last executing test programs: 6m16.678946772s ago: executing program 1 (id=397): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x14, 0x0, 0xd0d58b333228212f, 0x78bd2a, 0x25dfdbfd}, 0x14}}, 0x4000000) mmap$auto(0x8000000, 0x5, 0x72, 0x8b72, 0x2, 0x8000) r1 = pipe2$auto(&(0x7f0000000040)=r0, 0xffffffff) mmap$auto(0x0, 0x2020206, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) sendfile$auto(r4, r4, 0x0, 0x200002) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) read$auto(0xffffffffffffffff, 0x0, 0x71d) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) setsockopt$auto(0xffffffffffffffff, 0xfffffffd, 0x14, 0x0, 0x4) pread64$auto(0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffe01) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2a, 0x2, 0x0) sendfile$auto(0x6, 0x3, 0x0, 0xc01) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) pipe2$auto(&(0x7f0000000200)=r0, 0x1) ioctl$auto(r2, 0x0, r2) mprotect$auto(0x7, 0x7f, 0x2) 6m15.669793046s ago: executing program 1 (id=399): socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6b) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS1\x00', 0x20400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback}, 0x55) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/rpc/nfsd\x00', 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty31\x00', 0x8001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x7fff, 0xff, 0x0, 0x0, 0x7) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyea\x00', 0x1, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) 6m14.631345248s ago: executing program 1 (id=404): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) pipe2$auto(0x0, 0xfdd) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xa, 0x2000000000df, 0x9b72, 0x2, 0x7fff) ptrace$auto(0x10, 0x10000000000001, 0xffffffffffffff56, 0x868f) ustat$auto(0x1, &(0x7f0000000000)={0x6, 0x2, "b777e4d7b427", "f25dd5d44ba5"}) syz_clone3(0x0, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) readv$auto(0x3, 0x0, 0x1) 6m12.842346676s ago: executing program 1 (id=411): pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88ds\x1cJ\x99\x12:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xc1\xa8\xd5\xf9.=(\xeb\xd1\x14^\xbe\xa2', 0x19b5, 0x3) (async) r0 = socket(0x2, 0x80002, 0x73) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, r0, 0x7ff, 0x6, 0x0, 0x100000b, 0x5f, 0x2}, 0x10) (async) mprotect$auto(0x1ffff000, 0x8000000001000001, 0xd) bpf$auto(0x1a, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x2, 0x8, 0xffffffffffffffff, @relative_fd, 0x441b5c1ff}, 0x92) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000100), r1) sendmsg$auto_SEG6_CMD_SETHMAC(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xc0, r2, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0xaa, 0x4, "d9fe733220dc6c69510e59bbeecc4fb467a6a55a5dce7564aca615888995c79642ac9cb8623d6020f103f3870f8b0ee8d965384e0e0a22897f15e6ba523b9248f01ae59b44bc827efbc67cd21afd43543524d341b2c89adffa344ede0147514d4fc1549ae82c2f53d3a89284bb4289ef567240f051952b86a03d95febd400ead175d8f05fda787caccbb7bc09819513a4b82a00cd88dffef9b4c3a6ad810ceb5d7387d31d9fb"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r3 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000100), 0x182, 0x0) pwrite64$auto(r3, 0x0, 0x9, 0x7) (async) r4 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/smaps\x00', 0x101000, 0x0) read$auto_proc_pid_smaps_operations_internal(r4, &(0x7f0000000040)=""/93, 0x5d) r5 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r1) (async) r6 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/apparmor/exec\x00', 0x200, 0x0) read$auto_proc_pid_attr_operations_base(r6, 0x0, 0x0) sendmsg$auto_TASKSTATS_CMD_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010a2bbd7000fbdbdf25010000000e0004004e2d4e3a"], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) 6m12.421502929s ago: executing program 1 (id=414): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) r0 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0x15, 0x5, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) ioctl$auto(r1, 0x0, r0) 6m12.039214193s ago: executing program 1 (id=416): write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0xd, 0x0, 0x4}, 0x800009}, 0x5, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x31cd3c7c, 0xb1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001100)={'syz_tun\x00'}) connect$auto(r0, &(0x7f00000000c0)=@generic={0x5, "f562119237f5221d7a7ddea21751"}, 0xe) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x100000, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x3fff, 0xad3, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) clone$auto(0x9, 0x3, 0x0, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x20000010) recvmmsg$auto(0x3, 0x0, 0x80000001, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) 5m56.811119217s ago: executing program 32 (id=416): write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0xd, 0x0, 0x4}, 0x800009}, 0x5, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x31cd3c7c, 0xb1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001100)={'syz_tun\x00'}) connect$auto(r0, &(0x7f00000000c0)=@generic={0x5, "f562119237f5221d7a7ddea21751"}, 0xe) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x100000, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x3fff, 0xad3, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) clone$auto(0x9, 0x3, 0x0, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x20000010) recvmmsg$auto(0x3, 0x0, 0x80000001, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) 3m0.875157024s ago: executing program 0 (id=1193): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x8c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_MRU={0x0, 0x9, 0x900}, @OVS_PACKET_ATTR_ACTIONS={0x5c, 0x3, 0x0, 0x1, [@typed={0x0, 0x2e, 0x0, 0x0, @str='\x00'}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1080200005d8590828947"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) close_range$auto(0x2, 0x8, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000000c0), 0x480001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) poll$auto(&(0x7f0000003640)={r1, 0x20e, 0x6}, 0x6, 0x100000) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/jbd2/sda1-8/info\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0x5, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f00000000c0)=@ethernet, 0x55) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, 0x0, 0x44001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x4, 0x0) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002240)='/dev/cec17\x00', 0x181680, 0x0) ioctl$auto_CEC_DQEVENT(r2, 0xc0506107, 0x0) ioctl$auto_CEC_DQEVENT(r2, 0xc0506107, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 2m55.74223894s ago: executing program 0 (id=1219): ioctl$auto(0xc8, 0xffffffff800454dd, 0x4000000000008) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) mmap$auto(0x7fffffff, 0x4, 0x4, 0x292, 0x6, 0x8001) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_transaction_log_fops_(0xffffffffffffff9c, 0x0, 0x100, 0x0) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0xe6e) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x40400, 0x48) fchmod$auto(r0, 0x7439) fchown$auto(r0, 0x0, 0x400) openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/id\x00', 0x400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 2m51.154292504s ago: executing program 3 (id=1234): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/uid_map\x00', 0x80a01, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mlock$auto(0x81, 0xffff) close_range$auto(0x0, 0xfffff004, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(0x0, 0x261c2, 0x84) r2 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$auto(0xb, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x1ff, r2, @relative_id=0x23b9, 0xe600}, 0xf) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x2}, 0xc) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r0) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x400, 0xffffffff, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x50) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x1800, 0x9, 0x80000000, 0x16, r0, 0xffff) getgroups$auto(0x6, 0x0) 2m50.293294273s ago: executing program 3 (id=1237): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x4, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x103700, 0xa) r1 = memfd_secret$auto(0x0) ftruncate$auto(0x3, 0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x8, 0x7, 0x7f, 0x18, r0, 0x2) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xec, r2, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e20}, @NL80211_ATTR_RADAR_BACKGROUND={0x4}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x7, 0x13, "108510"}, @NL80211_ATTR_SCAN_SSIDS={0x4}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, 0xfffffffa}, @NL80211_ATTR_BSS_BASIC_RATES={0xc, 0x24, "8a33aaa7bdb33857"}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x200}, @NL80211_ATTR_REG_ALPHA2={0x9c, 0x21, "349358c8885366a0b3ff93440b05c883d511fe5057d13b5518b0c629c980a97bcb68f2d3b504672b960e7a016218e57202f84c1b7ff36809f7aa293df835594e24159b7918c0116a1728366c2debcc9ea5d8cdab9e42ffe9177129ee454b421a957d4cdcc0ff56107d190c55178fb269bf0bb0426c65e0fd813e5911939d6b4c8b005bfaf8df671d67573dda10fe051a2f74cdb3d9a608e8"}]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x60000) munmap$auto(0x80000000, 0x3532) 2m49.991921919s ago: executing program 0 (id=1238): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x2a, 0x1, 0x4) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) lsm_list_modules$auto(0x0, 0x0, 0x0) r1 = socket(0x2, 0x801, 0x106) getsockopt$auto(r1, 0x11c, 0x3, 0x0, 0x0) r2 = socket(0x2a, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r2) r5 = gettid() sendmsg$auto_NL802154_CMD_DISASSOCIATE(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\t\x00', @ANYRES16=r4, @ANYBLOB="000227bd7000fcdbdf2529000000050007000700000005001f000800000008000b0090c18f1508001c00", @ANYRES32=r5, @ANYBLOB="08002100050000000800160005000000"], 0x44}}, 0x859) ioctl$auto(0x1, 0x8983, 0x4) recvfrom$auto(0xffffffffffffffff, &(0x7f0000000040), 0x9, 0x3, 0x0, 0x0) mprotect$auto(0x49aa65ca, 0xa74d, 0x4) socketpair$auto(0xce, 0x8, 0x4, &(0x7f0000000080)=0x7) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f0000000040)={0x0, 0x34000}, 0x4, 0x0, 0x1}, 0xed7138c}, 0x2, 0x9) mmap$auto(0x0, 0x80000400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = socket(0x10, 0x2, 0x300) open(0x0, 0xa240, 0x15e) socket(0xa, 0x3, 0x3a) statmount$auto(0x0, &(0x7f0000000180)={0x40008, 0x1, 0x9, 0x3, 0x40, 0x943, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x9, 0x5, 0x2, 0x7, 0xffffffffffffffff, 0x9, 0xffff, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b40000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x8000000000000004, 0x0, 0x0, 0x0, 0x0, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80]}, 0x1fe, 0x81) r7 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r6, @ANYRES32=r0], 0x1ac}}, 0x40000) ioperm$auto(0x7, 0x6, 0x2) kcmp$auto(0x1, 0x1, 0x3, 0x85, 0x2) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/ping_group_range\x00', 0x202, 0x0) 2m48.99657953s ago: executing program 3 (id=1239): openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x484c0, 0x0) (async) r0 = openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x484c0, 0x0) r1 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x2, 0x0) r2 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) pread64$auto(r2, 0x0, 0x8, 0x80000001) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xfffffffffd, 0x200010, 0x7, 0x10, r0, 0x80000000008000) (async) mmap$auto(0xfffffffffd, 0x200010, 0x7, 0x10, r0, 0x80000000008000) read$auto(r1, &(0x7f0000000100)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0xf) socket(0x23, 0x2, 0x8) (async) socket(0x23, 0x2, 0x8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyd3\x00', 0x0, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyd3\x00', 0x0, 0x0) ioctl$auto(0x3, 0x5420, 0x38) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x9) (async) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x9) pipe$auto(&(0x7f0000000080)=0xffffffffffffffff) fspick$auto(r3, &(0x7f00000000c0)='./file0\x00', 0x8) 2m48.451639266s ago: executing program 3 (id=1241): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) (async, rerun: 32) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080)=0x2, 0xa, 0x0, 0x0, 0x0, 0x440a48d2) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) setrlimit$auto(0x1000000007, 0x0) dup$auto(0x1) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) fcntl$auto(0x3, 0x4, 0xa553) (async) mmap$auto(0x0, 0xc04, 0xfffffffffffffffe, 0x9b72, 0x2, 0xc7f6) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x2000c041) (async) bind$auto(0x3, 0x0, 0x6b) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x121041, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x8, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioperm$auto(0x7, 0x6, 0x2) (async, rerun: 32) ioctl$auto_RTC_PARAM_SET(0xffffffffffffffff, 0x40187014, &(0x7f0000000100)={0x5, @ptr=0xffffffffffffff7f, 0xf54}) (async, rerun: 32) madvise$auto(0x0, 0x200007, 0x8) 2m47.375973238s ago: executing program 3 (id=1245): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB], 0x4d0}}, 0x4000000) r3 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000000c0), r0) sendmsg$auto_OVS_METER_CMD_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0x7}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x7}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x2}, @OVS_METER_ATTR_CLEAR={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x850}, 0x20000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x8, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)={0x1c, 0x0, 0x30f4b0fcc8d9477d, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4040048) r6 = socket(0xa, 0x5, 0x84) sendto$auto(r6, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0x20682, 0x0) write$auto_lockdown_ops_lockdown(r9, &(0x7f0000000040)="3e928e", 0x3) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r10, @ANYRESOCT=r2], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80) 2m46.106600123s ago: executing program 3 (id=1248): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60301, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/gre0/gro_flush_timeout\x00', 0x80302, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_GET(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="f800d1c62b55bd7000fedbdf2512f44e7e493a92a91b8c7edce9e20d3c57fce3cc47e2773a77ab"], 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendfile$auto(r1, r1, 0x0, 0x3) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) (async) write$auto(0x3, 0x0, 0x100082) (async) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60301, 0x0) (async) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/gre0/gro_flush_timeout\x00', 0x80302, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$auto_TIPC_NL_MON_GET(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="f800d1c62b55bd7000fedbdf2512f44e7e493a92a91b8c7edce9e20d3c57fce3cc47e2773a77ab"], 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async) sendfile$auto(r1, r1, 0x0, 0x3) (async) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) 2m39.921181548s ago: executing program 0 (id=1256): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xc0, r0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, 0xfffffffa}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_QOS_MAP={0x39, 0xc7, "cae58eb4acd75419e664612df378c5bbc32237414f3549535fdfed22c10b6cf7a708d3b6a66715bae4ffba7f9be2a86bc9807b4673"}, @NL80211_ATTR_PMKR0_NAME={0x53, 0x102, "c343dd2d76d63b9a1c81e0cd6e0cfa2419e413d8bb695a8faef9014bacf68b28b57f6c24dbeaa63fd1b43d0876ec73f9ef5a980dc860da0f9bc8a8e0a0c468f68007c64fd9f1fa18b5b19205f8541a"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000c0) brk$auto(0x10001) brk$auto(0x7) brk$auto(0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vhci_hcd.11/usb32/32-0:1.0/usb32-port8/over_current_count\x00', 0x10000, 0x0) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cec12\x00', 0x400881, 0x0) sendmmsg$auto(r1, &(0x7f0000001400)={{&(0x7f0000000280)="29ad5a93447d5a8e9e67a789ffa426210e299118aefa595511a2e064ff8dd93ec39f1c37c46ecabe927d8f9bddc26cf477b28ccc3e339be17c59a6cce8ed8e8378ff84d5faac1cf990dbc93379f76ddd54f06bfd6aa1eaf0ea19b00ed1a0c90499b51384f8035b95b1ee4ab35ce1ded00b9f44eb10683f57fa2a965930b0a504de609000095c5d8ffd1670bca8a53e98acca0398ae557e", 0x6c, &(0x7f00000003c0)={&(0x7f0000000340)="0059b1516b356218910a42248bf4ccaa7ff6f8e6d02e0695bbb7b11635f3b411bdfb0a8c7ccb3c5fcc0b6fb2de94b29047439ac9dab17d76c364bb6ed75e99f795fd423d8fe46509dde214dd1d17e04a8b4a7f13a5eb60f53c32d4edb78676396d6279aa98243c25cf0d6988a5f6a43d89248cf5a0b084a2add63e6e", 0x7}, 0x3, &(0x7f0000000400)="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", 0x7fffffff, 0x4}, 0x9}, 0x9, 0x80000000) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'geneve1\x00', 0x0}) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000028c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002880)={&(0x7f0000001500)={0x1344, r2, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x10f8, 0x2b, 0x0, 0x1, [@nested={0x14, 0xf9, 0x0, 0x1, [@typed={0x4, 0x113}, @typed={0xc, 0x105, 0x0, 0x0, @u64=0x9}]}, @nested={0x10e0, 0x8c, 0x0, 0x1, [@nested={0x4, 0x91}, @generic="8b898231911c2659adf6fa74314ab8496231ae54c4dab63c29c86016969600c5aa27600f1c1457e53ffad10117d1b1bf3b6eac2d6eb1a1c4cbaeb997deec39ab643cc836c82ea152fe984d5374a2f9146b2dac244f66018b8b7694de09a51985e29459e0e7c6cba7ace87aacc4f1c80a29d85240e91fff73dc9d676b338153e8f829bbd17555c0e0f3ddb49433ff0349a630842404e2d31dd8dcfad8ba7946afb949981ff0bd4d565919a00183fc23ede11c4833204dca06aab104078c16d5dcfe5b2bfa79eeb7a8f10f32e3b2904a82bc67d491c5ffe956", @generic="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"]}]}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PEER={0x228, 0x28, 0x0, 0x1, [@nested={0xc6, 0x34, 0x0, 0x1, [@generic="153d9d81332be030e098be592ac245a64611846ac7463793066998c11193bf3ac3bc46", @nested={0x4, 0x98}, @nested={0x4, 0x134}, @nested={0x4, 0x8d}, @generic="8ddc7a185f6365fc327e69e595ed53f0be40bd5640dbe2c92203ca60af3159423c5cfad803b1d4b2cc25652a8908d0124c53245de5a35243d476ad90346b38e4282740257fd8acc1c47dd7ea2ecfa481fea2dfff608e75168cf9dc5ec500063079d46245a77c9b83616344e9e1443b3f66c96d72584294d386ed08ac3d82f3b6b90804a454932e2ddb9507856a7ea44020af88"]}, @nested={0x8, 0x100, 0x0, 0x1, [@nested={0x4, 0x137}]}, @generic="8bb4f089d73d0d4e2646bba545952c7c98eef01b152268efb89b0324bf3950d53a1e61f6d5358b18d9373fa0e63be754e03dffaa7fa579f0668b43afde74efe0cd9293ad980c6435006d09df873353e9341f9e9e5688de020e0b8fbf691930265aa8953e", @nested={0xf0, 0x64, 0x0, 0x1, [@nested={0x4, 0xe9}, @generic="eba39d648645203134373d9ee8b5ac30d9841bf9ede3781546d711973ae358169303b5147a9fc712395e8c84a4542a5f9f0a62d81dc06ead32dd4e10c42bdf3759cd60dc17b3aa8d0991d214a256d37b220dd32b7514188f63655a0ee460ca7d2694f2c5114715b66acce94fdd3ee7a606ad68cdefaee9e2878a5f73a3a0544ed6347833ea9ba89210194287269df88396a5ab20260590ec398d5ab3fd15567237ef39c32947c09ba7006fcb7766f2b60efe42f1afd5e19921729112445a871de1cba8cd490b7d235cb6dce75d2db1c160722935ba90b2ab3c7d11ccbd03f6498eecb9233f7b2be1"]}]}]}, 0x1344}, 0x1, 0x0, 0x0, 0x8000}, 0x0) brk$auto(0x5) r4 = gettid() r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000002900), r5) sendmsg$auto_NFSD_CMD_LISTENER_GET(r5, &(0x7f0000002a00)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4044880) r6 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000002a40), 0x800, 0x0) ioctl$auto_snd_seq_f_ops_seq_clientmgr(r6, 0x7fffffff, &(0x7f0000002a80)="bffded398db4c6e88ae1e164dbe0eb87f07202457b212d39ea1e03b0b9e2f07d314c65f03b2e9ca60d6d77208ca382115e5e93051abf73a5749949a9d5e94fd3a4812d575fd0aeee870a2216b2bd8ec16f813c837a8b5ff204bf9c8e231935bb2d6b47f78c7ca3648f43d04bfc3b1e842f200fd8f68d191ae6a38993a390d3d4979039058c9fffc7d8612b8ae84ea03c012d7480b4acc14cf5a1a5bcdb65f058159aa3054639beb7cf875d57") r7 = syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000002b80), r5) sendmsg$auto_NET_DM_CMD_CONFIG_GET(r5, &(0x7f0000002d00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0xc4, r7, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NET_DM_ATTR_TRUNC_LEN={0x8, 0x9, 0xe6}, @NET_DM_ATTR_TRUNC_LEN={0x8, 0x9, 0x4fe6369f}, @NET_DM_ATTR_ALERT_MODE={0x5, 0x1, 0xd}, @NET_DM_ATTR_TRUNC_LEN={0x8, 0x9, 0xff}, @NET_DM_ATTR_SW_DROPS={0x4}, @NET_DM_ATTR_QUEUE_LEN={0x8, 0xb, 0x6}, @NET_DM_ATTR_UNSPEC={0x82, 0x0, "f43792e8b631d98b0cdb8eb3742589599231fb41e61d658e6313fac3707d2208d4ea7b3791479ae6f64be70aa1c7c2d3e393525bbac9dd2d89754976f68bc8e7437d7cc913476657f40a564551cf8eeeebf466c941816908d173a20384543c71d9de51bbecefe273fd2d799ac29eb31e0931efad6af1918069c5423e2f92"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x44041}, 0x4000040) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000002d40), r8) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000002d80), r5) r9 = pipe$auto(&(0x7f0000002dc0)=r5) ioctl$auto(r9, 0x2, 0xffffffffffffffff) mount_setattr$auto(r10, &(0x7f0000002e00)='./file0\x00', 0x1ff, &(0x7f0000002e40)={0xe, 0x44, 0x8000000000000000, @raw=0x2a}, 0x0) madvise$auto(0xd, 0x8001, 0xfffffff6) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, &(0x7f0000002e80)={{@raw=0x700000, 0x5, 0x95, 0x80000001, "e1ba4e7602fe0177ce66dd7211004a53f9ce5c41ddae460decad5a3e8c447e607f124cbf916285389bb0745b", @inferred=r4}, 0x6, 0x9, 0x1, @inferred=r4, @integer64={0x1000, 0x1, 0x4}, "f4db0d8f4430617423a100d60966d687a57f7c0d799c2f6271a5e413c9e631717c808d86e855928be830cb6274387702dda60624bfd1a1023b144467a7f6003d"}) init_module$auto(&(0x7f0000002fc0), 0x3, &(0x7f0000003000)='\x00') syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003040), r10) 2m39.581808262s ago: executing program 0 (id=1258): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/sg/device_strs\x00', 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, r0, 0x2) socket(0xa, 0x2, 0x73) (async) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/mem\x00', 0x401, 