last executing test programs: 16.786262173s ago: executing program 0 (id=446): mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x8, 0xb, 0x0, 0x9, 0xfffffffffffffffc, 0x83, 0x6, 0x2, 0x9, 0xffff, 0x4000000000000002, 0xd, 0x3, 0xfffffffffffffffe, 0x7, 0x1000000006]}, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x1e, 0x1, 0x0) getsockname$auto(r0, &(0x7f0000000000), &(0x7f0000000040)=0x3) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card1\x00', 0x2000, 0x0) mmap$auto(0x0, 0x1000020009, 0x1, 0xeb3, 0x3, 0x508) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) r2 = openat$auto_comedi_fops_comedi_fops(0xffffffffffffff9c, &(0x7f0000000480), 0xa000, 0x0) io_uring_register$auto(r2, 0x1ff, &(0x7f00000004c0)="47832e474f65776704dac0e260148c65c99858da172bed73394f84fb1748808e824e53e05911d4dc2c739a4e2addbdb80413eb17f1e2c7d211ad0f4fdcd25ea8032506666416445bff16d011474e806b78efee3e5cb38574bd6a1edc435dfeee24a8436e6760d022a8b1a45344f6fdd79a3f49ea9dba2ffb93a745f845ff64d295cc01783414cbcd6cd0edff82af0e481206f0da2ee973260da6cf123b68925cf8fa5bd384d74a6ada407d7a5b0087e6a57d8d32ed46a85af534b6694aee269b893aab94cd02704c058f", 0x9) fcntl$auto(0x0, 0x407, 0x0) syslog$auto(0x2, &(0x7f0000000000)='-#:\x00[\xda\xe2\xc3L\xd30{Q\xecvP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x102\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd26i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\xf2\xbe\xef\v\xf1d\xdd\x0e\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x033\x8f\xb9(\n/\xcdo\xc2', 0xcf) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), r3) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)={0x28, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 15.381890296s ago: executing program 0 (id=454): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) select$auto(0x2c, &(0x7f0000000100)={[0x2, 0x1000000000000, 0xfffffffffffffff7, 0x208, 0x400, 0x2, 0x6, 0x7fffffffffffffff, 0x3, 0x5, 0x7ff, 0x899b, 0x400, 0x9, 0x5, 0x4000]}, 0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x5865) 14.355098145s ago: executing program 0 (id=459): futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x80000001, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x4, 0x1, 0x400, 0x7, 0x1005, 0x7, 0x7, [0x200, 0x2e9, 0x8], {0x0, 0x1, 0x5, 0x7, 0x5, 0x5, 0x1, 0xfffffffc, 0x4}, {0x0, 0x1000fff, 0xffff7fff, 0x2, 0xa, 0x7, 0x3, 0x0, 0x3}}) clone$auto(0x200, 0xff, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x10000f400) 13.657886433s ago: executing program 0 (id=461): pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\r\xaa\x1c\x03\x00\x00\x00c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xdd\xac\x00\x00\x00\x00\x00\f\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x15\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\xff\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x500000000000) 13.227839433s ago: executing program 0 (id=465): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x940, 0x1ffe0, 0x8003, 0x6, 0x6, 0x7, 0x5, 0x2, 0x9, 0x6, 0x9, 0x2, 0x3, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000]}, 0x1fe, 0x7) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = gettid() kill$auto(r4, 0x11) shmctl$auto(0x0, 0x7, &(0x7f00000004c0)={{0xc48d, 0xffffffffffffffff, 0xee01, 0x0, 0x1000, 0xfffffffc, 0x401}, 0x7, 0x9, 0x8a2, 0x4, 0x7, 0x8, 0x4b6, 0x0, &(0x7f00000003c0)="a141eb18ca24e7334edaf4d8a64622e4f7b63d9eb478785a9e6b97c1649f254dd52538984641113879c9c5fca46f8c3429ca8784c95c9547008ec22888418a313f99cdacb7fdcf7e62157a3811311a34318e4172ec910114f266d874a64df1a8142bfabb17", &(0x7f0000000440)="71c9e6db3f6ebb2c6e3a12eaa8e2f9556cce6dc11b8a68fa2d006e490860c6e8207e46f79358e9a260af4fa913d7f3d7f8cf9a38cfe3f9d37c69ab57e62f54af85d28a29c04dccef7be8fb0ce1a39560"}) sendmsg$auto_NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0xd4, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_SEC_DEVKEY={0xb8, 0x2f, 0x0, 0x1, [@nested={0xb0, 0x11a, 0x0, 0x1, [@nested={0x4, 0x59}, @typed={0xc, 0x12, 0x0, 0x0, @u64=0x220cd29e}, @generic="f1338daf50c54d9c1d805bb188dc34f1316649eb274d72f80020193bb5948c01c375c12d93feac9600588edfc1380df52c8c586a7f386b25c43ec9253c4c664c5e0d6040793d55f58e829f325aea16c6b35806d8653d2818b3477f022910c970325e15eaa03072ee25781e4b119fb036bbe9638592c33ba804dd7a77bb89250024be5db9", @nested={0x4, 0x11c}, @typed={0xc, 0x1d, 0x0, 0x0, @u64=0xfffffffffffffff7}, @typed={0x8, 0xe8, 0x0, 0x0, @uid=r5}]}, @nested={0x4, 0xc3, 0x0, 0x1, [@generic]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000840}, 0x20004810) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r7 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_GET_TXSC(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000003f00)={0x24, r7, 0x186f202170196f7b, 0x70bd26, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0xd6, 0x0, 0x1, [@typed={0x8, 0x35, 0x0, 0x0, @fd}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r8 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0\x00', 0x20000, 0x0) ioctl$auto_mtd_fops_mtdchar(r8, 0x8, &(0x7f0000000040)="4b90c6cd0d9f3465871599b9df38ca0fc4bdc9fc2469a6ac32c8eb4a346dff2727b89cb45166fed628adc6e1dbfd0ac9fec582810ee058e37baac7d301466a7edc5326cf5105c3d742e053a43d59d8832b13397541374c1753f3455627964eff5aa42b23e36f2faedf77f4f8e72b0fdaedd2b4467b2770e03ffcc5fc8e2409c58ebe8d4e5e587b0c952f499934ba1b2f0b23c3cb20e713ad6b0cc3c6bddeb7c125140520649d423bf189000ac62caf067fea198a47321819c4ab3a26f71b410b") sendmsg$auto_BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140000e4) 12.53735411s ago: executing program 0 (id=470): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) r0 = socket(0x2a, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/security/tomoyo/manager\x00', 0x14b942, 0x0) write$auto_tomoyo_operations_securityfs_if(r1, 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffdef) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000002d, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r0) mbind$auto(0x3, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r2 = gettid() connect$auto(0xffffffffffffffff, 0x0, 0x55) mmap$auto(0x0, 0x5, 0x3, 0x16, 0x3, 0x8000) sendfile$auto(0x6, 0xffffffffffffffff, 0x0, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0x20200, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = open(&(0x7f0000000200)='./cgroup\x00', 0x400, 0x23) fchdir$auto(r3) mkdir$auto(&(0x7f0000000140)='MAC80211_HWSIM\x00', 0x1) rmdir$auto(&(0x7f0000000340)='MAC80211_HWSIM\x00') process_vm_readv$auto(r2, &(0x7f0000000040)={0x0, 0x8}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0) 7.030914312s ago: executing program 3 (id=499): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x3, 0xa) (async) futex_waitv$auto(&(0x7f0000000000)={0xffffffffffffffff, 0xf4, 0x1, 0x4}, 0x77, 0x0, 0x0, 0x42bd) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async) mknod$auto(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x1001, 0x4) (async) open(&(0x7f0000000000)='./file1\x00', 0xe00, 0x0) (async) mmap$auto(0x0, 0x8, 0xe2, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x2, 0x1, 0x0) (async) socket(0x1e, 0x1, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r1) sendmsg$auto_NFSD_CMD_VERSION_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) (async) recvmsg$auto(0x4, 0x0, 0x33c) (async) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) (async) timerfd_gettime$auto(0x9, 0x0) (async, rerun: 64) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) r3 = openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001c00), 0x60000, 0x0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) move_pages$auto(0x0, 0xd0, 0x0, &(0x7f0000001140), 0x0, 0x2) read$auto_tomoyo_self_operations_securityfs_if(r3, &(0x7f0000001c40)=""/105, 0x69) kill$auto(r0, 0x1) socket(0x2000000000000021, 0x2, 0x10000000000002) 6.263504815s ago: executing program 2 (id=503): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x26, 0x0, 0x8002) socket(0x1, 0x2, 0x0) socket(0x8, 0xaabfd34ed699aa17, 0x3) madvise$auto(0x6, 0x7, 0x82) mmap$auto(0x0, 0x8, 0xb58, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x6, 0x40000000029, 0x42, 0xfffffffffffffffe, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x4040000) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) timer_create$auto(0x400007, 0x0, 0x0) socket(0x2a, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080), 0x6b) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(r0, 0x402, 0x5) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x41) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffff, 0x8000) sysfs$auto(0x2, 0x10000000000002d, 0x0) mbind$auto(0x0, 0xf901, 0x100000000, 0x0, 0x6, 0x5) gettid() connect$auto(r1, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x3, 0x2df, 0x598, 0x8000000000000747) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000040)={0x0, 0x400000000000fdef}, 0x1) read$auto_fb_fops_fb_chrdev(0xffffffffffffffff, &(0x7f00000000c0)=""/240, 0xf0) mmap$auto(0x8000, 0x20020009, 0x577, 0xeb0, 0xe, 0x8000) open(&(0x7f00000001c0)='./cgroup\x00', 0x600, 0xea) 5.277638152s ago: executing program 3 (id=505): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fcntl$auto(0x4, 0x4, 0xa553) shutdown$auto(0x5, 0x1) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffefffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) write$auto_snd_pcm_oss_f_reg_pcm_oss(r0, &(0x7f0000000280)="c2", 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x81, 0xffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x810000000000003a, 0x0) fsopen$auto(0x0, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x3, 0x4, 0x4000000000dc, 0x40eb2, 0xa1c, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x53, 0x9) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 5.215008979s ago: executing program 1 (id=506): socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x3) setsockopt$auto(0x4, 0x2000000000000116, 0x80, 