last executing test programs: 9.141413581s ago: executing program 1 (id=2161): mmap$auto(0x0, 0x20009, 0xda, 0xeb1, 0x405, 0x0) sysfs$auto(0x2, 0x100000000000037, 0x0) socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x9, 0xffffffffffffffff, [0x100, 0x9, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0xfc, 0x6, 0x0, 0x0, 0xf89, 0x9, 0x837, 0x8}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x0) kexec_load$auto(0xff, 0x2, 0x0, 0x4) r1 = socket(0x10, 0x2, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) mmap$auto(0x6, 0x2020009, 0x7, 0xf8, 0xffffffffffbffffa, 0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) bpf$auto(0x4, &(0x7f0000000480)=@test={0xffffffffffffffff, 0x3f0360a9, 0x52, 0xdbfd, 0x7, 0x0, 0x1, 0x1, 0x8, 0x8000, 0x2, 0xfffffffffffffffb, 0xa, 0x5578, 0x2}, 0xe8a) sendmsg$auto_IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$auto_NETDEV_CMD_NAPI_GET(0xffffffffffffffff, 0x0, 0x40800) 8.749869914s ago: executing program 1 (id=2162): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x3, 0x2) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) openat$auto_vrr_range_fops_(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/dri/vkms/Virtual-1/vrr_range\x00', 0x40, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000040)='!\x00', 0x1ff) bpf$auto(0x18, &(0x7f0000000040)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x5, 0x8, 0xffffffffffffffff, @relative_id=0x3, 0x41b5c1ff}, 0x92) r0 = socket(0x10, 0x2, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/adsp1\x00', 0xae9e87e1d7690a40, 0x0) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0x81) sendmmsg$auto(r0, &(0x7f0000000840)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)="eea9e96769e582f241b50bd9f3fa6e154f41f9ced5506cad81ceabf145907859a71e650c9071bbc2298e642abf9c1bb6ba63666ffa4215b740a438a886ece144243af04d6d0dc91f25c2f22b0321bd48e2264f92780ed30a0da359773c044352df4a676b84076241e368342ae5b6359ea7c92a2c83", 0xfc2}, 0x2, &(0x7f0000000880)="10714d59a19b990000000000000004000000000000000000004e3677e14e7c9fe32ebc96944fc19c65b212778871f2afe5348ca7fc56b17d9122b98d41238bdfad5829ff15c23c55236f1f9b", 0x2, 0xa505}, 0x400}, 0x80000001, 0x8) setitimer$auto(0x1, 0x0, &(0x7f0000000040)={{0x5, 0x5}, {0x9, 0x8}}) mmap$auto(0x8000, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdf3) syz_genetlink_get_family_id$auto_ncsi(0x0, r1) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000180)={{@inferred, 0x3, 0x401, 0x1, "0ad632f09755a78eeb3ecc74108a267ff21760852f1a528ede7fd83a8c162bd42ea3a65ede031632ffc5cb2e"}, 0x1, @integer64=@value_ptr=0x0, "340cbdac1d1b84173227e354cd54858d0baf4944257edc522e9253d9b4d346ad51643d61fb4c6ecb456e630953f93f5956f33dab7e8e14ea367fb86dff3c7edd79efe13979b3ddd19c5af16f0ee0066e16ca11dd0ec299cc1def69f385893f7aae0488a6b05bc8d8f207c49befdeeafdf1c55b04507d5637cddf7dc1d86765af"}) r2 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) read$auto_snd_ctl_f_ops_control(r2, &(0x7f0000001a80)=""/4096, 0xfffffea1) 6.772001873s ago: executing program 3 (id=2169): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0xa, 0x3, 0x73) setsockopt$auto(r1, 0xff, 0x7, 0x0, 0xfff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) landlock_create_ruleset$auto(&(0x7f00000007c0)={0x1}, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001080), r1) ioctl$auto_VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x5) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) acct$auto(0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/v4l-touch8\x00', 0x40080, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f00000001c0)=""/191, 0x1f8) read$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000000080)=""/4096, 0x1000) read$auto(r0, &(0x7f0000001200)='\xefI5\x1d\xc4~\xd0>\xd2;\xbcj\xce\x18+\x9blE\x18\xa1>V\n\xa4\x90cgy\x98O\xf4\x7f\xe0\xbf\xbb\x9f\xfc\xfb\x870l0\xcf\xb4\rx\xcb\bpg0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) memfd_create$auto(&(0x7f0000000100)='@\\{.}\x00', 0x8) socket(0x2a, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_map_fd=r0}, 0xa3) 3.040316416s ago: executing program 1 (id=2179): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$auto(0x3, 0x40103e05, 0x38) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) timerfd_create$auto(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) exit$auto(0xffff) eventfd$auto(0x3) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptys0\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) 2.906346163s ago: executing program 2 (id=2180): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) read$auto_tty_fops_tty_io(0xffffffffffffffff, &(0x7f0000000b40)=""/4096, 0x1000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) fcntl$auto(0x3, 0x4, 0xa553) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000780), r1) sendmsg$auto_TIPC_NL_BEARER_GET(r1, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x40000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x2000c041) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x0, 0x53, 0x0, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) mmap$auto(0x9, 0x8, 0x7f, 0x14, 0x1ff, 0xeb41) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9fe) mmap$auto(0x200, 0xffffffffffffffff, 0x100000001, 0x17, 0x8fe9, 0x2c) socket(0x2, 0x1, 0x0) socket(0x0, 0x80000, 0x9) statmount$auto(0x0, 0x0, 0x1fe, 0x81) connect$auto(0x3, &(0x7f0000000000), 0x55) shutdown$auto(0x200000003, 0x2) 2.762963452s ago: executing program 3 (id=2181): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mlock$auto(0xfbe8, 0x4) personality$auto(0xfffffffc) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x6, &(0x7f00000000c0)={0xfffffffffffffffc, 0x6c}, 0x2, 0x0, 0x9, 0xf}, 0x7}, 0xfff, 0x200, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm1c/sub2/xrun_injection\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0x3f00) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb0, 0xd, 0x300000000000) name_to_handle_at$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x202) close_range$auto(0x2, 0x8, 0x0) mprotect$auto(0x10000000000, 0x8, 0x400006) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/fs/ocfs2/dlm_recover_callback_support\x00', 0x880080, 0x0) sendmmsg$auto(r0, &(0x7f0000000280)={{&(0x7f0000000140)="40675c1589acc0a74673e4b64b0d4c7f20ad95e936ed1e545b16ec5362674e08313d4cfb0c3725a723066a31cbb2367cec5871ce36b45c926e94642051963a6c32dec3", 0x0, &(0x7f0000000200)={0x0, 0x6}, 0x9, &(0x7f0000000240)="0e1aa0d7e76ec3a3794fd7ea82de5eb776b68b58e62b08eb45d09f475800d3b5e6935e", 0x80000001, 0xb8b7}, 0x1}, 0x81, 0x6) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002c00)=""/181, 0xb5) msgget$auto(0x1, 0x200) setfsuid$auto(0x0) rt_sigqueueinfo$auto(0x0, 0x400, 0x0) 2.451170496s ago: executing program 3 (id=2182): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) fsopen$auto(&(0x7f0000000000)='nlctrl\x00', 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) madvise$auto(0x6, 0x1, 0xb) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c810}, 0x20000041) bpf$auto(0xfffff001, &(0x7f0000000000)=@bpf_attr_3={0xa332, 0x2, 0x7, 0x3, 0xfffffbff, 0x2, 0x1, 0x4, 0x7, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x8, 0x81, 0xb03, 0x0, 0x3ff, 0x7, @attach_prog_fd, 0x2, 0x630, 0x57d, 0x9, 0x8}, 0xa3) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) read$auto(0x4, 0x0, 0xfdef) 2.298290576s ago: executing program 0 (id=2183): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000040)=""/142, 0x8e) mmap$auto(0xc, 0x200006, 0x1, 0x11, 0x602, 0x4) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x40000a, 0xdf, 0x12, 0xa, 0x8000) 2.190162642s ago: executing program 2 (id=2184): mmap$auto(0x0, 0x20009, 0xda, 0xeb1, 0x405, 0x0) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0xe, 0x0, 0x4) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x9, 0xffffffffffffffff, [0x100, 0x9, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0xfc, 0x6, 0x0, 0x0, 0xf89, 0x9, 0x837, 0x8}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x0) kexec_load$auto(0xff, 0x2, 0x0, 0x4) r2 = socket(0x10, 0x2, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) mmap$auto(0x6, 0x2020009, 0x7, 0xf8, 0xffffffffffbffffa, 0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) bpf$auto(0x4, &(0x7f0000000480)=@test={0xffffffffffffffff, 0x3f0360a9, 0x52, 0xdbfd, 0x7, 0x0, 0x1, 0x1, 0x8, 0x8000, 0x2, 0xfffffffffffffffb, 0xa, 0x5578, 0x2}, 0xe8a) sendmsg$auto_IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$auto_NETDEV_CMD_NAPI_GET(0xffffffffffffffff, 0x0, 0x40800) 2.136401341s ago: executing program 1 (id=2185): open(&(0x7f0000000100)='./file0\x00', 0x201c2, 0x10e) socket(0xa, 0x1, 0x1) bpf$auto(0x6, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0xfff, 0x5, 0x10, 0x0) socket(0x15, 0x5, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) socket(0xa, 0x2, 0x88) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_4={0x1e, 0x4, 0xffff, r0}, 0x6f4) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x6, 0xfffffffb) pselect6$auto(0xffffffff, &(0x7f00000000c0)={[0x2, 0xfff, 0x6, 0xbda3, 0x0, 0x9, 0x5, 0xc7, 0x5, 0x400, 0x7, 0x3, 0x2, 0x7fffffff, 0x87d9, 0xa]}, &(0x7f0000000180)={[0x182, 0x9bbb, 0x0, 0x3, 0x58, 0xb5, 0x8, 0x400, 0x6, 0x4, 0x7ff, 0xa5, 0x2, 0x7de1, 0xed1b, 0x8c5]}, &(0x7f0000000200)={[0x8001, 0x0, 0x36d7, 0x39, 0x0, 0x7ff, 0x8, 0x7fffffff, 0x6, 0xe51d, 0x401, 0xffff, 0x95, 0x39d9eb, 0x8, 0x9]}, &(0x7f0000000280)={0xa}, 0x0) flock$auto(0x6, 0x1) keyctl$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5092, 0x2) mknod$auto(0x0, 0xc9, 0xc8) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) madvise$auto(0x0, 0xffffffffffff0004, 0x19) io_uring_setup$auto(0x5, 0x0) ioctl$auto_PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000000)=0x8) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) 1.585276099s ago: executing program 1 (id=2186): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) timerfd_create$auto(0x0, 0x0) socket(0x2, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x73) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x7c3142, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto(r0, 0x800455cc, 0x553) 1.468515174s ago: executing program 3 (id=2187): mlockall$auto(0x7) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x15, 0x1000, 0x47, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x3]}, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) tee$auto(0x0, 0x5, 0xfffffffffffffff1, 0x4) personality$auto(0x4) socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1, 0x0, 0x0) socket(0x23, 0x2, 0x0) sendto$auto(0x4, 0x0, 0x8000, 0x0, &(0x7f0000000100), 0x80) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRESDEC], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0) ioperm$auto(0x1, 0x5, 0x14c) shmctl$auto(0x0, 0xf, &(0x7f0000000080)={{0x7, 0xee00, 0x0, 0x4, 0x2, 0x800, 0x6}, 0x2, 0xd, 0x0, 0x2, @inferred, @inferred, 0x4, 0x0, 0x0, 0x0}) dup$auto(0x1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) semctl$auto(0x3, 0x8ae55, 0x13, 0x21) seccomp$auto(0x1, 0x0, &(0x7f0000000040)) 1.397602191s ago: executing program 1 (id=2188): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x3, 0x2) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) openat$auto_vrr_range_fops_(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/dri/vkms/Virtual-1/vrr_range\x00', 0x40, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000040)='!