, 0x3a) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) (async) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r0) (async) mbind$auto(0x0, 0x100080004, 0x8, 0x0, 0x6, 0x9) (async) connect$auto(0xffffffffffffffff, 0x0, 0x55) (async) mmap$auto(0x0, 0x5, 0x3, 0x77010, 0x3, 0x8000) (async) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0x20200, 0x15) executing program 2: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x80002, 0x73) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) executing program 1: rt_sigaction$auto(0x1, &(0x7f00000001c0)={&(0x7f0000000080)=0x0, 0x7fffffffffffffff, 0x0, {0x5}}, 0x0, 0x8) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) unshare$auto(0x4) rt_sigaction$auto(0x4, &(0x7f0000000300)={&(0x7f0000000240)=0x0, 0x0, 0x0, {0x1}}, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlockall$auto(0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x0, 0x0) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000640), 0x201, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) clock_settime$auto(0x9, &(0x7f0000000000)={0x7, 0xb66b}) r0 = gettid() rt_sigqueueinfo$auto(r0, 0x1, 0x0) executing program 3: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setgroups$auto(0xe32, &(0x7f0000000040)=0x9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fffe000) madvise$auto(0x0, 0x53, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) pselect6$auto(0x101, &(0x7f0000000080)={[0x6, 0x7, 0xffffffffffffffff, 0x3, 0x1, 0x6, 0x9, 0x7, 0x1, 0x4, 0x9, 0x4, 0x4, 0x7, 0xcb2a, 0x9]}, &(0x7f0000000100)={[0xffff, 0x3, 0xfffffffffffff31a, 0x7, 0x590, 0x8, 0x1d4, 0x4, 0x6, 0x7, 0x5, 0x7, 0x80, 0x8, 0x0, 0x1]}, &(0x7f0000000180)={[0xa9, 0x4, 0x4, 0x1, 0x3, 0x6, 0xcbd0, 0x200000001, 0x1f, 0xfffffffffffffffd, 0x7ff, 0x8000000000000001, 0x4, 0x7f, 0x91, 0x7]}, &(0x7f0000000000)={0x899, 0x5}, &(0x7f0000000200)) ppoll$auto(&(0x7f0000000280)={0xffffffffffffffff, 0x6, 0x9}, 0x9, &(0x7f00000002c0)={0x8000000000000001, 0x8001}, &(0x7f0000000300)={0x7ff}, 0x8) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r2, 0x1002, 0x0, 0x0, 0x0, 0x2) r3 = memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00T\x00'/40, 0x9) fallocate$auto(0x3, 0x0, 0xe, 0x8ec8) finit_module$auto(0x3, 0xfffffffffffffffe, 0x2) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040800}, 0x40850) mq_notify$auto(r3, &(0x7f0000000200)={@sival_int=0x8, @raw=0x8, 0xeb, @_tid=r2}) mremap$auto(0x6, 0xad, 0x6, 0x7, 0x4) executing program 2: mknod$auto(&(0x7f0000000100)='X))\x00', 0x83c1, 0x803) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mlock$auto(0xfbe8, 0x3) mlock$auto(0x7c88, 0x7ffe) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x34, 0x65f, 0x1ffde, 0x7, 0x3, 0x20000002, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x200000000001, 0x0, 0xffffffffefffffff, 0x200000000000004, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x1000, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x10006]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xe}}, 0x6, 0x4008) executing program 2: madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x4, 0x4000000020df, 0x40eb2, 0x402, 0x300000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f00000008c0)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0xc, 0x4, 0x0, 0x1, [@nested={0x8, 0x29, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b4a, 0x9) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x424, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}, @HWSIM_ATTR_NO_VIF={0x4}, @HWSIM_ATTR_MULTI_RADIO={0x4}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}, @HWSIM_ATTR_PERM_ADDR={0x29, 0x16, "fcda6e4144739456eca21047435b1fe828ba98ccb550c3d4d332d53f96e1be02e896a1a2b0"}, @HWSIM_ATTR_MULTI_RADIO={0x4}, @HWSIM_ATTR_TX_INFO_FLAGS={0xfa, 0x15, "6031f0c376d33fd9e693abb9cb17ad677fb44c0eb7594a288a96e332ab44ef5b2a677f3f4a9c9a95b669ad0513d6b6c129e9e1fe2a4d43989169abb793decd8e464ebeec02f3db9706ed00a0a1e0ef33ef2a94a21d0487097442fb60c46f3b63aa81cf74638de43824c33b55e8325f3fc424cf376e130e2c645edb60b9e7e5a3b4d4b4b47598ad6874265aa33465f6d7e72801d7537fc1b2a7545d44f30100ae4f9a8c240f92b719f8790567e76f2ca1442052a646fe6c5287e5de235606f2846b34e2bf323a0b9fcfb3c8d8669280e06dd7ebfd877667f39d9c5d7d4e2b3222c0f52407e277a916d1a8dfddeaaba5b16a29bbe1bda1"}, @HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_FRAME={0x294, 0x3, "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"}, @HWSIM_ATTR_ADDR_TRANSMITTER={0x39, 