last executing test programs: 1m46.719469398s ago: executing program 0 (id=133): bpf$auto(0x597, &(0x7f0000000040)=@prog_bind_map={0xffffffffffffffff, 0xffffffffffffffff, 0x8}, 0xd0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000480), 0x6880, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), r1) sendmsg$auto_WG_CMD_SET_DEVICE(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="210026bd7000fedbdf2501000000060006000100000014000200776730"], 0x30}}, 0x80) sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0x2cc, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x8}, @WGDEVICE_A_PRIVATE_KEY={0x9e, 0x3, "0a5c210af95f27e730154ed9fe9d8ad90195ec22f9032fc179e423a16463f9e7a51351a9580a42f40aa21afe7908e6dc934cbb18498a05e2ff840fa3d6caf68e3b5fe6b1e993f3097e3ea6c2684c5e18e251c5e391734a1efba07f60a177b4e6a3d058172a6671612b359cad0f9011bfad897cb3b190e905f8ae2e4173f3ddd7d6f35ab3330b800ca62879b44dc3ccc3d4e3ae2d2e97572f050e"}, @WGDEVICE_A_PRIVATE_KEY={0xea, 0x3, "75abc72b3422e7f7aa3446af74253b09799f7aab0abb41ec71889d0415688d649a3fb0a045312bee1d59f6124b9f1a679556f0178e58c9184f9311c2116c35981a9cb850b124ba462bb885733b3e83b984df84dbf5c454bc2f53d754b4fd745fbb17b0d5a96da65fcb573350274ba30b022f280a5113e83b5ebfc8cb863eb59257c2e5c68f7f42b9f4e2e79ac8077d484baa438f847a5839586827e068a309d941d636b38e27ae3b5af9aa48cf7904ac0a5257091347fcbee92e20bb529f035b146551d326a5183a6b69cfc00495e2c64b2b544c78ec2a63c42348772a2e6982aab19499ea9b"}, @WGDEVICE_A_PUBLIC_KEY={0xe1, 0x4, "c707cc28fb9a2fea91782e7341c369a19b8e7f6e1a300a89862633cf950872a44aaabb4b2e4fae4277947d543845b3b5e100203da283e22b0bf3c2ae20a44d0a259d94dd78c4a26120b7fe5e456e0dacf120e9e91b939313a244fb926d90ed60a23dd93cdf140b7b3a8f551a725891cbe51602e32a3c0b3c85e261c967b1dc9e31268766e00284411f50a74bee30c269f67ec3201c27f1d5bf0837f4d241d2a5b37dffbdb806bf6d81a147c21049f9d0e52493fba365e679d05477d7d1cdb49817c43ad0e8932354732e43070bafb8801288130e092c5d51693a2e2dd4"}, @WGDEVICE_A_PRIVATE_KEY={0x28, 0x3, "fd7c88da9dd4ac56bae13506df21c27f100afdce66c9de23ef7d04d8f6067ab6bd950888"}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) socket(0xa, 0x5, 0x84) io_uring_setup$auto(0x3, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x3, 0x2020009, 0x23, 0xeb1, 0xfffffffffffffffa, 0xfffffffffffffffd) io_uring_setup$auto(0x6, 0x0) mknod$auto(0x0, 0x1081, 0x3) open(0x0, 0xa240, 0x15e) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0xa00, 0x100) sysfs$auto(0x2, 0x1e, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) io_uring_register$auto(0x2, 0x6, 0x0, 0x1) 1m46.325573111s ago: executing program 0 (id=134): mmap$auto(0xfffffffffffffffc, 0x3, 0xdf, 0x9b70, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) close_range$auto(0x2, 0xa, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket(0x1e, 0x4, 0x0) (rerun: 32) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) (async, rerun: 32) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) (async, rerun: 32) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvfrom$auto(r0, 0x0, 0xc, 0xb21, 0x0, 0x0) (async) write$auto(0x3, 0x0, 0xfdef) 1m46.11245678s ago: executing program 0 (id=135): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000002080), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x24008080) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_MACSEC_CMD_UPD_RXSA(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000007180), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHC_VCLOCKS_GET(r4, &(0x7f0000007240)={0x0, 0x0, &(0x7f0000007200)={&(0x7f00000071c0)={0x14, r5, 0x301, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x2000000, 0x0, 0xc0000}, 0x8000) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) ioctl$auto_LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$auto_LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82, 0x24) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x9}, @HWSIM_ATTR_CHANNELS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008014) keyctl$auto(0x12, 0xf, 0x40000000c6e9, 0x81, 0xa472) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) request_key$auto(0x0, 0x0, 0x0, 0xfffffffd) keyctl$auto(0x12, 0x102000000010001, 0x7f, 0x200, 0x3) 1m45.846611007s ago: executing program 0 (id=139): unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x7f, 0x200000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x18, 0x17) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex_requeue$auto(0x0, 0x80, 0x2, 0x101) bpf$auto(0x23, 0x0, 0x101) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) socket(0x18, 0x5, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f00000000c0), 0x55) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x600007, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto(0xc8, 0x400454d9, 0x5c8d) mlockall$auto(0x7) r0 = openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0) mmap$auto(0x1, 0x20009, 0x4000000000df, 0xebd, r0, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x28, 0x9}, 0x7}, 0x3, 0x0) socket(0x10, 0x2, 0x0) 1m43.438576975s ago: executing program 0 (id=152): sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) r0 = socket(0x2a, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e21}, 0x6b) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) (async) connect$auto(r0, &(0x7f0000000040)=@can, 0x8) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x8, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) socket(0xa, 0x3, 0x3a) (async) epoll_wait$auto(r0, &(0x7f0000000000)={0x7, 0x800000000000009}, 0x7ff, 0x6) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async, rerun: 64) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000002d, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r0) (async) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) gettid() connect$auto(0xffffffffffffffff, 0x0, 0x55) (async, rerun: 64) mmap$auto(0x0, 0x5, 0x3, 0x16, 0x3, 0x8000) (async, rerun: 64) sendfile$auto(0x6, r0, 0x0, 0x8000) unshare$auto(0x40000080) (async, rerun: 32) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async, rerun: 32) madvise$auto(0x0, 0x20200, 0x15) (async) mmap$auto(0x1, 0x10001, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = open(&(0x7f0000000200)='./cgroup\x00', 0x400, 0x23) fchdir$auto(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x2, 0x88) 1m41.416414221s ago: executing program 0 (id=155): socket(0xa, 0x801, 0x84) (async, rerun: 64) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) (async, rerun: 64) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) (async) pipe$auto(0x0) (async) tee$auto(0x2000000000000, 0x3, 0x3ff, 0x9) (async) connect$auto(0x3, 0x0, 0x55) (async) r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f00000051c0)=ANY=[@ANYBLOB="140000000614af"], 0x14}, 0x1, 0x0, 0x0, 0x6008042}, 0x4000004) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, 0x0, 0x57) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (rerun: 32) mmap$auto(0x1, 0x400008, 0xdf, 0x20009b72, 0x2, 0x800008000) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 64) mbind$auto(0x0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x2) mmap$auto(0x81f7, 0x1000000000000004, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) r1 = openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000000), 0x10300, 0x0) r2 = syz_clone(0x1000, &(0x7f00000000c0)="4dea30dfaa9078979bdfb4307815a2f2c8a818a7dd4a91a482b7aa87eb685157346168bf986bd048b86652e5526966b67f55c8ffa610bb38ebf46083af0e2cb55343afaf93bf84a8090ad274207e866e644e25911bef9537de350507abe9925c499b79ecc040c5dd6c", 0x69, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="d8c44f861ad5fb2176832dd51eb13ae442a29e33cb26cee5529f49cbae0de83300e902616787c2dce1e527fe06c11000e8dbfb4c9b1af7175a9bd9d85ad0db2c3e8dc7b195e823c73875d064f22c492b4f34768d7371d923675e6fa2ffe99005c0ecdfe5bc04616deaeae440fda491fb04d7a7db1644eb6476df39dcfd99892934170ede8e6a52bc7f4e41f1a22ba86f620fd409b7b729518e0cdf188cf6ed6ff442ed4cf5225044b577f22daebed1c74f5cd2a273d8f3f7407e48f7bae32b233d2d2c5e4226acb1dfd1f0485a1d704df9ea43e04fe593a08794c42c2d1f130246cbdf63216d478fec42813aaa0cc3edb5943e0c5c") fcntl$auto(r1, 0x3, r2) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd0/queue/iosched/async_depth\x00', 0xa42, 0x0) write$auto(r3, &(0x7f0000000080)='/\xe4ev/auYio\x00', 0x7ff) (async) move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2) 1m25.625711775s ago: executing program 32 (id=155): socket(0xa, 0x801, 0x84) (async, rerun: 64) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) (async, rerun: 64) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) (async) pipe$auto(0x0) (async) tee$auto(0x2000000000000, 0x3, 0x3ff, 0x9) (async) connect$auto(0x3, 0x0, 0x55) (async) r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f00000051c0)=ANY=[@ANYBLOB="140000000614af"], 0x14}, 0x1, 0x0, 0x0, 0x6008042}, 0x4000004) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, 0x0, 0x57) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (rerun: 32) mmap$auto(0x1, 0x400008, 0xdf, 0x20009b72, 0x2, 0x800008000) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 64) mbind$auto(0x0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x2) mmap$auto(0x81f7, 0x1000000000000004, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) r1 = openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000000), 0x10300, 0x0) r2 = syz_clone(0x1000, &(0x7f00000000c0)="4dea30dfaa9078979bdfb4307815a2f2c8a818a7dd4a91a482b7aa87eb685157346168bf986bd048b86652e5526966b67f55c8ffa610bb38ebf46083af0e2cb55343afaf93bf84a8090ad274207e866e644e25911bef9537de350507abe9925c499b79ecc040c5dd6c", 0x69, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="d8c44f861ad5fb2176832dd51eb13ae442a29e33cb26cee5529f49cbae0de83300e902616787c2dce1e527fe06c11000e8dbfb4c9b1af7175a9bd9d85ad0db2c3e8dc7b195e823c73875d064f22c492b4f34768d7371d923675e6fa2ffe99005c0ecdfe5bc04616deaeae440fda491fb04d7a7db1644eb6476df39dcfd99892934170ede8e6a52bc7f4e41f1a22ba86f620fd409b7b729518e0cdf188cf6ed6ff442ed4cf5225044b577f22daebed1c74f5cd2a273d8f3f7407e48f7bae32b233d2d2c5e4226acb1dfd1f0485a1d704df9ea43e04fe593a08794c42c2d1f130246cbdf63216d478fec42813aaa0cc3edb5943e0c5c") fcntl$auto(r1, 0x3, r2) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd0/queue/iosched/async_depth\x00', 0xa42, 0x0) write$auto(r3, &(0x7f0000000080)='/\xe4ev/auYio\x00', 0x7ff) (async) move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2) 14.107013003s ago: executing program 4 (id=372): pivot_root$auto(&(0x7f0000000040)='..\x00', &(0x7f0000000080)='.\x00') 13.848067795s ago: executing program 4 (id=374): r0 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r0, 0x6, 0x6, 0x0, &(0x7f0000000080)=0xfffffc00) madvise$auto(0x0, 0x2000040080000004, 0xe) clone$auto(0x100000000, 0x1, 0x0, &(0x7f0000000040)=0xfffffffc, 0x37) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_STOP_AP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@typed={0x8, 0x131, 0x0, 0x0, @u32}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x5}, @NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}]}, 0x44}}, 0x0) madvise$auto(0x1ffff000, 0x5510, 0x8) 12.11535658s ago: executing program 4 (id=375): socket(0x29, 0xa, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0x89e2, 0x91) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0xc, 0x202000d, 0x5, 0xeb1, 0xfffffffffffffff7, 0x8000) prctl$auto(0x1000000003b, 0x8001, 0x4, 0x5, 0x7) iopl$auto(0x3) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r3, 0x0, 0x39b8) ioctl$auto(0x3, 0xc0585605, 0x38) sendmsg$auto_NL80211_CMD_SET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc050}, 0x4800) ioctl$auto(0x3, 0x89e2, 0x91) 11.466074049s ago: executing program 4 (id=376): r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd054, 0x0) mount$auto(&(0x7f0000000000), &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 10.06475664s ago: executing program 4 (id=381): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/loop4/rqos/wbt/curr_win_nsec\x00', 0x0, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r0, &(0x7f0000000340)=""/179, 0xb3) 9.2856369s ago: executing program 4 (id=385): mmap$auto(0x0, 0xe30d, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x5, 0x8000) (async, rerun: 64) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x2842, 0x0) write$auto(r0, &(0x7f0000000040)='\x00', 0x3300000) 7.785692438s ago: executing program 2 (id=393): ioctl$auto(0x3, 0x40045431, 0x38) 7.692577727s ago: executing program 2 (id=394): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/loop4/rqos/wbt/curr_win_nsec\x00', 0x0, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r0, &(0x7f0000000340)=""/179, 0xb3) (fail_nth: 3) 7.680620083s ago: executing program 2 (id=395): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x2711, @host}, 0x66) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) close_range$auto(0x2, 0x8, 0x0) 7.553316063s ago: executing program 2 (id=396): unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x7f, 0x200000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x18, 0x17) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex_requeue$auto(0x0, 0x80, 0x2, 0x101) bpf$auto(0x23, 0x0, 0x101) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) socket(0x18, 0x5, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f00000000c0), 0x55) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x600007, 0x19) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto(0xc8, 0x400454d9, 0x5c8d) mlockall$auto(0x7) r0 = openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0) mmap$auto(0x1, 0x20009, 0x4000000000df, 0xebd, r0, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x28, 0x9}, 0x7}, 0x3, 0x0) socket(0x10, 0x2, 0x0) 5.529669783s ago: executing program 2 (id=401): bind$auto(0x3, 0x0, 0x6b) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x80100, 0x0, 0xfffffffffffffffd) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x40) lchown$auto(&(0x7f0000000000)='.\x00', 0x0, 0x6) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) mmap$auto(0xfffffffffffffffd, 0x7fffffff, 0xdf, 0x17, 0x7, 0x28000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x2, 0x1) socket(0x2, 0x801, 0x106) socket(0x26, 0x80805, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x145) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/schedstat\x00', 0x8000, 0x0) read$auto_proc_single_file_operations_base(r1, &(0x7f0000000080)=""/73, 0x49) read$auto_ptdump_curusr_fops_(r0, &(0x7f0000000100)=""/251, 0xfb) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) getpriority$auto(0x1, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) ppoll$auto(&(0x7f0000000040)={r2, 0x5, 0xf}, 0x4, 0x0, 0x0, 0x8) close_range$auto(0x2, 0xffffffffffffffff, 0x0) readv$auto(0x0, &(0x7f0000000080)={0x0, 0x1e}, 0x3) ioctl$auto(0x1, 0x890c, 0x8) unshare$auto(0x40000080) bpf$auto(0xa69, &(0x7f0000000400)=@prog_bind_map={0xffffffffffffffff, 0xffffffffffffffff, 0x49}, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 4.428288422s ago: executing program 1 (id=402): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x5, &(0x7f0000000000)=@test={0x12, 0x1, 0xa93f, 0x9, 0x3, 0x3, 0x3da1, 0x0, 0xb4, 0x5, 0x140000000000, 0x0, 0x7fffffff, 0x9, 0x1}, 0x171) open(&(0x7f0000000800)='./file0\x00', 0x6041, 0x0) socket(0x2, 0x801, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x9, 0x5, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) close_range$auto(0x0, 0xfffffffffffff000, 0x2) pidfd_open$auto(0x1, 0x0) pidfd_send_signal$auto(r1, 0x4, 0x0, 0x1) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) unshare$auto(0x20000) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') lstat$auto(0x0, 0x0) setns(r2, 0x0) pivot_root$auto(&(0x7f0000000040)='..\x00', &(0x7f0000000080)='.