\x00', 0x1ff) bpf$auto(0x18, &(0x7f0000000040)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x5, 0x8, 0xffffffffffffffff, @relative_id=0x3, 0x41b5c1ff}, 0x92) r0 = socket(0x10, 0x2, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/adsp1\x00', 0xae9e87e1d7690a40, 0x0) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0x81) sendmmsg$auto(r0, &(0x7f0000000840)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)="eea9e96769e582f241b50bd9f3fa6e154f41f9ced5506cad81ceabf145907859a71e650c9071bbc2298e642abf9c1bb6ba63666ffa4215b740a438a886ece144243af04d6d0dc91f25c2f22b0321bd48e2264f92780ed30a0da359773c044352df4a676b84076241e368342ae5b6359ea7c92a2c83", 0xfc2}, 0x2, &(0x7f0000000880)="10714d59a19b990000000000000004000000000000000000004e3677e14e7c9fe32ebc96944fc19c65b212778871f2afe5348ca7fc56b17d9122b98d41238bdfad5829ff15c23c55236f1f9b", 0x2, 0xa505}, 0x400}, 0x80000001, 0x8) setitimer$auto(0x1, 0x0, &(0x7f0000000040)={{0x5, 0x5}, {0x9, 0x8}}) mmap$auto(0x8000, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdf3) syz_genetlink_get_family_id$auto_ncsi(0x0, r1) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000180)={{@inferred, 0x3, 0x401, 0x1, "0ad632f09755a78eeb3ecc74108a267ff21760852f1a528ede7fd83a8c162bd42ea3a65ede031632ffc5cb2e"}, 0x1, @integer64=@value_ptr=0x0, "340cbdac1d1b84173227e354cd54858d0baf4944257edc522e9253d9b4d346ad51643d61fb4c6ecb456e630953f93f5956f33dab7e8e14ea367fb86dff3c7edd79efe13979b3ddd19c5af16f0ee0066e16ca11dd0ec299cc1def69f385893f7aae0488a6b05bc8d8f207c49befdeeafdf1c55b04507d5637cddf7dc1d86765af"}) r2 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) read$auto_snd_ctl_f_ops_control(r2, &(0x7f0000001a80)=""/4096, 0xfffffea1) 1.179247191s ago: executing program 0 (id=2189): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mlock$auto(0xfbe8, 0x4) personality$auto(0xfffffffc) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x6, &(0x7f00000000c0)={0xfffffffffffffffc, 0x6c}, 0x2, 0x0, 0x9, 0xf}, 0x7}, 0xfff, 0x200, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm1c/sub2/xrun_injection\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0x3f00) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb0, 0xd, 0x300000000000) name_to_handle_at$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x202) close_range$auto(0x2, 0x8, 0x0) mprotect$auto(0x10000000000, 0x8, 0x400006) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/fs/ocfs2/dlm_recover_callback_support\x00', 0x880080, 0x0) sendmmsg$auto(r0, &(0x7f0000000280)={{&(0x7f0000000140)="40675c1589acc0a74673e4b64b0d4c7f20ad95e936ed1e545b16ec5362674e08313d4cfb0c3725a723066a31cbb2367cec5871ce36b45c926e94642051963a6c32dec3", 0x0, &(0x7f0000000200)={0x0, 0x6}, 0x9, &(0x7f0000000240)="0e1aa0d7e76ec3a3794fd7ea82de5eb776b68b58e62b08eb45d09f475800d3b5e6935e", 0x80000001, 0xb8b7}, 0x1}, 0x81, 0x6) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002c00)=""/181, 0xb5) msgget$auto(0x1, 0x200) setfsuid$auto(0x0) rt_sigqueueinfo$auto(0x0, 0x400, 0x0) 1.068256904s ago: executing program 3 (id=2190): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000040)=""/142, 0x8e) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) mmap$auto(0xc, 0x200006, 0x1, 0x11, 0x602, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NETDEV_CMD_DEV_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x24040050) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x40000a, 0xdf, 0x12, 0xa, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) 759.236775ms ago: executing program 0 (id=2191): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mlock$auto(0xfbe8, 0x4) personality$auto(0xfffffffc) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x6, &(0x7f00000000c0)={0xfffffffffffffffc, 0x6c}, 0x2, 0x0, 0x9, 0xf}, 0x7}, 0xfff, 0x200, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm1c/sub2/xrun_injection\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0x3f00) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb0, 0xd, 0x300000000000) name_to_handle_at$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x202) close_range$auto(0x2, 0x8, 0x0) mprotect$auto(0x10000000000, 0x8, 0x400006) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/fs/ocfs2/dlm_recover_callback_support\x00', 0x880080, 0x0) sendmmsg$auto(r0, &(0x7f0000000280)={{&(0x7f0000000140)="40675c1589acc0a74673e4b64b0d4c7f20ad95e936ed1e545b16ec5362674e08313d4cfb0c3725a723066a31cbb2367cec5871ce36b45c926e94642051963a6c32dec3", 0x0, &(0x7f0000000200)={0x0, 0x6}, 0x9, &(0x7f0000000240)="0e1aa0d7e76ec3a3794fd7ea82de5eb776b68b58e62b08eb45d09f475800d3b5e6935e", 0x80000001, 0xb8b7}, 0x1}, 0x81, 0x6) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002c00)=""/181, 0xb5) msgget$auto(0x1, 0x200) setfsuid$auto(0x0) rt_sigqueueinfo$auto(0x0, 0x400, 0x0) 526.444235ms ago: executing program 2 (id=2192): mmap$auto(0x0, 0x20009, 0xda, 0xeb1, 0x405, 0x0) sysfs$auto(0x2, 0x100000000000037, 0x0) socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x9, 0xffffffffffffffff, [0x100, 0x9, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0xfc, 0x6, 0x0, 0x0, 0xf89, 0x9, 0x837, 0x8}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x0) kexec_load$auto(0xff, 0x2, 0x0, 0x4) r1 = socket(0x10, 0x2, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) mmap$auto(0x6, 0x2020009, 0x7, 0xf8, 0xffffffffffbffffa, 0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) bpf$auto(0x4, &(0x7f0000000480)=@test={0xffffffffffffffff, 0x3f0360a9, 0x52, 0xdbfd, 0x7, 0x0, 0x1, 0x1, 0x8, 0x8000, 0x2, 0xfffffffffffffffb, 0xa, 0x5578, 0x2}, 0xe8a) sendmsg$auto_IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$auto_NETDEV_CMD_NAPI_GET(0xffffffffffffffff, 0x0, 0x40800) 0s ago: executing program 0 (id=2193): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) mmap$auto(0x7, 0x8, 0x7, 0x18, 0x42c8b44c, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x40, 0x2, 0x9, 0x111, 0x9, 0x7) open(0x0, 0x22240, 0x16c) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003ec, 0x14) madvise$auto(0x0, 0xffffffffffff0005, 0x19) msync$auto(0x0, 0x2000000005, 0x6) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, 0x0, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250af4"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8) write$auto(r1, 0x0, 0xeffd) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.89' (ED25519) to the list of known hosts. [ 65.689973][ T5814] cgroup: Unknown subsys name 'net' [ 65.806902][ T5814] cgroup: Unknown subsys name 'cpuset' [ 65.815147][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.118599][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.799993][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.808937][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.818709][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.827046][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.835344][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.843011][ T5828] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.851430][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.851720][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.880934][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.884217][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.897821][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.906460][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.914668][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.922457][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.930334][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.937647][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.944069][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.952584][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.953466][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.959893][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.967894][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.974179][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.981195][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.995226][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.183721][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 69.299533][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.306910][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.315890][ T5823] bridge_slave_0: entered allmulticast mode [ 69.322580][ T5823] bridge_slave_0: entered promiscuous mode [ 69.331587][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.339302][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.346662][ T5823] bridge_slave_1: entered allmulticast mode [ 69.353252][ T5823] bridge_slave_1: entered promiscuous mode [ 69.407918][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.423220][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.488117][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 69.538547][ T5823] team0: Port device team_slave_0 added [ 69.547193][ T5823] team0: Port device team_slave_1 added [ 69.583109][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.590133][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.616081][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.649636][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 69.665213][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.672182][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.698442][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.757292][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.764740][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.771891][ T5825] bridge_slave_0: entered allmulticast mode [ 69.779835][ T5825] bridge_slave_0: entered promiscuous mode [ 69.786778][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 69.807239][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.814692][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.821919][ T5825] bridge_slave_1: entered allmulticast mode [ 69.828824][ T5825] bridge_slave_1: entered promiscuous mode [ 69.876812][ T5823] hsr_slave_0: entered promiscuous mode [ 69.883190][ T5823] hsr_slave_1: entered promiscuous mode [ 69.916489][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.928104][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.006058][ T5825] team0: Port device team_slave_0 added [ 70.012120][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.019481][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.026749][ T5824] bridge_slave_0: entered allmulticast mode [ 70.033286][ T5824] bridge_slave_0: entered promiscuous mode [ 70.054754][ T5825] team0: Port device team_slave_1 added [ 70.060720][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.067926][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.075213][ T5824] bridge_slave_1: entered allmulticast mode [ 70.081777][ T5824] bridge_slave_1: entered promiscuous mode [ 70.122463][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.130440][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.138844][ T5832] bridge_slave_0: entered allmulticast mode [ 70.146026][ T5832] bridge_slave_0: entered promiscuous mode [ 70.168672][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.180952][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.200228][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.207787][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.215609][ T5832] bridge_slave_1: entered allmulticast mode [ 70.222172][ T5832] bridge_slave_1: entered promiscuous mode [ 70.232554][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.239709][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.265752][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.319902][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.327652][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.354472][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.369886][ T5824] team0: Port device team_slave_0 added [ 70.380353][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.392028][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.414676][ T5824] team0: Port device team_slave_1 added [ 70.472199][ T5832] team0: Port device team_slave_0 added [ 70.482394][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.489577][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.516232][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.539107][ T5825] hsr_slave_0: entered promiscuous mode [ 70.545398][ T5825] hsr_slave_1: entered promiscuous mode [ 70.551432][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.559312][ T5825] Cannot create hsr