0x2, "028897c197e183be4a2f29b655475324700bbcf572a2257ed7578abaa9a17a07cfb52f95b506366da5bc157dfddea430cfdac71a5d"}]}, 0x424}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_DEL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc004}, 0x8004) madvise$auto(0x0, 0x3, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6227, 0x1000, 0x0, 0x100000000, 0xffffffffffffffff) socket(0x26, 0x80805, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x1f53, 0x2000000000002) r5 = open(&(0x7f0000000000)='./file0\x00', 0x4bb43, 0x100) fanotify_mark$auto(0x0, 0x201, 0x4, r5, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mlockall$auto(0x7) r6 = socket(0x2, 0x3, 0xa) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x2, 0x8, 0x0) r7 = socket(0x2, 0x80802, 0x0) r8 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000080), r7) sendmsg$auto_NLBL_CIPSOV4_C_LISTALL(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x401020}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, r8, 0x800, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20044081}, 0x4) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/clear_refs\x00', 0x80002, 0x0) mmap$auto(0x0, 0x2, 0xeb7, 0xeb1, 0x401, 0x8000) executing program 2: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0x7}, 0x3) program did not crash bisect: testing without sub-chunk 3/3 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 26, 6, 9, 7, 14, 17, 3, 10] detailed listing: executing program 3: close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x13, 0x3, 0x180000000) r0 = socket(0x10, 0x2, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/version\x00', 0x0, 0x0) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000140)='-$!\x00\xfa\xef\t\xa4\xe9\xb2r\x8cQ \xa6\xb7v\x93\xb6\b\xba\xfe\x1e\xab\xe7KC6z\x1a\xf0\x83~\xcd\x9a\x83\b\xb6\xb2\xd6PR\xbe\xec\xea\t\xde.\xc6%\x16\xc8\\\xb2\xe86\xe1\x84k\xa8\x02\xcb\xc9 \x1flY\xcb\xfa\xd9\xe0\xb8\x93\x12\xbc\xcf\xc2\'\x90\x9d\x1c\xb0\x1d\xb8\x80\xb4V\x9c\xf6J\xe8\"\xef@\xcd t\xe8\xe9Ip\xa74\x82\xb0\x9a\xecj\x9f\x8f\x9a\xe22\x8e\xce1\x9d\x0fW\xe7\xfb\"[\x17\x83\xfc}\xc7\xab\x93\xe4\x1ekP1\x01\bB\xbf*a\x93\xbd\xa7\xc8', 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) executing program 3: r0 = socket(0x11, 0x2, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0xfebf0c436aa031f1) seccomp$auto(0x1, 0x8, &(0x7f0000000400)) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptywd\x00', 0x40c01, 0x0) getpeername$auto(r0, 0x0, 0x0) cachestat$auto(r0, &(0x7f0000000040)={0x1ff, 0x6}, &(0x7f00000000c0)={0x41e9, 0x2, 0x2, 0x8, 0x3ff}, 0xfffff000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES8], 0x24}, 0x1, 0x0, 0x0, 0x20040014}, 0x2600c880) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) mmap$auto(0x0, 0x8, 0x1040000016, 0x13, 0x3, 0x400180000000) read$auto(0x3, 0x0, 0x7) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/geneve0/proxy_ndp\x00', 0x82000, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) executing program 1: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_3={0x1c, 0xa8b, 0x18c, 0x6a, 0x0, 0x3405, 0x3, 0x9, 0xfffffff5, "63ace816ef77cf00", 0x0, 0x549, 0x4, 0x7, 0x0, 0x1009, 0x4, 0xffffffffffffffff, 0xe, 0x2000005, @attach_btf_obj_fd=0x3, 0x166, 0x1, 0x4000000000006, 0x8, 0x48200003, 0xa7be}, 0x7) read$auto_proc_setgroups_operations_base(r0, &(0x7f00000000c0)=""/90, 0x5a) socket(0x3, 0x6, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(0x3, 0x6, 0xb, 0x0, 0x0) executing program 2: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) executing program 0: close_range$auto(0x0, 0xfffffffffffff000, 0x2) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d96, 0x110, 0x4}, 0x77, 0x0, 0x0, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000000)=@link_create={@map_fd=r0, @target_ifindex=r1, 0x7, 0x10001, @bpf_attr_link_create_4_1={0xd}}, 0xa3) bpf$auto(0x15, 0x0, 0x0) executing program 3: close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x0, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x3, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffff8, 0x3, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000]}, 0x1fe, 0x200d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000034c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8, 0x2, r3}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8, 0x2, r3}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) socket(0x11, 0x80000, 0x6) setsockopt$auto(0x3, 0x0, 0x23, 