last executing test programs: 11.08182435s ago: executing program 1 (id=672): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) newfstatat$auto(r0, 0x0, 0x0, 0x1000) r1 = signalfd4$auto(0xffffffffffffffff, &(0x7f0000000100)={0x9}, 0x200, 0x9b2) renameat2$auto(r0, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x6a5) mmap$auto(0x4000, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x7, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) madvise$auto(0x56b, 0xffffffffffff0005, 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) close_range$auto(0x2, 0x8, 0x20000000) r2 = openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/oom_score_adj\x00', 0x22882, 0x0) pwritev$auto(r2, &(0x7f00000001c0)={0x0, 0x80000000}, 0xd, 0x8, 0x7) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) close_range$auto(0x2, 0x8, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) close_range$auto(r3, r3, 0x8) mmap$auto(0x0, 0x40009, 0x7ff, 0x9b72, 0x7, 0x7) write$auto(r3, &(0x7f0000000040)='/\x00', 0x8) madvise$auto(0xe128, 0x800, 0x3fb) 10.607093407s ago: executing program 1 (id=675): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x20044840) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) setresgid$auto(0x0, 0x800000a0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x10eb1, 0xfffffffffffffffd, 0x8000) (async) r0 = io_uring_setup$auto(0x6, 0x0) (async) bind$auto(0x3, 0x0, 0x68) io_uring_setup$auto(0x2, &(0x7f0000000240)={0x9, 0xb, 0x180000, 0x4, 0x7ff, 0x1000, 0xffffffffffffffff, [0xa8, 0x9, 0x4], {0x7e0111e3, 0x81, 0xddb, 0xd, 0x7ff, 0x4, 0x4, 0x7, 0xffffffffffffffcd}, {0x8, 0x6, 0x59, 0x200, 0x0, 0x1f20, 0x1000, 0x4, 0x8}}) (async) connect$auto(0xffffffffffffffff, &(0x7f0000000000)=@rc={0x1f, @none, 0x7}, 0x55) (async) r1 = syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f00000000c0), r0) sendmsg$auto_NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000125bd7000fcdbdf2504000000080001000000000008000200ff9041000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) r2 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0) ioctl$auto_BINDER_CTL_ADD(r2, 0xc1086201, 0x0) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000000) socket(0xa, 0x3, 0x3a) (async) mkdir$auto(0x0, 0x8001) (async) chdir$auto(0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200, 0x10) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) fcntl$auto(0x8000000000000001, 0x5, 0x8) (async) clock_nanosleep$auto(0x2, 0x1000, 0x0, 0x0) (async) timer_create$auto(0x2, 0x0, 0x0) (async) timer_settime$auto(0x0, 0x6, &(0x7f0000000000)={{0x100000001, 0x3ff}, {0x5a, 0x2}}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x400000000000003, 0x29, 0xd4, 0x0, 0x4) 8.451509323s ago: executing program 1 (id=679): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) sysfs$auto(0x2, 0x17, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) (async) fcntl$auto(0x3, 0x400, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) (async) open(&(0x7f0000000800)='./file0\x00', 0x2040, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) 8.262983799s ago: executing program 0 (id=680): set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/netfilter/nfnetlink_log\x00', 0x40080, 0x0) munmap$auto(0x20001000, 0x2000000c) mmap$auto(0x800, 0x3ff, 0x4, 0xeb1, 0x401, 0x208000) r0 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0xa0080, 0x0) read$auto_msr_fops_msr(r0, &(0x7f0000000080)=""/4096, 0x1000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp1\x00', 0x20b42, 0x0) r1 = socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) dup2$auto(r1, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r2 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8955, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/mac80211_hwsim/hwsim0/ieee80211/phy0/macaddress\x00', 0x0, 0x0) open(0x0, 0x22240, 0x155) socket(0x2b, 0x5, 0x4) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x0, @multicast1}, 0x55) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, 0x0, 0x4004414) bpf$auto(0x200000, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0x2e77, 0x5a, 0x5, 0x2, 0xffffffffffff0000, 0x4, 0x2, 0x8, 0x3, 0x100, 0x0, 0x80, 0xc, 0x101}, 0x1) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) unshare$auto(0x40000080) writev$auto(0x1, 0x0, 0x1) madvise$auto(0x0, 0x20200, 0x15) 7.359532808s ago: executing program 1 (id=682): mmap$auto(0x2, 0xa, 0x0, 0x9b72, 0x2, 0x7) setrlimit$auto(0x1000000007, 0x0) mlockall$auto(0x3) io_uring_setup$auto(0xffffffbe, 0x0) (async) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) (async) getdents$auto(0x0, 0x0, 0x18) (async) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/available_events\x00', 0x0, 0x0) capget$auto(0x0, 0xfffffffffffffffe) (async, rerun: 64) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) (async, rerun: 64) ioprio_set$auto(0x2, 0x800000000, 0x8) (async, rerun: 32) munmap$auto(0x0, 0x9) (async, rerun: 32) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) (async) socket(0xa, 0x3, 0x3a) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) close_range$auto(0x2, 0x8000, 0x0) ioctl$auto(r0, 0x540a, r0) (async) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x1ff, 0x107, 0x5, 0x6, 0x1ffde, 0x3, 0x7f, 0x9, 0x9, 0x80003, 0x4, 0x200000000001, 0xb4, 0x8, 0x8, 0x10006, 0x4000080, 0x0, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x2, 0x0, 0x2, 0x0, 0x80, 0x0, 0x1, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x0, 0xfffffffffffbfffd, 0x2000000000000004, 0x10000000000004, 0x10000000000, 0xb668, 0x4, 0xfffffffffffffe00, 0x0, 0x0, 0x1005, 0x400000000005b8, 0xffff, 0x0, 0x100, 0x0, 0x8, 0x2, 0x88e, 0x40, 0xfffffffffffffffc, 0x8, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x8, 0x7, 0xc567, 0xbb]}, 0x1fe, 0xd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r1 = socket(0xa, 0x3, 0xff) sendto$auto(r1, 0x0, 0xffffffffe0000000, 0x200, &(0x7f0000000180)=@l2={0x1f, 0x15, @none, 0x1}, 0x1c) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x7ff, 0x8000) 7.231273867s ago: executing program 3 (id=683): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x404, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) mmap$auto(0x4, 0x20009, 0x4000000000e0, 0x13, 0x401, 0x14f) brk$auto(0xffffffffffffff66) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) recvfrom$auto(r0, &(0x7f0000000000)="7ce8f94442555b90b041568c9883ab3c4b514bb12db8c6a529e422be368359ba6cc41e7646dab3e45d21fb00e1fd0ef96e1ee3c60b60666460050723e9bd9501aeac523ffdeeba336d37175a4939fe86000aedb7e8c0c26fc2235fda101b916c078d0393dc8a55eae7e9c39557ec24b0693ab10d8f6592914ba619e9c3c11251326056cc7ac2370f7dc783563f489317dfad42de7230964b674feb77b3e018e371d0751588f61c13bbd482482c147f", 0x5, 0x4, &(0x7f00000000c0)=@llc={0x1a, 0x306, 0x0, 0x9, 0x3, 0x0, @remote}, &(0x7f0000000100)) write$auto_ep0_operations_inode(r1, &(0x7f0000000840)="e9066030690979838b8a59df3fafe88e4e3d7d31436dd742937523648ff4b2", 0x1f) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x40000000084, 0x7c, 0xfffffffffffffffe, 0x0) 6.972812178s ago: executing program 0 (id=684): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r1) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001280)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) 5.831493944s ago: executing program 3 (id=685): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffbfffffffff0005, 0x17) (async) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000000), r0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x8, 0x814, 0x9) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004) (async) move_pages$auto(0x0, 0x5, &(0x7f0000000380)=&(0x7f0000000280), &(0x7f00000003c0)=0x1, 0x0, 0x2) 2.79042105s ago: executing program 3 (id=686): sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x40) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf25020000000800", @ANYRES32=r3, @ANYBLOB="08003f000593"], 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22048800}, 0x80) 2.774794496s ago: executing program 1 (id=687): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) socket(0x1c, 0x3, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mlockall$auto(0x7) madvise$auto(0x0, 0x7, 0xfffffffa) r1 = socket(0xa, 0x801, 0x84) io_submit$auto(0x4, 0x1dd4, &(0x7f0000000040)=&(0x7f0000000000)={0xa4, 0x8, 0xc5, 0x760e, 0x9, r0, 0x80000001, 0x8000, 0x7, 0x0, 0xc, r1}) socket(0xa, 0x801, 0x84) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) r4 = geteuid() sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r2, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="94160000", @ANYRES16=r3, @ANYBLOB="010029bd7000fedbdf250200000004000180200001801400bb002001000000000000000000000000000108007e00", @ANYRES32, @ANYBLOB="5c160180ff0295800800a100", @ANYRES32=r2, @ANYBLOB="08542b70fe0600b800", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="1400d2800c001900070000000000000004005d80"], 0x1694}, 0x1, 0x0, 0x0, 0x40c4}, 0x8801) 2.615440168s ago: executing program 0 (id=688): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioprio_get$auto(0x2, 0x1) socket(0x1d, 0x2, 0x6) poll$auto(0x0, 0x2, 0xc) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{@inferred, 0x100110d, 0x10000, 0x6, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa00000000e1800000000000000000040000660e070100"}, 0x6, 0x5, 0x4, @raw=0xfffffffc, @integer={0x0, 0x8, 0x5}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x5c, r2, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.162660231s ago: executing program 0 (id=690): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) removexattr$auto(0x0, 0x0) (async) mmap$auto(0x4, 0x2020009, 0x8, 0xeb1, 0xffffffffffeffffa, 0x7ffd) getrandom$auto(0x0, 0x6000000, 0x3) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rxrpc/calls\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)=""/88, 0x58) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000200)=""/4102, 0x1006) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x4000) (async) timer_create$auto(0x4, 0x0, 0x0) mmap$auto(0x1000000000000, 0x20009, 0xe2, 0xeb1, 0x405, 0x7ffd) (async) socketpair$auto(0x1d, 0x2, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) madvise$auto(0x8a70, 0x800, 0x8) (async) open(0x0, 0x226a42, 0x140) socket(0x1, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0xf44, 0x0, 0x9) (async) connect$auto(0x3, &(0x7f00000001c0), 0x55) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x3ff57696, 0x9b72, 0x5, 0x8000000000008000) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) madvise$auto(0x0, 0x80000001, 0x8) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0xffff, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4) 1.874814429s ago: executing program 2 (id=691): mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fstatfs$auto(0x3, 0x0) r0 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, r1, 0x4, 0x1ff, r0, @relative_id=0x13, 0xe600}, 0xf) r3 = creat$auto(&(0x7f0000000000)='./file0\x00', 0x8) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000240), r3) sendmsg$auto_BATADV_CMD_TP_METER(r3, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r4, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_ADDRESS={0xa, 0x5, @multicast}, @BATADV_ATTR_ALGO_NAME={0xf, 0x2, ':.