debugfs directory [ 70.566247][ T5832] team0: Port device team_slave_1 added [ 70.577540][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.585106][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.611552][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.664193][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.671174][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.699103][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.711559][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.718640][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.744814][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.804896][ T5824] hsr_slave_0: entered promiscuous mode [ 70.811155][ T5824] hsr_slave_1: entered promiscuous mode [ 70.818421][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.826489][ T5824] Cannot create hsr debugfs directory [ 70.878781][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.906269][ T5832] hsr_slave_0: entered promiscuous mode [ 70.912425][ T5832] hsr_slave_1: entered promiscuous mode [ 70.918586][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.927022][ T5832] Cannot create hsr debugfs directory [ 70.927061][ T5836] Bluetooth: hci0: command tx timeout [ 70.943912][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.972120][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.000435][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.084944][ T5836] Bluetooth: hci3: command tx timeout [ 71.084952][ T5827] Bluetooth: hci2: command tx timeout [ 71.085243][ T5827] Bluetooth: hci1: command tx timeout [ 71.148442][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.157966][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.180518][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.191083][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.291578][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.302890][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.322356][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.357216][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.388087][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.398215][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.408972][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.430677][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.437714][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.498189][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.517403][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.525173][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.542593][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.549763][ T1051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.585166][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.640233][ T5823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.654706][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.654803][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.670721][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.698915][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.733124][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.740276][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.778087][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.785303][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.811059][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.830840][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.870689][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.908534][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.915698][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.925816][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.932925][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.977729][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.001069][ T5832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.013302][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.041465][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.048621][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.087422][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.121361][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.128533][ T1051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.259731][ T5823] veth0_vlan: entered promiscuous mode [ 72.275036][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.319830][ T5823] veth1_vlan: entered promiscuous mode [ 72.338463][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.405979][ T5825] veth0_vlan: entered promiscuous mode [ 72.417467][ T5823] veth0_macvtap: entered promiscuous mode [ 72.437190][ T5823] veth1_macvtap: entered promiscuous mode [ 72.445896][ T5825] veth1_vlan: entered promiscuous mode [ 72.499960][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.515568][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.526423][ T5823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.536713][ T5823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.545665][ T5823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.554587][ T5823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.572703][ T5825] veth0_macvtap: entered promiscuous mode [ 72.599702][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.609801][ T5825] veth1_macvtap: entered promiscuous mode [ 72.618655][ T5832] veth0_vlan: entered promiscuous mode [ 72.661891][ T5832] veth1_vlan: entered promiscuous mode [ 72.677693][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.692236][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.705458][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.742466][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.754152][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.767583][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.781323][ T5825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.791041][ T5825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.800200][ T5825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.809152][ T5825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.837331][ T5824] veth0_vlan: entered promiscuous mode [ 72.881239][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.890037][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.910266][ T5824] veth1_vlan: entered promiscuous mode [ 72.931610][ T5832] veth0_macvtap: entered promiscuous mode [ 72.966288][ T5832] veth1_macvtap: entered promiscuous mode [ 72.990408][ T1051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.997221][ T5824] veth0_macvtap: entered promiscuous mode [ 72.998592][ T1051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.011591][ T5827] Bluetooth: hci0: command tx timeout [ 73.029662][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.030672][ T5824] veth1_macvtap: entered promiscuous mode [ 73.061074][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.071834][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.081914][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.082193][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.100606][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.112675][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.127890][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.142776][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.152683][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.164421][ T5827] Bluetooth: hci3: command tx timeout [ 73.165289][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.169837][ T5827] Bluetooth: hci2: command tx timeout [ 73.179784][ T5831] Bluetooth: hci1: command tx timeout [ 73.185950][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.201805][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.216626][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.231806][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.242881][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.251954][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.253369][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.278617][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.289834][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.307069][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.319006][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.329937][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.341230][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.351148][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.361742][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.372561][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.388964][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.398679][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.420517][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.445467][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.460801][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.469164][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.490296][ T5824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.503082][ T5824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.522216][ T5824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.531384][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.774260][ T5891] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.801859][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.843970][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.892520][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.901972][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.974910][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.982774][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.057381][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.084938][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.958420][ T5922] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11'. [ 75.084253][ T5836] Bluetooth: hci0: command tx timeout [ 75.149049][ T5930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14'. [ 75.226303][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 75.237986][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 75.246889][ T5836] Bluetooth: hci1: command tx timeout [ 75.254142][ T5836] Bluetooth: hci2: command tx timeout [ 75.254151][ T5831] Bluetooth: hci3: command tx timeout [ 75.482066][ T5936] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[5936] [ 75.706735][ T5935] Dead loop on virtual device ip6_vti0, fix it urgently! [ 76.133872][ T5957] QAT: Stopping all acceleration devices. [ 76.597536][ T29] audit: type=1806 audit(4294967296.980:2): xattr="." res=0 [ 77.173770][ T5831] Bluetooth: hci0: command tx timeout [ 77.326871][ T5831] Bluetooth: hci2: command tx timeout [ 77.326889][ T5836] Bluetooth: hci3: command tx timeout [ 77.326923][ T5836] Bluetooth: hci1: command tx timeout [ 77.581308][ T5987] delete_channel: no stack [ 77.990516][ T5997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.39'. [ 78.793939][ T6014] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.517491][ T6035] HfR: entered promiscuous mode [ 80.599086][ T6041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.48'. [ 80.802864][ T6041] HfR: left promiscuous mode [ 81.864690][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.53'. [ 81.947139][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.53'. [ 84.421782][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'. [ 87.064026][ T976] cfg80211: failed to load regulatory.db [ 87.635209][ T6091] HSR: entered promiscuous mode [ 87.674617][ T6089] mtrr: base(0x100000) is not aligned on a size(0x2e001800000) boundary [ 90.078708][ T6122] Zero length message leads to an empty skb [ 93.032169][ T6165] Process accounting resumed [ 93.388001][ T6172] lo: entered allmulticast mode [ 93.486485][ T6176] lo: left allmulticast mode [ 94.371143][ T6185] netlink: 28 bytes leftover after parsing attributes in process `syz.1.92'. [ 