0x0, 0x4) executing program 1: mmap$auto(0x0, 0x20009, 0x7ff, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x0) pipe$auto(0x0) socket(0xa, 0x2, 0x88) socketpair$auto(0x1e, 0x1, 0x4, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TCFLSH2(r0, 0x541b, 0xfdfd) executing program 2: r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/hugetlb.2MB.numa_stat\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/17, 0x11) shmat$auto(0x1, &(0x7f0000000000)='./cgroup.cpu/hugetlb.2MB.numa_stat\x00', 0x6) executing program 2: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0x7}, 0x3) program crashed: KASAN: slab-out-of-bounds Read in nvmet_root_discovery_nqn_show bisect: the chunk can be dropped bisect: split chunks (needed=true): <8> bisect: split chunk #0 of len 8 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 14, 17, 3, 10] detailed listing: executing program 0: close_range$auto(0x0, 0xfffffffffffff000, 0x2) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d96, 0x110, 0x4}, 0x77, 0x0, 0x0, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000000)=@link_create={@map_fd=r0, @target_ifindex=r1, 0x7, 0x10001, @bpf_attr_link_create_4_1={0xd}}, 0xa3) bpf$auto(0x15, 0x0, 0x0) executing program 3: close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x0, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x3, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffff8, 0x3, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000]}, 0x1fe, 0x200d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000034c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8, 0x2, r3}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8, 0x2, r3}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) socket(0x11, 0x80000, 0x6) setsockopt$auto(0x3, 0x0, 0x23, 0x0, 0x4) executing program 1: mmap$auto(0x0, 0x20009, 0x7ff, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x0) pipe$auto(0x0) socket(0xa, 0x2, 0x88) socketpair$auto(0x1e, 0x1, 0x4, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TCFLSH2(r0, 0x541b, 0xfdfd) executing program 2: r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/hugetlb.2MB.numa_stat\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/17, 0x11) shmat$auto(0x1, &(0x7f0000000000)='./cgroup.cpu/hugetlb.2MB.numa_stat\x00', 0x6) executing program 2: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0x7}, 0x3) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 26, 6, 9, 10] detailed listing: executing program 3: close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x13, 0x3, 0x180000000) r0 = socket(0x10, 0x2, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/version\x00', 0x0, 0x0) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000140)='-$!\x00\xfa\xef\t\xa4\xe9\xb2r\x8cQ \xa6\xb7v\x93\xb6\b\xba\xfe\x1e\xab\xe7KC6z\x1a\xf0\x83~\xcd\x9a\x83\b\xb6\xb2\xd6PR\xbe\xec\xea\t\xde.\xc6%\x16\xc8\\\xb2\xe86\xe1\x84k\xa8\x02\xcb\xc9 \x1flY\xcb\xfa\xd9\xe0\xb8\x93\x12\xbc\xcf\xc2\'\x90\x9d\x1c\xb0\x1d\xb8\x80\xb4V\x9c\xf6J\xe8\"\xef@\xcd t\xe8\xe9Ip\xa74\x82\xb0\x9a\xecj\x9f\x8f\x9a\xe22\x8e\xce1\x9d\x0fW\xe7\xfb\"[\x17\x83\xfc}\xc7\xab\x93\xe4\x1ekP1\x01\bB\xbf*a\x93\xbd\xa7\xc8', 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) executing program 3: r0 = socket(0x11, 0x2, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0xfebf0c436aa031f1) seccomp$auto(0x1, 0x8, &(0x7f0000000400)) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptywd\x00', 0x40c01, 0x0) getpeername$auto(r0, 0x0, 0x0) cachestat$auto(r0, &(0x7f0000000040)={0x1ff, 0x6}, &(0x7f00000000c0)={0x41e9, 0x2, 0x2, 0x8, 0x3ff}, 0xfffff000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES8], 0x24}, 0x1, 0x0, 0x0, 0x20040014}, 0x2600c880) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) mmap$auto(0x0, 0x8, 0x1040000016, 0x13, 0x3, 0x400180000000) read$auto(0x3, 0x0, 0x7) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/geneve0/proxy_ndp\x00', 0x82000, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) executing program 1: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_3={0x1c, 0xa8b, 0x18c, 0x6a, 0x0, 0x3405, 0x3, 0x9, 0xfffffff5, "63ace816ef77cf00", 0x0, 0x549, 0x4, 0x7, 0x0, 0x1009, 0x4, 0xffffffffffffffff, 0xe, 0x2000005, @attach_btf_obj_fd=0x3, 0x166, 0x1, 0x4000000000006, 0x8, 0x48200003, 0xa7be}, 0x7) read$auto_proc_setgroups_operations_base(r0, &(0x7f00000000c0)=""/90, 0x5a) socket(0x3, 0x6, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(0x3, 