\x00') 4.048880202s ago: executing program 1 (id=404): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8002) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x2000b, 0x1, 0xeb1, 0x3fe, 0x1) (async) mmap$auto(0x0, 0x2000b, 0x1, 0xeb1, 0x3fe, 0x1) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x1f, 0x800, 0x9cff) setsockopt$auto(0x3, 0x0, 0x40, 0x0, 0x10001) (async) setsockopt$auto(0x3, 0x0, 0x40, 0x0, 0x10001) 2.992522156s ago: executing program 3 (id=406): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = socket(0x15, 0x5, 0x0) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, &(0x7f0000000100)={0x0, 0x1ff}, 0x3, &(0x7f0000000140), 0x200, 0x4}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) read$auto(0x4, 0x0, 0xfdef) symlink$auto(&(0x7f0000000080)='\xe6\'\xd4\v{T+\xac', &(0x7f0000000000)='\'--[[\x14+\\\x00') readlink$auto(&(0x7f0000000040)='\'--[[\x14+\\\x00', 0x0, 0x8) readlink$auto(&(0x7f0000000180)='\'--[[\x14+\\\x00', &(0x7f00000001c0)='\x00', 0x80) ioctl$auto_NVRAM_INIT(r0, 0x7040, 0x0) 2.991603017s ago: executing program 1 (id=414): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/machinecheck/machinecheck0/monarch_timeout\x00', 0x2, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)="e4", 0x1) (async) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) (async) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/031/001\x00', 0x80, 0x0) (async) r1 = socketpair$auto(0x1e, 0x1, 0xfffffffc, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyva\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TCFLSH2(r2, 0x80047437, 0x0) (async) sendfile$auto(r1, r2, &(0x7f0000000000)=0x100000000, 0x5) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) mlockall$auto(0xfc7) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async, rerun: 32) r4 = openat$auto_fops_init_pkru_pkeys(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) write$auto_fops_init_pkru_pkeys(r4, 0x0, 0x2b) (async) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000004580)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000ffdbdf250100000008000700040000000a00010025647d015e00000008000200", @ANYRES32=0x0, @ANYBLOB="4b04d8bb9fff9b505358c922e2b2e66ca09e5a594cb45004bcb828a4368da9686f8738f13e205883"], 0x30}, 0x1, 0x0, 0x0, 0xc010}, 0x2000000) 2.599617792s ago: executing program 1 (id=407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000002080), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x24008080) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=r3, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="18fd06"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_MACSEC_CMD_UPD_RXSA(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000007180), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHC_VCLOCKS_GET(r4, &(0x7f0000007240)={0x0, 0x0, &(0x7f0000007200)={&(0x7f00000071c0)={0x14, r5, 0x301, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x2000000, 0x0, 0xc0000}, 0x8000) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) ioctl$auto_LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$auto_LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82, 0x24) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x9}, @HWSIM_ATTR_CHANNELS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008014) keyctl$auto(0x12, 0xf, 0x40000000c6e9, 0x81, 0xa472) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) request_key$auto(0x0, 0x0, 0x0, 0xfffffffd) keyctl$auto(0x12, 0x102000000010001, 0x7f, 0x200, 0x3) 1.856652231s ago: executing program 3 (id=408): r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) read$auto(r0, 0x0, 0x5) r1 = openat$auto_vrr_range_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/Writeback-1/vrr_range\x00', 0x618001, 0x0) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cpu/0/cpuid\x00', 0x400c0, 0x0) read$auto(r1, 0x0, 0x5) 1.477201771s ago: executing program 3 (id=409): mmap$auto(0x0, 0x5, 0x3, 0x4000eb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x8, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd10\x00', 0x48001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffd, 0x8000) ioctl$auto_def_blk_fops_fs(r1, 0x127a, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioperm$auto(0x4, 0xbc6, 0x81) socket(0x2a, 0x6, 0x80000001) r3 = socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x9, 0xdb, 0xeb1, r2, 0x8000) getsockopt$auto(0x100000006, 0x1, 0x3c, 0xfffffffffffffffe, 0x0) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0xf6}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000d4}, 0x880) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vkms/drm/card1/card1-Writeback-1/status\x00', 0x40000, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/rose12/queues/rx-0/rps_cpus\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)='\t', 0x1) sysfs$auto(0x2, 0x14, 0x0) fsopen$auto(0x0, 0x1) socket(0x2c, 0x80003, 0x0) getsockopt$auto(0x6, 0x84, 0xa, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x208001, 0x0) ioperm$auto(0x4, 0x100000000, 0x7) 1.068059239s ago: executing program 3 (id=410): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000061c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000061c0), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000006240)={&(0x7f0000006200)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x8}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffa}, @NFSD_A_SERVER_LEASETIME={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004008}, 0x4) socket(0x10, 0x2, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x191080, 0x0) (async) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x191080, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x8b72, 0x6, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) (async) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r2, 0x40045109, 0x3) (async) ioctl$auto(r2, 0x40045109, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x82202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x100) socket(0x10, 0x3, 0x6) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x189000, 0x0) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0xc83, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_options\x00', 0x2, 0x0) socket(0x2, 0x1, 0x0) (async) socket(0x2, 0x1, 0x0) socket(0x1d, 0x2, 0x2) socket(0xa, 0x5, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) (async) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r3, 0x5412, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) 875.00047ms ago: executing program 1 (id=411): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/loop4/rqos/wbt/curr_win_nsec\x00', 0x0, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r0, &(0x7f0000000340)=""/179, 0xb3) recvmmsg$auto(r0, &(0x7f0000000200)={{&(0x7f0000000000)="2cb5", 0xdfde, &(0x7f0000000140)={&(0x7f0000000080)="60f25307df81371bf08ef3822c4728b12aa4c4aa60e698d834d72a06c2d71e7bc2dd9910f97b893100a91cf23942adafbe953b80fa855043b84a8df2b539a692108c867708988662bb4e085c18a4947a86e3af2bc488808490b4f87e654c624ce736983eb90e7e5882d3467bbc8e8ca200e261a7db5535ed7ea6d154229ee3ee5a49d9be35348fb08746b1e02833e4da24f119ffa3", 0x1}, 0xc, &(0x7f0000000180)="5f8701d6ff85af9d05499b5d8ccc96bb4e9f4a57c92caebaaebad6a189e48656188cc9812614376fae36be184374d03a8d61e5fcf50bfc78ad3a1a952e1d1236bbaa85a58852e363903c3111291a19bf9b", 0x4, 0xef}}, 0x4, 0x10, &(0x7f0000000240)={0x67b, 0x9b2f}) 593.477263ms ago: executing program 1 (id=412): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8001, 0x0) ioctl$auto(0x3, 0x1274, 0x7) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) recvfrom$auto(r0, 0x0, 0xc, 0xb21, 0x0, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') socket(0x18, 0x5, 0x0) accept$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtdblock0\x00', 0xa0100, 0x0) read$auto(r1, 0x0, 0x0) personality$auto(0x40004010410ffc) mprotect$auto(0x1ffff000, 0xb, 0x1) 512.52231ms ago: executing program 3 (id=413): bpf$auto(0x597, &(0x7f0000000040)=@prog_bind_map={0xffffffffffffffff, 0xffffffffffffffff, 0x8}, 0xd0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000480), 0x6880, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), r1) sendmsg$auto_WG_CMD_SET_DEVICE(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="210026bd7000fedbdf2501000000060006000100000014000200776730"], 0x30}}, 0x80) sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0x2d4, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x8}, @WGDEVICE_A_PRIVATE_KEY={0x9e, 0x3, "0a5c210af95f27e730154ed9fe9d8ad90195ec22f9032fc179e423a16463f9e7a51351a9580a42f40aa21afe7908e6dc934cbb18498a05e2ff840fa3d6caf68e3b5fe6b1e993f3097e3ea6c2684c5e18e251c5e391734a1efba07f60a177b4e6a3d058172a6671612b359cad0f9011bfad897cb3b190e905f8ae2e4173f3ddd7d6f35ab3330b800ca62879b44dc3ccc3d4e3ae2d2e97572f050e"}, @WGDEVICE_A_PRIVATE_KEY={0xe7, 0x3, "75abc72b3422e7f7aa3446af74253b09799f7aab0abb41ec71889d0415688d649a3fb0a045312bee1d59f6124b9f1a679556f0178e58c9184f9311c2116c35981a9cb850b124ba462bb885733b3e83b984df84dbf5c454bc2f53d754b4fd745fbb17b0d5a96da65fcb573350274ba30b022f280a5113e83b5ebfc8cb863eb59257c2e5c68f7f42b9f4e2e79ac8077d484baa438f847a5839586827e068a309d941d636b38e27ae3b5af9aa48cf7904ac0a5257091347fcbee92e20bb529f035b146551d326a5183a6b69cfc00495e2c64b2b544c78ec2a63c42348772a2e6982aab194"}, @WGDEVICE_A_PUBLIC_KEY={0xef, 0x4, "c707cc28fb9a2fea91782e7341c369a19b8e7f6e1a300a89862633cf950872a44aaabb4b2e4fae4277947d543845b3b5e100203da283e22b0bf3c2ae20a44d0a259d94dd78c4a26120b7fe5e456e0dacf120e9e91b939313a244fb926d90ed60a23dd93cdf140b7b3a8f551a725891cbe51602e32a3c0b3c85e261c967b1dc9e31268766e00284411f50a74bee30c269f67ec3201c27f1d5bf0837f4d241d2a5b37dffbdb806bf6d81a147c21049f9d0e52493fba365e679d05477d7d1cdb49817c43ad0e8932354732e43070bafb8801288130e092c5d51693a2e2dd437081e59dd7805f101874ad75567"}, @WGDEVICE_A_PRIVATE_KEY={0x28, 