94.715007][ T6193] mmap: syz.0.93 (6193) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 95.364526][ T6199] lo: entered allmulticast mode [ 95.399086][ T6199] netlink: 28 bytes leftover after parsing attributes in process `syz.2.96'. [ 95.450050][ T6202] netlink: 28 bytes leftover after parsing attributes in process `syz.3.97'. [ 95.650788][ T6202] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.753542][ T6202] bridge_slave_0 (unregistering): left allmulticast mode [ 95.770092][ T6202] bridge_slave_0 (unregistering): left promiscuous mode [ 95.794104][ T6202] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.920667][ T6198] lo: left allmulticast mode [ 97.300518][ T6221] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 97.320081][ T6221] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 98.654938][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.114'. [ 102.626119][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.135'. [ 102.632031][ T6317] Dead loop on virtual device ip6_vti0, fix it urgently! [ 102.642794][ T6317] Dead loop on virtual device ip6_vti0, fix it urgently! [ 102.654833][ T6317] Dead loop on virtual device ip6_vti0, fix it urgently! [ 102.670832][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.135'. [ 102.977408][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.136'. [ 103.553489][ T6312] kexec: Could not allocate control_code_buffer [ 105.048875][ T6361] netlink: 252 bytes leftover after parsing attributes in process `syz.0.147'. [ 105.077738][ T6361] netlink: 252 bytes leftover after parsing attributes in process `syz.0.147'. [ 105.561984][ T6370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.150'. [ 105.614642][ T6370] geneve1: entered allmulticast mode [ 106.328040][ T6386] netlink: 342 bytes leftover after parsing attributes in process `syz.2.154'. [ 106.928658][ T6403] lo: entered allmulticast mode [ 107.006690][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'. [ 107.016448][ T6406] lo: left allmulticast mode [ 107.127638][ T6409] syz.2.161 uses obsolete (PF_INET,SOCK_PACKET) [ 108.151982][ T6421] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 108.207855][ T6421] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 109.460884][ T6440] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 109.501758][ T6443] block nbd0: not configured, cannot reconfigure [ 109.510401][ T6440] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 109.782267][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'. [ 110.285960][ T6459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.175'. [ 110.344634][ T6459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.175'. [ 111.307879][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.616633][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.700467][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.700759][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 111.718423][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.727103][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.742218][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.754704][ T5827] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 111.762086][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.858776][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 111.903809][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.205848][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.271413][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 112.318594][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 112.542347][ T6481] chnl_net:caif_netlink_parms(): no params data found [ 112.833229][ T35] bridge_slave_1: left allmulticast mode [ 112.844490][ T35] bridge_slave_1: left promiscuous mode [ 112.851723][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.075509][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.188'. [ 113.711310][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.729073][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.746552][ T35] bond0 (unregistering): Released all slaves [ 113.767444][ T6481] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.790482][ T6481] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.809718][ T5827] Bluetooth: hci3: command tx timeout [ 113.829549][ T6481] bridge_slave_0: entered allmulticast mode [ 113.840217][ T6481] bridge_slave_0: entered promiscuous mode [ 113.858969][ T35] HSR: left promiscuous mode [ 113.876946][ T6481] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.884753][ T6481] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.892178][ T6481] bridge_slave_1: entered allmulticast mode [ 113.899892][ T6481] bridge_slave_1: entered promiscuous mode [ 114.208253][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'. [ 114.234879][ T6481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.279359][ T6481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.411341][ T6516] could not allocate digest TFM handle [ 114.478767][ T6481] team0: Port device team_slave_0 added [ 114.573572][ T35] hsr_slave_0: left promiscuous mode [ 114.601679][ T35] hsr_slave_1: left promiscuous mode [ 114.620270][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.644349][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.646096][ T6537] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.706469][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.734060][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.845285][ T35] veth1_macvtap: left promiscuous mode [ 114.854543][ T35] veth0_macvtap: left promiscuous mode [ 114.860184][ T35] veth1_vlan: left promiscuous mode [ 114.879956][ T35] veth0_vlan: left promiscuous mode [ 115.896156][ T5827] Bluetooth: hci3: command tx timeout [ 116.284791][ T35] team0 (unregistering): Port device team_slave_1 removed [ 116.404912][ T35] team0 (unregistering): Port device team_slave_0 removed [ 117.857508][ T6481] team0: Port device team_slave_1 added [ 117.963790][ T5827] Bluetooth: hci3: command tx timeout [ 118.114581][ T6481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.121582][ T6481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.182715][ T6481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.226588][ T6481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.233585][ T6481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.293701][ T6481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.568694][ T6481] hsr_slave_0: entered promiscuous mode [ 118.650160][ T6481] hsr_slave_1: entered promiscuous mode [ 118.713821][ T6481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.721444][ T6481] Cannot create hsr debugfs directory [ 120.050676][ T5827] Bluetooth: hci3: command tx timeout [ 120.200229][ T6481] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 120.236361][ T6481] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 120.359823][ T6481] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 120.401584][ T6481] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 120.680544][ T6481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.743863][ T6481] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.758042][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.765208][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.799625][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.807668][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.964482][ T6481] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.579158][ T6639] netlink: 28 bytes leftover after parsing attributes in process `syz.2.215'. [ 122.454287][ T6481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.549232][ T6481] veth0_vlan: entered promiscuous mode [ 122.585291][ T6481] veth1_vlan: entered promiscuous mode [ 122.643946][ T6481] veth0_macvtap: entered promiscuous mode [ 122.679510][ T6481] veth1_macvtap: entered promiscuous mode [ 122.721769][ T6481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.732386][ T6481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.742344][ T6481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.752901][ T6481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.762813][ T6481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.773828][ T6481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.785300][ T6481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.800252][ T6481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.811019][ T6481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.821109][ T6481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.831907][ T6481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.842080][ T6481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.852977][ T6481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.865309][ T6481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.877100][ T6481] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.885916][ T6481] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.894758][ T6481] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.903476][ T6481] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.065978][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.098214][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.168709][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.191764][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.669653][ T6681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.219'. [ 123.726841][ T6681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.219'. [ 126.762236][ T6765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.232'. [ 127.382202][ T6774] netlink: 28 bytes leftover after parsing attributes in process `syz.3.235'. [ 128.492780][ T6791] kernel read not supported for file /#)-\&[} (pid: 6791 comm: syz.2.240) [ 128.536970][ T29] audit: type=1800 audit(4294967344.930:3): pid=6791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.240" name="#)-\&[}" dev="mqueue" ino=11725 res=0 errno=0 [ 128.846873][ T6800] HSR: entered promiscuous mode [ 128.950359][ T6800] delete_channel: no stack [ 129.598274][ T6819] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 129.704924][ T6819] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 133.087960][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.099246][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.924800][ T6863] process 'syz.0.263' launched ':,' with NULL argv: empty string added [ 139.839425][ T6944] netlink: 330 bytes leftover after parsing attributes in process `syz.0.286'. [ 139.871337][ T6944] mac80211_hwsim hwsim7 ›: renamed from wlan0 (while UP) [ 142.798909][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.299'. [ 144.206731][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.304'. [ 146.863970][ T7054] ptrace attach of "./syz-executor exec"[5823] was attempted by "./syz-executor exec"[7054] [ 150.357889][ T7097] Dead loop on virtual device ip6_vti0, fix it urgently! [ 150.374210][ T7097] Dead loop on virtual device ip6_vti0, fix it urgently! [ 150.419363][ T7097] Dead loop on virtual device ip6_vti0, fix it urgently! [ 150.454080][ T7097] Dead loop on virtual device ip6_vti0, fix it urgently! [ 150.464285][ T7097] Dead loop on virtual device ip6_vti0, fix it urgently! [ 150.481172][ T7097] Dead loop on virtual device ip6_vti0, fix it urgently! [ 152.038853][ T7127] netlink: 28 bytes leftover after parsing attributes in process `syz.1.347'. [ 152.237350][ T7127] bond0: (slave bond_slave_1): Releasing backup interface [ 152.429988][ T7130] HfR: entered promiscuous mode [ 152.459385][ T7130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.348'. [ 152.510318][ T7130] HfR: left promiscuous mode [ 152.735726][ T7138] capability: warning: `syz.1.351' uses 32-bit capabilities (legacy support in use) [ 153.121793][ T7147] serio: Serial port ptm0 [ 155.465678][ T7160] Invalid ELF header magic: != ELF [ 157.184181][ T7223] binder: 7221:7223 ioctl 40044900 