0x6, 0xb, 0x0, 0x0) executing program 2: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) executing program 2: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0x7}, 0x3) program crashed: KASAN: slab-out-of-bounds Read in nvmet_root_discovery_nqn_show bisect: the chunk can be dropped bisect: split chunks (needed=true): <4> bisect: split chunk #0 of len 4 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 9, 10] detailed listing: executing program 1: mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_3={0x1c, 0xa8b, 0x18c, 0x6a, 0x0, 0x3405, 0x3, 0x9, 0xfffffff5, "63ace816ef77cf00", 0x0, 0x549, 0x4, 0x7, 0x0, 0x1009, 0x4, 0xffffffffffffffff, 0xe, 0x2000005, @attach_btf_obj_fd=0x3, 0x166, 0x1, 0x4000000000006, 0x8, 0x48200003, 0xa7be}, 0x7) read$auto_proc_setgroups_operations_base(r0, &(0x7f00000000c0)=""/90, 0x5a) socket(0x3, 0x6, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(0x3, 0x6, 0xb, 0x0, 0x0) executing program 2: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) executing program 2: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0x7}, 0x3) program crashed: KASAN: slab-out-of-bounds Read in nvmet_root_discovery_nqn_show bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 10] detailed listing: executing program 2: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) executing program 2: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0x7}, 0x3) program crashed: KASAN: slab-out-of-bounds Read in nvmet_root_discovery_nqn_show bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 2 programs left: executing program 2: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) executing program 2: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0x7}, 0x3) bisect: trying to concatenate bisect: concatenate 2 entries minimizing program #0 before concatenation testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 10] detailed listing: executing program 0: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) executing program 2: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0x7}, 0x3) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 10] detailed listing: executing program 0: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) executing program 2: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0x7}, 0x3) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 10] detailed listing: executing program 0: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) executing program 2: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0x7}, 0x3) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 10] detailed listing: executing program 0: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) executing program 2: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0x7}, 0x3) program crashed: KASAN: slab-out-of-bounds Read in nvmet_root_discovery_nqn_show testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 10] detailed listing: executing program 0: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) executing program 2: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0x7}, 0x3) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 10] detailed listing: executing program 0: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) executing program 2: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0x7}, 0x3) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 10] detailed listing: executing program 0: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) executing program 2: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0x7}, 0x3) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 10] detailed listing: executing program 0: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) executing program 2: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0x7}, 0x3) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 10] detailed listing: executing program 0: close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) executing program 2: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0x7}, 0x3) program crashed: KASAN: slab-out-of-bounds Read in nvmet_root_discovery_nqn_show minimized 9 calls -> 7 calls minimizing program #1 before concatenation testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 9] detailed listing: executing program 2: close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) executing program 0: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) program crashed: KASAN: slab-out-of-bounds Read in nvmet_root_discovery_nqn_show testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8] detailed listing: executing program 2: close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) executing program 0: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) program crashed: KASAN: slab-out-of-bounds Read in nvmet_root_discovery_nqn_show testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 7] detailed listing: executing program 2: close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) executing program 0: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0xa000000) program crashed: KASAN: slab-out-of-bounds Read in nvmet_root_discovery_nqn_show testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 6] detailed listing: executing program 2: close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) executing program 0: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) program crashed: KASAN: slab-out-of-bounds Read in nvmet_root_discovery_nqn_show testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 5] detailed listing: executing program 2: close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) executing program 0: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) program crashed: KASAN: slab-out-of-bounds Read in nvmet_root_discovery_nqn_show testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 4] detailed listing: executing program 2: close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) executing program 0: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) program crashed: KASAN: slab-out-of-bounds Read in nvmet_root_discovery_nqn_show testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 3] detailed listing: executing program 2: close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) executing program 0: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400, 0x0) program crashed: KASAN: slab-out-of-bounds Read in nvmet_root_discovery_nqn_show testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 2] detailed listing: executing program 2: close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) executing program 0: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) program crashed: KASAN: slab-out-of-bounds Read in nvmet_root_discovery_nqn_show testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 1] detailed listing: executing program 2: close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) executing program 0: mmap$auto(0x0, 0x4000000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) program crashed: KASAN: slab-out-of-bounds Read in nvmet_root_discovery_nqn_show testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 0] detailed listing: executing program 2: close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) executing program 0: program crashed: KASAN: slab-out-of-bounds Read in nvmet_root_discovery_nqn_show minimized 10 calls -> 0 calls testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket$nl_generic-socket-openat$auto_configfs_file_operations_configfs_internal-mmap$auto-move_pages$auto-writev$auto detailed listing: executing program 0: close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) program crashed: KASAN: slab-out-of-bounds Read in nvmet_root_discovery_nqn_show bisect: concatenation succeeded found reproducer with 7 syscalls minimizing guilty program testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket$nl_generic-socket-openat$auto_configfs_file_operations_configfs_internal-mmap$auto-move_pages$auto detailed listing: executing program 0: close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket$nl_generic-socket-openat$auto_configfs_file_operations_configfs_internal-mmap$auto-writev$auto detailed listing: executing program 0: close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket$nl_generic-socket-openat$auto_configfs_file_operations_configfs_internal-move_pages$auto-writev$auto detailed listing: executing program 0: close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket$nl_generic-socket-mmap$auto-move_pages$auto-writev$auto detailed listing: executing program 0: close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket$nl_generic-openat$auto_configfs_file_operations_configfs_internal-mmap$auto-move_pages$auto-writev$auto detailed listing: executing program 0: close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close_range$auto-socket-openat$auto_configfs_file_operations_configfs_internal-mmap$auto-move_pages$auto-writev$auto