last executing test programs: 9m29.244060735s ago: executing program 3 (id=124): sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7040fedbdf2502000000083c0002"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x8a3d6c34a12e245f) (async) socket(0x10, 0x2, 0x0) (async) mmap$auto(0x0, 0x7, 0xbd2, 0xeb1, 0x401, 0x7) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) (async) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1e, 0x4, 0x0) (async) r0 = socket(0x1e, 0x0, 0x0) (async) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x2183, 0x0) (async) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) (async) ioctl$auto(r0, 0x2, 0x2) (async) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) (async) close_range$auto(0x0, 0x2000000003, 0x0) socket(0x2, 0x1, 0x0) (async) socket(0x1e, 0x1, 0x0) (async) socket(0xa, 0x5, 0x0) (async) setsockopt$auto(0x2, 0x1, 0xa, &(0x7f0000000000)='\x00', 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r1, 0x104000000000010e, 0xb, 0x0, 0x400) (async) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20044840) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 9m29.026358806s ago: executing program 3 (id=126): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) ioctl$auto(0x3, 0x800005411, 0x38) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/cifs/smbd_send_credit_target\x00', 0x40, 0x0) 9m28.813965312s ago: executing program 3 (id=129): futex_waitv$auto(&(0x7f0000000000)={0xd, 0x5d98, 0x180, 0x4}, 0x77, 0x0, 0x0, 0x62ba) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x3) mprotect$auto(0x1ffff000, 0x4000000, 0x4) bpf$auto(0x0, &(0x7f0000000000)=@enable_stats={0x4}, 0xa3) r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) ppoll$auto(&(0x7f0000000100)={r0, 0x9, 0x101}, 0x7, 0x0, 0x0, 0x8) 9m27.873846389s ago: executing program 3 (id=135): sendmsg$auto_NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0xc050}, 0x4800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x15, 0x5, 0x7fff) r1 = socket(0xa, 0x801, 0x84) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r0) sendmsg$auto_NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=r2, @ANYBLOB="24002cbd7000fcdbdf25810000000c002e01ff030000000000000500d3000a000000b0006e809c00e900478d7558f2664ea30f90ed8f7437e85ddc94479b1c8edbcaacab4f02edef4661f3942f7d1e50b535e5f2c26ac622a5d441bd5a57d9d94027f63a38f7e5cc75ecfe421711eef3b0dd43d68eac845849abbd7e79ace49eb12ad5f4cd65b80f92e158565c1e6f09a3ce1494373c31457150b7542eb7a7612df5167afdda7f11a3eeb3d82e3b8c069bd65c53d0877d93de37018c5ee2b980b5ed2865cda210ed84239c1000e5800800cb00ac14142b0400ba8008001f010100000004004100040005c91e47750f87b225879ee6a2aec5aa09ab4b80cf7a44c704d8da2b63f1221bc70d2184a50cbb09ca75dfa138f81b29460253cb7d75f42db0f12cc05c516c7dd031d43657b4092b8418af5b", @ANYBLOB="f0000000", @ANYRES32=r0, @ANYRES64=r2, @ANYRES64=r2], 0xf0}, 0x1, 0x0, 0x0, 0x8804}, 0x80) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) socket(0x2, 0x3, 0xa) sendto$auto(0x3, 0x0, 0xf, 0x10, &(0x7f0000000140)=@in={0x2, 0x0, @empty}, 0x19) socket(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) r4 = fsopen$auto(&(0x7f0000000000)='\x00', 0x400) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r4) write$auto_proc_pid_set_comm_operations_base(r4, &(0x7f0000000840)="9f371bdf5e470d3a72099873d7c82dfb000000002ab7984e3ed4035aa22de66815190225161a678d128f6f5c96933392bc78dbee63695c1806316bd80d2a1712658de0fa3e62d9acabbc27a9abbdf3706f2c5da4a19a777f2a9c00008c329bae1821ee5a3f948f4163339ce5ce2c293eb23bfb9f8f2503a2df2f38f4a08bb7dae71d8b65e3b9d8f7f5391138a253613a8a7666a549b4f61c02debde7a23f6a8a7bac2b7374bf97a0517c7fd6ec8e1d52cd128e96ed2ee667c0efabb702f0e24e1d1d1a0cc2e2707e9547167bf865c4b11b9ccc4f2bc5d385d25a17b819d2e500d848417b5922767400000000000000a7f3218d794def93f6858b591939df016a4ace5b2f3a7d705c07b5ce96b4b2c91381fe9b123d3533ab78e36ae91e7ca96447f983a17e29f5c4703d1ebe7cec77dce257e94f128a713173571b1019d437bf541d53381fc35d0a6f4f501d3a2bbe86f2fd4e20279231b49afd0d2b082ea9a17753673aae4a4bf56299ae1462e73092474c5e3819fe558c653e5e817951326a483c678cb887551eec5d51f0130700000000000000a63514741ee4a05020d95ed5b73c1f4466c3c5d806876604bd3a66cc3e3e2bffca7d9ca75dd02eb46fbb72c676a58901245b014f47fb74b1a13330d10840e12f58eb1bfc09d9f35ed219ada951a775af971fe94186719cd0547964b7749cb39cd9f52dda86ebfd3a910686640e1c2b55683830d5be0ff86c4ec9b06977e6ffb858983347768a9a31190e713b6e44e1a5cd7805966799329083380e991a6f5257043a6c581685e374c9f8d7c2a7f0edbd869edf4ff5159ef44f590eeec1e0faf14f40b3792b4fe57dff1cc83ba149f93f75d48a30bb6bf4a3083509df214d3375", 0x275) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004100}, 0x40880) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/cgroup.kill\x00', 0xa001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x22, 0x80000, 0x2) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) mlockall$auto(0x7) madvise$auto(0x2000, 0xffffffffffff0001, 0x9) 9m27.700012561s ago: executing program 3 (id=138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000100)={0xf0, r1, 0x800, 0x70bd30, 0x25dfdbfc, {}, [@HWSIM_ATTR_ADDR_RECEIVER={0x3c, 0x1, "4015573722bda7b2d94bfdca94ad6fbb95ba2260ef9cd118732c48bb57ccb16c6cffa0e06ecc12af99622d0eaf2023ad19b3b35d1e955104"}, @HWSIM_ATTR_REG_STRICT_REG={0x4}, @HWSIM_ATTR_REG_STRICT_REG={0x4}, @HWSIM_ATTR_TX_INFO_FLAGS={0x94, 0x15, "147a2be56cc7cd600bc20eac7c8dfce6e7f7acaeccbd13a2538256ae62eed67e63a19d026f506826c32576a2b32092c40f2426ab2ecc1c15354109b32c8c0d04309e9e92b46e7c41a8c42777f0dd9ba72a31af17f4fbf5b86b2585b74dc8ab4b683bff5dd7515e76d16d9ce1b2451fccabf424b208f562a4b584d066cb85cce42ce593d49043a2f4e95f0b20ca5d250d"}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0xf0}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mkdir$auto(0x0, 0x8001) chdir$auto(0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/wireless\x00', 0x400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, r3, 0x170b, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40840}, 0x840) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0xe9) socket(0x2, 0x5, 0x0) socket(0x2, 0x2, 0x1) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) r4 = fcntl$auto(0x8000000000000001, 0x5, 0x8) read$auto_ima_measurements_count_ops_ima_fs(r4, &(0x7f0000000040)=""/61, 0x3d) clock_nanosleep$auto(0x2, 0x1000, 0x0, 0x0) timer_create$auto(0x2, 0x0, 0x0) 9m26.25784904s ago: executing program 3 (id=150): r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xfffffffffffffffc, 0x100000000004, 0x92f, 0x4000040eb2, r0, 0x300000000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x9, 0xff7, 0x8000000008011, 0x3, 0x0) syslog$auto(0x3, &(0x7f0000000000)='\x00', 0xa) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x801, 0x84) socket(0x2, 0x1, 0x0) socket(0x1, 0x2, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x0) fcntl$auto(0x3, 0x400, 0x2) r1 = socket(0xa, 0x3, 0x3a) setsockopt$auto(r1, 0x3a, 0x1, 0x0, 0x0) semctl$auto(0x1ff, 0x2, 0x3c52, 0x1) mmap$auto(0x0, 0x404005, 0x101, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0x0) r2 = socket(0x2a, 0x1, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) connect$auto(r2, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @my=0x0}, 0xb) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) socket(0xa, 0x3, 0x3a) 9m10.721487295s ago: executing program 32 (id=150): r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xfffffffffffffffc, 0x100000000004, 0x92f, 0x4000040eb2, r0, 0x300000000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x9, 0xff7, 0x8000000008011, 0x3, 0x0) syslog$auto(0x3, &(0x7f0000000000)='\x00', 0xa) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x801, 0x84) socket(0x2, 0x1, 0x0) socket(0x1, 0x2, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x0) fcntl$auto(0x3, 0x400, 0x2) r1 = socket(0xa, 0x3, 0x3a) setsockopt$auto(r1, 0x3a, 0x1, 0x0, 0x0) semctl$auto(0x1ff, 0x2, 0x3c52, 0x1) mmap$auto(0x0, 0x404005, 0x101, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0x0) r2 = socket(0x2a, 0x1, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) connect$auto(r2, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @my=0x0}, 0xb) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) socket(0xa, 0x3, 0x3a) 7m7.137835752s ago: executing program 0 (id=774): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x90003, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x8000, 0x0) r2 = getsid$auto(0xffffffffffffffff) fcntl$auto(r1, 0x6, r2) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto(0xfffffffd, 0x0, 0x0) timer_settime$auto(0x0, 0xffff8020, &(0x7f00000000c0)={{0xf, 0x10007}, {0x6, 0x7ff}}, 0x0) timer_gettime$auto(0x0, 0x0) socket(0x848000000015, 0x805, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x6, 0x0) fcntl$auto(0x3, 0x4, 0xa553) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x1) io_uring_setup$auto(0x3ff, 0x0) mlock2$auto(0x4, 0x9, 0x7f) io_uring_setup$auto(0x1, &(0x7f0000000000)={0x1c, 0x10002, 0x7f, 0x5, 0x6, 0x5, r0, [], {0x2, 0x2005, 0x2, 0x8, 0x400, 0xb533, 0xa, 0x5, 0x80000000}, {0x3, 0xd, 0x6e68, 0x8, 0x6b, 0x86fe, 0x0, 0x0, 0xb1}}) 7m6.862783894s ago: executing program 0 (id=777): socket(0x29, 0x2, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/kcm_stats\x00', 0x8282, 0x0) ioperm$auto(0x800, 0x5, 0xd) landlock_add_rule$auto(0xf6, 0x3, 0x0, 0x6cf) r1 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/buffer_percent\x00', 0x1, 0x0) r2 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) bpf$auto(0xe, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r2, 0xffffffffffffffff, 0x8, 0x3ff, 0xffffffffffffffff, @relative_fd, 0x5}, 0x8) socketpair$auto(0x25e, 0x3, 0x2, &(0x7f0000000000)=0x9) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x37, 0x80000, 0x3) semtimedop$auto(0x8668, &(0x7f0000000040)={0x5, 0x2, 0x6}, 0x76, &(0x7f0000000200)={0x6, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x48041, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001d40)='/proc/timer_list\x00', 0xa182, 0x0) read$auto_proc_iter_file_ops_compat_inode(r5, 0x0, 0xfffffe13) write$auto(r4, 0x0, 0x6) write$auto_buffer_percent_fops_trace(r1, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000180)=""/8, 0x8) 7m6.738112572s ago: executing program 0 (id=778): unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async, rerun: 64) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) (async, rerun: 64) ioctl$auto(0x3, 0xc0105512, 0x1) (async, rerun: 64) stat$auto(0x0, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8000, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (rerun: 32) r0 = open(0x0, 0x22040, 0x75) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) copy_file_range$auto(r0, 0x0, r1, 0x0, 0x21c1, 0x0) (async) io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8000, 0x0) (async) ioctl$auto(0x3, 0xc0481273, 0x38) (async) statmount$auto(0x0, 0x0, 0x1fe, 0x9) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$auto(0x3, 0x1276, 0x7) 7m4.496434314s ago: executing program 0 (id=788): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ptyp3/uevent\x00', 0x482c0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)=""/26, 0x1a) 7m1.645729888s ago: executing program 0 (id=790): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, 0x0, 0x6b) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x9) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000040), r0) sendmsg$auto_NBD_CMD_DISCONNECT(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1a0, r1, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '%\xae^\\I!!-\x00'}, @NBD_ATTR_SOCKETS={0x150, 0x7, 0x0, 0x1, [@nested={0x14, 0x1d, 0x0, 0x1, [@typed={0x8, 0x103, 0x0, 0x0, @str='\x9a%\x85\x00'}, @typed={0x8, 0x1, 0x0, 0x0, @u32=0x10}]}, @typed={0xd, 0xd2, 0x0, 0x0, @str='%\xae^\\I!!-\x00'}, @generic="569e5fa5235a2717505ac41748032d6997525e643048140e3685896845cedb3a3527ee47b87d9783514a1b8558ffce7c2501dc1eb733f3d74ce2cb315afebeb29aaa468fe3e49ea27d500acf582129a11a19525b1467d2c0d056dd9cf17bdde405aa9d66740397dd3d3903d06fc40e3e004ccc58ff850a628cd47cab0ccb28db78125239105f8b93b58a7277fea1073f95b7b5bff2ee69026beb65fa0f760d2d7a10f55d60583f7e16471dff385ca7f380b37ac93d019a6d2d8d53efe6292ba84231dc96702faa2f6dfe6485caf68b1a7937cbb9fbe7d285b2adf5187097ddc956bbf5f1", @generic="91c12ca3dc29f5aa8a3cf794318b21eedfcbf6191d1004199902f9be047bcfd67f5d5864875e8d180bd632ba7359d4521559bc81aac0a4b6e0b0b2a9", @nested={0x4, 0xf6}, @nested={0x4, 0x35}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4}, 0x20004010) 6m59.166084271s ago: executing program 0 (id=793): memfd_secret$auto(0x0) fchdir$auto(0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) close_range$auto(r0, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) recvmmsg$auto(0x3, 0x0, 0x9, 0x6, 0x0) 6m44.039525047s ago: executing program 33 (id=793): memfd_secret$auto(0x0) fchdir$auto(0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) close_range$auto(r0, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) recvmmsg$auto(0x3, 0x0, 0x9, 0x6, 0x0) 3m7.411236575s ago: executing program 4 (id=1754): socket(0x6, 0x2, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/sessionid\x00', 0x20000, 0x0) readv$auto(0x0, &(0x7f0000000080)={0x0, 0x1e}, 0x3) io_uring_setup$auto(0x9cb, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x5, 0xffff8002, 0x8}) setsockopt$auto(0x3, 0x5, 0x1, 0x0, 0x7) mkdir$auto(&(0x7f0000000000)='\xe6/\x00', 0x2) r0 = openat$auto_fops_u8_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/nfcsim/nfc0/dropframe\x00', 0x40, 0x0) mmap$auto(0x0, 0x8, 0xfffffffffffffffa, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x2b, 0x2010000000000) writev$auto(0x0, &(0x7f0000000040)={0x0, 0xff0f}, 0x9) write$auto(r0, &(0x7f0000000080)='!:\x00', 0x6) utime$auto(&(0x7f0000000040)='\xe6/\x00', 0x0) 3m7.173476817s ago: executing program 4 (id=1755): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, 0x0, 0x0) sched_setattr$auto(r1, &(0x7f0000000040)={0x3, 0x7c8, 0xa000, 0x7, 0xe9, 0x800, 0x2, 0x7, 0x5, 0x582b}, 0x1) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) mmap$auto(0xc, 0x200006, 0x1, 0x11, 0x602, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x6, 0x2020009, 0x9, 0x3a, r0, 0xffffffff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x30, 0x80000006, 0x4) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x42, 0x9, 0x6, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0xb, 0x40b4, 0xb, 0x6, 0x1010001, 0x80, 0x100000000, 0x2000000, 0x7, 0x0, 0x200, 0x0, 0x84, [0x9, 0x0, 0x10, 0xe1a, 0x0, 0x5, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x38ad502d, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0xffffffffffffbffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x7, 0xa38, 0x0, 0x5, 0xfffffffffffffffa, 0x7fffffffffffffff, 0x8, 0x7]}, 0x1fc, 0x10) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) madvise$auto(0x0, 0xffffffffffff0005, 0x19) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) mmap$auto(0x0, 0x200003, 0x4000000000df, 0x40eb2, r2, 0x2) mmap$auto(0x200000, 0x200006, 0x1, 0x40eb1, 0x602, 0xb00000000000) mmap$auto(0x0, 0x40000a, 0xdf, 0x12, 0xa, 0x8000) 3m5.353983016s ago: executing program 4 (id=1765): sendmsg$auto_NETDEV_CMD_NAPI_SET(0xffffffffffffffff, 0x0, 0x20008084) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) r0 = socketpair$auto(0x1e, 0x1, 0x0, 0x0) socket(0xb, 0x0, 0x45) socket(0x15, 0x5, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) socket(0xa, 0x3, 0xff) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1\x00', 0x100000, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x7, 0x6, 0x6}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) ioctl$auto(r2, 0xb21064d1, 0x20000a) socket(0x2, 0x2, 0x88) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) connect$auto(0x3, 0x0, 0x55) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) ioctl$auto_iommufd_fops_main(r0, 0x5, &(0x7f00000001c0)="6bec57eb0febc81fa88559f5b29bf5143c3901da5fd92b96bf76c1aab50c76400a6a17a2d7d590322769bbc6ffa524e7a8f639417e708abe8ab8192a7f3529c186b814874d8558a0dd0969d5b7850745cf8903cf1f09e71fb378b536c71ccc9bbe98df79428113bb5fcb86600496a6ced26ecb4ac4a11d5b72af30ff6804ae30776a1ff866e1b161be5b3e3a45a87d37b1f1eed262fc8e19ca2a7ba885cae3b9fa6f3d20a99909ff36d594b37b") ioctl$auto(0x3, 0x5411, 0x38) close_range$auto(r0, r1, 0xf) write$auto(0x3, 0x0, 0x5dc) 3m4.98626108s ago: executing program 4 (id=1767): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prlimit64$auto(0x0, 0x8, &(0x7f0000002740)={0xe2, 0xfffffffffffffffd}, &(0x7f0000002780)={0x80, 0x9}) (async) prlimit64$auto(0x0, 0x8, &(0x7f0000002740)={0xe2, 0xfffffffffffffffd}, &(0x7f0000002780)={0x80, 0x9}) madvise$auto(0x0, 0x20000a, 0x4) 3m4.674022198s ago: executing program 4 (id=1768): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) r0 = socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240400b1}, 0x40901) sendto$auto(r0, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) tkill$auto(0x1, 0x7) 3m2.372028068s ago: executing program 4 (id=1774): r0 = socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c7, 0x8, 0x100000000}}) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@HWSIM_ATTR_RX_RATE={0x8, 0x5, 0x9}, @HWSIM_ATTR_ADDR_RECEIVER={0xa, 0x1, "0903fe2cb6bf"}, @HWSIM_ATTR_FRAME={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x4040, 0x75) socket(0xa, 0x2, 0x3a) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) socket(0x10, 0x2, 0x0) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c7, 0x8, 0x100000000}}) (async) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_HWSIM_CMD_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@HWSIM_ATTR_RX_RATE={0x8, 0x5, 0x9}, @HWSIM_ATTR_ADDR_RECEIVER={0xa, 0x1, "0903fe2cb6bf"}, @HWSIM_ATTR_FRAME={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x4040, 0x75) (async) socket(0xa, 0x2, 0x3a) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) (async) 3m2.006930908s ago: executing program 34 (id=1774): r0 = socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c7, 0x8, 0x100000000}}) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@HWSIM_ATTR_RX_RATE={0x8, 0x5, 0x9}, @HWSIM_ATTR_ADDR_RECEIVER={0xa, 0x1, "0903fe2cb6bf"}, @HWSIM_ATTR_FRAME={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x4040, 0x75) socket(0xa, 0x2, 0x3a) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) socket(0x10, 0x2, 0x0) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c7, 0x8, 0x100000000}}) (async) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_HWSIM_CMD_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@HWSIM_ATTR_RX_RATE={0x8, 0x5, 0x9}, @HWSIM_ATTR_ADDR_RECEIVER={0xa, 0x1, "0903fe2cb6bf"}, @HWSIM_ATTR_FRAME={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x4040, 0x75) (async) socket(0xa, 0x2, 0x3a) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) (async) 1m56.790477561s ago: executing program 5 (id=1956): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x9, 0x21e9, 0x7ff, 0x6, 0x2, 0xb, 0x2e, 0x0, 0x3}, 0x6f4) (async) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x1}, 0xf) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) mmap$auto(0x3, 0x4, 0x4000000000dc, 0x40eb2, 0xa1c, 0x8) (async) madvise$auto(0x0, 0xffffffffffff0008, 0x19) (async) madvise$auto(0x0, 0x53, 0x9) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) (async) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) 1m53.555066363s ago: executing program 5 (id=1967): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0x3, 0x0, 0x55) (async, rerun: 32) r0 = socket(0x2, 0x1, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) memfd_create$auto(0x0, 0xe) (async, rerun: 64) socket(0x2, 0x1, 0x106) (async, rerun: 64) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async) r1 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, 0xffffffffffffffff, 0xffffffff}, 0xd) fcntl$auto(0xffffffffffffffff, 0x400, 0x1) (async) r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000002c0), r0) sendmsg$auto_NFC_CMD_DEV_UP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000180)=""/250, 0xfa) (async) write$auto(0x3, 0x0, 0xfdf3) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async, rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 1m53.179078117s ago: executing program 5 (id=1961): r0 = socket(0x2, 0x1, 0x0) getsockopt$auto(r0, 0x6, 0x7, &(0x7f00000003c0)='/dev/ptys4\x00', &(0x7f0000000000)=0x6) 1m52.6253653s ago: executing program 5 (id=1972): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82082, 0x0) io_uring_setup$auto(0x6, 0x0) readv$auto(r0, &(0x7f00000000c0)={0x0, 0x1}, 0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram14\x00', 0x400, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) mlockall$auto(0x7) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) read$auto(0xffffffffffffffff, 0x0, 0x10000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) mmap$auto(0x1, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0xffffffffffff98f7) remap_file_pages$auto(0x6a27, 0x1000, 0x100000000000002, 0xb74, 0x669) semctl$auto(0x40, 0x6, 0x400, 0x7) madvise$auto(0x0, 0xfffffffdfffeffff, 0x15) 1m51.038106111s ago: executing program 5 (id=1966): mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe) (async) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0xfffe) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) rename$auto(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000010, 0x8, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103}) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async) r2 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev7\x00', 0x181782, 0x0) (async) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev7\x00', 0x181782, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) ioctl$auto(0x3, 0xc040564a, 0x38) (async) ioctl$auto(0x3, 0xc040564a, 0x38) ioperm$auto(0x7, 0x71, 0x863) iopl$auto(0x3) (async) iopl$auto(0x3) ioperm$auto(0x5, 