0x0) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0x8000, 0x0, 0x1000006) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x3) madvise$auto(0x0, 0x200000007fffffff, 0x1) r2 = prctl$auto(0x1000000003b, 0x40000007a, 0x4, 0x6, 0x7) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) (async) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) madvise$auto(0x1, 0x10000000004, 0x4066) (async) madvise$auto(0x1, 0x10000000004, 0x4066) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/pagemap\x00', 0x15efb14d96954a7, 0x0) (async) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/pagemap\x00', 0x15efb14d96954a7, 0x0) read$auto(r1, 0x0, 0x8000000a) bind$auto(0x3, 0x0, 0x6b) listen$auto(0x3, 0x81) accept$auto(r2, 0x0, 0x0) (async) accept$auto(r2, 0x0, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0x6, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) r3 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) (async) write$auto(0x4, 0x0, 0x100082) setsockopt$auto(r3, 0x1, 0x20000004, 0x0, 0xfffffff7) 2m35.25926439s ago: executing program 0 (id=1267): mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x940, 0x1ffe0, 0x8003, 0x6, 0x6, 0x7, 0x5, 0x2, 0x9, 0x6, 0x9, 0x2, 0x3, 0x2, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7]}, 0x1fe, 0x7) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="04150000", @ANYRES16=0x0, @ANYBLOB="000826bd7000fcdbdf25030000003e000400b70a00002c4207000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x20008044) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc82, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r1 = prctl$auto(0x6, 0x3, 0xffffffffffffffff, 0x40000000, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="050323bd7000fbdbdf250600000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x8008}, 0x4000040) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000040), r1) sendmmsg$auto(r0, &(0x7f0000000580)={{&(0x7f0000000380)="387a565ade8aa41f587a39b87ac632dee92240e0138305052030cc7f7e6171915a942cedc9065a3978bfa4feb014369c6e79210f6debe39cf8806d90809bd653", 0x5, &(0x7f0000000480)={&(0x7f00000003c0)="d6a556739bef41e100bf605c500ee0b46c756cdae283a94a11cb5ddb73b0096a89e752bd3b088808e97022a63e39b73938e43abf1e9702a7f974b1bb6bd477a13889886105019002a67b26cf40eace9f9e4249c691f1f0ad7973c17048f8ab737d4c195a6e0d1ae27c06b88ca1385d824212f3d109e9881f525b088052e2ee5563271a654f980995750d1148d5cc4195ad1d73ebcd39cf4f6479076e82e1b1703e143b78174b10899d", 0x7}, 0x10001, &(0x7f00000004c0)="e1609b562d3ffecbaee411c34e006c85f5a4b1b5533103834a9444b37e8ee2189de8336fb41eb7566263a6d85992d18f2c850639f3049d078b18cbed200482f6c7db3d1ce495b61a2b8c4ff4ff483709cb185a8fbf303a1769c20270b5a13f46c4aa17f45e0b649d4e2b33cec28be88da90dff7693590b1ae688a9a0aa629c4a9d077a441e0d48c83cc2771512ed88", 0x100, 0x2}, 0x1}, 0x5, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r4 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x88600, 0x0) ioctl$auto_UBI_IOCATT(r4, 0x40186f40, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m31.027578891s ago: executing program 33 (id=1248): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60301, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/gre0/gro_flush_timeout\x00', 0x80302, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_GET(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="f800d1c62b55bd7000fedbdf2512f44e7e493a92a91b8c7edce9e20d3c57fce3cc47e2773a77ab"], 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendfile$auto(r1, r1, 0x0, 0x3) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) (async) write$auto(0x3, 0x0, 0x100082) (async) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60301, 0x0) (async) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/gre0/gro_flush_timeout\x00', 0x80302, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$auto_TIPC_NL_MON_GET(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="f800d1c62b55bd7000fedbdf2512f44e7e493a92a91b8c7edce9e20d3c57fce3cc47e2773a77ab"], 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async) sendfile$auto(r1, r1, 0x0, 0x3) (async) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) 2m20.144775475s ago: executing program 34 (id=1267): mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x940, 0x1ffe0, 0x8003, 0x6, 0x6, 0x7, 0x5, 0x2, 0x9, 0x6, 0x9, 0x2, 0x3, 0x2, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7]}, 0x1fe, 0x7) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="04150000", @ANYRES16=0x0, @ANYBLOB="000826bd7000fcdbdf25030000003e000400b70a00002c4207000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x20008044) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc82, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r1 = prctl$auto(0x6, 0x3, 0xffffffffffffffff, 0x40000000, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="050323bd7000fbdbdf250600000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x8008}, 0x4000040) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000040), r1) sendmmsg$auto(r0, &(0x7f0000000580)={{&(0x7f0000000380)="387a565ade8aa41f587a39b87ac632dee92240e0138305052030cc7f7e6171915a942cedc9065a3978bfa4feb014369c6e79210f6debe39cf8806d90809bd653", 0x5, &(0x7f0000000480)={&(0x7f00000003c0)="d6a556739bef41e100bf605c500ee0b46c756cdae283a94a11cb5ddb73b0096a89e752bd3b088808e97022a63e39b73938e43abf1e9702a7f974b1bb6bd477a13889886105019002a67b26cf40eace9f9e4249c691f1f0ad7973c17048f8ab737d4c195a6e0d1ae27c06b88ca1385d824212f3d109e9881f525b088052e2ee5563271a654f980995750d1148d5cc4195ad1d73ebcd39cf4f6479076e82e1b1703e143b78174b10899d", 0x7}, 0x10001, &(0x7f00000004c0)="e1609b562d3ffecbaee411c34e006c85f5a4b1b5533103834a9444b37e8ee2189de8336fb41eb7566263a6d85992d18f2c850639f3049d078b18cbed200482f6c7db3d1ce495b61a2b8c4ff4ff483709cb185a8fbf303a1769c20270b5a13f46c4aa17f45e0b649d4e2b33cec28be88da90dff7693590b1ae688a9a0aa629c4a9d077a441e0d48c83cc2771512ed88", 0x100, 0x2}, 0x1}, 0x5, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r4 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x88600, 0x0) ioctl$auto_UBI_IOCATT(r4, 0x40186f40, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5.968468109s ago: executing program 4 (id=1839): mlockall$auto(0x7) (async) set_mempolicy$auto(0x2005, &(0x7f0000000080)=0x87e, 0x4) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) (async) socket(0x18, 0x2, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xfffffffffffffffd, 0x40000008000) (async) ioperm$auto(0x6, 0x6, 0xfffffffd) (async) io_uring_setup$auto(0x1, 0x0) r0 = gettid() (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) kill$auto(r0, 0x11) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) (async) mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}}, 0x4000000) (async) mmap$auto(0x8000000, 0x5, 0x72, 0x8b72, 0x2, 0x8000) (async) r2 = pipe2$auto(0x0, 0xffffffff) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) sendfile$auto(r4, r4, 0x0, 0x200002) (async) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) socket(0x3a, 0xa, 0x0) 5.579257669s ago: executing program 4 (id=1843): mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x3, 0x67) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mq_notify$auto(0xffffffffffffffff, &(0x7f00000002c0)={@sival_ptr=&(0x7f0000000180)="db8022ddfb1b490ef5cfad5ffb78f032818013f1ae524f34727aba476808c1cc5715149903d72adb3147f637b7707d1d8759b7630a6b272690c910bc37c5531c1983f0b0b595443e50e2b5ac0593c92f0deeef93abaea48a6e7c024c7b9696dbd74d32bc1ebf14fd2a9cf20e4a9f7778ffee122a84f7cdbcf6569e742b0729bb1edf58c97fd78553d28fb3a8fd30925bf03c664ddb5c56", @raw=0x5, 0x1, @_sigev_thread={&(0x7f0000000280)=&(0x7f0000000240)=0xb0, &(0x7f0000000340)="01a85e7466e8ee5815a4ab5ebf2e1ac027273979b1691165291357d6267c09667b1c1ff8401f4d1241f829ad4d4810ed6c677d62b2f5623d144d927bc1099086b0ef875f5533d3664e9a6afa9f3bbc8d"}}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(0x0, 0x0, 0x18) getdents$auto(0x0, 0x0, 0x700) madvise$auto(0x1ffff000, 0x5510, 0x8) getsockopt$auto(0x4, 0x6, 0x4, 0x0, 0x0) setpriority$auto(0x7, 0x2, 0x5) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0x20000000) rseq$auto(&(0x7f0000000040)={0x9, 0x6, 0xe31, 0xc, 0x4, 0x81, "5bb57706e1582a77b2e1c22809bc313182377d05b8586249299b30b3e6ebb997141a0b4f204d4a845444441dca0920b03a6e95a37adf240ffc789749028f9215285f2ca4af8880c3c07fbce3d638f93da8724952555412e34095f84868b5841138b3baa6f3edc2b7981fcbccce9ec02590f95472f9c1c3d37d8e71a545bf2aaeb529c69195a75149a2ab8d3139b5532ce8a63a9358ee579a0c348fcb5dca9cd5abf74ef38d4e8f7b425fa1e60e3bf7cf5f347ab6ddf2"}, 0x9, 0x9, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) pkey_free$auto(0xfffffffd) ioctl$auto(0xc8, 0x801054db, 0xe) 3.749248856s ago: executing program 4 (id=1850): rseq$auto(&(0x7f0000000000)={0x10, 0x1, 0x802000000, 0x6, 0x80, 0x2, "fcc174c16e6ada"}, 0x8000, 0x1, 0xa) 3.594410855s ago: executing program 5 (id=1851): symlink$auto(&(0x7f0000000000)='\xe4\'+@\\+%\x00', 0x0) open$dir(&(0x7f0000000580)='\xe4\'+@\\+%\x00', 0x200000, 0x20) (async) r0 = open$dir(&(0x7f0000000580)='\xe4\'+@\\+%\x00', 0x200000, 0x20) readlinkat$auto(r0, &(0x7f00000005c0)='\x00', &(0x7f0000000600)='[\x00', 0xffff7412) (async) readlinkat$auto(r0, &(0x7f00000005c0)='\x00', &(0x7f0000000600)='[\x00', 0xffff7412) r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x42, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) getsockopt$auto(r1, 0x1f8934fe, 0x80000000, &(0x7f0000000180)='^\x00', &(0x7f00000001c0)=0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) connect$auto(0x3, 0x0, 0x54) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4, 0x4000000000e2, 0x40eb1, r2, 0x10000) r3 = syz_clone(0x40000, &(0x7f0000000200)="bac20e6f8c5ae7e4229a2761e7da63e6837c62354eb8e332d03d86effb372309d193497f4137e4fd6e4dbfbc3e81754e8bb63bf8bc16d7b2f64532394d88e3da7dbeb62f2410c13fcd15f0fcc6e2", 0x4e, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="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") wait4$auto(0x0, &(0x7f0000000740)=0xce, 0x4, &(0x7f0000000780)={{0x5, 0x6}, {0xc, 0x8}, 0x800, 0x9, 0x9, 0x1251, 0xe0000000000, 0x8001, 0xb04a, 0xffff, 0x76d, 0x101, 0x49c2000000000, 0x7, 0x0, 0x2}) (async) r4 = wait4$auto(0x0, &(0x7f0000000740)=0xce, 0x4, &(0x7f0000000780)={{0x5, 0x6}, {0xc, 0x8}, 0x800, 0x9, 0x9, 0x1251, 0xe0000000000, 0x8001, 0xb04a, 0xffff, 0x76d, 0x101, 0x49c2000000000, 0x7, 0x0, 0x2}) getpgid$auto(r4) (async) getpgid$auto(r4) rt_sigqueueinfo$auto(r3, 0x4, &(0x7f0000000400)={@siginfo_0_0={0x2, 0x6, 0x200, @_timer={r4, 0x9, @sival_int=0x1, 0x1ff}}}) ioperm$auto(0x0, 0x5, 0x0) (async) ioperm$auto(0x0, 0x5, 0x0) r5 = memfd_create$auto(&(0x7f00000008c0)='/sys/kernel/debug/x86/boot_params/data\x00', 0x0) pwritev$auto(r5, &(0x7f00000003c0)={0x0, 0x8}, 0x5, 0x7fffffffffffffff, 0x72) write$auto_proc_gid_map_operations_base(r5, &(0x7f0000000480)="3eb84f801c3ca176305052990fca909a56ea816da70b708a4752de030340700e83c04bdf5695735554738d6db1de7ea0e6992dc7ad0ab1020379a5c54149cd4d7b78c338df412e2aa99d591bd125d4afe66fb609139db3ac767fbf7bfeeea9097cde0e7ad3c3de23e06252e856f588ceb1debb0c0a94071f6df43277cba9d3fe112a994d014dcb8d1c41b33a58be3edc7a66b23e8f092d4a7c3a55900216d26e423bf1b6712259dd0a3fe515d0f221e2d3027f1ee8e0e1db7ebac2751293be4e57fd6b6b88e25edc0aebd08f626b9f54e72195d0ff0f62568ce0145619f9dec636808fac731685992092d3d44c556b9000fe29b5b923b36a9e", 0xf9) mincore$auto(0x1000, 0x8, 0x0) (async) mincore$auto(0x1000, 0x8, 0x0) bpf$auto(0x7, &(0x7f0000000100)=@test={0xffffffffffffffff, 0xb, 0x80000000, 0x5, 0x5, 0x4, 0x0, 0x401, 0x1, 0x9, 0x99, 0x3, 0x7ff, 0x400003, 0x8}, 0x3c) (async) bpf$auto(0x7, &(0x7f0000000100)=@test={0xffffffffffffffff, 0xb, 0x80000000, 0x5, 0x5, 0x4, 0x0, 0x401, 0x1, 0x9, 0x99, 0x3, 0x7ff, 0x400003, 0x8}, 0x3c) execve$auto(&(0x7f0000000040)='\xe4\'+@\\+%\x00', &(0x7f00000000c0)=&(0x7f0000000080)='\x00', &(0x7f0000000140)=&(0x7f0000000100)='[\x00') 3.535274975s ago: executing program 4 (id=1852): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/tty/ptys5/power/runtime_active_time\x00', 0x8000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) futex_waitv$auto(&(0x7f0000000000)={0x3ff, 0x5dd8, 0x2, 0xfff}, 0x3, 0x0, 0x0, 0x623d) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) fchmod$auto(r0, 0x7439) (async) fchown$auto(r0, 0x0, 0x400) setsockopt$auto(r0, 0xffff, 0xfffffffc, &(0x7f00000000c0)='\x00', 0x3) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_prog_fd=0x77, 0xa}, 0xa3) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 32) ioctl$auto(0x3, 0xc048ae65, 0x38) (rerun: 32) 2.962001201s ago: executing program 5 (id=1854): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) rseq$auto(&(0x7f0000000300)={0xe, 0x12f4, 0x0, 0x6, 0xffffffff, 0x2}, 0x88001, 0x0, 0x6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r0 = open(0x0, 0xeee00, 0x31) mmap$auto(0xfffffffffffffffe, 0x5, 0x4000000000df, 0x16, r0, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r1) read$auto(r1, &(0x7f0000000100)='nl80211\x00', 0xbe62) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x7, 0x7, 0xffffffffffffffff, 0xfffffffffffffffc, 0x200000000) writev$auto(0x1, 0x0, 0x1) socket(0xa, 0x2, 0x73) write$auto_msr_fops_msr(r0, 0x0, 0x0) getsockname$auto(r0, &(0x7f0000000240), &(0x7f0000000280)=0xaea) fcntl$auto(0x0, 0x407, 0x100000) mlockall$auto(0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x26, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x40080) close_range$auto(0x0, 0xfffffffffffff000, 0x8001) fanotify_init$auto(0x3, 0x2010000000000) sysfs$auto(0x2, 0x1e, 0x0) fsopen$auto(0x0, 0x7fff) 2.943708885s ago: executing program 6 (id=1855): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0040000", @ANYRES16=r1, @ANYBLOB], 0x4d0}}, 0x4000000) r3 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000000c0), r0) sendmsg$auto_OVS_METER_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x2}, @OVS_METER_ATTR_CLEAR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x850}, 0x20000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x8, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)={0x1c, 0x0, 0x30f4b0fcc8d9477d, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4040048) r6 = socket(0xa, 0x5, 0x84) sendto$auto(r6, 0x0, 0x401, 0x101, 0x0, 0x1c) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0x20682, 0x0) write$auto_lockdown_ops_lockdown(r9, &(0x7f0000000040)="3e928e", 0x3) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r10, @ANYRESOCT=r2], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80) 2.431535838s ago: executing program 6 (id=1856): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000d300e2b544c176113a6cf91aceabed0a0398fcb9b7ced5d4b01ebbe91d5c47d71ddbd7b21ecfb1dee3e4f8aeee9d17c67a6700e406c5885ba1191e940db16db02d2f32a445b1bc9683da141b06d024f738518d75138947c5eece5eb9d0f1e1bf4a01be71fead2a5e3b60e79a2a05f8c6c0f9807e", @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf251f000000080003000700000008000200f7000000180001801400020076657468305f766972745f7769666900"], 0x3c}, 0x1, 0x0, 0x0, 0x4004084}, 0x82) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/set_event\x00', 0x802, 0x0) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfdef) fcntl$auto(0x3, 0x400, 0x1) close_range$auto(0x2, 0xa, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0x4020ae76, 0x38) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) rseq$auto(&(0x7f0000000000)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x7ffe, 0x0, 0x6) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) write$auto(0x3, 0x0, 0xffd8) ioctl$auto_KVM_CREATE_VM(r0, 0x4018aee2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f00000021c0), r4) sendmsg$auto_SMC_PNETID_GET(r4, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01032abd7055296295576cc27700"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) shmget$auto(0xa, 0x10563, 0x568d1af2) r6 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x91) read$auto_proc_iter_file_ops_compat_inode(r6, &(0x7f0000000100)=""/106, 0x6a) read$auto(r6, 0x0, 0x1) read$auto_full_fops_mem(r6, &(0x7f0000000080)=""/124, 0x7c) 1.97235417s ago: executing program 6 (id=1859): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm0p/sub4/info\x00', 0x8000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x2, 0x0) 1.912702505s ago: executing program 5 (id=1860): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/timer_source\x00', 0x208802, 0x0) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) gettid() connect$auto(0xffffffffffffffff, 0x0, 0x55) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000002f80), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05002ebd7000fddbdf2500000000080001000600005eb0fe330080000000"], 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x80) r3 = socket(0x2, 0x2, 0x1) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/uprobe/format/ref_ctr_offset\x00', 0x5481, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000020c0)=""/29, 0x1d) r6 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto(r6, 0x0, 0x80000000006) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x8203, 0x0) read$auto(r7, 0x0, 0x2) r8 = signalfd$auto(r6, 0x0, 0x8) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7f}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x4}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x51}, 0x20000000) r9 = io_uring_setup$auto(0x6, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e24}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0x1}, 0x5, 0x0, 0x4, 0x9}, 0xcd}, 0x7, 0x7000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) write$auto_hwsim_simulate_radar_(r9, &(0x7f0000000300)="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", 0x1000) r10 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/1/msr\x00', 0xf82, 0x0) write$auto_msr_fops_msr(r10, 0x0, 0x4d) close_range$auto(0x2, 0x8, 0x0) 1.79275759s ago: executing program 6 (id=1862): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) ioctl$auto(r1, 0x890b, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000017c0)={0x24, r3, 0xd0d58b333228212f, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x8, 0x2c, 0x0, 0x1, [@nested={0x4, 0xc8}]}]}, 0x24}}, 0x4000000) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x80}, @NL80211_ATTR_VIF_RADIO_MASK={0x8, 0x14d, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2f212cbd7000fc39ad872c00000008000300", @ANYRES32=r7], 0x40}}, 0x4000000) 1.355002749s ago: executing program 2 (id=1863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) socket(0x1e, 0x1, 0x0) execve$auto(&(0x7f0000000000)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r3 = socket(0x10, 0x2, 0x4) write$auto(r3, &(0x7f0000000000)='-\x00', 0x2fb) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptye8\x00', 0x149201, 0x0) ioctl$auto_TIOCGICOUNT2(r4, 0x545d, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)={0x40, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x17, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x33}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 1.317926229s ago: executing program 6 (id=1864): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 32) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async, rerun: 32) r1 = socket(0x11, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, 0x0, 0x189002, 0x0) (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r3, 0x1002, 0x0, 0x0, 0x0, 0x2) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r4, 0x0, 0x400018) (async) socketpair$auto(0x2, 0x4, 0x8000000000000000, 0x0) (async, rerun: 32) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x40, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x4605, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) (async) r8 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), r7) sendmsg$auto_BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRESOCT=r2, @ANYRES8=0x0, @ANYRES32=r1, @ANYRES64=r8], 0x24}, 0x1, 0x0, 0x0, 0x24000090}, 0x4) (async) fcntl$auto(0x3, 0x4, r3) 1.172938547s ago: executing program 2 (id=1865): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0040000", @ANYRES16=r1, @ANYBLOB], 0x4d0}}, 0x4000000) r3 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000000c0), r0) sendmsg$auto_OVS_METER_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x2}, @OVS_METER_ATTR_CLEAR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x850}, 0x20000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x8, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)={0x1c, 0x0, 0x30f4b0fcc8d9477d, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4040048) r6 = socket(0xa, 0x5, 0x84) sendto$auto(r6, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r7 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0x20682, 0x0) write$auto_lockdown_ops_lockdown(r9, &(0x7f0000000040)="3e928e", 0x3) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r10, @ANYRESOCT=r2], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80) 810.030227ms ago: executing program 5 (id=1866): timer_create$auto(0x9, &(0x7f00000002c0)={@sival_ptr=&(0x7f0000000280)="5b0f14cf1c5f19978336a5249af72caf68416bb9c2fad1b96e3592d75ba4", @raw=0x4, 0x9af}, 0xfffffffffffffffc) r0 = socket$nl_generic(0x10, 0x3, 0x10) pwrite64$auto(r0, 0x0, 0xd34, 0x1) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, 0x0, 0x20000000) rseq$auto(0x0, 0x8000, 0x0, 0x6) geteuid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_SET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r1, @ANYRES64=r2, @ANYRES16=r2], 0x18}, 0x1, 0x0, 0x0, 0x20000044}, 0x200c0881) sendmsg$auto_TIPC_NL_MON_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4800000}, 0xffffffffffffff73, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x40045}, 0x24087840) mmap$auto(0xc, 0xe, 0x4000000000003, 0xeb1, 0xfffffffffffffffa, 0x7ffe) r3 = prctl$auto(0x1000000003b, 0x0, 0x0, 0x5, 0x388f) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioperm$auto(0x800, 0x5, 0xd) r4 = getpgid(0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/queue/zone_write_granularity\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000100)=""/16, 0x10) faccessat$auto(r3, &(0x7f00000000c0)='./file0\x00', 0xe1b7) capset$auto(&(0x7f0000000140)={0xeaba, r4}, &(0x7f00000001c0)={0x5507, 0x9, 