detailed listing: executing program 0: close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) program crashed: KASAN: slab-out-of-bounds Read in nvmet_root_discovery_nqn_show testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-openat$auto_configfs_file_operations_configfs_internal-mmap$auto-move_pages$auto-writev$auto detailed listing: executing program 0: socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) program crashed: KASAN: slab-out-of-bounds Read in nvmet_root_discovery_nqn_show testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-openat$auto_configfs_file_operations_configfs_internal-mmap$auto-move_pages$auto-writev$auto detailed listing: executing program 0: socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, 0x0, 0x189002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, &(0x7f0000002bc0)={0x0, 0xfffffdef}, 0x3) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-openat$auto_configfs_file_operations_configfs_internal-mmap$auto-move_pages$auto-writev$auto detailed listing: executing program 0: socket(0x1e, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) writev$auto(0x4, 0x0, 0x3) program did not crash extracting C reproducer testing compiled C program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-openat$auto_configfs_file_operations_configfs_internal-mmap$auto-move_pages$auto-writev$auto program crashed: KASAN: slab-out-of-bounds Read in nvmet_root_discovery_nqn_show simplifying C reproducer testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-openat$auto_configfs_file_operations_configfs_internal-mmap$auto-move_pages$auto-writev$auto program crashed: KASAN: slab-out-of-bounds Read in nvmet_root_discovery_nqn_show testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-openat$auto_configfs_file_operations_configfs_internal-mmap$auto-move_pages$auto-writev$auto program did not crash testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-openat$auto_configfs_file_operations_configfs_internal-mmap$auto-move_pages$auto-writev$auto program crashed: KASAN: slab-out-of-bounds Read in nvmet_root_discovery_nqn_show testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-openat$auto_configfs_file_operations_configfs_internal-mmap$auto-move_pages$auto-writev$auto program crashed: KASAN: slab-out-of-bounds Read in nvmet_root_discovery_nqn_show testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-openat$auto_configfs_file_operations_configfs_internal-mmap$auto-move_pages$auto-writev$auto program crashed: KASAN: slab-out-of-bounds Read in nvmet_root_discovery_nqn_show testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-openat$auto_configfs_file_operations_configfs_internal-mmap$auto-move_pages$auto-writev$auto program crashed: KASAN: slab-out-of-bounds Read in nvmet_root_discovery_nqn_show testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-openat$auto_configfs_file_operations_configfs_internal-mmap$auto-move_pages$auto-writev$auto program crashed: KASAN: slab-out-of-bounds Read in nvmet_root_discovery_nqn_show testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-openat$auto_configfs_file_operations_configfs_internal-mmap$auto-move_pages$auto-writev$auto program crashed: KASAN: slab-out-of-bounds Read in nvmet_root_discovery_nqn_show reproducing took 1h15m46.111815313s repro crashed as (corrupted=false): ================================================================== BUG: KASAN: slab-out-of-bounds in string_nocheck lib/vsprintf.c:646 [inline] BUG: KASAN: slab-out-of-bounds in string+0x398/0x3d0 lib/vsprintf.c:728 Read of size 1 at addr ffff8880263c0b25 by task syz-executor329/5823 CPU: 0 UID: 0 PID: 5823 Comm: syz-executor329 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0xc3/0x620 mm/kasan/report.c:489 kasan_report+0xd9/0x110 mm/kasan/report.c:602 string_nocheck lib/vsprintf.c:646 [inline] string+0x398/0x3d0 lib/vsprintf.c:728 vsnprintf+0xc67/0x1870 lib/vsprintf.c:2848 snprintf+0xc8/0x100 lib/vsprintf.c:2983 nvmet_root_discovery_nqn_show+0x69/0x90 drivers/nvme/target/configfs.c:2250 fill_read_buffer fs/configfs/file.c:68 [inline] configfs_read_iter+0x40d/0x690 fs/configfs/file.c:88 __kernel_read+0x3f1/0xb50 fs/read_write.c:523 integrity_kernel_read+0x7f/0xb0 security/integrity/iint.c:28 ima_calc_file_hash_tfm+0x2c9/0x3e0 security/integrity/ima/ima_crypto.c:480 ima_calc_file_shash security/integrity/ima/ima_crypto.c:511 [inline] ima_calc_file_hash+0x1ba/0x490 security/integrity/ima/ima_crypto.c:568 ima_collect_measurement+0x8a7/0xa10 security/integrity/ima/ima_api.c:293 process_measurement+0x1271/0x2370 security/integrity/ima/ima_main.c:372 ima_file_check+0xc6/0x110 security/integrity/ima/ima_main.c:572 security_file_post_open+0x8e/0x210 security/security.c:3121 do_open fs/namei.c:3830 [inline] path_openat+0x1419/0x2d60 fs/namei.c:3987 do_filp_open+0x20c/0x470 fs/namei.c:4014 do_sys_openat2+0x17a/0x1e0 fs/open.c:1402 do_sys_open fs/open.c:1417 [inline] __do_sys_openat fs/open.c:1433 [inline] __se_sys_openat fs/open.c:1428 [inline] __x64_sys_openat+0x175/0x210 fs/open.c:1428 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f733fa0ca79 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffc342ba758 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f733fa0ca79 RDX: 0000000000189002 RSI: 0000000020000100 RDI: ffffffffffffff9c RBP: 000000000000fe6f R08: 0000000000000006 R09: 0000000000000006 R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc342ba76c R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 The buggy address belongs to the object at ffff8880263c0b00 which belongs to the cache kmalloc-64 of size 64 The buggy address is located 0 bytes to the right of allocated 37-byte region [ffff8880263c0b00, ffff8880263c0b25) The buggy address belongs to the physical page: page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880263c0300 pfn:0x263c0 flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) page_type: f5(slab) raw: 00fff00000000200 ffff88801ac418c0 ffffea0000ba8cd0 ffffea0000a178d0 raw: ffff8880263c0300 000000000020001f 00000001f5000000 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 35, tgid 35 (kworker/u8:2), ts 8598107284, free_ts 8552526219 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x2d1/0x350 mm/page_alloc.c:1558 prep_new_page mm/page_alloc.c:1566 [inline] get_page_from_freelist+0xfce/0x2f80 mm/page_alloc.c:3476 __alloc_pages_noprof+0x223/0x25b0 mm/page_alloc.c:4753 alloc_pages_mpol_noprof+0x2c9/0x610 mm/mempolicy.c:2269 alloc_slab_page mm/slub.c:2423 [inline] allocate_slab mm/slub.c:2589 [inline] new_slab+0x2c9/0x410 mm/slub.c:2642 ___slab_alloc+0xce2/0x1650 mm/slub.c:3830 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3920 __slab_alloc_node mm/slub.c:3995 [inline] slab_alloc_node mm/slub.c:4156 [inline] __kmalloc_cache_noprof+0xf6/0x420 mm/slub.c:4324 kmalloc_noprof include/linux/slab.h:901 [inline] kzalloc_noprof include/linux/slab.h:1037 [inline] percpu_ref_init+0xd9/0x400 lib/percpu-refcount.c:76 blk_alloc_queue+0x578/0x710 block/blk-core.c:447 blk_mq_alloc_queue+0x1a6/0x2e0 block/blk-mq.c:4339 scsi_alloc_sdev+0x890/0xd80 drivers/scsi/scsi_scan.c:337 scsi_probe_and_add_lun+0x789/0xda0 drivers/scsi/scsi_scan.c:1210 __scsi_scan_target+0x1ea/0x580 drivers/scsi/scsi_scan.c:1757 scsi_scan_channel drivers/scsi/scsi_scan.c:1845 [inline] scsi_scan_channel+0x149/0x1e0 drivers/scsi/scsi_scan.c:1821 scsi_scan_host_selected+0x302/0x400 drivers/scsi/scsi_scan.c:1874 page last free pid 57 tgid 57 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1127 [inline] free_unref_page+0x661/0x1080 mm/page_alloc.c:2659 vfree+0x174/0x950 mm/vmalloc.c:3383 delayed_vfree_work+0x56/0x70 mm/vmalloc.c:3303 process_one_work+0x958/0x1b30 kernel/workqueue.c:3229 process_scheduled_works kernel/workqueue.c:3310 [inline] worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Memory state around the buggy address: ffff8880263c0a00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc ffff8880263c0a80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc >ffff8880263c0b00: 00 00 00 00 05 fc fc fc fc fc fc fc fc fc fc fc ^ ffff8880263c0b80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc ffff8880263c0c00: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc ================================================================== final repro crashed as (corrupted=false): ================================================================== BUG: KASAN: slab-out-of-bounds in string_nocheck lib/vsprintf.c:646 [inline] BUG: KASAN: slab-out-of-bounds in string+0x398/0x3d0 lib/vsprintf.c:728 Read of size 1 at addr ffff8880263c0b25 by task syz-executor329/5823 CPU: 0 UID: 0 PID: 5823 Comm: syz-executor329 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0xc3/0x620 mm/kasan/report.c:489 kasan_report+0xd9/0x110 mm/kasan/report.c:602 string_nocheck lib/vsprintf.c:646 [inline] string+0x398/0x3d0 lib/vsprintf.c:728 vsnprintf+0xc67/0x1870 lib/vsprintf.c:2848 snprintf+0xc8/0x100 lib/vsprintf.c:2983 nvmet_root_discovery_nqn_show+0x69/0x90 drivers/nvme/target/configfs.c:2250 fill_read_buffer fs/configfs/file.c:68 [inline] configfs_read_iter+0x40d/0x690 fs/configfs/file.c:88 __kernel_read+0x3f1/0xb50 fs/read_write.c:523 integrity_kernel_read+0x7f/0xb0 security/integrity/iint.c:28 ima_calc_file_hash_tfm+0x2c9/0x3e0 security/integrity/ima/ima_crypto.c:480 ima_calc_file_shash security/integrity/ima/ima_crypto.c:511 [inline] ima_calc_file_hash+0x1ba/0x490 security/integrity/ima/ima_crypto.c:568 ima_collect_measurement+0x8a7/0xa10 security/integrity/ima/ima_api.c:293 process_measurement+0x1271/0x2370 security/integrity/ima/ima_main.c:372 ima_file_check+0xc6/0x110 security/integrity/ima/ima_main.c:572 security_file_post_open+0x8e/0x210 security/security.c:3121 do_open fs/namei.c:3830 [inline] path_openat+0x1419/0x2d60 fs/namei.c:3987 do_filp_open+0x20c/0x470 fs/namei.c:4014 do_sys_openat2+0x17a/0x1e0 fs/open.c:1402 do_sys_open fs/open.c:1417 [inline] __do_sys_openat fs/open.c:1433 [inline] __se_sys_openat fs/open.c:1428 [inline] __x64_sys_openat+0x175/0x210 fs/open.c:1428 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f733fa0ca79 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffc342ba758 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f733fa0ca79 RDX: 0000000000189002 RSI: 0000000020000100 RDI: ffffffffffffff9c RBP: 000000000000fe6f R08: 0000000000000006 R09: 0000000000000006 R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc342ba76c R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 The buggy address belongs to the object at ffff8880263c0b00 which belongs to the cache kmalloc-64 of size 64 The buggy address is located 0 bytes to the right of allocated 37-byte region [ffff8880263c0b00, ffff8880263c0b25) The buggy address belongs to the physical page: page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880263c0300 pfn:0x263c0 flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) page_type: f5(slab) raw: 00fff00000000200 ffff88801ac418c0 ffffea0000ba8cd0 ffffea0000a178d0 raw: ffff8880263c0300 000000000020001f 00000001f5000000 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 35, tgid 35 (kworker/u8:2), ts 8598107284, free_ts 8552526219 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x2d1/0x350 mm/page_alloc.c:1558 prep_new_page mm/page_alloc.c:1566 [inline] get_page_from_freelist+0xfce/0x2f80 mm/page_alloc.c:3476 __alloc_pages_noprof+0x223/0x25b0 mm/page_alloc.c:4753 alloc_pages_mpol_noprof+0x2c9/0x610 mm/mempolicy.c:2269 alloc_slab_page mm/slub.c:2423 [inline] allocate_slab mm/slub.c:2589 [inline] new_slab+0x2c9/0x410 mm/slub.c:2642 ___slab_alloc+0xce2/0x1650 mm/slub.c:3830 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3920 __slab_alloc_node mm/slub.c:3995 [inline] slab_alloc_node mm/slub.c:4156 [inline] __kmalloc_cache_noprof+0xf6/0x420 mm/slub.c:4324 kmalloc_noprof include/linux/slab.h:901 [inline] kzalloc_noprof include/linux/slab.h:1037 [inline] percpu_ref_init+0xd9/0x400 lib/percpu-refcount.c:76 blk_alloc_queue+0x578/0x710 block/blk-core.c:447 blk_mq_alloc_queue+0x1a6/0x2e0 block/blk-mq.c:4339 scsi_alloc_sdev+0x890/0xd80 drivers/scsi/scsi_scan.c:337 scsi_probe_and_add_lun+0x789/0xda0 drivers/scsi/scsi_scan.c:1210 __scsi_scan_target+0x1ea/0x580 drivers/scsi/scsi_scan.c:1757 scsi_scan_channel drivers/scsi/scsi_scan.c:1845 [inline] scsi_scan_channel+0x149/0x1e0 drivers/scsi/scsi_scan.c:1821 scsi_scan_host_selected+0x302/0x400 drivers/scsi/scsi_scan.c:1874 page last free pid 57 tgid 57 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1127 [inline] free_unref_page+0x661/0x1080 mm/page_alloc.c:2659 vfree+0x174/0x950 mm/vmalloc.c:3383 delayed_vfree_work+0x56/0x70 mm/vmalloc.c:3303 process_one_work+0x958/0x1b30 kernel/workqueue.c:3229 process_scheduled_works kernel/workqueue.c:3310 [inline] worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Memory state around the buggy address: ffff8880263c0a00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc ffff8880263c0a80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc >ffff8880263c0b00: 00 00 00 00 05 fc fc fc fc fc fc fc fc fc fc fc ^ ffff8880263c0b80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc ffff8880263c0c00: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc ==================================================================