0xfffffffffffffffd, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_submit$auto(0x3, 0x1ff, &(0x7f0000000380)=&(0x7f0000000300)={0xeb, 0x0, 0xd, 0x4, 0xff, 0xffffffffffffffff, 0x8, 0xfffffffffffff970, 0x6, 0x0, 0x4, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="7c400082", @ANYRES16=r4, @ANYBLOB="00022bbd7000fcdbdf250f000000040002000800010009000000080003000600000049001900d6abf8327f97257ef5ff152a270b1f98a0c058fe4c4913159f11c86950dd5cfb22aed85a9847e2ea010aa089b4fae94e54c33970498614432d729fdbead40bf7fa2eba9c4a00000008000e0008000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$auto_NFC_CMD_GET_SE(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0xe4, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x7f}, @NFC_ATTR_DEVICE_NAME={0x15, 0x2, '/deS/v4l-subdev6\x00'}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0xb}, @NFC_ATTR_VENDOR_DATA={0x9e, 0x1f, "c09c42071f1089dbe12237e262f6f44fc25700e6e32de4b097ccfd4a1cd3f129859b7f11718ba0dcbcad6d8316fb1e874a8e916de303b4844c1529078e4485d9b24bf8f117b983bdb5201cda110f72101b5b7e8bb605832924b4803592c41139afdd61c947f201b2385ca9e02b82f95c6ed73cc98f4ce722abc79bfec56ac94767c0858b0825f023f7e91af95bf1e1d360d193fd501f8b3aa8d0"}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$auto_NFC_CMD_VENDOR(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x100}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r5 = getpid() timer_create$auto(0x3, &(0x7f0000000080)={@sival_ptr=0x0, 0x1, 0x4, @_tid=r5}, &(0x7f0000000280)=0x6) socket(0x11, 0x80003, 0x300) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x9, 0xffffffffffffffff, [0x7f, 0x9, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x48b9d2fe, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0xfc, 0x6, 0x0, 0x0, 0xf89, 0x9, 0x837, 0x8}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) r7 = socket(0x10, 0x2, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) acct$auto(&(0x7f0000000000)='/]@-((\x00') sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_SMC_NETLINK_ADD_UEID(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffedf, &(0x7f0000000100)={&(0x7f0000000480)={0x120, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SMC_NLA_EID_TABLE_UNSPEC={0xb, 0x0, "42ed216be88dfa"}, @SMC_NLA_EID_TABLE_ENTRY={0x0, 0x1, '}/$'}, @SMC_NLA_EID_TABLE_ENTRY={0x8, 0x1, '%-)^\xc9\x9e\x16\a^8\xfe\x94\xc7Q\r\xde\xf8Z\xd4-\xa1\xd8GM\xe6\xdfj\x12\x9b\xb7lGkp\xfb\x1eY\x001\xf6nd}\xbb*\xd8\xb2\x99#\x8a\x1d_\x19$\xf8\x8e\x8c\xd9;\xf2`\b\f\x9b$\xc6\x8e\xc3\xa3\xd3g\x91\xa7\xf2\xc5t?;C\xfe\xc4\xff\x84\x7fM{\xb3\xfb\xaf \x7f\xf9(z^n\x15\xd7\x1d\xea\xbf\xa8Q\x80\x87`\x88[\xd1;f\x1e\xb5\b\x03\xdfhAO\x05L\"\xe8\xe7\xef\x00\xc5\x1f\x88\xd8|\x83\b\xa2lo\a\xa7-\xe6\x87D!q~\x9d\xee\xe8uL\xd0\x16`\x9eo\v\xc36T'}]}, 0x120}, 0x1, 0x0, 0x0, 0x880}, 0x400c005) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) 4.796862147s ago: executing program 2 (id=507): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') madvise$auto(0x0, 0x7fffffffffffffff, 0xa) fanotify_init$auto(0x602, 0x1) prctl$auto(0x0, 0x1, 0xfffffffffffffffd, 0x800, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) open(&(0x7f0000000080)='./file0\x00', 0xeee00, 0x31) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x3, 0x8000) write$auto(0x3, 0x0, 0x100082) prctl$auto(0x2, 0x2, 0x2008, 0x4000000c, 0x80001) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setns(0xffffffffffffffff, 0x0) unshare$auto(0x40000080) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) socket(0x2, 0x5, 0x0) fcntl$auto(0x0, 0x407, 0x100000) bpf$auto(0x5, 0x0, 0x7) r0 = geteuid() setreuid$auto(r0, 0x0) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x10001, 0x32d4, 0x200, 0x3, 0x0, 0xee00, 0x0, 0x4, 0x98cb, 0xff, 0x6, 0x8, 0x6, 0x7fffffffffffffff, 0xb4, 0x6, 0x4d}, 0x4) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/virtual/net/rose0/flags\x00', 0x2a302, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000440)=""/4111, 0x100f) r3 = getuid() setresuid$auto(r0, r1, r3) mprotect$auto(0x1ffff000, 0x8000000000002001, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 4.57362235s ago: executing program 1 (id=508): acct$auto(0x0) connect$auto(0x3, 0x0, 0x55) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x1, 0x0) r3 = syz_clone3(&(0x7f0000000340)={0x40400, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x20}, &(0x7f0000000180)=""/233, 0xe9, &(0x7f0000000280)=""/96, &(0x7f0000000300)=[0xffffffffffffffff], 0x1}, 0x58) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x2b4, r1, 0x2a5a69aacb25fc0d, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_COORDINATOR={0x297, 0x1e, 0x0, 0x1, [@generic="ef17d01ffb05bfa5ab89035f9d73dbdce02139f3bcd3467ba85276b134806aae9a8206ca45ad329a51d962ec5549d36aa51edfcc669ff48ca11a861f0d85515bfe19c8438151e4cdf5ec6ccfe9dac8ec52f77eafc65c358a1cc6ae6e18fa2b7c18520241d3a651865cb74ca4b9cc89c2f521ef4c02492a3af92464638585eb3b1ee0101dde97401a1af48ece13f40e4703f61bdf86378a409478b71c3dc58fbbee5bed256ea1e393c1e7314b4244e0573dd5b9124724a866b369986d89e3cbb312d7b560969ef0c8555e2b1edee1f3a5e530114457c9b705ae85a355a133fad8", @generic="f1b14831b9e49436c67810a1657bc85118ccabcbf3c776f19c61c6c6283f98bd1ab90f8e57cc352e0acd5b85d6aa86c157097aef3cc6d9e61b507dbec89e4f206bed52075c68f3f5e52f457ddad40adc03451baf30bc051e63c8a665b39ff9f1167851ffdb363e9c5787639c9005f3f800647f29af1b131b8048b7fddecc79e43a8ad246a75c968f68df9891a1805afc0886badffcb6802db31b66c9d56e068109466790a1c721d577a3a74176", @generic="ae7eb0ce6af63c736a0d4d117edf447d0a2c585cd28bf3393f50b7526fe9bb74580240c05dda9d6cee4237c74c60b40f49f2625fe4b150c8220781b55074b764b2bd80461d1d127d5a6d68c2134e92414a393f467a84820bf45c4930277cb79436f4d1d4e0826f98ff6f22684ac2dd501e3e", @typed={0x8, 0xe6, 0x0, 0x0, @fd=r2}, @typed={0x8, 0xf3, 0x0, 0x0, @pid=r3}, @nested={0x74, 0xd7, 0x0, 0x1, [@typed={0x8, 0xea, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3b}}, @nested={0x4, 0x144}, @generic, @typed={0x8, 0x123, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x8, 0x8b, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0xbb}, @typed={0x4d, 0x126, 0x0, 0x0, @binary="b9eb041e826add03d8d86596c8b3bbdb43507aa6207cf09843e7b7b49fd182f6acf21b5790097340dca5b86cbbe57771f223b7a077737c22ff11d0dfaad2176b6e287e8cdc7dfdd11f"}]}, @typed={0x8, 0xfb, 0x0, 0x0, @fd=r5}, @typed={0x8, 0xd2, 0x0, 0x0, @fd=r6}]}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x9}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x48011}, 0x24000054) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) msync$auto(0x2000000000000, 0x2000000005, 0x6) 3.593848318s ago: executing program 2 (id=509): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) epoll_ctl$auto(0x1, 0x768, 0x1, &(0x7f0000000000)={0x8ea, 0x5}) mmap$auto(0x6, 0x8000404, 0x4000000000df, 0x60eb2, 0x4, 0x4) bpf$auto(0x0, &(0x7f0000000780)=@token_create={0xf44, r0}, 0xa3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioperm$auto(0x4, 0xbc6, 0x81) mmap$auto(0x2, 0x7fff, 0xd8, 0xebb, 0x8, 0x0) getsockopt$auto(0x100000006, 0x1, 0x33, 0xfffffffffffffffe, 0x0) ioctl$auto(0xc9, 0x3, 0x4000000005c8d) write$auto(0x3, 0x0, 0x3f00) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x2, 0x7fff) close_range$auto(0x2, 0xffffffffffffffff, 0x1000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x5, 0x84) io_uring_setup$auto(0x3, 0x0) io_uring_register$auto(0x2, 0x2, &(0x7f0000000040), 0x86) io_uring_register$auto(0x2, 0x6, &(0x7f0000000180), 0x1) getrandom$auto(0x0, 0x6100000, 0x3) msgrcv$auto(0x9, &(0x7f0000000000)={0x80000000, 0xff}, 0xd647, 0x4, 0x2) madvise$auto(0x0, 0xf663, 0x15) pipe2$auto(0x0, 0x80) migrate_pages$auto(0x0, 0x101, 0x0, &(0x7f0000000140)=0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) mmap$auto(0x93, 0x9, 0x9, 0x14, 0xfffffffd, 0xfffffffffffffffe) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x4840, 0x0) write$auto_fuse_dev_operations_fuse_i(r1, &(0x7f00000000c0)="c0276612dae1cb9ab785c1f81ecf9778e4247568863c6e215a52a46d0311d64aae121e93e722486d05240b2e0a20950a9e3e76cc50c6d32bbfbbe39b76940d86907f9d6e215ae365", 0x48) ioctl$auto_FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0) 3.383530932s ago: executing program 1 (id=510): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000280)={0x4, 0x3, 0xa, @state_change={0xc, 0x6, 0x8}}) 3.011738393s ago: executing program 1 (id=511): pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\r\xaa\x1c\x03\x00\x00\x00c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xdd\xac\x00\x00\x00\x00\x00`\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x15\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\xff\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x500000000000) 2.665841944s ago: executing program 2 (id=512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r0) openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim1/ports/0/udp_ports_table1\x00', 0x82, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x5, 0x25dfdbfb, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x0, 0x200000000000000, 0x44004811}, 0x40000c0) 2.53319473s ago: executing program 1 (id=513): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioperm$auto(0x7, 0x6, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) kcmp$auto(0x400, 0x6, 0x1, 0x4, 0x1) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioperm$auto(0xfb, 0x5, 0xe) mmap$auto(0x0, 0x20007, 0x80000000000000de, 0x12, 0x0, 0x8000) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x200, 0x0) socket(0x2, 0x2, 0x88) bpf$auto(0x6a, &(0x7f0000000000)=@bpf_attr_3={0x8, 0xffffffef, 0x18c, 0x6a, 0x0, 0x8, 0x3, 0x9, 0xfffffff8, "63acf0e05b2d33ebc15774e816ef77cf", 0x0, 0x541, 0x4, 0x7, 0x3, 0x1008, 0x4, 0x2, 0xe, 0x5, @attach_btf_obj_fd=0x3, 0x166, 0x7ff, 0x6, 0x5, 0x48000000, 0xa7c2}, 0x7) connect$auto(0x3, &(0x7f0000000000), 0x55) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r2 = socket(0x2, 0x801, 0x106) connect$auto(0x3, &(0x7f0000000240), 