}//\xa8/\\+]}'}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x5f72ad25b6f78bb}, 0x4040000) waitid$auto(0x9, r3, &(0x7f0000000080)={@siginfo_0_0={0xfffffffb, 0x3, 0x7, @_sigsys={&(0x7f0000000040)="0fa134a8182211e109af1138c8ab125d63edfe177c43bf8d7571fe", 0x4, 0xc}}}, 0x8, &(0x7f0000000180)={{0xd9c, 0x7}, {0x3, 0x2}, 0x4, 0x101, 0x61, 0x4, 0x1, 0x5, 0x7f, 0x100, 0x8000000000000001, 0x7fff, 0x9, 0x10, 0x8, 0x79}) socket(0x11, 0x80003, 0x300) (async) r5 = socket(0x11, 0x80003, 0x300) socket(0x10, 0x2, 0x2) (async) r6 = socket(0x10, 0x2, 0x2) write$auto(r6, 0x0, 0x2fd) (async) write$auto(r6, 0x0, 0x2fd) close_range$auto(0x2, 0x8000, 0x0) setsockopt$auto(r5, 0x107, 0x12, 0x0, 0x8) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000140), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000140), 0xffffffffffffffff) 1.874240121s ago: executing program 3 (id=692): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8a000, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x80002, 0x73) (async) socket(0x10, 0x80002, 0x73) r0 = socket(0x2, 0x1, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x1) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0x20499d, 0x9) (async) madvise$auto(0x0, 0x20499d, 0x9) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@hci={0x1f, 0x0, 0x2}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x107, 0x13, 0x0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x2, 0x5, 0x7) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x1001, 0x0) (async) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x1001, 0x0) sysinfo$auto(0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22242, 0x155) socket(0x5, 0x1, 0x0) fanotify_init$auto(0x65, 0x2) (async) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) (async) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) (async) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) write$auto(0x6, 0x0, 0x100000001) (async) write$auto(0x6, 0x0, 0x100000001) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') prctl$auto(0x8, 0x8000001, 0x0, 0x844, 0xc) 1.567423002s ago: executing program 2 (id=693): poll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0xa, 0x27}, 0x400, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000001a40), r1) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r1, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002bc47020a8e92806e8d7", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25050000000800040000000000"], 0x1c}}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x806, 0xd3f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0x10, 0x2, 0xa0000000) r5 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) connect$auto(r3, &(0x7f00000018c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x55) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0xffffffff) connect$auto(r4, &(0x7f00000018c0)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x1}, 0x55) sendmsg$auto_OVS_FLOW_CMD_GET(r3, 0x0, 0x800) r7 = pidfd_open$auto(0x0, 0x6) setns(r7, 0x10000000) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYRES32=r5, @ANYRES16=r2, @ANYBLOB="100025bd7000fedbdf2502000000060001000100000006000100df9e0000060001000b00000006000100080000000600010004000000060001006a7300000600010002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4044001) r8 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptyx1\x00', 0x2c0e03, 0x0) ioctl$auto(0x3, 0x5411, 0xfffffffffffff4e0) r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r8) sysfs$auto(0x58, 0xe, 0xe934) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34170000", @ANYRES16=r9, @ANYBLOB="11032cbd700001dcdf251d0000002000018008000300070000001400020067726574617030000000000000000000", @ANYRES8=r6], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x880) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) 1.282006296s ago: executing program 2 (id=694): close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket(0x11, 0x80003, 0x300) (async) sendto$auto(0xffffffffffffffff, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@tipc=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}, 0x1}}, 0x23) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xfffffffffffff13c, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) r1 = prctl$auto(0x1000000003b, 0x1000, 0x0, 0xa726, 0x0) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0006, 0x1) (async, rerun: 64) madvise$auto(0xfffffffffffffffc, 0x2, 0x1) (rerun: 64) mmap$auto(0x4, 0x4, 0xa2, 0x9b72, 0x2, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async, rerun: 64) splice$auto(0x4, 0x0, 0x2, 0x0, 0xfff, 0x4) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000180), 0xffffffffffffffff) madvise$auto(0x0, 0x2040040080000003, 0xfffffffc) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x1e, 0xa, 0x4) (async) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000340)=""/138, 0x8a) socket(0x26, 0x2, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x400, 0xeb1, 0x401, 0x8000) (async, rerun: 32) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRESDEC=r4], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 64) sendmsg$auto_CTRL_CMD_GETFAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES16=r3, @ANYBLOB="01002abd77dcb7fcdf2503000000190000000000000001", @ANYRES64=r2, @ANYRESDEC=r0], 0x24}, 0x1, 0x0, 0x0, 0x4048814}, 0x10000800) (async, rerun: 64) mprotect$auto(0x5, 0x764e, 0x4) (async, rerun: 32) r5 = socket(0x2, 0x2, 0x0) (rerun: 32) r6 = socket(0xa, 0x2, 0xe) (async, rerun: 32) connect$auto(0x3, 0x0, 0x55) (async, rerun: 32) setsockopt$auto(r1, 0x1, 0x19, 0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_DEL_PMK(r6, 0x0, 0x40000) (async, rerun: 64) sendmsg$auto_IPVS_CMD_GET_INFO(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x2400c010) (rerun: 64) 1.034881601s ago: executing program 2 (id=695): r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) mmap$auto(0x7, 0x400008, 0x1, 0x9b75, r0, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/current_tracer\x00', 0x0, 0x0) readv$auto(r1, &(0x7f00000000c0)={&(0x7f0000000040), 0x10000}, 0x4) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="21022cbd000100c66e122f7ab0b02d9a0113718f0a00d4230e8b08"], 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x4000080) (async) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="21022cbd000100c66e122f7ab0b02d9a0113718f0a00d4230e8b08"], 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x4000080) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 775.564135ms ago: executing program 2 (id=696): bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x5}, 0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/node/node1/compact\x00', 0x101800, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') (async) acct$auto(0x0) (async) setsockopt$auto(0x1, 0x1, 0x25, &(0x7f0000000000)='\x00', 0x4) acct$auto(0x0) 650.71119ms ago: executing program 3 (id=697): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) prctl$auto(0x35, 0x0, 0x10, 0x0, 0x0) r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/trace\x00', 0x80800, 0x0) read$auto(0x3, 0x0, 0x400000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop15\x00', 0x228a83, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r3, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003ac0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',;\x00\x00', @ANYRES16=r4, @ANYRES8, @ANYRESOCT=0x0, @ANYRES64=r0, @ANYRESHEX=r4], 0x3b2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$auto_NL80211_CMD_GET_STATION(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="4801a623", @ANYRES16=0x0, @ANYBLOB="000129bd7000fddbdf251100000008004b000600000c02009d00caf58736811da4fa9608dc325da6989d1de1a6dcf93200902a5bbf88a2fb8c20a4674503e61c28f6ec7380941b918dc568692dc688549c5ce69c9c5f83063aaf718f94a9e4093598cdbf5074385d325ab9b5e8344963321086da6a2948a4d41017c8e9e8e8844492937a2f55be27feabb58fdb8a5c4bc446c26f3ccf58687014d95e828c597b1a9f8f7077af60515f6c46500957bd2ac3df5230922d109ebac64be956e8cb17cd9cb0ebf9daf08d5645baa1aa0037e6c85b7b6c74c86a00bb0076a8763e8ee27eb1e7389f5f2bbfbedaaaacf1a66ed8a3667afedff9d5cb267789421b9723e1627df6e58e3044420f5c0000739afb6ea214502e226099b10e2b07000000000000007895e8d0d41e7b51f0e466d0b6e5640e1d09acb78ad8aeba02c08d672d5100003a60fdcf645e557ee1345c7e1733e1127a4c974dcb22ed2f45ad6f6df0e3c488db314dd218089ceaa4434ffb092c1b69aa398111f5703bb1a19fb96fa6e093dc1df34b4c46ce8f32f58754e2cbac15578befe04aa0d54595be47"], 0x148}, 0x1, 0x0, 0x0, 0x804}, 0x20000010) ioctl$auto(r1, 0x401870ca, 0x1) close_range$auto(r2, 0xfffffffffffff000, 0x7fffffff) socket(0x24, 0x3, 0x40000071) socket(0xa, 0x2, 0x88) setresuid$auto(0x0, 0x8, 0x8000) ioctl$auto(0x1, 0x8936, 0x8) write$auto_tracing_fops_trace(r1, &(0x7f0000000000)="2a1c05e1ca0d000bfc948173991561c6b34ec62ea4c7fdb8e13e39c9bbd56e57bc9e1217e07f2916bc4e9f5f0d17ede864e13bc8ffd0144414dcd5cbc17de8be694fbe8373ec56831f32bcbd87901b78d977c02d2ccb0d17f592fc4ed51e5e4076b263be3c0296e8aff3bb7d372a6469a7724300a2e74d1f1c8c729cda22432e27f6418003564df9b7fe2f8d21e361c9ab1048c918e470c93ea6fdf42e98a1d5cfca5fec4ada359eb3edc4d6f66e8d9fb6929868abaf4429d808651f6bc780f07949530ab74776f8579a438f08e5c5470ee22a816ecbb338", 0xd8) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r5 = open(0x0, 0xeee00, 0x31) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setns(0xffffffffffffffff, 0x0) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) r6 = socket(0x8, 0x2, 0x8) write$auto_msr_fops_msr(r5, 0x0, 0x0) getsockname$auto(r6, &(0x7f0000000240), &(0x7f0000000280)=0xaea) 649.848112ms ago: executing program 0 (id=698): sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) socket(0x840000000002, 0x2, 0x8) connect$auto(0x3, &(0x7f0000000000), 0x55) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826040000fedbdf250300000008000400b70a00002c4280000080000008000200", @ANYRES32=r2, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e000006000100000000000000000000000200", @ANYRES32=r2, @ANYBLOB="18fd0600050000000a000100"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(r0, 0x0, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendto$auto(0x3, 0x0, 0x8, 0x4000000e, &(0x7f0000000180), 0x1c) setresuid$auto(0x2, 0x7, 0x8080) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x801, 0x10008, 0xa, 0x1000049, 0x5f, 0x20000000000803, 0x3}, 0x6f3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x26, 0xa, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) 445.60406ms ago: executing program 1 (id=699): ioctl$auto(0xc8, 0x400454dc, 0x10) (async) r0 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x2, 0x6) (rerun: 64) close_range$auto(0x0, 0xfffffffffffff001, 0x2) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0x80000001, 0x8) (async) r2 = gettid() process_vm_writev$auto(r2, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) (async) madvise$auto(0x0, 