0x79}) capget$auto(&(0x7f0000000000)={0x19980330, r6}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = eventfd$auto(0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0xa4e00, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x100) ioctl$auto_def_blk_fops_fs(r7, 0x1261, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, &(0x7f0000000100)='\x12', 0xfff) madvise$auto(0x4000, 0xffffffffffff0005, 0x9) 631.567419ms ago: executing program 2 (id=1867): r0 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) mmap$auto(0x80000000093bf, 0x2020009, 0x3, 0xeb1, r0, 0x8000008000) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) prctl$auto(0x23, 0x7, 0x7ffffffff000, 0x0, 0x0) read$auto(r1, 0x0, 0x7fff) close_range$auto(0x2, 0x8, 0x0) 489.400361ms ago: executing program 4 (id=1868): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000d300e2b544c176113a6cf91aceabed0a0398fcb9b7ced5d4b01ebbe91d5c47d71ddbd7b21ecfb1dee3e4f8aeee9d17c67a6700e406c5885ba1191e940db16db02d2f32a445b1bc9683da141b06d024f738518d75138947c5eece5eb9d0f1e1bf4a01be71fead2a5e3b60e79a2a05f8c6c0f9807e", @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf251f000000080003000700000008000200f7000000180001801400020076657468305f766972745f7769666900"], 0x3c}, 0x1, 0x0, 0x0, 0x4004084}, 0x82) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/set_event\x00', 0x802, 0x0) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfdef) fcntl$auto(0x3, 0x400, 0x1) close_range$auto(0x2, 0xa, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0x4020ae76, 0x38) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) rseq$auto(&(0x7f0000000000)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x7ffe, 0x0, 0x6) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) write$auto(0x3, 0x0, 0xffd8) ioctl$auto_KVM_CREATE_VM(r0, 0x4018aee2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f00000021c0), r4) sendmsg$auto_SMC_PNETID_GET(r4, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01032abd7055296295576cc27700"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) shmget$auto(0xa, 0x10563, 0x568d1af2) r6 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x91) read$auto_proc_iter_file_ops_compat_inode(r6, &(0x7f0000000100)=""/106, 0x6a) read$auto(r6, 0x0, 0x1) read$auto_full_fops_mem(r6, &(0x7f0000000080)=""/124, 0x7c) 488.115969ms ago: executing program 5 (id=1869): r0 = getsockopt$auto(0xffffffffffffffff, 0xfffff04f, 0x8, &(0x7f0000000040)='/sys/power/disk\x00', &(0x7f0000000080)=0x2) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x5}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x6}, @NL80211_ATTR_REG_INDOOR={0x4}, @NL80211_ATTR_SSID={0x1e, 0x34, "b691e04a2b8c03ef34499cf2d7ce5e924d7d7de01741d2f166d0"}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_KEY_DATA={0x1a, 0x7, "b1fffc5adb05a6e35dc38e43d302ea740e61f956a633"}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c800}, 0x94) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0x100, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/acpi/interrupts/gpe_all\x00', 0x48082, 0x0) write$auto(r1, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.12/usb33/power/autosuspend\x00', 0x7) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/02.0\x00', 0x210800, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram3/queue/stable_writes\x00', 0x182, 0x0) mprotect$auto(0x2, 0xfb444cc, 0xfffffffffffffffc) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001500), 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x9}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x1000}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) r5 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) pread64$auto(r5, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x10, 0x9) sendfile$auto(r2, r2, 0x0, 0x6) 437.355075ms ago: executing program 2 (id=1870): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = socket(0x10, 0x80002, 0x0) (async) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_pid\x00', 0xa0201, 0x0) (async) write$auto(0x4, 0x0, 0x100082) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) (async, rerun: 64) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x8000, 0x0) (rerun: 64) ioctl$auto(r2, 0x900064ba, r2) sendmsg$auto_NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0x2f8, r1, 0x111, 0x7265, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x29, 0x21, "fe0bcfcca118c6ac69ebc1ad218bdcaaa69202554b5dcd33fc984551ce374cfbf499ec0474"}, @NL80211_ATTR_SCAN_FREQUENCIES={0x2b5, 0x2c, 0x0, 0x1, [@generic="b99b8faed60ef18ec2a7dd7e95d5b65b6f833bced92efb497442f5e05473e177229362a233794def012ae1c60892cda36347525dab817d06430beaae5275fff02ca0d245c1b9227b8215a6bf60404df623f90ab5b9230329906c985a276ce1b594ba8a04175397df1c69d96c698ce16dca4cf6867b97fcead02ab483237243a53ec06485568c11b39dbf0475e6a7e471d758cf04e14084b573b16b1f3782235c19fe23ac7dd5cd1f125f55a80d0999787943fd4d8b9306b421d841baaebe2fe1f1b4", @typed={0x8, 0x79, 0x0, 0x0, @u32=0x4}, @nested={0x10e, 0x81, 0x0, 0x1, [@typed={0x8, 0xfb, 0x0, 0x0, @fd=r2}, @generic="dc93425d400dc4e97f8c9ddc9ec0bbff129331c01fac7786f58ccca877066feff8adfe5e182aef33bd816ff9009923de01498164b07047806b529a6e518e7f2075d85f1abe7bb83033f5c15f", @generic="ffb68e893717e51824be2e831a818e538193fc1781cf5dc5e7781b61e0fb0abf1ddd6cb1beba5f067f32358d50f3bbf7943d4cf80fae31da14ca51be2bc48afa57766a5d45692a8fbb2e988cfc4ee75ebaf2e58c187b7f7cae61a99e2a8fd5a85494a724659b5ba2eafb3c00e599f4273f849ae37cb40871a25db6c909514c46bc17ef56ce1bc8b0d8a5f630a06b", @nested={0x4, 0x1c}, @nested={0x4, 0x43}, @typed={0x14, 0x36, 0x0, 0x0, @ipv6=@local}, @typed={0xc, 0x86, 0x0, 0x0, @u64=0x7fffffff}]}, @generic="ca4192267798af0f307542b518fcbee81f24d8bb55041f196b6f5ad8b9d9e7d762ad8c087f1c20d9961521d50f3609ffedc044354cf48ad0e15b4c8e76343a088ba296f81f9489ca3af92f7c79d9da85da0d71adf997a5114ce6666436ade3f6cec0abf27a1890d4383fbbb0ba2df73831cc94bb7dc6cb39608d1bbfb1d63e792fbe0bff75e945ff855b3ef5e47c320527b03d8ac82c3615c656a8d8d1b56dfc33ae0f45e67c5bec2b6952d001cdc276ff45d0ade4727c3c259960d9c31f7fe4c0afb70a938b4c3e58e30c7604c24232ffae3b6f632c92"]}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x8001}, 0x20000004) 199.290075ms ago: executing program 2 (id=1871): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000940)=ANY=[@ANYBLOB="68130000", @ANYBLOB="00012bbd7000fbdbdf25070000000a01098033d6b2f24ee018e9b9855ea5a93da0dbf50b4b8d86d9c820adfd997126489bd2546bfcc6fbff50c3bf8d7f45d1ebb9d89021906d31e536c6c0c92f519a0c83aea385552794c7882697d5a21c4da79315acddceacb346ab83e89a1645955894eef5f3c2c35e3124caac9166412cacae4bffc75d40f06baba4de4dbe5513052f62def8033ecf0fe621bc7a7f715aee786d0f3181c875c3977947736c9579f2a8135c790800c600", @ANYRESOCT=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000002800038008005e00", @ANYRES32, @ANYRESOCT, @ANYRES8, @ANYRES32, @ANYBLOB="99f3a10396e315e1f108b34d1f100980b046b622a9dd59042c88a5c2dece45bb172c8508000d00", @ANYRES32, @ANYBLOB="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"], 0x1368}, 0x1, 0x0, 0x0, 0x80000}, 0x20080) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t3\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\xfb\xba\xb2.$\'\x1e\x82\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/250, 0xfdf3, 0x39) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x41555856, 0x4, 0x2008, 0x0, 0xffffffffffffffff) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) eventfd$auto(0x3) eventfd$auto(0x0) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(0x0) socketpair$auto(0x1e, 0x1, 0x4, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz6\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TCFLSH2(r0, 0x40384708, 0x0) 196.51608ms ago: executing program 6 (id=1872): sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x400c000) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r0 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x6, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) listen$auto(r0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x3, 0x6) r2 = socket(0xa, 0x1, 0x84) capget$auto(0x0, 0xfffffffffffffffe) (async) capget$auto(0x0, 0xfffffffffffffffe) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003e00), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000003e40)={'bridge_slave_0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r3, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000003e80)={0x1c, r4, 0x309, 0x70bd2b, 0x25dfdbfe, {}, [@NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$auto_NETDEV_CMD_NAPI_SET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x58, r4, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NETDEV_A_NAPI_GRO_FLUSH_TIMEOUT={0xc, 0x6, 0x2}, @NETDEV_A_NAPI_DEFER_HARD_IRQS={0x8, 0x5, 0x8}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x2}, @NETDEV_A_NAPI_DEFER_HARD_IRQS={0x8, 0x5, 0x754}, @NETDEV_A_NAPI_DEFER_HARD_IRQS={0x8, 0x5, 0xbe}, @NETDEV_A_NAPI_IRQ_SUSPEND_TIMEOUT={0xc, 0x7, 0xaf}, @NETDEV_A_NAPI_IRQ_SUSPEND_TIMEOUT={0xc, 0x7, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) getsockopt$auto(r2, 0x84, 0x85, 0x0, 0x0) (async) getsockopt$auto(r2, 0x84, 0x85, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) write$auto(0x3, 0x0, 0xfffffdef) linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) (async) linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) socket(0xa, 0x5, 0x0) open(0x0, 0x2040, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 88.987939ms ago: executing program 5 (id=1873): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r0, 0x40046207, 0x9) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x52204b}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x8, 0xb, 0x0, 0x9, 0xfffffffffffffffc, 0x83, 0x6, 0x2, 0x9, 0xffff, 0x4000000000000002, 0xd, 0x3, 0xfffffffffffffffe, 0x7, 0x1000000006]}, 0x0, 0x0) syslog$auto(0x2, &(0x7f0000000000)='-#:\x00[\xda\xe2\xc3L\xd30{Q\xecvP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x102\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd26i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\xf2\xbe\xef\v\xf1d\xdd\x0e\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x033\x8f\xb9(\n/\xcdo\xc2', 0xcf) r1 = geteuid() setreuid$auto(r1, 0x0) mmap$auto(0xef1e, 0x3f, 0x5, 0x15, r0, 0x7) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2c8480, 0x0) ppoll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x3, 0x1}, 0x9, &(0x7f0000000080)={0x6, 0x3}, &(0x7f00000000c0)={0x1}, 0x8) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r3) r4 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000140), r3) r5 = geteuid() sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000002780)=ANY=[@ANYBLOB="e056047ab55f042a7a04120000", @ANYRES16=r4, @ANYBLOB="020027bd7000ffdbdf2506000000b301038008002700ac1414aa0800f500", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0800010008000000"], 0x1204}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) setreuid$auto(r1, r5) close_range$auto(0x2, 0x8, 0x0) clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x1a9382, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4c440, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) read$auto(r6, &(0x7f0000000180)='/(\xd0+]i--\x00', 0xa9bd) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) bpf$auto(0x5, &(0x7f0000001080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) 27.850526ms ago: executing program 4 (id=1874): unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x4, 0x2020009, 0x8, 0xeb1, 0xffffffffffffffff, 0x7ffd) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x4000) socketpair$auto(0x1d, 0x2, 0x2, 0x0) (async) setsockopt$auto(0xffffffffffffffff, 0x4, 0x4, &(0x7f0000000040)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x7) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2c, 0x1, 0x0) connect$auto(0x3, 0x0, 0x55) (async) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x143002, 0x0) read$auto_tomoyo_operations_securityfs_if(r1, 0x0, 0x0) (async) read$auto(r1, &(0x7f0000001080)='\xefI5\x1d\xc4~\xd0>\xd2;\xbcj\xce\x18+\x9blE\x18\xa1>V\n\xa4\x90cgy\x98O\xf4\x7f\xe0\xbf\xbb\x9f\xfc\xfb\x870l0\xcf\xb4\rx\xcb\bpgr0}, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r3, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000000000600010000000a0005000000000000000000b3fc010000000000000000000a0001000000000000000000060006000500000008000200", @ANYRES32=0x0, @ANYBLOB="080004000301"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000000000600010000000a0005000000000000000000b3fc010000000000000000000a0001000000000000000000060006000500000008000200", @ANYRES32=0x0, @ANYBLOB="080004000301"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r5 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f00000051c0)=ANY=[@ANYBLOB="140000000714af"], 0x14}, 0x1, 0x0, 0x0, 0x6008042}, 0x4000004) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f00000051c0)=ANY=[@ANYBLOB="140000000714af"], 0x14}, 0x1, 0x0, 0x0, 0x6008042}, 0x4000004) socket(0x2, 0x3, 0x100) (async) socket(0x2, 0x3, 0x100) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x2}]}, @NET_SHAPER_A_LEAVES={0x4}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r6}, @NET_SHAPER_A_METRIC={0x8, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x14) (async) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x2}]}, @NET_SHAPER_A_LEAVES={0x4}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r6}, @NET_SHAPER_A_METRIC={0x8, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010b27bd70002cfa539f1183d46a08000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) (async) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010b27bd70002cfa539f1183d46a08000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@token_create={0x8, r12}, 0x1) sendmsg$auto_NET_SHAPER_CMD_CAP_GET(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf2505000000080002000600000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r13, @ANYBLOB="080002000d000000"], 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x4001) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r14 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ubifs/tst_recovery\x00', 0x40aa2, 0x0) write$auto_dfs_global_fops_debug(r14, &(0x7f0000000d80)='0', 0x1) (async) write$auto_dfs_global_fops_debug(r14, &(0x7f0000000d80)='0', 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) kernel console output (not intermixed with test programs): 8789][ T6733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.398435][ T6733] RSP: 002b:00007f7f59a67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 116.406893][ T6733] RAX: ffffffffffffffda RBX: 00007f7f58d75fa0 RCX: 00007f7f58b85d29 [ 116.414908][ T6733] RDX: 00000000000000fb RSI: 0000000020000300 RDI: 0000000000000003 [ 116.422918][ T6733] RBP: 00007f7f59a67090 R08: 0000000000000000 R09: 0000000000000000 [ 116.430981][ T6733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.438999][ T6733] R13: 0000000000000000 R14: 00007f7f58d75fa0 R15: 00007ffc5fb12168 [ 116.447030][ T6733] [ 116.466715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 116.506232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.225780][ T29] audit: type=1326 audit(4294967337.080:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.0.183" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f7f58b85d29 code=0x0 [ 118.509773][ T6757] Invalid ELF header magic: != ELF [ 118.552109][ T6782] FAULT_INJECTION: forcing a failure. [ 118.552109][ T6782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.581350][ T6782] CPU: 1 UID: 0 PID: 6782 Comm: syz.1.185 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 118.592006][ T6782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 118.602108][ T6782] Call Trace: [ 118.605402][ T6782] [ 118.608340][ T6782] dump_stack_lvl+0x16c/0x1f0 [ 118.613036][ T6782] should_fail_ex+0x497/0x5b0 [ 118.617737][ T6782] _copy_to_user+0x32/0xd0 [ 118.622176][ T6782] simple_read_from_buffer+0xd0/0x160 [ 118.627559][ T6782] proc_fail_nth_read+0x198/0x270 [ 118.632600][ T6782] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 118.638167][ T6782] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 118.643763][ T6782] vfs_read+0x1df/0xbe0 [ 118.647943][ T6782] ? __fget_files+0x1fc/0x3a0 [ 118.652635][ T6782] ? __pfx___mutex_lock+0x10/0x10 [ 118.657681][ T6782] ? __pfx_vfs_read+0x10/0x10 [ 118.662378][ T6782] ? __fget_files+0x206/0x3a0 [ 118.667077][ T6782] ksys_read+0x12b/0x250 [ 118.671334][ T6782] ? __pfx_ksys_read+0x10/0x10 [ 118.676133][ T6782] do_syscall_64+0xcd/0x250 [ 118.680654][ T6782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.686559][ T6782] RIP: 0033:0x7f529838473c [ 118.690979][ T6782] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 118.710697][ T6782] RSP: 002b:00007f5299227030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 118.719134][ T6782] RAX: ffffffffffffffda RBX: 00007f5298575fa0 RCX: 00007f529838473c [ 118.727134][ T6782] RDX: 000000000000000f RSI: 00007f52992270a0 RDI: 0000000000000004 [ 118.735110][ T6782] RBP: 00007f5299227090 R08: 0000000000000000 R09: 0000000000000000 [ 118.743179][ T6782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.751159][ T6782] R13: 0000000000000000 R14: 00007f5298575fa0 R15: 00007ffe2c3e9738 [ 118.759159][ T6782] [ 119.017929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 119.061071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.462861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.465029][ T6818] device-mapper: ioctl: Unable to rename non-existent device, to „ [ 120.498133][ T6818] lo: entered allmulticast mode [ 120.619906][ T6824] CIFS: VFS: Unsupported security flags: 0x10 [ 120.647409][ T6823] lo: left allmulticast mode [ 121.137225][ T6827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.191'. [ 124.018695][ T6868] netlink: 334 bytes leftover after parsing attributes in process `syz.0.202'. [ 124.273654][ T6895] netlink: 'syz.2.207': attribute type 4 has an invalid length. [ 124.286210][ T6895] netlink: 330 bytes leftover after parsing attributes in process `syz.2.207'. [ 124.981825][ T6900] bond0: option lp_interval: invalid value (/sys) [ 125.036897][ T6900] bond0: option lp_interval: allowed values 1 - 2147483647 [ 126.137231][ T6923] netlink: 28 bytes leftover after parsing attributes in process `syz.2.213'. [ 126.218565][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.213'. [ 128.625933][ T6980] syz.1.227 (6980) used obsolete PPPIOCDETACH ioctl syzkaller syzkaller login: [ 129.210393][ T6995] netlink: 28 bytes leftover after parsing attributes in process `syz.3.231'. [ 129.695315][ T6996] Invalid ELF header magic: != ELF [ 130.622703][ T7020] netlink: 266 bytes leftover after parsing attributes in process `syz.3.236'. [ 130.631915][ T7020] IPv6: NLM_F_CREATE should be specified when creating new route [ 130.768343][ T7009] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000000006 [ 130.837656][ T7024] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.237'. [ 130.847997][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.237'. [ 131.016917][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.237'. [ 132.839557][ T7051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.243'. [ 133.241659][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.248207][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.416910][ T7062] netlink: 330 bytes leftover after parsing attributes in process `syz.2.246'. s `syz.1.248'. [ 134.423740][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.248'. [ 135.246857][ T7101] netlink: 28 bytes leftover after parsing attributes in process `syz.3.255'. [ 135.438616][ T7101] ip6gre0: entered promiscuous mode [ 136.171333][ T7114] netlink: 'syz.1.257': attribute type 17 has an invalid length. [ 136.216550][ T7114] netlink: 326 bytes leftover after parsing attributes in process `syz.1.257'. [ 136.660630][ T29] audit: type=1800 audit(4294967355.510:3): pid=7137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.259" name="SYSV0000000a" dev="hugetlbfs" ino=0 res=0 errno=0 [ 137.470684][ T7166] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.263'. [ 137.627790][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.263'. [ 139.375190][ T7206] sock: sock_set_timeout: `syz.2.272' (pid 7206) tries to set negative timeout [ 139.627187][ T7219] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.273'. [ 139.810727][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.273'. [ 139.818824][ T7218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.274'. [ 140.975492][ T7257] Invalid ELF header magic: != ELF [ 142.333449][ T7277] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.286'. [ 142.452920][ T7280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'. [ 142.654377][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'. [ 145.268137][ T7320] can: request_module (can-proto-5) failed. [ 146.235484][ T7341] netlink: 'syz.2.299': attribute type 4 has an invalid length. [ 146.262540][ T7341] netlink: 28 bytes leftover after parsing attributes in process `syz.2.299'. [ 146.262566][ T7343] netlink: 28 bytes leftover after parsing attributes in process `syz.2.299'. [ 146.391255][ T7351] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.298'. [ 146.463569][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.298'. [ 146.489563][ T7341] team0: Port device team_slave_0 removed [ 146.701784][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.298'. [ 147.626108][ T7389] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.312'. [ 147.786175][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'. [ 147.841190][ T7380] netlink: 146 bytes leftover after parsing attributes in process `syz.3.309'. [ 147.986709][ T7406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.314'. [ 148.925803][ T29] audit: type=1107 audit(4294967367.780:4): pid=7437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 149.623944][ T7447] netlink: 93 bytes leftover after parsing attributes in process `syz.2.326'. [ 149.676644][ T7456] warning: `syz.2.326' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 153.980420][ T7560] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.350'. [ 154.122127][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'. [ 155.323779][ T7592] Invalid ELF header