0x6) io_uring_setup$auto(0x6, 0x0) getsockopt$auto(r2, 0x11c, 0x1, 0x0, 0x0) ioctl$auto(r1, 0x900064bb, 0xc35) mmap$auto(0x3, 0x6, 0xffff0000000000, 0x12, 0x7, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="14005e00", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf257e000000"], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'}) socket$nl_generic(0x10, 0x3, 0x10) getrandom$auto(0x0, 0x6000000, 0x3) r5 = socket(0x840000000002, 0x3, 0xff) setsockopt$auto(r5, 0x0, 0x4, 0x0, 0xcc) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) 2.433682221s ago: executing program 3 (id=514): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010b27bd70002cfa539f1183d46a08000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x98010000, 0x1}, 0x4000080) 2.353862446s ago: executing program 2 (id=515): futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x80000001, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x4, 0x1, 0x400, 0x7, 0x1005, 0x7, 0x7, [0x200, 0x2e9, 0x8], {0x0, 0x1, 0x5, 0x7, 0x5, 0x5, 0x1, 0xfffffffc, 0x4}, {0x0, 0x1000fff, 0xffff7fff, 0x2, 0xa, 0x7, 0x3, 0x0, 0x3}}) clone$auto(0x200, 0xff, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x100080000) 2.010894705s ago: executing program 3 (id=516): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x26, 0x0, 0x8002) socket(0x1, 0x2, 0x0) socket(0x8, 0xaabfd34ed699aa17, 0x3) madvise$auto(0x6, 0x7, 0x82) mmap$auto(0x0, 0x8, 0xb58, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x6, 0x40000000029, 0x42, 0xfffffffffffffffe, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x4040000) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) timer_create$auto(0x400007, 0x0, 0x0) socket(0x2a, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080), 0x6b) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(r0, 0x402, 0x5) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x41) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffff, 0x8000) sysfs$auto(0x2, 0x10000000000002d, 0x0) mbind$auto(0x0, 0xf901, 0x100000000, 0x0, 0x6, 0x5) gettid() connect$auto(r1, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x3, 0x2df, 0x598, 0x8000000000000747) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000040)={0x0, 0x400000000000fdef}, 0x1) read$auto_fb_fops_fb_chrdev(0xffffffffffffffff, &(0x7f00000000c0)=""/240, 0xf0) mmap$auto(0x8000, 0x20020009, 0x577, 0xeb0, 0xe, 0x8000) open(&(0x7f00000001c0)='./cgroup\x00', 0x600, 0xea) 874.699575ms ago: executing program 2 (id=517): r0 = socket$nl_generic(0x10, 0x3, 0x10) vmsplice$auto(0x2, &(0x7f00000000c0)={&(0x7f0000000000), 0x7ff}, 0x8000000000000001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x6, 0x0) pipe$auto(0x0) r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000180), r1) sendmsg$auto_SMC_NETLINK_GET_LGR_SMCD(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xec, r2, 0x8, 0x70bd25, 0x25dfdbfe, {}, "3a3b49f5eac66f341e48e9d82080fbe19e3618bf8213391d9488051489897b91c43d1d134cd9017734d7ed5fa9a38a716c2c6703712e132183d5c19a778fb79da581e147cd5a31b8b6b60c9751d5c9b821af70c601387533c8e6c71c01a06d4fbfa913d573cacb44529a00112b1fa06e2040146afdf1ac5139d0005dc8910eb64db37cbc1623f1e84d84870bd3f28f3bae2b28f902a6cddfc5d788e2f34463421437293a386ee390bbf1fc3b8051a4698aced3c338cf698ae1ff46937ad0a140e466bbd2ed85087e1c2654092d3a5c06b8b2c550f5b0"}, 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x4000) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7, 0x8}, 0x80, 0x400400) setsockopt$auto(r3, 0x113, 0x1, 0x0, 0x81) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) connect$auto(0x3, 0x0, 0x55) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567) setsockopt$auto(0x400000000000003, 0x29, 0xd3, 0x0, 0x567) socket(0xa, 0x3, 0x73) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r1) sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, 0xff}]}, 0x28}}, 0x2004c054) 329.82735ms ago: executing program 1 (id=518): r0 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x24, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x6000000000000000, 0x0, 0x4000}, 0x140000e4) 207.642913ms ago: executing program 3 (id=519): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000280)={0x4, 0x3, 0xa, @state_change={0xc, 0x6, 0x8}}) 0s ago: executing program 3 (id=520): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}]}, 0x30}, 0x1, 0x0, 0x7000000, 0x4000004}, 0x20008800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.98' (ED25519) to the list of known hosts. [ 65.195394][ T5815] cgroup: Unknown subsys name 'net' [ 65.287978][ T5815] cgroup: Unknown subsys name 'cpuset' [ 65.296195][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.574217][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.344431][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.353590][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.361941][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.369885][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.377727][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.387064][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.391381][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.395264][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.402826][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.408921][ T5832] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.416838][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.422508][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.429929][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.437013][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.445427][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.460761][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.463795][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.475771][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.476510][ T5832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.483080][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.490684][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.512388][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.529022][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.536425][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.863396][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 68.889373][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 68.975705][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 69.005883][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 69.041448][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.049183][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.056718][ T5824] bridge_slave_0: entered allmulticast mode [ 69.063369][ T5824] bridge_slave_0: entered promiscuous mode [ 69.093934][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.101199][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.108515][ T5824] bridge_slave_1: entered allmulticast mode [ 69.115465][ T5824] bridge_slave_1: entered promiscuous mode [ 69.146400][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.153508][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.160797][ T5833] bridge_slave_0: entered allmulticast mode [ 69.167957][ T5833] bridge_slave_0: entered promiscuous mode [ 69.175557][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.182664][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.190172][ T5833] bridge_slave_1: entered allmulticast mode [ 69.198010][ T5833] bridge_slave_1: entered promiscuous mode [ 69.263548][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.275872][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.309087][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.321081][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.351133][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.358428][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.365756][ T5825] bridge_slave_0: entered allmulticast mode [ 69.372386][ T5825] bridge_slave_0: entered promiscuous mode [ 69.398685][ T5824] team0: Port device team_slave_0 added [ 69.406948][ T5824] team0: Port device team_slave_1 added [ 69.419691][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.429505][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.437570][ T5825] bridge_slave_1: entered allmulticast mode [ 69.444129][ T5825] bridge_slave_1: entered promiscuous mode [ 69.456243][ T5833] team0: Port device team_slave_0 added [ 69.478564][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.485685][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.492804][ T5830] bridge_slave_0: entered allmulticast mode [ 69.499660][ T5830] bridge_slave_0: entered promiscuous mode [ 69.523211][ T5833] team0: Port device team_slave_1 added [ 69.540281][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.547371][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.573704][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.587115][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.594097][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.620156][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.631491][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.638864][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.646066][ T5830] bridge_slave_1: entered allmulticast mode [ 69.652652][ T5830] bridge_slave_1: entered promiscuous mode [ 69.661095][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.672761][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.719304][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.726854][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.753076][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.765320][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.772301][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.799009][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.822248][ T5825] team0: Port device team_slave_0 added [ 