0x2002003f0, 0x15) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) (async, rerun: 32) socket(0x11, 0x80003, 0x300) (async, rerun: 32) socket(0x29, 0x5, 0x0) (async) r3 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r3, &(0x7f0000000000)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0x2) (async) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0xe000, 0x0) sendfile$auto(r1, r4, 0x0, 0x3) (async) write$auto_safesetid_gid_file_fops_securityfs(r0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x16f, 0x500008, 0xdf, 0x9b72, 0x2, 0x101) connect$auto(0xffffffffffffffff, 0x0, 0x9) (async) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) write$auto(0x3, 0x0, 0xfffffdef) 445.135314ms ago: executing program 2 (id=700): socket(0x2, 0x1, 0x106) (async) listen$auto(0x3, 0x81) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) (async) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) mlock$auto(0x3, 0xfffffffffffffffa) (async) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x3) 19.489013ms ago: executing program 3 (id=701): sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x40) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf25020000000800", @ANYRES32=r3, @ANYBLOB="08003f000593"], 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22048800}, 0x80) 0s ago: executing program 0 (id=702): socket(0x15, 0x5, 0x0) r0 = socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x28, 0x5, 0x0) setsockopt$auto(0x400000000000003, 0x28, 0x0, 0x0, 0x56b) bpf$auto(0x0, 0x0, 0xa3) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x664) r1 = socket(0xa, 0x801, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES16=r0, @ANYBLOB="2f212cbd7000fcdbdf89157e970008000300", @ANYRES32=r4], 0x20}}, 0x4000000) sendmsg$auto_NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@typed={0x8, 0x147, 0x0, 0x0, @ipv4=@private=0xa010101}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "40eb41b287c0fccb243c58519e87e48dce0c0a784271a5c6"}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x8}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0xe}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1f, 0xac, "42888f06fb82c1cce38085ca028e8a9d81d60eba971f7ce9fbefed"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xb}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x6}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x801) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x10000000) io_uring_register$auto(0x2, 0x22, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x2, 0x1, 0x0) setsockopt$auto(r5, 0x8000000000000006, 0x1b, 0x0, 0x7ffffc) r6 = bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=r0, 0x4, @old_prog_fd=r0}, 0xa3) r7 = prctl$auto(0x2, 0x1, 0x0, 0x2, 0x3) r8 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000006c0), r7) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000680), 0xc, &(0x7f0000000f00)={&(0x7f0000000700)={0x7d4, r8, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@IOAM6_ATTR_SC_DATA={0x105, 0x5, "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"}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x1}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x2}, @IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_DATA={0x2af, 0x5, "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"}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x200}, @IOAM6_ATTR_SC_DATA={0x1cc, 0x5, "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"}, @IOAM6_ATTR_SC_DATA={0x20b, 0x5, "21a0cef941d607e6ec9b9c35032618e89b14a19c40c529f2dccd6b2fd23b39a764b691ccccf2c6ed57eff176b4f2a48be70f1ddd9f9a5dbc545e75e43b88768b09b012c88d9e104e1d67952935f1682534a3633c079a9a0ab02c681112446022bd1dad3eb6d3b0dfd3a318642fd113d7421822373543544db9586810414fd773f960e1891a0590765849d7d724bb9e972ac7e6df230e23c14884d66998f854b9bcc46f7c63e5e157fb723ec2e6163c59aaa2b9d79481a4fb21f6c5eed1ed64743b7b7dee64fc4f42f07ff9378466b9ca05353caee0df0b381f71e857d014e64f77975edfae7c9a759ed9cc14e9fa263d32b4fabd75ca32e32901cb347ae48eb2f42e4f6251a634b9fac9708226e3ce683b37e913992123e0e4c2d1b1122437f1fa17e1c2974aae2b0933626cf0487a996facaa6c295022a7c2f1570ff2793ddcf41b279bd9e286a686ae1e387d200c421e77af3d464fa4df43ac88426ebef3b86708ad669090196c2467b2551083e4909b3847e4c5ae9815d8507a0f102b778371e93ababcf020c9024074eb11cb6fe6fd95025dd1a708005453df204e7b2d4751bc820959dc1fb2d985d20e884eaca5ef604c9d7ad56fa203b22f6eb69bdf23ce6c4c961ae907163a8cce19622a3519b4dfc2936070cc4299bdc31eea70ce77c08c1e5dc5e7e281126aef14e7ff2d81a1d1e3d9f2d7763e83a3cf377145fc6616b726baee0155"}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x217}]}, 0x7d4}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) sendmsg$auto_IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x3c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x9}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xd5}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x9}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x2402c801) sendmsg$auto_IEEE802154_START_REQ(r6, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="8400003593775ad5f3b4bac6a334b83b41c70535794bb56117e279df98c7340d90011617637333ca5f8633936ffb8ac3738212d4d3ae41c5c5ec00e054ffd08dfe6033477d2282a1979c0c2bfe00dffa6ea5a0f06a23134dedd4fdf756bcab72fde9dfb4864a286b63aac954ece56643451ad056b6b8ffd833b3ae34354513ea7f1346fbb4abd8cfdd1a118700a27927d655ffa4ee7a916bac9d08edd1519c9ee5224feeacdd05da5fff3393d50279c6f50000000000000000", @ANYRES16=0x0, @ANYBLOB="100026bd7000fddbdf250d0000000c002d008100000000000000140001006261746164765f736c6176655f300000050003000500000008002c007f00000006000800f2ff0000140001006d6163766c616e30000000000000000006001f002d5d000005002a0008000000140030009a21ff4bfb24449eafe9f74474304759"], 0x84}, 0x1, 0x0, 0x0, 0x40080}, 0x4c040) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.85' (ED25519) to the list of known hosts. [ 113.029063][ T5822] cgroup: Unknown subsys name 'net' [ 113.167307][ T5822] cgroup: Unknown subsys name 'cpuset' [ 113.177129][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 114.264598][ T8] cfg80211: failed to load regulatory.db [ 115.125043][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 117.315530][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.332568][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.343433][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.352359][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 117.363648][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 117.396858][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 117.399272][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 117.414077][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 117.415410][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.425141][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 117.431111][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 117.446387][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 117.446651][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.467142][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 117.483198][ T5844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 117.493868][ T5143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 117.502426][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 117.512578][ T5143] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 117.522952][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 117.534802][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 117.544502][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 117.553480][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 117.562588][ T5845] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 117.575337][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 117.989902][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 118.066466][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 118.173636][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 118.190168][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 118.265341][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.274786][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.286155][ T5837] bridge_slave_0: entered allmulticast mode [ 118.295429][ T5837] bridge_slave_0: entered promiscuous mode [ 118.313541][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.321267][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.331879][ T5837] bridge_slave_1: entered allmulticast mode [ 118.342410][ T5837] bridge_slave_1: entered promiscuous mode [ 118.352225][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.360104][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.368295][ T5832] bridge_slave_0: entered allmulticast mode [ 118.376129][ T5832] bridge_slave_0: entered promiscuous mode [ 118.437786][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.446866][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.455779][ T5832] bridge_slave_1: entered allmulticast mode [ 118.465983][ T5832] bridge_slave_1: entered promiscuous mode [ 118.497462][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.557220][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.581243][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.627763][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.650462][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.658577][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.667686][ T5835] bridge_slave_0: entered allmulticast mode [ 118.675401][ T5835] bridge_slave_0: entered promiscuous mode [ 118.698822][ T5837] team0: Port device team_slave_0 added [ 118.723375][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.731988][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.741979][ T5835] bridge_slave_1: entered allmulticast mode [ 118.749840][ T5835] bridge_slave_1: entered promiscuous mode [ 118.767586][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.775606][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.784079][ T5836] bridge_slave_0: entered allmulticast mode [ 118.794042][ T5836] bridge_slave_0: entered promiscuous mode [ 118.805502][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.814027][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.823724][ T5836] bridge_slave_1: entered allmulticast mode [ 118.832910][ T5836] bridge_slave_1: entered promiscuous mode [ 118.843194][ T5837] team0: Port device team_slave_1 added [ 118.873703][ T5832] team0: Port device team_slave_0 added [ 118.924341][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.932409][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.961452][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.977748][ T5832] team0: Port device team_slave_1 added [ 