0x3432, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x1a9382, 0x0) write$auto(r4, 0x0, 0x5) (async) write$auto(r4, 0x0, 0x5) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/vivid/parameters/vid_cap_nr\x00', 0x48040, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/anycast6\x00', 0x181580, 0x0) (async) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/anycast6\x00', 0x181580, 0x0) pread64$auto(r6, 0x0, 0x1ff, 0x20d) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r1, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB="58050000", @ANYRES16=0x0, @ANYRES8=r3, @ANYRES32=r5, @ANYBLOB="0800b300", @ANYRES32=r6, @ANYBLOB="4c00018005009000000000002e0025800400008008002500", @ANYRES32=r0, @ANYBLOB="b0765d3c428af0e03333d31a0363a5354c577a5e84b8a80b3811089f0da3000010004580050062000000000004002a80ee01018008003d00", @ANYRES32=r3, @ANYRES64, @ANYRES32=r2, @ANYRESOCT=r1], 0x558}, 0x1, 0x0, 0x0, 0x40000840}, 0x4000000) msgrcv$auto(0x0, 0x0, 0x1000, 0x8000000000000000, 0xb5) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/usb/drivers/mos7720/uevent\x00', 0x4000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000000)=""/199, 0xc7) setsockopt$auto(r3, 0x29, 0x12, &(0x7f00000003c0)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x9) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) tkill$auto(0x80000000000001, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 1m50.381792463s ago: executing program 5 (id=1971): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) acct$auto(&(0x7f0000000000)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x0, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) r0 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x1, 0x0) write$auto_proc_pid_attr_operations_base(r0, &(0x7f0000000000)='-', 0x1) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000a00000008000200", @ANYRES32=0x0, @ANYBLOB="080140"], 0x68}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x240408c3) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x4605, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) poll$auto(&(0x7f0000000e00)={r2, 0x101, 0x8}, 0x5, 0xfff) 1m50.074981743s ago: executing program 35 (id=1971): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) acct$auto(&(0x7f0000000000)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x0, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) r0 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x1, 0x0) write$auto_proc_pid_attr_operations_base(r0, &(0x7f0000000000)='-', 0x1) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000a00000008000200", @ANYRES32=0x0, @ANYBLOB="080140"], 0x68}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x240408c3) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x4605, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) poll$auto(&(0x7f0000000e00)={r2, 0x101, 0x8}, 0x5, 0xfff) 10.950339254s ago: executing program 2 (id=2381): openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x40802, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x3, 0xa) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/pci0000:00/0000:00:04.0/subsystem_vendor\x00', 0x42000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001dc0)=""/195, 0xc3) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(r2, &(0x7f00000006c0)={{&(0x7f0000000000), 0x40000401, 0x0, 0x1, 0x0, 0x6, 0x2c147584}, 0x5}, 0x4000003, 0xfa96) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000500), r4) sendmsg$auto_IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000003280)=ANY=[@ANYBLOB="a4010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1a4}, 0x1, 0x0, 0x0, 0x4000}, 0x40008000) statx$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x7, 0x5, &(0x7f0000000080)={0x9, 0x1000, 0xd, 0x40, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, 0x73c75df0, 0x4, 0x9, 0x88, {0x6, 0x5}, {0x8, 0x81}, {0x5, 0x7}, {0x74, 0x1ad1}, 0x7ff, 0x7, 0x7f, 0x20, 0x7f, 0x3, 0x3, 0x1, 0x0, 0x9304, 0x400, 0xd, [0xe9a, 0x81, 0x8, 0xba, 0x80, 0x10000, 0x6, 0x80000, 0x1e8ac]}) r7 = geteuid() r8 = getuid() setresuid$auto(0x0, r8, 0xee00) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) socket(0x10, 0x3, 0x6) socket(0x22, 0x2, 0x2) socket(0x2b, 0x1, 0x1) setsockopt$auto(0x6, 0x8000000000000006, 0x3, 0x0, 0x7ffffc) kill$auto(0x0, 0x3f) setreuid$auto(r7, 0x0) r9 = syz_clone(0x4200000, &(0x7f0000000180)="7241b854ea54fc0b3e6e96a672f960b82e84dcf564873cc4a622c221d217c88bbc557cf8288164c9ba7f5ec990f4c7a8a3b8af6fef16e23a442049db1a032e64ce86999171bcbba3b8b18d67a0d305690a2f1fc160dcece9fda970bf68d46c22677b8fe27a130c11c622c5379b5ae63c9e3ada35527818e66502cda84c2e014ce89c0d66b58d050593f205e962c3355299c5cb58dd467730f6523c17849d25d285a17423645a762eb702955f2dde0ea2d50d57f58adec1e181e0ef0197fa1685f331c49f06a20e074a37288bd857922f98e48313d684da4f9b2e4b68e390beb88d6c6610b740c32517a47f9cd6f5", 0xee, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000880)="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") sendmsg$auto_IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000003440)=ANY=[@ANYBLOB="cc190000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0800fe006314c77180fe9be09a30716691c221bfe498cc64c1bde3bc9063cf7348158cd836c07cad7ecf725a5b6be16a7e196fe35cbd889e7c1ca5290f003ee03d87a738237d9db55943f94d7959537a08850700000000000000000000f91685aa27815e55ed20", @ANYRES32=0xee00, @ANYBLOB="000000e9010380090022002415285d000000004d00c68008003900030000000c008c000600000000000000d9548f195a4266934c07d916db8d59f06ad1452737752ac5ac4b072927010a27a3aa0947332606c25608001300", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0400188008001b00ac1414bb000000a0755dc5de4340c7b870261a3b4a698228f457345c38bcdb0533a19f643455f5ae89e5837da4a16ef37145854ce9f18cdd61b286e6d0d645885c0e2cba740de6f093e0b3e85d96d5d5c8d70cf979ee36fea378b2b1ddf49147de395c460000008a150280610152800f005b002f6465762f74747953310000e18bb570676e6ce308c893aa94c260f06a078ad59dc56aeac5749885b0a5526a28bbb58d7788ed79ea2813627bcca7a2f4fe6b00af98202b07194d748184622c68de2c578ea81ffe6169db08002200", @ANYRES32, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="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"], 0x19cc}, 0x1, 0x0, 0x0, 0x4}, 0x4010) 10.502200344s ago: executing program 2 (id=2385): prctl$auto(0x4c, 0x1, 0x4, 0x5, 0x7) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0x5419, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x84, 0x4, 0x0, &(0x7f0000000080)=0x9cc) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) futex_wait$auto(0x0, 0x631a, 0x3, 0x0, 0x0, 0x4) r1 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r1, 0x29, 0x5, 0x0, 0x1) r2 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000100), r0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/midiC2D1\x00', 0x40f00, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r3, 0xc0245720, &(0x7f0000000240)={0x1, 0x0, 0x3, 0x6, 0xb04d, "68e6fe89d79059ae94debcc36b2972d2"}) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x300, 0x70bd2d, 0x25dfdbfe}, 0x14}}, 0x880d1) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/002/001\x00', 0x80, 0x0) ioctl$auto_MON_IOCQ_URB_LEN(r0, 0x9201, 0x0) 10.178643432s ago: executing program 7 (id=2389): unshare$auto(0x40000080) (async) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x7f, 0x200000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x18, 0x17) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) futex_requeue$auto(0x0, 0x80, 0x2, 0x101) (async) bpf$auto(0x23, 0x0, 0x101) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) clone$auto(0x20003b46, 0x80000000002, 0x0, 0x0, 0x2) socket(0x18, 0x5, 0x2) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) memfd_create$auto(0x0, 0xaa30) (async) socket(0x2, 0x1, 0x106) (async) connect$auto(0x3, &(0x7f00000000c0), 0x55) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x600007, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) (async) ioctl$auto(0xc8, 0x400454d9, 0x5c8d) mlockall$auto(0x7) (async) r0 = openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0) mmap$auto(0x1, 0x20009, 0x4000000000df, 0xebd, r0, 0x8000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x28, 0x9}, 0x7}, 0x3, 0x0) (async) socket(0x10, 0x2, 0x0) 8.485216825s ago: executing program 2 (id=2392): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0xa240, 0x15e) mmap$auto(0x0, 0x400008, 0xdb, 0x9b72, 0x9, 0x7fff) (async) mmap$auto(0x0, 0x400008, 0xdb, 0x9b72, 0x9, 0x7fff) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socketpair$auto(0x4, 0x1, 0x20000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TCFLSH2(r0, 0x541b, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) (async) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) fcntl$auto(0x3, 0x4, 0x7fffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_setup$auto(0x401, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/default/drop_gratuitous_arp\x00', 0x141241, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/midi2\x00', 0x103341, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/midi2\x00', 0x103341, 0x0) socket(0x2, 0x80802, 0x0) (async) socket(0x2, 0x80802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) setfsuid$auto(0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x82204, 0x0) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/ubifs/tst_recovery\x00', 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0x2) (async) socket(0x21, 0x2, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/kcm_stats\x00', 0x20000, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/kcm_stats\x00', 0x20000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 7.818534177s ago: executing program 7 (id=2395): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) mmap$auto(0x7, 0x8, 0x7, 0x18, 0x42c8b44c, 0x0) r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x40, 0x2, 0x9, 0x111, 0x9, 0x7) open(0x0, 0x22240, 0x16c) madvise$auto(0x0, 0xffffffffffff0001, 0x15) bpf$auto(0x80, &(0x7f0000000100)=@bpf_attr_1={r0, 0x4, @value=0x7f2b, 0x5}, 0xf) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x8000000, 0x6, 0x60000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x6, 0x7, 0x1ff) msync$auto(0x0, 0x2000000005, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8) 7.169948001s ago: executing program 2 (id=2398): socket(0x2, 0x3, 0xa) userfaultfd$auto(0x1) sched_setaffinity$auto(0x0, 0x80, &(0x7f0000000000)=0x3) open(&(0x7f0000000000)='./file0\x00', 0xa040, 0x122) splice$auto(0x4, 0x0, 0x2, 0x0, 0xfffffffffffffffc, 0x4) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x6, 0x40000000084, 0x70, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x3c, 0x3, 0x1ffde, 0x7, 0x3, 0x4, 0x9, 0x3, 0x6, 0x5, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x7, 0x0, 0x7, 0x20, 0x200, 0x0, 0x84, [0xfffffffffffffffd, 0x0, 0x0, 0x50100000000000, 0x3, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x24, 0x40000000000003, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x200000000001, 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x1, 0x7, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xc8, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x4000000000]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) setpriority$auto(0x0, 0x1, 0x0) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x7fe, 0xfe2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) 5.32571356s ago: executing program 2 (id=2404): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x7, 0xb}, 0x401}, 0x5, 0x20000000) read$auto_fops_x64_ro_(r0, &(0x7f0000000180)=""/196, 0xc4) 4.987230508s ago: executing program 7 (id=2405): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) clock_gettime$auto(0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x0, 0x800, 0x2) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="7201", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) r2 = socket(0x6, 0x6, 0x7) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xffffffffffffff07, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="5402000070b64f185dfd94d1e954214b55a03b85e317c0bf6ac6981b146d112508630fe473d4cdb6a71d04f1ef", @ANYRES8=r1, @ANYBLOB="49c62bbd7000ffdbdf251f0000007d002901b034167f67a3fc2b5a5996d4f84de4bd4240f47cd6c80ffc62f3b860e2bbd5ec4cce56f72f88f5c290c1cb8557d478ed87490d16c346e972502896d69a29be9e489be8e5ae8c9e06c8ef2bd3bb75eea4a774ce164de86f4f0be0fa23ae483bd325ca260f8df3bd1af063c3d949261554c7df88894e6cbc76a500000008003700030000000800a500f4e40000a50111801800478014004300fe8000000000000000000000000000280800de00", @ANYRES64, @ANYRES32=r2], 0x254}, 0x1, 0x0, 0x0, 0x4000004}, 0xc4) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x5, 0x0, 0x2, 0x8}, 0x2}, 0x10a, 0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_SET(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000300)=ANY=[@ANYBLOB="64160000", @ANYBLOB="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"], 0x1664}, 0x1, 0x0, 0x0, 0x2200c851}, 0x4) io_uring_setup$auto(0x0, 0x0) ioctl$auto(0x4000000000000c8, 0x400454e2, 0x3) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/error_log\x00', 0x40, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb1, 0x10006, 0x300000000000) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0) ioctl$auto(r4, 0x4018620d, 0x9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) 3.931758905s ago: executing program 7 (id=2408): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000003240), 0x10001, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x1f53, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x0) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) waitid$auto(0x0, 0x5c5, 0x0, 0x4, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0xa0b42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xd) listen$auto(0xffffffffffffffff, 0x26da) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x11, 0x2, 0x0, 0x1000, 0xffffffffffffffff, 0x0, 0x0, 0xfa97, 0xfffffffffffffff9, 0x5, 0x4, 0x100000007ffffffe, 0x7fffffffffff7fff, 0x5f3, 0x7, 0xfffffffffffffa79, 0x6}) ioperm$auto(0x800, 0x5, 0xd) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0x3a38}, 0x1, 0x0, 0x0, 0x4}, 0x40082) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, 0x0) socket(0x11, 0x2, 0x89) bpf$auto(0x0, 0x0, 0xa3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) mmap$auto(0x1, 0x400008, 0x100000000, 0x9b72, 0x4, 0x8000) 3.675132285s ago: executing program 2 (id=2409): unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) removexattr$auto(0x0, 0x0) mmap$auto(0x4, 0x2020009, 0x8, 0xeb1, 0xffffffffffeffffa, 0x7ffd) getrandom$auto(0x0, 0x6000000, 0x3) (async) getrandom$auto(0x0, 0x6000000, 0x3) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000001080)=""/4092, 0xffc) (async) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000001080)=""/4092, 0xffc) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1d, 0x2, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x252802, 0x190) (async) open(0x0, 0x252802, 0x190) socket(0x1, 0x1, 0x0) (async) socket(0x1, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) (async) socket(0x1e, 0x4, 0x0) socket(0xf, 0x4, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) get_robust_list$auto(0x0, 0x0, 0x0) (async) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) connect$auto(0x3, &(0x7f00000001c0), 0x55) (async) connect$auto(0x3, &(0x7f00000001c0), 0x55) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) 2.764409757s ago: executing program 6 (id=2413): socket(0x2, 0x1, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttype/power/runtime_active_time\x00', 0x14180, 0x0) (async) setsockopt$auto(0x3, 0x8000000000000006, 0x22, 0x0, 0x7ffffc) 2.225897107s ago: executing program 1 (id=2414): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r2, @ANYRES16=r1, @ANYBLOB="010023660b0824de32807500000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0164608a596af50047f1b6cad20029bd7000ff00000000008000"], 0x20}, 0x1, 0x0, 0x0, 0x4008801}, 0x24000802) sysfs$auto(0x3, 0x5, 0xfffffffffffffffb) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x44, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x2000c000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_DEL_STATION(r5, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x490}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r6 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/ip6tnl0/accept_dad\x00', 0x242, 0x0) sendfile$auto(r6, r7, 0x0, 0x7) sysfs$auto(0x3, 0x10001, 0x7fff) socket(0x1, 0x1, 0x1) bind$auto(0x3, &(0x7f0000000140), 0xd) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/trace_marker_raw\x00', 0x200002, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x3e1143, 0x0) semctl$auto(0x5, 0x2, 0x13, 0xc) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyya\x00', 0x800, 0x0) 2.153358489s ago: executing program 6 (id=2415): mmap$auto(0x0, 0x40009, 0xdf, 0x9b75, 0x800, 0x28000) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x11, 0xffffffffffffffff, 0x0) (async) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r0, 0x1002, 0x0, 0x0, 0x0, 0x2) ioperm$auto(0x7, 0x6, 0x3) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) (async) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) socket(0x2, 0x80002, 0x73) (async) mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) write$auto(0x800000000000c8, 0x0, 0x1a) mmap$auto(0x6, 0x9, 0x6, 0x32d4, 0x10000, 0x80000001) (async) ioctl$auto(0xc8, 0xffffffff800454dd, 0x4000000000008) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) (async) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x40009, 0x0, 0x9b73, 0x7, 0x28000) mremap$auto(0x4002, 0x8, 0x403fd6, 0x0, 0xfffff000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) mmap$auto(0x0, 0x7fffffffffffffff, 0xdf, 0x15, 0x7, 0x28000) write$auto(r1, 0x0, 0x75) (async) removexattr$auto(0x0, 0x0) (async) mmap$auto(0x4, 0x2020009, 0x8, 0xeb1, 0xffffffffffeffffa, 0x7ffd) (async) getrandom$auto(0x0, 0x3, 0xa) memfd_create$auto(0x0, 0x5) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi28\x00', 0xc0500, 0x0) select$auto(0x5, &(0x7f0000000080)={[0x20000009, 0xfffffffffffffffc, 0x9, 0x5, 0xc, 0x3, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x202, 0x6, 0x1]}, 0x0, 0x0, 0x0) 1.967875865s ago: executing program 1 (id=2416): mremap$auto(0x21000000, 0x7, 0x3fd6, 0x3, 0x20000000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) r0 = openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/make-it-fail\x00', 0x658002, 0x0) (rerun: 64) write$auto_proc_fault_inject_operations_base(r0, &(0x7f00000000c0)="9be783e4f6f8700450d166117a9b85b0931782b246ff32aaf38b39021e6ef491b6b85f43c8bce9ee7bf3d03f1793ebf8118ed8663c5463705d9d1c474a0ab1e4e4c4d7a584834c2572277c950cb342db3fd5806fe803a0252352663707951a3e6396c73df5e52f49b48bdcae4ce3f296a31b3b0dfb7ea01d646c17305f43dd5ca1ed5c4bfac484712d1f85b84d77514022ecfd79f94d2be285d8ca14ad33ddf1feb30f2eb1a056f75163c8c3533cd6081202314fea8383a2b0790b5ed0144edaf27b353ed188220632ff058177e57895", 0xd0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlockall$auto(0x7) (async) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) (async, rerun: 64) fcntl$auto(0xff80000000000000, 0x406, 0x1) (rerun: 64) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200, 0x0) brk$auto(0x8) (async) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000080), 0x0) (async) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000300)=0x80000000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) mremap$auto(0x7fffffff, 0x53e, 0x4, 0x8003, 0x3) (rerun: 64) 1.745867895s ago: executing program 6 (id=2417): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100025bd7000fbdbdf250200000008000100fb19a1450c00060069a3ffffffffffff"], 0x28}}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xffff) sendmsg$auto_OVS_METER_CMD_SET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x52204b}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000012ea45827c66", @ANYRES16=r1, @ANYBLOB="020029bd7000fddbdf2502000000080001008e82000008000100f0ffffff7fff0100080000000400060004000200040002000c0005000400000000000000080007007f000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) madvise$auto(0x100000, 0x8000, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) open(&(0x7f0000000300)='./file0\x00', 0x7ffd, 0x12) openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x4, 0x400008, 0xdf, 0x9b72, r0, 0xffffffffffffffff) readv$auto(0x3, 0x0, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x1000, 0x400003, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003ec, 0x14) write$auto(0x3, 0x0, 0x100082) openat$auto_short_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/short_retry_limit\x00', 0x0, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x33) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140), 0x55) setsockopt$auto(0x400000000000003, 0x29, 0x10, 0x0, 0x40020000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfdef) lsm_get_self_attr$auto(0x64, &(0x7f0000001400)={0x10, 0x3, 0x7fffffffffffffff}, &(0x7f0000002440)=0x1ff, 0x0) 1.528907056s ago: executing program 1 (id=2418): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.5/usb6/6-0:1.0/usb6-port1/connect_type\x00', 0x103280, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003800)=""/168, 0xa8) 1.490072945s ago: executing program 7 (id=2419): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) (async) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000dddbdf250200010008000300000000000800150001"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) (async) r0 = prctl$auto(0x1000000003b, 0x1000000001, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) shutdown$auto(r0, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) kill$auto(0x0, 0x15) 937.881018ms ago: executing program 7 (id=2420): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r0 = open(0x0, 0xeee00, 0x31) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) writev$auto(0x1, 0x0, 0x1) r1 = socket(0xa, 0x2, 0x73) write$auto_msr_fops_msr(r0, 0x0, 0x0) getsockname$auto(r1, &(0x7f0000000240), &(0x7f0000000280)=0xaea) r2 = syz_clone3(&(0x7f0000000340)={0x280008000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x26}, &(0x7f0000000440)=""/160, 0xa0, &(0x7f0000000140)=""/49, &(0x7f0000000140), 0x0, {r0}}, 0x58) fcntl$auto(r1, 0x9, r2) mlockall$auto(0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x26, 0x80805, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x40080) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x3, 0x0) sysfs$auto(0x2, 0x1e, 0x0) fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x3, &(0x7f0000000000)='+\x00\xc04\x95\x96XD\x11T\x11\xa2w\xd55\xea|-&\v\xa9\xc5\xb1\xc6\n\xb0{\xe8', &(0x7f0000000040), 0x3) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/clear_refs\x00', 0x404241, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 808.555359ms ago: executing program 1 (id=2421): mmap$auto(0xfffffffffffffffc, 0x8, 0x800000dd, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000080)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x4000}, 0x6a) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x80012, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000002) (async) socket(0x15, 0x5, 0x0) (async) sendto$auto(0x3, 0x0, 0x2000f, 0x0, &(0x7f0000000040)=@llc={0x1a, 0x1b, 0x5, 0x8, 0xf, 0x6, @local}, 0x1c) write$auto(0x3, 0x0, 0xfffffdef) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60740, 0x0) r2 = socket(0x2, 0x1, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) (async) r3 = socket(0x2, 0x3, 0xa) connect$auto(r3, &(0x7f00000000c0), 0x55) sendto$auto(r3, 0x0, 0x3, 0x10000, &(0x7f0000000040), 0x0) (async) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) (async) keyctl$auto(0x5, 0xfffffffd, 0x101, 0x1, 0x4000000000b8c) keyctl$auto(0xb, 0xfffffffd, 0x7, 0xfffffffffff00003, 0x6) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) mmap$auto(0x8, 0x4020004, 0x1, 0xebd, r1, 0x8000) bind$auto(r0, &(0x7f0000000100)=@hci={0x1f, 0xffa, 0x3}, 0x0) (async) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0xfffffffd, 0x20000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/timer_source\x00', 0x208802, 0x0) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r4 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/0/msr\x00', 0xf82, 0x0) write$auto_msr_fops_msr(r4, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb2, 0x401, 0x8000) (async) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) setsockopt$auto(0x3, 0x1, 0x9, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x2000000000400005, 0xdf, 0x9b72, r3, 0x7) 537.042827ms ago: executing program 1 (id=2422): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x10004010) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/lockdep\x00', 0x60200, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 421.423398ms ago: executing program 6 (id=2423): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) sysfs$auto(0x2, 0x4, 0x4) (async) sysfs$auto(0x2, 0x4, 0x4) mincore$auto(0x1000, 0x8001, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=0x0, @ANYRES8=r3, @ANYRES8=r2], 0x18}}, 0x200080c0) io_uring_setup$auto(0x2, 0x0) (async) r5 = io_uring_setup$auto(0x2, 0x0) read$auto(0x3, 0x0, 0x80) io_uring_enter$auto(r5, 0xd, 0xcd00, 0x7, 0x0, 0xffffffffffffffff) io_uring_setup$auto(0x5d, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2000, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x0, 0x76c5, 0x8, 0x100000000}}) socket(0x1, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x5, 0x0, 0x9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES64=r6], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES64=r6], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="14e167c6d66bfb45a4ae10312c58ac73207e54606200"/31, @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf257e000000"], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) 165.897445ms ago: executing program 6 (id=2424): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0x4, 0x9b72, 0x2, 0x8000) kcmp$auto(0x1, 0x1, 0x7, 0x4, 0xe) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001080), 0x2800, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0xe69) mprotect$auto(0x0, 0x4, 0x4) read$auto(0x4, 0x0, 0xfdef) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0) 70.522579ms ago: executing program 1 (id=2425): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r0 = socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, 0x0, 0x117041, 0x0) r1 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) write$auto_configfs_file_operations_configfs_internal(r1, &(0x7f0000000140)="8e", 0x1) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x2, 0x0, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000000), r3) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1b0026bd7000fedbdf2503000000040003801800028014001a00fc02000000000000000000000000000112000100898771f1c19f17790485908280350000200003"], 0x64}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000) getsockopt$auto(r0, 0x11c, 0x1, 0x0, 0x0) 0s ago: executing program 6 (id=2426): mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) (async) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) io_uring_setup$auto(0x23, 0x0) (async) socket(0xa, 0x3, 0x6) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) (async) socket(0x10, 0x2, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) open(&(0x7f00000000c0)='./cgroup\x00', 0x204040, 0x12f) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/tty34\x00', 0x629042, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/controlC2\x00', 0x141200, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptywa\x00', 0x400, 0x0) (async) socketpair$auto(0xfffffffb, 0x4, 0x7, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) wait4$auto(0x2, 0xfffffffffffffffe, 0x5, 0x0) (async) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff) (async) stat$auto(0x0, 0x0) gettid() (async) mknod$auto(&(0x7f0000000340)='\xe1\x9eHU\x00', 0x63bf, 0x7fe) kernel console output (not intermixed with test programs): 83][ T7076] erspan0: entered allmulticast mode [ 128.577160][ T7105] netlink: 28 bytes leftover after parsing attributes in process `syz.4.282'. [ 130.007225][ T7151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.293'. [ 130.016501][ T7151] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 133.241586][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.248037][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.441635][ T7229] netlink: ct family unspecified [ 136.529077][ T7256] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.418117][ T7269] netlink: 330 bytes leftover after parsing attributes in process `syz.2.321'. [ 140.034438][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'. [ 140.498628][ T7313] netlink: 28 bytes leftover after parsing attributes in process `syz.0.335'. [ 141.377384][ T7340] netlink: 28 bytes leftover after parsing attributes in process `syz.1.343'. [ 141.584461][ T7351] syz.1.345 (7351) used obsolete PPPIOCDETACH ioctl [ 144.316024][ T7442] Process accounting resumed [ 145.694270][ T7465] could not allocate digest TFM handle [ 145.946837][ T7467] could not allocate digest TFM handle [ 150.216851][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'. [ 150.890996][ T7565] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 151.913194][ T7598] Process accounting resumed [ 151.954021][ T7567] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 155.429149][ T7666] ima: policy update failed [ 155.517061][ T29] audit: type=1802 audit(2474.770:4): pid=7666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.411" res=0 errno=0 [ 155.787568][ T7674] netlink: 342 bytes leftover after parsing attributes in process `syz.2.414'. [ 156.602589][ T7689] netlink: 338 bytes leftover after parsing attributes in process `syz.1.418'. [ 156.664654][ T7690] netlink: 338 bytes leftover after parsing attributes in process `syz.1.418'. [ 157.177081][ T7706] mmap: syz.4.421 (7706): VmData 20692992 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 158.290646][ T7710] Process accounting resumed [ 158.433505][ T7736] netlink: 326 bytes leftover after parsing attributes in process `syz.0.431'. [ 160.794932][ T7788] HfR: entered promiscuous mode [ 160.838909][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 160.881510][ T7788] HfR: left promiscuous mode [ 160.949467][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 161.008695][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 161.049873][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 161.093681][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 161.143686][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 161.174946][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 161.204660][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 161.400120][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 161.410928][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 162.360227][ T7830] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 163.645276][ T7853] Invalid ELF header magic: != ELF [ 163.687920][ T7854] Invalid ELF header magic: != ELF [ 165.896023][ T7893] __nla_validate_parse: 24 callbacks suppressed [ 165.896045][ T7893] netlink: 28 bytes leftover after parsing attributes in process `syz.0.471'. [ 167.166785][ T29] audit: type=1800 audit(2486.440:5): pid=7922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.478" name="version" dev="configfs" ino=15077 res=0 errno=0 [ 167.441931][ T7936] bridge0: port 3(vlan1) entered blocking state [ 167.458513][ T7936] bridge0: port 3(vlan1) entered disabled state [ 167.477927][ T7936] vlan1: entered allmulticast mode [ 167.493427][ T7936] veth0_vlan: entered allmulticast mode [ 167.514844][ T7936] vlan1: entered promiscuous mode [ 167.532554][ T7936] bridge0: port 3(vlan1) entered blocking state [ 167.538966][ T7936] bridge0: port 3(vlan1) entered forwarding state [ 167.588661][ T7925] delete_channel: no stack [ 169.130064][ T7989] Invalid ELF header magic: != ELF [ 169.162285][ T7983] validate_nla: 3 callbacks suppressed [ 169.162305][ T7983] netlink: 'syz.1.489': attribute type 2 has an invalid length. [ 169.960290][ T8019] netlink: 146 bytes leftover after parsing attributes in process `syz.0.498'. [ 170.118339][ T8004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.491'. [ 170.257373][ T8020] netlink: 28 bytes leftover after parsing attributes in process `syz.1.499'. [ 170.296847][ T8004] geneve1: entered allmulticast mode [ 170.358754][ T8020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.387308][ T8020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.397726][ T8020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.436942][ T8020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.666322][ T8078] netlink: 28 bytes leftover after parsing attributes in process `syz.1.512'. [ 173.839165][ T29] audit: type=1807 audit(2493.120:6): UNKNOWN=rrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr [ 173.839417][ T29] audit: type=1802 audit(2493.120:7): pid=8082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.514" res=0 errno=0 [ 173.967807][ T8081] ima: policy update failed [ 174.025433][ T29] audit: type=1802 audit(2493.250:8): pid=8081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.514" res=0 errno=0 [ 174.077590][ T8089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.515'. [ 175.013185][ T8123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.520'. [ 178.223364][ T8235] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 179.321632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 180.599780][ T8276] netlink: 28 bytes leftover after parsing attributes in process `syz.0.551'. [ 180.618219][ T8276] veth1_macvtap: left promiscuous mode [ 183.318405][ T8200] Process accounting paused [ 183.318908][ T8291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.555'. [ 187.869444][ T8348] netlink: 28 bytes leftover after parsing attributes in process `syz.0.572'. [ 187.920695][ T8336] netlink: 'syz.1.569': attribute type 33 has an invalid length. [ 187.958208][ T8336] netlink: 322 bytes leftover after parsing attributes in process `syz.1.569'. [ 188.338040][ T8358] TCP: TCP_TX_DELAY enabled [ 188.737789][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.574'. [ 189.220619][ T8357] Process accounting paused [ 192.757811][ T8441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.591'. [ 192.834879][ T8441] bridge0: entered promiscuous mode [ 194.681222][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.687724][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.887373][ T8472] netlink: 74 bytes leftover after parsing attributes in process `syz.1.598'. [ 195.802468][ T8493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.603'. [ 195.873327][ T8493] hsr_slave_0: entered allmulticast mode [ 196.018055][ T8493] can: request_module (can-proto-0) failed. [ 196.290682][ T8502] netlink: 266 bytes leftover after parsing attributes in process `syz.0.606'. [ 197.446768][ T29] audit: type=1326 audit(2516.720:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8503 comm="syz.4.607" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc339985d29 code=0x0 [ 199.035722][ T8569] netlink: 24 bytes leftover after parsing attributes in process `syz.4.619'. [ 199.095975][ T8569] netlink: 342 bytes leftover after parsing attributes in process `syz.4.619'. [ 199.520347][ T8590] netlink: 'syz.1.628': attribute type 17 has an invalid length. [ 199.590666][ T8590] netlink: 'syz.1.628': attribute type 12 has an invalid length. [ 199.815525][ T8597] netlink: 648 bytes leftover after parsing attributes in process `syz.4.629'. [ 199.893393][ T8597] netlink: 16 bytes leftover after parsing attributes in process `syz.4.629'. [ 202.872983][ T8681] Invalid ELF header magic: != ELF [ 203.215810][ T8691] netlink: 28 bytes leftover after parsing attributes in process `syz.0.642'. [ 203.303017][ T8691] geneve1: entered allmulticast mode [ 203.974521][ T8709] Process accounting resumed [ 203.986552][ T8709] kstrtoul() returned -22 for lu_gp_id [ 204.052898][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.643'. [ 205.401336][ T8757] netlink: 32 bytes leftover after parsing attributes in process `syz.0.661'. [ 205.464624][ T8755] netlink: 28 bytes leftover after parsing attributes in process `syz.2.660'. [ 205.678756][ T8753] netlink: 28 bytes leftover after parsing attributes in process `syz.1.659'. [ 205.690488][ T8764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.664'. [ 205.709355][ T8755] veth0_macvtap: left promiscuous mode [ 205.815204][ T8753] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 206.634871][ T8799] FAULT_INJECTION: forcing a failure. [ 206.634871][ T8799] name failslab, interval 1, probability 0, space 0, times 1 [ 206.648583][ T8799] CPU: 1 UID: 0 PID: 8799 Comm: syz.1.672 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 206.659647][ T8799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 206.669907][ T8799] Call Trace: [ 206.673200][ T8799] [ 206.676135][ T8799] dump_stack_lvl+0x16c/0x1f0 [ 206.680842][ T8799] should_fail_ex+0x497/0x5b0 [ 206.685555][ T8799] ? fs_reclaim_acquire+0xae/0x150 [ 206.690699][ T8799] should_failslab+0xc2/0x120 [ 206.695409][ T8799] __kmalloc_noprof+0xce/0x4f0 [ 206.700261][ T8799] ? kernfs_fop_read_iter+0x3ef/0x580 [ 206.705672][ T8799] kernfs_fop_read_iter+0x3ef/0x580 [ 206.710907][ T8799] ? rw_verify_area+0xd0/0x700 [ 206.715700][ T8799] vfs_read+0x87f/0xbe0 [ 206.719889][ T8799] ? __pfx_vfs_read+0x10/0x10 [ 206.724613][ T8799] ksys_read+0x12b/0x250 [ 206.728887][ T8799] ? __pfx_ksys_read+0x10/0x10 [ 206.733679][ T8799] ? rcu_is_watching+0x12/0xc0 [ 206.738476][ T8799] ? rcu_is_watching+0x12/0xc0 [ 206.743267][ T8799] do_syscall_64+0xcd/0x250 [ 206.747798][ T8799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.753726][ T8799] RIP: 0033:0x7f6743d85d29 [ 206.758160][ T8799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.777795][ T8799] RSP: 002b:00007f6744b76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 206.786238][ T8799] RAX: ffffffffffffffda RBX: 00007f6743f75fa0 RCX: 00007f6743d85d29 [ 206.794231][ T8799] RDX: 000000000000001a RSI: 0000000020000080 RDI: 0000000000000003 [ 206.802494][ T8799] RBP: 00007f6744b76090 R08: 0000000000000000 R09: 0000000000000000 [ 206.810491][ T8799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.818495][ T8799] R13: 0000000000000000 R14: 00007f6743f75fa0 R15: 00007ffe62a907c8 [ 206.826490][ T8799] [ 207.204585][ T8811] netlink: 342 bytes leftover after parsing attributes in process `syz.0.675'. [ 207.637114][ T8815] netlink: 28 bytes leftover after parsing attributes in process `syz.4.677'. [ 210.359612][ T8898] netlink: 342 bytes leftover after parsing attributes in process `syz.1.697'. [ 210.587635][ T8909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.700'. [ 210.725557][ T8914] misc userio: The device must be registered before sending interrupts [ 210.751178][ T8914] netlink: 16 bytes leftover after parsing attributes in process `syz.4.702'. [ 210.923045][ T8917] MTRR 1 not used [ 213.293636][ T8974] nbd: must specify at least one socket [ 213.832969][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.718'. [ 215.045498][ T9016] KVM: debugfs: duplicate directory 9016-3 [ 217.471157][ T9074] netlink: 146 bytes leftover after parsing attributes in process `syz.1.732'. [ 217.714002][ T9083] nfs: Unknown parameter 'By(~*|e1'" eR' [ 218.097889][ T9096] FAULT_INJECTION: forcing a failure. [ 218.097889][ T9096] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 218.142908][ T9096] CPU: 0 UID: 0 PID: 9096 Comm: syz.1.736 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 218.154070][ T9096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 218.164140][ T9096] Call Trace: [ 218.167426][ T9096] [ 218.170388][ T9096] dump_stack_lvl+0x16c/0x1f0 [ 218.175088][ T9096] should_fail_ex+0x497/0x5b0 [ 218.179783][ T9096] _copy_to_user+0x32/0xd0 [ 218.184420][ T9096] simple_read_from_buffer+0xd0/0x160 [ 218.189824][ T9096] proc_fail_nth_read+0x198/0x270 [ 218.194873][ T9096] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 218.200460][ T9096] ? bpf_lsm_file_permission+0x9/0x10 [ 218.205862][ T9096] ? security_file_permission+0x71/0x210 [ 218.211511][ T9096] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 218.217164][ T9096] vfs_read+0x1df/0xbe0 [ 218.221337][ T9096] ? __fget_files+0x1fc/0x3a0 [ 218.226380][ T9096] ? __pfx___mutex_lock+0x10/0x10 [ 218.231424][ T9096] ? __pfx_vfs_read+0x10/0x10 [ 218.236120][ T9096] ? __fget_files+0x206/0x3a0 [ 218.240812][ T9096] ksys_read+0x12b/0x250 [ 218.245069][ T9096] ? __pfx_ksys_read+0x10/0x10 [ 218.249843][ T9096] ? rcu_is_watching+0x12/0xc0 [ 218.254713][ T9096] ? rcu_is_watching+0x12/0xc0 [ 218.259497][ T9096] do_syscall_64+0xcd/0x250 [ 218.264018][ T9096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.270014][ T9096] RIP: 0033:0x7f6743d8473c [ 218.274438][ T9096] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 218.294074][ T9096] RSP: 002b:00007f6744b55030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 218.302596][ T9096] RAX: ffffffffffffffda RBX: 00007f6743f76080 RCX: 00007f6743d8473c [ 218.310579][ T9096] RDX: 000000000000000f RSI: 00007f6744b550a0 RDI: 0000000000000003 [ 218.318555][ T9096] RBP: 00007f6744b55090 R08: 0000000000000000 R09: 0000000000000000 [ 218.326535][ T9096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.334518][ T9096] R13: 0000000000000001 R14: 00007f6743f76080 R15: 00007ffe62a907c8 [ 218.342535][ T9096] [ 219.361553][ T9102] Process accounting resumed [ 219.903688][ T9149] netlink: 334 bytes leftover after parsing attributes in process `syz.0.749'. [ 219.949766][ T9145] HfR: entered promiscuous mode [ 220.051618][ T9145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.749'. [ 220.118002][ T9145] HfR: left promiscuous mode [ 220.341784][ T9154] zswap: compressor not available [ 222.993027][ T9238] nbd: must specify at least one socket [ 224.594032][ T9278] cgroup: fork rejected by pids controller in /syz0 [ 224.738137][ T9255] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE yru#Ryy*"$l-}$tyBz [ 228.208211][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.789'. [ 233.797984][ T9500] netlink: 130 bytes leftover after parsing attributes in process `syz.4.799'. [ 238.599412][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.816'. [ 238.998488][ T29] audit: type=1800 audit(4294967324.900:10): pid=9588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.817" name="discovery_nqn" dev="configfs" ino=25229 res=0 errno=0 [ 240.132137][ T9604] netlink: 330 bytes leftover after parsing attributes in process `syz.1.822'. [ 240.260836][ T9604] syz.1.822 (9604) used greatest stack depth: 21696 bytes left [ 242.170278][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.826'. [ 242.272124][ T9610] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 243.290930][ T9643] netlink: 338 bytes leftover after parsing attributes in process `syz.4.831'. [ 244.537087][ T9653] Process accounting resumed [ 244.734228][ T9655] capability: warning: `syz.1.835' uses 32-bit capabilities (legacy support in use) [ 245.088200][ T9658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'. [ 245.121779][ T9658] tc_dump_action: action bad kind [ 245.523784][ T9661] misc userio: Invalid payload size [ 247.186699][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 247.195114][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 247.202836][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 247.367343][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 247.374893][ T5836] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 247.382550][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 