0x3, "fd7c88da9dd4ac56bae13506df21c27f100afdce66c9de23ef7d04d8f6067ab6bd950888"}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) socket(0xa, 0x5, 0x84) io_uring_setup$auto(0x3, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x3, 0x2020009, 0x23, 0xeb1, 0xfffffffffffffffa, 0xfffffffffffffffd) io_uring_setup$auto(0x6, 0x0) mknod$auto(0x0, 0x1081, 0x3) open(0x0, 0xa240, 0x15e) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0xa00, 0x100) sysfs$auto(0x2, 0x1e, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) io_uring_register$auto(0x2, 0x6, 0x0, 0x1) 2.705362ms ago: executing program 2 (id=415): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x12, 0x2, 0x8000) (async) pwrite64$auto(0xc8, &(0x7f0000000000)='\xfc\xff\xff\xff\xff\xff\xff\xffRN8\x99\x88\xf5s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\xae\x18\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xdac$w\x883\xac\xcd\x96\xc2\x93\x0e\x12/v0\x90\x915?', 0x48, 0x9) getsockopt$auto(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x1, 0x0) write$auto_tracing_cpumask_fops_trace(r1, 0x0, 0x0) (async) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r0) (async) r2 = socket(0xa, 0x2, 0x0) r3 = open(0x0, 0xc162, 0x0) ftruncate$auto(r3, 0xdaaf) (async) sendfile$auto(r2, r3, 0x0, 0xce) (async) read$auto_fb_fops_fb_chrdev(r3, &(0x7f0000000080)=""/133, 0x85) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'tunl0\x00'}) (async) stat$auto(0x0, 0x0) (async) shmctl$auto(0x4, 0x1, &(0x7f0000000280)={{0xfe9e, 0xffffffffffffffff, 0xee00, 0xa6, 0x800, 0x5, 0x3}, 0x7a6e56f5, 0x3, 0x9, 0xa, @inferred, @inferred, 0x1, 0x0, 0x0, &(0x7f0000000240)}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000400010000000a00050000082101f7ff00000a000100a97ee9f8188500000a00010054001e00318e0000080004001000000008000200", @ANYRES32=0x0, @ANYBLOB="080014"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004004) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r4) (async) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20040000) (async) r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010025bd0001fbdbdf0002"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async) r7 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40000) 0s ago: executing program 3 (id=416): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x2, 0x0, 0x2, 0x0, 0x2000, 0x0, 0xe, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x4000, 0x0, 0x6, 0x0, 0xfffffffffffbfffd, 0x4, 0x1, 0x10000000000, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400000000005b8, 0xffff, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0x4]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xf7374674b920089e) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$NS_GET_PARENT(r0, 0xff01, 0x0) io_uring_setup$auto(0x5, &(0x7f0000000040)={0x3, 0x510, 0x7ff, 0x6, 0x30d9, 0x3cc3, r0, [0x2, 0xfffffff9, 0x7], {0xffffffff, 0x40, 0x44b5b210, 0x7, 0x0, 0x10, 0x8, 0x4, 0x3ff}, {0x7fff, 0x2, 0xc, 0xffff, 0x6, 0x0, 0x5, 0x4d, 0xf85}}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x8040, 0x4) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000140)={0xb0, "ba5b4822d5ac124b52029f785d703daef143251d0ee8b97ff3f4a2fd3b1e7c94", @raw}) r2 = socket(0x1e, 0x800, 0x44604f61) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.23' (ED25519) to the list of known hosts. [ 64.971314][ T5816] cgroup: Unknown subsys name 'net' [ 65.110457][ T5816] cgroup: Unknown subsys name 'cpuset' [ 65.118638][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.493502][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.104297][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.123498][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.131384][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.140035][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.149576][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.157764][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.166650][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.175029][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.187764][ T5831] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.195608][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.210247][ T5832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.225697][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.256588][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.279634][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.292144][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.317822][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.325370][ T5831] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.337034][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.359388][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.376719][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.387804][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.401686][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.410808][ T5832] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.418211][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.626559][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 68.684637][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 68.814835][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.822151][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.830372][ T5825] bridge_slave_0: entered allmulticast mode [ 68.838795][ T5825] bridge_slave_0: entered promiscuous mode [ 68.864310][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 68.879200][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.886322][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.894769][ T5825] bridge_slave_1: entered allmulticast mode [ 68.902407][ T5825] bridge_slave_1: entered promiscuous mode [ 68.936494][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.943669][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.951799][ T5829] bridge_slave_0: entered allmulticast mode [ 68.959304][ T5829] bridge_slave_0: entered promiscuous mode [ 68.981473][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 68.994036][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.025496][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.033257][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.040583][ T5829] bridge_slave_1: entered allmulticast mode [ 69.047823][ T5829] bridge_slave_1: entered promiscuous mode [ 69.073827][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.123942][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.135653][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.167895][ T5825] team0: Port device team_slave_0 added [ 69.206766][ T5825] team0: Port device team_slave_1 added [ 69.224730][ T5829] team0: Port device team_slave_0 added [ 69.261792][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.269158][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.276281][ T5833] bridge_slave_0: entered allmulticast mode [ 69.283846][ T5833] bridge_slave_0: entered promiscuous mode [ 69.292402][ T5829] team0: Port device team_slave_1 added [ 69.305656][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.312930][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.320347][ T5835] bridge_slave_0: entered allmulticast mode [ 69.327021][ T5835] bridge_slave_0: entered promiscuous mode [ 69.334422][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.342110][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.368474][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.380743][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.388141][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.395284][ T5833] bridge_slave_1: entered allmulticast mode [ 69.402814][ T5833] bridge_slave_1: entered promiscuous mode [ 69.415655][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.422992][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.430472][ T5835] bridge_slave_1: entered allmulticast mode [ 69.437192][ T5835] bridge_slave_1: entered promiscuous mode [ 