magic: != ELF [ 156.767087][ T7627] binder: 7625:7627 ioctl c0105512 1 returned -22 [ 156.783274][ T7627] binder: 7625:7627 ioctl c0306201 9 returned -11 [ 156.834377][ T7627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.367'. [ 157.142098][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'. [ 157.660499][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.372'. [ 159.658556][ T7701] netlink: 326 bytes leftover after parsing attributes in process `syz.3.384'. [ 159.997724][ T7655] netlink: 28 bytes leftover after parsing attributes in process `syz.0.374'. [ 160.035295][ T7704] Invalid ELF header magic: != ELF [ 160.073086][ T7655] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 160.287752][ T7709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.386'. [ 160.468494][ T7709] geneve1: entered allmulticast mode [ 160.659979][ T7724] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.391'. [ 160.711769][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'. [ 160.777804][ T7718] erspan0: entered allmulticast mode [ 160.905976][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'. [ 161.358614][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.395'. [ 161.850631][ T7748] netlink: 338 bytes leftover after parsing attributes in process `syz.2.395'. [ 163.739236][ T7792] openvswitch: netlink: Key type 95 is out of range max 32 [ 165.036348][ T7786] ptrace attach of "./syz-executor exec"[5825] was attempted by "./syz-executor exec"[7786] [ 166.007647][ T7840] erspan0: entered allmulticast mode [ 168.302947][ T7885] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.423'. [ 168.552880][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.423'. [ 169.124589][ T7903] Invalid ELF header magic: != ELF [ 169.511464][ T7910] raw_sendmsg: syz.2.428 forgot to set AF_INET. Fix it! [ 171.493698][ T7949] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.434'. [ 171.685393][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.434'. [ 172.768262][ T7961] FAULT_INJECTION: forcing a failure. [ 172.768262][ T7961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.782211][ T7961] CPU: 0 UID: 0 PID: 7961 Comm: syz.0.436 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 172.792961][ T7961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 172.803056][ T7961] Call Trace: [ 172.806444][ T7961] [ 172.809397][ T7961] dump_stack_lvl+0x16c/0x1f0 [ 172.814127][ T7961] should_fail_ex+0x497/0x5b0 [ 172.818889][ T7961] strncpy_from_user+0x3b/0x2d0 [ 172.823788][ T7961] getname_flags.part.0+0x8f/0x550 [ 172.829034][ T7961] ? __pfx_do_sys_openat2+0x10/0x10 [ 172.834293][ T7961] getname_flags+0x93/0xf0 [ 172.838777][ T7961] user_path_at+0x24/0x60 [ 172.843145][ T7961] inotify_find_inode+0x2e/0x160 [ 172.848153][ T7961] __x64_sys_inotify_add_watch+0x20d/0x360 [ 172.854021][ T7961] ? __pfx___x64_sys_inotify_add_watch+0x10/0x10 [ 172.860515][ T7961] do_syscall_64+0xcd/0x250 [ 172.865067][ T7961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.871011][ T7961] RIP: 0033:0x7f7f58b85d29 [ 172.875468][ T7961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.895394][ T7961] RSP: 002b:00007f7f59a67038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 172.904126][ T7961] RAX: ffffffffffffffda RBX: 00007f7f58d75fa0 RCX: 00007f7f58b85d29 [ 172.912149][ T7961] RDX: 0000000000000e6e RSI: 0000000000000000 RDI: 0000000000000004 [ 172.920283][ T7961] RBP: 00007f7f59a67090 R08: 0000000000000000 R09: 0000000000000000 [ 172.928386][ T7961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.936391][ T7961] R13: 0000000000000000 R14: 00007f7f58d75fa0 R15: 00007ffc5fb12168 [ 172.944424][ T7961] [ 172.947915][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.752434][ T7968] could not allocate digest TFM handle binfmt_misc [ 174.574602][ T7998] syz.0.444 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 176.224773][ T8007] FAULT_INJECTION: forcing a failure. [ 176.224773][ T8007] name failslab, interval 1, probability 0, space 0, times 0 [ 176.331459][ T8007] CPU: 0 UID: 0 PID: 8007 Comm: syz.2.447 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 176.342128][ T8007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 176.352219][ T8007] Call Trace: [ 176.355522][ T8007] [ 176.358481][ T8007] dump_stack_lvl+0x16c/0x1f0 [ 176.363203][ T8007] should_fail_ex+0x497/0x5b0 [ 176.367918][ T8007] ? fs_reclaim_acquire+0xae/0x150 [ 176.373096][ T8007] should_failslab+0xc2/0x120 [ 176.377814][ T8007] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 176.383227][ T8007] ? fsnotify_grab_connector+0x137/0x290 [ 176.388951][ T8007] ? inotify_update_watch+0x440/0xb30 [ 176.394461][ T8007] inotify_update_watch+0x440/0xb30 [ 176.399699][ T8007] ? bpf_lsm_path_notify+0x9/0x10 [ 176.404773][ T8007] __x64_sys_inotify_add_watch+0x2e4/0x360 [ 176.410622][ T8007] ? __pfx___x64_sys_inotify_add_watch+0x10/0x10 [ 176.417010][ T8007] do_syscall_64+0xcd/0x250 [ 176.421561][ T8007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.427496][ T8007] RIP: 0033:0x7febc4585d29 [ 176.431943][ T8007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.451859][ T8007] RSP: 002b:00007febc5453038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 176.460314][ T8007] RAX: ffffffffffffffda RBX: 00007febc4775fa0 RCX: 00007febc4585d29 [ 176.468316][ T8007] RDX: 0000000000000e6e RSI: 0000000000000000 RDI: 0000000000000004 [ 176.476329][ T8007] RBP: 00007febc5453090 R08: 0000000000000000 R09: 0000000000000000 [ 176.484369][ T8007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.492558][ T8007] R13: 0000000000000000 R14: 00007febc4775fa0 R15: 00007ffe472815f8 [ 176.500580][ T8007] [ 176.503784][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.163416][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'. [ 177.192593][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'. [ 177.589949][ T8035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.454'. [ 178.820247][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.460'. [ 179.017313][ T8063] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.461'. [ 179.217221][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 180.556834][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.468'. [ 180.764719][ T8100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.466'. [ 180.893442][ T8100] lo: entered promiscuous mode [ 180.947723][ T8100] lo: entered allmulticast mode [ 182.047004][ T8125] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.474'. [ 182.229816][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.474'. [ 182.289057][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 182.304101][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 182.312913][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 182.321458][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 182.329884][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 182.339113][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 183.229612][ T8157] Invalid ELF header magic: != ELF [ 183.543309][ T8140] chnl_net:caif_netlink_parms(): no params data found [ 183.709730][ T8140] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.721206][ T8140] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.733953][ T8140] bridge_slave_0: entered allmulticast mode [ 183.741290][ T8140] bridge_slave_0: entered promiscuous mode [ 183.774903][ T8140] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.782399][ T8140] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.791675][ T8155] can0: slcan on ttyS2. [ 183.796599][ T8140] bridge_slave_1: entered allmulticast mode [ 183.803740][ T8140] bridge_slave_1: entered promiscuous mode [ 183.859653][ T8140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.891847][ T8140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.002638][ T8140] team0: Port device team_slave_0 added [ 184.032831][ T8140] team0: Port device team_slave_1 added [ 184.134020][ T8140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.164158][ T8140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.231325][ T8140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.269435][ T8140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.295932][ T8140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.400379][ T8140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.443429][ T5839] Bluetooth: hci4: command tx timeout [ 184.796235][ T8153] can0 (unregistered): slcan off ttyS2. [ 184.879434][ T8140] hsr_slave_0: entered promiscuous mode [ 184.922523][ T8140] hsr_slave_1: entered promiscuous mode [ 184.933378][ T8140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.955821][ T8140] Cannot create hsr debugfs directory [ 185.167182][ T8202] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.483'. [ 185.351413][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.483'. [ 185.589010][ T8140] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 185.612133][ T8140] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 185.640638][ T8140] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 185.678479][ T8140] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 185.974604][ T8140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.040280][ T8140] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.106030][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.113170][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.179214][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.186417][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.517044][ T5839] Bluetooth: hci4: command tx timeout [ 186.550069][ T8249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.490'. [ 186.856849][ T8140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.461876][ T8140] veth0_vlan: entered promiscuous mode [ 187.536537][ T8140] veth1_vlan: entered promiscuous mode [ 187.605611][ T8140] veth0_macvtap: entered promiscuous mode [ 187.647253][ T8140] veth1_macvtap: entered promiscuous mode [ 187.687456][ T8140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.733489][ T8140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.753153][ T8140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.781805][ T8140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.806204][ T8140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.838512][ T8140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.865796][ T8140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.895870][ T8140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.923975][ T8140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.944929][ T8140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.975825][ T8140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.005925][ T8140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.041200][ T8140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.065860][ T8140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.077154][ T8140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.107331][ T8140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.135859][ T8140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.157416][ T8140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.476653][ T8293] Invalid ELF header magic: != ELF [ 188.514120][ T8140] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.565785][ T8140] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.574550][ T8140] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.598192][ T5839] Bluetooth: hci4: command tx timeout [ 188.642063][ T8140] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.185765][ T6490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.229413][ T6490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.304731][ T8270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.360741][ T8270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.676072][ T5839] Bluetooth: hci4: command tx timeout [ 191.786523][ T8341] HfR: entered promiscuous mode [ 191.800789][ T8343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.508'. [ 191.842101][ T8343] HfR: left promiscuous mode [ 191.860704][ T8341] netlink: 16 bytes leftover after parsing attributes in process `syz.3.508'. [ 191.921016][ T8344] syz.3.508 uses obsolete (PF_INET,SOCK_PACKET) [ 193.571303][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.514'. [ 193.794659][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.514'. [ 194.697567][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.703937][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.650123][ T8411] Invalid ELF header magic: != ELF [ 196.762826][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 196.776033][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 196.782120][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 199.186568][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.529'. [ 199.322808][ T8450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.529'. [ 199.808150][ T8469] random: crng reseeded on system resumption [ 200.502827][ T8440] syz.0.530 (8440) used greatest stack depth: 20600 bytes left [ 201.206416][ T8491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.537'. [ 201.764395][ T8499] netlink: 334 bytes leftover after parsing attributes in process `syz.2.542'. [ 201.845920][ T8509] netlink: 334 bytes leftover after parsing attributes in process `syz.2.542'. [ 202.537368][ T8526] netlink: 74 bytes leftover after parsing attributes in process `syz.2.546'. [ 206.058043][ T8577] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 206.146042][ T8577] CIFS mount error: No usable UNC path provided in device string! [ 206.146042][ T8577] [ 206.181859][ T8577] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 206.814269][ T8581] netlink: 'syz.0.560': attribute type 1 has an invalid length. [ 206.964675][ T8581] netlink: 11 bytes leftover after parsing attributes in process `syz.0.560'. [ 209.586617][ T8622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.571'. [ 209.610449][ T8622] netlink: 206 bytes leftover after parsing attributes in process `syz.0.571'. [ 212.059021][ T8660] Process accounting resumed [ 212.650108][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'. [ 216.099202][ T8756] can: request_module (can-proto-0) failed. [ 216.141556][ T8768] kernel read not supported for file /#)-\&[} (pid: 8768 comm: syz.4.597) [ 216.325755][ T29] audit: type=1800 audit(4294967435.179:5): pid=8768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.597" name="#)-\&[}" dev="mqueue" ino=20253 res=0 errno=0 [ 217.739329][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.607'. [ 220.770956][ T8853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.619'. [ 222.721347][ T8892] Invalid ELF header magic: != ELF [ 223.791613][ T8898] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 224.571542][ T8909] openvswitch: netlink: IP tunnel dst address not specified [ 225.229595][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.633'. [ 227.652377][ T8961] netlink: 28 bytes leftover after parsing attributes in process `syz.4.639'. [ 228.485958][ T8961] hsr_slave_1 (unregistering): left promiscuous mode [ 229.043174][ T8976] netlink: 342 bytes leftover after parsing attributes in process `syz.4.642'. [ 229.144029][ T8977] netlink: 306 bytes leftover after parsing attributes in process `syz.4.642'. [ 230.662732][ T8983] Invalid ELF header magic: != ELF [ 230.907494][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.645'. [ 231.043173][ T8990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.644'. [ 232.357063][ T8813] syz.4.612 (8813) used greatest stack depth: 19248 bytes left [ 232.662019][ T9011] Process accounting resumed [ 232.715639][ T9011] kernel write not supported for file /schedstat (pid: 9011 comm: syz.2.651) [ 232.872934][ T9024] kernel write not supported for file /schedstat (pid: 9024 comm: syz.2.653) [ 232.903975][ T9020] netlink: 342 bytes leftover after parsing attributes in process `syz.3.652'. [ 233.383863][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.657'. [ 233.441973][ T9031] kernel write not supported for file /schedstat (pid: 9031 comm: syz.2.655) [ 233.667617][ T9051] Invalid ELF header magic: != ELF [ 234.046398][ T9053] kernel write not supported for file /schedstat (pid: 9053 comm: syz.2.658) [ 234.186445][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 234.951201][ T9084] netlink: 28 bytes leftover after parsing attributes in process `syz.2.665'. [ 235.033242][ T9084] gretap0: entered promiscuous mode [ 235.170849][ T9074] kernel write not supported for file /schedstat (pid: 9074 comm: syz.2.665) [ 235.296525][ T9086] workqueue: Failed to create a rescuer kthread for wq "nfc7_nci_tx_wq": -EINTR [ 235.701206][ T9123] kernel write not supported for file /schedstat (pid: 9123 comm: syz.2.669) [ 235.951163][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'. [ 236.103715][ T9129] kernel write not supported for file /schedstat (pid: 9129 comm: syz.2.670) [ 236.369752][ T9139] kernel write not supported for file /schedstat (pid: 9139 comm: syz.2.671) [ 236.668966][ T9143] kernel write not supported for file /schedstat (pid: 9143 comm: syz.2.672) [ 237.374688][ T9149] kernel write not supported for file /schedstat (pid: 9149 comm: syz.2.674) [ 238.277185][ T9182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.680'. [ 238.784619][ T9164] warn_unsupported: 1 callbacks suppressed [ 238.784641][ T9164] kernel write not supported for file /schedstat (pid: 9164 comm: syz.2.678) [ 239.405847][ T9212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.686'. [ 239.525092][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.690'. [ 239.537167][ T9212] tc_dump_action: action bad kind [ 239.556290][ T9229] netlink: 342 bytes leftover after parsing attributes in process `syz.4.690'. [ 241.131099][ T9213] kernel write not supported for file /schedstat (pid: 9213 comm: syz.2.686) [ 241.316766][ T9251] netlink: 334 bytes leftover after parsing attributes in process `syz.2.693'. [ 241.429913][ T9250] kernel write not supported for file /schedstat (pid: 9250 comm: syz.2.693) [ 241.933299][ T9262] kernel write not supported for file /schedstat (pid: 9262 comm: syz.2.695) [ 242.361832][ T9260] kernel write not supported for file /schedstat (pid: 9260 comm: syz.2.695) [ 242.638416][ T9180] kernel write not supported for file /schedstat (pid: 9180 comm: syz.2.678) [ 243.582159][ T9283] HfR: entered promiscuous mode [ 243.803211][ T9275] kernel write not supported for file /schedstat (pid: 9275 comm: syz.2.697) [ 244.215852][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.701'. [ 244.218766][ T9299] kernel write not supported for file /schedstat (pid: 9299 comm: syz.2.702) [ 245.311377][ T9303] kernel write not supported for file /schedstat (pid: 9303 comm: syz.2.704) [ 245.869577][ T9320] kernel write not supported for file /schedstat (pid: 9320 comm: syz.2.709) [ 246.178869][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.711'. [ 246.876272][ T9331] kernel write not supported for file /schedstat (pid: 9331 comm: syz.2.712) [ 247.972590][ T9360] kernel write not supported for file /schedstat (pid: 9360 comm: syz.2.715) [ 248.317415][ T9376] kernel write not supported for file /schedstat (pid: 9376 comm: syz.2.720) [ 248.689999][ T9386] lo: entered allmulticast mode [ 248.983430][ T9382] lo: left allmulticast mode [ 249.042762][ T9388] kernel write not supported for file /schedstat (pid: 9388 comm: syz.2.723) [ 249.274466][ T9393] netlink: 330 bytes leftover after parsing attributes in process `syz.3.719'. [ 249.409307][ T9398] kernel write not supported for file /schedstat (pid: 9398 comm: syz.2.726) [ 250.780723][ T9415] kernel write not supported for file /schedstat (pid: 9415 comm: syz.2.728) [ 252.328990][ T9420] kernel write not supported for file /schedstat (pid: 9420 comm: syz.2.730) [ 252.757013][ T9440] netlink: 326 bytes leftover after parsing attributes in process `syz.2.733'. [ 253.119108][ T9444] kernel write not supported for file /schedstat (pid: 9444 comm: syz.2.733) [ 253.980447][ T9453] kernel write not supported for file /schedstat (pid: 9453 comm: syz.2.736) [ 254.213917][ T9449] kernel write not supported for file /schedstat (pid: 9449 comm: syz.2.736) [ 254.267998][ T9468] netlink: 342 bytes leftover after parsing attributes in process `syz.0.741'. [ 254.836631][ T9476] kernel write not supported for file /schedstat (pid: 9476 comm: syz.2.744) [ 255.025616][ T9484] Invalid ELF header magic: != ELF [ 255.462737][ T9490] kernel write not supported for file /schedstat (pid: 9490 comm: syz.2.747) [ 255.862062][ T9496] kernel write not supported for file /schedstat (pid: 9496 comm: syz.2.750) [ 256.029175][ T9499] netlink: 28 bytes leftover after parsing attributes in process `syz.4.749'. [ 256.120672][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.127036][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.137085][ T9499] vcan0: entered promiscuous mode [ 256.226431][ T9506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.752'. [ 256.355456][ T9507] kernel write not supported for file /schedstat (pid: 9507 comm: syz.2.751) [ 256.489351][ T9486] kexec: Could not allocate control_code_buffer [ 257.589603][ T9529] kernel write not supported for file /schedstat (pid: 9529 comm: syz.2.755) [ 258.325413][ T9543] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.824994][ T9545] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 258.906698][ T9543] kernel write not supported for file /schedstat (pid: 9543 comm: syz.2.762) [ 259.015027][ T9343] kernel write not supported for file /schedstat (pid: 9343 comm: syz.2.712) [ 261.248224][ T9616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.776'. [ 261.611431][ T9569] kernel write not supported for file /schedstat (pid: 9569 comm: syz.2.766) [ 261.691341][ T9625] kernel write not supported for file /schedstat (pid: 9625 comm: syz.2.780) [ 262.207475][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.781'. [ 262.497801][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.781'. [ 262.922592][ T9629] Process accounting paused [ 263.029343][ T9658] Invalid