248.075038][ T9679] chnl_net:caif_netlink_parms(): no params data found [ 248.795415][ T9298] syz.0.778 (9298) used greatest stack depth: 20752 bytes left [ 248.816239][ T9679] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.839537][ T9679] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.877026][ T9679] bridge_slave_0: entered allmulticast mode [ 248.896151][ T9679] bridge_slave_0: entered promiscuous mode [ 248.923270][ T9679] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.945767][ T9302] syz.0.778 (9302) used greatest stack depth: 20432 bytes left [ 248.966142][ T9679] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.988357][ T9679] bridge_slave_1: entered allmulticast mode [ 249.022577][ T9679] bridge_slave_1: entered promiscuous mode [ 249.260506][ T9679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.270442][ T9301] syz.0.778 (9301) used greatest stack depth: 20016 bytes left [ 249.299290][ T9679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.397491][ T5839] Bluetooth: hci5: command tx timeout [ 249.592383][ T9679] team0: Port device team_slave_0 added [ 249.622161][ T9679] team0: Port device team_slave_1 added [ 249.944554][ T9679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.968122][ T9679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.994026][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.082175][ T9679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.097596][ T9299] syz.0.778 (9299) used greatest stack depth: 19936 bytes left [ 250.117541][ T9679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.124534][ T9679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.226790][ T9679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.570523][ T9679] hsr_slave_0: entered promiscuous mode [ 250.594765][ T9679] hsr_slave_1: entered promiscuous mode [ 250.615341][ T9679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.656823][ T9679] Cannot create hsr debugfs directory [ 251.476825][ T5839] Bluetooth: hci5: command tx timeout [ 253.328182][ T9291] syz.0.778 (9291) used greatest stack depth: 19880 bytes left [ 253.461144][ T9645] Process accounting paused [ 253.557010][ T5839] Bluetooth: hci5: command tx timeout [ 253.631743][ T9679] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 253.679291][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.842'. [ 253.698769][ T9679] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 253.796927][ T9679] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 253.818042][ T9679] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 254.195704][ T9679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.280557][ T9679] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.310812][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.318227][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.449369][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.456660][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.536423][ T9720] netlink: 346 bytes leftover after parsing attributes in process `syz.2.846'. [ 254.577213][ T9721] netlink: 346 bytes leftover after parsing attributes in process `syz.2.846'. [ 254.753377][ T9731] sysfs_service_op_store: Client not running :-5: [ 254.922199][ T9679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.280843][ T9679] veth0_vlan: entered promiscuous mode [ 255.303734][ T9679] veth1_vlan: entered promiscuous mode [ 255.359784][ T9679] veth0_macvtap: entered promiscuous mode [ 255.387573][ T9679] veth1_macvtap: entered promiscuous mode [ 255.425631][ T9679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.449612][ T9679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.484680][ T9679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.496849][ T9679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.507798][ T9679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.528520][ T9679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.577915][ T9679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.627426][ T9679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.637719][ T5836] Bluetooth: hci5: command tx timeout [ 255.650743][ T9679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.707645][ T9679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.746832][ T9679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.776789][ T9679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.816973][ T9679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.857791][ T9679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.929187][ T9679] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.937963][ T9679] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.946688][ T9679] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.996779][ T9679] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.119518][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.125845][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.163704][ T7404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.181147][ T7404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.257965][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.271802][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.844414][ T9832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.866'. [ 258.855379][ T9832] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 258.941664][ T9835] netlink: 40 bytes leftover after parsing attributes in process `syz.1.867'. [ 260.074664][ T9850] Process accounting resumed [ 260.531333][ T9848] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 260.842508][ T9902] ubi13: attaching mtd0 [ 260.899780][ T9902] ubi13 error: ubi_attach_mtd_dev: bad VID header (131085) or data offsets (131149) [ 261.385461][ T9917] netlink: 12 bytes leftover after parsing attributes in process `syz.5.880'. [ 261.651524][ T9925] : entered promiscuous mode [ 262.787030][ T9961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.890'. [ 265.257244][ T9986] sp0: Synchronizing with TNC [ 270.017433][T10018] [U] [ 270.020183][T10018] [U] [ 270.022889][T10018] [U] [ 270.025591][T10018] [U] [ 270.045606][T10018] [U] [ 270.048368][T10018] [U] [ 270.051071][T10018] [U] [ 270.053774][T10018] [U] [ 270.075093][T10022] [U] [ 270.178342][T10046] netlink: 28 bytes leftover after parsing attributes in process `syz.4.914'. [ 270.537545][T10055] mkiss: ax0: crc mode is auto. [ 271.985432][T10079] netlink: 252 bytes leftover after parsing attributes in process `syz.4.926'. [ 272.454185][T10100] netlink: Unknown conntrack attr (type=64, max=9) [ 272.812274][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.933'. [ 273.678739][T10137] netlink: 28 bytes leftover after parsing attributes in process `syz.5.942'. [ 274.096753][T10145] netlink: 338 bytes leftover after parsing attributes in process `syz.5.944'. [ 274.172830][T10146] netlink: 338 bytes leftover after parsing attributes in process `syz.5.944'. [ 274.919883][T10165] Process accounting resumed [ 275.473797][T10174] Invalid ELF header magic: != ELF [ 275.599059][T10176] kexec: Could not allocate control_code_buffer [ 278.100356][ T29] audit: type=1804 audit(4294967364.020:11): pid=10239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.961" name="/newroot/sys/kernel/tracing/uprobe_events" dev="tracefs" ino=1076 res=1 errno=0 [ 278.162214][T10235] Process accounting resumed [ 278.172005][T10235] kernel write not supported for file /uprobe_events (pid: 10235 comm: syz.4.961) [ 278.272791][ T29] audit: type=1800 audit(4294967364.190:12): pid=10241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.963" name="dbroot" dev="configfs" ino=28346 res=0 errno=0 [ 278.515268][T10247] kernel write not supported for file /uprobe_events (pid: 10247 comm: syz.4.963) [ 279.059590][T10251] kernel write not supported for file /uprobe_events (pid: 10251 comm: syz.4.964) [ 279.357481][T10257] kernel write not supported for file /uprobe_events (pid: 10257 comm: syz.4.965) [ 279.488212][ T29] audit: type=1800 audit(4294967365.400:13): pid=10264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.966" name="lu_gp_id" dev="configfs" ino=28413 res=0 errno=0 [ 281.828196][T10263] kernel write not supported for file /uprobe_events (pid: 10263 comm: syz.4.968) [ 282.343159][T10298] kernel write not supported for file /uprobe_events (pid: 10298 comm: syz.4.975) [ 282.721686][T10311] kernel write not supported for file /uprobe_events (pid: 10311 comm: syz.4.977) [ 283.079854][T10296] rtc_cmos 00:00: Alarms can be up to one day in the future [ 283.419728][T10320] kernel write not supported for file /uprobe_events (pid: 10320 comm: syz.4.980) [ 283.895427][T10324] netlink: 178 bytes leftover after parsing attributes in process `syz.2.979'. [ 284.543769][T10341] kernel write not supported for file /uprobe_events (pid: 10341 comm: syz.4.983) [ 286.475916][T10377] kernel write not supported for file /uprobe_events (pid: 10377 comm: syz.4.987) [ 287.260863][T10411] kernel write not supported for file /uprobe_events (pid: 10411 comm: syz.4.997) [ 290.976958][ T29] audit: type=1806 audit(4294967376.890:14): xattr=F2FFFFFFF2FFFFFFF2FFFFFFF2FFFFFF res=-22 [ 292.029627][T10460] netlink: 306 bytes leftover after parsing attributes in process `syz.2.1008'. [ 292.319466][T10418] kernel write not supported for file /uprobe_events (pid: 10418 comm: syz.4.999) [ 292.594887][T10470] Invalid ELF header magic: != ELF [ 292.687315][T10465] ima: policy update failed [ 292.722239][ T29] audit: type=1802 audit(4294967378.630:15): pid=10465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1009" res=0 errno=0 [ 292.912898][T10474] kernel write not supported for file /uprobe_events (pid: 10474 comm: syz.4.1011) [ 293.516949][T10495] syz_tun: tun_chr_ioctl cmd 2147767517 [ 293.861234][T10384] kernel write not supported for file /uprobe_events (pid: 10384 comm: syz.4.987) [ 296.126545][T10486] kernel write not supported for file /uprobe_events (pid: 10486 comm: syz.4.1014) [ 297.217952][T10547] kernel write not supported for file /uprobe_events (pid: 10547 comm: syz.4.1026) [ 297.251419][T10561] erspan0: entered allmulticast mode [ 297.552154][T10564] kernel write not supported for file /uprobe_events (pid: 10564 comm: syz.4.1029) [ 298.078474][T10581] ecryptfs_parse_packet_length: Five-byte packet length not supported [ 298.109123][T10581] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 298.593495][T10575] kernel write not supported for file /uprobe_events (pid: 10575 comm: syz.4.1032) [ 298.829145][T10600] kernel write not supported for file /uprobe_events (pid: 10600 comm: syz.4.1040) [ 299.049344][T10610] sp0: Synchronizing with TNC [ 299.064637][T10612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1041'. [ 299.255767][T10608] kernel write not supported for file /uprobe_events (pid: 10608 comm: syz.4.1042) [ 299.497890][T10624] syz.1.1045(10624): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 299.591371][T10626] kernel write not supported for file /uprobe_events (pid: 10626 comm: syz.4.1046) [ 299.843701][T10630] kernel write not supported for file /uprobe_events (pid: 10630 comm: syz.4.1050) [ 300.244047][T10637] kernel write not supported for file /uprobe_events (pid: 10637 comm: syz.4.1052) [ 300.583559][T10652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1056'. [ 300.634124][T10656] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1056'. [ 300.680754][T10656] bridge_slave_1: left allmulticast mode [ 300.707905][T10656] bridge_slave_1: left promiscuous mode [ 300.747511][T10656] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.800212][T10656] bridge_slave_0: left allmulticast mode [ 300.816528][T10656] bridge_slave_0: left promiscuous mode [ 300.850514][T10656] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.996503][T10664] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1059'. [ 301.100958][T10651] kernel write not supported for file /uprobe_events (pid: 10651 comm: syz.4.1056) [ 301.442767][T10667] kernel write not supported for file /uprobe_events (pid: 10667 comm: syz.4.1061) [ 302.370198][T10676] kernel write not supported for file /uprobe_events (pid: 10676 comm: syz.4.1063) [ 302.722014][T10703] kernel write not supported for file /uprobe_events (pid: 10703 comm: syz.4.1067) [ 303.025170][T10706] kernel write not supported for file /uprobe_events (pid: 10706 comm: syz.4.1068) [ 304.101068][T10709] kernel write not supported for file /uprobe_events (pid: 10709 comm: syz.4.1069) [ 304.549190][T10734] tipc: Started in network mode [ 304.577473][T10734] tipc: Node identity ee00, cluster identity 4711 [ 304.620970][T10734] tipc: Node number set to 60928 [ 304.674886][T10734] kernel write not supported for file /uprobe_events (pid: 10734 comm: syz.4.1076) [ 304.964537][T10747] kernel write not supported for file /uprobe_events (pid: 10747 comm: syz.4.1078) [ 305.152856][T10762] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1080'. [ 305.501201][T10765] netlink: 'syz.1.1081': attribute type 11 has an invalid length. [ 305.545556][T10760] kernel write not supported for file /uprobe_events (pid: 10760 comm: syz.4.1080) [ 305.556636][T10765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1081'. [ 305.849708][T10776] kernel write not supported for file /uprobe_events (pid: 10776 comm: syz.4.1083) [ 305.895566][T10761] delete_channel: no stack [ 306.017171][T10783] netlink: 'syz.4.1084': attribute type 2 has an invalid length. [ 306.076940][T10783] netlink: 674 bytes leftover after parsing attributes in process `syz.4.1084'. [ 306.194331][T10783] kernel write not supported for file /uprobe_events (pid: 10783 comm: syz.4.1084) [ 306.348884][ T29] audit: type=1800 audit(2055.910:16): pid=10792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1086" name="features" dev="configfs" ino=31490 res=0 errno=0 [ 306.629028][T10791] kernel write not supported for file /uprobe_events (pid: 10791 comm: syz.4.1086) [ 306.860525][T10801] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1088'. [ 306.962175][T10800] kernel write not supported for file /uprobe_events (pid: 10800 comm: syz.4.1088) [ 308.134026][T10829] warn_unsupported: 2 callbacks suppressed [ 308.134043][T10829] kernel write not supported for file /uprobe_events (pid: 10829 comm: syz.4.1095) [ 309.070399][T10843] Process accounting paused [ 309.181407][T10865] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 309.259622][T10865] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 309.304131][T10865] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 309.349918][T10865] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 309.423640][T10865] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 309.477095][T10865] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 309.515260][T10865] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 310.797149][T10929] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1118'. [ 311.157831][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 311.339797][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 311.345842][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 311.401381][ T5836] Bluetooth: hci4: command 0x040f tx timeout [ 311.478620][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout [ 313.556814][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout [ 314.904857][T11078] netlink: 'syz.5.1148': attribute type 4 has an invalid length. [ 315.442803][T11078] netlink: 314 bytes leftover after parsing attributes in process `syz.5.1148'. [ 315.640176][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout [ 315.822903][T11093] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1156'. [ 317.560056][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.566680][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.413225][ T29] audit: type=1800 audit(4294969366.968:17): pid=11178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1174" name="features" dev="configfs" ino=32767 res=0 errno=0 [ 319.675111][T11173] ima: policy update failed [ 319.711855][ T29] audit: type=1802 audit(4294969367.268:18): pid=11173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1173" res=0 errno=0 [ 321.941692][T11226] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1186'. [ 322.056980][T11226] IPv6: Can't replace route, no match found [ 322.202861][T11235] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1189'. [ 322.442246][T11239] usb usb15: usbfs: process 11239 (syz.5.1190) did not claim interface 0 before use [ 322.469719][T11235] bond0: (slave bond_slave_0): Releasing backup interface [ 323.584646][T11272] sctp: [Deprecated]: syz.2.1197 (pid 11272) Use of int in maxseg socket option. [ 323.584646][T11272] Use struct sctp_assoc_value instead [ 323.938212][T11283] usb usb15: usbfs: process 11283 (syz.2.1201) did not claim interface 0 before use (=p|[_%  [ 326.381644][T11337] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 326.449686][T11337] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 327.319937][T11369] syz.1.1221 (11369): attempted to duplicate a private mapping with mremap. This is not supported. [ 328.343226][ T29] audit: type=1800 audit(4294969375.898:19): pid=11412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1230" name="dbroot" dev="configfs" ino=33668 res=0 errno=0 [ 329.558472][T11461] warning: `syz.4.1239' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 329.600873][T11461] Invalid ELF header magic: != ELF [ 330.229478][T11483] random: crng reseeded on system resumption [ 331.293976][T11515] program syz.4.1250 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.829167][T11544] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 331.867321][T11546] lo: entered allmulticast mode [ 331.910180][T11552] Invalid ELF header magic: != ELF [ 332.128666][T11537] lo: left allmulticast mode [ 332.451128][T11564] openvswitch: netlink: IP tunnel dst address not specified [ 333.008451][T11555] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1255'. [ 333.079614][T11574] Invalid ELF header magic: != ELF [ 333.519868][T11585] Process accounting resumed [ 333.546856][T11584] Process accounting resumed [ 333.566467][T11584] Process accounting resumed [ 333.889440][T11591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1261'. [ 334.583354][T11586] Process accounting resumed [ 334.781972][T11604] netlink: 178 bytes leftover after parsing attributes in process `syz.4.1263'. [ 335.974742][T11600] workqueue: Failed to create a rescuer kthread for wq "nfc25_nci_tx_wq": -EINTR [ 336.610814][T11733] netlink: 'syz.2.1271': attribute type 28 has an invalid length. [ 337.007160][T11733] netlink: 'syz.2.1271': attribute type 29 has an invalid length. [ 337.028047][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1270'. [ 337.106780][T11733] netlink: 'syz.2.1271': attribute type 30 has an invalid length. [ 337.264891][T11733] netlink: 'syz.2.1271': attribute type 31 has an invalid length. [ 337.586795][T11733] netlink: 'syz.2.1271': attribute type 32 has an invalid length. [ 337.594656][T11733] netlink: 'syz.2.1271': attribute type 33 has an invalid length. [ 338.163596][T11733] netlink: 'syz.2.1271': attribute type 35 has an invalid length. [ 338.317266][T11733] netlink: 'syz.2.1271': attribute type 37 has an invalid length. [ 338.484406][T11733] netlink: 'syz.2.1271': attribute type 39 has an invalid length. [ 338.678336][T11733] netlink: 'syz.2.1271': attribute type 40 has an invalid length. [ 338.686180][T11733] netlink: 18 bytes leftover after parsing attributes in process `syz.2.1271'. [ 339.718297][T11763] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1277'. [ 340.017246][T11725] Process accounting resumed [ 340.089167][T11725] kernel write not supported for file /uprobe_events (pid: 11725 comm: syz.4.1270) [ 340.757242][ T5836] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 340.774974][T11745] kernel write not supported for file /uprobe_events (pid: 11745 comm: syz.4.1270) [ 341.728369][T11787] Process accounting resumed [ 342.445903][T11801] netlink: 186 bytes leftover after parsing attributes in process `syz.5.1286'. [ 342.763733][T11772] kernel write not supported for file /uprobe_events (pid: 11772 comm: syz.4.1281) [ 343.071090][T11802] kernel write not supported for file /uprobe_events (pid: 11802 comm: syz.4.1287) [ 343.204494][T11806] netlink: 326 bytes leftover after parsing attributes in process `syz.4.1288'. [ 344.194596][T11806] kernel write not supported for file /uprobe_events (pid: 11806 comm: syz.4.1288) [ 344.531598][T11815] kernel write not supported for file /uprobe_events (pid: 11815 comm: syz.4.1290) [ 344.740304][T11820] kernel write not supported for file /uprobe_events (pid: 11820 comm: syz.4.1292) [ 345.080673][T11830] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 345.264508][T11825] kernel write not supported for file /uprobe_events (pid: 11825 comm: syz.4.1294) [ 345.545941][T11834] kernel write not supported for file /uprobe_events (pid: 11834 comm: syz.4.1296) [ 346.399016][T11842] kernel write not supported for file /uprobe_events (pid: 11842 comm: syz.4.1297) [ 347.535380][T11868] kernel write not supported for file /uprobe_events (pid: 11868 comm: syz.4.1300) [ 347.656442][T11884] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1303'. [ 347.880497][T11891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1304'. [ 347.924188][T11891] openvswitch: netlink: Flow key attr not present in new flow. [ 349.096028][T11889] kernel write not supported for file /uprobe_events (pid: 11889 comm: syz.4.1304) [ 349.559400][ T29] audit: type=1800 audit(4294969397.118:20): pid=11918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1313" name="dbroot" dev="configfs" ino=35795 res=0 errno=0 [ 350.081878][T11911] kernel write not supported for file /uprobe_events (pid: 11911 comm: syz.4.1311) [ 