69.444091][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.451804][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.478030][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.502722][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.509761][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.535947][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.548612][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.555581][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.581765][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.614080][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.645998][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.657867][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.669350][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.726348][ T5825] hsr_slave_0: entered promiscuous mode [ 69.732772][ T5825] hsr_slave_1: entered promiscuous mode [ 69.749552][ T5833] team0: Port device team_slave_0 added [ 69.757805][ T5835] team0: Port device team_slave_0 added [ 69.771255][ T5833] team0: Port device team_slave_1 added [ 69.788310][ T5835] team0: Port device team_slave_1 added [ 69.804056][ T5829] hsr_slave_0: entered promiscuous mode [ 69.812493][ T5829] hsr_slave_1: entered promiscuous mode [ 69.820729][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.828833][ T5829] Cannot create hsr debugfs directory [ 69.846338][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.853607][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.879675][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.891809][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.899688][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.925760][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.973246][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.982158][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.009822][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.021809][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.029485][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.055526][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.103040][ T5833] hsr_slave_0: entered promiscuous mode [ 70.111620][ T5833] hsr_slave_1: entered promiscuous mode [ 70.118906][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.126459][ T5833] Cannot create hsr debugfs directory [ 70.196735][ T5835] hsr_slave_0: entered promiscuous mode [ 70.205446][ T5835] hsr_slave_1: entered promiscuous mode [ 70.211735][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.219430][ T5835] Cannot create hsr debugfs directory [ 70.247963][ T5832] Bluetooth: hci0: command tx timeout [ 70.327652][ T5832] Bluetooth: hci1: command tx timeout [ 70.407430][ T5832] Bluetooth: hci2: command tx timeout [ 70.434341][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.446221][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.465219][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.475350][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.488064][ T5832] Bluetooth: hci3: command tx timeout [ 70.529766][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.546471][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.565139][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.585425][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.630260][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.645941][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.656708][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.671169][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.732239][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.751684][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.761906][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.783606][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.792103][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.854846][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.876033][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.883269][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.903452][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.910609][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.976773][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.041731][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.056624][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.069974][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.080003][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.087142][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.101597][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.108767][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.169378][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.210373][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.217549][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.229235][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.236326][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.248874][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.293457][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.301202][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.353286][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.360475][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.411407][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.520810][ T5825] veth0_vlan: entered promiscuous mode [ 71.545888][ T5825] veth1_vlan: entered promiscuous mode [ 71.601399][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.664921][ T5825] veth0_macvtap: entered promiscuous mode [ 71.680831][ T5825] veth1_macvtap: entered promiscuous mode [ 71.691196][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.702082][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.725052][ T5833] veth0_vlan: entered promiscuous mode [ 71.765321][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.782861][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.800591][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.810459][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.830051][ T5833] veth1_vlan: entered promiscuous mode [ 71.839292][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.849039][ T5825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.858414][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.867380][ T5825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.922233][ T5833] veth0_macvtap: entered promiscuous mode [ 71.951798][ T5833] veth1_macvtap: entered promiscuous mode [ 71.972453][ T5829] veth0_vlan: entered promiscuous mode [ 71.993940][ T5829] veth1_vlan: entered promiscuous mode [ 72.030954][ T5835] veth0_vlan: entered promiscuous mode [ 72.060012][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.072538][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.084435][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.094608][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.105272][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.116060][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.137605][ T5829] veth0_macvtap: entered promiscuous mode [ 72.149021][ T5829] veth1_macvtap: entered promiscuous mode [ 72.156507][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.167391][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.176133][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.186532][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.201205][ T5835] veth1_vlan: entered promiscuous mode [ 72.201619][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.215021][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.215062][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.215076][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.253515][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.254823][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.272697][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.307942][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.318797][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.329913][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.337271][ T5832] Bluetooth: hci0: command tx timeout [ 72.341552][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.356591][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.397141][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.406029][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.415327][ T5832] Bluetooth: hci1: command tx timeout [ 72.420155][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.430650][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.443069][ T5835] veth0_macvtap: entered promiscuous