ELF header magic: != ELF [ 265.717590][ T9687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.792'. [ 265.745821][ T9688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.792'. [ 265.754803][ T9688] HfR: left promiscuous mode [ 265.791189][ T9687] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 265.817044][ T9687] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 265.925644][ T9687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.792'. [ 265.935149][ T9687] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 265.943306][ T9687] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 265.954853][ T9687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.792'. [ 265.985087][ T9687] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 266.005067][ T9687] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 266.065528][ T9688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.792'. [ 266.126209][ T9688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.792'. [ 266.209661][ T9688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.792'. [ 266.294226][ T9688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.792'. [ 266.305110][ T9688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.792'. [ 266.314367][ T9688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.792'. [ 267.744170][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.797'. [ 269.045622][ T9740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.804'. [ 269.107832][ T9738] Invalid ELF header magic: != ELF [ 269.252786][ T9746] netlink: 74 bytes leftover after parsing attributes in process `syz.0.803'. [ 273.712367][ T9805] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.817'. [ 273.891043][ T9805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.817'. [ 274.329773][ T9803] could not allocate digest TFM handle binfmt_misc [ 274.481300][ T9822] netlink: 2 bytes leftover after parsing attributes in process `syz.3.820'. [ 276.957559][ T9850] netlink: 338 bytes leftover after parsing attributes in process `syz.4.836'. [ 276.997357][ T9850] netlink: 338 bytes leftover after parsing attributes in process `syz.4.836'. [ 277.090692][ T9850] netlink: 98 bytes leftover after parsing attributes in process `syz.4.836'. [ 277.119991][ T9850] veth0_macvtap: left promiscuous mode [ 277.434009][ T9861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.841'. [ 277.495132][ T9861] netlink: 206 bytes leftover after parsing attributes in process `syz.4.841'. [ 278.713676][ T9877] bond0: option lp_interval: invalid value (/sys) [ 278.753776][ T9877] bond0: option lp_interval: allowed values 1 - 2147483647 [ 279.117680][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.837'. [ 279.424543][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.839'. [ 279.583453][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.839'. [ 282.834568][ T9969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.853'. [ 282.887034][ T9969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.920603][ T9969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.968814][ T9969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.000361][ T9969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.163978][ T9975] Process accounting resumed [ 283.587362][ T9979] bond0: option arp_validate: invalid value () [ 284.220897][ T9999] netlink: 28 bytes leftover after parsing attributes in process `syz.4.862'. [ 284.828412][T10015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 284.990371][T10020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 285.150211][T10014] netlink: 74 bytes leftover after parsing attributes in process `syz.3.864'. [ 286.445221][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.875'. [ 286.639619][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.875'. [ 286.914855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 287.448404][T10089] netlink: 28 bytes leftover after parsing attributes in process `syz.4.880'. [ 287.494376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 287.544292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 288.388176][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.886'. [ 288.687662][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.886'. [ 288.704077][T10120] netlink: 338 bytes leftover after parsing attributes in process `syz.3.888'. [ 289.421752][T10129] zswap: compressor not available [ 289.468155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 289.829723][T10124] netlink: 28 bytes leftover after parsing attributes in process `syz.3.889'. [ 290.195959][T10124] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 290.543239][T10155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.898'. [ 291.016938][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.899'. [ 291.835674][T10180] netlink: 28 bytes leftover after parsing attributes in process `syz.2.901'. [ 291.867971][T10180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.902041][T10180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.938633][T10180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.052236][T10180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.083159][T10211] netlink: 314 bytes leftover after parsing attributes in process `syz.4.910'. [ 293.430263][T10194] Process accounting resumed [ 293.467186][T10194] kernel write not supported for file /schedstat (pid: 10194 comm: syz.2.908) [ 294.225956][T10235] netlink: 93 bytes leftover after parsing attributes in process `syz.2.914'. [ 294.240421][T10225] netlink: 93 bytes leftover after parsing attributes in process `syz.2.914'. [ 294.436254][T10239] kernel write not supported for file /schedstat (pid: 10239 comm: syz.2.914) [ 294.844230][T10256] netlink: 20 bytes leftover after parsing attributes in process `syz.0.920'. [ 294.936551][T10259] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 294.970180][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.922'. [ 295.715315][T10254] kernel write not supported for file /schedstat (pid: 10254 comm: syz.2.919) [ 297.099182][T10300] netlink: 28 bytes leftover after parsing attributes in process `syz.0.927'. [ 297.147384][T10285] kernel write not supported for file /schedstat (pid: 10285 comm: syz.2.924) [ 298.312404][T10204] kernel write not supported for file /schedstat (pid: 10204 comm: syz.2.908) [ 298.716527][T10307] kernel write not supported for file /schedstat (pid: 10307 comm: syz.2.929) [ 299.013644][T10345] kernel write not supported for file /schedstat (pid: 10345 comm: syz.2.936) [ 299.322279][T10356] kernel write not supported for file /schedstat (pid: 10356 comm: syz.2.939) [ 299.481131][T10364] openvswitch: netlink: Missing valid actions attribute. [ 299.497431][T10365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.941'. [ 299.583386][T10363] kernel write not supported for file /schedstat (pid: 10363 comm: syz.2.942) [ 300.081836][T10374] kernel write not supported for file /schedstat (pid: 10374 comm: syz.2.944) [ 301.081622][T10388] kernel write not supported for file /schedstat (pid: 10388 comm: syz.2.946) [ 301.279845][T10403] program syz.4.952 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.331415][T10403] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 302.187774][T10385] kernel write not supported for file /schedstat (pid: 10385 comm: syz.2.946) [ 302.767990][T10422] kernel write not supported for file /schedstat (pid: 10422 comm: syz.2.956) [ 303.122853][T10427] kernel write not supported for file /schedstat (pid: 10427 comm: syz.2.958) [ 303.412002][T10438] nbd: must specify an index to disconnect [ 303.557130][T10438] kernel write not supported for file /schedstat (pid: 10438 comm: syz.2.961) [ 304.189982][T10458] netlink: 28 bytes leftover after parsing attributes in process `syz.4.965'. [ 304.243875][T10458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.286114][T10458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.398900][T10458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.406513][T10458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.529297][T10462] netlink: 20 bytes leftover after parsing attributes in process `syz.3.968'. [ 304.680496][T10457] kernel write not supported for file /schedstat (pid: 10457 comm: syz.2.963) [ 305.135732][T10446] kernel write not supported for file /schedstat (pid: 10446 comm: syz.2.963) [ 306.807425][T10482] kernel write not supported for file /schedstat (pid: 10482 comm: syz.2.970) [ 307.819713][T10503] kernel write not supported for file /schedstat (pid: 10503 comm: syz.2.975) [ 307.863215][T10358] kernel write not supported for file /schedstat (pid: 10358 comm: syz.2.939) [ 308.305799][T10533] Line length is too long: Should be less than 4094 [ 308.361185][T10532] kernel write not supported for file /schedstat (pid: 10532 comm: syz.2.980) [ 309.061242][T10535] kernel write not supported for file /schedstat (pid: 10535 comm: syz.2.983) [ 309.238459][T10556] netlink: 20 bytes leftover after parsing attributes in process `syz.2.987'. [ 309.366161][ T5142] Bluetooth: hci4: command 0x0406 tx timeout [ 310.719381][T10555] kernel write not supported for file /schedstat (pid: 10555 comm: syz.2.987) [ 310.983737][T10586] kernel write not supported for file /schedstat (pid: 10586 comm: syz.2.991) [ 311.554962][T10631] kernel write not supported for file /schedstat (pid: 10631 comm: syz.2.992) [ 311.741105][T10632] kernel write not supported for file /schedstat (pid: 10632 comm: syz.2.992) [ 311.840960][T10641] kernel write not supported for file /schedstat (pid: 10641 comm: syz.2.994) [ 312.044351][T10650] kernel write not supported for file /schedstat (pid: 10650 comm: syz.2.996) [ 312.358746][T10662] Invalid ELF header magic: != ELF [ 312.376321][T10660] Invalid ELF header magic: != ELF [ 312.548870][T10657] kernel write not supported for file /schedstat (pid: 10657 comm: syz.2.998) [ 312.976767][T10677] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1003'. [ 312.996221][T10677] mac80211_hwsim hwsim15 ›: renamed from wlan0 [ 313.517561][T10675] kernel write not supported for file /schedstat (pid: 10675 comm: syz.2.1001) [ 315.048924][T10717] netlink: 'syz.4.1013': attribute type 10 has an invalid length. [ 315.078780][T10717] netlink: 230 bytes leftover after parsing attributes in process `syz.4.1013'. [ 315.245282][T10717] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 315.280177][T10731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1015'. [ 315.452148][T10731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1015'. [ 315.765387][T10690] kernel write not supported for file /schedstat (pid: 10690 comm: syz.2.1005) [ 316.194259][T10747] netlink: 'syz.3.1019': attribute type 4 has an invalid length. [ 316.290930][T10747] netlink: 314 bytes leftover after parsing attributes in process `syz.3.1019'. [ 316.352121][T10747] IPv6: NLM_F_CREATE should be specified when creating new route [ 317.197024][T10767] kernel write not supported for file /schedstat (pid: 10767 comm: syz.2.1022) [ 317.288837][T10784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1027'. [ 317.464329][T10791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1027'. [ 317.534569][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.541132][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.232103][T10795] kernel write not supported for file /schedstat (pid: 10795 comm: syz.2.1028) [ 318.328908][ T29] audit: type=1800 audit(2064.170:6): pid=10809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1031" name="discovery_nqn" dev="configfs" ino=28449 res=0 errno=0 [ 319.120091][T10812] kernel write not supported for file /schedstat (pid: 10812 comm: syz.2.1032) [ 320.024628][T10825] kernel write not supported for file /schedstat (pid: 10825 comm: syz.2.1036) [ 320.961021][T10853] kernel write not supported for file /schedstat (pid: 10853 comm: syz.2.1043) [ 321.502521][T10864] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1049'. [ 322.103390][T10861] kernel write not supported for file /schedstat (pid: 10861 comm: syz.2.1048) [ 322.942008][T10653] kernel write not supported for file /schedstat (pid: 10653 comm: syz.2.996) [ 323.203622][T10888] kernel write not supported for file /schedstat (pid: 10888 comm: syz.2.1052) [ 323.454934][T10905] kernel write not supported for file /schedstat (pid: 10905 comm: syz.2.1057) [ 323.611905][T10907] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1056'. [ 324.593436][T10914] Process accounting paused [ 325.056004][T10954] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 325.271322][T10934] cgroup: fork rejected by pids controller in /syz3 [ 326.054515][T10980] vivid-007: ================= START STATUS ================= [ 326.076235][T10980] vivid-007: Generate PTS: true [ 326.081217][T10980] vivid-007: Generate SCR: true [ 326.096605][T10980] tpg source WxH: 640x360 (Y'CbCr) [ 326.103137][T10980] tpg field: 1 [ 326.110380][T10980] tpg crop: 640x360@0x0 [ 326.114630][T10980] tpg compose: 640x360@0x0 [ 326.137429][T10980] tpg colorspace: 8 [ 326.141309][T10980] tpg transfer function: 0/0 [ 326.162004][T10980] tpg Y'CbCr encoding: 0/0 [ 326.176906][T10980] tpg quantization: 0/0 [ 326.181122][T10980] tpg RGB range: 0/2 [ 326.185034][T10980] vivid-007: ================== END STATUS ================== [ 326.225106][T10983] vivid-007: kernel_thread() failed [ 326.421310][T10991] binder: 10989:10991 ioctl 40044900 800000000000003 returned -22 [ 330.613666][T11055] can: request_module (can-proto-5) failed. [ 331.241281][ T5142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 331.296186][ T5142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 331.304765][ T5142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 331.328237][ T5142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 331.343673][ T5142] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 331.353866][ T5142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 331.793460][T11063] chnl_net:caif_netlink_parms(): no params data found [ 331.881288][ T29] audit: type=1326 audit(4294967303.879:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.4.1078" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb2cc785d29 code=0x0 [ 331.979347][T11063] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.989570][T11063] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.006538][T11063] bridge_slave_0: entered allmulticast mode [ 332.033931][T11063] bridge_slave_0: entered promiscuous mode [ 332.055985][T11063] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.067466][T11063] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.074733][T11063] bridge_slave_1: entered allmulticast mode [ 332.084953][T11063] bridge_slave_1: entered promiscuous mode [ 332.122132][T11063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.137041][T11063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.145871][T11055] Process accounting resumed [ 332.158945][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1075'. [ 332.202260][T11063] team0: Port device team_slave_0 added [ 332.213385][T11063] team0: Port device team_slave_1 added [ 332.280810][T11063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.327540][T11063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.354123][T11063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.367308][T11063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.374303][T11063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.400424][T11063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.448013][T11063] hsr_slave_0: entered promiscuous mode [ 332.455505][T11063] hsr_slave_1: entered promiscuous mode [ 332.463124][T11063] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.471234][T11063] Cannot create hsr debugfs directory [ 332.698948][T11063] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.952663][T11063] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.071131][T11063] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.187599][T11063] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.425905][T11063] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 333.446192][ T5142] Bluetooth: hci0: command tx timeout [ 333.458257][T11063] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 333.479082][T11063] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 333.508941][T11063] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 333.655611][T11063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.693233][T11063] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.720946][ T6494] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.728128][ T6494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.759294][ T6495] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.766586][ T6495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.874890][T11063] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.281471][T11063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.364318][T11063] veth0_vlan: entered promiscuous mode [ 334.404741][T11063] veth1_vlan: entered promiscuous mode [ 334.484099][T11063] veth0_macvtap: entered promiscuous mode [ 334.512366][T11063] veth1_macvtap: entered promiscuous mode [ 334.580858][T11063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.608818][T11063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.626741][T11063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.661123][T11063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.683598][T11063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.686016][T11129] netlink: 326 bytes leftover after parsing attributes in process `syz.4.1093'. [ 334.721033][T11063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.747007][T11063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.773183][T11063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.796397][T11063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.815940][T11063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.851416][T11063] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.871649][T11063] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.880631][T11063] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.894093][T11063] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.142235][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.153266][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.250870][ T6490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.275671][ T6490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.526331][ T5142] Bluetooth: hci0: command tx timeout [ 335.567168][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1095'. [ 335.754938][T11143] Line length is too long: Should be less than 4094 [ 335.803418][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1095'. [ 336.497269][T11161] erspan0: entered allmulticast mode [ 337.207942][T11178] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1107'. [ 337.217450][T11178] ipvlan0: entered allmulticast mode [ 337.222797][T11178] veth0_vlan: entered allmulticast mode [ 337.395569][T11188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1109'. [ 337.511856][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1109'. [ 337.606917][ T5142] Bluetooth: hci0: command tx timeout [ 337.921140][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1111'. [ 338.018361][T11198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1111'. [ 339.072485][T11227] vivid-013: ================= START STATUS ================= [ 339.116528][T11227] vivid-013: Generate PTS: true [ 339.121549][T11227] vivid-013: Generate SCR: true [ 339.187737][T11227] tpg source WxH: 640x360 (Y'CbCr) [ 339.192927][T11227] tpg field: 1 [ 339.249345][T11227] tpg crop: 640x360@0x0 [ 339.253697][T11227] tpg compose: 640x360@0x0 [ 339.353565][T11227] tpg colorspace: 8 [ 339.387820][T11227] tpg transfer function: 0/0 [ 339.392479][T11227] tpg Y'CbCr encoding: 0/0 [ 339.468018][T11227] tpg quantization: 0/0 [ 339.472250][T11227] tpg RGB range: 0/2 [ 339.556222][T11227] vivid-013: ================== END STATUS ================== [ 339.687432][ T5142] Bluetooth: hci0: command tx timeout [ 340.464132][T11254] can: request_module (can-proto-0) failed. [ 340.891991][T11267] openvswitch: netlink: Key 23 has unexpected len 0 expected 2 [ 340.966355][T11270] openvswitch: netlink: Key 23 has unexpected len 0 expected 2 [ 343.831938][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1122'. [ 346.556852][T11369] FAULT_INJECTION: forcing a failure. [ 346.556852][T11369] name failslab, interval 1, probability 0, space 0, times 0 [ 346.569704][T11369] CPU: 0 UID: 0 PID: 11369 Comm: syz.3.1153 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 346.580509][T11369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 346.590606][T11369] Call Trace: [ 346.593901][T11369] [ 346.596897][T11369] dump_stack_lvl+0x16c/0x1f0 [ 346.601616][T11369] should_fail_ex+0x497/0x5b0 [ 346.606312][T11369] ? fs_reclaim_acquire+0xae/0x150 [ 346.611966][T11369] should_failslab+0xc2/0x120 [ 346.616661][T11369] __kmalloc_noprof+0xce/0x4f0 [ 346.621441][T11369] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 346.627086][T11369] ? tomoyo_realpath_from_path+0xbf/0x710 [ 346.632827][T11369] tomoyo_realpath_from_path+0xbf/0x710 [ 346.638395][T11369] ? tomoyo_path_number_perm+0x235/0x5b0 [ 346.644047][T11369] tomoyo_path_number_perm+0x248/0x5b0 [ 346.649523][T11369] ? tomoyo_path_number_perm+0x235/0x5b0 [ 346.655174][T11369] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 346.661181][T11369] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 346.666853][T11369] ? put_files_struct+0x3b/0x370 [ 346.671813][T11369] security_file_ioctl+0x9b/0x240 [ 346.676850][T11369] __x64_sys_ioctl+0xb7/0x200 [ 346.681536][T11369] do_syscall_64+0xcd/0x250 [ 346.686055][T11369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.691961][T11369] RIP: 0033:0x7fe954f85d29 [ 346.696391][T11369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.716007][T11369] RSP: 002b:00007fe955e53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 346.724554][T11369] RAX: ffffffffffffffda RBX: 00007fe955175fa0 RCX: 00007fe954f85d29 [ 