350.158138][T11904] [U] [ 350.160898][T11904] [U] [ 350.163616][T11904] [U] [ 350.166338][T11904] [U] [ 350.211764][T11904] [U] [ 350.214521][T11904] [U] [ 350.217246][T11904] [U] [ 350.219971][T11904] [U] [ 350.267026][T11904] [U] [ 350.269785][T11904] [U] [ 350.272509][T11904] [U] [ 350.275226][T11904] [U] [ 350.337995][T11907] [U] [ 350.673666][T11919] kernel write not supported for file /uprobe_events (pid: 11919 comm: syz.4.1314) [ 350.755908][T11931] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1316'. [ 350.830242][T11931] kernel write not supported for file /uprobe_events (pid: 11931 comm: syz.4.1316) [ 351.081110][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1317'. [ 351.463887][T11940] kernel write not supported for file /uprobe_events (pid: 11940 comm: syz.4.1318) [ 352.494241][T11942] kernel write not supported for file /uprobe_events (pid: 11942 comm: syz.4.1320) [ 352.919743][T11970] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1326'. [ 352.952365][T11970] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1326'. getty: ttyS0: read error: Resource temporarily unavailable [ 353.629003][T11963] kernel write not supported for file /uprobe_events (pid: 11963 comm: syz.4.1324) [ 353.800356][T11989] kernel write not supported for file /uprobe_events (pid: 11989 comm: syz.4.1330) [ 354.221291][T11993] kernel write not supported for file /uprobe_events (pid: 11993 comm: syz.4.1331) [ 355.192033][T12015] Process accounting resumed [ 355.196672][T12015] kernel write not supported for file /schedstat (pid: 12015 comm: syz.5.1335) [ 356.209287][T12057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1341'. [ 356.251814][T12030] kernel write not supported for file /schedstat (pid: 12030 comm: syz.5.1337) [ 356.332192][T12057] bond0: (slave bond_slave_0): Releasing backup interface [ 357.940079][T12036] kernel write not supported for file /uprobe_events (pid: 12036 comm: syz.4.1334) [ 358.421644][T11999] kernel write not supported for file /uprobe_events (pid: 11999 comm: syz.4.1331) [ 359.283794][T12078] kernel write not supported for file /uprobe_events (pid: 12078 comm: syz.4.1345) [ 359.311966][T12069] kernel write not supported for file /schedstat (pid: 12069 comm: syz.5.1343) [ 359.401227][T12081] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1346'. [ 359.490031][T12081] kernel write not supported for file /uprobe_events (pid: 12081 comm: syz.4.1346) [ 359.575890][T12088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1348'. [ 359.621562][T12088] kernel write not supported for file /uprobe_events (pid: 12088 comm: syz.4.1348) [ 359.852876][T12083] kernel write not supported for file /schedstat (pid: 12083 comm: syz.5.1347) [ 359.974720][T12064] kernel write not supported for file /schedstat (pid: 12064 comm: syz.5.1343) [ 360.443791][T12106] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 360.636116][T12106] kafs: addr_prefs: Invalid Command [ 360.675042][T12099] could not allocate digest TFM handle [ 360.748323][T12099] kernel write not supported for file /uprobe_events (pid: 12099 comm: syz.4.1349) [ 360.940564][T12102] HSR: entered promiscuous mode [ 361.897496][T12125] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 361.916156][T12112] warn_unsupported: 1 callbacks suppressed [ 361.916175][T12112] kernel write not supported for file /uprobe_events (pid: 12112 comm: syz.4.1352) [ 361.937406][T12125] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 361.955908][T12125] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 361.972337][T12125] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 362.011405][T12125] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 362.116037][T12118] kernel write not supported for file /schedstat (pid: 12118 comm: syz.5.1354) [ 362.131355][T12129] kernel write not supported for file /uprobe_events (pid: 12129 comm: syz.4.1358) [ 362.399482][T12136] kernel write not supported for file /uprobe_events (pid: 12136 comm: syz.4.1361) [ 363.243736][T12133] kernel write not supported for file /schedstat (pid: 12133 comm: syz.5.1360) [ 363.529533][T12142] kernel write not supported for file /uprobe_events (pid: 12142 comm: syz.4.1362) [ 363.562623][T12151] kernel write not supported for file /schedstat (pid: 12151 comm: syz.5.1363) [ 363.841313][T12160] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 363.866171][T12160] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 363.876348][T12160] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 363.904841][T12160] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 363.922434][T12160] Bluetooth: hci5: Opcode 0x0c1a failed: -4 syzkaller syzkaller login: [ 364.572786][T12159] kernel write not supported for file /schedstat (pid: 12159 comm: syz.5.1365) [ 364.914583][T12166] kernel write not supported for file /schedstat (pid: 12166 comm: syz.5.1366) [ 365.150189][T12170] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1367'. [ 365.364994][T12155] kernel write not supported for file /uprobe_events (pid: 12155 comm: syz.4.1364) [ 365.796907][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 365.876885][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 365.883130][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 365.956906][ T5839] Bluetooth: hci4: command 0x040f tx timeout [ 365.963001][T12177] Bluetooth: hci5: command 0x0c1a tx timeout [ 367.003117][T12178] warn_unsupported: 1 callbacks suppressed [ 367.003137][T12178] kernel write not supported for file /schedstat (pid: 12178 comm: syz.5.1370) [ 367.234488][T12196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1374'. [ 368.393271][T12194] kernel write not supported for file /schedstat (pid: 12194 comm: syz.5.1373) [ 368.899835][T12174] kernel write not supported for file /uprobe_events (pid: 12174 comm: syz.4.1368) [ 369.164053][T12213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1378'. [ 370.190891][T12207] kernel write not supported for file /schedstat (pid: 12207 comm: syz.5.1377) [ 370.812039][T12228] kernel write not supported for file /schedstat (pid: 12228 comm: syz.5.1379) [ 370.975444][T12164] Process accounting paused [ 371.248746][T12232] kernel write not supported for file /schedstat (pid: 12232 comm: syz.5.1380) [ 372.788037][T12251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1385'. [ 372.824076][T12240] kernel write not supported for file /schedstat (pid: 12240 comm: syz.5.1381) [ 373.792494][T12263] kernel write not supported for file /schedstat (pid: 12263 comm: syz.5.1386) [ 374.848708][T12199] kernel write not supported for file /schedstat (pid: 12199 comm: syz.5.1373) [ 375.141368][T12266] kernel write not supported for file /schedstat (pid: 12266 comm: syz.5.1388) [ 375.666586][T12274] kernel write not supported for file /schedstat (pid: 12274 comm: syz.5.1391) syzkaller syzkaller login: [ 376.801448][T12293] kernel write not supported for file /schedstat (pid: 12293 comm: syz.5.1394) [ 377.102165][T12303] kernel write not supported for file /schedstat (pid: 12303 comm: syz.5.1395) [ 377.723495][T12318] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1398'. [ 377.744183][T12318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.764812][T12318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.806484][T12318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.819162][T12318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.000075][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.006508][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.584351][T11517] syz.2.1248 (11517) used greatest stack depth: 18384 bytes left [ 379.924467][T12314] kernel write not supported for file /schedstat (pid: 12314 comm: syz.5.1397) [ 380.215020][T12347] bridge0: port 3(veth1_to_hsr) entered blocking state [ 380.223885][T12347] bridge0: port 3(veth1_to_hsr) entered disabled state [ 380.242363][T12347] veth1_to_hsr: entered allmulticast mode [ 380.259011][T12347] veth1_to_hsr: entered promiscuous mode [ 380.259069][T12349] netlink: 146 bytes leftover after parsing attributes in process `syz.4.1405'. [ 380.264972][T12347] bridge0: port 3(veth1_to_hsr) entered blocking state [ 380.280820][T12347] bridge0: port 3(veth1_to_hsr) entered forwarding state [ 380.546363][T12344] kernel write not supported for file /schedstat (pid: 12344 comm: syz.5.1404) [ 380.867196][T12366] kernel write not supported for file /schedstat (pid: 12366 comm: syz.5.1408) [ 381.019717][T12369] kernel write not supported for file /schedstat (pid: 12369 comm: syz.5.1409) [ 381.165179][T12382] kernel write not supported for file /schedstat (pid: 12382 comm: syz.5.1411) [ 381.421860][T12395] kernel write not supported for file /schedstat (pid: 12395 comm: syz.5.1412) [ 381.524280][T12384] kernel write not supported for file /schedstat (pid: 12384 comm: syz.5.1412) [ 381.620902][T12407] HfR: entered promiscuous mode [ 381.665127][T12407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1416'. [ 381.690122][T12407] HfR: left promiscuous mode [ 381.747679][T12412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1416'. [ 381.854931][T12411] kernel write not supported for file /schedstat (pid: 12411 comm: syz.5.1417) [ 382.181574][T12423] kernel write not supported for file /schedstat (pid: 12423 comm: syz.5.1417) [ 382.516585][T12436] vivid-013: ================= START STATUS ================= [ 382.524470][T12436] vivid-013: Generate PTS: true [ 382.529503][T12436] vivid-013: Generate SCR: true [ 382.534454][T12436] tpg source WxH: 640x360 (Y'CbCr) [ 382.539904][T12436] tpg field: 1 [ 382.543300][T12436] tpg crop: 640x360@0x0 [ 382.547512][T12436] tpg compose: 640x360@0x0 [ 382.550499][T12417] kernel write not supported for file /schedstat (pid: 12417 comm: syz.5.1417) [ 382.551956][T12436] tpg colorspace: 8 [ 382.565348][T12436] tpg transfer function: 0/0 [ 382.570029][T12436] tpg Y'CbCr encoding: 0/0 [ 382.574679][T12436] tpg quantization: 0/0 [ 382.587126][T12436] tpg RGB range: 0/2 [ 382.591067][T12436] vivid-013: ================== END STATUS ================== [ 382.666663][T12450] kAFS: bad VL server IP address [ 383.741999][T12461] Process accounting resumed [ 385.118795][T12507] warn_unsupported: 6 callbacks suppressed [ 385.118815][T12507] kernel write not supported for file /schedstat (pid: 12507 comm: syz.5.1436) [ 385.707453][T12522] validate_nla: 1 callbacks suppressed [ 385.707473][T12522] netlink: 'syz.4.1441': attribute type 10 has an invalid length. [ 386.590269][T12538] Invalid ELF header magic: != ELF [ 389.525439][T12521] Process accounting paused [ 390.289755][T12557] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1448'. [ 392.274673][T12591] raw_sendmsg: syz.4.1458 forgot to set AF_INET. Fix it! [ 392.418968][T12599] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1460'. [ 392.509178][T12599] bond0: (slave bond_slave_0): Releasing backup interface [ 394.598178][T12605] erspan0: entered allmulticast mode [ 395.032317][T12650] Invalid ELF header magic: != ELF [ 399.088906][T12715] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1484'. [ 399.366078][T12722] debugfs: Directory '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' with parent 'ieee80211' already present! [ 399.967904][T12739] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1491'. [ 400.049259][T12739] veth1_to_hsr: left allmulticast mode [ 400.122831][T12739] veth1_to_hsr: left promiscuous mode [ 400.165168][T12739] bridge0: port 3(veth1_to_hsr) entered disabled state [ 400.256516][T12739] bridge_slave_1: left allmulticast mode [ 400.288188][T12739] bridge_slave_1: left promiscuous mode [ 400.325077][T12739] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.384329][T12739] bridge_slave_0: left allmulticast mode [ 400.430845][T12739] bridge_slave_0: left promiscuous mode [ 400.471827][T12739] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.263388][T12740] Process accounting resumed [ 401.314580][T12740] kernel write not supported for file /uprobe_events (pid: 12740 comm: syz.4.1493) [ 402.027712][T12772] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 402.075799][T12772] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 402.424523][T12786] syz.2.1502 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 402.566884][T12786] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1502'. [ 402.576038][T12786] netlink: zone id is out of range [ 402.769364][T12794] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(1851878519.48.0), cmd(5) [ 402.780782][T12768] kernel write not supported for file /uprobe_events (pid: 12768 comm: syz.4.1497) [ 403.068147][T12795] kernel write not supported for file /uprobe_events (pid: 12795 comm: syz.4.1505) [ 403.708878][T12803] kernel write not supported for file /uprobe_events (pid: 12803 comm: syz.4.1507) [ 405.224239][T12754] kernel write not supported for file /uprobe_events (pid: 12754 comm: syz.4.1493) [ 405.355675][T12831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1512'. [ 405.452585][T12834] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1512'. [ 406.079409][T12828] syz_tun: tun_chr_ioctl cmd 4 [ 406.839471][T12845] HfR: entered promiscuous mode [ 406.907194][T12845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1517'. [ 406.916211][T12845] HfR: left promiscuous mode [ 407.272764][T12858] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1519'. [ 407.433042][T12857] HfR: entered promiscuous mode [ 410.120224][T12816] kernel write not supported for file /uprobe_events (pid: 12816 comm: syz.4.1510) [ 410.404998][T12904] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1527'. [ 410.980611][T12917] Process accounting resumed [ 411.467319][T12880] ptrace attach of "./syz-executor exec"[9679] was attempted by "./syz-executor exec"[12880] [ 411.973611][T12910] kernel write not supported for file /uprobe_events (pid: 12910 comm: syz.4.1528) [ 412.243828][T12939] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1531'. [ 413.031779][T12948] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 413.070698][T12944] kernel write not supported for file /uprobe_events (pid: 12944 comm: syz.4.1532) [ 413.093376][ T29] audit: type=1804 audit(4294969460.648:21): pid=12955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1533" name="/newroot/sys/kernel/tracing/uprobe_events" dev="tracefs" ino=1076 res=1 errno=0 [ 413.274216][ T29] audit: type=1806 audit(4294971508.831:22): xattr="." res=0 [ 413.580135][T12942] kernel write not supported for file /uprobe_events (pid: 12942 comm: syz.4.1532) [ 413.939616][T12970] kernel write not supported for file /uprobe_events (pid: 12970 comm: syz.4.1538) [ 415.883738][T12998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1543'. [ 416.409845][T12946] kernel write not supported for file /uprobe_events (pid: 12946 comm: syz.4.1532) [ 416.858062][T12975] kernel write not supported for file /uprobe_events (pid: 12975 comm: syz.4.1540) [ 418.267875][T13013] kernel write not supported for file /uprobe_events (pid: 13013 comm: syz.4.1545) [ 418.696438][T13042] HSR: entered promiscuous mode [ 418.820791][T13046] delete_channel: no stack [ 418.963929][T13039] kernel write not supported for file /uprobe_events (pid: 13039 comm: syz.4.1554) [ 419.174891][T13054] kernel write not supported for file /uprobe_events (pid: 13054 comm: syz.4.1558) [ 419.855777][T13065] Process accounting resumed [ 419.860417][T13065] kernel write not supported for file /schedstat (pid: 13065 comm: syz.5.1560) [ 420.020391][T13079] kernel write not supported for file /schedstat (pid: 13079 comm: syz.5.1562) [ 420.244923][T13072] kernel write not supported for file /uprobe_events (pid: 13072 comm: syz.4.1559) [ 420.295073][T13082] kernel write not supported for file /schedstat (pid: 13082 comm: syz.5.1564) [ 420.416595][T13094] kernel write not supported for file /schedstat (pid: 13094 comm: syz.5.1566) [ 420.909734][T13102] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1565'. [ 421.009712][T13102] macvlan1: entered allmulticast mode [ 421.082021][T13102] veth1_vlan: entered allmulticast mode [ 421.436321][T13113] warn_unsupported: 1 callbacks suppressed [ 421.436347][T13113] kernel write not supported for file /schedstat (pid: 13113 comm: syz.5.1568) [ 421.750152][T13123] kernel write not supported for file /schedstat (pid: 13123 comm: syz.5.1573) [ 422.310434][T13125] kernel write not supported for file /uprobe_events (pid: 13125 comm: syz.4.1572) [ 422.784175][T13127] kernel write not supported for file /schedstat (pid: 13127 comm: syz.5.1575) [ 423.450886][T13134] kernel write not supported for file /schedstat (pid: 13134 comm: syz.5.1576) [ 423.606907][T13137] tipc: Started in network mode [ 423.643249][T13137] tipc: Node identity ee00, cluster identity 4711 [ 423.649725][T13137] tipc: Node number set to 60928 [ 423.762706][T13137] kernel write not supported for file /schedstat (pid: 13137 comm: syz.5.1577) [ 423.819914][T13015] kernel write not supported for file /uprobe_events (pid: 13015 comm: syz.4.1545) [ 424.088543][T13141] kernel write not supported for file /schedstat (pid: 13141 comm: syz.5.1578) [ 424.278377][T13146] kernel write not supported for file /schedstat (pid: 13146 comm: syz.5.1580) [ 424.675018][T13150] kernel write not supported for file /uprobe_events (pid: 13150 comm: syz.4.1581) [ 426.668773][T13188] warn_unsupported: 3 callbacks suppressed [ 426.668793][T13188] kernel write not supported for file /schedstat (pid: 13188 comm: syz.5.1589) [ 427.925463][T13199] kernel write not supported for file /schedstat (pid: 13199 comm: syz.5.1591) [ 428.251971][T13210] kernel write not supported for file /schedstat (pid: 13210 comm: syz.5.1593) [ 428.268137][T13200] kernel write not supported for file /uprobe_events (pid: 13200 comm: syz.4.1590) [ 428.660378][T13221] kernel write not supported for file /schedstat (pid: 13221 comm: syz.5.1596) [ 429.245149][T13234] kernel write not supported for file /uprobe_events (pid: 13234 comm: syz.4.1597) [ 429.571344][T13235] kernel write not supported for file /uprobe_events (pid: 13235 comm: syz.4.1599) [ 429.759339][T13243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1601'. [ 429.788708][T13243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1601'. [ 429.865438][T13243] kernel write not supported for file /uprobe_events (pid: 13243 comm: syz.4.1601) [ 429.944770][T13247] UHID_CREATE from different security context by process 1435 (syz.2.1602), this is not allowed. [ 430.174462][T13249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1603'. [ 430.384822][T13248] kernel write not supported for file /uprobe_events (pid: 13248 comm: syz.4.1603) [ 431.370997][T13132] Process accounting paused [ 431.389326][T13231] kernel write not supported for file /schedstat (pid: 13231 comm: syz.5.1598) [ 431.539107][ T29] audit: type=1326 audit(4294971527.186:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13274 comm="syz.5.1607" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7fd9f8385d29 code=0x0 [ 432.290407][T13275] kernel write not supported for file /schedstat (pid: 13275 comm: syz.5.1607) [ 432.684602][T13287] kernel write not supported for file /schedstat (pid: 13287 comm: syz.5.1609) [ 432.761005][T13291] Process accounting resumed [ 432.767275][T13291] syz_tun: tun_chr_ioctl cmd 6 [ 433.015092][T13324] sp0: Synchronizing with TNC [ 433.144686][T13336] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1613'. [ 433.241362][T13336] kernel write not supported for file /schedstat (pid: 13336 comm: syz.5.1613) [ 433.867909][T13346] kernel write not supported for file /schedstat (pid: 13346 comm: syz.5.1618) [ 434.015935][T13369] kernel write not supported for file /schedstat (pid: 13369 comm: syz.5.1622) [ 434.362249][T13371] kernel write not supported for file /schedstat (pid: 13371 comm: syz.5.1623) [ 434.593283][T13385] : Can't lookup blockdev [ 434.756553][T13389] netlink: 49 bytes leftover after parsing attributes in process `syz.2.1627'. [ 435.312504][T13397] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1628'. [ 435.514691][T13380] kernel write not supported for file /schedstat (pid: 13380 comm: syz.5.1625) [ 435.716164][T13412] kernel write not supported for file /schedstat (pid: 13412 comm: syz.5.1633) [ 436.142316][T13431] kernel write not supported for file /schedstat (pid: 13431 comm: syz.5.1636) [ 436.440054][T13450] Invalid ELF header magic: != ELF [ 436.494699][T13455] openvswitch: HSR: Dropping previously announced user features [ 436.686215][T13461] delete_channel: no stack [ 437.078827][T13450] kernel write not supported for file /schedstat (pid: 13450 comm: syz.5.1639) [ 437.402261][T13468] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1644'. [ 437.491491][T13474] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 437.584147][T13473] kernel write not supported for file /schedstat (pid: 13473 comm: syz.5.1645) [ 437.834049][T13497] kernel write not supported for file /schedstat (pid: 13497 comm: syz.5.1649) [ 438.377981][T13502] kernel write not supported for file /schedstat (pid: 13502 comm: syz.5.1652) [ 440.336484][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.343273][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.824763][T13532] kernel write not supported for file /schedstat (pid: 13532 comm: syz.5.1655) [ 441.918746][T13388] kernel write not supported for file /schedstat (pid: 13388 comm: syz.5.1625) [ 442.913592][T13562] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1658'. [ 443.143855][T13564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1659'. [ 443.310696][T13542] kernel write not supported for file /schedstat (pid: 13542 comm: syz.5.1655) [ 443.956766][T13569] kernel write not supported for file /schedstat (pid: 13569 comm: syz.5.1661) [ 444.377302][T13578] kernel write not supported for file /schedstat (pid: 13578 comm: syz.5.1664) [ 445.116649][T12177] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3 [ 445.316005][T13605] can: request_module (can-proto-4) failed. [ 445.420889][T13588] kernel write not supported for file /schedstat (pid: 13588 comm: syz.5.1667) [ 445.651385][T13611] kernel write not supported for file /schedstat (pid: 13611 comm: syz.5.1672) [ 445.789490][T13616] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1673'. [ 445.839466][T13616] nbd: must specify at least one socket [ 445.935835][T13616] kernel write not supported for file /schedstat (pid: 13616 comm: syz.5.1673) [ 446.600335][T13635] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1677'. [ 446.651250][T13619] kernel write not supported for file /schedstat (pid: 13619 comm: syz.5.1675) [ 446.970777][T13640] kernel write not supported for file /schedstat (pid: 13640 comm: syz.5.1678) [ 447.343143][T13649] kernel write not supported for file /schedstat (pid: 13649 comm: syz.5.1681) [ 447.804377][T13655] kernel write not supported for file /schedstat (pid: 13655 comm: syz.5.1682) [ 447.962889][T13659] random: crng reseeded on system resumption [ 448.485431][T13659] kernel write not supported for file /schedstat (pid: 13659 comm: syz.5.1683) [ 448.811840][T13700] kernel write not supported for file /schedstat (pid: 13700 comm: syz.5.1689) [ 449.036787][T13714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1692'. [ 449.048745][T13713] HfR: entered promiscuous mode [ 449.058634][T13714] HfR: left promiscuous mode [ 449.213088][T13711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1691'. [ 449.370578][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1694'. [ 449.390876][T13624] kernel write not supported for file /schedstat (pid: 13624 comm: syz.5.1675) [ 450.240342][T13718] Process accounting paused [ 450.264394][T13734] RDS: rds_bind could not find a transport for ::ffff:3.0.0.0, load rds_tcp or rds_rdma? [ 451.219496][T13773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1703'. [ 451.448246][T13763] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1701'. [ 451.560759][T13763] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 451.738169][T13782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1706'. [ 454.032914][T13836] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1718'. [ 454.645308][T13850] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 458.311754][T13917] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 458.366049][T13917] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 458.445979][T13917] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 458.505685][T13917] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 458.533463][T13917] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 460.283127][T12177] Bluetooth: hci1: command 0x0c1a tx timeout [ 460.442316][T12177] Bluetooth: hci0: command 0x0c1a tx timeout [ 460.448358][T12177] Bluetooth: hci2: command 0x0c1a tx timeout [ 460.521904][T12177] Bluetooth: hci4: command 0x040f tx timeout [ 460.605142][T12177] Bluetooth: hci5: command 0x0c1a tx timeout [ 461.384382][T13964] Process accounting resumed [ 461.412495][T13964] kernel write not supported for file /uprobe_events (pid: 13964 comm: syz.4.1744) [ 462.448111][T13974] kernel write not supported for file /uprobe_events (pid: 13974 comm: syz.4.1747) [ 463.082872][T13996] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 463.345452][T14010] kernel write not supported for file /uprobe_events (pid: 14010 comm: syz.4.1752) [ 463.660050][T14036] kernel write not supported for file /uprobe_events (pid: 14036 comm: syz.4.1754) [ 463.841392][T14038] Invalid ELF header magic: != ELF [ 464.889013][T14042] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1755'. [ 465.382576][T14037] kernel write not supported for file /uprobe_events (pid: 14037 comm: syz.4.1755) [ 465.854617][T14078] kernel write not supported for file /uprobe_events (pid: 14078 comm: syz.4.1765) [ 466.125008][T14090] kernel write not supported for file /uprobe_events (pid: 14090 comm: syz.4.1767) [ 466.456277][ T6668] kernel write not supported for file /uprobe_events (pid: 6668 comm: syz-executor) [ 466.546586][T14094] kernel write not supported for file /uprobe_events (pid: 14094 comm: syz.4.1768) [ 467.350863][T14114] Invalid ELF header magic: != ELF [ 467.955816][T14094] kernel write not supported for file /uprobe_events (pid: 14094 comm: syz.4.1768) [ 468.272460][T14116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1773'. [ 468.334973][T14116] geneve1: left allmulticast mode [ 469.418500][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 469.430988][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 469.438874][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 469.447598][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 469.455857][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 469.463111][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 469.874293][T14132] chnl_net:caif_netlink_parms(): no params data found [ 470.183540][T14132] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.195372][T14132] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.212002][T14132] bridge_slave_0: entered allmulticast mode [ 470.225455][T14132] bridge_slave_0: entered promiscuous mode [ 470.247621][T14132] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.264955][T14132] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.283598][T14132] bridge_slave_1: entered allmulticast mode [ 470.298055][T14132] bridge_slave_1: entered promiscuous mode [ 470.351621][T14132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.377644][T14132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.447298][T14132] team0: Port device team_slave_0 added [ 470.463978][T14132] team0: Port device team_slave_1 added [ 470.529519][T14132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.547122][T14132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.609191][T14132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.643766][T14132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.663139][T14132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.747540][T14132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.852662][T14132] hsr_slave_0: entered promiscuous mode [ 470.871268][T14132] hsr_slave_1: entered promiscuous mode [ 470.889988][T14132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.910595][T14132] Cannot create hsr debugfs directory [ 471.171443][T14132] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 471.207985][T14132] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 471.233956][T14132] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 471.247964][T14132] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 471.406743][T14132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.450708][T14132] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.478627][ T8101] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.485782][ T8101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.508996][T12177] Bluetooth: hci3: command tx timeout [ 471.537620][ T8101] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.544783][ T8101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.958650][T14132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.263510][T14132] veth0_vlan: entered promiscuous mode [ 472.284703][T14132] veth1_vlan: entered promiscuous mode [ 472.333905][T14132] veth0_macvtap: entered promiscuous mode [ 472.363816][T14132] veth1_macvtap: entered promiscuous mode [ 472.402513][T14132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.428157][T14132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.448247][T14132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.484349][T14132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.506580][T14132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.534089][T14132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.556561][T14132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.591069][T14132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.611497][T14132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.631551][T14132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.659782][T14132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.679359][T14132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.708446][T14132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.740401][T14132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.763876][T14132] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.773294][T14132] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.796598][T14132] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.817120][T14132] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.912205][ T1331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.937428][ T1331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.987213][ T1331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.996290][ T1331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.563110][T12177] Bluetooth: hci3: command tx timeout [ 474.788192][T14202] syz_tun: tun_chr_ioctl cmd 1074025681 [ 475.642400][T12177] Bluetooth: hci3: command tx timeout [ 477.711470][T12177] Bluetooth: hci3: command tx timeout [ 480.233941][T14270] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1804'. [ 482.360992][T14259] Process accounting resumed [ 482.401461][T14259] kernel write not supported for file /schedstat (pid: 14259 comm: syz.5.1801) [ 482.543135][T14261] kernel write not supported for file /schedstat (pid: 14261 comm: syz.5.1801) [ 482.637553][T14294] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1807'. [ 482.729228][T14254] kernel write not supported for file /schedstat (pid: 14254 comm: syz.5.1801) [ 484.115107][T14306] kernel write not supported for file /schedstat (pid: 14306 comm: syz.5.1812) [ 484.499137][T14318] kernel write not supported for file /schedstat (pid: 14318 comm: syz.5.1813) [ 486.284527][T14320] kernel write not supported for file /schedstat (pid: 14320 comm: syz.5.1815) [ 486.536979][T14346] kernel write not supported for file /schedstat (pid: 14346 comm: syz.5.1820) [ 487.069587][T14350] kernel write not supported for file /schedstat (pid: 14350 comm: syz.5.1822) [ 488.275088][T14365] kernel write not supported for file /schedstat (pid: 14365 comm: syz.5.1824) [ 491.541281][T14431] mkiss: ax0: crc mode is auto. [ 491.654801][T14372] kernel write not supported for file /schedstat (pid: 14372 comm: syz.5.1824) [ 491.745955][T14396] kernel write not supported for file /schedstat (pid: 14396 comm: syz.5.1828) [ 492.589385][T14451] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1836'. [ 493.215800][T14446] kernel write not supported for file /schedstat (pid: 14446 comm: syz.5.1835) getty: ttyS0: read error: Resource temporarily unavailable [ 493.627887][T14453] kernel write not supported for file /schedstat (pid: 14453 comm: syz.5.1837) [ 493.752649][T14456] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1838'. [ 493.788219][T14456] openvswitch: netlink: Flow key attr not present in new flow. [ 495.112684][T14470] netlink: 'syz.2.1842': attribute type 1 has an invalid length. [ 496.550603][T14455] kernel write not supported for file /schedstat (pid: 14455 comm: syz.5.1838) [ 496.727768][T14501] lo: entered allmulticast mode [ 496.763355][T14501] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1847'. [ 496.956618][T14498] lo: left allmulticast mode [ 497.144490][T14512] openvswitch: HfR: Dropping previously announced user features [ 497.452198][T14522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1850'. [ 497.573579][T14504] kernel write not supported for file /schedstat (pid: 14504 comm: syz.5.1848) [ 497.843662][T14532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1854'. [ 498.050978][T14525] kernel write not supported for file /schedstat (pid: 14525 comm: syz.5.1852) [ 498.373021][T14544] kernel write not supported for file /schedstat (pid: 14544 comm: syz.5.1856) [ 499.381048][T14564] openvswitch: netlink: Key 23 has unexpected len 0 expected 2 [ 500.229831][T14562] netlink: 'syz.1.1859': attribute type 1 has an invalid length. [ 501.448486][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.454823][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.780043][T14580] kernel write not supported for file /schedstat (pid: 14580 comm: syz.5.1864) [ 504.600590][T14615] kernel write not supported for file /schedstat (pid: 14615 comm: syz.5.1872) syzkaller syzkaller login: [ 505.501979][T14644] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1880'. [ 506.215178][T14631] kernel write not supported for file /schedstat (pid: 14631 comm: syz.5.1877) [ 506.436819][T14649] kernel write not supported for file /schedstat (pid: 14649 comm: syz.5.1881) [ 510.049385][T14658] [U] [ 510.052124][T14658] [U] [ 510.054828][T14658] [U] [ 510.057537][T14658] [U] [ 510.097918][T14658] [U] [ 510.100657][T14658] [U] [ 510.103367][T14658] [U] [ 510.106069][T14658] [U] [ 510.164681][T14658] [U] [ 510.167421][T14658] [U] [ 510.170124][T14658] [U] [ 510.172832][T14658] [U] [ 510.208218][T14657] [U] [ 510.485441][T14672] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1887'. [ 510.524819][T14672] veth1_macvtap: left promiscuous mode [ 510.530321][T14672] macsec0: entered allmulticast mode [ 513.206981][T14708] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1896'. [ 513.258083][T14708] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1896'. [ 514.164916][T14653] Process accounting paused [ 514.512424][T14720] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1899'. [ 515.993254][T14762] sctp: [Deprecated]: syz.6.1908 (pid 14762) Use of int in maxseg socket option. [ 515.993254][T14762] Use struct sctp_assoc_value instead [ 517.664826][T14783] random: crng reseeded on system resumption [ 518.148926][T14771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1913'. [ 518.301380][T14791] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 518.417855][T14793] kafs: addr_prefs: Invalid Command [ 518.619578][T14796] Process accounting resumed [ 519.863713][T14798] bridge0: port 3(team0) entered blocking state [ 519.913518][T14798] bridge0: port 3(team0) entered disabled state [ 519.919982][T14798] team0: entered allmulticast mode [ 519.974416][T14798] team_slave_0: entered allmulticast mode [ 520.018391][T14798] team_slave_1: entered allmulticast mode [ 520.055565][T14798] team0: entered promiscuous mode [ 520.094136][T14798] team_slave_0: entered promiscuous mode [ 520.100159][T14798] team_slave_1: entered promiscuous mode [ 520.152963][T14798] bridge0: port 3(team0) entered blocking state [ 520.159327][T14798] bridge0: port 3(team0) entered forwarding state [ 530.908255][T14900] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR [ 532.981455][T14952] netlink: 306 bytes leftover after parsing attributes in process `syz.2.1952'. [ 533.307907][T13954] syz.1.1742 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 533.562946][T13954] CPU: 1 UID: 0 PID: 13954 Comm: syz.1.1742 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 533.573752][T13954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 533.583827][T13954] Call Trace: [ 533.587128][T13954] [ 533.590071][T13954] dump_stack_lvl+0x16c/0x1f0 [ 533.594783][T13954] dump_header+0x101/0x900 [ 533.599233][T13954] oom_kill_process+0x270/0xa60 [ 533.604134][T13954] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 533.609804][T13954] out_of_memory+0x351/0x1700 [ 533.614506][T13954] ? __pfx_out_of_memory+0x10/0x10 [ 533.619632][T13954] ? rcu_read_unlock+0x17/0x60 [ 533.624412][T13954] ? __pfx_lock_release+0x10/0x10 [ 533.629484][T13954] mem_cgroup_out_of_memory+0x207/0x270 [ 533.635045][T13954] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 533.641134][T13954] ? do_raw_spin_unlock+0x172/0x230 [ 533.646346][T13954] try_charge_memcg+0x54c/0xaf0 [ 533.651217][T13954] ? __pfx_try_charge_memcg+0x10/0x10 [ 533.656687][T13954] ? trace_lock_acquire+0x14e/0x1f0 [ 533.661896][T13954] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 533.667365][T13954] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 533.672835][T13954] ? get_mem_cgroup_from_mm+0x131/0x5f0 [ 533.678393][T13954] __mem_cgroup_charge+0x9b/0x280 [ 533.683439][T13954] shmem_alloc_and_add_folio+0x507/0xc00 [ 533.689084][T13954] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 533.694993][T13954] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 533.701154][T13954] ? shmem_huge_global_enabled+0x176/0x250 [ 533.706976][T13954] ? shmem_allowable_huge_orders+0xcd/0x3e0 [ 533.712888][T13954] shmem_get_folio_gfp+0x689/0x1530 [ 533.718114][T13954] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 533.723753][T13954] ? inode_set_ctime_current+0xa4/0x900 [ 533.729317][T13954] ? timestamp_truncate+0x21f/0x2e0 [ 533.734534][T13954] shmem_write_begin+0x161/0x300 [ 533.739502][T13954] ? __pfx_shmem_write_begin+0x10/0x10 [ 533.744989][T13954] ? inode_set_ctime_current+0x2a7/0x900 [ 533.750646][T13954] ? balance_dirty_pages_ratelimited_flags+0x92/0x1270 [ 533.757545][T13954] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 533.763546][T13954] generic_perform_write+0x2ba/0x920 [ 533.768849][T13954] ? __pfx_generic_perform_write+0x10/0x10 [ 533.774669][T13954] ? __mark_inode_dirty+0x2a5/0xe50 [ 533.779889][T13954] ? generic_update_time+0xcf/0xf0 [ 533.785013][T13954] ? mnt_put_write_access_file+0x45/0xf0 [ 533.790759][T13954] shmem_file_write_iter+0x10e/0x140 [ 533.796077][T13954] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 533.801921][T13954] __kernel_write_iter+0x318/0xa80 [ 533.807052][T13954] ? __pfx___kernel_write_iter+0x10/0x10 [ 533.812709][T13954] ? get_dump_page+0x15b/0x230 [ 533.817494][T13954] ? __pfx___might_resched+0x10/0x10 [ 533.822793][T13954] dump_user_range+0x389/0x8c0 [ 533.827583][T13954] ? __pfx_dump_user_range+0x10/0x10 [ 533.832889][T13954] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 533.839056][T13954] ? __pfx_writenote+0x10/0x10 [ 533.843842][T13954] elf_core_dump+0x2787/0x3880 [ 533.848619][T13954] ? __pfx_elf_core_dump+0x10/0x10 [ 533.853744][T13954] ? kasan_save_stack+0x42/0x60 [ 533.858705][T13954] ? kasan_save_stack+0x33/0x60 [ 533.863571][T13954] ? kasan_save_track+0x14/0x30 [ 533.868435][T13954] ? __kasan_kmalloc+0xaa/0xb0 [ 533.873210][T13954] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 533.878681][T13954] ? do_coredump+0x1665/0x43e0 [ 533.883461][T13954] ? get_signal+0x23f3/0x2610 [ 533.888160][T13954] ? mas_ascend+0x519/0x930 [ 533.892686][T13954] ? rcu_is_watching+0x12/0xc0 [ 533.897462][T13954] ? trace_lock_acquire+0x14e/0x1f0 [ 533.902674][T13954] ? __pfx_sort+0x10/0x10 [ 533.907026][T13954] ? get_signal+0x23f3/0x2610 [ 533.911729][T13954] ? do_coredump+0x2dd5/0x43e0 [ 533.916518][T13954] do_coredump+0x2dd5/0x43e0 [ 533.921131][T13954] ? __pfx_do_coredump+0x10/0x10 [ 533.926089][T13954] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 533.932017][T13954] ? rcu_is_watching+0x12/0xc0 [ 533.936800][T13954] get_signal+0x23f3/0x2610 [ 533.941324][T13954] ? __pfx_get_signal+0x10/0x10 [ 533.946186][T13954] ? rcu_is_watching+0x12/0xc0 [ 533.951000][T13954] ? trace_irq_disable.constprop.0+0xea/0x140 [ 533.957253][T13954] arch_do_signal_or_restart+0x90/0x7e0 [ 533.962820][T13954] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 533.968996][T13954] ? do_user_addr_fault+0xa4b/0x13f0 [ 533.974291][T13954] ? rcu_is_watching+0x12/0xc0 [ 533.979163][T13954] irqentry_exit_to_user_mode+0x13f/0x280 [ 533.984908][T13954] asm_exc_page_fault+0x26/0x30 [ 533.989774][T13954] RIP: 0033:0x1fffff [ 533.993674][T13954] Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 534.013295][T13954] RSP: 002b:000000000000000a EFLAGS: 00010206 [ 534.019372][T13954] RAX: 0000000000000000 RBX: 00007f6743f76240 RCX: 00007f6743d85d29 [ 534.027351][T13954] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 534.035332][T13954] RBP: 00007f6743e01b08 R08: 0000000000000002 R09: 0000000000000000 [ 534.043311][T13954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.051289][T13954] R13: 0000000000000000 R14: 00007f6743f76240 R15: 00007ffe62a907c8 [ 534.059276][T13954] [ 534.062348][ C1] vkms_vblank_simulate: vblank timer overrun [ 534.450011][T13954] memory: usage 305728kB, limit 307200kB, failcnt 19123 [ 534.985833][T13954] memory+swap: usage 427064kB, limit 9007199254740988kB, failcnt 0 [ 535.220156][T13954] kmem: usage 4060kB, limit 9007199254740988kB, failcnt 0 [ 535.290180][T13954] Memory cgroup stats for /syz1: [ 535.290349][T13954] cache 309133312 [ 535.387764][T13954] rss 77824 [ 535.390908][T13954] rss_huge 0 [ 535.537942][T13954] shmem 309129216 [ 535.551835][T13954] mapped_file 33685504 [ 535.647032][T13954] dirty 0 [ 535.650009][T13954] writeback 0 [ 535.772812][T13954] workingset_refault_anon 7016 [ 535.777638][T13954] workingset_refault_file 1618 [ 535.937171][T13954] swap 122765312 [ 535.960722][T13954] swapcached 581632 [ 535.964563][T13954] pgpgin 972478 [ 535.968019][T13954] pgpgout 903999 [ 536.148934][T13954] pgfault 428317 [ 536.194865][T13954] pgmajfault 1285 [ 536.248492][T13954] inactive_anon 82227200 [ 536.252772][T13954] active_anon 227065856 [ 536.356084][T13954] inactive_file 0 [ 536.398537][T13954] active_file 4096 [ 536.402291][T13954] unevictable 0 [ 536.405769][T13954] hierarchical_memory_limit 314572800 [ 536.534116][T13954] hierarchical_memsw_limit 9223372036854771712 [ 536.596213][T13954] total_cache 309133312 [ 536.600405][T13954] total_rss 77824 [ 536.690698][T13954] total_rss_huge 0 [ 536.694465][T13954] total_shmem 309129216 [ 536.764083][T13954] total_mapped_file 33685504 [ 536.804589][T13954] total_dirty 0 [ 536.867008][T13954] total_writeback 0 [ 536.870879][T13954] total_workingset_refault_anon 7016 [ 