mode [ 72.461792][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.462401][ T5835] veth1_macvtap: entered promiscuous mode [ 72.484668][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.487913][ T5832] Bluetooth: hci2: command tx timeout [ 72.553567][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.559055][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.564188][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.589095][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.599744][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.609813][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.616974][ T5832] Bluetooth: hci3: command tx timeout [ 72.620494][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.638077][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.657369][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.665421][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.778391][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.790882][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.801496][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.815041][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.825119][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.835916][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.848948][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.884833][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.900995][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.910760][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.920405][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.932678][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.946188][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.946414][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.978155][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.067307][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.082244][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.123764][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.157548][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.258299][ T5888] Zero length message leads to an empty skb [ 73.264401][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.286961][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.126880][ T29] audit: type=1107 audit(1734490716.028:2): pid=5907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 74.406978][ T5832] Bluetooth: hci0: command tx timeout [ 74.498513][ T5832] Bluetooth: hci1: command tx timeout [ 74.568455][ T5832] Bluetooth: hci2: command tx timeout [ 74.648455][ T5832] Bluetooth: hci3: command tx timeout [ 75.797169][ T5941] process 'syz.1.18' launched ':,' with NULL argv: empty string added [ 76.056949][ T29] audit: type=1326 audit(1734490717.958:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5920 comm="syz.3.14" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5b5385d29 code=0x0 [ 76.197657][ T5953] HSR: entered promiscuous mode [ 76.494430][ T5832] Bluetooth: hci0: command tx timeout [ 76.586871][ T5832] Bluetooth: hci1: command tx timeout [ 76.614060][ T5953] delete_channel: no stack [ 76.647496][ T5832] Bluetooth: hci2: command tx timeout [ 76.670960][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'. [ 76.727993][ T5832] Bluetooth: hci3: command tx timeout [ 77.218533][ T5959] program syz.3.22 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.926718][ T5966] kexec: Could not allocate control_code_buffer [ 80.728347][ T6009] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.760975][ T6016] netlink: 28 bytes leftover after parsing attributes in process `syz.3.35'. [ 80.870276][ T6016] ipvlan0: entered allmulticast mode [ 80.875741][ T6016] veth0_vlan: entered allmulticast mode [ 81.537382][ T6002] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.072511][ T9] cfg80211: failed to load regulatory.db [ 82.139549][ T6032] netlink: 'syz.2.39': attribute type 8 has an invalid length. [ 84.739219][ T6066] netlink: 'syz.2.46': attribute type 8 has an invalid length. [ 85.699260][ T6079] netlink: 'syz.2.50': attribute type 8 has an invalid length. [ 89.743073][ T6121] netlink: 'syz.2.57': attribute type 8 has an invalid length. [ 91.867105][ T6152] block nbd0: not configured, cannot reconfigure [ 92.237699][ T6152] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 94.983016][ T6224] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.348798][ T6233] Invalid ELF header magic: != ELF [ 97.660934][ T6282] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 97.677516][ T6282] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 97.747892][ T6282] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 98.191257][ T6299] tipc: Started in network mode [ 98.196499][ T6299] tipc: Node identity ee00, cluster identity 4711 [ 98.203648][ T6299] tipc: Node number set to 60928 [ 98.231617][ T6282] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 98.307649][ T6282] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 98.489019][ T6282] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 98.589734][ T6282] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 98.606562][ T6282] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.652484][ T6282] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.683562][ T6282] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.717180][ T6282] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.758246][ T6282] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 99.445265][ T6307] could not allocate digest TFM handle binfmt_misc [ 99.696884][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.246968][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.565241][ T6345] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.647026][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.727005][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.769886][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.326943][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 102.726912][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.807441][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 103.792969][ T6117] syz.1.55 (6117) used greatest stack depth: 18976 bytes left [ 103.852854][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.010834][ T6391] lo: entered allmulticast mode [ 104.372850][ T6392] lo: left allmulticast mode [ 104.409135][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.849286][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.887079][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 105.825847][ T5994] syz.1.28 (5994) used greatest stack depth: 18880 bytes left [ 106.036516][ T6426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.126'. [ 106.232513][ T6426] geneve1: entered allmulticast mode [ 109.325875][ T6466] syz.3.136 uses obsolete (PF_INET,SOCK_PACKET) [ 109.380473][ T6466] netlink: 28 bytes leftover after parsing attributes in process `syz.3.136'. [ 109.530683][ T6466] team0: Port device team_slave_0 removed [ 109.794334][ T6482] netlink: 'syz.2.140': attribute type 2 has an invalid length. [ 114.633002][ T6566] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 114.652750][ T6566] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 115.587683][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'. [ 116.387115][ T6585] netlink: 334 bytes leftover after parsing attributes in process `syz.1.161'. [ 118.495808][ T6634] kafs: addr_prefs: Invalid Command [ 123.217325][ T6681] netlink: 32 bytes leftover after parsing attributes in process `syz.1.177'. [ 125.351664][ T6711] netlink: 334 bytes leftover after parsing attributes in process `syz.2.184'. [ 128.103480][ T6743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.192'. [ 129.391642][ T6756] ======================================================= [ 129.391642][ T6756] WARNING: The mand mount option has been deprecated and [ 129.391642][ T6756] and is ignored by this kernel. Remove the mand [ 129.391642][ T6756] option from the mount to silence this warning. [ 129.391642][ T6756] ======================================================= [ 130.131371][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 130.140455][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 130.150457][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 130.185926][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 130.197227][ T5832] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 