346.732533][T11369] RDX: 0000000000000000 RSI: 0000000000004c00 RDI: 0000000000000001 [ 346.740508][T11369] RBP: 00007fe955e53090 R08: 0000000000000000 R09: 0000000000000000 [ 346.748491][T11369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.756486][T11369] R13: 0000000000000000 R14: 00007fe955175fa0 R15: 00007ffc0aa50dd8 [ 346.764476][T11369] [ 346.768119][T11369] ERROR: Out of memory at tomoyo_realpath_from_path. [ 347.482210][T11381] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1159'. [ 347.804082][T11387] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 347.827155][T11387] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 347.968726][T11394] FAULT_INJECTION: forcing a failure. [ 347.968726][T11394] name failslab, interval 1, probability 0, space 0, times 0 [ 347.990916][T11394] CPU: 1 UID: 0 PID: 11394 Comm: syz.3.1162 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 348.001770][T11394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 348.011858][T11394] Call Trace: [ 348.015159][T11394] [ 348.018111][T11394] dump_stack_lvl+0x16c/0x1f0 [ 348.022806][T11394] should_fail_ex+0x497/0x5b0 [ 348.027493][T11394] ? fs_reclaim_acquire+0xae/0x150 [ 348.032616][T11394] should_failslab+0xc2/0x120 [ 348.037309][T11394] __kmalloc_noprof+0xce/0x4f0 [ 348.042084][T11394] ? d_absolute_path+0x137/0x1b0 [ 348.047038][T11394] ? tomoyo_encode2+0x100/0x3e0 [ 348.051908][T11394] tomoyo_encode2+0x100/0x3e0 [ 348.056609][T11394] tomoyo_realpath_from_path+0x1a7/0x710 [ 348.062282][T11394] tomoyo_path_number_perm+0x248/0x5b0 [ 348.067757][T11394] ? tomoyo_path_number_perm+0x235/0x5b0 [ 348.073406][T11394] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 348.079404][T11394] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 348.085076][T11394] ? put_files_struct+0x3b/0x370 [ 348.090039][T11394] security_file_ioctl+0x9b/0x240 [ 348.095073][T11394] __x64_sys_ioctl+0xb7/0x200 [ 348.099758][T11394] do_syscall_64+0xcd/0x250 [ 348.104275][T11394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.110180][T11394] RIP: 0033:0x7fe954f85d29 [ 348.114601][T11394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.134322][T11394] RSP: 002b:00007fe955e53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 348.142765][T11394] RAX: ffffffffffffffda RBX: 00007fe955175fa0 RCX: 00007fe954f85d29 [ 348.150762][T11394] RDX: 0000000000000000 RSI: 0000000000004c00 RDI: 0000000000000001 [ 348.158752][T11394] RBP: 00007fe955e53090 R08: 0000000000000000 R09: 0000000000000000 [ 348.166731][T11394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.174715][T11394] R13: 0000000000000000 R14: 00007fe955175fa0 R15: 00007ffc0aa50dd8 [ 348.182708][T11394] [ 348.242059][T11394] ERROR: Out of memory at tomoyo_realpath_from_path. [ 348.799261][T11403] program syz.4.1166 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.168604][T11412] netlink: 'syz.4.1168': attribute type 1 has an invalid length. [ 349.188662][T11412] netlink: 'syz.4.1168': attribute type 1 has an invalid length. [ 349.298882][T11416] ecryptfs_parse_packet_length: Error parsing packet length [ 349.308200][T11416] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 349.332458][T11416] ptrace attach of "./syz-executor exec"[8140] was attempted by "./syz-executor exec"[11416] [ 352.129335][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1181'. [ 352.269022][T11463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1181'. [ 352.459648][T11468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1182'. [ 352.519754][T11468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1182'. [ 352.535131][T11468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1182'. [ 352.549515][T11468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1182'. [ 352.558918][T11468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1182'. [ 352.568683][T11468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1182'. [ 352.581539][T11468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1182'. [ 352.591195][T11468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1182'. [ 353.625988][T11486] openvswitch: netlink: nsh attr 1 has unexpected len 14 expected 8 [ 356.703539][T11489] Unable to find swap-space signature [ 357.220975][T11507] __nla_validate_parse: 58 callbacks suppressed [ 357.220998][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1192'. [ 357.974454][T11522] Invalid ELF header magic: != ELF [ 359.227119][T11552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1203'. [ 359.366317][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1203'. [ 359.464997][T11560] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1204'. [ 359.509393][T11560] macvlan1: entered allmulticast mode [ 359.521197][T11560] veth1_vlan: entered allmulticast mode [ 360.034148][T11576] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1206'. [ 361.949421][T11605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1214'. [ 364.496985][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1225'. [ 364.634531][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1225'. [ 365.800489][T11683] sg_write: data in/out 2059/169 bytes for SCSI command 0x57-- guessing data in; [ 365.800489][T11683] program syz.3.1232 not setting count and/or reply_len properly [ 367.439065][T11694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1235'. [ 367.569093][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1235'. [ 368.660509][T11704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1236'. [ 369.842583][T11727] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1242'. [ 370.917129][T10656] syz.0.993 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 370.968545][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1245'. [ 371.090072][T10656] CPU: 1 UID: 0 PID: 10656 Comm: syz.0.993 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 371.100824][T10656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 371.110914][T10656] Call Trace: [ 371.114219][T10656] [ 371.117177][T10656] dump_stack_lvl+0x16c/0x1f0 [ 371.122702][T10656] dump_header+0x101/0x900 [ 371.127174][T10656] oom_kill_process+0x270/0xa60 [ 371.132051][T10656] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 371.137799][T10656] out_of_memory+0x351/0x1700 [ 371.142501][T10656] ? __pfx_out_of_memory+0x10/0x10 [ 371.147621][T10656] ? rcu_read_unlock+0x17/0x60 [ 371.152400][T10656] ? find_held_lock+0x2d/0x110 [ 371.157181][T10656] mem_cgroup_out_of_memory+0x207/0x270 [ 371.162740][T10656] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 371.168827][T10656] ? do_raw_spin_unlock+0x172/0x230 [ 371.174042][T10656] try_charge_memcg+0x54c/0xaf0 [ 371.178913][T10656] ? __pfx_try_charge_memcg+0x10/0x10 [ 371.184301][T10656] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 371.189773][T10656] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 371.195251][T10656] ? get_mem_cgroup_from_mm+0x131/0x5f0 [ 371.200816][T10656] __mem_cgroup_charge+0x9b/0x280 [ 371.205859][T10656] shmem_alloc_and_add_folio+0x507/0xc00 [ 371.211508][T10656] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 371.217414][T10656] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 371.223579][T10656] ? shmem_huge_global_enabled+0x176/0x250 [ 371.229400][T10656] ? shmem_allowable_huge_orders+0xcd/0x3e0 [ 371.235426][T10656] shmem_get_folio_gfp+0x689/0x1530 [ 371.240643][T10656] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 371.246288][T10656] ? mark_held_locks+0x9f/0xe0 [ 371.251069][T10656] ? timestamp_truncate+0x21f/0x2e0 [ 371.256284][T10656] shmem_write_begin+0x161/0x300 [ 371.261232][T10656] ? __pfx_shmem_write_begin+0x10/0x10 [ 371.266699][T10656] ? inode_set_ctime_current+0x2a7/0x900 [ 371.272345][T10656] ? balance_dirty_pages_ratelimited_flags+0x92/0x1270 [ 371.279206][T10656] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 371.285209][T10656] generic_perform_write+0x2ba/0x920 [ 371.290513][T10656] ? __pfx_generic_perform_write+0x10/0x10 [ 371.296334][T10656] ? __mark_inode_dirty+0x2a5/0xe50 [ 371.301568][T10656] ? generic_update_time+0xcf/0xf0 [ 371.306698][T10656] ? mnt_put_write_access_file+0x45/0xf0 [ 371.312343][T10656] shmem_file_write_iter+0x10e/0x140 [ 371.317733][T10656] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 371.323552][T10656] __kernel_write_iter+0x318/0xa80 [ 371.328678][T10656] ? __pfx___kernel_write_iter+0x10/0x10 [ 371.334323][T10656] ? get_dump_page+0x15b/0x230 [ 371.339106][T10656] ? __pfx___might_resched+0x10/0x10 [ 371.344410][T10656] dump_user_range+0x389/0x8c0 [ 371.349197][T10656] ? __pfx_dump_user_range+0x10/0x10 [ 371.354500][T10656] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 371.360671][T10656] ? __pfx_writenote+0x10/0x10 [ 371.365457][T10656] elf_core_dump+0x2787/0x3880 [ 371.370240][T10656] ? __pfx_elf_core_dump+0x10/0x10 [ 371.375356][T10656] ? kasan_save_stack+0x42/0x60 [ 371.380217][T10656] ? kasan_save_stack+0x33/0x60 [ 371.385077][T10656] ? kasan_save_track+0x14/0x30 [ 371.389936][T10656] ? __kasan_kmalloc+0xaa/0xb0 [ 371.394712][T10656] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 371.400185][T10656] ? do_coredump+0x1665/0x43e0 [ 371.404960][T10656] ? get_signal+0x23f3/0x2610 [ 371.409775][T10656] ? rcu_is_watching+0x12/0xc0 [ 371.414557][T10656] ? trace_lock_acquire+0x14e/0x1f0 [ 371.419779][T10656] ? __pfx_sort+0x10/0x10 [ 371.424733][T10656] ? get_signal+0x23f3/0x2610 [ 371.429437][T10656] ? do_coredump+0x2dd5/0x43e0 [ 371.434218][T10656] do_coredump+0x2dd5/0x43e0 [ 371.438830][T10656] ? __pfx_do_coredump+0x10/0x10 [ 371.443784][T10656] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 371.449748][T10656] get_signal+0x23f3/0x2610 [ 371.454279][T10656] ? __pfx_get_signal+0x10/0x10 [ 371.459137][T10656] ? rcu_is_watching+0x12/0xc0 [ 371.463914][T10656] ? trace_irq_disable.constprop.0+0xea/0x140 [ 371.469993][T10656] arch_do_signal_or_restart+0x90/0x7e0 [ 371.475554][T10656] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 371.481731][T10656] ? do_user_addr_fault+0xa4b/0x13f0 [ 371.487030][T10656] irqentry_exit_to_user_mode+0x13f/0x280 [ 371.492768][T10656] asm_exc_page_fault+0x26/0x30 [ 371.497638][T10656] RIP: 0033:0x0 [ 371.501100][T10656] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 371.508469][T10656] RSP: 002b:000000000000000d EFLAGS: 00010217 [ 371.514546][T10656] RAX: 0000000000000000 RBX: 00007f7f58d76080 RCX: 00007f7f58b85d29 [ 371.522528][T10656] RDX: ffffffffffffffff RSI: 0000000000000005 RDI: 0000000000008001 [ 371.530505][T10656] RBP: 00007f7f58c01b08 R08: 0000000000000006 R09: 0000000000000000 [ 371.538483][T10656] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000000 [ 371.546462][T10656] R13: 0000000000000000 R14: 00007f7f58d76080 R15: 00007ffc5fb12168 [ 371.554449][T10656] ? 0xffffffffff600000 [ 371.558616][T10656] [ 371.636309][T10656] memory: usage 307200kB, limit 307200kB, failcnt 17481 [ 371.715419][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1245'. [ 371.820182][T10656] memory+swap: usage 430588kB, limit 9007199254740988kB, failcnt 0 [ 371.866203][T10656] kmem: usage 5176kB, limit 9007199254740988kB, failcnt 0 [ 371.995912][T10656] Memory cgroup stats for /syz0: [ 371.996803][T10656] cache 308756480 [ 372.012002][T10656] rss 208896 [ 372.016093][T10656] rss_huge 0 [ 372.058857][T10656] shmem 308748288 [ 372.062552][T10656] mapped_file 2826240 [ 372.166320][T10656] dirty 0 [ 372.169326][T10656] writeback 0 [ 372.229951][T10656] workingset_refault_anon 2858 [ 372.234785][T10656] workingset_refault_file 891 [ 372.329502][T10656] swap 126767104 [ 372.333113][T10656] swapcached 4096 [ 372.407372][T10656] pgpgin 796648 [ 372.410975][T10656] pgpgout 722749 [ 372.414544][T10656] pgfault 266832 [ 372.475427][T10656] pgmajfault 512 [ 372.479166][T10656] inactive_anon 59105280 [ 372.483435][T10656] active_anon 249724928 [ 372.507649][T10656] inactive_file 4096 [ 372.511692][T10656] active_file 4096 [ 372.515427][T10656] unevictable 0 [ 372.527538][T10656] hierarchical_memory_limit 314572800 [ 372.533098][T10656] hierarchical_memsw_limit 9223372036854771712 [ 372.539396][T10656] total_cache 308756480 [ 372.543575][T10656] total_rss 208896 [ 372.547506][T10656] total_rss_huge 0 [ 372.551548][T10656] total_shmem 308748288 [ 372.555728][T10656] total_mapped_file 2826240 [ 372.560639][T10656] total_dirty 0 [ 372.564944][T10656] total_writeback 0 [ 372.568921][T10656] total_workingset_refault_anon 2858 [ 372.574230][T10656] total_workingset_refault_file 891 [ 372.579528][T10656] total_swap 126767104 [ 372.583611][T10656] total_swapcached 4096 [ 372.587835][T10656] total_pgpgin 796648 [ 372.591840][T10656] total_pgpgout 722749 [ 372.595926][T10656] total_pgfault 266832 [ 372.600325][T10656] total_pgmajfault 512 [ 372.604412][T10656] total_inactive_anon 59105280 [ 372.630041][T10656] total_active_anon 249724928 [ 372.634781][T10656] total_inactive_file 4096 [ 372.639502][T10656] total_active_file 4096 [ 372.643802][T10656] total_unevictable 0 [ 372.672688][T10656] anon_cost 0 [ 372.676161][T10656] file_cost 0 [ 372.679616][T10656] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.993,pid=10655,uid=0 [ 372.696682][T10656] Memory cgroup out of memory: Killed process 10655 (syz.0.993) total-vm:131300kB, anon-rss:896kB, file-rss:42712kB, shmem-rss:2688kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 374.739008][T10702] syz.0.993 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 374.956211][T10702] CPU: 1 UID: 0 PID: 10702 Comm: syz.0.993 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 374.966961][T10702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 374.977053][T10702] Call Trace: [ 374.980363][T10702] [ 374.983318][T10702] dump_stack_lvl+0x16c/0x1f0 [ 374.988037][T10702] dump_header+0x101/0x900 [ 374.992504][T10702] oom_kill_process+0x270/0xa60 [ 374.997400][T10702] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 375.003071][T10702] out_of_memory+0x351/0x1700 [ 375.007798][T10702] ? __pfx_out_of_memory+0x10/0x10 [ 375.012932][T10702] ? rcu_read_unlock+0x17/0x60 [ 375.017717][T10702] ? find_held_lock+0x2d/0x110 [ 375.022501][T10702] mem_cgroup_out_of_memory+0x207/0x270 [ 375.028419][T10702] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 375.034515][T10702] ? do_raw_spin_unlock+0x172/0x230 [ 375.039736][T10702] try_charge_memcg+0x54c/0xaf0 [ 375.044617][T10702] ? __pfx_try_charge_memcg+0x10/0x10 [ 375.050006][T10702] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 375.055481][T10702] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 375.060960][T10702] ? get_mem_cgroup_from_mm+0x131/0x5f0 [ 375.066537][T10702] __mem_cgroup_charge+0x9b/0x280 [ 375.071604][T10702] shmem_alloc_and_add_folio+0x507/0xc00 [ 375.077257][T10702] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 375.083169][T10702] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 375.089329][T10702] ? shmem_huge_global_enabled+0x176/0x250 [ 375.095155][T10702] ? shmem_allowable_huge_orders+0xcd/0x3e0 [ 375.101066][T10702] shmem_get_folio_gfp+0x689/0x1530 [ 375.106281][T10702] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 375.111922][T10702] ? find_held_lock+0x2d/0x110 [ 375.116705][T10702] shmem_write_begin+0x161/0x300 [ 375.121656][T10702] ? __pfx_shmem_write_begin+0x10/0x10 [ 375.127126][T10702] ? timestamp_truncate+0x21f/0x2e0 [ 375.132344][T10702] ? balance_dirty_pages_ratelimited_flags+0x92/0x1270 [ 375.139214][T10702] generic_perform_write+0x2ba/0x920 [ 375.144518][T10702] ? __pfx_generic_perform_write+0x10/0x10 [ 375.150335][T10702] ? inode_needs_update_time.part.0+0x191/0x270 [ 375.156604][T10702] shmem_file_write_iter+0x10e/0x140 [ 375.161911][T10702] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 375.167731][T10702] __kernel_write_iter+0x318/0xa80 [ 375.172854][T10702] ? __pfx___kernel_write_iter+0x10/0x10 [ 375.178499][T10702] ? get_dump_page+0x15b/0x230 [ 375.183277][T10702] ? __pfx___might_resched+0x10/0x10 [ 375.188569][T10702] ? dump_user_range+0x459/0x8c0 [ 375.193532][T10702] dump_user_range+0x389/0x8c0 [ 375.198323][T10702] ? __pfx_dump_user_range+0x10/0x10 [ 375.203624][T10702] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 375.209791][T10702] ? __pfx_writenote+0x10/0x10 [ 375.214588][T10702] elf_core_dump+0x2787/0x3880 [ 375.219376][T10702] ? __pfx_elf_core_dump+0x10/0x10 [ 375.224493][T10702] ? kasan_save_stack+0x42/0x60 [ 375.229356][T10702] ? kasan_save_stack+0x33/0x60 [ 375.234223][T10702] ? kasan_save_track+0x14/0x30 [ 375.239084][T10702] ? __kasan_kmalloc+0xaa/0xb0 [ 375.243858][T10702] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 375.249329][T10702] ? do_coredump+0x1665/0x43e0 [ 375.254110][T10702] ? get_signal+0x23f3/0x2610 [ 375.258844][T10702] ? rcu_is_watching+0x12/0xc0 [ 375.263620][T10702] ? trace_lock_acquire+0x14e/0x1f0 [ 375.268831][T10702] ? __pfx_sort+0x10/0x10 [ 375.273180][T10702] ? get_signal+0x23f3/0x2610 [ 375.277872][T10702] ? do_coredump+0x2dd5/0x43e0 [ 375.282657][T10702] do_coredump+0x2dd5/0x43e0 [ 375.287273][T10702] ? __pfx_do_coredump+0x10/0x10 [ 375.292230][T10702] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 375.298188][T10702] get_signal+0x23f3/0x2610 [ 375.302713][T10702] ? __pfx_get_signal+0x10/0x10 [ 375.307598][T10702] ? rcu_is_watching+0x12/0xc0 [ 375.312382][T10702] ? trace_irq_disable.constprop.0+0xea/0x140 [ 375.318460][T10702] arch_do_signal_or_restart+0x90/0x7e0 [ 375.324020][T10702] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 375.330195][T10702] ? do_user_addr_fault+0xa4b/0x13f0 [ 375.335497][T10702] irqentry_exit_to_user_mode+0x13f/0x280 [ 375.341323][T10702] asm_exc_page_fault+0x26/0x30 [ 375.346189][T10702] RIP: 0033:0x0 [ 375.349652][T10702] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 375.357019][T10702] RSP: 002b:000000000000000d EFLAGS: 00010217 [ 375.363092][T10702] RAX: 0000000000000000 RBX: 00007f7f58d76080 RCX: 00007f7f58b85d29 [ 375.371073][T10702] RDX: ffffffffffffffff RSI: 0000000000000005 RDI: 0000000000008001 [ 375.379053][T10702] RBP: 00007f7f58c01b08 R08: 0000000000000006 R09: 0000000000000000 [ 375.387026][T10702] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000000 [ 375.395004][T10702] R13: 0000000000000000 R14: 00007f7f58d76080 R15: 00007ffc5fb12168 [ 375.402987][T10702] ? 0xffffffffff600000 [ 375.407158][T10702] [ 375.428210][T10702] memory: usage 306792kB, limit 307200kB, failcnt 18523 [ 375.435372][T10702] memory+swap: usage 430988kB, limit 9007199254740988kB, failcnt 0 [ 375.471083][T10702] kmem: usage 4948kB, limit 9007199254740988kB, failcnt 0 [ 375.482012][T10702] Memory cgroup stats for /syz0: [ 375.482227][T10702] cache 308854784 [ 375.506463][T10702] rss 208896 [ 375.509720][T10702] rss_huge 0 [ 375.512943][T10702] shmem 308846592 [ 375.535927][T10702] mapped_file 2555904 [ 375.544122][T10702] dirty 0 [ 375.559611][T10702] writeback 0 [ 375.562958][T10702] workingset_refault_anon 2858 [ 375.576141][T10702] workingset_refault_file 891 [ 375.582921][T10702] swap 126726144 [ 375.646805][T10702] swapcached 20480 [ 375.650607][T10702] pgpgin 797068 [ 375.654114][T10702] pgpgout 723141 [ 375.706115][T10702] pgfault 266859 [ 375.709726][T10702] pgmajfault 512 [ 375.713294][T10702] inactive_anon 145272832 [ 375.746119][T10702] active_anon 162652160 [ 375.756094][T10702] inactive_file 4096 [ 375.760049][T10702] active_file 4096 [ 375.786123][T10702] unevictable 0 [ 375.789663][T10702] hierarchical_memory_limit 314572800 [ 375.795066][T10702] hierarchical_memsw_limit 9223372036854771712 [ 375.851056][T11797] openvswitch: netlink: Key type 261 is out of range max 32 [ 376.086269][T10702] total_cache 308854784 [ 376.090507][T10702] total_rss 208896 [ 376.094250][T10702] total_rss_huge 0 [ 376.136062][T10702] total_shmem 308846592 [ 376.140286][T10702] total_mapped_file 2555904 [ 376.144819][T10702] total_dirty 0 [ 376.148691][T10702] total_writeback 0 [ 376.152686][T10702] total_workingset_refault_anon 2858 [ 376.158087][T10702] total_workingset_refault_file 891 [ 376.163328][T10702] total_swap 126726144 [ 376.167614][T10702] total_swapcached 20480 [ 376.172050][T10702] total_pgpgin 797068 [ 376.176108][T10702] total_pgpgout 723141 [ 376.180318][T10702] total_pgfault 266859 [ 376.184417][T10702] total_pgmajfault 512 [ 376.188646][T10702] total_inactive_anon 145272832 [ 376.193533][T10702] total_active_anon 162652160 [ 376.198658][T10702] total_inactive_file 4096 [ 376.203096][T10702] total_active_file 4096 [ 376.207438][T10702] total_unevictable 0 [ 376.211442][T10702] anon_cost 0 [ 376.214747][T10702] file_cost 0 [ 376.218371][T10702] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.993,pid=10656,uid=0 [ 376.233360][T10702] Memory cgroup out of memory: Killed process 10656 (syz.0.993) total-vm:131432kB, anon-rss:932kB, file-rss:42740kB, shmem-rss:2432kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 378.331006][ T31] oom_reaper: reaped process 10656 (syz.0.993), now anon-rss:112kB, file-rss:40108kB, shmem-rss:2432kB [ 378.766200][T11817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1257'. [ 378.975916][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.982583][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.036618][T11817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1257'. [ 380.546666][T11834] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1260'. [ 382.688081][T11850] netlink: 648 bytes leftover after parsing attributes in process `syz.2.1265'. [ 382.731377][T11850] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1265'. [ 383.527058][T11871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1269'. [ 383.654226][T11865] ubi0: attaching mtd0 [ 383.724262][T11871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1269'. [ 383.754191][T11865] ubi0: scanning is finished [ 383.803381][T11865] ubi0: empty MTD device detected [ 384.500430][T11887] aoe: can't write to that file. [ 384.505455][T11887] aoe: can't write to that file. [ 384.550218][T11887] aoe: can't write to that file. [ 384.582166][T11887] aoe: can't write to that file. [ 384.607681][T11887] aoe: can't write to that file. [ 384.616124][T11887] aoe: can't write to that file. [ 384.636753][T11887] aoe: can't write to that file. [ 