118.997014][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.010343][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.025051][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.035986][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.044053][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.074928][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.131117][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.177355][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.184896][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.214157][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.230930][ T5835] team0: Port device team_slave_0 added [ 119.258606][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.266743][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.295281][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.310613][ T5835] team0: Port device team_slave_1 added [ 119.335147][ T5836] team0: Port device team_slave_0 added [ 119.346698][ T5837] hsr_slave_0: entered promiscuous mode [ 119.354701][ T5837] hsr_slave_1: entered promiscuous mode [ 119.380352][ T5836] team0: Port device team_slave_1 added [ 119.405328][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.412727][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.442380][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.456310][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.463765][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.491956][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.524321][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.532671][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.562897][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.562931][ T5845] Bluetooth: hci0: command tx timeout [ 119.605357][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.613515][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.625222][ T5845] Bluetooth: hci2: command tx timeout [ 119.642442][ T5840] Bluetooth: hci1: command tx timeout [ 119.648937][ T5845] Bluetooth: hci3: command tx timeout [ 119.656101][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.725078][ T5832] hsr_slave_0: entered promiscuous mode [ 119.733682][ T5832] hsr_slave_1: entered promiscuous mode [ 119.740513][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.749758][ T5832] Cannot create hsr debugfs directory [ 119.824593][ T5836] hsr_slave_0: entered promiscuous mode [ 119.831321][ T5836] hsr_slave_1: entered promiscuous mode [ 119.839878][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.848353][ T5836] Cannot create hsr debugfs directory [ 119.870041][ T5835] hsr_slave_0: entered promiscuous mode [ 119.880973][ T5835] hsr_slave_1: entered promiscuous mode [ 119.888670][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.896984][ T5835] Cannot create hsr debugfs directory [ 120.150862][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.193573][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.235832][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 120.260429][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 120.374875][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 120.393429][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 120.405674][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 120.416878][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 120.505300][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 120.538881][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 120.553829][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 120.565907][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 120.663487][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.689628][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 120.716794][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 120.744745][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 120.755835][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 120.813649][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.828100][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.865741][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.874260][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.899086][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.907396][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.929968][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.971254][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.979453][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.011889][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.020226][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.139481][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.164089][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.194250][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.247724][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.255773][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.295477][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.303179][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.336807][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.371355][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.379056][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.410285][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.419230][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.621910][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.631240][ T5845] Bluetooth: hci0: command tx timeout [ 121.702277][ T5845] Bluetooth: hci3: command tx timeout [ 121.703982][ T5840] Bluetooth: hci1: command tx timeout [ 121.708326][ T5845] Bluetooth: hci2: command tx timeout [ 121.730089][ T5837] veth0_vlan: entered promiscuous mode [ 121.785914][ T5837] veth1_vlan: entered promiscuous mode [ 121.828753][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.895672][ T5837] veth0_macvtap: entered promiscuous mode [ 121.933080][ T5837] veth1_macvtap: entered promiscuous mode [ 122.004831][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.031295][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.064423][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.075510][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.087797][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.098767][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.149372][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.215465][ T5832] veth0_vlan: entered promiscuous mode [ 122.238669][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.327482][ T5832] veth1_vlan: entered promiscuous mode [ 122.328608][ T2136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.368923][ T2136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.431404][ T5836] veth0_vlan: entered promiscuous mode [ 122.448282][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.473354][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.490117][ T5836] veth1_vlan: entered promiscuous mode [ 122.504067][ T5835] veth0_vlan: entered promiscuous mode [ 122.510965][ T5832] veth0_macvtap: entered promiscuous mode [ 122.539848][ T5832] veth1_macvtap: entered promiscuous mode [ 122.549666][ T5835] veth1_vlan: entered promiscuous mode [ 122.591790][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.605837][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.619976][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.646183][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.657722][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.672209][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.687242][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 122.715852][ T5836] veth0_macvtap: entered promiscuous mode [ 122.726818][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.741022][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.750824][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.760392][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.779721][ T5836] veth1_macvtap: entered promiscuous mode [ 122.843647][ T5835] veth0_macvtap: entered promiscuous mode [ 122.864133][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.875663][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.886745][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.899512][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.912801][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.947977][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.960332][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.977698][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.989955][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.003271][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.017478][ T5835] veth1_macvtap: entered promiscuous mode [ 123.045416][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.059588][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.072967][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.084067][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.158996][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.172471][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.182781][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.193961][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.204038][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.214998][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.227430][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.237963][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.249200][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.259404][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.270642][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.281358][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.292864][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.305065][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.350564][ T3475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.371700][ T3475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.404563][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.414309][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.424649][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.435000][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.517969][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.540808][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.685713][ T3475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.697329][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.714436][ T5845] Bluetooth: hci0: command tx timeout [ 123.716001][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.720536][ T3475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.783063][ T5845] Bluetooth: hci1: command tx timeout [ 123.784955][ T5840] Bluetooth: hci3: command tx timeout [ 123.789730][ T5845] Bluetooth: hci2: command tx timeout [ 123.868406][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.929815][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.010453][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.029976][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.382366][ T5902] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 125.783073][ T5840] Bluetooth: hci0: command tx