last executing test programs: 3.740910427s ago: executing program 2 (id=103): r0 = socket$nl_generic(0x10, 0x3, 0x10) lstat$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={0x101, 0x7b, 0x10000, 0xe5, 0x0, 0x0, 0x0, 0x5, 0x3, 0x9, 0xb528, 0x2, 0x10000, 0x100000000, 0x9, 0x1, 0x5}) sendmsg$auto_TIPC_NL_MEDIA_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x44, 0x0, 0x1, 0x70bd2b, 0x6, {}, [@TIPC_NLA_MON={0x18, 0x9, 0x0, 0x1, [@typed={0x14, 0x14, 0x0, 0x0, @ipv6=@mcast1}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@typed={0x8, 0xc3, 0x0, 0x0, @uid=r1}, @typed={0x4, 0x49}, @typed={0x8, 0x1b, 0x0, 0x0, @ipv4=@remote}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x40015) r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x38, r2, 0x82652360e804c8d3, 0x9, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_STATS={0x14, 0x3, {0x9}}, @OVS_METER_ATTR_BANDS={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0xfffffff8}]}, 0x38}}, 0x8080) 3.432806152s ago: executing program 2 (id=107): socket(0x10, 0x3, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x80001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) mount$auto(&(0x7f0000000200)='wlan1\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='\x00', 0x1, &(0x7f0000000340)) mmap$auto(0x1, 0x3, 0x1000008000, 0x1000000eb1, 0x401, 0x9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) mmap$auto(0x10, 0x40005, 0xdf, 0x9b75, 0x800, 0x28000) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x11, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r1, 0x1002, 0x0, 0x0, 0x0, 0x2) ioperm$auto(0x800, 0x5, 0xd) epoll_pwait$auto(0x3, 0x0, 0x1, 0xffff0102, 0x0, 0x8) r2 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) read$auto(0x3, 0x0, 0x7ffffffff000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000440)={0x2, 0x6, [0x3, 0x68, 0x5, 0x80000000, 0x2, 0x4, 0x100, 0x743, 0x7]}) socket(0x11, 0x3, 0x2) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="20002cbd7000fcdb17df2508000000"], 0x14}}, 0x101) socket(0x2, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) 3.284350676s ago: executing program 3 (id=109): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto_snd_pcm_oss_f_reg_pcm_oss(r1, &(0x7f0000000080), 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x3fe, 0x8000) ioctl$auto(0x3, 0x80c84d0a, 0x38) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110b27bd7000ffdbdf250900000008000300", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x1000) getsockopt$auto(0x4, 0x6, 0x4, 0x0, 0x0) pidfd_open$auto(0x1, 0x0) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0x31, 0x0, 0x8) pidfd_open$auto(0x1, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd10/queue/max_hw_sectors_kb\x00', 0x30000, 0x0) ioperm$auto(0x7, 0x7, 0x4) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio29\x00', 0x0, 0x0) poll$auto(&(0x7f0000000040)={r5, 0x23f7, 0x6}, 0x4, 0x80000001) timer_create$auto(0x4008, 0x0, 0x0) timer_getoverrun$auto(0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001140)=""/4108, 0x100c) 3.072896119s ago: executing program 0 (id=111): epoll_wait$auto(0x5, 0x0, 0x2, 0x18) 3.029706248s ago: executing program 3 (id=112): mprotect$auto(0x81, 0x8000000020000001, 0xffffffffff7ffff7) mmap$auto(0x0, 0x2000000000400008, 0xdf, 0x2009b72, 0xffffffffffffffff, 0x3792cd2f) mbind$auto(0x0, 0xff, 0x100000000, 0x0, 0x20000000000006, 0x2) madvise$auto(0x0, 0xffffffffffffffff, 0x19) signalfd4$auto(0xffffffff, &(0x7f0000000080)={0x8000}, 0x8, 0x0) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) mmap$auto(0x8000000, 0x8, 0x1000000016, 0x13, 0x3, 0x180000000) ftruncate$auto(0x3, 0x0) r0 = socket(0x1f, 0x3, 0x1) socket(0x8, 0x5, 0x106) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) poll$auto(0x0, 0x800000bb, 0x9) 2.937242979s ago: executing program 0 (id=113): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) bpf$auto(0x0, 0x0, 0x6f3) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/uptime\x00', 0x40082, 0x0) read$auto(0x3, 0x0, 0x80) (fail_nth: 3) 2.428913238s ago: executing program 2 (id=114): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x202, 0x0) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/32t\x00', 0x82000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00', @ANYRES16, @ANYBLOB="080027bd7000fedbdf251b0000000800090001000000060096000800000006001000"], 0x4c}, 0x1, 0x0, 0x0, 0x884}, 0x800) sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x80}]}, 0x1c}}, 0x4008801) read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x60) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 2.388918721s ago: executing program 0 (id=115): mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) fanotify_init$auto(0x5, 0x2000000000002) inotify_init1$auto(0x3000000000000) close_range$auto(0x2, 0x8, 0x0) clone$auto(0x20003b46, 0x8, 0x0, 0x0, 0x87b) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43, 0x3}}}, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x2d320000, 0x9}, 0x7}, 0x3, 0x0) 2.37353775s ago: executing program 1 (id=116): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x7fffffff, 0x300000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) connect$auto(r0, &(0x7f0000000140)=@llc={0x1a, 