384.645699][T11887] aoe: can't write to that file. [ 384.666747][T11887] aoe: can't write to that file. [ 384.677912][T11887] aoe: can't write to that file. [ 384.696823][T11887] aoe: can't write to that file. [ 384.711313][T11887] aoe: can't write to that file. [ 384.730561][T11887] aoe: can't write to that file. [ 384.745787][T11887] aoe: can't write to that file. [ 384.758236][T11887] aoe: can't write to that file. [ 384.764377][T11887] aoe: can't write to that file. [ 384.774016][T11887] aoe: can't write to that file. [ 384.786094][T11887] aoe: can't write to that file. [ 384.791181][T11887] aoe: can't write to that file. [ 384.798377][T11887] aoe: can't write to that file. [ 384.806675][T11887] aoe: can't write to that file. [ 384.816558][T11887] aoe: can't write to that file. [ 384.821724][T11887] aoe: can't write to that file. [ 384.828761][T11887] aoe: can't write to that file. [ 384.836882][T11887] aoe: can't write to that file. [ 384.846512][T11887] aoe: can't write to that file. [ 384.856212][T11887] aoe: can't write to that file. [ 384.862901][T11887] aoe: can't write to that file. [ 384.886332][T11887] aoe: can't write to that file. [ 384.896651][T11887] aoe: can't write to that file. [ 384.906457][T11887] aoe: can't write to that file. [ 384.914699][T11887] aoe: can't write to that file. [ 384.922434][T11887] aoe: can't write to that file. [ 384.930498][T11887] aoe: can't write to that file. [ 384.946653][T11887] aoe: can't write to that file. [ 384.951730][T11887] aoe: can't write to that file. [ 384.956951][T11887] aoe: can't write to that file. [ 384.962005][T11887] aoe: can't write to that file. [ 384.967124][T11887] aoe: can't write to that file. [ 384.976164][T11887] aoe: can't write to that file. [ 384.981213][T11887] aoe: can't write to that file. [ 384.996774][T11887] aoe: can't write to that file. [ 385.001888][T11887] aoe: can't write to that file. [ 385.007037][T11887] aoe: can't write to that file. [ 385.012072][T11887] aoe: can't write to that file. [ 385.026158][T11887] aoe: can't write to that file. [ 385.031270][T11887] aoe: can't write to that file. [ 385.036349][T11887] aoe: can't write to that file. [ 385.041391][T11887] aoe: can't write to that file. [ 385.056135][T11887] aoe: can't write to that file. [ 385.061228][T11887] aoe: can't write to that file. [ 385.066408][T11887] aoe: can't write to that file. [ 385.071512][T11887] aoe: can't write to that file. [ 385.082215][T11887] aoe: can't write to that file. [ 385.096158][T11887] aoe: can't write to that file. [ 385.104249][T11887] aoe: can't write to that file. [ 385.117292][T11887] aoe: can't write to that file. [ 385.122744][T11887] aoe: can't write to that file. [ 385.136101][T11887] aoe: can't write to that file. [ 385.141184][T11887] aoe: can't write to that file. [ 385.156155][T11887] aoe: can't write to that file. [ 385.161334][T11887] aoe: can't write to that file. [ 385.166440][T11887] aoe: can't write to that file. [ 385.176115][T11887] aoe: can't write to that file. [ 385.181183][T11887] aoe: can't write to that file. [ 385.372292][T11903] WARNING! power/level is deprecated; use power/control instead [ 386.141366][T11925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1279'. [ 386.269420][T11923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1279'. [ 387.425778][T10656] syz.0.993 (10656) used greatest stack depth: 18576 bytes left [ 387.657089][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 387.698931][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 387.736597][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 387.745390][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 387.753478][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 387.762371][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 388.786432][T11954] chnl_net:caif_netlink_parms(): no params data found [ 389.012702][T11954] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.020068][T11954] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.030301][T11954] bridge_slave_0: entered allmulticast mode [ 389.041415][T11954] bridge_slave_0: entered promiscuous mode [ 389.094979][T11954] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.106808][T11954] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.114075][T11954] bridge_slave_1: entered allmulticast mode [ 389.135312][T11954] bridge_slave_1: entered promiscuous mode [ 389.200686][T11988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1290'. [ 389.213832][T11954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.378126][T11986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1290'. [ 389.410901][ T8274] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.594302][T11954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.846197][ T5840] Bluetooth: hci2: command tx timeout [ 389.859704][ T8274] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.968907][T11954] team0: Port device team_slave_0 added [ 389.999790][T11954] team0: Port device team_slave_1 added [ 390.110036][ T8274] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.276706][ T8274] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.307292][T11954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.324581][T11954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.350565][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.416854][T11954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.444015][T11954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.456589][T11954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.509159][T11954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.569691][T11954] hsr_slave_0: entered promiscuous mode [ 390.581153][T11954] hsr_slave_1: entered promiscuous mode [ 390.587990][T11954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.595594][T11954] Cannot create hsr debugfs directory [ 390.851201][ T8274] bridge_slave_1: left allmulticast mode [ 390.870583][ T8274] bridge_slave_1: left promiscuous mode [ 390.903185][ T8274] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.942921][ T8274] bridge_slave_0: left allmulticast mode [ 390.949071][ T8274] bridge_slave_0: left promiscuous mode [ 390.954908][ T8274] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.956546][ T5840] Bluetooth: hci2: command tx timeout [ 392.586363][ T8274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.619641][ T8274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.693296][ T8274] bond0 (unregistering): Released all slaves [ 393.250877][ T8274] hsr_slave_0: left promiscuous mode [ 393.406293][ T8274] hsr_slave_1: left promiscuous mode [ 393.594252][ T8274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.626777][ T8274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.647352][ T8274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.686817][ T8274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.792885][ T8274] veth1_macvtap: left promiscuous mode [ 393.819781][ T8274] veth0_macvtap: left promiscuous mode [ 393.831221][T12046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1299'. [ 393.846342][ T8274] veth1_vlan: left promiscuous mode [ 393.862200][ T8274] veth0_vlan: left promiscuous mode [ 394.018577][ T5840] Bluetooth: hci2: command tx timeout [ 394.021202][T12043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1299'. [ 395.712261][ T8274] team0 (unregistering): Port device team_slave_1 removed [ 395.883256][ T8274] team0 (unregistering): Port device team_slave_0 removed [ 396.156099][ T5840] Bluetooth: hci2: command tx timeout [ 396.557072][T12058] netlink: 'syz.2.1301': attribute type 3 has an invalid length. [ 396.564873][T12058] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1301'. [ 397.953119][T11954] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 398.124268][T11954] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 398.320045][T11954] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 398.430594][T11954] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 398.883426][ T5142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 398.893885][ T5142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 398.902598][ T5142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 398.913059][ T5142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 398.921134][ T5142] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 398.929047][ T5142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 399.142312][T11954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.318547][T11954] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.402764][ T6490] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.409988][ T6490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.480118][ T8279] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.487294][ T8279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.110741][T12096] chnl_net:caif_netlink_parms(): no params data found [ 400.301819][T11954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.587263][T12096] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.596402][T12096] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.603670][T12096] bridge_slave_0: entered allmulticast mode [ 400.617406][T12096] bridge_slave_0: entered promiscuous mode [ 400.648664][T12096] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.676145][T12096] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.683599][T12096] bridge_slave_1: entered allmulticast mode [ 400.705491][T12096] bridge_slave_1: entered promiscuous mode [ 400.840094][T12096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.892053][T12096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.041626][T12096] team0: Port device team_slave_0 added [ 401.056509][ T5142] Bluetooth: hci0: command tx timeout [ 401.162881][T12096] team0: Port device team_slave_1 added [ 401.282576][T12096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.301028][T12096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.366098][T12096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.400054][T12158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1312'. [ 401.485533][T12096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.541943][T12096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.554131][T12167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1312'. [ 401.646784][T12096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.883582][T11954] veth0_vlan: entered promiscuous mode [ 402.121044][T12096] hsr_slave_0: entered promiscuous mode [ 402.194765][T12096] hsr_slave_1: entered promiscuous mode [ 402.212442][T12096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 402.220566][T12096] Cannot create hsr debugfs directory [ 402.319132][T11954] veth1_vlan: entered promiscuous mode [ 402.513076][T11954] veth0_macvtap: entered promiscuous mode [ 402.556593][T11954] veth1_macvtap: entered promiscuous mode [ 402.639791][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.680721][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.691835][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.716097][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.747394][T11954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.819197][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.840625][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.861031][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.892156][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.933959][T11954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.021926][T11954] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.031375][T11954] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.044019][T11954] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.066240][T11954] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.136099][ T5142] Bluetooth: hci0: command tx timeout [ 403.247108][T12096] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 403.261621][T12096] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 403.377321][T12096] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 403.429525][T12096] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 403.606635][ T8278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.616415][ T8278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.885570][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.916640][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.960057][T12096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.994493][T12096] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.031586][ T8274] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.038795][ T8274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.097960][ T8274] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.105169][ T8274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.269562][T12096] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 404.280465][T12096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 404.449413][T12217] aoe: copy from user failed [ 404.454073][T12217] aoe: could not set interface list: too many interfaces [ 404.551080][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 404.885229][T12096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.014399][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 405.207766][ T5142] Bluetooth: hci0: command tx timeout [ 405.527801][T12096] veth0_vlan: entered promiscuous mode [ 405.561555][T12096] veth1_vlan: entered promiscuous mode [ 405.670565][T12096] veth0_macvtap: entered promiscuous mode [ 405.713209][T12096] veth1_macvtap: entered promiscuous mode [ 405.762545][T12096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.825624][T12096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.854944][T12096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.890933][T12096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.960756][T12096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.971596][T12096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.020405][T12096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.062187][T12096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.096080][T12096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.119882][T12096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.156155][T12096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.181799][T12096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.216100][T12096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.238081][T12096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.282212][T12096] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.308346][T12096] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.326598][T12096] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.335493][T12096] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.565622][ T6490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.612192][ T6490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.677578][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.716180][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.017483][ T5142] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3 [ 407.286607][ T5142] Bluetooth: hci0: command tx timeout [ 408.326220][T12344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1333'. [ 410.350113][T12417] capability: warning: `syz.5.1345' uses 32-bit capabilities (legacy support in use) [ 410.537517][T12419] netlink: 'syz.6.1344': attribute type 1 has an invalid length. [ 410.750931][ T29] audit: type=1800 audit(4294967373.730:8): pid=12414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1345" name="dbroot" dev="configfs" ino=37362 res=0 errno=0 [ 411.230518][T12423] sg_write: data in/out 2059/169 bytes for SCSI command 0x57-- guessing data in; [ 411.230518][T12423] program syz.4.1346 not setting count and/or reply_len properly [ 411.779568][T12429] delete_channel: no stack [ 411.794203][T12428] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1348'. [ 414.476834][T12473] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1360'. [ 415.166218][T12473] hsr_slave_0 (unregistering): left promiscuous mode [ 416.218023][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1366'. [ 416.288553][T12523] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1368'. [ 417.189325][T12543] tipc: Started in network mode [ 417.230946][T12543] tipc: Node identity ee00, cluster identity 4711 [ 417.297762][T12543] tipc: Node number set to 60928 [ 419.683913][T12594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1379'. [ 420.623540][T12616] netlink: 'syz.4.1381': attribute type 1 has an invalid length. [ 422.326861][T12658] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4294967287.4294967295.1), cmd(16) [ 422.846628][T11865] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 422.912426][T12677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1390'. [ 424.245347][T12716] netlink: 34 bytes leftover after parsing attributes in process `syz.4.1398'. [ 425.512413][T12761] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1407'. [ 425.646500][ T8279] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.705034][T12769] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1403'. [ 426.769947][T10649] syz.0.993 (10649) used greatest stack depth: 18560 bytes left [ 426.790876][T12787] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1412'. [ 426.806249][ T8279] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.259753][ T8279] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.618915][ T8279] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.405459][ T8279] bridge_slave_1: left allmulticast mode [ 429.423106][ T8279] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.489143][ T8279] bridge_slave_0: left allmulticast mode [ 429.495096][ T8279] bridge_slave_0: left promiscuous mode [ 429.511417][ T8279] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.073734][T12859] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1420'. [ 430.295686][T12856] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1420'. [ 430.906163][ T8279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.929720][ T8279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.950584][ T8279] bond0 (unregistering): Released all slaves [ 431.460245][ T8279] hsr_slave_0: left promiscuous mode [ 431.485750][T12885] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1423'. [ 431.496123][T12885] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 431.511550][ T8279] hsr_slave_1: left promiscuous mode [ 431.582127][ T8279] veth1_macvtap: left promiscuous mode [ 431.606242][ T8279] veth0_macvtap: left promiscuous mode [ 431.622177][ T8279] veth1_vlan: left promiscuous mode [ 431.631456][ T8279] veth0_vlan: left promiscuous mode [ 433.150603][ T8279] team0 (unregistering): Port device team_slave_1 removed [ 433.280670][ T8279] team0 (unregistering): Port device team_slave_0 removed [ 434.010081][T12917] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1429'. [ 434.222451][T12931] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1432'. [ 434.367396][T12933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1432'. [ 436.667227][T13031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1448'. [ 438.647836][T13081] binder: 13080:13081 ioctl 400c620e 9 returned -22 [ 438.717136][T13086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1455'. [ 438.762440][T13103] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1458'. [ 440.256929][T13117] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 440.278153][T13117] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 440.421160][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.436103][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.506082][T13117] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 440.527744][T13117] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 440.660780][T13117] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 440.693610][T13117] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 440.754233][T13117] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 440.820679][T13117] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 440.857247][T13117] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 441.049794][T13117] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 441.710351][T13195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1468'. [ 441.926165][ T5142] Bluetooth: hci1: command 0x0406 tx timeout [ 442.496458][ T5142] Bluetooth: hci4: command 0x0406 tx timeout [ 442.726194][ T5142] Bluetooth: hci2: command 0x0c1a tx timeout [ 442.890679][ T5142] Bluetooth: hci0: command 0x0c1a tx timeout [ 443.675679][T13231] netlink: 'syz.2.1475': attribute type 11 has an invalid length. [ 444.006197][ T5142] Bluetooth: hci1: command 0x0406 tx timeout [ 444.566148][ T5142] Bluetooth: hci4: command 0x0406 tx timeout [ 444.806218][ T5142] Bluetooth: hci2: command 0x0c1a tx timeout [ 444.967354][ T5142] Bluetooth: hci0: command 0x0c1a tx timeout [ 445.038539][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1480'. [ 445.952931][T13302] delete_channel: no stack [ 446.887922][ T5142] Bluetooth: hci2: command 0x0c1a tx timeout [ 447.046253][ T5142] Bluetooth: hci0: command 0x0c1a tx timeout [ 447.983614][T13343] delete_channel: no stack [ 448.153620][T13353] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1495'. `syz.2.1493'. [ 450.305814][T13400] sg_write: data in/out 575324612/104 bytes for SCSI command 0x6-- guessing data in; [ 450.305814][T13400] program syz.2.1503 not setting count and/or reply_len properly [ 450.500786][T13400] sg_write: data in/out 575324612/104 bytes for SCSI command 0x6-- guessing data in; [ 450.500786][T13400] program syz.2.1503 not setting count and/or reply_len properly [ 450.676262][T13400] sg_write: data in/out 575324612/104 bytes for SCSI command 0x6-- guessing data in; [ 450.676262][T13400] program syz.2.1503 not setting count and/or reply_len properly [ 450.734213][T13405] Invalid ELF header magic: != ELF [ 452.997117][T13452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1509'. [ 