timeout [ 125.864082][ T5840] Bluetooth: hci3: command tx timeout [ 125.864122][ T5845] Bluetooth: hci1: command tx timeout [ 125.876922][ T5840] Bluetooth: hci2: command tx timeout [ 127.593695][ T5943] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.256774][ T5953] Zero length message leads to an empty skb [ 128.765523][ T5946] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 128.794731][ T5946] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 128.919072][ T5946] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 129.055516][ T5946] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 129.108234][ T5946] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 129.145982][ T5946] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 129.198610][ T5946] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 129.238673][ T5946] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 129.412560][ T5946] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 129.487512][ T5946] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 129.522356][ T5946] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 129.597854][ T5946] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 130.662573][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.738868][ T5980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.21'. [ 131.062174][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.176485][ T5980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.212764][ T5980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.223408][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 131.273379][ T5980] bond0 (unregistering): Released all slaves [ 131.552472][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.742218][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 133.197924][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.302302][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 133.622508][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.257083][ T6012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.28'. [ 134.822192][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 135.222218][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.400078][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.712239][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.109605][ T6036] bond0: option mode: unable to set because the bond device is up [ 143.324729][ T6123] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 145.002739][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 145.009694][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 146.943896][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'. [ 147.015677][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'. [ 147.633159][ T6187] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 147.669113][ T6187] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 147.681427][ T6187] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 147.693318][ T6187] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 149.709124][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.715630][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 149.722573][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.729208][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 155.975340][ T6278] Process accounting resumed [ 160.153178][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.108'. [ 160.249487][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.108'. [ 160.295990][ T6324] vivid-013: ================= START STATUS ================= [ 160.307941][ T6324] vivid-013: Generate PTS: true [ 160.319990][ T6324] vivid-013: Generate SCR: true [ 160.330802][ T6324] tpg source WxH: 640x360 (Y'CbCr) [ 160.338866][ T6324] tpg field: 1 [ 160.344089][ T6324] tpg crop: 640x360@0x0 [ 160.351034][ T6324] tpg compose: 640x360@0x0 [ 160.402184][ T6324] tpg colorspace: 8 [ 160.420616][ T6324] tpg transfer function: 0/0 [ 160.472460][ T6324] tpg Y'CbCr encoding: 0/0 [ 160.478048][ T6324] tpg quantization: 0/0 [ 160.542155][ T6324] tpg RGB range: 0/2 [ 160.561844][ T6324] vivid-013: ================== END STATUS ================== [ 163.115933][ T6344] block nbd0: not configured, cannot reconfigure [ 164.736245][ T6366] kexec: Could not allocate control_code_buffer [ 177.042767][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'. [ 180.605532][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.163'. [ 183.959286][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.172'. [ 184.212438][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 187.587890][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 187.848262][ T6633] vivid-013: ================= START STATUS ================= [ 187.857225][ T6633] vivid-013: Generate PTS: true [ 187.872097][ T6633] vivid-013: Generate SCR: true [ 187.890602][ T6633] tpg source WxH: 640x360 (Y'CbCr) [ 187.905079][ T6633] tpg field: 1 [ 187.908998][ T6633] tpg crop: 640x360@0x0 [ 187.932219][ T6633] tpg compose: 640x360@0x0 [ 187.944519][ T6633] tpg colorspace: 8 [ 187.965047][ T6633] tpg transfer function: 0/0 [ 188.012534][ T6633] tpg Y'CbCr encoding: 0/0 [ 188.111874][ T6633] tpg quantization: 0/0 [ 188.118480][ T6633] tpg RGB range: 0/2 [ 188.122726][ T6633] vivid-013: ================== END STATUS ================== [ 189.991216][ T6653] block nbd0: not configured, cannot reconfigure [ 190.378535][ T6667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 192.039683][ T6692] block nbd0: not configured, cannot reconfigure [ 192.630576][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'. [ 194.890075][ T6737] bond0: option mode: unable to set because the bond device is up [ 194.959846][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'. [ 195.727781][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.225'. [ 197.716286][ T6780] bond0: option mode: unable to set because the bond device is up [ 197.920381][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 198.846270][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.241'. [ 199.779715][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'. [ 201.846490][ T6846] netlink: 28 bytes leftover after parsing attributes in process `syz.2.252'. [ 202.716476][ T6840] kexec: Could not allocate control_code_buffer [ 203.007603][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.247'. [ 203.967601][ T6887] netlink: 28 bytes leftover after parsing attributes in process `syz.3.255'. [ 206.080430][ T6898] kexec: Could not allocate control_code_buffer [ 206.228437][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.261'. [ 206.285594][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.261'. [ 206.425018][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 206.431892][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.631422][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.274'. [ 207.690010][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.274'. [ 208.116333][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.278'. [ 208.184991][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.278'. [ 209.397067][ T6966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.268'. [ 209.413980][ T6967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 212.228430][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.283'. [ 213.784904][ T7027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.288'. [ 214.111781][ T7027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.136518][ T7027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.157037][ T7027] bond0 (unregistering): Released all slaves [ 215.533122][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.293'. [ 218.966701][ T7084] netlink: 28 bytes leftover after parsing attributes in process `syz.0.302'. [ 219.150244][ T7084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.164230][ T7084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.177353][ T7084] bond0 (unregistering): Released all slaves [ 228.238182][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.331'. [ 228.288992][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.331'. [ 231.818356][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.340'. [ 231.847935][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.340'. [ 233.223575][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'. [ 233.265596][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'. [ 233.851648][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.352'. [ 233.930350][ T7253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.352'. [ 235.046884][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'. [ 235.109313][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'. [ 238.916442][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'. [ 238.954838][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'. [ 239.454484][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'. [ 239.540190][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'. [ 240.127959][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.374'. [ 240.182263][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.374'. [ 241.142337][ T7373] mmap: syz.1.368 (7373) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 241.926107][ T7362] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 241.942469][ T7362] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 241.948604][ T7362] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 241.965614][ T7362] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 243.782205][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 244.022146][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 244.028308][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 244.034606][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 244.234342][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.376'. [ 244.263183][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.376'. [ 247.127176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 247.245739][ T7433] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 247.282916][ T7433] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 247.289065][ T7433] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 247.358510][ T7433] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 249.312317][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 249.324349][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.387'. [ 249.382161][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 249.388138][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 249.388269][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 249.532181][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.387'. [ 253.666960][ T7494] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 253.702412][ T7494] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 253.747653][ T7494] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 253.782589][ T7494] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 