800000000000003 returned -22 [ 158.516942][ T7246] netlink: 28 bytes leftover after parsing attributes in process `syz.0.384'. [ 159.868218][ T7279] HfR: entered promiscuous mode [ 160.340017][ T7297] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 160.356109][ T7297] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 160.682258][ T7307] netlink: 326 bytes leftover after parsing attributes in process `syz.3.405'. [ 160.711367][ T7307] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.718942][ T7307] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.336983][ T7320] netlink: 28 bytes leftover after parsing attributes in process `syz.0.410'. [ 161.868633][ T7328] ubi0: attaching mtd0 [ 161.915299][ T7328] ubi0: scanning is finished [ 161.919984][ T7328] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 162.112387][ T7328] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 162.190261][ T7338] ======================================================= [ 162.190261][ T7338] WARNING: The mand mount option has been deprecated and [ 162.190261][ T7338] and is ignored by this kernel. Remove the mand [ 162.190261][ T7338] option from the mount to silence this warning. [ 162.190261][ T7338] ======================================================= [ 162.492778][ T7342] Process accounting resumed [ 162.552778][ T7343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.417'. [ 162.686588][ T7340] netlink: 16 bytes leftover after parsing attributes in process `syz.1.417'. [ 162.838443][ T7351] netlink: 'syz.3.420': attribute type 2 has an invalid length. [ 163.130650][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.425'. [ 164.513098][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.435'. [ 164.771356][ T7396] openvswitch: HfR: Dropping previously announced user features [ 164.854281][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.436'. [ 164.863605][ T7396] HfR: left promiscuous mode [ 167.819009][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.453'. [ 168.394360][ T7463] netlink: 28 bytes leftover after parsing attributes in process `syz.2.457'. [ 168.726125][ T7463] bond0: (slave bond_slave_1): Releasing backup interface [ 169.897365][ T7489] tipc: Started in network mode [ 169.902553][ T7489] tipc: Node identity ffffffff, cluster identity 4711 [ 169.913470][ T7489] tipc: Node number set to 4294967295 [ 170.419957][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.467'. [ 170.763767][ T7501] ima: policy update failed [ 170.783868][ T29] audit: type=1802 audit(4295163995.166:4): pid=7501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.468" res=0 errno=0 [ 171.274066][ T7517] bridge0: port 3(macvlan0) entered blocking state [ 171.291060][ T7517] bridge0: port 3(macvlan0) entered disabled state [ 171.311479][ T7517] macvlan0: entered allmulticast mode [ 171.321407][ T7517] veth1_vlan: entered allmulticast mode [ 171.335327][ T7517] macvlan0: entered promiscuous mode [ 171.356278][ T7517] bridge0: port 3(macvlan0) entered blocking state [ 171.362957][ T7517] bridge0: port 3(macvlan0) entered forwarding state [ 171.605755][ T7522] netlink: 28 bytes leftover after parsing attributes in process `syz.0.473'. [ 173.184624][ T7550] random: crng reseeded on system resumption [ 175.901345][ T7595] random: crng reseeded on system resumption [ 178.188084][ T7625] can0: slcan on ptm0. [ 178.316395][ T7624] can0 (unregistered): slcan off ptm0. [ 178.592494][ T7631] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 178.607979][ T7631] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 179.812022][ T7657] blktrace: Concurrent blktraces are not allowed on sg0 [ 180.506813][ T29] audit: type=1800 audit(4294967298.840:5): pid=7673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.516" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 180.816770][ T7676] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 180.834002][ T7676] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 181.607576][ T7697] blktrace: Concurrent blktraces are not allowed on sg0 [ 187.190894][ T7734] Invalid ELF header magic: != ELF [ 187.481621][ T7753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.538'. [ 187.998982][ T7753] team0: Port device team_slave_0 removed [ 189.281105][ T7778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.546'. [ 190.184256][ T7784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.548'. [ 190.260441][ T7784] team0: Port device team_slave_1 removed [ 191.442033][ T7795] ptrace attach of "./syz-executor exec"[5824] was attempted by "./syz-executor exec"[7795] [ 191.486989][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 191.488081][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 191.499182][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 191.556980][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.552'. [ 192.116484][ T7788] Invalid ELF header magic: != ELF [ 192.654164][ T7804] usb usb15: usbfs: interface 0 claimed by hub while 'syz.3.551' sets config #2099205 [ 193.254459][ T7829] ubi0: attaching mtd0 [ 193.274859][ T7829] ubi0: scanning is finished [ 193.279543][ T7829] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 193.590621][ T7829] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 194.527767][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.535298][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.856708][ T7906] serio: Serial port ptm0 [ 201.100237][ T7912] netlink: 28 bytes leftover after parsing attributes in process `syz.2.583'. [ 201.273376][ T7912] team0: Port device team_slave_0 removed [ 202.063748][ T7926] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 202.120503][ T7926] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 202.177870][ T7920] ptrace attach of "./syz-executor exec"[5825] was attempted by "./syz-executor exec"[7920] [ 202.273858][ T7926] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 202.295267][ T7926] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 202.349143][ T7926] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 202.355525][ T7926] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 202.374609][ T7926] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 202.380673][ T7926] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 202.478379][ T7926] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 203.310328][ T7922] kexec: Could not allocate control_code_buffer [ 204.005074][ T7952] netlink: 28 bytes leftover after parsing attributes in process `syz.3.596'. [ 204.123937][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 204.282317][ T7952] bond0: (slave bond_slave_1): Releasing backup interface [ 204.293979][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 204.363901][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 204.443740][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 204.857887][ T7961] netlink: 28 bytes leftover after parsing attributes in process `syz.3.598'. [ 205.356012][ T7961] team0: Port device team_slave_0 removed [ 206.204004][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 206.366778][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 206.425454][ T7972] ubi0: attaching mtd0 [ 206.431303][ T7972] ubi0: scanning is finished [ 206.443829][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 206.476121][ T7972] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 206.533858][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 206.713261][ T7972] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 208.613902][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 213.906199][ T8064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.634'. [ 216.951906][ T8093] HfR: entered promiscuous mode [ 217.563720][ T8109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.640'. [ 219.057840][ T8108] kexec: Could not allocate control_code_buffer [ 219.059878][ T8135] netlink: 'syz.2.652': attribute type 2 has an invalid length. [ 219.083567][ T8136] netlink: 28 bytes leftover after parsing attributes in process `syz.3.653'. [ 219.719277][ T8142] netlink: 28 bytes leftover after parsing attributes in process `syz.0.662'. [ 220.487866][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.659'. [ 220.510303][ T8154] netlink: 16 bytes leftover after parsing attributes in process `syz.2.659'. [ 221.270696][ T8174] can0: slcan on ptm0. [ 221.343834][ T8173] can0 (unregistered): slcan off ptm0. [ 222.191724][ T8164] kexec: Could not allocate control_code_buffer [ 222.653807][ T8224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.672'. [ 222.727414][ T8222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.672'. [ 224.074705][ T8241] netlink: 28 bytes leftover after parsing attributes in process `syz.3.677'. [ 224.994684][ T8258] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 225.021171][ T8258] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 225.772662][ T8265] netlink: 28 bytes leftover after parsing attributes in process `syz.0.684'. [ 225.875740][ T8265] vcan0: entered promiscuous mode [ 226.171409][ T8272] binder: 8271:8272 ioctl 40044900 800000000000003 returned -22 [ 227.874415][ T8294] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 227.923025][ T8294] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 228.011110][ T8309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.705'. [ 229.592453][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.701'. [ 232.378628][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.721'. [ 233.209289][ T8407] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 233.219137][ T8407] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 236.558555][ T8453] kexec: Could not allocate control_code_buffer [ 237.879721][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.754'. [ 238.563604][ T8505] Process accounting resumed [ 239.652386][ T8514] kexec: Could not allocate control_code_buffer [ 242.171742][ T8586] netlink: 28 bytes leftover after parsing attributes in process `syz.3.780'. [ 242.352288][ T8587] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 242.362083][ T8587] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 242.678258][ T8571] kexec: Could not allocate control_code_buffer [ 243.594598][ T8613] netlink: 28 bytes leftover after parsing attributes in process `syz.2.788'. [ 244.936755][ T8645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.800'. [ 245.022728][ T8616] kexec: Could not allocate control_code_buffer [ 245.112954][ T8638] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 245.128477][ T8638] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 247.686490][ T8665] kexec: Could not allocate control_code_buffer [ 248.436627][ T8697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.813'. [ 248.969573][ T8713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.820'. [ 248.983832][ T8713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.039551][ T8713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.077749][ T8714] netlink: 'syz.2.820': attribute type 46 has an invalid length. [ 250.042270][ T8732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.826'. [ 251.056239][ T8742] openvswitch: HfR: Dropping previously announced user features [ 251.077447][ T8742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.830'. [ 251.091953][ T8742] HfR: left promiscuous mode [ 251.591169][ T8747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.831'. [ 251.614017][ T8747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.670642][ T8748] netlink: 'syz.1.831': attribute type 46 has an invalid length. [ 251.688122][ T8747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.589012][ T8762] Process accounting resumed [ 253.161362][ T8778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.840'. [ 253.174110][ T8778] bridge_slave_1: left allmulticast mode [ 253.180083][ T8778] bridge_slave_1: left promiscuous mode [ 253.186569][ T8778] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.230059][ T8778] bridge_slave_0: left allmulticast mode [ 253.235875][ T8778] bridge_slave_0: left promiscuous mode [ 253.241638][ T8778] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.831191][ T8787] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 253.850667][ T8787] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 254.167679][ T8773] Invalid ELF header magic: != ELF [ 255.429748][ T8805] Process accounting resumed [ 255.966841][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.973208][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.802649][ T8823] kexec: Could not allocate control_code_buffer [ 256.889315][ T8842] HfR: entered promiscuous mode [ 256.905743][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.856'. [ 256.923930][ T8842] HfR: left promiscuous mode [ 259.784390][ T8885] netlink: 28 bytes leftover after parsing attributes in process `syz.0.869'. [ 260.199851][ T8873] kexec: Could not allocate control_code_buffer [ 260.384817][ T8900] HfR: entered promiscuous mode [ 260.419935][ T8900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.871'. [ 260.429246][ T8900] HfR: left promiscuous mode [ 261.795509][ T8925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.879'. [ 263.795199][ T8949] Process accounting resumed [ 267.075170][ T9019] netlink: 28 bytes leftover after parsing attributes in process `syz.1.906'. [ 268.577338][ T9044] Process accounting paused [ 268.605894][ T9022] kexec: Could not allocate control_code_buffer [ 269.380328][ T9065] netlink: 338 bytes leftover after parsing attributes in process `syz.3.922'. [ 269.502800][ T9064] Process accounting resumed [ 269.528497][ T9064] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9064 comm: syz.3.922) [ 270.402845][ T9030] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9030 comm: syz.3.910) [ 270.562953][ T9074] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9074 comm: syz.3.923) [ 270.677810][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.926'. [ 271.404448][ T9113] netlink: 28 bytes leftover after parsing attributes in process `syz.2.934'. [ 271.592813][ T9090] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9090 comm: syz.3.929) [ 272.917133][ T9118] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9118 comm: syz.3.936) [ 273.430344][ T9135] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9135 comm: syz.3.940) [ 273.706424][ T9142] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9142 comm: syz.3.944) [ 275.022227][ T9147] kexec: Could not allocate control_code_buffer [ 275.094902][ T9147] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9147 comm: syz.3.946) [ 275.147882][ T9132] Invalid ELF header magic: != ELF [ 275.403483][ T9166] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9166 comm: syz.3.950) [ 275.578202][ T9168] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9168 comm: syz.3.951) [ 275.614938][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.949'. [ 275.976058][ T9170] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9170 comm: syz.3.952) [ 276.952659][ T9180] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 277.013789][ T9180] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 277.031754][ T9174] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9174 comm: syz.3.954) [ 277.320200][ T9190] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9190 comm: syz.3.958) [ 277.823035][ T9197] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9197 comm: syz.3.960) [ 279.724142][ T9207] kexec: Could not allocate control_code_buffer [ 279.791226][ T9207] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9207 comm: syz.3.964) [ 280.813558][ T9238] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9238 comm: syz.3.971) [ 281.041985][ T9257] HfR: entered promiscuous mode [ 281.108853][ T9257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.976'. [ 281.135446][ T9257] HfR: left promiscuous mode [ 282.303363][ T9262] kexec: Could not allocate control_code_buffer [ 282.369907][ T9262] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9262 comm: syz.3.978) [ 282.695443][ T9272] Process accounting paused [ 282.807632][ T9282] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9282 comm: syz.3.984) [ 283.795478][ T9288] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9288 comm: syz.3.986) [ 285.236784][ T29] audit: type=1804 audit(8277292054.500:6): pid=9315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.994" name="/newroot/sys/kernel/tracing/free_buffer" dev="tracefs" ino=153 res=1 errno=0 [ 285.319512][ T9299] kexec: Could not allocate control_code_buffer [ 285.407389][ T9299] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9299 comm: syz.3.988) [ 285.650935][ T9322] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9322 comm: syz.3.997) [ 285.895114][ T9326] Process accounting paused [ 285.898316][ T9329] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9329 comm: syz.3.999) [ 286.095058][ T9334] can0: slcan on pty48. [ 286.294505][ T9334] can0 (unregistered): slcan off pty48. [ 286.406566][ T9334] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9334 comm: syz.3.1000) [ 286.791088][ T9345] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9345 comm: syz.3.1003) [ 287.168168][ T9352] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9352 comm: syz.3.1005) [ 287.185053][ T9356] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1004'. [ 287.352741][ T9337] kexec: Could not allocate control_code_buffer [ 288.226429][ T9362] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9362 comm: syz.3.1007) [ 289.037324][ T9400] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9400 comm: syz.3.1014) [ 290.087856][ T9415] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9415 comm: syz.3.1017) [ 290.187729][ T9425] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9425 comm: syz.3.1020) [ 291.159037][ T9428] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9428 comm: syz.3.1021) [ 292.571457][ T9446] kexec: Could not allocate control_code_buffer [ 292.654108][ T9446] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9446 comm: syz.3.1027) [ 294.876197][ T9470] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9470 comm: syz.3.1034) [ 296.144120][ T9525] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9525 comm: syz.3.1048) [ 296.284498][ T9514] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9514 comm: syz.3.1048) [ 297.659913][ T9538] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9538 comm: syz.3.1052) [ 298.070348][ T9551] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9551 comm: syz.3.1057) [ 298.973018][ T9553] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9553 comm: syz.3.1058) [ 299.161803][ T9555] Process accounting resumed [ 299.460826][ T9568] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 9568 comm: syz.3.1061) [ 299.765603][ T9559] kexec: Could not allocate control_code_buffer [ 300.189762][ T9572] Process accounting paused [ 302.580804][ T9606] kexec: Could not allocate control_code_buffer [ 303.702711][ T9655] vivid-013: ================= START STATUS ================= [ 303.724833][ T9655] vivid-013: Generate PTS: true [ 303.741529][ T9655] vivid-013: Generate SCR: true [ 303.752157][ T9655] tpg source WxH: 640x360 (Y'CbCr) [ 303.766061][ T9655] tpg field: 1 [ 303.769638][ T9655] tpg crop: 640x360@0x0 [ 303.776399][ T9655] tpg compose: 640x360@0x0 [ 303.776440][ T9655] tpg colorspace: 8 [ 303.776457][ T9655] tpg transfer function: 0/0 [ 303.776472][ T9655] tpg Y'CbCr encoding: 0/0 [ 303.776484][ T9655] tpg quantization: 0/0 [ 303.776497][ T9655] tpg RGB range: 0/2 [ 303.776510][ T9655] vivid-013: ================== END STATUS ================== [ 307.063964][ T9696] kexec: Could not allocate control_code_buffer [ 309.870600][ T9773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1121'. [ 311.139228][ T9769] kexec: Could not allocate control_code_buffer [ 313.264785][ T9803] kexec: Could not allocate control_code_buffer [ 313.335988][ T9803] Process accounting resumed [ 316.378270][ T9826] Process accounting resumed [ 317.413264][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.419793][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.266046][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1147'. [ 320.484073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 321.692295][ T9909] kexec: Could not allocate control_code_buffer [ 322.714391][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'. [ 324.148058][ T9969] kernel read not supported for file /#)-\&[} (pid: 9969 comm: syz.2.1179) [ 324.170476][ T29] audit: type=1800 audit(8277292093.430:7): pid=9969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1179" name="#)-\&[}" dev="mqueue" ino=11725 res=0 errno=0 [ 324.759172][ T9955] kexec: Could not allocate control_code_buffer [ 325.018227][ T9981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1183'. [ 325.034113][ T9981] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 326.445528][ T9990] kexec: Could not allocate control_code_buffer [ 327.418797][T10024] HfR: entered promiscuous mode [ 327.458746][T10024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1193'. [ 327.481266][T10024] HfR: left promiscuous mode [ 328.562459][T10014] kexec: Could not allocate control_code_buffer [ 328.586292][T10038] netlink: 'syz.2.1199': attribute type 15 has an invalid length. [ 328.614210][T10038] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1199'. [ 328.645365][T10038] netlink: 'syz.2.1199': attribute type 15 has an invalid length. [ 328.655702][T10038] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1199'. [ 328.710870][T10040] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1198'. [ 330.296311][T10076] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1210'. [ 330.314522][T10076] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 331.788533][T10108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1218'. [ 332.037352][T10115] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1220'. [ 332.725246][T10105] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1216'. [ 333.621070][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1230'. [ 333.891375][T10125] kexec: Could not allocate control_code_buffer [ 333.908498][T10156] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1232'. [ 333.944000][T10156] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 334.150766][T10163] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 334.173739][T10163] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 334.243369][T10164] Invalid ELF header magic: != ELF [ 334.666125][T10178] Invalid ELF header magic: != ELF [ 336.696402][ T29] audit: type=1804 audit(8277292105.960:8): pid=10211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1245" name="#)-\&[}" dev="mqueue" ino=26862 res=1 errno=0 [ 336.718248][T10211] kernel read not supported for file /#)-\&[} (pid: 10211 comm: syz.1.1245) [ 336.741755][ T29] audit: type=1800 audit(8277292106.000:9): pid=10211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1245" name="#)-\&[}" dev="mqueue" ino=26862 res=0 errno=0 [ 336.788757][ T29] audit: type=1804 audit(8277292106.000:10): pid=10211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1245" name="#)-\&[}" dev="mqueue" ino=26862 res=1 errno=0 [ 336.829432][ T29] audit: type=1804 audit(8277292106.030:11): pid=10211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1245" name="#)-\&[}" dev="mqueue" ino=26862 res=1 errno=0 [ 337.433581][T10195] kexec: Could not allocate control_code_buffer [ 338.620802][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1254'. [ 340.713358][T10262] kexec: Could not allocate control_code_buffer [ 341.926807][T10297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1267'. [ 342.403847][T10306] Invalid ELF header magic: != ELF [ 345.628077][T10350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1281'. [ 