69.841383][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.863036][ T5825] team0: Port device team_slave_1 added [ 69.877910][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.913908][ T5824] hsr_slave_0: entered promiscuous mode [ 69.920978][ T5824] hsr_slave_1: entered promiscuous mode [ 69.944742][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.951727][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.978103][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.002111][ T5833] hsr_slave_0: entered promiscuous mode [ 70.009045][ T5833] hsr_slave_1: entered promiscuous mode [ 70.015601][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.023425][ T5833] Cannot create hsr debugfs directory [ 70.032889][ T5830] team0: Port device team_slave_0 added [ 70.039352][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.046962][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.073167][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.098426][ T5830] team0: Port device team_slave_1 added [ 70.159692][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.167276][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.193463][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.230274][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.237425][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.264210][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.280062][ T5825] hsr_slave_0: entered promiscuous mode [ 70.286807][ T5825] hsr_slave_1: entered promiscuous mode [ 70.292980][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.300796][ T5825] Cannot create hsr debugfs directory [ 70.406391][ T5830] hsr_slave_0: entered promiscuous mode [ 70.412627][ T5830] hsr_slave_1: entered promiscuous mode [ 70.418997][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.426924][ T5830] Cannot create hsr debugfs directory [ 70.485791][ T5836] Bluetooth: hci0: command tx timeout [ 70.523270][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.564875][ T5835] Bluetooth: hci1: command tx timeout [ 70.565061][ T54] Bluetooth: hci2: command tx timeout [ 70.570607][ T5836] Bluetooth: hci3: command tx timeout [ 70.582642][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.600820][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.620532][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.680417][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.692339][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.705422][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.728896][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.773418][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.797931][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.821694][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.834359][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.890892][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.917953][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.930306][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.940002][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.993795][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.033429][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.077326][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.107965][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.119732][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.127086][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.154490][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.181862][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.189007][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.198865][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.205992][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.233345][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.242526][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.249663][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.299853][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.307086][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.324003][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.339792][ T174] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.346889][ T174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.452370][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.481914][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.489101][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.508242][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.515427][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.670735][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.691550][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.701868][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.753848][ T5833] veth0_vlan: entered promiscuous mode [ 71.772845][ T5833] veth1_vlan: entered promiscuous mode [ 71.828431][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.864099][ T5833] veth0_macvtap: entered promiscuous mode [ 71.891862][ T5833] veth1_macvtap: entered promiscuous mode [ 71.918237][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.942447][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.966425][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.973774][ T5824] veth0_vlan: entered promiscuous mode [ 71.998033][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.007879][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.017023][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.027392][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.048407][ T5824] veth1_vlan: entered promiscuous mode [ 72.075536][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.147661][ T5825] veth0_vlan: entered promiscuous mode [ 72.157854][ T5824] veth0_macvtap: entered promiscuous mode [ 72.206382][ T5824] veth1_macvtap: entered promiscuous mode [ 72.221316][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.223674][ T5825] veth1_vlan: entered promiscuous mode [ 72.234238][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.252813][ T5830] veth0_vlan: entered promiscuous mode [ 72.286197][ T5830] veth1_vlan: entered promiscuous mode [ 72.296784][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.307853][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.319430][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.337613][ T5874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.347687][ T5825] veth0_macvtap: entered promiscuous mode [ 72.358968][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.365183][ T5874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.370206][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.387765][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.418120][ T5824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.427162][ T5824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.436984][ T5824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.445890][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.460685][ T5830] veth0_macvtap: entered promiscuous mode [ 72.474153][ T5825] veth1_macvtap: entered promiscuous mode [ 72.488606][ T5830] veth1_macvtap: entered promiscuous mode [ 72.517507][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.520730][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.544462][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.555395][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.568555][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.571482][ T5836] Bluetooth: hci0: command tx timeout [ 72.580020][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.617821][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.628490][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.640347][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.651876][ T5836] Bluetooth: hci3: command tx timeout [ 72.653136][ T54] Bluetooth: hci1: command tx timeout [ 72.657436][ T5835] Bluetooth: hci2: command tx timeout [ 72.658409][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.680047][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.690822][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.703205][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.720740][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.744863][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.755041][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.768114][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.786134][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.814073][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.823614][ T5825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.832439][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.843102][ T5825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.857014][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.867593][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.878527][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.891805][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.901752][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.912260][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.924068][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.937909][ T5874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.951349][ T5874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.983475][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.992949][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.001889][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.010685][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.027803][ T5874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.039389][ T5874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.169843][ T5874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.179592][ T5874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.241589][ T5874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.249776][ T5874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.280473][ T5874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.289679][ T5874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.316189][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.340495][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.955028][ T5908] svc: failed to register nfsdv3 RPC service (errno 111). [ 73.976927][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 73.992888][ T5908] svc: failed to register nfsaclv3 RPC service (errno 111). [ 74.028012][ T5911] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.427309][ T5917] device-mapper: ioctl: only supply one of name or uuid, cmd(17) [ 74.540525][ T8] cfg80211: failed to load regulatory.db [ 74.645605][ T54] Bluetooth: hci0: command tx timeout [ 74.727480][ T54] Bluetooth: hci3: command tx timeout [ 74.737210][ T54] Bluetooth: hci1: command tx timeout [ 74.742687][ T54] Bluetooth: hci2: command tx timeout [ 75.302626][ T5939] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17'. [ 75.561348][ T5951] svc: failed to register nfsdv3 RPC service (errno 111). [ 75.574178][ T5951] svc: failed to register nfsaclv3 RPC service (errno 111). [ 75.845137][ T5957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.25'. [ 75.853994][ T5957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.940607][ T5959] netlink: 'syz.3.26': attribute type 1 has an invalid length. [ 75.959145][ T5957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.007857][ T5957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.050347][ T5957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.252812][ T5970] netlink: 28 bytes leftover after parsing attributes in process `syz.3.29'. [ 76.281217][ T5960] Zero length message leads to an empty skb [ 76.347858][ T5970] hsr_slave_0 (unregistering): left promiscuous mode [ 76.734462][ T5836] Bluetooth: hci0: command tx timeout [ 76.806521][ T5836] Bluetooth: hci2: command tx timeout [ 76.812039][ T5836] Bluetooth: hci1: command tx timeout [ 76.817715][ T5836] Bluetooth: hci3: command tx timeout [ 76.880929][ T5985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.33'. [ 77.553339][ T5992] svc: failed to register nfsdv3 RPC service (errno 111). [ 77.616230][ T5992] svc: failed to register nfsaclv3 RPC service (errno 111). [ 78.194495][ T6006] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 78.259637][ T6006] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 79.224247][ T6029] netlink: 'syz.2.49': attribute type 4 has an invalid length. [ 79.259397][ T6031] FAULT_INJECTION: forcing a failure. [ 79.259397][ T6031] name failslab, interval 1, probability 0, space 0, times 1 [ 79.287382][ T6031] CPU: 0 UID: 0 PID: 6031 Comm: syz.1.50 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 79.297939][ T6031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 79.308014][ T6031] Call Trace: [ 79.311379][ T6031] [ 79.314311][ T6031] dump_stack_lvl+0x16c/0x1f0 [ 79.319005][ T6031] should_fail_ex+0x497/0x5b0 [ 79.323691][ T6031] ? fs_reclaim_acquire+0xae/0x150 [ 79.328810][ T6031] should_failslab+0xc2/0x120 [ 79.333501][ T6031] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 79.339318][ T6031] ? __pfx___might_resched+0x10/0x10 [ 79.344612][ T6031] ? alloc_vmap_area+0x636/0x2a70 [ 79.349655][ T6031] alloc_vmap_area+0x636/0x2a70 [ 79.354520][ T6031] ? __pfx_alloc_vmap_area+0x10/0x10 [ 79.359816][ T6031] __get_vm_area_node+0x19e/0x2f0 [ 79.364854][ T6031] __vmalloc_node_range_noprof+0x26a/0x1530 [ 79.370759][ T6031] ? kernel_clone+0xfd/0x960 [ 79.375358][ T6031] ? mod_objcg_state+0x4c4/0x8d0 [ 79.380303][ T6031] ? lockdep_hardirqs_on+0x7c/0x110 [ 79.385507][ T6031] ? kernel_clone+0xfd/0x960 [ 79.390106][ T6031] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 79.396456][ T6031] ? rcu_is_watching+0x12/0xc0 [ 79.401234][ T6031] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 79.406615][ T6031] ? kmem_cache_alloc_node_noprof+0x219/0x3b0 [ 79.412689][ T6031] ? copy_process+0x49c/0x6f20 [ 79.417468][ T6031] ? kernel_clone+0xfd/0x960 [ 79.422066][ T6031] copy_process+0x29b3/0x6f20 [ 79.426749][ T6031] ? kernel_clone+0xfd/0x960 [ 79.431346][ T6031] ? get_pid_task+0xfc/0x250 [ 79.435948][ T6031] ? __pfx_lock_release+0x10/0x10 [ 79.440986][ T6031] ? trace_lock_acquire+0x14e/0x1f0 [ 79.446199][ T6031] ? __pfx_copy_process+0x10/0x10 [ 79.451232][ T6031] ? find_held_lock+0x2d/0x110 [ 79.456009][ T6031] kernel_clone+0xfd/0x960 [ 79.460433][ T6031] ? __pfx_kernel_clone+0x10/0x10 [ 79.465478][ T6031] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 79.471473][ T6031] ? 0xffffffff81000000 [ 79.475630][ T6031] __do_sys_clone+0xba/0x100 [ 79.480225][ T6031] ? __pfx___do_sys_clone+0x10/0x10 [ 79.485432][ T6031] ? 0xffffffff81000000 [ 79.489600][ T6031] do_syscall_64+0xcd/0x250 [ 79.494112][ T6031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.500012][ T6031] RIP: 0033:0x7fbb6b785d19 [ 79.504431][ T6031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.524058][ T6031] RSP: 002b:00007fbb6c669038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 79.532475][ T6031] RAX: ffffffffffffffda RBX: 00007fbb6b975fa0 RCX: 00007fbb6b785d19 [ 79.540457][ T6031] RDX: 9999999999999999 RSI: 00000000000000ff RDI: 0000000000000200 [ 79.548438][ T6031] RBP: 00007fbb6c669090 R08: 0000000100000000 R09: 0000000000000000 [ 79.556415][ T6031] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.564387][ T6031] R13: 0000000000000000 R14: 00007fbb6b975fa0 R15: 00007ffceb5c2658 [ 79.572364][ T6031] ? 0xffffffff81000000 [ 79.576528][ T6031] [ 79.617781][ T6031] syz.1.50: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 79.654901][ T6031] CPU: 1 UID: 0 PID: 6031 Comm: syz.1.50 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 79.665545][ T6031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 79.675621][ T6031] Call Trace: [ 79.678912][ T6031] [ 79.681944][ T6031] dump_stack_lvl+0x16c/0x1f0 [ 79.686642][ T6031] warn_alloc+0x24d/0x3a0 [ 79.690992][ T6031] ? __pfx_warn_alloc+0x10/0x10 [ 79.695872][ T6031] ? kfree+0x14f/0x4b0 [ 79.699968][ T6031] ? __get_vm_area_node+0x1dc/0x2f0 [ 79.705184][ T6031] __vmalloc_node_range_noprof+0xd27/0x1530 [ 79.711097][ T6031] ? mod_objcg_state+0x4c4/0x8d0 [ 79.716046][ T6031] ? lockdep_hardirqs_on+0x7c/0x110 [ 79.721257][ T6031] ? kernel_clone+0xfd/0x960 [ 79.725863][ T6031] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 79.732296][ T6031] ? rcu_is_watching+0x12/0xc0 [ 79.737070][ T6031] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 79.742465][ T6031] ? kmem_cache_alloc_node_noprof+0x219/0x3b0 [ 79.748563][ T6031] ? copy_process+0x49c/0x6f20 [ 79.753355][ T6031] ? kernel_clone+0xfd/0x960 [ 79.757960][ T6031] copy_process+0x29b3/0x6f20 [ 79.762651][ T6031] ? kernel_clone+0xfd/0x960 [ 79.767258][ T6031] ? get_pid_task+0xfc/0x250 [ 79.771858][ T6031] ? __pfx_lock_release+0x10/0x10 [ 79.776897][ T6031] ? trace_lock_acquire+0x14e/0x1f0 [ 79.782110][ T6031] ? __pfx_copy_process+0x10/0x10 [ 79.787143][ T6031] ? find_held_lock+0x2d/0x110 [ 79.791920][ T6031] kernel_clone+0xfd/0x960 [ 79.796347][ T6031] ? __pfx_kernel_clone+0x10/0x10 [ 79.801387][ T6031] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 79.807463][ T6031] ? 0xffffffff81000000 [ 79.811630][ T6031] __do_sys_clone+0xba/0x100 [ 79.816229][ T6031] ? __pfx___do_sys_clone+0x10/0x10 [ 79.821523][ T6031] ? 0xffffffff81000000 [ 79.825690][ T6031] do_syscall_64+0xcd/0x250 [ 79.830205][ T6031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.836107][ T6031] RIP: 0033:0x7fbb6b785d19 [ 79.840528][ T6031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.860146][ T6031] RSP: 002b:00007fbb6c669038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 79.868700][ T6031] RAX: ffffffffffffffda RBX: 00007fbb6b975fa0 RCX: 00007fbb6b785d19 [ 79.876695][ T6031] RDX: 9999999999999999 RSI: 00000000000000ff RDI: 0000000000000200 [ 79.884672][ T6031] RBP: 00007fbb6c669090 R08: 0000000100000000 R09: 0000000000000000 [ 79.892645][ T6031] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.900624][ T6031] R13: 0000000000000000 R14: 00007fbb6b975fa0 R15: 00007ffceb5c2658 [ 79.908610][ T6031] ? 0xffffffff81000000 [ 79.912791][ T6031] [ 79.941211][ T6031] Mem-Info: [ 79.973713][ T6031] active_anon:26561 inactive_anon:0 isolated_anon:0 [ 79.973713][ T6031] active_file:13007 inactive_file:38167 isolated_file:0 [ 79.973713][ T6031] unevictable:2755 dirty:253 writeback:0 [ 79.973713][ T6031] slab_reclaimable:9826 slab_unreclaimable:92782 [ 79.973713][ T6031] mapped:23601 shmem:23741 pagetables:719 [ 79.973713][ T6031] sec_pagetables:0 bounce:0 [ 79.973713][ T6031] kernel_misc_reclaimable:0 [ 79.973713][ T6031] free:1326499 free_pcp:4220 free_cma:0 [ 80.043851][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.53'. [ 80.084964][ T6031] Node 0 active_anon:90544kB inactive_anon:0kB active_file:52028kB inactive_file:152592kB unevictable:11532kB isolated(anon):0kB isolated(file):0kB mapped:94404kB dirty:1000kB writeback:0kB shmem:77628kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB writeback_tmp:0kB kernel_stack:10636kB pagetables:2976kB sec_pagetables:0kB all_unreclaimable? no [ 80.139342][ T6031] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 80.198709][ T6031] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 80.264960][ T6031] lowmem_reserve[]: 0 2465 2466 0 0 [ 80.281801][ T6031] Node 0 DMA32 free:1407880kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:75756kB inactive_anon:0kB active_file:51956kB inactive_file:151576kB unevictable:9620kB writepending:1044kB present:3129332kB managed:2551344kB mlocked:8092kB bounce:0kB free_pcp:20068kB local_pcp:19828kB free_cma:0kB [ 80.329241][ T6031] lowmem_reserve[]: 0 0 0 0 0 [ 80.337518][ T6031] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 80.401106][ T6031] lowmem_reserve[]: 