457.156459][T13547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1520'. [ 457.882141][T13570] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1522'. [ 459.931141][T13627] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1532'. [ 460.284287][T13627] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.585375][T13627] bridge_slave_1 (unregistering): left allmulticast mode [ 460.604608][T13627] bridge_slave_1 (unregistering): left promiscuous mode [ 460.624009][T13640] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1531'. [ 460.684421][T13627] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.721759][T13649] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 461.736343][T13649] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 461.758845][T13649] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 461.765000][T13649] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 463.126034][ T5142] Bluetooth: hci1: command 0x0406 tx timeout [ 463.247733][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1543'. [ 463.767416][ T5142] Bluetooth: hci0: command 0x0c1a tx timeout [ 463.773792][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 463.773811][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 466.404164][T13804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1554'. [ 466.549888][T13807] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1554'. [ 468.843446][T13838] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 470.658314][T13863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1565'. [ 470.792101][T13867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1565'. [ 473.673791][T13873] can: request_module (can-proto-0) failed. [ 475.041345][T13915] Process accounting resumed [ 475.258882][T13926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1577'. [ 475.388536][T13919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1577'. [ 478.146497][T13981] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1587'. [ 478.173640][T13981] netdevsim netdevsim6 netdevsim2: entered allmulticast mode [ 478.413765][T13983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1588'. [ 480.017452][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1601'. [ 480.155479][T14021] netlink: 'syz.6.1593': attribute type 33 has an invalid length. [ 480.226442][T14021] netlink: 322 bytes leftover after parsing attributes in process `syz.6.1593'. [ 481.054156][T14044] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1598'. [ 483.484062][T14086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1605'. [ 484.734259][T14119] netlink: 1204 bytes leftover after parsing attributes in process `syz.6.1614'. [ 484.764445][T14120] netlink: 1204 bytes leftover after parsing attributes in process `syz.6.1614'. [ 484.859116][T14119] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1614'. [ 485.170706][T14136] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1617'. [ 485.190734][T14137] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1616'. [ 485.466544][T14137] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1616'. [ 486.729723][T14167] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(5) [ 487.002112][T14172] netlink: 326 bytes leftover after parsing attributes in process `syz.5.1625'. [ 487.964212][T14173] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 488.018071][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1628'. [ 488.175361][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1628'. [ 488.808309][T14208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1631'. [ 490.524436][T14268] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1649'. [ 490.844361][T14277] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1651'. [ 491.497305][T14288] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1653'. [ 492.014083][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1659'. [ 492.057921][T14309] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1658'. [ 492.189154][T14315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1659'. [ 492.300482][T14318] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1658'. [ 493.091206][T14340] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1664'. [ 494.069845][T14371] sd 0:0:1:0: PR command failed: 1026 [ 494.094802][T14371] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 494.156565][T14371] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 494.921821][T14387] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1674'. [ 496.724056][ T29] audit: type=1800 audit(8277292056.420:9): pid=14440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1690" name="dbroot" dev="configfs" ino=42975 res=0 errno=0 [ 497.499738][T14469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1694'. [ 497.721918][T14475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1694'. [ 499.346768][T14519] tipc: Started in network mode [ 499.363474][T14519] tipc: Node identity ee00, cluster identity 4711 [ 499.426278][T14519] tipc: Node number set to 60928 [ 501.623647][T14561] futex_atomic_op_inuser: 23 callbacks suppressed [ 501.623668][T14561] futex_wake_op: syz.2.1714 tries to shift op by 64; fix this program [ 501.697393][T14559] futex_wake_op: syz.2.1714 tries to shift op by 64; fix this program [ 501.777505][T14588] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1718'. [ 501.854489][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.861133][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.977171][T14592] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1718'. [ 502.737932][T14618] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1722'. [ 502.763511][T14618] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1722'. [ 502.800997][T14618] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1722'. [ 502.835527][T14618] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1722'. [ 502.867871][T14618] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1722'. [ 502.911572][T14618] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1722'. [ 502.966317][T14618] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1722'. [ 502.987713][T14618] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1722'. [ 503.262465][T14632] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 504.539245][ T29] audit: type=1804 audit(4294967301.560:10): pid=14691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1736" name="/newroot/sys/kernel/tracing/trace_marker" dev="tracefs" ino=1253 res=1 errno=0 [ 504.584434][T14691] Process accounting resumed [ 504.595283][T14691] kernel write not supported for file /trace_marker (pid: 14691 comm: syz.4.1736) [ 504.609688][ T29] audit: type=1804 audit(4294967301.600:11): pid=14691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1736" name="/newroot/sys/kernel/tracing/trace_marker" dev="tracefs" ino=1253 res=1 errno=0 [ 505.080731][T14685] Process accounting resumed [ 505.085406][T14685] kernel write not supported for file /trace_marker (pid: 14685 comm: syz.4.1736) [ 505.308915][T14708] kernel write not supported for file /trace_marker (pid: 14708 comm: syz.4.1742) [ 505.564197][T14711] kernel write not supported for file /trace_marker (pid: 14711 comm: syz.4.1743) [ 506.538462][T14718] kernel write not supported for file /trace_marker (pid: 14718 comm: syz.4.1745) [ 506.873761][T14728] __nla_validate_parse: 29 callbacks suppressed [ 506.873782][T14728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1746'. [ 506.946829][T14733] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1746'. [ 507.522385][T14725] kernel write not supported for file /trace_marker (pid: 14725 comm: syz.4.1746) [ 508.182224][T14747] kernel write not supported for file /trace_marker (pid: 14747 comm: syz.4.1748) [ 508.378763][T14761] binder: 14760:14761 ioctl 40044900 800000000000003 returned -22 [ 509.363408][T14760] kernel write not supported for file /trace_marker (pid: 14760 comm: syz.4.1751) [ 510.409504][T14789] kernel write not supported for file /trace_marker (pid: 14789 comm: syz.4.1756) [ 510.645437][T14775] x86/mm: Checked W+X mappings: passed, no W+X pages found.        syzkaller syzkaller login: [ 512.227608][T14842] Invalid ELF header magic: != ELF [ 512.327014][T14820] kernel write not supported for file /trace_marker (pid: 14820 comm: syz.4.1763) [ 512.732350][T14855] kernel write not supported for file /trace_marker (pid: 14855 comm: syz.4.1769) [ 512.919373][T14860] kernel write not supported for file /trace_marker (pid: 14860 comm: syz.4.1770) [ 513.457018][T14876] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1771'. [ 513.706792][T14876] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1771'. [ 514.732235][T14862] kernel write not supported for file /trace_marker (pid: 14862 comm: syz.4.1773) [ 515.599955][T14901] kernel write not supported for file /trace_marker (pid: 14901 comm: syz.4.1776) [ 515.894637][T14918] kernel write not supported for file /trace_marker (pid: 14918 comm: syz.4.1780) [ 516.426675][T14924] kernel write not supported for file /trace_marker (pid: 14924 comm: syz.4.1781) [ 516.771121][T14932] kernel write not supported for file /trace_marker (pid: 14932 comm: syz.4.1784) [ 517.244487][T14940] kernel write not supported for file /trace_marker (pid: 14940 comm: syz.4.1787) [ 517.637023][T14951] tipc: Started in network mode [ 517.641909][T14951] tipc: Node identity ee00, cluster identity 4711 [ 517.756306][T14951] tipc: Node number set to 60928 [ 518.070916][T14936] kernel write not supported for file /trace_marker (pid: 14936 comm: syz.4.1787) [ 518.109526][T14959] random: crng reseeded on system resumption [ 518.622124][T14963] kernel write not supported for file /trace_marker (pid: 14963 comm: syz.4.1790) [ 518.935798][T14970] kernel write not supported for file /trace_marker (pid: 14970 comm: syz.4.1792) [ 519.289620][T14976] kernel write not supported for file /trace_marker (pid: 14976 comm: syz.4.1794) [ 519.760099][T14991] kernel write not supported for file /trace_marker (pid: 14991 comm: syz.4.1795) [ 520.999909][T14996] kernel write not supported for file /trace_marker (pid: 14996 comm: syz.4.1797) [ 521.343363][T15010] kernel write not supported for file /trace_marker (pid: 15010 comm: syz.4.1801) [ 522.258768][T15019] kernel write not supported for file /trace_marker (pid: 15019 comm: syz.4.1802) [ 522.525618][T15031] kernel write not supported for file /trace_marker (pid: 15031 comm: syz.4.1804) [ 522.982617][T15040] kernel write not supported for file /trace_marker (pid: 15040 comm: syz.4.1806) [ 523.109240][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1809'. [ 523.264539][T15059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1809'. [ 524.364129][T15058] kernel write not supported for file /trace_marker (pid: 15058 comm: syz.4.1810) [ 524.852650][T15088] kernel write not supported for file /trace_marker (pid: 15088 comm: syz.4.1816) [ 525.073410][T15099] kernel write not supported for file /trace_marker (pid: 15099 comm: syz.4.1820) [ 525.288780][T15113] tipc: Started in network mode [ 525.293746][T15113] tipc: Node identity ee00, cluster identity 4711 [ 525.300743][T15113] tipc: Node number set to 60928 [ 525.971828][T15122] kernel write not supported for file /trace_marker (pid: 15122 comm: syz.4.1822) [ 526.338253][T15128] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1825'. [ 527.345315][T15128] kernel write not supported for file /trace_marker (pid: 15128 comm: syz.4.1825) [ 527.815050][T15141] kernel write not supported for file /trace_marker (pid: 15141 comm: syz.4.1826) [ 528.245060][T15143] kernel write not supported for file /trace_marker (pid: 15143 comm: syz.4.1827) [ 528.441425][T15145] sg_read: process 432 (syz.5.1828) changed security contexts after opening file descriptor, this is not allowed. [ 528.651584][T15153] kernel write not supported for file /trace_marker (pid: 15153 comm: syz.4.1829) [ 528.962822][T15156] kernel write not supported for file /trace_marker (pid: 15156 comm: syz.4.1831) [ 529.184359][T15161] syz_tun: tun_chr_ioctl cmd 2147767517 [ 529.906173][T15174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1830'. [ 530.077418][T15180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1830'. [ 531.519294][T15034] kernel write not supported for file /trace_marker (pid: 15034 comm: syz.4.1804) [ 532.117169][T15204] nbd: couldn't find device at index 33904 [ 532.128448][T15159] kernel write not supported for file /trace_marker (pid: 15159 comm: syz.4.1832) [ 532.464557][T15210] kernel write not supported for file /trace_marker (pid: 15210 comm: syz.4.1839) [ 532.711503][T15229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1844'. [ 532.875592][T15237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1844'. [ 533.424921][T15248] netlink: 'syz.5.1847': attribute type 4 has an invalid length. [ 534.334763][T15256] kernel write not supported for file /trace_marker (pid: 15256 comm: syz.4.1843) [ 534.528580][T15265] kernel write not supported for file /trace_marker (pid: 15265 comm: syz.4.1850) [ 535.335618][T15307] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1855'. [ 535.508042][T15273] cgroup: fork rejected by pids controller in /syz4 [ 535.513995][T15314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1855'. [ 536.134253][T15333] openvswitch: netlink: Flow key attribute not present in set flow. [ 536.387718][T15339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1860'. [ 536.601714][T15341] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1862'. [ 537.100663][T15363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1865'. [ 537.599012][T15273] Process accounting paused [ 538.228671][T15400] ------------[ cut here ]------------ [ 538.233744][T15413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1875'. [ 538.234617][T15400] WARNING: CPU: 0 PID: 15400 at mm/page_alloc.c:4729 __alloc_pages_noprof+0xeff/0x25b0 [ 538.253598][T15400] Modules linked in: [ 538.257884][T15400] CPU: 0 UID: 0 PID: 15400 Comm: syz.6.1872 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 538.268762][T15400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 538.269222][T15412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1875'. [ 538.278921][T15400] RIP: 0010:__alloc_pages_noprof+0xeff/0x25b0 [ 538.293902][T15400] Code: 24 2c 00 00 00 00 89 cd 0f 84 8b f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 de b2 fe ff e9 69 f9 ff ff c6 05 54 6f 16 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 6f a4 0c 00 8b 14 24 e9 [ 538.313765][T15400] RSP: 0018:ffffc900039378e8 EFLAGS: 00010246 [ 538.319978][T15400] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 538.328089][T15400] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 538.336241][T15400] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000100 [ 538.344249][T15400] R10: 0000000000000100 R11: 0000000000000000 R12: 0000000000000013 [ 538.352439][T15400] R13: 0000000000040cc0 R14: 1ffff92000726f31 R15: 00000000ffffffff [ 538.360524][T15400] FS: 00007f3d9dc496c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 538.369567][T15400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 538.376242][T15400] CR2: 0000001b2e45ffff CR3: 0000000060874000 CR4: 00000000003526f0 [ 538.384260][T15400] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 538.392360][T15400] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 538.400444][T15400] Call Trace: [ 538.403756][T15400] [ 538.406828][T15400] ? __warn+0xea/0x3c0 [ 538.410944][T15400] ? __alloc_pages_noprof+0xeff/0x25b0 [ 538.416527][T15400] ? report_bug+0x3c0/0x580 [ 538.421080][T15400] ? handle_bug+0x54/0xa0 [ 538.425452][T15400] ? exc_invalid_op+0x17/0x50 [ 538.430322][T15400] ? asm_exc_invalid_op+0x1a/0x20 [ 538.435407][T15400] ? __alloc_pages_noprof+0xeff/0x25b0 [ 538.441033][T15400] ? stack_depot_save_flags+0x30e/0x9e0 [ 538.446719][T15400] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 538.452654][T15400] ? kasan_save_stack+0x33/0x60 [ 538.457627][T15400] ? __kasan_kmalloc+0xaa/0xb0 [ 538.462427][T15400] ? safesetid_uid_file_write+0x84/0xc0 [ 538.468061][T15400] ? vfs_write+0x24c/0x1150 [ 538.472605][T15400] ? ksys_write+0x12b/0x250 [ 538.477195][T15400] ? do_syscall_64+0xcd/0x250 [ 538.481920][T15400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.488211][T15400] ___kmalloc_large_node+0x84/0x1b0 [ 538.493460][T15400] __kmalloc_large_node_noprof+0x1c/0x70 [ 538.499196][T15400] __kmalloc_node_track_caller_noprof.cold+0x5/0x5f [ 538.505938][T15400] ? handle_policy_update+0x188/0x11e0 [ 538.511456][T15400] memdup_user_nul+0x2b/0x110 [ 538.516308][T15400] handle_policy_update+0x188/0x11e0 [ 538.521646][T15400] ? __pfx_handle_policy_update+0x10/0x10 [ 538.527491][T15400] ? apparmor_capable+0x114/0x1d0 [ 538.532567][T15400] ? bpf_lsm_capable+0x9/0x10 [ 538.537371][T15400] ? security_capable+0x7e/0x260 [ 538.542363][T15400] safesetid_uid_file_write+0x84/0xc0 [ 538.547863][T15400] ? __pfx_safesetid_uid_file_write+0x10/0x10 [ 538.554074][T15400] vfs_write+0x24c/0x1150 [ 538.558553][T15400] ? __fget_files+0x1fc/0x3a0 [ 538.563273][T15400] ? __pfx___mutex_lock+0x10/0x10 [ 538.568470][T15400] ? __pfx_vfs_write+0x10/0x10 [ 538.573288][T15400] ? __fget_files+0x206/0x3a0 [ 538.578087][T15400] ksys_write+0x12b/0x250 [ 538.582459][T15400] ? __pfx_ksys_write+0x10/0x10 [ 538.587419][T15400] do_syscall_64+0xcd/0x250 [ 538.591972][T15400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.597993][T15400] RIP: 0033:0x7f3d9cd85d29 [ 538.602444][T15400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.622266][T15400] RSP: 002b:00007f3d9dc49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 538.630822][T15400] RAX: ffffffffffffffda RBX: 00007f3d9cf75fa0 RCX: 00007f3d9cd85d29 [ 538.638902][T15400] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 538.647168][T15400] RBP: 00007f3d9ce01b08 R08: 0000000000000000 R09: 0000000000000000 [ 538.655282][T15400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.663361][T15400] R13: 0000000000000000 R14: 00007f3d9cf75fa0 R15: 00007ffd5ee5da18 [ 538.671463][T15400] [ 538.674510][T15400] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 538.681807][T15400] CPU: 0 UID: 0 PID: 15400 Comm: syz.6.1872 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 538.692595][T15400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 538.702674][T15400] Call Trace: [ 538.705977][T15400] [ 538.708942][T15400] dump_stack_lvl+0x3d/0x1f0 [ 538.713576][T15400] panic+0x71d/0x800 [ 538.717519][T15400] ? __pfx_panic+0x10/0x10 [ 538.721980][T15400] ? show_trace_log_lvl+0x29d/0x3d0 [ 538.727225][T15400] ? check_panic_on_warn+0x1f/0xb0 [ 538.732382][T15400] ? __alloc_pages_noprof+0xeff/0x25b0 [ 538.737881][T15400] check_panic_on_warn+0xab/0xb0 [ 538.742871][T15400] __warn+0xf6/0x3c0 [ 538.746809][T15400] ? __alloc_pages_noprof+0xeff/0x25b0 [ 538.752314][T15400] report_bug+0x3c0/0x580 [ 538.756688][T15400] handle_bug+0x54/0xa0 [ 538.760897][T15400] exc_invalid_op+0x17/0x50 [ 538.765453][T15400] asm_exc_invalid_op+0x1a/0x20 [ 538.770347][T15400] RIP: 0010:__alloc_pages_noprof+0xeff/0x25b0 [ 538.776455][T15400] Code: 24 2c 00 00 00 00 89 cd 0f 84 8b f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 de b2 fe ff e9 69 f9 ff ff c6 05 54 6f 16 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 6f a4 0c 00 8b 14 24 e9 [ 538.796090][T15400] RSP: 0018:ffffc900039378e8 EFLAGS: 00010246 [ 538.802167][T15400] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 538.810140][T15400] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 538.818112][T15400] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000100 [ 538.826085][T15400] R10: 0000000000000100 R11: 0000000000000000 R12: 0000000000000013 [ 538.834062][T15400] R13: 0000000000040cc0 R14: 1ffff92000726f31 R15: 00000000ffffffff [ 538.842056][T15400] ? stack_depot_save_flags+0x30e/0x9e0 [ 538.847620][T15400] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 538.853349][T15400] ? kasan_save_stack+0x33/0x60 [ 538.858208][T15400] ? __kasan_kmalloc+0xaa/0xb0 [ 538.862979][T15400] ? safesetid_uid_file_write+0x84/0xc0 [ 538.868530][T15400] ? vfs_write+0x24c/0x1150 [ 538.873036][T15400] ? ksys_write+0x12b/0x250 [ 538.877542][T15400] ? do_syscall_64+0xcd/0x250 [ 538.882225][T15400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.888322][T15400] ___kmalloc_large_node+0x84/0x1b0 [ 538.893532][T15400] __kmalloc_large_node_noprof+0x1c/0x70 [ 538.899172][T15400] __kmalloc_node_track_caller_noprof.cold+0x5/0x5f [ 538.905775][T15400] ? handle_policy_update+0x188/0x11e0 [ 538.911239][T15400] memdup_user_nul+0x2b/0x110 [ 538.915930][T15400] handle_policy_update+0x188/0x11e0 [ 538.921223][T15400] ? __pfx_handle_policy_update+0x10/0x10 [ 538.926947][T15400] ? apparmor_capable+0x114/0x1d0 [ 538.931982][T15400] ? bpf_lsm_capable+0x9/0x10 [ 538.936667][T15400] ? security_capable+0x7e/0x260 [ 538.941619][T15400] safesetid_uid_file_write+0x84/0xc0 [ 538.946997][T15400] ? __pfx_safesetid_uid_file_write+0x10/0x10 [ 538.953068][T15400] vfs_write+0x24c/0x1150 [ 538.957426][T15400] ? __fget_files+0x1fc/0x3a0 [ 538.962131][T15400] ? __pfx___mutex_lock+0x10/0x10 [ 538.967189][T15400] ? __pfx_vfs_write+0x10/0x10 [ 538.971990][T15400] ? __fget_files+0x206/0x3a0 [ 538.976692][T15400] ksys_write+0x12b/0x250 [ 538.981036][T15400] ? __pfx_ksys_write+0x10/0x10 [ 538.985904][T15400] do_syscall_64+0xcd/0x250 [ 538.990448][T15400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.996356][T15400] RIP: 0033:0x7f3d9cd85d29 [ 539.000773][T15400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.020403][T15400] RSP: 002b:00007f3d9dc49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 539.028831][T15400] RAX: ffffffffffffffda RBX: 00007f3d9cf75fa0 RCX: 00007f3d9cd85d29 [ 539.036809][T15400] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 539.044784][T15400] RBP: 00007f3d9ce01b08 R08: 0000000000000000 R09: 0000000000000000 [ 539.052763][T15400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.060736][T15400] R13: 0000000000000000 R14: 00007f3d9cf75fa0 R15: 00007ffd5ee5da18 [ 539.068724][T15400] [ 539.072018][T15400] Kernel Offset: disabled [ 539.076427][T15400] Rebooting in 86400 seconds..