0x0, 0xc, 0x1, 0x0, 0x8, @multicast}, 0x0) getsockopt$auto(r0, 0x8, 0x5, &(0x7f0000000000)='%\\$D],/\'\t\x00', &(0x7f0000000100)=0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) acct$auto(&(0x7f0000000140)='/sys/devices/msr/perf_event_mux_interval_ms\x00') mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) listxattrat$auto(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x11, 0x3, 0x2) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x40045431, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="08009e00", @ANYBLOB='F8'], 0x24}}, 0x4000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.240904773s ago: executing program 0 (id=117): openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffbfffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004) move_pages$auto(0x0, 0x5, &(0x7f0000000380)=&(0x7f0000000280), &(0x7f00000003c0)=0x1, 0x0, 0x2) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) r1 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x8000, 0x0) read$auto_sync_info_debugfs_fops_(r1, &(0x7f0000004180)=""/143, 0x8f) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x181782, 0x0) ioctl$auto(0x3, 0xc040564a, 0x38) mseal$auto(0x1ffff000, 0x7dda, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) r2 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0) read$auto_proc_pid_cmdline_ops_base(r2, &(0x7f0000000040)=""/159, 0x9f) 2.233758974s ago: executing program 1 (id=118): mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x189000, 0x0) read$auto(0x3, 0x0, 0x400000) ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0) 2.110057978s ago: executing program 3 (id=119): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x5, 0x8000) sysfs$auto(0x2, 0x1e, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x0, @broadcast}, 0x6b) connect$auto(0x3, &(0x7f0000000500)=@in={0x2, 0x0, @local}, 0x55) r0 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) writev$auto(r0, &(0x7f0000000300)={0x0, 0x9}, 0x2) 2.049754659s ago: executing program 2 (id=120): openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/oss\x00', 0x88400, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) 1.908585179s ago: executing program 2 (id=121): epoll_wait$auto(0x5, 0x0, 0x2, 0x18) 1.856799608s ago: executing program 1 (id=122): mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(&(0x7f0000001480)) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x9) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r1], 0x18}}, 0x80) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10048884) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="241000003f5673119dca3be928db1a0e58994825547c59577412973780063b368bb851bff16e0faa3995333a92129248ac724d637a96961f109276a252bdb637b99007d8068954c4f51301dd6eeeca48c50c3393019b0e91d8badfcd818e6dd65b857ce319a02c7c677a28680d25be2fe670f1a5ba9a01a0e3a97041bcdf04833e46b95aa31ea48228ce64443de9fbabcea1281b7a79ad21206485548c1e0e30c334183faa7f", @ANYRES16=0x0, @ANYBLOB="00022abd6c00fbdbdf250200000008000300000000000800010047c7e2"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/hugetlb.2MB.max_usage_in_bytes\x00', 0x80880, 0x0) read$auto(r3, 0x0, 0x20) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) move_pages$auto(0x1, 0x2, 0x0, 0x0, 0x0, 0x2) keyctl$auto(0xa, 0xfffffffffffffffd, 0x2, 0x628, 0xfffffffffffffffd) open(&(0x7f0000000040)='./file0\x00', 0x18000, 0x146) close_range$auto(r3, 0x8, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex_waitv$auto(&(0x7f0000000000)={0xfffffffffffffffc, 0x5d98, 0x6, 0x4}, 0x200bf50, 0x0, 0x0, 0x62c0) memfd_create$auto(&(0x7f0000000180)='/sys/kernel/tracing/free_buffer\x00', 0x9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/ip_vs_app\x00', 0x0, 0x0) 1.70493731s ago: executing program 2 (id=123): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.2/driver_override\x00', 0xc0202, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x27ffd) rseq$auto(&(0x7f0000000300)={0x0, 0x9, 0x0, 0x4, 0xffffffff, 0xfffffffe}, 0x8000, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) capget$auto(0x0, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x6, 0x0) getsockopt$auto(0x4, 0x10d, 0x1, 0xfffffffffffffffc, 0x0) r1 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/1/msr\x00', 0x82, 0x0) write$auto_msr_fops_msr(r1, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r2 = socket(0x10, 0x2, 0x0) socket(0x2, 0x5, 0x0) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000001c0), r2) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$', @ANYBLOB="00211459a600fbdbdf250200000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES16=r2], 0x14}, 0x1, 0x0, 0x0, 0x24048880}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) setsockopt$auto(0x4, 0x0, 0x485, 0xfffffffffffffffe, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40040) preadv$auto(0xffffffff, &(0x7f00000003c0)={&(0x7f0000000380), 0x1}, 0x4, 0x6, 0x42) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x3d, 0x200000000065f, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x5, 0x4, 0x3000, 0x9, 0x6, 0x10003, 0x80, 0x8, 0x0, 0x7, 0x9, 0x203, 0x400, 0x84, [0x1, 0x0, 0x0, 0x100, 0x2000000000000000, 0x2000, 0xfffffffffffffffd, 