347.214136][T10375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1293'. [ 347.251426][T10375] team_slave_0: entered allmulticast mode [ 348.158980][T10389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1297'. [ 349.491930][T10404] kexec: Could not allocate control_code_buffer [ 349.661154][T10424] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1306'. [ 350.216356][T10434] HfR: entered promiscuous mode [ 350.265202][T10434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1308'. [ 350.312855][T10434] HfR: left promiscuous mode [ 351.420520][T10447] Invalid ELF header magic: != ELF [ 354.055665][T10482] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1319'. [ 355.599430][T10486] kexec: Could not allocate control_code_buffer [ 358.994817][T10548] kexec: Could not allocate control_code_buffer [ 361.940404][T10626] vivid-013: ================= START STATUS ================= [ 362.000820][T10626] vivid-013: Generate PTS: true [ 362.010193][T10626] vivid-013: Generate SCR: true [ 362.024843][T10626] tpg source WxH: 640x360 (Y'CbCr) [ 362.042661][T10626] tpg field: 1 [ 362.091295][T10626] tpg crop: 640x360@0x0 [ 362.112559][T10626] tpg compose: 640x360@0x0 [ 362.183831][T10626] tpg colorspace: 8 [ 362.187711][T10626] tpg transfer function: 0/0 [ 362.192335][T10626] tpg Y'CbCr encoding: 0/0 [ 362.248019][T10626] tpg quantization: 0/0 [ 362.252244][T10626] tpg RGB range: 0/2 [ 362.289966][T10626] vivid-013: ================== END STATUS ================== [ 363.761198][T10664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1370'. [ 365.432914][T10688] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1376'. [ 365.459011][T10688] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode [ 365.488535][T10688] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode [ 366.005519][T10698] Invalid ELF header magic: != ELF [ 367.270535][T10722] HfR: entered promiscuous mode [ 367.287739][T10722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1383'. [ 367.306190][T10722] HfR: left promiscuous mode [ 369.953916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 369.962233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 369.970974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 369.979669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 369.999808][T10776] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1400'. [ 370.040445][T10776] mac80211_hwsim hwsim7 ›: entered promiscuous mode [ 370.067830][T10776] mac80211_hwsim hwsim7 ›: entered allmulticast mode [ 370.190790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 370.402953][T10783] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1401'. [ 370.441746][T10756] kexec: Could not allocate control_code_buffer [ 371.731450][T10806] Invalid ELF header magic: != ELF [ 372.194056][T10785] kexec: Could not allocate control_code_buffer [ 372.842503][T10821] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1412'. [ 373.936567][T10852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1423'. [ 378.450706][T10949] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1449'. [ 378.846223][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.852582][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.490778][T10999] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1465'. [ 383.177583][T10996] kexec: Could not allocate control_code_buffer [ 386.190609][T11053] kexec: Could not allocate control_code_buffer [ 387.788454][T11080] kexec: Could not allocate control_code_buffer getty: ttyS0: read error: Resource temporarily unavailable [ 390.492790][ T52] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 393.977742][T11195] kfence: disabled [ 395.255938][T11214] Invalid ELF header magic: != ELF [ 395.800747][T11226] can0: slcan on ptm0. [ 395.883985][T11226] can0 (unregistered): slcan off ptm0. [ 396.021596][T11234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1525'. [ 396.064508][T11234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1525'. [ 397.503570][T11239] kexec: Could not allocate control_code_buffer [ 398.951169][T11287] kexec: Could not allocate control_code_buffer [ 399.856332][T11330] Process accounting resumed syzkaller syzkaller login: [ 400.754131][T11323] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1541'. [ 402.637012][T11391] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1558'. [ 404.424037][T11419] Invalid ELF header magic: != ELF [ 405.106477][T11430] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 405.128868][T11430] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 405.715573][T11434] Invalid ELF header magic: != ELF [ 406.143139][T11423] kexec: Could not allocate control_code_buffer [ 408.638766][T11471] Invalid ELF header magic: != ELF [ 408.747808][T11455] kexec: Could not allocate control_code_buffer [ 410.891419][T11485] kexec: Could not allocate control_code_buffer getty: ttyS0: read error: Resource temporarily unavailable [ 411.404767][T11501] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1593'. [ 412.388929][T11538] Invalid ELF header magic: != ELF [ 412.621102][T11510] kexec: Could not allocate control_code_buffer [ 414.793259][T11553] kexec: Could not allocate control_code_buffer [ 417.457878][T11616] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1616'. [ 417.792357][T11637] Invalid ELF header magic: != ELF [ 419.045810][T11635] kexec: Could not allocate control_code_buffer [ 419.129600][T11651] Process accounting resumed [ 419.146286][T11651] bridge0: port 3(team0) entered blocking state [ 419.157695][T11651] bridge0: port 3(team0) entered disabled state [ 419.171738][T11651] team0: entered allmulticast mode [ 419.177702][T11651] team_slave_1: entered allmulticast mode [ 419.191216][T11651] team0: entered promiscuous mode [ 419.196798][T11651] team_slave_1: entered promiscuous mode [ 419.212580][T11651] bridge0: port 3(team0) entered blocking state [ 419.219000][T11651] bridge0: port 3(team0) entered listening state [ 419.441884][T11660] Invalid ELF header magic: != ELF [ 420.053518][T11667] Invalid ELF header magic: != ELF syzkaller syzkaller login: [ 423.449443][T11722] Invalid ELF header magic: != ELF [ 423.564888][T11702] kexec: Could not allocate control_code_buffer [ 424.546876][T11737] Invalid ELF header magic: != ELF [ 424.701642][T11742] Invalid ELF header magic: != ELF [ 426.089236][T11764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1656'. [ 426.531920][T11772] Invalid ELF header magic: != ELF [ 426.551661][T11756] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1654'. [ 427.148302][T11757] kexec: Could not allocate control_code_buffer [ 428.760253][T11803] Invalid ELF header magic: != ELF [ 429.470193][T11791] kexec: Could not allocate control_code_buffer [ 431.898407][T11850] Invalid ELF header magic: != ELF [ 433.276565][T11852] kexec: Could not allocate control_code_buffer [ 434.534537][ C0] bridge0: port 3(team0) entered learning state [ 435.161215][T11906] Invalid ELF header magic: != ELF [ 435.612840][T11915] Invalid ELF header magic: != ELF [ 436.379319][T11935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1699'. [ 437.375980][T11944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1703'. [ 437.404343][T11949] Invalid ELF header magic: != ELF [ 439.745329][T11972] kexec: Could not allocate control_code_buffer [ 440.293868][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.300396][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.317358][T12013] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1720'. [ 442.655429][T12017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1721'. [ 442.866658][T12021] Invalid ELF header magic: != ELF [ 443.519764][T12009] kexec: Could not allocate control_code_buffer [ 444.135252][T12039] Invalid ELF header magic: != ELF [ 444.221314][T12043] Process accounting resumed [ 446.410061][T12058] kexec: Could not allocate control_code_buffer [ 447.040339][T12094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1739'. [ 447.251031][T12096] Invalid ELF header magic: != ELF [ 448.443138][T12117] Invalid ELF header magic: != ELF [ 448.926427][T12104] kexec: Could not allocate control_code_buffer [ 449.131535][T12123] Invalid ELF header magic: != ELF [ 449.883712][ C0] bridge0: port 3(team0) entered forwarding state [ 449.890268][ C0] bridge0: topology change detected, propagating [ 451.247477][T12145] Invalid ELF header magic: != ELF [ 452.873833][T12156] kexec: Could not allocate control_code_buffer [ 454.669858][T12173] kexec: Could not allocate control_code_buffer [ 454.966915][T12188] Invalid ELF header magic: != ELF [ 456.418364][T12211] Invalid ELF header magic: != ELF [ 457.262963][T12202] kexec: Could not allocate control_code_buffer [ 460.446673][T12250] kexec: Could not allocate control_code_buffer [ 461.168314][T12289] Invalid ELF header magic: != ELF [ 461.238540][T12292] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1791'. [ 462.752034][T12316] Invalid ELF header magic: != ELF [ 464.347943][T12323] kexec: Could not allocate control_code_buffer [ 464.432574][T12346] Invalid ELF header magic: != ELF [ 466.198035][T12370] Invalid ELF header magic: != ELF [ 467.193318][T12365] kexec: Could not allocate control_code_buffer [ 467.339794][T12383] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1814'. [ 468.033336][T12389] Invalid ELF header magic: != ELF [ 468.252270][T12399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1818'. [ 468.283885][T12399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.302281][T12399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.964022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 470.398528][T12432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1824'. [ 471.033249][T12440] Invalid ELF header magic: != ELF [ 471.159218][T12423] kexec: Could not allocate control_code_buffer [ 475.234080][T12512] Invalid ELF header magic: != ELF [ 475.497812][T12521] Process accounting resumed [ 476.116947][T12508] kexec: Could not allocate control_code_buffer [ 477.549799][T12527] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1842'. [ 478.040068][T12533] kexec: Could not allocate control_code_buffer [ 478.598675][T12550] blktrace: Concurrent blktraces are not allowed on sg0 [ 478.619514][T12550] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1849'. [ 478.647322][T12550] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1849'. [ 478.752364][T12566] Invalid ELF header magic: != ELF [ 479.010736][T12572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1855'. [ 479.601243][T12556] kexec: Could not allocate control_code_buffer [ 480.098673][T12584] Invalid ELF header magic: != ELF [ 481.400107][T12589] kexec: Could not allocate control_code_buffer [ 481.715230][T12603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1862'. [ 481.828284][T12606] Invalid ELF header magic: != ELF [ 483.321366][T12634] Invalid ELF header magic: != ELF [ 484.162075][T12644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1873'. [ 484.457640][T12628] kexec: Could not allocate control_code_buffer [ 484.856089][T12658] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1876'. [ 486.669890][T12691] Invalid ELF header magic: != ELF [ 487.889385][T12695] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1885'. [ 488.424834][T12709] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1888'. [ 488.477267][T12709] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1888'. [ 490.557325][T12749] Invalid ELF header magic: != ELF [ 492.303876][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 492.312431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 492.655412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 494.065765][T12816] syz.1.1919 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 494.988263][T12808] kexec: Could not allocate control_code_buffer [ 496.446248][T12832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1913'. [ 