130.206996][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 130.453589][ T6768] netlink: 28 bytes leftover after parsing attributes in process `syz.3.196'. [ 130.779516][ T6768] bridge_slave_1: left allmulticast mode [ 130.813824][ T6768] bridge_slave_1: left promiscuous mode [ 130.915693][ T6768] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.258026][ T6768] bridge_slave_0: left allmulticast mode [ 131.263734][ T6768] bridge_slave_0: left promiscuous mode [ 131.357235][ T6768] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.247041][ T5832] Bluetooth: hci4: command tx timeout [ 132.590576][ T6802] netlink: 'syz.2.204': attribute type 1 has an invalid length. [ 132.729160][ T6808] netlink: 28 bytes leftover after parsing attributes in process `syz.2.205'. [ 133.147311][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.153669][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.268615][ T6812] Line length is too long: Should be less than 4094 [ 134.000348][ T6765] chnl_net:caif_netlink_parms(): no params data found [ 134.328263][ T5832] Bluetooth: hci4: command tx timeout [ 135.334185][ T6765] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.370456][ T6765] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.397305][ T6765] bridge_slave_0: entered allmulticast mode [ 135.443828][ T6765] bridge_slave_0: entered promiscuous mode [ 135.816989][ T6765] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.837072][ T6765] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.844315][ T6765] bridge_slave_1: entered allmulticast mode [ 135.914017][ T6765] bridge_slave_1: entered promiscuous mode [ 136.457083][ T5832] Bluetooth: hci4: command tx timeout [ 137.281628][ T6765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.471053][ T6765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.709862][ T6765] team0: Port device team_slave_0 added [ 137.748925][ T6765] team0: Port device team_slave_1 added [ 138.113787][ T6765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.127826][ T6765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.162199][ T6765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.176149][ T6765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.183268][ T6765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.209271][ T6765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.454925][ T6765] hsr_slave_0: entered promiscuous mode [ 138.462104][ T6765] hsr_slave_1: entered promiscuous mode [ 138.487027][ T5832] Bluetooth: hci4: command tx timeout [ 138.535641][ T6765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.544217][ T6765] Cannot create hsr debugfs directory [ 140.052911][ T6765] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 140.109447][ T6765] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 140.157129][ T6881] mmap: syz.3.219 (6881) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 140.539565][ T6765] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 140.652676][ T6765] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 141.329179][ T6765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.417987][ T6765] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.566490][ T6765] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 141.617237][ T6765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.650685][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.657848][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.813567][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.820755][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.460709][ T6765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.409148][ T6765] veth0_vlan: entered promiscuous mode [ 143.429687][ T6765] veth1_vlan: entered promiscuous mode [ 143.473712][ T6765] veth0_macvtap: entered promiscuous mode [ 143.500091][ T6765] veth1_macvtap: entered promiscuous mode [ 143.525029][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.556894][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.566755][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.596884][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.606770][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.636881][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.646742][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.676909][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.697971][ T6765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.717728][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.736847][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.746679][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.776868][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.786723][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.816866][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.826717][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.866896][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.888356][ T6765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.908547][ T6765] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.927048][ T6765] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.935780][ T6765] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.956897][ T6765] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.443892][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.476876][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.596652][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.621352][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.917667][ T7014] netlink: zone id is out of range [ 152.926465][ T7014] netlink: set zone limit has 8 unknown bytes [ 152.971303][ T7015] netlink: zone id is out of range [ 153.017030][ T7015] netlink: set zone limit has 8 unknown bytes [ 153.054345][ T7027] Process accounting resumed [ 153.077221][ T7028] Process accounting resumed [ 153.107710][ T7027] Process accounting resumed [ 153.195669][ T7027] Process accounting resumed [ 153.269766][ T7036] netlink: 330 bytes leftover after parsing attributes in process `syz.1.256'. [ 154.284357][ T7056] Invalid ELF header magic: != ELF [ 154.326688][ T7057] Invalid ELF header magic: != ELF [ 157.420981][ T7103] netlink: 338 bytes leftover after parsing attributes in process `syz.2.272'. [ 158.290309][ T7113] Invalid ELF header magic: != ELF [ 162.143634][ T7136] sg_write: data in/out 32634/1048664 bytes for SCSI command 0x0-- guessing data in; [ 162.143634][ T7136] program syz.1.283 not setting count and/or reply_len properly [ 162.679589][ T7146] netlink: 'syz.1.285': attribute type 8 has an invalid length. [ 163.703918][ T7143] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 168.412797][ T7200] netlink: 'syz.1.296': attribute type 28 has an invalid length. [ 168.420680][ T7200] netlink: 'syz.1.296': attribute type 29 has an invalid length. [ 168.437051][ T7200] netlink: 'syz.1.296': attribute type 30 has an invalid length. [ 168.446701][ T7200] netlink: 'syz.1.296': attribute type 31 has an invalid length. [ 168.455149][ T7200] netlink: 'syz.1.296': attribute type 32 has an invalid length. [ 168.467849][ T7200] netlink: 'syz.1.296': attribute type 33 has an invalid length. [ 168.477730][ T7200] netlink: 'syz.1.296': attribute type 35 has an invalid length. [ 168.485496][ T7200] netlink: 'syz.1.296': attribute type 37 has an invalid length. [ 168.494150][ T7200] netlink: 'syz.1.296': attribute type 39 has an invalid length. [ 168.524316][ T7200] netlink: 'syz.1.296': attribute type 40 has an invalid length. [ 168.541359][ T7200] netlink: 18 bytes leftover after parsing attributes in process `syz.1.296'. [ 178.380322][ T7317] validate_nla: 1 callbacks suppressed [ 178.380343][ T7317] netlink: 'syz.1.313': attribute type 8 has an invalid length. [ 180.834993][ T7352] delete_channel: no stack [ 180.843029][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 181.138305][ T7347] HSR: entered promiscuous mode [ 185.682042][ T7392] Process accounting resumed [ 185.714126][ T7392] synth uevent: /devices/system/cpu/cpu0/cache: unknown uevent action string [ 185.779632][ T7392] cache: uevent: failed to send synthetic uevent: -22 [ 186.982456][ T7402] HSR: entered promiscuous mode [ 188.317540][ T7409] delete_channel: no stack [ 188.350180][ T7402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.334'. [ 194.575324][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.587495][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.952291][ T29] audit: type=1800 audit(4294967405.088:4): pid=7497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.362" name="discovery_nqn" dev="configfs" ino=12150 res=0 errno=0 [ 205.675948][ T7579] netlink: 338 bytes leftover after parsing attributes in process `syz.3.383'. [ 205.758822][ T7579] netlink: 338 bytes leftover after parsing attributes in process `syz.3.383'. [ 206.000739][ T7579] netlink: 210 bytes leftover after parsing attributes in process `syz.3.383'. [ 212.327374][ T7686]  [ 215.756124][ T7593] ------------[ cut here ]------------ [ 215.765461][ T7593] WARNING: CPU: 0 PID: 7593 at mm/page_alloc.c:4727 __alloc_pages_noprof+0xeff/0x25b0 [ 215.776011][ T7593] Modules linked in: [ 215.780348][ T7593] CPU: 0 UID: 0 PID: 7593 Comm: syz.4.385 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 215.791373][ T7593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 215.801763][ T7593] RIP: 0010:__alloc_pages_noprof+0xeff/0x25b0 [ 215.807989][ T7593] Code: 24 2c 00 00 00 00 89 cd 0f 84 8b f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 0e b3 fe ff e9 69 f9 ff ff c6 05 b2 63 16 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 9f a3 0c 00 8b 14 24 e9 [ 215.827736][ T7593] RSP: 0018:ffffc9001064f918 EFLAGS: 00010246 [ 215.833855][ T7593] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 215.841920][ T7593] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000040d40 [ 215.850072][ T7593] RBP: 0000000000000000 R08: 0000000000000006 R09: 00000000003fffff [ 215.858147][ T7593] R10: 00000000003fffff R11: 0000000000000004 R12: 000000000000000b [ 215.866682][ T7593] R13: 0000000000040d40 R14: 1ffff920020c9f37 R15: 00000000003fffff [ 215.875360][ T7593] FS: 00007ff4460516c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 215.877392][ T7719] netlink: 330 bytes leftover after parsing attributes in process `syz.2.415'. [ 215.884370][ T7593] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 215.900027][ T7593] CR2: 0000000020400000 CR3: 0000000060e62000 CR4: 00000000003526f0 [ 215.908095][ T7593] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 215.916111][ T7593] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 215.924176][ T7593] Call Trace: [ 215.927581][ T7593] [ 215.930558][ T7593] ? __warn+0xea/0x3c0 [ 215.934669][ T7593] ? __alloc_pages_noprof+0xeff/0x25b0 [ 215.940401][ T7593] ? report_bug+0x3c0/0x580 [ 215.944942][ T7593] ? handle_bug+0x54/0xa0 [ 215.949375][ T7593] ? exc_invalid_op+0x17/0x50 [ 215.954112][ T7593] ? asm_exc_invalid_op+0x1a/0x20 [ 215.959277][ T7593] ? __alloc_pages_noprof+0xeff/0x25b0 [ 215.965315][ T7593] ? find_held_lock+0x2d/0x110 [ 215.970763][ T7593] ? hlock_class+0x4e/0x130 [ 215.975315][ T7593] ? __lock_acquire+0x15a9/0x3c40 [ 215.980435][ T7593] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 215.986219][ T7593] ? handle_mm_fault+0x497/0xaa0 [ 215.991288][ T7593] ? find_held_lock+0x2d/0x110 [ 215.996112][ T7593] ___kmalloc_large_node+0x84/0x1b0 [ 216.001432][ T7593] __kmalloc_large_node_noprof+0x1c/0x70 [ 216.007206][ T7593] __kmalloc_noprof.cold+0xc/0x63 [ 216.012278][ T7593] ? __might_fault+0xe3/0x190 [ 216.017081][ T7593] ? tomoyo_write_control+0x267/0x13d0 [ 216.022587][ T7593] tomoyo_write_control+0x267/0x13d0 [ 216.028007][ T7593] ? rcu_is_watching+0x12/0xc0 [ 216.032817][ T7593] ? __pfx_tomoyo_write_control+0x10/0x10 [ 216.038625][ T7593] ? ksys_write+0x12b/0x250 [ 216.043173][ T7593] ? __pfx_tomoyo_write+0x10/0x10 [ 216.048342][ T7593] vfs_write+0x24c/0x1150 [ 216.052712][ T7593] ? __fget_files+0x1fc/0x3a0 [ 216.057467][ T7593] ? __pfx___mutex_lock+0x10/0x10 [ 216.062538][ T7593] ? __pfx_vfs_write+0x10/0x10 [ 216.067906][ T7593] ? __fget_files+0x206/0x3a0 [ 216.072638][ T7593] ksys_write+0x12b/0x250 [ 216.077667][ T7593] ? __pfx_ksys_write+0x10/0x10 [ 216.082576][ T7593] do_syscall_64+0xcd/0x250 [ 216.087163][ T7593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.093104][ T7593] RIP: 0033:0x7ff445185d29 [ 216.097604][ T7593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.117605][ T7593] RSP: 002b:00007ff446051038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 216.126081][ T7593] RAX: ffffffffffffffda RBX: 00007ff445376160 RCX: 00007ff445185d29 [ 216.134281][ T7593] RDX: 0000000003300000 RSI: 0000000020000040 RDI: 0000000000000003 [ 216.142371][ T7593] RBP: 00007ff445201a20 R08: 0000000000000000 R09: 0000000000000000 [ 216.150437][ T7593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.158481][ T7593] R13: 0000000000000000 R14: 00007ff445376160 R15: 00007ffe3906f168 [ 216.166503][ T7593] [ 216.170435][ T7593] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 216.177752][ T7593] CPU: 0 UID: 0 PID: 7593 Comm: syz.4.385 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 216.188369][ T7593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 216.198475][ T7593] Call Trace: [ 216.201754][ T7593] [ 216.204683][ T7593] dump_stack_lvl+0x3d/0x1f0 [ 216.209291][ T7593] panic+0x71d/0x800 [ 216.213205][ T7593] ? __pfx_panic+0x10/0x10 [ 216.217633][ T7593] ? show_trace_log_lvl+0x29d/0x3d0 [ 216.222858][ T7593] ? check_panic_on_warn+0x1f/0xb0 [ 216.227984][ T7593] ? __alloc_pages_noprof+0xeff/0x25b0 [ 216.233455][ T7593] check_panic_on_warn+0xab/0xb0 [ 216.238405][ T7593] __warn+0xf6/0x3c0 [ 216.242313][ T7593] ? __alloc_pages_noprof+0xeff/0x25b0 [ 216.247784][ T7593] report_bug+0x3c0/0x580 [ 216.252122][ T7593] handle_bug+0x54/0xa0 [ 216.256283][ T7593] exc_invalid_op+0x17/0x50 [ 216.260794][ T7593] asm_exc_invalid_op+0x1a/0x20 [ 216.265649][ T7593] RIP: 0010:__alloc_pages_noprof+0xeff/0x25b0 [ 216.271731][ T7593] Code: 24 2c 00 00 00 00 89 cd 0f 84 8b f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 0e b3 fe ff e9 69 f9 ff ff c6 05 b2 63 16 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 9f a3 0c 00 8b 14 24 e9 [ 216.291360][ T7593] RSP: 0018:ffffc9001064f918 EFLAGS: 00010246 [ 216.297445][ T7593] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 216.305420][ T7593] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000040d40 [ 216.313392][ T7593] RBP: 0000000000000000 R08: 0000000000000006 R09: 00000000003fffff [ 216.321366][ T7593] R10: 00000000003fffff R11: 0000000000000004 R12: 000000000000000b [ 216.329367][ T7593] R13: 0000000000040d40 R14: 1ffff920020c9f37 R15: 00000000003fffff [ 216.337359][ T7593] ? find_held_lock+0x2d/0x110 [ 216.342136][ T7593] ? hlock_class+0x4e/0x130 [ 216.346652][ T7593] ? __lock_acquire+0x15a9/0x3c40 [ 216.351696][ T7593] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 216.357439][ T7593] ? handle_mm_fault+0x497/0xaa0 [ 216.362392][ T7593] ? find_held_lock+0x2d/0x110 [ 216.367177][ T7593] ___kmalloc_large_node+0x84/0x1b0 [ 216.372382][ T7593] __kmalloc_large_node_noprof+0x1c/0x70 [ 216.378021][ T7593] __kmalloc_noprof.cold+0xc/0x63 [ 216.383055][ T7593] ? __might_fault+0xe3/0x190 [ 216.387747][ T7593] ? tomoyo_write_control+0x267/0x13d0 [ 216.393217][ T7593] tomoyo_write_control+0x267/0x13d0 [ 216.398517][ T7593] ? rcu_is_watching+0x12/0xc0 [ 216.403295][ T7593] ? __pfx_tomoyo_write_control+0x10/0x10 [ 216.409020][ T7593] ? ksys_write+0x12b/0x250 [ 216.413533][ T7593] ? __pfx_tomoyo_write+0x10/0x10 [ 216.418564][ T7593] vfs_write+0x24c/0x1150 [ 216.422900][ T7593] ? __fget_files+0x1fc/0x3a0 [ 216.427583][ T7593] ? __pfx___mutex_lock+0x10/0x10 [ 216.432614][ T7593] ? __pfx_vfs_write+0x10/0x10 [ 216.437390][ T7593] ? __fget_files+0x206/0x3a0 [ 216.442087][ T7593] ksys_write+0x12b/0x250 [ 216.446419][ T7593] ? __pfx_ksys_write+0x10/0x10 [ 216.451374][ T7593] do_syscall_64+0xcd/0x250 [ 216.455883][ T7593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.461789][ T7593] RIP: 0033:0x7ff445185d29 [ 216.466213][ T7593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.485918][ T7593] RSP: 002b:00007ff446051038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 216.494341][ T7593] RAX: ffffffffffffffda RBX: 00007ff445376160 RCX: 00007ff445185d29 [ 216.502318][ T7593] RDX: 0000000003300000 RSI: 0000000020000040 RDI: 0000000000000003 [ 216.510295][ T7593] RBP: 00007ff445201a20 R08: 0000000000000000 R09: 0000000000000000 [ 216.518264][ T7593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.526239][ T7593] R13: 0000000000000000 R14: 00007ff445376160 R15: 00007ffe3906f168 [ 216.534232][ T7593] [ 216.537489][ T7593] Kernel Offset: disabled [ 216.541847][ T7593] Rebooting in 86400 seconds..