0 0 0 0 0 [ 80.423947][ T6031] Node 1 Normal free:3909648kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:12kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 80.495028][ T6031] lowmem_reserve[]: 0 0 0 0 0 [ 80.515222][ T6031] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 80.542000][ T6031] Node 0 DMA32: 728*4kB (UME) 967*8kB (UME) 696*16kB (UME) 418*32kB (UME) 351*64kB (UME) 79*128kB (UME) 51*256kB (UME) 22*512kB (UME) 9*1024kB (M) 5*2048kB (UM) 323*4096kB (M) = 1434520kB [ 80.698119][ T6031] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 80.709804][ T6031] Node 1 Normal: 228*4kB (UE) 62*8kB (UME) 45*16kB (UME) 220*32kB (UME) 107*64kB (UME) 31*128kB (UME) 12*256kB (UME) 5*512kB (UM) 5*1024kB (UME) 4*2048kB (UE) 945*4096kB (M) = 3909648kB [ 80.759508][ T6031] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 80.775210][ T6031] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 80.810529][ T6031] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 80.834689][ T6031] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 80.844034][ T6031] 56431 total pagecache pages [ 80.874703][ T6031] 0 pages in swap cache [ 80.878906][ T6031] Free swap = 124700kB [ 80.883160][ T6031] Total swap = 124996kB [ 80.887569][ T6031] 2097051 pages RAM [ 80.891405][ T6031] 0 pages HighMem/MovableOnly [ 80.925175][ T6031] 427365 pages reserved [ 80.929378][ T6031] 0 pages cma reserved [ 81.006562][ T6053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.60'. [ 81.052164][ T6053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.088227][ T6053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.156690][ T6053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.203038][ T6053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.292208][ T6061] svc: failed to register nfsdv3 RPC service (errno 111). [ 81.322798][ T6061] svc: failed to register nfsaclv3 RPC service (errno 111). [ 81.354541][ T6067] netlink: 28 bytes leftover after parsing attributes in process `syz.0.62'. [ 81.656529][ T6072] netlink: 338 bytes leftover after parsing attributes in process `syz.3.63'. [ 81.674779][ T6072] netlink: 338 bytes leftover after parsing attributes in process `syz.3.63'. [ 81.698766][ T6072] netlink: 134 bytes leftover after parsing attributes in process `syz.3.63'. [ 81.815824][ T6054] device-mapper: ioctl: only supply one of name or uuid, cmd(17) [ 82.465098][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 83.431251][ T6104] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 83.455062][ T6104] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 84.156083][ T6128] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.800918][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'. [ 84.844958][ T6144] netlink: 28 bytes leftover after parsing attributes in process `syz.3.84'. [ 84.854107][ T6149] netlink: 28 bytes leftover after parsing attributes in process `syz.0.85'. [ 85.075621][ T6149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.083414][ T6149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.096377][ T6149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.113079][ T6149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.459545][ T6156] netlink: 'syz.3.87': attribute type 1 has an invalid length. [ 85.469654][ T6156] netlink: 322 bytes leftover after parsing attributes in process `syz.3.87'. [ 85.488484][ T6156] netlink: 'syz.3.87': attribute type 1 has an invalid length. [ 85.504775][ T6156] netlink: 322 bytes leftover after parsing attributes in process `syz.3.87'. [ 85.731400][ T6163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.88'. [ 85.965587][ T6171] netlink: 28 bytes leftover after parsing attributes in process `syz.0.89'. [ 86.331410][ T6180] svc: failed to register nfsdv3 RPC service (errno 111). [ 86.362949][ T6180] svc: failed to register nfsaclv3 RPC service (errno 111). [ 87.293151][ T6198] mmap: syz.2.97 (6198) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.140928][ T6228] process 'syz.2.109' launched ':,' with NULL argv: empty string added [ 88.142908][ T6226] svc: failed to register nfsdv3 RPC service (errno 111). [ 88.189586][ T6226] svc: failed to register nfsaclv3 RPC service (errno 111). [ 88.377532][ T6233] netlink: 28 bytes leftover after parsing attributes in process `syz.2.110'. [ 89.826637][ T6269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.115'. [ 89.952803][ T6267] netlink: 28 bytes leftover after parsing attributes in process `syz.1.114'. [ 90.336306][ T6267] hsr_slave_0 (unregistering): left promiscuous mode [ 90.417667][ T6283] svc: failed to register nfsdv3 RPC service (errno 111). [ 90.436073][ T6283] svc: failed to register nfsaclv3 RPC service (errno 111). [ 90.636980][ T6287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.123'. [ 90.674846][ T6287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.683269][ T6284] netlink: 'syz.0.121': attribute type 46 has an invalid length. [ 90.720298][ T6287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.825316][ T6287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.870605][ T6287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.120570][ T6308] syz.0.129 uses obsolete (PF_INET,SOCK_PACKET) [ 92.196332][ T6313] svc: failed to register nfsdv3 RPC service (errno 111). [ 92.217747][ T6313] svc: failed to register nfsaclv3 RPC service (errno 111). [ 93.448452][ T6333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.136'. [ 94.071059][ T6340] program syz.3.138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.345540][ T6360] TCP: TCP_TX_DELAY enabled [ 95.490920][ T6371] netlink: 28 bytes leftover after parsing attributes in process `syz.1.148'. [ 96.003607][ T6379] netlink: 28 bytes leftover after parsing attributes in process `syz.1.151'. [ 96.173257][ T6384] netlink: 28 bytes leftover after parsing attributes in process `syz.3.152'. [ 96.507365][ T6386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.154'. [ 97.353394][ T6415] netlink: 'syz.0.160': attribute type 46 has an invalid length. [ 97.871524][ T6429] svc: failed to register nfsdv3 RPC service (errno 111). [ 97.905957][ T6429] svc: failed to register nfsaclv3 RPC service (errno 111). [ 98.638735][ T6440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.170'. [ 99.673319][ T6466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.177'. [ 100.035737][ T6466] hsr_slave_0 (unregistering): left promiscuous mode [ 100.149292][ T6470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.179'. [ 100.359165][ T6473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.180'. [ 100.703281][ T6480] svc: failed to register nfsdv3 RPC service (errno 111). [ 100.726048][ T6480] svc: failed to register nfsaclv3 RPC service (errno 111). [ 101.618902][ T6499] sp0: Synchronizing with TNC [ 102.117989][ T6506] netlink: 28 bytes leftover after parsing attributes in process `syz.0.190'. [ 102.187306][ T6509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.189'. [ 102.684791][ T6509] hsr_slave_0 (unregistering): left promiscuous mode [ 102.822583][ T6520] ======================================================= [ 102.822583][ T6520] WARNING: The mand mount option has been deprecated and [ 102.822583][ T6520] and is ignored by this kernel. Remove the mand [ 102.822583][ T6520] option from the mount to silence this warning. [ 102.822583][ T6520] ======================================================= [ 103.460425][ T6532] netlink: 28 bytes leftover after parsing attributes in process `syz.0.204'. [ 103.607010][ T6537] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 103.654698][ T6537] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 103.957280][ T6542] sp0: Synchronizing with TNC [ 104.491160][ T6547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.201'. [ 104.914056][ T6560] netlink: 28 bytes leftover after parsing attributes in process `syz.1.206'. [ 104.923536][ T6560] ipvlan0: entered allmulticast mode [ 104.937765][ T6560] veth0_vlan: entered allmulticast mode [ 105.209769][ T54] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 106.120389][ T6582] sp0: Synchronizing with TNC [ 106.167416][ T6587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.214'. [ 107.220817][ T6610] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 107.254738][ T6610] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 107.364828][ T6614] netlink: 'syz.3.223': attribute type 1 has an invalid length. [ 107.379214][ T6614] nbd: error processing sock list [ 107.486172][ T6619] netlink: 28 bytes leftover after parsing attributes in process `syz.1.224'. [ 109.370272][ T6652] netlink: 330 bytes leftover after parsing attributes in process `syz.1.234'. [ 110.391415][ T6665] netlink: 342 bytes leftover after parsing attributes in process `syz.0.240'. [ 110.475870][ T6673] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.050192][ T6686] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.080260][ T6686] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.112171][ T6686] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.120722][ T6686] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.149922][ T6686] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.179777][ T6686] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.191856][ T6686] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 111.211702][ T6686] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 111.267122][ T6686] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 111.301157][ T6694] netlink: 28 bytes leftover after parsing attributes in process `syz.2.248'. [ 111.325730][ T6686] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.339956][ T6686] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.374088][ T6686] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 112.308078][ T6725] netlink: 28 bytes leftover after parsing attributes