497.934184][T12834] kexec: Could not allocate control_code_buffer [ 499.338651][T12863] [U]  [ 501.190463][T12882] openvswitch: netlink: Key type 261 is out of range max 32 [ 501.284568][T12889] ubi0: attaching mtd0 [ 501.288714][T12889] ubi0 error: ubi_attach_mtd_dev: bad VID header (150994944) or data offsets (150995008) [ 501.529914][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1929'. [ 501.726109][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.732584][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.801443][T12896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1933'. [ 502.360760][T12911] Invalid ELF header magic: != ELF [ 502.797676][T12919] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1938'. [ 503.252315][T12892] kexec: Could not allocate control_code_buffer [ 504.758490][T12972] Invalid ELF header magic: != ELF [ 505.970940][T12973] kexec: Could not allocate control_code_buffer [ 508.524143][T13038] Invalid ELF header magic: != ELF [ 508.941545][T13024] kexec: Could not allocate control_code_buffer [ 510.897699][T13054] kexec: Could not allocate control_code_buffer [ 512.334692][T13080] kexec: Could not allocate control_code_buffer [ 513.929686][T13113] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1978'. [ 513.949715][T13098] kexec: Could not allocate control_code_buffer [ 514.132740][T13118] Invalid ELF header magic: != ELF [ 514.912732][T13128] Invalid ELF header magic: != ELF [ 515.279300][T13139] Invalid ELF header magic: != ELF [ 516.048277][T13148] Invalid ELF header magic: != ELF [ 517.216946][T13165] Invalid ELF header magic: != ELF [ 519.020223][T13175] kafs: addr_prefs: Invalid Command [ 519.535312][T13182] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1993'. [ 520.704006][T13186] kexec: Could not allocate control_code_buffer [ 521.229548][T13208] Invalid ELF header magic: != ELF [ 524.255937][T13232] kexec: Could not allocate control_code_buffer [ 525.117160][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2019'. [ 527.132934][T13317] Invalid ELF header magic: != ELF [ 527.785664][T13331] Invalid ELF header magic: != ELF [ 528.318212][T13343] Invalid ELF header magic: != ELF [ 528.562463][T13346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2038'. [ 529.544868][T13365] Invalid ELF header magic: != ELF [ 530.221951][T13371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2046'. [ 530.682967][T13381] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2049'. [ 531.113218][T13393] Invalid ELF header magic: != ELF [ 534.728821][T13441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2069'. [ 534.904957][T13439] sg_write: process 1698 (syz.0.2068) changed security contexts after opening file descriptor, this is not allowed. [ 535.350980][T13455] Invalid ELF header magic: != ELF [ 535.773218][T13462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2074'. [ 537.278500][T13465] kexec: Could not allocate control_code_buffer [ 539.053373][T13484] kexec: Could not allocate control_code_buffer [ 543.850241][T13571] kexec: Could not allocate control_code_buffer [ 545.413063][T13640] Invalid ELF header magic: != ELF [ 546.553347][T13652] Invalid ELF header magic: != ELF [ 548.591758][T13667] kexec: Could not allocate control_code_buffer [ 549.036716][T13689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2115'. [ 550.521634][T13706] Invalid ELF header magic: != ELF [ 552.431676][T13716] kexec: Could not allocate control_code_buffer [ 552.774281][T13738] nbd: must specify at least one socket [ 553.480714][T13752] Invalid ELF header magic: != ELF [ 556.412307][T13778] kexec: Could not allocate control_code_buffer [ 562.982364][T13858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2154'. [ 563.167804][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.183527][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.395982][T13872] nbd: must specify at least one socket [ 564.616170][T13865] kexec: Could not allocate control_code_buffer [ 568.468381][T13949] Invalid ELF header magic: != ELF [ 570.481040][T13970] mkiss: ax0: crc mode is auto. [ 571.014709][T13961] kexec: Could not allocate control_code_buffer [ 571.225930][T13984] Invalid ELF header magic: != ELF [ 571.545772][ T29] audit: type=1800 audit(8277292340.799:12): pid=13990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2185" name="SYSV00000009" dev="hugetlbfs" ino=0 res=0 errno=0 [ 572.537870][T14010] Invalid ELF header magic: != ELF [ 572.795580][T13988] kexec: Could not allocate control_code_buffer [ 572.867345][T14003] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880363d6000 pfn:0x363d0 [ 572.893776][T14003] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 572.919306][T14003] page_type: f0(buddy) [ 572.923542][T14003] raw: 00fff00000000000 ffffea0000bb2008 ffffea0001171608 0000000000000000 [ 572.947928][T14003] raw: ffff8880363d6000 0000000000000003 00000000f0000000 0000000000000000 [ 572.964251][T14003] page dumped because: VM_BUG_ON_FOLIO(!folio_test_large(folio)) [ 572.992656][T14003] page_owner tracks the page as allocated [ 573.006463][T14003] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8530, tgid 8530 (kworker/u8:7), ts 572934231597, free_ts 572857426515 [ 573.053707][T14003] post_alloc_hook+0x2d1/0x350 [ 573.058635][T14003] get_page_from_freelist+0xfce/0x2f80 [ 573.068760][T14003] __alloc_pages_noprof+0x223/0x25b0 [ 573.083838][T14003] alloc_pages_mpol_noprof+0x2c9/0x610 [ 573.089378][T14003] new_slab+0x2c9/0x410 [ 573.093578][T14003] ___slab_alloc+0xce2/0x1650 [ 573.118526][T14003] __slab_alloc.constprop.0+0x56/0xb0 [ 573.133713][T14003] __kmalloc_node_track_caller_noprof+0x2ee/0x520 [ 573.140241][T14003] kmalloc_reserve+0xef/0x2c0 [ 573.163693][T14003] __alloc_skb+0x164/0x380 [ 573.168182][T14003] nsim_dev_trap_report_work+0x2af/0xd20 [ 573.183711][T14003] process_one_work+0x958/0x1b30 [ 573.188718][T14003] worker_thread+0x6c8/0xf00 [ 573.193342][T14003] kthread+0x2c1/0x3a0 [ 573.222683][T14003] ret_from_fork+0x45/0x80 [ 573.227335][T14003] ret_from_fork_asm+0x1a/0x30 [ 573.232150][T14003] page last free pid 5814 tgid 5814 stack trace: [ 573.253879][T14003] free_unref_page+0x661/0x1080 [ 573.258815][T14003] __put_partials+0x14c/0x170 [ 573.263539][T14003] qlist_free_all+0x4e/0x120 [ 573.293718][T14003] kasan_quarantine_reduce+0x195/0x1e0 [ 573.299252][T14003] __kasan_slab_alloc+0x69/0x90 [ 573.313743][T14003] kmem_cache_alloc_node_noprof+0x1ca/0x3b0 [ 573.319719][T14003] __alloc_skb+0x2b3/0x380 [ 573.340128][T14003] tcp_stream_alloc_skb+0x34/0x570 [ 573.353706][T14003] tcp_sendmsg_locked+0xed5/0x3770 [ 573.358886][T14003] tcp_sendmsg+0x2e/0x50 [ 573.363167][T14003] inet_sendmsg+0xb9/0x140 [ 573.393707][T14003] sock_write_iter+0x4ac/0x5b0 [ 573.398543][T14003] vfs_write+0x5ae/0x1150 [ 573.402928][T14003] ksys_write+0x207/0x250 [ 573.439028][T14003] do_syscall_64+0xcd/0x250 [ 573.473733][T14003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.480103][T14003] ------------[ cut here ]------------ [ 573.485739][T14003] kernel BUG at ./include/linux/mm.h:1221! [ 573.511474][T14003] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 573.518458][T14003] CPU: 1 UID: 0 PID: 14003 Comm: syz.1.2188 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 573.529240][T14003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 573.539316][T14003] RIP: 0010:kpagecount_read+0x477/0x570 [ 573.544923][T14003] Code: 31 ff 49 29 c4 48 8b 44 24 08 4c 01 20 e8 51 6e 61 ff eb 92 e8 da 6b 61 ff 48 8b 3c 24 48 c7 c6 e0 ea 61 8b e8 6a 34 a8 ff 90 <0f> 0b 4c 89 ff e8 ef de c3 ff e9 5a ff ff ff e8 b5 6b 61 ff 48 8b [ 573.564568][T14003] RSP: 0018:ffffc90003c2fca0 EFLAGS: 00010246 [ 573.570670][T14003] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc9000b599000 [ 573.578667][T14003] RDX: 0000000000080000 RSI: ffffffff8237e326 RDI: ffff88802d3fc044 [ 573.586664][T14003] RBP: 000000000104e150 R08: 0000000000000001 R09: fffffbfff2d36daf [ 573.594658][T14003] R10: ffffffff969b6d7f R11: 0000000000000004 R12: 00000000201b3930 [ 573.602649][T14003] R13: 00000000000363d6 R14: dffffc0000000000 R15: 0000000000000000 [ 573.610642][T14003] FS: 00007f38558936c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 573.619607][T14003] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 573.626222][T14003] CR2: 0000000020002c00 CR3: 000000003b89c000 CR4: 00000000003526f0 [ 573.634218][T14003] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 573.642218][T14003] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 573.650214][T14003] Call Trace: [ 573.653510][T14003] [ 573.656456][T14003] ? die+0x31/0x80 [ 573.660206][T14003] ? do_trap+0x232/0x430 [ 573.664482][T14003] ? kpagecount_read+0x477/0x570 [ 573.669454][T14003] ? kpagecount_read+0x477/0x570 [ 573.674431][T14003] ? do_error_trap+0xf4/0x230 [ 573.679151][T14003] ? kpagecount_read+0x477/0x570 [ 573.684128][T14003] ? handle_invalid_op+0x34/0x40 [ 573.689100][T14003] ? kpagecount_read+0x477/0x570 [ 573.694071][T14003] ? exc_invalid_op+0x2e/0x50 [ 573.698777][T14003] ? asm_exc_invalid_op+0x1a/0x20 [ 573.703838][T14003] ? kpagecount_read+0x476/0x570 [ 573.708812][T14003] ? kpagecount_read+0x477/0x570 [ 573.713786][T14003] ? __pfx_kpagecount_read+0x10/0x10 [ 573.719108][T14003] proc_reg_read+0x11d/0x330 [ 573.723726][T14003] ? rw_verify_area+0xd0/0x700 [ 573.728511][T14003] ? __pfx_proc_reg_read+0x10/0x10 [ 573.733635][T14003] vfs_read+0x1df/0xbe0 [ 573.737802][T14003] ? __fget_files+0x1fc/0x3a0 [ 573.742487][T14003] ? __pfx___mutex_lock+0x10/0x10 [ 573.747519][T14003] ? __pfx_vfs_read+0x10/0x10 [ 573.752200][T14003] ? __fget_files+0x206/0x3a0 [ 573.756880][T14003] ksys_read+0x12b/0x250 [ 573.761133][T14003] ? __pfx_ksys_read+0x10/0x10 [ 573.765903][T14003] do_syscall_64+0xcd/0x250 [ 573.770410][T14003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.776307][T14003] RIP: 0033:0x7f3854985d29 [ 573.780718][T14003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.800414][T14003] RSP: 002b:00007f3855893038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 573.808822][T14003] RAX: ffffffffffffffda RBX: 00007f3854b75fa0 RCX: 00007f3854985d29 [ 573.816790][T14003] RDX: 00000000fffffea1 RSI: 0000000020001a80 RDI: 0000000000000008 [ 573.824759][T14003] RBP: 00007f3854a01a20 R08: 0000000000000000 R09: 0000000000000000 [ 573.832809][T14003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.840774][T14003] R13: 0000000000000000 R14: 00007f3854b75fa0 R15: 00007fff29472b78 [ 573.848748][T14003] [ 573.851760][T14003] Modules linked in: [ 573.856181][T14003] ---[ end trace 0000000000000000 ]--- [ 573.862138][T14003] RIP: 0010:kpagecount_read+0x477/0x570 [ 573.867909][T14003] Code: 31 ff 49 29 c4 48 8b 44 24 08 4c 01 20 e8 51 6e 61 ff eb 92 e8 da 6b 61 ff 48 8b 3c 24 48 c7 c6 e0 ea 61 8b e8 6a 34 a8 ff 90 <0f> 0b 4c 89 ff e8 ef de c3 ff e9 5a ff ff ff e8 b5 6b 61 ff 48 8b [ 573.887812][T14003] RSP: 0018:ffffc90003c2fca0 EFLAGS: 00010246 [ 573.893977][T14003] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc9000b599000 [ 573.902077][T14003] RDX: 0000000000080000 RSI: ffffffff8237e326 RDI: ffff88802d3fc044 [ 573.910254][T14003] RBP: 000000000104e150 R08: 0000000000000001 R09: fffffbfff2d36daf [ 573.918382][T14003] R10: ffffffff969b6d7f R11: 0000000000000004 R12: 00000000201b3930 [ 573.983649][T14003] R13: 00000000000363d6 R14: dffffc0000000000 R15: 0000000000000000 [ 573.991668][T14003] FS: 00007f38558936c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 574.019441][T14003] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 574.026136][T14003] CR2: 0000000020002c00 CR3: 000000003b89c000 CR4: 00000000003526f0 [ 574.053730][T14003] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 574.061751][T14003] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 574.083741][T14003] Kernel panic - not syncing: Fatal exception [ 574.090119][T14003] Kernel Offset: disabled [ 574.094436][T14003] Rebooting in 86400 seconds..