254.879271][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'. [ 254.942922][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'. [ 255.703653][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 255.782252][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 255.790200][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 255.862224][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 258.582128][ T7557] FAULT_INJECTION: forcing a failure. [ 258.582128][ T7557] name failslab, interval 1, probability 0, space 0, times 1 [ 258.652166][ T7557] CPU: 0 UID: 0 PID: 7557 Comm: syz.1.407 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 258.662855][ T7557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 258.673067][ T7557] Call Trace: [ 258.676395][ T7557] [ 258.679376][ T7557] dump_stack_lvl+0x16c/0x1f0 [ 258.684163][ T7557] should_fail_ex+0x497/0x5b0 [ 258.688906][ T7557] ? fs_reclaim_acquire+0xae/0x150 [ 258.694087][ T7557] should_failslab+0xc2/0x120 [ 258.698839][ T7557] __kmalloc_noprof+0xce/0x4f0 [ 258.703672][ T7557] ? get_mm_exe_file+0x8a/0x1a0 [ 258.708589][ T7557] ? tomoyo_realpath_from_path+0xbf/0x710 [ 258.714379][ T7557] ? trace_lock_acquire+0x14e/0x1f0 [ 258.719664][ T7557] tomoyo_realpath_from_path+0xbf/0x710 [ 258.725294][ T7557] tomoyo_get_exe+0x63/0xa0 [ 258.729873][ T7557] tomoyo_write_control+0x5ad/0x13d0 [ 258.735244][ T7557] ? rcu_is_watching+0x12/0xc0 [ 258.740080][ T7557] ? __pfx_tomoyo_write_control+0x10/0x10 [ 258.745886][ T7557] ? __pfx_tomoyo_write+0x10/0x10 [ 258.750979][ T7557] vfs_write+0x24c/0x1150 [ 258.755380][ T7557] ? __pfx___mutex_lock+0x10/0x10 [ 258.760478][ T7557] ? __pfx_vfs_write+0x10/0x10 [ 258.765321][ T7557] ? __fget_files+0x206/0x3a0 [ 258.770076][ T7557] ksys_write+0x12b/0x250 [ 258.774466][ T7557] ? __pfx_ksys_write+0x10/0x10 [ 258.779364][ T7557] do_syscall_64+0xcd/0x250 [ 258.783935][ T7557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.789879][ T7557] RIP: 0033:0x7f009e785d29 [ 258.794347][ T7557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.814008][ T7557] RSP: 002b:00007f009c5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 258.822458][ T7557] RAX: ffffffffffffffda RBX: 00007f009e976080 RCX: 00007f009e785d29 [ 258.830454][ T7557] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 258.838447][ T7557] RBP: 00007f009c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 258.846442][ T7557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.854441][ T7557] R13: 0000000000000000 R14: 00007f009e976080 R15: 00007ffc667b1898 [ 258.862456][ T7557] [ 258.872176][ T7557] ERROR: Out of memory at tomoyo_realpath_from_path. [ 259.697523][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.410'. [ 259.753547][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.410'. [ 260.988089][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'. [ 261.059204][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'. [ 262.360964][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.425'. [ 262.433441][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.425'. [ 263.900167][ T7643] FAULT_INJECTION: forcing a failure. [ 263.900167][ T7643] name failslab, interval 1, probability 0, space 0, times 0 [ 263.958792][ T7643] CPU: 0 UID: 0 PID: 7643 Comm: syz.2.421 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 263.969483][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 263.979589][ T7643] Call Trace: [ 263.982907][ T7643] [ 263.985887][ T7643] dump_stack_lvl+0x16c/0x1f0 [ 263.990627][ T7643] should_fail_ex+0x497/0x5b0 [ 263.995458][ T7643] ? fs_reclaim_acquire+0xae/0x150 [ 264.000632][ T7643] should_failslab+0xc2/0x120 [ 264.005387][ T7643] __kmalloc_noprof+0xce/0x4f0 [ 264.010225][ T7643] ? __pfx_d_absolute_path+0x10/0x10 [ 264.015580][ T7643] ? tomoyo_encode2+0x100/0x3e0 [ 264.020507][ T7643] tomoyo_encode2+0x100/0x3e0 [ 264.025239][ T7643] ? trace_lock_acquire+0x14e/0x1f0 [ 264.030485][ T7643] tomoyo_realpath_from_path+0x1a7/0x710 [ 264.036177][ T7643] tomoyo_get_exe+0x63/0xa0 [ 264.040724][ T7643] tomoyo_write_control+0x5ad/0x13d0 [ 264.046058][ T7643] ? rcu_is_watching+0x12/0xc0 [ 264.050858][ T7643] ? __pfx_tomoyo_write_control+0x10/0x10 [ 264.056631][ T7643] ? __pfx_tomoyo_write+0x10/0x10 [ 264.061686][ T7643] vfs_write+0x24c/0x1150 [ 264.066056][ T7643] ? __pfx___mutex_lock+0x10/0x10 [ 264.071130][ T7643] ? __pfx_vfs_write+0x10/0x10 [ 264.075937][ T7643] ? __fget_files+0x206/0x3a0 [ 264.080661][ T7643] ksys_write+0x12b/0x250 [ 264.085034][ T7643] ? __pfx_ksys_write+0x10/0x10 [ 264.089927][ T7643] do_syscall_64+0xcd/0x250 [ 264.094475][ T7643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.100403][ T7643] RIP: 0033:0x7fa386585d29 [ 264.104843][ T7643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.124485][ T7643] RSP: 002b:00007fa387425038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 264.132948][ T7643] RAX: ffffffffffffffda RBX: 00007fa386776080 RCX: 00007fa386585d29 [ 264.140947][ T7643] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 264.148947][ T7643] RBP: 00007fa387425090 R08: 0000000000000000 R09: 0000000000000000 [ 264.156943][ T7643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.164939][ T7643] R13: 0000000000000001 R14: 00007fa386776080 R15: 00007fffe31889c8 [ 264.172987][ T7643] [ 264.190015][ T7643] ERROR: Out of memory at tomoyo_realpath_from_path. [ 265.483793][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.428'. [ 265.527783][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.428'. [ 266.796747][ T7695] FAULT_INJECTION: forcing a failure. [ 266.796747][ T7695] name failslab, interval 1, probability 0, space 0, times 0 [ 266.809838][ T7695] CPU: 0 UID: 0 PID: 7695 Comm: syz.1.437 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 266.820499][ T7695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 266.830608][ T7695] Call Trace: [ 266.833932][ T7695] [ 266.836909][ T7695] dump_stack_lvl+0x16c/0x1f0 [ 266.841655][ T7695] should_fail_ex+0x497/0x5b0 [ 266.846400][ T7695] ? fs_reclaim_acquire+0xae/0x150 [ 266.851575][ T7695] should_failslab+0xc2/0x120 [ 266.856326][ T7695] __kmalloc_noprof+0xce/0x4f0 [ 266.861155][ T7695] ? get_mm_exe_file+0x8a/0x1a0 [ 266.866069][ T7695] ? tomoyo_realpath_from_path+0xbf/0x710 [ 266.871857][ T7695] ? trace_lock_acquire+0x14e/0x1f0 [ 266.877128][ T7695] tomoyo_realpath_from_path+0xbf/0x710 [ 266.882750][ T7695] tomoyo_get_exe+0x63/0xa0 [ 266.887333][ T7695] tomoyo_write_control+0x5ad/0x13d0 [ 266.892701][ T7695] ? rcu_is_watching+0x12/0xc0 [ 266.897529][ T7695] ? __pfx_tomoyo_write_control+0x10/0x10 [ 266.903329][ T7695] ? __pfx_tomoyo_write+0x10/0x10 [ 266.908419][ T7695] vfs_write+0x24c/0x1150 [ 266.912804][ T7695] ? __fget_files+0x1fc/0x3a0 [ 266.917524][ T7695] ? __pfx___mutex_lock+0x10/0x10 [ 266.922601][ T7695] ? __pfx_vfs_write+0x10/0x10 [ 266.927409][ T7695] ? __fget_files+0x206/0x3a0 [ 266.932131][ T7695] ksys_write+0x12b/0x250 [ 266.936495][ T7695] ? __pfx_ksys_write+0x10/0x10 [ 266.941389][ T7695] do_syscall_64+0xcd/0x250 [ 266.945932][ T7695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.951862][ T7695] RIP: 0033:0x7f009e785d29 [ 266.956302][ T7695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.975941][ T7695] RSP: 002b:00007f009f4ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 266.984414][ T7695] RAX: ffffffffffffffda RBX: 00007f009e975fa0 RCX: 00007f009e785d29 [ 266.992415][ T7695] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 267.000411][ T7695] RBP: 00007f009f4ce090 R08: 0000000000000000 R09: 0000000000000000 [ 267.008402][ T7695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.016402][ T7695] R13: 0000000000000000 R14: 00007f009e975fa0 R15: 00007ffc667b1898 [ 267.024415][ T7695] [ 267.037273][ T7695] ERROR: Out of memory at tomoyo_realpath_from_path. [ 267.873852][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.880219][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.124483][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'. [ 268.147021][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'. [ 269.031236][ T7740] FAULT_INJECTION: forcing a failure. [ 269.031236][ T7740] name failslab, interval 1, probability 0, space 0, times 0 [ 269.061741][ T7740] CPU: 1 UID: 0 PID: 7740 Comm: syz.1.448 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 269.072422][ T7740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 269.082507][ T7740] Call Trace: [ 269.085806][ T7740] [ 269.088764][ T7740] dump_stack_lvl+0x16c/0x1f0 [ 269.093567][ T7740] should_fail_ex+0x497/0x5b0 [ 269.098283][ T7740] ? fs_reclaim_acquire+0xae/0x150 [ 269.103452][ T7740] should_failslab+0xc2/0x120 [ 269.108179][ T7740] __kmalloc_noprof+0xce/0x4f0 [ 269.112982][ T7740] ? __pfx_d_absolute_path+0x10/0x10 [ 269.118306][ T7740] ? tomoyo_encode2+0x100/0x3e0 [ 269.123201][ T7740] tomoyo_encode2+0x100/0x3e0 [ 269.127918][ T7740] ? trace_lock_acquire+0x14e/0x1f0 [ 269.133163][ T7740] tomoyo_realpath_from_path+0x1a7/0x710 [ 269.138842][ T7740] tomoyo_get_exe+0x63/0xa0 [ 269.143400][ T7740] tomoyo_write_control+0x5ad/0x13d0 [ 269.148735][ T7740] ? rcu_is_watching+0x12/0xc0 [ 269.153539][ T7740] ? __pfx_tomoyo_write_control+0x10/0x10 [ 269.159307][ T7740] ? __pfx_tomoyo_write+0x10/0x10 [ 269.164362][ T7740] vfs_write+0x24c/0x1150 [ 269.168735][ T7740] ? __pfx___mutex_lock+0x10/0x10 [ 269.173797][ T7740] ? __pfx_vfs_write+0x10/0x10 [ 269.178611][ T7740] ? __fget_files+0x206/0x3a0 [ 269.183331][ T7740] ksys_write+0x12b/0x250 [ 269.187698][ T7740] ? __pfx_ksys_write+0x10/0x10 [ 269.192590][ T7740] do_syscall_64+0xcd/0x250 [ 269.197135][ T7740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.203063][ T7740] RIP: 0033:0x7f009e785d29 [ 269.207503][ T7740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.227153][ T7740] RSP: 002b:00007f009c5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 269.235605][ T7740] RAX: ffffffffffffffda RBX: 00007f009e976080 RCX: 00007f009e785d29 [ 269.243613][ T7740] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 269.251619][ T7740] RBP: 00007f009c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 269.259616][ T7740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.267611][ T7740] R13: 0000000000000001 R14: 00007f009e976080 R15: 00007ffc667b1898 [ 269.275624][ T7740] [ 269.406088][ T7740] ERROR: Out of memory at tomoyo_realpath_from_path. [ 269.441461][ T7743] netlink: 338 bytes leftover after parsing attributes in process `syz.0.449'. [ 269.458750][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 269.493447][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 269.561038][ T7749] Invalid ELF header magic: != ELF [ 270.178922][ T7769] process 'syz.0.456' launched '/dev/fd/4' with NULL argv: empty string added [ 270.817640][ T7794] netlink: 330 bytes leftover after parsing attributes in process `syz.2.458'. [ 271.560877][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.463'. [ 271.666498][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.463'. [ 272.178460][ T7823] FAULT_INJECTION: forcing a failure. [ 272.178460][ T7823] name failslab, interval 1, probability 0, space 0, times 0 [ 272.191785][ T7826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.466'. [ 272.214843][ T7827] netlink: 28 bytes leftover after parsing attributes in process `syz.1.466'. [ 272.262103][ T7823] CPU: 0 UID: 0 PID: 7823 Comm: syz.2.465 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 272.272786][ T7823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 272.282863][ T7823] Call Trace: [ 272.286164][ T7823] [ 272.289114][ T7823] dump_stack_lvl+0x16c/0x1f0 [ 272.293862][ T7823] should_fail_ex+0x497/0x5b0 [ 272.298580][ T7823] ? fs_reclaim_acquire+0xae/0x150 [ 272.303752][ T7823] should_failslab+0xc2/0x120 [ 272.308469][ T7823] __kmalloc_noprof+0xce/0x4f0 [ 272.313278][ T7823] ? get_mm_exe_file+0x8a/0x1a0 [ 272.318166][ T7823] ? tomoyo_realpath_from_path+0xbf/0x710 [ 272.323955][ T7823] ? trace_lock_acquire+0x14e/0x1f0 [ 272.329200][ T7823] tomoyo_realpath_from_path+0xbf/0x710 [ 272.334792][ T7823] tomoyo_get_exe+0x63/0xa0 [ 272.339336][ T7823] tomoyo_write_control+0x5ad/0x13d0 [ 272.344671][ T7823] ? rcu_is_watching+0x12/0xc0 [ 272.349473][ T7823] ? __pfx_tomoyo_write_control+0x10/0x10 [ 272.355240][ T7823] ? __pfx_tomoyo_write+0x10/0x10 [ 272.360299][ T7823] vfs_write+0x24c/0x1150 [ 272.364669][ T7823] ? __pfx___mutex_lock+0x10/0x10 [ 272.369731][ T7823] ? __pfx_vfs_write+0x10/0x10 [ 272.374544][ T7823] ? __fget_files+0x206/0x3a0 [ 272.379268][ T7823] ksys_write+0x12b/0x250 [ 272.383631][ T7823] ? __pfx_ksys_write+0x10/0x10 [ 272.388524][ T7823] do_syscall_64+0xcd/0x250 [ 272.393068][ T7823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.399002][ T7823] RIP: 0033:0x7fa386585d29 [ 272.403442][ T7823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.423089][ T7823] RSP: 002b:00007fa387425038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 272.431554][ T7823] RAX: ffffffffffffffda RBX: 00007fa386776080 RCX: 00007fa386585d29 [ 272.439551][ T7823] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 272.447547][ T7823] RBP: 00007fa387425090 R08: 0000000000000000 R09: 0000000000000000 [ 272.455543][ T7823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.463539][ T7823] R13: 0000000000000001 R14: 00007fa386776080 R15: 00007fffe31889c8 [ 272.471552][ T7823] [ 272.558630][ T7823] ERROR: Out of memory at tomoyo_realpath_from_path. [ 274.027635][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.473'. [ 274.075075][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.473'. [ 274.667702][ T7869] netlink: 244 bytes leftover after parsing attributes in process `syz.3.477'. [ 274.703918][ T7870] netlink: 244 bytes leftover after parsing attributes in process `syz.3.477'. [ 276.072103][ T7881] FAULT_INJECTION: forcing a failure. [ 276.072103][ T7881] name failslab, interval 1, probability 0, space 0, times 0 [ 276.115908][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.483'. [ 276.142134][ T7881] CPU: 0 UID: 0 PID: 7881 Comm: syz.0.480 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 276.152823][ T7881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 276.162930][ T7881] Call Trace: [ 276.166249][ T7881] [ 276.169221][ T7881] dump_stack_lvl+0x16c/0x1f0 [ 276.173969][ T7881] should_fail_ex+0x497/0x5b0 [ 276.178723][ T7881] ? fs_reclaim_acquire+0xae/0x150 [ 276.183900][ T7881] should_failslab+0xc2/0x120 [ 276.188646][ T7881] __kmalloc_noprof+0xce/0x4f0 [ 276.193480][ T7881] ? __pfx_d_absolute_path+0x10/0x10 [ 276.198839][ T7881] ? tomoyo_encode2+0x100/0x3e0 [ 276.203746][ T7881] tomoyo_encode2+0x100/0x3e0 [ 276.208457][ T7881] ? trace_lock_acquire+0x14e/0x1f0 [ 276.213706][ T7881] tomoyo_realpath_from_path+0x1a7/0x710 [ 276.219383][ T7881] tomoyo_get_exe+0x63/0xa0 [ 276.223930][ T7881] tomoyo_write_control+0x5ad/0x13d0 [ 276.229268][ T7881] ? rcu_is_watching+0x12/0xc0 [ 276.234072][ T7881] ? __pfx_tomoyo_write_control+0x10/0x10 [ 276.239931][ T7881] ? __pfx_tomoyo_write+0x10/0x10 [ 276.244989][ T7881] vfs_write+0x24c/0x1150 [ 276.249354][ T7881] ? __pfx___mutex_lock+0x10/0x10 [ 276.254416][ T7881] ? __pfx_vfs_write+0x10/0x10 [ 276.259223][ T7881] ? __fget_files+0x206/0x3a0 [ 276.263947][ T7881] ksys_write+0x12b/0x250 [ 276.268311][ T7881] ? __pfx_ksys_write+0x10/0x10 [ 276.273206][ T7881] do_syscall_64+0xcd/0x250 [ 276.277749][ T7881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.283689][ T7881] RIP: 0033:0x7fb936585d29 [ 276.288130][ T7881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.307772][ T7881] RSP: 002b:00007fb9363d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 276.316218][ T7881] RAX: ffffffffffffffda RBX: 00007fb936776080 RCX: 00007fb936585d29 [ 276.324216][ T7881] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 276.332209][ T7881] RBP: 00007fb9363d8090 R08: 0000000000000000 R09: 0000000000000000 [ 276.340201][ T7881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.348283][ T7881] R13: 0000000000000001 R14: 00007fb936776080 R15: 00007fff37ae2478 [ 276.356299][ T7881] [ 276.372567][ T7881] ERROR: Out of memory at tomoyo_realpath_from_path. [ 276.389798][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.483'. [ 276.474063][ T7890] kexec: Could not allocate control_code_buffer [ 277.213963][ T7929] syz.1.492 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 278.048314][ T7951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.495'. [ 278.093830][ T7951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.495'. [ 280.109027][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'. [ 280.145668][ T8004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.505'. [ 280.178837][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'. [ 280.315161][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.506'. [ 281.542486][ T30] audit: type=1800 audit(1735048339.456:2): pid=8050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm=FFFFF2FFFFFFF2FFFFFFF2FFFFFFF2 name="features" dev="configfs" ino=15283 res=0 errno=0 [ 281.564273][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.651914][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.516'. [ 281.758056][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.516'. [ 282.272899][ T8077] capability: warning: `syz.0.521' uses 32-bit capabilities (legacy support in use) [ 282.281054][ T8078] netlink: 330 bytes leftover after parsing attributes in process `syz.1.522'. [ 282.607430][ T8086] netlink: 182 bytes leftover after parsing attributes in process `syz.3.523'. [ 282.910957][ T8095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.527'. [ 283.161595][ T8114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 283.646540][ T8125] netlink: zone id is out of range [ 283.651727][ T8125] netlink: zone id is out of range [ 283.712136][ T8125] netlink: zone id is out of range [ 283.731380][ T8125] netlink: zone id is out of range [ 283.762265][ T8125] netlink: zone id is out of range [ 283.767804][ T8125] netlink: zone id is out of range [ 283.783858][ T8125] netlink: zone id is out of range [ 283.789263][ T8125] netlink: zone id is out of range [ 283.802301][ T8125] netlink: set zone limit has 4 unknown bytes [ 284.097852][ T8135] ubi13: attaching mtd0 [ 284.122185][ T8135] ubi13 error: ubi_attach_mtd_dev: bad VID header (13) or data offsets (77) [ 284.124931][ T8141] openvswitch: netlink: Key type 39 is out of range max 32 syzkaller syzkaller login: [ 285.552685][ T8167] __nla_validate_parse: 1 callbacks suppressed [ 285.552708][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.539'. [ 285.626372][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.539'. [ 285.828937][ T8173] Process accounting resumed [ 286.355149][ T8172] Process accounting resumed [ 287.570178][ T8214] netlink: 'syz.3.551': attribute type 2 has an invalid length. [ 287.617576][ T8219] netlink: 'syz.3.551': attribute type 1 has an invalid length. [ 287.635762][ T8219] netlink: 4707 bytes leftover after parsing attributes in process `syz.3.551'. [ 287.833534][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.552'. [ 287.913735][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.552'. [ 288.094258][ T8228] netlink: 28 bytes leftover after parsing attributes in process `syz.3.554'. [ 288.109797][ T8228] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 288.117095][ T8228] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 290.677253][ T8257] mkiss: ax0: crc mode is auto. [ 291.100896][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'. [ 291.198276][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'. [ 291.727433][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.566'. [ 292.078268][ T8282] syz.2.567 uses obsolete (PF_INET,SOCK_PACKET) [ 292.242402][ T8282] svc: failed to register nfsdv3 RPC service (errno 111). [ 292.285682][ T8282] svc: failed to register nfsaclv3 RPC service (errno 111). [ 293.388031][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.574'. [ 293.450527][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.574'. [ 293.806344][ T8294] netlink: 330 bytes leftover after parsing attributes in process `syz.3.571'. [ 296.440093][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 296.509482][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 297.678516][ T8378] netlink: 28 bytes leftover after parsing attributes in process `syz.3.590'. [ 298.207943][ T8378] veth1_macvtap: left promiscuous mode [ 298.215524][ T8381] netlink: 20 bytes leftover after parsing attributes in process `syz.0.592'. [ 298.611001][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.597'. [ 298.644948][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.597'. [ 301.567053][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.610'. [ 301.663891][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.610'. [ 303.581554][ T30] audit: type=1326 audit(1735048361.496:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8489 comm="syz.3.620" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4bf5185d29 code=0x0 [ 303.853095][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.622'. [ 303.920996][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.622'. [ 304.083872][ T8511] netlink: 330 bytes leftover after parsing attributes in process `syz.1.625'. [ 304.591236][ T30] audit: type=1807 audit(1735048362.506:4): UNKNOWN=$ res=0 [ 304.608559][ T8523] : entered promiscuous mode [ 304.618636][ T30] audit: type=1802 audit(1735048362.536:5): pid=8528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.627" res=0 errno=0 [ 304.736652][ T8528] ima: policy update failed [ 304.758268][ T30] audit: type=1802 audit(1735048362.666:6): pid=8528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.627" res=0 errno=0 [ 305.004269][ T8537] netlink: 'syz.1.629': attribute type 21 has an invalid length. [ 305.028088][ T8537] netlink: 326 bytes leftover after parsing attributes in process `syz.1.629'. [ 305.196145][ T8544] netlink: 330 bytes leftover after parsing attributes in process `syz.1.629'. [ 305.686884][ T8551] tipc: Started in network mode [ 305.702447][ T8551] tipc: Node identity ffffffff, cluster identity 4711 [ 305.709295][ T8551] tipc: Node number set to 4294967295 [ 306.194289][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'. [ 306.262419][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'. [ 307.813758][ T8612] Process accounting resumed [ 308.208631][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.650'. [ 308.261100][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.650'. [ 308.737754][ T8634] netlink: 'syz.3.652': attribute type 39 has an invalid length. [ 308.754853][ T8634] netlink: 330 bytes leftover after parsing attributes in process `syz.3.652'. [ 310.726531][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.662'. [ 310.807562][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.662'. [ 313.574045][ T8726] Dead loop on virtual device ip6_vti0, fix it urgently! [ 313.626333][ T8726] Dead loop on virtual device ip6_vti0, fix it urgently! [ 313.634026][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.673'. [ 313.672250][ T8726] Dead loop on virtual device ip6_vti0, fix it urgently! [ 313.717586][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.673'. [ 318.418779][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.685'. [ 321.671682][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.686'. [ 321.739068][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.686'. [ 323.022643][ T8813] Invalid ELF header magic: != ELF [ 323.144605][ T8830] Process accounting resumed [ 323.464746][ T8836] netlink: 326 bytes leftover after parsing attributes in process `syz.0.698'. [ 323.603382][ T8836] netlink: 326 bytes leftover after parsing attributes in process `syz.0.698'. [ 324.058347][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.701'. [ 324.089756][ T8857] ------------[ cut here ]------------ [ 324.095702][ T8857] WARNING: CPU: 1 PID: 8857 at mm/page_alloc.c:4729 __alloc_pages_noprof+0xeff/0x25b0 [ 324.105546][ T8857] Modules linked in: [ 324.109530][ T8857] CPU: 1 UID: 0 PID: 8857 Comm: syz.1.699 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 324.120469][ T8857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 324.131259][ T8857] RIP: 0010:__alloc_pages_noprof+0xeff/0x25b0 [ 324.138075][ T8857] Code: 24 2c 00 00 00 00 89 cd 0f 84 8b f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 de b2 fe ff e9 69 f9 ff ff c6 05 34 6d 16 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 6f a4 0c 00 8b 14 24 e9 [ 324.157932][ T8857] RSP: 0018:ffffc9000508f8e8 EFLAGS: 00010246 [ 324.164276][ T8857] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 324.172503][ T8857] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 324.180534][ T8857] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000100 [ 324.188655][ T8857] R10: 0000000000000100 R11: ffffffff81fb8d44 R12: 0000000000000013 [ 324.196737][ T8857] R13: 0000000000040cc0 R14: 1ffff92000a11f31 R15: 00000000ffffffff [ 324.204840][ T8857] FS: 00007f009c5726c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 324.213929][ T8857] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 324.220573][ T8857] CR2: 00007f009c571f98 CR3: 0000000030ecc000 CR4: 00000000003526f0 [ 324.229223][ T8857] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 324.237937][ T8857] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 324.246134][ T8857] Call Trace: [ 324.249469][ T8857] [ 324.252527][ T8857] ? __warn+0xea/0x3c0 [ 324.256675][ T8857] ? __alloc_pages_noprof+0xeff/0x25b0 [ 324.262343][ T8857] ? report_bug+0x3c0/0x580 [ 324.266918][ T8857] ? handle_bug+0x54/0xa0 [ 324.271320][ T8857] ? exc_invalid_op+0x17/0x50 [ 324.276171][ T8857] ? asm_exc_invalid_op+0x1a/0x20 [ 324.281275][ T8857] ? kasan_save_track+0x14/0x30 [ 324.286257][ T8857] ? __alloc_pages_noprof+0xeff/0x25b0 [ 324.291799][ T8857] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 324.297747][ T8857] ? lockdep_hardirqs_on+0x7c/0x110 [ 324.303126][ T8857] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 324.309009][ T8857] ? stack_depot_save_flags+0x36d/0x9e0 [ 324.314709][ T8857] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 324.320506][ T8857] ? kasan_save_stack+0x33/0x60 [ 324.325475][ T8857] ? __kasan_kmalloc+0xaa/0xb0 [ 324.330936][ T8857] ? safesetid_gid_file_write+0x87/0xc0 [ 324.337236][ T8857] ? vfs_write+0x24c/0x1150 [ 324.341808][ T8857] ? ksys_write+0x12b/0x250 [ 324.346451][ T8857] ? do_syscall_64+0xcd/0x250 [ 324.351205][ T8857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.357454][ T8857] ___kmalloc_large_node+0x84/0x1b0 [ 324.362764][ T8857] __kmalloc_large_node_noprof+0x1c/0x70 [ 324.368468][ T8857] __kmalloc_node_track_caller_noprof.cold+0x5/0x5f [ 324.375240][ T8857] ? handle_policy_update+0x188/0x11e0 [ 324.377831][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.701'. [ 324.380745][ T8857] memdup_user_nul+0x2b/0x110 [ 324.394452][ T8857] handle_policy_update+0x188/0x11e0 [ 324.399803][ T8857] ? mark_held_locks+0x9f/0xe0 [ 324.404723][ T8857] ? __pfx_handle_policy_update+0x10/0x10 [ 324.410510][ T8857] ? apparmor_capable+0x114/0x1d0 [ 324.415680][ T8857] ? bpf_lsm_capable+0x9/0x10 [ 324.420417][ T8857] ? security_capable+0x7e/0x260 [ 324.425486][ T8857] safesetid_gid_file_write+0x87/0xc0 [ 324.430926][ T8857] ? __pfx_safesetid_gid_file_write+0x10/0x10 [ 324.437732][ T8857] vfs_write+0x24c/0x1150 [ 324.442818][ T8857] ? __fget_files+0x1fc/0x3a0 [ 324.447610][ T8857] ? __pfx___mutex_lock+0x10/0x10 [ 324.452788][ T8857] ? __pfx_vfs_write+0x10/0x10 [ 324.457634][ T8857] ? __fget_files+0x206/0x3a0 [ 324.462453][ T8857] ksys_write+0x12b/0x250 [ 324.466850][ T8857] ? __pfx_ksys_write+0x10/0x10 [ 324.471765][ T8857] ? do_user_addr_fault+0x83d/0x13f0 [ 324.477201][ T8857] do_syscall_64+0xcd/0x250 [ 324.481797][ T8857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.487850][ T8857] RIP: 0033:0x7f009e785d29 [ 324.492374][ T8857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.512234][ T8857] RSP: 002b:00007f009c572038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 324.520715][ T8857] RAX: ffffffffffffffda RBX: 00007f009e976400 RCX: 00007f009e785d29 [ 324.528793][ T8857] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 324.537449][ T8857] RBP: 00007f009e801aa8 R08: 0000000000000000 R09: 0000000000000000 [ 324.546246][ T8857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.554404][ T8857] R13: 0000000000000001 R14: 00007f009e976400 R15: 00007ffc667b1898 [ 324.562526][ T8857] [ 324.565606][ T8857] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 324.572920][ T8857] CPU: 1 UID: 0 PID: 8857 Comm: syz.1.699 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 324.583559][ T8857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 324.593656][ T8857] Call Trace: [ 324.596969][ T8857] [ 324.599939][ T8857] dump_stack_lvl+0x3d/0x1f0 [ 324.604594][ T8857] panic+0x71d/0x800 [ 324.608564][ T8857] ? __pfx_panic+0x10/0x10 [ 324.613043][ T8857] ? show_trace_log_lvl+0x29d/0x3d0 [ 324.618308][ T8857] ? check_panic_on_warn+0x1f/0xb0 [ 324.623501][ T8857] ? __alloc_pages_noprof+0xeff/0x25b0 [ 324.629022][ T8857] check_panic_on_warn+0xab/0xb0 [ 324.634039][ T8857] __warn+0xf6/0x3c0 [ 324.638009][ T8857] ? __alloc_pages_noprof+0xeff/0x25b0 [ 324.643532][ T8857] report_bug+0x3c0/0x580 [ 324.647928][ T8857] handle_bug+0x54/0xa0 [ 324.652164][ T8857] exc_invalid_op+0x17/0x50 [ 324.656732][ T8857] asm_exc_invalid_op+0x1a/0x20 [ 324.661643][ T8857] RIP: 0010:__alloc_pages_noprof+0xeff/0x25b0 [ 324.667778][ T8857] Code: 24 2c 00 00 00 00 89 cd 0f 84 8b f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 de b2 fe ff e9 69 f9 ff ff c6 05 34 6d 16 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 6f a4 0c 00 8b 14 24 e9 [ 324.687450][ T8857] RSP: 0018:ffffc9000508f8e8 EFLAGS: 00010246 [ 324.693572][ T8857] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 324.701593][ T8857] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 324.709613][ T8857] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000100 [ 324.717641][ T8857] R10: 0000000000000100 R11: ffffffff81fb8d44 R12: 0000000000000013 [ 324.725669][ T8857] R13: 0000000000040cc0 R14: 1ffff92000a11f31 R15: 00000000ffffffff [ 324.733700][ T8857] ? kasan_save_track+0x14/0x30 [ 324.738632][ T8857] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 324.744509][ T8857] ? lockdep_hardirqs_on+0x7c/0x110 [ 324.749771][ T8857] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 324.755640][ T8857] ? stack_depot_save_flags+0x36d/0x9e0 [ 324.761260][ T8857] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 324.767234][ T8857] ? kasan_save_stack+0x33/0x60 [ 324.772160][ T8857] ? __kasan_kmalloc+0xaa/0xb0 [ 324.776984][ T8857] ? safesetid_gid_file_write+0x87/0xc0 [ 324.782585][ T8857] ? vfs_write+0x24c/0x1150 [ 324.787145][ T8857] ? ksys_write+0x12b/0x250 [ 324.791807][ T8857] ? do_syscall_64+0xcd/0x250 [ 324.796541][ T8857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.802718][ T8857] ___kmalloc_large_node+0x84/0x1b0 [ 324.807977][ T8857] __kmalloc_large_node_noprof+0x1c/0x70 [ 324.813670][ T8857] __kmalloc_node_track_caller_noprof.cold+0x5/0x5f [ 324.820334][ T8857] ? handle_policy_update+0x188/0x11e0 [ 324.825867][ T8857] memdup_user_nul+0x2b/0x110 [ 324.830606][ T8857] handle_policy_update+0x188/0x11e0 [ 324.835941][ T8857] ? mark_held_locks+0x9f/0xe0 [ 324.840769][ T8857] ? __pfx_handle_policy_update+0x10/0x10 [ 324.846522][ T8857] ? apparmor_capable+0x114/0x1d0 [ 324.851610][ T8857] ? bpf_lsm_capable+0x9/0x10 [ 324.856330][ T8857] ? security_capable+0x7e/0x260 [ 324.861316][ T8857] safesetid_gid_file_write+0x87/0xc0 [ 324.866729][ T8857] ? __pfx_safesetid_gid_file_write+0x10/0x10 [ 324.872826][ T8857] vfs_write+0x24c/0x1150 [ 324.877186][ T8857] ? __fget_files+0x1fc/0x3a0 [ 324.881893][ T8857] ? __pfx___mutex_lock+0x10/0x10 [ 324.886974][ T8857] ? __pfx_vfs_write+0x10/0x10 [ 324.891809][ T8857] ? __fget_files+0x206/0x3a0 [ 324.896525][ T8857] ksys_write+0x12b/0x250 [ 324.900881][ T8857] ? __pfx_ksys_write+0x10/0x10 [ 324.905762][ T8857] ? do_user_addr_fault+0x83d/0x13f0 [ 324.911080][ T8857] do_syscall_64+0xcd/0x250 [ 324.915621][ T8857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.921546][ T8857] RIP: 0033:0x7f009e785d29 [ 324.925984][ T8857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.945617][ T8857] RSP: 002b:00007f009c572038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 324.954063][ T8857] RAX: ffffffffffffffda RBX: 00007f009e976400 RCX: 00007f009e785d29 [ 324.962058][ T8857] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 324.970047][ T8857] RBP: 00007f009e801aa8 R08: 0000000000000000 R09: 0000000000000000 [ 324.978038][ T8857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.986028][ T8857] R13: 0000000000000001 R14: 00007f009e976400 R15: 00007ffc667b1898 [ 324.994035][ T8857] [ 324.997415][ T8857] Kernel Offset: disabled [ 325.001805][ T8857] Rebooting in 86400 seconds..