in process `syz.3.255'. [ 112.718580][ T6727] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 112.729173][ T6727] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 113.125069][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.205209][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.211327][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.364742][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 113.788464][ T6763] netlink: 28 bytes leftover after parsing attributes in process `syz.1.267'. [ 114.238162][ T6775] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 114.273468][ T6775] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 115.080449][ T6805] netlink: 28 bytes leftover after parsing attributes in process `syz.3.278'. [ 115.205227][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.269972][ T6811] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 115.279709][ T6811] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 115.288788][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.295245][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.445022][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.608211][ T6827] netlink: 'syz.3.283': attribute type 46 has an invalid length. [ 116.409765][ T6857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.293'. [ 116.449887][ T6841] netlink: 314 bytes leftover after parsing attributes in process `syz.0.289'. [ 117.284677][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.355153][ T6892] can: request_module (can-proto-0) failed. [ 117.364961][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.371008][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 117.507081][ T6900] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 117.543366][ T6900] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 117.544805][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.504244][ T6921] netlink: 'syz.0.313': attribute type 46 has an invalid length. [ 118.695222][ T6926] netlink: 'syz.1.315': attribute type 1 has an invalid length. [ 118.716597][ T6926] nbd: error processing sock list [ 118.859694][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.316'. [ 119.437300][ T6950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.323'. [ 120.450874][ T6980] netlink: 28 bytes leftover after parsing attributes in process `syz.3.329'. [ 120.474904][ T6984] netlink: 28 bytes leftover after parsing attributes in process `syz.3.329'. [ 120.799868][ T6989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.332'. [ 121.359895][ T7019] netlink: 28 bytes leftover after parsing attributes in process `syz.3.337'. [ 121.365547][ T7017] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 121.434700][ T7017] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 121.846865][ T7024] netlink: 'syz.3.338': attribute type 46 has an invalid length. [ 122.395103][ T7033] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 122.418005][ T7033] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 122.450130][ T7021] netlink: 314 bytes leftover after parsing attributes in process `syz.1.334'. [ 122.647889][ T7036] netlink: 28 bytes leftover after parsing attributes in process `syz.3.341'. [ 122.950960][ T7040] netlink: 28 bytes leftover after parsing attributes in process `syz.3.343'. [ 123.356456][ T7047] netlink: 326 bytes leftover after parsing attributes in process `syz.0.346'. [ 123.716095][ T7053] vivid-009: ================= START STATUS ================= [ 123.724340][ T7053] vivid-009: Test Pattern: 75% Colorbar [ 123.736863][ T7053] vivid-009: Fill Percentage of Frame: 100 [ 123.754150][ T7053] vivid-009: Horizontal Movement: No Movement [ 123.766178][ T7053] vivid-009: Vertical Movement: No Movement [ 123.778483][ T7053] vivid-009: OSD Text Mode: All [ 123.788205][ T7053] vivid-009: Show Border: false [ 123.798218][ T7053] vivid-009: Show Square: false [ 123.808764][ T7053] vivid-009: Sensor Flipped Horizontally: false [ 123.821095][ T7053] vivid-009: Sensor Flipped Vertically: false [ 123.835425][ T7053] vivid-009: Insert SAV Code in Image: false [ 123.848417][ T7053] vivid-009: Insert EAV Code in Image: false [ 123.864413][ T7053] vivid-009: Insert Video Guard Band: false [ 123.879197][ T7053] vivid-009: Reduced Framerate: false [ 123.893215][ T7053] vivid-009: HDMI 009-0 Is Connected To: Test Pattern Generator [ 123.912431][ T7053] vivid-009: S-Video 009-0 Is Connected To: Test Pattern Generator [ 123.933811][ T7053] vivid-009: Enable Capture Cropping: true [ 123.950560][ T7053] vivid-009: Enable Capture Composing: true [ 123.966537][ T7053] vivid-009: Enable Capture Scaler: true [ 123.982093][ T7053] vivid-009: Timestamp Source: End of Frame [ 123.999417][ T7053] vivid-009: Colorspace: sRGB [ 124.004182][ T7053] vivid-009: Transfer Function: Default [ 124.047681][ T7053] vivid-009: Y'CbCr Encoding: Default [ 124.058865][ T7053] vivid-009: HSV Encoding: Hue 0-179 [ 124.074646][ T7053] vivid-009: Quantization: Default [ 124.101772][ T7053] vivid-009: Apply Alpha To Red Only: false [ 124.117011][ T7053] vivid-009: Standard Aspect Ratio: 4x3 [ 124.134774][ T7053] vivid-009: DV Timings Signal Mode: Current DV Timings inactive [ 124.149619][ T7053] vivid-009: DV Timings: 640x480p59 inactive [ 124.162313][ T7053] vivid-009: DV Timings Aspect Ratio: Source Width x Height [ 124.183968][ T7053] vivid-009: Maximum EDID Blocks: 2 [ 124.205593][ T7053] vivid-009: Limited RGB Range (16-235): false [ 124.219826][ T7053] vivid-009: Rx RGB Quantization Range: Automatic [ 124.249069][ T7053] vivid-009: Power Present: 0x00000001 [ 124.262964][ T7053] tpg source WxH: 640x360 (Y'CbCr) [ 124.276875][ T7053] tpg field: 1 [ 124.286633][ T7053] tpg crop: 640x360@0x0 [ 124.290852][ T7053] tpg compose: 640x360@0x0 [ 124.307036][ T7053] tpg colorspace: 8 [ 124.310894][ T7053] tpg transfer function: 0/0 [ 124.334869][ T7053] tpg Y'CbCr encoding: 0/0 [ 124.339339][ T7053] tpg quantization: 0/0 [ 124.343521][ T7053] tpg RGB range: 0/2 [ 124.362301][ T7053] vivid-009: ================== END STATUS ================== [ 124.685349][ T7083] netlink: 28 bytes leftover after parsing attributes in process `syz.2.353'. [ 124.872522][ T7086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.356'. [ 125.304869][ T7093] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 125.335088][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.360'. [ 125.361545][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'. [ 125.402050][ T7103] netlink: 16 bytes leftover after parsing attributes in process `syz.2.360'. [ 125.468871][ T7104] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 125.478789][ T7104] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 125.480254][ T7098] HfR: entered promiscuous mode [ 125.576947][ T7101] netlink: 'syz.3.361': attribute type 46 has an invalid length. [ 125.978098][ T7125] netlink: 28 bytes leftover after parsing attributes in process `syz.2.367'. [ 127.346367][ T7189] netlink: 28 bytes leftover after parsing attributes in process `syz.0.385'. [ 127.591782][ T7194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.387'. [ 127.848892][ T7203] netlink: 28 bytes leftover after parsing attributes in process `syz.0.388'. [ 127.935730][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'. [ 128.557999][ T7222] netlink: 'syz.1.394': attribute type 46 has an invalid length. [ 128.575590][ T7225] geneve1: entered allmulticast mode [ 128.735231][ T7235] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 128.755360][ T7235] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 129.026495][ T7241] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 129.332715][ T7247] bridge_slave_1: left allmulticast mode [ 129.348679][ T7247] bridge_slave_1: left promiscuous mode [ 129.355853][ T7247] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.435387][ T7247] bridge_slave_0: left allmulticast mode [ 129.441116][ T7247] bridge_slave_0: left promiscuous mode [ 129.521170][ T7247] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.342514][ T7279] __nla_validate_parse: 7 callbacks suppressed [ 130.342537][ T7279] netlink: 28 bytes leftover after parsing attributes in process `syz.0.407'. [ 131.068507][ T7288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.411'. [ 131.331753][ T7297] FAULT_INJECTION: forcing a failure. [ 131.331753][ T7297] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 131.370358][ T7297] CPU: 0 UID: 0 PID: 7297 Comm: syz.0.413 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 131.381019][ T7297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 131.391546][ T7297] Call Trace: [ 131.394842][ T7297] [ 131.397787][ T7297] dump_stack_lvl+0x16c/0x1f0 [ 131.402503][ T7297] should_fail_ex+0x497/0x5b0 [ 131.407225][ T7297] _copy_to_user+0x32/0xd0 [ 131.411695][ T7297] simple_read_from_buffer+0xd0/0x160 [ 131.417114][ T7297] proc_fail_nth_read+0x198/0x270 [ 131.422181][ T7297] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 131.427777][ T7297] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 131.433363][ T7297] vfs_read+0x1df/0xbe0 [ 131.437547][ T7297] ? __fget_files+0x1fc/0x3a0 [ 131.442338][ T7297] ? __pfx___mutex_lock+0x10/0x10 [ 131.447393][ T7297] ? __pfx_vfs_read+0x10/0x10 [ 131.452115][ T7297] ? __fget_files+0x206/0x3a0 [ 131.456829][ T7297] ksys_read+0x12b/0x250 [ 131.461099][ T7297] ? __pfx_ksys_read+0x10/0x10 [ 131.465902][ T7297] do_syscall_64+0xcd/0x250 [ 131.470441][ T7297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.476361][ T7297] RIP: 0033:0x7f5b8a98472c [ 131.480807][ T7297] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 131.502292][ T7297] RSP: 002b:00007f5b8b6ee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 131.510743][ T7297] RAX: ffffffffffffffda RBX: 00007f5b8ab75fa0 RCX: 00007f5b8a98472c [ 131.518740][ T7297] RDX: 000000000000000f RSI: 00007f5b8b6ee0a0 RDI: 