0x40a, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x0, 0x3, 0x1, 0x4, 0x7, 0x7ff, 0xfffffffffffffffd, 0x200000000000, 0x0, 0xffffffffefffffff, 0x3, 0x0, 0x4, 0x2, 0xfffffffffffffffd, 0x400000000005b8, 0xc, 0x4000000000, 0x8, 0x4, 0x6, 0xffffffffffffffbf, 0x890, 0x800000000000a, 0xfffffffffffffffc, 0x1000, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x6, 0x0, 0x100000]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_4={0x17, 0x1, 0xa9, 0x4004}, 0x6f4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 1.704801687s ago: executing program 3 (id=124): openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyr0\x00', 0x41, 0x0) ioctl$auto(r0, 0x540a, 0x1) r1 = epoll_create$auto(0x2) epoll_pwait2$auto(r1, 0x0, 0x8, &(0x7f0000002780)={0x800000000000000, 0x6}, 0x0, 0x8) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/oss\x00', 0x88400, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/006/001\x00', 0xa901, 0x0) ioctl$auto(r3, 0xc0105500, r3) read$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0x0) 1.485200397s ago: executing program 3 (id=125): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x391041, 0x0) ioctl$auto_TIOCMBIC2(r0, 0x5417, 0x0) open(0x0, 0xa61c2, 0x84) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mprotect$auto(0x110c238000, 0x1, 0x3) munmap$auto(0x1000000, 0x2000000c) madvise$auto(0xf5, 0xffffffffffff0001, 0x9) mlockall$auto(0x3) socket(0x21, 0x6, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x7, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) write$auto(0x3, 0x0, 0xfff5) socketpair$auto(0x9, 0x9, 0x0, &(0x7f0000000080)=0xffffffff) socket(0x10, 0x2, 0x1) 1.380146127s ago: executing program 1 (id=126): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) (async) r0 = socket(0x2, 0x801, 0x106) (async) mmap$auto(0x8000000000, 0x20009, 0x4000000000dc, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000000000)={0x14, 0x0, 0xf01, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x840) (async) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100"], 0x20}, 0x1, 0x0, 0x0, 0x4008014}, 0x10) (async) r1 = socket(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', 0x0}) socket(0xa, 0x3, 0x2f) (async) setsockopt$auto(0x3, 0x29, 0x7, 0xffffffffffffffff, 0x3) (async) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) (async) write$auto(r0, &(0x7f0000000000)='*\x00', 0xfd) (async) open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) (async) open$dir(&(0x7f0000000040)='./file1\x00', 0x80202, 0xc2) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async) mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0) (async) mount$auto(0x0, &(0x7f0000000040)='802_15_4_MAC\x00', 0x0, 0xaac, 0x0) (async) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) (async) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0xa22c0, 0x155) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0xf, 0x0, 0x6) (async) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) 804.2612ms ago: executing program 0 (id=127): r0 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) ustat$auto(0x801, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r1 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x1, 0x0) write$auto_bm_entry_operations_binfmt_misc(r1, &(0x7f0000000080)='d', 0x1) 340.957333ms ago: executing program 1 (id=128): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x202, 0x0) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/32t\x00', 0x82000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00', @ANYRES16, @ANYBLOB="080027bd7000fedbdf251b0000000800090001000000060096000800000006001000"], 0x4c}, 0x1, 0x0, 0x0, 0x884}, 0x800) sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x80}]}, 0x1c}}, 0x4008801) read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x60) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 57.883697ms ago: executing program 3 (id=129): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/irq/default_smp_affinity\x00', 0x2, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000b00)='lk', 0x2) r1 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/nullb/features\x00', 0x189002, 0x0) madvise$auto(0x3, 0x8, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_ftrace_formats_fops_trace_printk(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/printk_formats\x00', 0x90604, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/arp\x00', 0x10000, 0x0) write$auto_configfs_file_operations_configfs_internal(r1, &(0x7f0000000040)="41d494db13876d84c3a84c01597a10648e6b65acf0d93123aa3396de2a491e2b621b986394", 0x25) 338.432µs ago: executing program 0 (id=130): r0 = open(&(0x7f0000000080)='./file0\x00', 0x300, 0x46) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000000), r0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/net/bonding_masters\x00', 0x100, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r1, &(0x7f0000000140)=""/244, 0xf4) acct$auto(&(0x7f0000000040)='\x00') acct$auto(0x0) epoll_create$auto(0x4) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/pcie_aspm/parameters/policy\x00', 0x80000, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) fsconfig$auto(r3, 0x0, 0x0, 0x0, 