536.976760][T13954] total_workingset_refault_file 1618 [ 536.982078][T13954] total_swap 122765312 [ 537.084943][T13954] total_swapcached 581632 [ 537.089305][T13954] total_pgpgin 972478 [ 537.142568][T13954] total_pgpgout 903999 [ 537.186847][T13954] total_pgfault 428317 [ 537.190941][T13954] total_pgmajfault 1285 [ 537.368081][T13954] total_inactive_anon 82227200 [ 537.394980][T13954] total_active_anon 227065856 [ 537.523887][T13954] total_inactive_file 0 [ 537.590006][T13954] total_active_file 4096 [ 537.674600][T13954] total_unevictable 0 [ 537.678629][T13954] anon_cost 0 [ 537.882223][T14997] FAULT_INJECTION: forcing a failure. [ 537.882223][T14997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.922732][T13954] file_cost 0 [ 537.926066][T13954] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1742,pid=13955,uid=0 [ 537.941214][T14997] CPU: 1 UID: 0 PID: 14997 Comm: syz.6.1962 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 537.951992][T14997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 537.962140][T14997] Call Trace: [ 537.965425][T14997] [ 537.968361][T14997] dump_stack_lvl+0x16c/0x1f0 [ 537.973145][T14997] should_fail_ex+0x497/0x5b0 [ 537.977840][T14997] _copy_from_user+0x2e/0xd0 [ 537.982450][T14997] do_sock_getsockopt+0x319/0x870 [ 537.987497][T14997] ? trace_lock_acquire+0xb0/0x1f0 [ 537.992632][T14997] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 537.998198][T14997] ? lock_acquire+0x2f/0xb0 [ 538.002713][T14997] ? __fget_files+0x40/0x3a0 [ 538.007319][T14997] ? __fget_files+0x206/0x3a0 [ 538.012008][T14997] __sys_getsockopt+0x12f/0x260 [ 538.016884][T14997] __x64_sys_getsockopt+0xbd/0x160 [ 538.022012][T14997] ? trace_irq_enable.constprop.0+0xea/0x140 [ 538.028005][T14997] do_syscall_64+0xcd/0x250 [ 538.032524][T14997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.038432][T14997] RIP: 0033:0x7fd3c9185d29 [ 538.042852][T14997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.062472][T14997] RSP: 002b:00007fd3c9fb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 538.070985][T14997] RAX: ffffffffffffffda RBX: 00007fd3c9375fa0 RCX: 00007fd3c9185d29 [ 538.078963][T14997] RDX: 0000000000000007 RSI: 0000000000000006 RDI: 0000000000000003 [ 538.086938][T14997] RBP: 00007fd3c9fb0090 R08: 0000000020000000 R09: 0000000000000000 [ 538.094922][T14997] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001 [ 538.102898][T14997] R13: 0000000000000000 R14: 00007fd3c9375fa0 R15: 00007ffdb3014658 [ 538.110882][T14997] [ 538.586303][T13954] Memory cgroup out of memory: Killed process 13955 (syz.1.1742) total-vm:131300kB, anon-rss:808kB, file-rss:37476kB, shmem-rss:10108kB, UID:0 pgtables:240kB oom_score_adj:1000 [ 540.388165][T15028] Line length is too long: Should be less than 4094 [ 541.551820][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 541.559171][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 541.570160][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 541.577863][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 541.585680][ T5839] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 541.593053][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 541.946117][T15052] chnl_net:caif_netlink_parms(): no params data found [ 542.324720][T15052] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.338123][T15052] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.345466][T15052] bridge_slave_0: entered allmulticast mode [ 542.352302][T15052] bridge_slave_0: entered promiscuous mode [ 542.366648][T15052] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.373840][T15052] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.385511][T15052] bridge_slave_1: entered allmulticast mode [ 542.394441][T15052] bridge_slave_1: entered promiscuous mode [ 542.446171][T15052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.478350][T15052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.523108][T15052] team0: Port device team_slave_0 added [ 542.536451][T15052] team0: Port device team_slave_1 added [ 542.625684][T15052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.632760][T15052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.693624][T15052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.724723][T15052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.731779][T15052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.780294][T15052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.885516][T15052] hsr_slave_0: entered promiscuous mode [ 542.905952][T15052] hsr_slave_1: entered promiscuous mode [ 542.943573][T15052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 542.951171][T15052] Cannot create hsr debugfs directory [ 543.069356][T15085] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1986'. [ 543.335916][T15052] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 543.393643][T15052] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 543.449303][T15052] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 543.473629][T15052] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 543.547657][T15052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.562501][T15052] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.574040][ T8101] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.581187][ T8101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.619845][T12389] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.626990][T12389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.664818][T15100] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1991'. [ 543.734266][ T5839] Bluetooth: hci4: command tx timeout [ 543.801650][T15052] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 543.812141][T15052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 543.899030][T15100] netlink: 262 bytes leftover after parsing attributes in process `syz.6.1991'. [ 544.053975][T15108] zswap: compressor not available [ 544.344499][T15117] netlink: 'syz.6.1994': attribute type 4 has an invalid length. [ 544.369070][T15117] netlink: 314 bytes leftover after parsing attributes in process `syz.6.1994'. [ 544.431768][T15118] netlink: 'syz.6.1994': attribute type 4 has an invalid length. [ 544.462175][T15118] netlink: 314 bytes leftover after parsing attributes in process `syz.6.1994'. [ 544.580310][T15052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.385283][T15052] veth0_vlan: entered promiscuous mode [ 545.413056][T15052] veth1_vlan: entered promiscuous mode [ 545.470578][T15052] veth0_macvtap: entered promiscuous mode [ 545.507233][T15052] veth1_macvtap: entered promiscuous mode [ 545.561968][T15052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.611743][T15052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.653478][T15052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.705531][T15052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.748139][ T5839] Bluetooth: hci4: command tx timeout [ 545.767696][T15052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.789308][T15052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.810402][T15052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.842576][T15052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.879867][T15052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.926934][T15052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.960946][T15052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.995556][T15052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.034782][T15052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.069142][T15052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.116451][T15052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.164180][T15052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.232468][T15052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.254165][T15052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.274967][T15052] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.301816][T15052] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.338411][T15052] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.374055][T15052] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.635237][ T7400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.635260][ T7400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.724895][ T7400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.724917][ T7400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.836402][T15147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2000'. [ 546.836426][T15147] tc_dump_action: action bad kind [ 547.081547][T15160] FAULT_INJECTION: forcing a failure. [ 547.081547][T15160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.081580][T15160] CPU: 1 UID: 0 PID: 15160 Comm: syz.7.1974 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 547.081609][T15160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 547.081623][T15160] Call Trace: [ 547.081630][T15160] [ 547.081639][T15160] dump_stack_lvl+0x16c/0x1f0 [ 547.081670][T15160] should_fail_ex+0x497/0x5b0 [ 547.081700][T15160] _copy_from_user+0x2e/0xd0 [ 547.081731][T15160] do_tcp_getsockopt+0x1d8/0x3a90 [ 547.081761][T15160] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 547.081787][T15160] ? __kernel_text_address+0xd/0x40 [ 547.081810][T15160] ? unwind_get_return_address+0x59/0xa0 [ 547.081836][T15160] ? arch_stack_walk+0xa7/0x100 [ 547.081868][T15160] ? _parse_integer_limit+0x17f/0x1d0 [ 547.081891][T15160] ? rcu_is_watching+0x12/0xc0 [ 547.081926][T15160] ? _kstrtoull+0x146/0x200 [ 547.081947][T15160] ? __pfx__kstrtoull+0x10/0x10 [ 547.081969][T15160] ? aa_label_sk_perm+0x19d/0x5a0 [ 547.082002][T15160] ? __pfx_lock_release+0x10/0x10 [ 547.082024][T15160] ? trace_lock_acquire+0x14e/0x1f0 [ 547.082053][T15160] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 547.082087][T15160] ? kstrtouint+0xde/0x130 [ 547.082109][T15160] ? __pfx_kstrtouint+0x10/0x10 [ 547.082133][T15160] ? rcu_is_watching+0x12/0xc0 [ 547.082159][T15160] ? lock_release+0x4e2/0x6f0 [ 547.082180][T15160] ? get_pid_task+0xfc/0x250 [ 547.082210][T15160] ? __pfx_lock_release+0x10/0x10 [ 547.082231][T15160] ? trace_lock_acquire+0x14e/0x1f0 [ 547.082260][T15160] ? get_pid_task+0x35/0x250 [ 547.082289][T15160] ? lock_acquire+0x2f/0xb0 [ 547.082310][T15160] ? __pfx___might_resched+0x10/0x10 [ 547.082334][T15160] ? rcu_is_watching+0x12/0xc0 [ 547.082361][T15160] ? lock_release+0x4e2/0x6f0 [ 547.082382][T15160] ? __might_fault+0x13b/0x190 [ 547.082415][T15160] ? __pfx_lock_release+0x10/0x10 [ 547.082436][T15160] ? trace_lock_acquire+0x14e/0x1f0 [ 547.082464][T15160] ? lock_release+0x4e2/0x6f0 [ 547.082484][T15160] ? __might_fault+0xe3/0x190 [ 547.082516][T15160] ? lock_acquire+0x2f/0xb0 [ 547.082537][T15160] ? __might_fault+0xe3/0x190 [ 547.082570][T15160] tcp_getsockopt+0xdf/0x100 [ 547.082597][T15160] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 547.082623][T15160] do_sock_getsockopt+0x3fe/0x870 [ 547.082647][T15160] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 547.082670][T15160] ? lock_acquire+0x2f/0xb0 [ 547.082690][T15160] ? __fget_files+0x40/0x3a0 [ 547.082717][T15160] ? __fget_files+0x206/0x3a0 [ 547.082746][T15160] __sys_getsockopt+0x12f/0x260 [ 547.082778][T15160] __x64_sys_getsockopt+0xbd/0x160 [ 547.082807][T15160] ? trace_irq_enable.constprop.0+0xea/0x140 [ 547.082832][T15160] do_syscall_64+0xcd/0x250 [ 547.082861][T15160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.082890][T15160] RIP: 0033:0x7fe6be985d29 [ 547.082908][T15160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.082936][T15160] RSP: 002b:00007fe6bf89e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 547.082961][T15160] RAX: ffffffffffffffda RBX: 00007fe6beb75fa0 RCX: 00007fe6be985d29 [ 547.082978][T15160] RDX: 0000000000000007 RSI: 0000000000000006 RDI: 0000000000000003 [ 547.082992][T15160] RBP: 00007fe6bf89e090 R08: 0000000020000000 R09: 0000000000000000 [ 547.083009][T15160] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001 [ 547.083024][T15160] R13: 0000000000000000 R14: 00007fe6beb75fa0 R15: 00007ffffd1abe58 [ 547.083046][T15160] [ 547.818218][ T5839] Bluetooth: hci4: command tx timeout [ 549.891359][ T5839] Bluetooth: hci4: command tx timeout [ 550.724326][T15176] [U] [ 550.727081][T15176] [U] [ 550.729791][T15176] [U] [ 550.732510][T15176] [U] [ 551.100121][T15176] [U] [ 551.102861][T15176] [U] [ 551.105570][T15176] [U] [ 551.108272][T15176] [U] [ 551.117583][T15176] [U] [ 551.120330][T15176] [U] [ 551.123037][T15176] [U] [ 551.125740][T15176] [U] [ 551.141323][T15176] [U] [ 551.144057][T15176] [U] [ 551.146761][T15176] [U] [ 551.149461][T15176] [U] [ 551.193200][T15176] [U] [ 551.195953][T15176] [U] [ 551.198656][T15176] [U] [ 551.201365][T15176] [U] [ 551.230027][T15176] [U] [ 551.232764][T15176] [U] [ 551.235471][T15176] [U] [ 551.238170][T15176] [U] [ 551.273171][T15176] [U] [ 551.275909][T15176] [U] [ 551.278616][T15176] [U] [ 551.281316][T15176] [U] [ 551.310378][T15176] [U] [ 551.313119][T15176] [U] [ 551.315818][T15176] [U] [ 551.319049][T15176] [U] [ 551.351593][T15176] [U] [ 551.354334][T15176] [U] [ 551.357048][T15176] [U] [ 551.359754][T15176] [U] [ 551.394108][T15176] [U] [ 551.396848][T15176] [U] [ 551.399552][T15176] [U] [ 551.402258][T15176] [U] [ 551.420952][T15176] [U] [ 551.423690][T15176] [U] [ 551.426408][T15176] [U] [ 551.429111][T15176] [U] [ 551.444504][T15176] [U] [ 551.447246][T15176] [U] [ 551.449959][T15176] [U] [ 551.452660][T15176] [U] [ 551.475519][T15176] [U] [ 551.478259][T15176] [U] [ 551.480974][T15176] [U] [ 551.483690][T15176] [U] [ 551.502419][T15176] [U] [ 551.505158][T15176] [U] [ 551.507857][T15176] [U] [ 551.510555][T15176] [U] [ 551.526095][T15176] [U] [ 551.528829][T15176] [U] [ 551.531529][T15176] [U] [ 551.534231][T15176] [U] [ 551.555346][T15176] [U] [ 551.558077][T15176] [U] [ 551.560779][T15176] [U] [ 551.563482][T15176] [U] [ 551.577594][T15176] [U] [ 551.580329][T15176] [U] [ 551.583029][T15176] [U] [ 551.585737][T15176] [U] [ 551.609036][T15176] [U] [ 551.611766][T15176] [U] [ 551.614465][T15176] [U] [ 551.617168][T15176] [U] [ 551.637415][T15176] [U] [ 551.640152][T15176] [U] [ 551.642852][T15176] [U] [ 551.645552][T15176] [U] [ 551.660278][T15176] [U] [ 551.663012][T15176] [U] [ 551.665717][T15176] [U] [ 551.668418][T15176] [U] [ 551.688680][T15176] [U] [ 551.691415][T15176] [U] [ 551.694119][T15176] [U] [ 551.696820][T15176] [U] [ 551.718305][T15176] [U] [ 551.721036][T15176] [U] [ 551.723735][T15176] [U] [ 551.726434][T15176] [U] [ 551.741083][T15176] [U] [ 551.743817][T15176] [U] [ 551.746517][T15176] [U] [ 551.749217][T15176] [U] [ 551.768253][T15176] [U] [ 551.770990][T15176] [U] [ 551.773691][T15176] [U] [ 551.776384][T15176] [U] [ 551.796778][T15176] [U] [ 551.799519][T15176] [U] [ 551.802317][T15176] [U] [ 551.805017][T15176] [U] [ 551.827920][T15176] [U] [ 551.830656][T15176] [U] [ 551.833357][T15176] [U] [ 551.836048][T15176] [U] [ 551.869945][T15176] [U] [ 552.410999][T15210] [U]  [ 552.413852][T15210] [U] [ 552.416578][T15210] [U] [ 552.419291][T15210] [U] [ 552.509709][T15210] [U] [ 552.512454][T15210] [U] [ 552.515160][T15210] [U] [ 552.517868][T15210] [U] [ 552.580630][T15210] [U] [ 552.583375][T15210] [U] [ 552.586079][T15210] [U] [ 552.588801][T15210] [U] [ 552.714591][T15210] [U] [ 552.717342][T15210] [U] [ 552.720069][T15210] [U] [ 552.722785][T15210] [U] [ 552.750801][T15210] [U] [ 552.753542][T15210] [U] [ 552.756254][T15210] [U] [ 552.759045][T15210] [U] [ 552.796328][T15210] [U] [ 552.799075][T15210] [U] [ 552.801782][T15210] [U] [ 552.804490][T15210] [U] [ 552.851742][T15210] [U] [ 552.854493][T15210] [U] [ 552.857199][T15210] [U] [ 552.859913][T15210] [U] [ 552.875243][T15210] [U] [ 552.877978][T15210] [U] [ 552.880685][T15210] [U] [ 552.883389][T15210] [U] [ 552.889105][T15210] [U] [ 552.891828][T15210] [U] [ 552.894528][T15210] [U] [ 552.897236][T15210] [U] [ 552.907711][T15210] [U] [ 552.910507][T15210] [U] [ 552.913229][T15210] [U] [ 552.915936][T15210] [U] [ 552.919575][T15210] [U] [ 552.922302][T15210] [U] [ 552.925016][T15210] [U] [ 552.927719][T15210] [U] [ 552.943296][T15210] [U] [ 552.946035][T15210] [U] [ 552.948738][T15210] [U] [ 552.951455][T15210] [U] [ 552.973062][T15210] [U] [ 552.975818][T15210] [U] [ 552.978523][T15210] [U] [ 552.981224][T15210] [U] [ 552.988559][T15210] [U] [ 552.991284][T15210] [U] [ 552.993987][T15210] [U] [ 552.996685][T15210] [U] [ 553.003666][T15210] [U] [ 553.006391][T15210] [U] [ 553.009090][T15210] [U] [ 553.011785][T15210] [U] [ 553.021854][T15210] [U] [ 553.024583][T15210] [U] [ 553.027286][T15210] [U] [ 553.029988][T15210] [U] [ 553.033749][T15210] [U] [ 553.036464][T15210] [U] [ 553.039164][T15210] [U] [ 553.041869][T15210] [U] [ 553.047418][T15210] [U] [ 553.050138][T15210] [U] [ 553.052840][T15210] [U] [ 553.055537][T15210] [U] [ 553.059006][T15210] [U] [ 553.061715][T15210] [U] [ 553.064427][T15210] [U] [ 553.067123][T15210] [U] [ 553.072844][T15210] [U] [ 553.075558][T15210] [U] [ 553.078259][T15210] [U] [ 553.080956][T15210] [U] [ 553.084974][T15210] [U] [ 553.087690][T15210] [U] [ 553.090389][T15210] [U] [ 553.093108][T15210] [U] [ 553.098352][T15210] [U] [ 553.101066][T15210] [U] [ 553.103767][T15210] [U] [ 553.106475][T15210] [U] [ 553.112228][T15210] [U] [ 553.114944][T15210] [U] [ 553.117646][T15210] [U] [ 553.120348][T15210] [U] [ 553.128827][T15210] [U] [ 553.131548][T15210] [U] [ 553.134247][T15210] [U] [ 553.136945][T15210] [U] [ 553.142811][T15210] [U] [ 553.145530][T15210] [U] [ 553.148230][T15210] [U] [ 553.150934][T15210] [U] [ 553.157214][T15210] [U] [ 553.159927][T15210] [U] [ 553.162637][T15210] [U] [ 553.165365][T15210] [U] [ 553.183362][T15210] [U] [ 553.186099][T15210] [U] [ 553.188796][T15210] [U] [ 553.191502][T15210] [U] [ 553.205833][T15210] [U] [ 553.208559][T15210] [U] [ 553.211259][T15210] [U] [ 553.213957][T15210] [U] [ 553.219494][T15210] [U] [ 553.222213][T15210] [U] [ 553.224910][T15210] [U] [ 553.227606][T15210] [U] [ 553.240508][T15210] [U] [ 553.243232][T15210] [U] [ 553.245933][T15210] [U] [ 553.248630][T15210] [U] [ 553.253618][T15210] [U] [ 554.127681][T15246] vivid-013: ================= START STATUS ================= [ 554.169579][T15246] vivid-013: Generate PTS: true [ 554.223696][T15246] vivid-013: Generate SCR: true [ 554.253591][T15246] tpg source WxH: 640x360 (Y'CbCr) [ 554.259104][T15246] tpg field: 1 [ 554.262495][T15246] tpg crop: 640x360@0x0 [ 554.313194][T15246] tpg compose: 640x360@0x0 [ 554.317669][T15246] tpg colorspace: 8 [ 554.321490][T15246] tpg transfer function: 0/0 [ 554.370201][T15246] tpg Y'CbCr encoding: 0/0 [ 554.393067][T15246] tpg quantization: 0/0 [ 554.397267][T15246] tpg RGB range: 0/2 [ 554.401173][T15246] vivid-013: ================== END STATUS ================== [ 554.776916][T15244] [U] [ 554.779680][T15244] [U] [ 554.782405][T15244] [U] [ 554.785119][T15244] [U] [ 554.822997][T15244] [U] [ 554.825755][T15244] [U] [ 554.828476][T15244] [U] [ 554.831193][T15244] [U] [ 554.851947][T15244] [U] [ 554.854696][T15244] [U] [ 554.857409][T15244] [U] [ 554.860123][T15244] [U] [ 554.881322][T15244] [U] [ 554.884075][T15244] [U] [ 554.886794][T15244] [U] [ 554.889516][T15244] [U] [ 554.911581][T15244] [U] [ 554.914336][T15244] [U] [ 554.917055][T15244] [U] [ 554.919766][T15244] [U] [ 554.932890][T15244] [U] [ 554.935649][T15244] [U] [ 554.938363][T15244] [U] [ 554.941083][T15244] [U] [ 554.969895][T15244] [U] [ 554.972646][T15244] [U] [ 554.975364][T15244] [U] [ 554.978079][T15244] [U] [ 555.000760][T15244] [U] [ 555.286247][ T29] audit: type=1800 audit(2116.142:24): pid=15271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2027" name="dbroot" dev="configfs" ino=49034 res=0 errno=0 [ 555.286995][T15271] db_root: cannot open: › [ 555.813973][ T29] audit: type=1800 audit(2116.675:25): pid=15289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2030" name="SYSV0000000a" dev="hugetlbfs" ino=0 res=0 errno=0 [ 556.328027][T15300] FAULT_INJECTION: forcing a failure. [ 556.328027][T15300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 556.376862][T15300] CPU: 0 UID: 0 PID: 15300 Comm: syz.7.2034 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 556.387680][T15300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 556.397759][T15300] Call Trace: [ 556.401060][T15300] [ 556.404011][T15300] dump_stack_lvl+0x16c/0x1f0 [ 556.408720][T15300] should_fail_ex+0x497/0x5b0 [ 556.413422][T15300] _copy_to_user+0x32/0xd0 [ 556.417871][T15300] do_tcp_getsockopt+0x8ff/0x3a90 [ 556.422933][T15300] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 556.428415][T15300] ? __kernel_text_address+0xd/0x40 [ 556.433637][T15300] ? unwind_get_return_address+0x59/0xa0 [ 556.439286][T15300] ? arch_stack_walk+0xa7/0x100 [ 556.444164][T15300] ? _parse_integer_limit+0x17f/0x1d0 [ 556.449558][T15300] ? rcu_is_watching+0x12/0xc0 [ 556.454350][T15300] ? _kstrtoull+0x146/0x200 [ 556.458872][T15300] ? __pfx__kstrtoull+0x10/0x10 [ 556.463748][T15300] ? aa_label_sk_perm+0x19d/0x5a0 [ 556.468802][T15300] ? __pfx_lock_release+0x10/0x10 [ 556.473844][T15300] ? trace_lock_acquire+0x14e/0x1f0 [ 556.479071][T15300] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 556.484471][T15300] ? kstrtouint+0xde/0x130 [ 556.488913][T15300] ? __pfx_kstrtouint+0x10/0x10 [ 556.493790][T15300] ? rcu_is_watching+0x12/0xc0 [ 556.498596][T15300] ? lock_release+0x4e2/0x6f0 [ 556.503294][T15300] ? get_pid_task+0xfc/0x250 [ 556.507919][T15300] ? __pfx_lock_release+0x10/0x10 [ 556.512965][T15300] ? trace_lock_acquire+0x14e/0x1f0 [ 556.518195][T15300] ? get_pid_task+0x35/0x250 [ 556.522825][T15300] ? lock_acquire+0x2f/0xb0 [ 556.527363][T15300] ? __pfx___might_resched+0x10/0x10 [ 556.532676][T15300] ? rcu_is_watching+0x12/0xc0 [ 556.537555][T15300] ? lock_release+0x4e2/0x6f0 [ 556.542250][T15300] ? __might_fault+0x13b/0x190 [ 556.547044][T15300] ? __pfx_lock_release+0x10/0x10 [ 556.552091][T15300] ? trace_lock_acquire+0x14e/0x1f0 [ 556.557314][T15300] ? lock_release+0x4e2/0x6f0 [ 556.562098][T15300] ? __might_fault+0xe3/0x190 [ 556.566804][T15300] ? lock_acquire+0x2f/0xb0 [ 556.571337][T15300] ? __might_fault+0xe3/0x190 [ 556.576053][T15300] tcp_getsockopt+0xdf/0x100 [ 556.580661][T15300] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 556.586574][T15300] do_sock_getsockopt+0x3fe/0x870 [ 556.591628][T15300] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 556.597194][T15300] ? lock_acquire+0x2f/0xb0 [ 556.601718][T15300] ? __fget_files+0x40/0x3a0 [ 556.606338][T15300] ? __fget_files+0x206/0x3a0 [ 556.611034][T15300] __sys_getsockopt+0x12f/0x260 [ 556.615910][T15300] __x64_sys_getsockopt+0xbd/0x160 [ 556.621053][T15300] ? trace_irq_enable.constprop.0+0xea/0x140 [ 556.627083][T15300] do_syscall_64+0xcd/0x250 [ 556.631711][T15300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.637636][T15300] RIP: 0033:0x7fe6be985d29 [ 556.642066][T15300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.661699][T15300] RSP: 002b:00007fe6bf89e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 556.670133][T15300] RAX: ffffffffffffffda RBX: 00007fe6beb75fa0 RCX: 00007fe6be985d29 [ 556.678129][T15300] RDX: 0000000000000007 RSI: 0000000000000006 RDI: 0000000000000003 [ 556.686124][T15300] RBP: 00007fe6bf89e090 R08: 0000000020000000 R09: 0000000000000000 [ 556.694118][T15300] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001 [ 556.702117][T15300] R13: 0000000000000000 R14: 00007fe6beb75fa0 R15: 00007ffffd1abe58 [ 556.710116][T15300] [ 558.523591][T15346] lo: entered allmulticast mode [ 558.529709][T15346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2043'. [ 559.769587][T15344] lo: left allmulticast mode [ 560.807052][T15350] kexec: Could not allocate control_code_buffer [ 562.580617][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.587012][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.026681][T15409] lo: entered allmulticast mode [ 564.032956][T15409] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2057'. [ 565.083074][T15407] lo: left allmulticast mode [ 565.681790][T15412] kexec: Could not allocate control_code_buffer [ 567.867057][T15530] lo: entered allmulticast mode [ 567.886047][T15530] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2079'. [ 568.155649][T15549] netlink: 330 bytes leftover after parsing attributes in process `syz.7.2083'. [ 568.398305][T15558] vivid-013: ================= START STATUS ================= [ 568.419948][T15558] vivid-013: Generate PTS: true [ 568.427254][T15558] vivid-013: Generate SCR: true [ 568.445261][T15558] tpg source WxH: 640x360 (Y'CbCr) [ 568.463222][T15558] tpg field: 1 [ 568.474894][T15558] tpg crop: 640x360@0x0 [ 568.486934][T15558] tpg compose: 640x360@0x0 [ 568.499470][T15558] tpg colorspace: 8 [ 568.511109][T15558] tpg transfer function: 0/0 [ 568.524857][T15558] tpg Y'CbCr encoding: 0/0 [ 568.537603][T15558] tpg quantization: 0/0 [ 568.550931][T15558] tpg RGB range: 0/2 [ 568.561659][T15558] vivid-013: ================== END STATUS ================== [ 568.874570][T15527] lo: left allmulticast mode [ 569.824400][T15543] kexec: Could not allocate control_code_buffer [ 570.815529][T15605] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 570.844207][T15605] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 571.211554][T15617] Process accounting resumed [ 571.254621][T15622] vivid-013: ================= START STATUS ================= [ 571.262540][T15622] vivid-013: Generate PTS: true [ 571.267520][T15622] vivid-013: Generate SCR: true [ 571.272815][T15622] tpg source WxH: 640x360 (Y'CbCr) [ 571.282923][T15622] tpg field: 1 [ 571.286423][T15622] tpg crop: 640x360@0x0 [ 571.290677][T15622] tpg compose: 640x360@0x0 [ 571.304119][T15622] tpg colorspace: 8 [ 571.314924][T15622] tpg transfer function: 0/0 [ 571.324293][T15622] tpg Y'CbCr encoding: 0/0 [ 571.333262][T15622] tpg quantization: 0/0 [ 571.363359][T15622] tpg RGB range: 0/2 [ 571.379486][T15622] vivid-013: ================== END STATUS ================== [ 572.346049][T15633] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.627785][T15698] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2119'. [ 575.948078][T15712] bridge0: port 3(ipvlan1) entered blocking state [ 575.982591][T15712] bridge0: port 3(ipvlan1) entered disabled state [ 576.025166][T15712] ipvlan1: entered allmulticast mode [ 576.055133][T15712] veth0_vlan: entered allmulticast mode [ 576.084942][T15712] ipvlan1: left allmulticast mode [ 576.126797][T15712] veth0_vlan: left allmulticast mode [ 577.258096][ T29] audit: type=1800 audit(4294967317.485:26): pid=15727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2126" name="features" dev="configfs" ino=55042 res=0 errno=0 [ 577.335907][ T29] audit: type=1800 audit(4294967317.496:27): pid=15727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2126" name="dbroot" dev="configfs" ino=55043 res=0 errno=0 [ 578.716646][T15765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2135'. [ 579.897725][T15795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2140'. [ 580.609252][T15816] openvswitch: netlink: IPv6 tunnel dst address is zero [ 587.480030][T15912] HfR: entered promiscuous mode [ 587.543362][T15912] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2169'. [ 590.446728][T15931] i2c i2c-0: delete_device: Can't find device in list [ 590.959366][T15949] openvswitch: netlink: nsh attribute has 14 unknown bytes. [ 590.990079][T15950] netlink: 'syz.7.2177': attribute type 6 has an invalid length. [ 591.103253][T15950] netlink: 330 bytes leftover after parsing attributes in process `syz.7.2177'. [ 591.303584][T15942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2175'. [ 591.355296][T15936] openvswitch: HfR: Dropping previously announced user features [ 591.456528][T15942] HfR: left promiscuous mode [ 592.087004][T15961] can: request_module (can-proto-0) failed. [ 593.040714][T15991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2186'. [ 593.297917][T15985] blktrace: Concurrent blktraces are not allowed on sg0 [ 593.642490][T16016] HfR: entered promiscuous mode [ 594.389058][T16031] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2194'. [ 594.429599][T16024] openvswitch: HfR: Dropping previously announced user features [ 594.465495][T16031] HfR: left promiscuous mode [ 595.173381][T12177] Bluetooth: hci3: command 0x0406 tx timeout [ 596.657864][T16042] ptrace attach of "./syz-executor exec"[5828] was attempted by "./syz-executor exec"[16042] [ 600.135271][T16129] ptrace attach of "./syz-executor exec"[15052] was attempted by "./syz-executor exec"[16129] [ 601.560508][T16167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2224'. [ 602.080467][T16182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2226'. [ 606.158119][T16250] ima: policy update failed [ 606.216645][ T29] audit: type=1802 audit(4294967346.606:28): pid=16250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2245" res=0 errno=0 [ 606.402644][T16263] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 606.805060][T16270] netlink: 14880 bytes leftover after parsing attributes in process `syz.1.2252'. [ 607.947055][T16286] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2254'. [ 615.413996][T16387] HfR: entered promiscuous mode [ 615.743852][T16387] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2274'. [ 615.752882][T16387] HfR: left promiscuous mode [ 616.265636][T16403] misc userio: No port type given on /dev/userio [ 616.315586][T16404] misc userio: No port type given on /dev/userio [ 618.983962][T16433] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2288'. [ 623.732589][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.739264][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.761813][T16542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2315'. [ 629.160599][T16580] openvswitch: netlink: Message has 4 unknown bytes. [ 630.316303][T16604] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2330'. [ 630.656334][T16617] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2329'. [ 631.770287][T16659] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2343'. [ 631.824295][T16659] veth0_macvtap: left promiscuous mode [ 631.889824][T16659] macvtap0: entered allmulticast mode [ 632.343825][T16673] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2346'. [ 632.608825][T16676] crash hp: kexec_trylock() failed, kdump image may be inaccurate syzkaller syzkaller login: [ 633.624665][T16701] FAULT_INJECTION: forcing a failure. [ 633.624665][T16701] name failslab, interval 1, probability 0, space 0, times 0 [ 633.837795][T16656] kexec: Could not allocate control_code_buffer [ 633.936545][T16705] mkiss: ax0: crc mode is auto. [ 634.178634][T16717] snd_aloop snd_aloop.0: control 5:-2147483647:1:IAªƒ>/Æ[k<÷ÎÇmgx¶U(!5ºœ+-Cî°ÜY¶:0 is already present [ 634.211634][T16701] CPU: 1 UID: 0 PID: 16701 Comm: syz.1.2356 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 634.222439][T16701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 634.232502][T16701] Call Trace: [ 634.235783][T16701] [ 634.238716][T16701] dump_stack_lvl+0x16c/0x1f0 [ 634.243411][T16701] should_fail_ex+0x497/0x5b0 [ 634.248104][T16701] ? fs_reclaim_acquire+0xae/0x150 [ 634.253230][T16701] should_failslab+0xc2/0x120 [ 634.257928][T16701] __kmalloc_noprof+0xce/0x4f0 [ 634.262708][T16701] ? tomoyo_realpath_from_path+0xbf/0x710 [ 634.268453][T16701] tomoyo_realpath_from_path+0xbf/0x710 [ 634.274012][T16701] ? tomoyo_path_number_perm+0x235/0x5b0 [ 634.279664][T16701] tomoyo_path_number_perm+0x248/0x5b0 [ 634.285145][T16701] ? tomoyo_path_number_perm+0x235/0x5b0 [ 634.290802][T16701] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 634.296806][T16701] ? rcu_is_watching+0x12/0xc0 [ 634.301587][T16701] ? preempt_count_add+0x76/0x150 [ 634.306634][T16701] ? __pfx_lock_release+0x10/0x10 [ 634.311669][T16701] ? trace_lock_acquire+0x14e/0x1f0 [ 634.316883][T16701] ? __fget_files+0x40/0x3a0 [ 634.321483][T16701] ? lock_acquire+0x2f/0xb0 [ 634.325993][T16701] ? __fget_files+0x40/0x3a0 [ 634.330600][T16701] ? __fget_files+0x206/0x3a0 [ 634.335291][T16701] security_file_ioctl+0x9b/0x240 [ 634.340335][T16701] __x64_sys_ioctl+0xb7/0x200 [ 634.345039][T16701] do_syscall_64+0xcd/0x250 [ 634.349555][T16701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.355472][T16701] RIP: 0033:0x7f6743d85d29 [ 634.359898][T16701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.379530][T16701] RSP: 002b:00007f6744b76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 634.387966][T16701] RAX: ffffffffffffffda RBX: 00007f6743f75fa0 RCX: 00007f6743d85d29 [ 634.395949][T16701] RDX: 0000000000000000 RSI: 0000000000009201 RDI: 0000000000000003 [ 634.403928][T16701] RBP: 00007f6744b76090 R08: 0000000000000000 R09: 0000000000000000 [ 634.411913][T16701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.419893][T16701] R13: 0000000000000000 R14: 00007f6743f75fa0 R15: 00007ffe62a907c8 [ 634.427883][T16701] [ 635.047322][T16701] ERROR: Out of memory at tomoyo_realpath_from_path. [ 637.186195][T16779] netlink: 372 bytes leftover after parsing attributes in process `syz.2.2364'. [ 640.564293][T16883] netlink: 'syz.7.2386': attribute type 11 has an invalid length. [ 640.945546][T16900] nl80211: entered promiscuous mode [ 643.191741][ T29] audit: type=1800 audit(4294967383.778:29): pid=16947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2392" name="members" dev="configfs" ino=58312 res=0 errno=0 [ 644.439075][T16984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2398'. [ 649.179437][T17063] netlink: 'syz.6.2417': attribute type 6 has an invalid length. [ 649.238914][T17063] netlink: 330 bytes leftover after parsing attributes in process `syz.6.2417'. [ 649.518792][T17070] netlink: 'syz.7.2419': attribute type 21 has an invalid length. [ 649.604274][T17070] netlink: 334 bytes leftover after parsing attributes in process `syz.7.2419'. [ 650.940714][ T29] audit: type=1800 audit(4294967391.559:30): pid=17098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2425" name="discovery_nqn" dev="configfs" ino=61952 res=0 errno=0 [ 650.991043][ T7396] ------------[ cut here ]------------ [ 650.996546][ T7396] ODEBUG: assert_init not available (active state 0) object: ffff888068a59b28 object type: timer_list hint: ieee80211_ibss_timer+0x0/0x90 [ 651.050728][ T7396] WARNING: CPU: 0 PID: 7396 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 651.060282][ T7396] Modules linked in: [ 651.064375][ T7396] CPU: 0 UID: 0 PID: 7396 Comm: kworker/u8:11 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 651.075641][ T7396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 651.085842][ T7396] Workqueue: events_unbound cfg80211_wiphy_work [ 651.092266][ T7396] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 651.098231][ T7396] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 48 8b 14 dd e0 81 b1 8b 41 56 4c 89 e6 48 c7 c7 60 76 b1 8b e8 5f 4d bc fc 90 <0f> 0b 90 90 58 83 05 c6 4f 7f 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 651.117970][ T7396] RSP: 0000:ffffc900045ef7c8 EFLAGS: 00010286 [ 651.124730][ T7396] RAX: 0000000000000000 RBX: 0000000000000005 RCX: ffffffff815a1789 [ 651.132790][ T7396] RDX: ffff88807ea2da00 RSI: ffffffff815a1796 RDI: 0000000000000001 [ 651.140824][ T7396] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 651.148819][ T7396] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bb17d40 [ 651.156850][ T7396] R13: ffffffff8b4f81a0 R14: ffffffff8a928850 R15: ffffc900045ef888 [ 651.165081][ T7396] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 651.174297][ T7396] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 651.180947][ T7396] CR2: 00007f19769f4d58 CR3: 0000000032a52000 CR4: 00000000003526f0 [ 651.189035][ T7396] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 651.197195][ T7396] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 651.205342][ T7396] Call Trace: [ 651.208640][ T7396] [ 651.211633][ T7396] ? __warn+0xea/0x3c0 [ 651.216165][ T7396] ? preempt_schedule_notrace+0x62/0xe0 [ 651.221778][ T7396] ? debug_print_object+0x1a2/0x2b0 [ 651.227010][ T7396] ? report_bug+0x3c0/0x580 [ 651.231573][ T7396] ? handle_bug+0x54/0xa0 [ 651.235929][ T7396] ? exc_invalid_op+0x17/0x50 [ 651.240693][ T7396] ? asm_exc_invalid_op+0x1a/0x20 [ 651.245746][ T7396] ? __pfx_ieee80211_ibss_timer+0x10/0x10 [ 651.251566][ T7396] ? __warn_printk+0x199/0x350 [ 651.256363][ T7396] ? __warn_printk+0x1a6/0x350 [ 651.261204][ T7396] ? debug_print_object+0x1a2/0x2b0 [ 651.266612][ T7396] ? debug_print_object+0x1a1/0x2b0 [ 651.272260][ T7396] ? __pfx_ieee80211_ibss_timer+0x10/0x10 [ 651.278010][ T7396] ? trace_irq_enable.constprop.0+0xea/0x140 [ 651.284195][ T7396] debug_object_assert_init+0x1ee/0x2f0 [ 651.289808][ T7396] ? ret_from_fork_asm+0x1a/0x30 [ 651.294900][ T7396] ? __pfx_debug_object_assert_init+0x10/0x10 [ 651.301172][ T7396] ? stack_depot_save_flags+0x28/0x9e0 [ 651.306664][ T7396] ? __kasan_slab_free+0x51/0x70 [ 651.311687][ T7396] ? kmem_cache_free+0x152/0x4c0 [ 651.316656][ T7396] ? skb_free_head+0x18a/0x1d0 [ 651.321480][ T7396] ? skb_release_data+0x560/0x730 [ 651.326548][ T7396] __mod_timer+0xae/0xdc0 [ 651.330937][ T7396] ? rcu_is_watching+0x12/0xc0 [ 651.335729][ T7396] ? lock_release+0x4e2/0x6f0 [ 651.340518][ T7396] ? __pfx___mod_timer+0x10/0x10 [ 651.345511][ T7396] ? do_raw_spin_lock+0x12d/0x2c0 [ 651.350695][ T7396] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 651.356095][ T7396] ? round_jiffies+0xfb/0x140 [ 651.360936][ T7396] ? __pfx_round_jiffies+0x10/0x10 [ 651.366083][ T7396] ? trace_irq_enable.constprop.0+0xea/0x140 [ 651.372322][ T7396] ieee80211_ibss_work+0x481/0x14c0 [ 651.377565][ T7396] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 651.383493][ T7396] ? rcu_is_watching+0x12/0xc0 [ 651.388293][ T7396] ? rcu_is_watching+0x12/0xc0 [ 651.393123][ T7396] ? lock_release+0x4e2/0x6f0 [ 651.397965][ T7396] ? skb_dequeue+0x126/0x180 [ 651.402736][ T7396] ? __pfx_lock_release+0x10/0x10 [ 651.407795][ T7396] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 651.413340][ T7396] ? rcu_is_watching+0x12/0xc0 [ 651.418145][ T7396] ? trace_irq_enable.constprop.0+0xea/0x140 [ 651.424278][ T7396] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 651.430162][ T7396] ieee80211_iface_work+0xd01/0xf00 [ 651.435390][ T7396] cfg80211_wiphy_work+0x3de/0x560 [ 651.440597][ T7396] process_one_work+0x958/0x1b30 [ 651.445571][ T7396] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 651.451274][ T7396] ? __pfx_process_one_work+0x10/0x10 [ 651.456668][ T7396] ? rcu_is_watching+0x12/0xc0 [ 651.461514][ T7396] ? assign_work+0x1a0/0x250 [ 651.466145][ T7396] worker_thread+0x6c8/0xf00 [ 651.470975][ T7396] ? __pfx_worker_thread+0x10/0x10 [ 651.476116][ T7396] kthread+0x2c1/0x3a0 [ 651.480445][ T7396] ? trace_irq_enable.constprop.0+0xea/0x140 [ 651.486463][ T7396] ? __pfx_kthread+0x10/0x10 [ 651.491146][ T7396] ret_from_fork+0x45/0x80 [ 651.495585][ T7396] ? __pfx_kthread+0x10/0x10 [ 651.500352][ T7396] ret_from_fork_asm+0x1a/0x30 [ 651.505158][ T7396] [ 651.508353][ T7396] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 651.515649][ T7396] CPU: 0 UID: 0 PID: 7396 Comm: kworker/u8:11 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 651.526605][ T7396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 651.536768][ T7396] Workqueue: events_unbound cfg80211_wiphy_work [ 651.543058][ T7396] Call Trace: [ 651.546351][ T7396] [ 651.549306][ T7396] dump_stack_lvl+0x3d/0x1f0 [ 651.554012][ T7396] panic+0x71d/0x800 [ 651.557940][ T7396] ? __pfx_panic+0x10/0x10 [ 651.562388][ T7396] ? show_trace_log_lvl+0x29d/0x3d0 [ 651.567622][ T7396] ? check_panic_on_warn+0x1f/0xb0 [ 651.572763][ T7396] ? debug_print_object+0x1a2/0x2b0 [ 651.577991][ T7396] check_panic_on_warn+0xab/0xb0 [ 651.582948][ T7396] __warn+0xf6/0x3c0 [ 651.586885][ T7396] ? preempt_schedule_notrace+0x62/0xe0 [ 651.592440][ T7396] ? debug_print_object+0x1a2/0x2b0 [ 651.597656][ T7396] report_bug+0x3c0/0x580 [ 651.601992][ T7396] handle_bug+0x54/0xa0 [ 651.606155][ T7396] exc_invalid_op+0x17/0x50 [ 651.610666][ T7396] asm_exc_invalid_op+0x1a/0x20 [ 651.615525][ T7396] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 651.621346][ T7396] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 48 8b 14 dd e0 81 b1 8b 41 56 4c 89 e6 48 c7 c7 60 76 b1 8b e8 5f 4d bc fc 90 <0f> 0b 90 90 58 83 05 c6 4f 7f 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 651.640956][ T7396] RSP: 0000:ffffc900045ef7c8 EFLAGS: 00010286 [ 651.647026][ T7396] RAX: 0000000000000000 RBX: 0000000000000005 RCX: ffffffff815a1789 [ 651.655007][ T7396] RDX: ffff88807ea2da00 RSI: ffffffff815a1796 RDI: 0000000000000001 [ 651.662994][ T7396] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 651.670982][ T7396] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bb17d40 [ 651.678958][ T7396] R13: ffffffff8b4f81a0 R14: ffffffff8a928850 R15: ffffc900045ef888 [ 651.686937][ T7396] ? __pfx_ieee80211_ibss_timer+0x10/0x10 [ 651.692669][ T7396] ? __warn_printk+0x199/0x350 [ 651.697508][ T7396] ? __warn_printk+0x1a6/0x350 [ 651.702283][ T7396] ? debug_print_object+0x1a1/0x2b0 [ 651.707498][ T7396] ? __pfx_ieee80211_ibss_timer+0x10/0x10 [ 651.713228][ T7396] ? trace_irq_enable.constprop.0+0xea/0x140 [ 651.719212][ T7396] debug_object_assert_init+0x1ee/0x2f0 [ 651.724772][ T7396] ? ret_from_fork_asm+0x1a/0x30 [ 651.729721][ T7396] ? __pfx_debug_object_assert_init+0x10/0x10 [ 651.735804][ T7396] ? stack_depot_save_flags+0x28/0x9e0 [ 651.741266][ T7396] ? __kasan_slab_free+0x51/0x70 [ 651.746235][ T7396] ? kmem_cache_free+0x152/0x4c0 [ 651.751177][ T7396] ? skb_free_head+0x18a/0x1d0 [ 651.755946][ T7396] ? skb_release_data+0x560/0x730 [ 651.760977][ T7396] __mod_timer+0xae/0xdc0 [ 651.765306][ T7396] ? rcu_is_watching+0x12/0xc0 [ 651.770072][ T7396] ? lock_release+0x4e2/0x6f0 [ 651.774748][ T7396] ? __pfx___mod_timer+0x10/0x10 [ 651.779691][ T7396] ? do_raw_spin_lock+0x12d/0x2c0 [ 651.784723][ T7396] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 651.790098][ T7396] ? round_jiffies+0xfb/0x140 [ 651.794796][ T7396] ? __pfx_round_jiffies+0x10/0x10 [ 651.799919][ T7396] ? trace_irq_enable.constprop.0+0xea/0x140 [ 651.805899][ T7396] ieee80211_ibss_work+0x481/0x14c0 [ 651.811107][ T7396] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 651.816747][ T7396] ? rcu_is_watching+0x12/0xc0 [ 651.821518][ T7396] ? rcu_is_watching+0x12/0xc0 [ 651.826288][ T7396] ? lock_release+0x4e2/0x6f0 [ 651.830974][ T7396] ? skb_dequeue+0x126/0x180 [ 651.835565][ T7396] ? __pfx_lock_release+0x10/0x10 [ 651.840588][ T7396] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 651.845965][ T7396] ? rcu_is_watching+0x12/0xc0 [ 651.850741][ T7396] ? trace_irq_enable.constprop.0+0xea/0x140 [ 651.856725][ T7396] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 651.862535][ T7396] ieee80211_iface_work+0xd01/0xf00 [ 651.867748][ T7396] cfg80211_wiphy_work+0x3de/0x560 [ 651.872869][ T7396] process_one_work+0x958/0x1b30 [ 651.877900][ T7396] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 651.883549][ T7396] ? __pfx_process_one_work+0x10/0x10 [ 651.888918][ T7396] ? rcu_is_watching+0x12/0xc0 [ 651.893691][ T7396] ? assign_work+0x1a0/0x250 [ 651.898293][ T7396] worker_thread+0x6c8/0xf00 [ 651.902884][ T7396] ? __pfx_worker_thread+0x10/0x10 [ 651.907994][ T7396] kthread+0x2c1/0x3a0 [ 651.912067][ T7396] ? trace_irq_enable.constprop.0+0xea/0x140 [ 651.918048][ T7396] ? __pfx_kthread+0x10/0x10 [ 651.922644][ T7396] ret_from_fork+0x45/0x80 [ 651.927062][ T7396] ? __pfx_kthread+0x10/0x10 [ 651.931654][ T7396] ret_from_fork_asm+0x1a/0x30 [ 651.936431][ T7396] [ 651.939697][ T7396] Kernel Offset: disabled [ 651.944020][ T7396] Rebooting in 86400 seconds..