0000000000000004 [ 131.526737][ T7297] RBP: 00007f5b8b6ee090 R08: 0000000000000000 R09: 0000000000000000 [ 131.534731][ T7297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.542721][ T7297] R13: 0000000000000000 R14: 00007f5b8ab75fa0 R15: 00007fff7ca61b38 [ 131.550734][ T7297] [ 132.969886][ T7334] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 133.042717][ T7336] netlink: 72 bytes leftover after parsing attributes in process `syz.1.428'. [ 133.062807][ T7334] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 133.144217][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.150632][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.750948][ T7388] kexec: Could not allocate control_code_buffer [ 136.807695][ T7420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.450'. [ 137.254770][ T7424] netlink: 72 bytes leftover after parsing attributes in process `syz.3.452'. [ 137.499294][ T7433] netlink: 28 bytes leftover after parsing attributes in process `syz.3.455'. [ 138.173412][ T7442] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 138.255404][ T7442] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 138.697138][ T7449] netlink: 'syz.2.460': attribute type 21 has an invalid length. [ 138.755650][ T7449] netlink: 334 bytes leftover after parsing attributes in process `syz.2.460'. [ 139.658178][ T7469] netlink: 28 bytes leftover after parsing attributes in process `syz.0.465'. [ 140.843321][ T7493] netlink: 342 bytes leftover after parsing attributes in process `syz.2.473'. [ 141.456084][ T7503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.478'. [ 143.882702][ T7539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.487'. [ 145.625722][ T7570] netlink: 'syz.1.497': attribute type 46 has an invalid length. [ 145.825716][ T7580] netlink: 28 bytes leftover after parsing attributes in process `syz.2.498'. [ 148.662526][ T7634] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 148.783030][ T7634] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 152.760762][ T7482] ------------[ cut here ]------------ [ 152.766601][ T7482] WARNING: CPU: 0 PID: 7482 at mm/page_alloc.c:4727 __alloc_pages_noprof+0xeff/0x25b0 [ 152.776276][ T7482] Modules linked in: [ 152.780214][ T7482] CPU: 0 UID: 0 PID: 7482 Comm: syz.0.470 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 152.790993][ T7482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 152.801159][ T7482] RIP: 0010:__alloc_pages_noprof+0xeff/0x25b0 [ 152.807453][ T7482] Code: 24 2c 00 00 00 00 89 cd 0f 84 8b f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 0e b3 fe ff e9 69 f9 ff ff c6 05 61 49 16 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 9f a3 0c 00 8b 14 24 e9 [ 152.827180][ T7482] RSP: 0018:ffffc9000be47918 EFLAGS: 00010246 [ 152.833286][ T7482] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 152.841554][ T7482] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000040d40 [ 152.849985][ T7482] RBP: 0000000000000000 R08: 0000000000000006 R09: 00000000003fffff [ 152.858334][ T7482] R10: 00000000003fffff R11: 0000000000000004 R12: 000000000000000b [ 152.866392][ T7482] R13: 0000000000040d40 R14: 1ffff920017c8f37 R15: 00000000003fffff [ 152.874407][ T7482] FS: 00007f5b8b6ee6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 152.883498][ T7482] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.890416][ T7482] CR2: 00007fb59c51cf30 CR3: 00000000347ae000 CR4: 00000000003526f0 [ 152.898556][ T7482] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 152.906640][ T7482] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 152.914695][ T7482] Call Trace: [ 152.918008][ T7482] [ 152.920969][ T7482] ? __warn+0xea/0x3c0 [ 152.925156][ T7482] ? __alloc_pages_noprof+0xeff/0x25b0 [ 152.930666][ T7482] ? report_bug+0x3c0/0x580 [ 152.935282][ T7482] ? handle_bug+0x54/0xa0 [ 152.939659][ T7482] ? exc_invalid_op+0x17/0x50 [ 152.944384][ T7482] ? asm_exc_invalid_op+0x1a/0x20 [ 152.949566][ T7482] ? __alloc_pages_noprof+0xeff/0x25b0 [ 152.955498][ T7482] ? __pfx_mark_lock+0x10/0x10 [ 152.960317][ T7482] ? mark_lock+0xb5/0xc60 [ 152.965180][ T7482] ? __pfx_mark_lock+0x10/0x10 [ 152.970013][ T7482] ? hlock_class+0x4e/0x130 [ 152.974622][ T7482] ? __lock_acquire+0x15a9/0x3c40 [ 152.979707][ T7482] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 152.985539][ T7482] ? lockdep_hardirqs_on+0x7c/0x110 [ 152.990795][ T7482] ? find_held_lock+0x2d/0x110 [ 152.995693][ T7482] ___kmalloc_large_node+0x84/0x1b0 [ 153.000939][ T7482] __kmalloc_large_node_noprof+0x1c/0x70 [ 153.006755][ T7482] __kmalloc_noprof.cold+0xc/0x63 [ 153.011837][ T7482] ? __might_fault+0xe3/0x190 [ 153.016626][ T7482] ? tomoyo_write_control+0x267/0x13d0 [ 153.022137][ T7482] tomoyo_write_control+0x267/0x13d0 [ 153.027545][ T7482] ? rcu_is_watching+0x12/0xc0 [ 153.032357][ T7482] ? __pfx_tomoyo_write_control+0x10/0x10 [ 153.038204][ T7482] ? ksys_write+0x12b/0x250 [ 153.042774][ T7482] ? __pfx_tomoyo_write+0x10/0x10 [ 153.047930][ T7482] vfs_write+0x24c/0x1150 [ 153.052321][ T7482] ? __fget_files+0x1fc/0x3a0 [ 153.057455][ T7482] ? __pfx___mutex_lock+0x10/0x10 [ 153.062536][ T7482] ? __pfx_vfs_write+0x10/0x10 [ 153.067686][ T7482] ? __fget_files+0x206/0x3a0 [ 153.072425][ T7482] ksys_write+0x12b/0x250 [ 153.076864][ T7482] ? __pfx_ksys_write+0x10/0x10 [ 153.081777][ T7482] do_syscall_64+0xcd/0x250 [ 153.086394][ T7482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.092326][ T7482] RIP: 0033:0x7f5b8a985d19 [ 153.096905][ T7482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.116626][ T7482] RSP: 002b:00007f5b8b6ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 153.125144][ T7482] RAX: ffffffffffffffda RBX: 00007f5b8ab75fa0 RCX: 00007f5b8a985d19 [ 153.133157][ T7482] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 153.141221][ T7482] RBP: 00007f5b8aa01a20 R08: 0000000000000000 R09: 0000000000000000 [ 153.149280][ T7482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.157704][ T7482] R13: 0000000000000000 R14: 00007f5b8ab75fa0 R15: 00007fff7ca61b38 [ 153.166106][ T7482] [ 153.169166][ T7482] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 153.176644][ T7482] CPU: 0 UID: 0 PID: 7482 Comm: syz.0.470 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 153.187264][ T7482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 153.197352][ T7482] Call Trace: [ 153.200655][ T7482] [ 153.203608][ T7482] dump_stack_lvl+0x3d/0x1f0 [ 153.208238][ T7482] panic+0x71d/0x800 [ 153.212180][ T7482] ? __pfx_panic+0x10/0x10 [ 153.216640][ T7482] ? show_trace_log_lvl+0x29d/0x3d0 [ 153.221886][ T7482] ? __alloc_pages_noprof+0xeff/0x25b0 [ 153.227390][ T7482] check_panic_on_warn+0xab/0xb0 [ 153.232372][ T7482] __warn+0xf6/0x3c0 [ 153.236321][ T7482] ? __alloc_pages_noprof+0xeff/0x25b0 [ 153.241828][ T7482] report_bug+0x3c0/0x580 [ 153.246199][ T7482] handle_bug+0x54/0xa0 [ 153.250399][ T7482] exc_invalid_op+0x17/0x50 [ 153.254953][ T7482] asm_exc_invalid_op+0x1a/0x20 [ 153.259845][ T7482] RIP: 0010:__alloc_pages_noprof+0xeff/0x25b0 [ 153.265962][ T7482] Code: 24 2c 00 00 00 00 89 cd 0f 84 8b f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 0e b3 fe ff e9 69 f9 ff ff c6 05 61 49 16 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 9f a3 0c 00 8b 14 24 e9 [ 153.285607][ T7482] RSP: 0018:ffffc9000be47918 EFLAGS: 00010246 [ 153.291687][ T7482] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 153.299695][ T7482] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000040d40 [ 153.307668][ T7482] RBP: 0000000000000000 R08: 0000000000000006 R09: 00000000003fffff [ 153.315644][ T7482] R10: 00000000003fffff R11: 0000000000000004 R12: 000000000000000b [ 153.323616][ T7482] R13: 0000000000040d40 R14: 1ffff920017c8f37 R15: 00000000003fffff [ 153.331604][ T7482] ? __pfx_mark_lock+0x10/0x10 [ 153.336388][ T7482] ? mark_lock+0xb5/0xc60 [ 153.340730][ T7482] ? __pfx_mark_lock+0x10/0x10 [ 153.345511][ T7482] ? hlock_class+0x4e/0x130 [ 153.350030][ T7482] ? __lock_acquire+0x15a9/0x3c40 [ 153.355071][ T7482] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 153.360810][ T7482] ? lockdep_hardirqs_on+0x7c/0x110 [ 153.366026][ T7482] ? find_held_lock+0x2d/0x110 [ 153.370801][ T7482] ___kmalloc_large_node+0x84/0x1b0 [ 153.376009][ T7482] __kmalloc_large_node_noprof+0x1c/0x70 [ 153.381647][ T7482] __kmalloc_noprof.cold+0xc/0x63 [ 153.386690][ T7482] ? __might_fault+0xe3/0x190 [ 153.391377][ T7482] ? tomoyo_write_control+0x267/0x13d0 [ 153.396871][ T7482] tomoyo_write_control+0x267/0x13d0 [ 153.402178][ T7482] ? rcu_is_watching+0x12/0xc0 [ 153.406955][ T7482] ? __pfx_tomoyo_write_control+0x10/0x10 [ 153.412685][ T7482] ? ksys_write+0x12b/0x250 [ 153.417198][ T7482] ? __pfx_tomoyo_write+0x10/0x10 [ 153.422248][ T7482] vfs_write+0x24c/0x1150 [ 153.426608][ T7482] ? __fget_files+0x1fc/0x3a0 [ 153.431293][ T7482] ? __pfx___mutex_lock+0x10/0x10 [ 153.436329][ T7482] ? __pfx_vfs_write+0x10/0x10 [ 153.441105][ T7482] ? __fget_files+0x206/0x3a0 [ 153.445796][ T7482] ksys_write+0x12b/0x250 [ 153.450131][ T7482] ? __pfx_ksys_write+0x10/0x10 [ 153.454995][ T7482] do_syscall_64+0xcd/0x250 [ 153.459507][ T7482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.465411][ T7482] RIP: 0033:0x7f5b8a985d19 [ 153.469828][ T7482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.489708][ T7482] RSP: 002b:00007f5b8b6ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 153.498129][ T7482] RAX: ffffffffffffffda RBX: 00007f5b8ab75fa0 RCX: 00007f5b8a985d19 [ 153.506110][ T7482] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 153.514080][ T7482] RBP: 00007f5b8aa01a20 R08: 0000000000000000 R09: 0000000000000000 [ 153.522146][ T7482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.530118][ T7482] R13: 0000000000000000 R14: 00007f5b8ab75fa0 R15: 00007fff7ca61b38 [ 153.538108][ T7482] [ 153.541418][ T7482] Kernel Offset: disabled [ 153.545770][ T7482] Rebooting in 86400 seconds..