0xb3dca8a) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000004c0)=""/206, 0xce) flistxattr$auto(0x3, 0x0, 0x3) 0s ago: executing program 1 (id=131): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x1e1782, 0x0) bpf$auto(0x0, 0x0, 0x6f3) write$auto(0x3, 0x0, 0x4fdef) write$auto(0x3, 0x0, 0xfdf3) shutdown$auto(0x200000003, 0x7) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x3, 0x81, 0x4000000000dc, 0x40eb2, 0xa1c, 0x8) madvise$auto(0xffffffffffffffff, 0xffffffff7fffffff, 0x40000019) madvise$auto(0xf, 0x4, 0x9) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mq_notify$auto(0xffffffffffffffff, &(0x7f0000000280)={@sival_int=0x4, @raw, 0x2, @_sigev_thread={0x0, 0x0}}) socket(0xa, 0x80000, 0x6) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x2000c041) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendto$auto(r0, &(0x7f0000000200), 0xb, 0x5, &(0x7f0000000240), 0xc8e) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) syz_genetlink_get_family_id$auto_ovs_meter(0x0, r0) socket(0x15, 0x5, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x68) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.35' (ED25519) to the list of known hosts. syzkaller login: [ 83.237573][ T5822] cgroup: Unknown subsys name 'net' [ 83.370405][ T5822] cgroup: Unknown subsys name 'cpuset' [ 83.379476][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.152120][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.250882][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.259544][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.270235][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.278395][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.280130][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.307444][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.319645][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.327129][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.335817][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.342998][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.345466][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.350841][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.359874][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.367084][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.372765][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.379139][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.386310][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.397400][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.403823][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.407286][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.413529][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.428932][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.440933][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.451069][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.832336][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 87.843504][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 87.980680][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 88.039406][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 88.049969][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.057475][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.065044][ T5831] bridge_slave_0: entered allmulticast mode [ 88.072800][ T5831] bridge_slave_0: entered promiscuous mode [ 88.112843][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.120295][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.127606][ T5831] bridge_slave_1: entered allmulticast mode [ 88.134480][ T5831] bridge_slave_1: entered promiscuous mode [ 88.142452][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.153009][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.160307][ T5833] bridge_slave_0: entered allmulticast mode [ 88.167627][ T5833] bridge_slave_0: entered promiscuous mode [ 88.201063][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.208869][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.216035][ T5833] bridge_slave_1: entered allmulticast mode [ 88.223141][ T5833] bridge_slave_1: entered promiscuous mode [ 88.292747][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.307641][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.328668][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.335859][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.343232][ T5832] bridge_slave_0: entered allmulticast mode [ 88.350357][ T5832] bridge_slave_0: entered promiscuous mode [ 88.359342][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.366636][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.373831][ T5832] bridge_slave_1: entered allmulticast mode [ 88.381140][ T5832] bridge_slave_1: entered promiscuous mode [ 88.397474][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.431203][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.462987][ T5831] team0: Port device team_slave_0 added [ 88.490561][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.498204][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.505394][ T5835] bridge_slave_0: entered allmulticast mode [ 88.512685][ T5835] bridge_slave_0: entered promiscuous mode [ 88.522163][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.533462][ T5831] team0: Port device team_slave_1 added [ 88.551393][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.558763][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.565958][ T5835] bridge_slave_1: entered allmulticast mode [ 88.573403][ T5835] bridge_slave_1: entered promiscuous mode [ 88.582076][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.613736][ T5833] team0: Port device team_slave_0 added [ 88.639922][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.647226][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.673832][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.687738][ T5833] team0: Port device team_slave_1 added [ 88.694248][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.701832][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.728355][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.776089][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.799487][ T5832] team0: Port device team_slave_0 added [ 88.817614][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.824628][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.850940][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.864653][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.872066][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.898553][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.912127][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.933094][ T5832] team0: Port device team_slave_1 added [ 88.985397][ T5835] team0: Port device team_slave_0 added [ 89.012530][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.020785][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.047543][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.072329][ T5831] hsr_slave_0: entered promiscuous mode [ 89.078858][ T5831] hsr_slave_1: entered promiscuous mode [ 89.088111][ T5835] team0: Port device team_slave_1 added [ 89.105000][ T5833] hsr_slave_0: entered promiscuous mode [ 89.114465][ T5833] hsr_slave_1: entered promiscuous mode [ 89.121143][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.129062][ T5833] Cannot create hsr debugfs directory [ 89.135199][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.146239][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.173072][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.198528][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.205543][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.231925][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.261418][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.270255][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.297186][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.396964][ T5832] hsr_slave_0: entered promiscuous mode [ 89.403430][ T5832] hsr_slave_1: entered promiscuous mode [ 89.413461][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.421454][ T5832] Cannot create hsr debugfs directory [ 89.473083][ T5835] hsr_slave_0: entered promiscuous mode [ 89.478335][ T5839] Bluetooth: hci2: command tx timeout [ 89.478835][ T5849] Bluetooth: hci0: command tx timeout [ 89.484661][ T5843] Bluetooth: hci1: command tx timeout [ 89.497822][ T5835] hsr_slave_1: entered promiscuous mode [ 89.504188][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.511881][ T5835] Cannot create hsr debugfs directory [ 89.556850][ T5843] Bluetooth: hci3: command tx timeout [ 89.773492][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.787826][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.822887][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.840117][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.888278][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.904131][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.923820][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.945026][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.999284][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.011718][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.022373][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.056834][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.119641][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.130559][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.141617][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.152916][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.258565][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.315184][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.332459][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.381799][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.389126][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.407953][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.425566][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.448875][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.459536][ T3487] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.466728][ T3487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.476817][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.483980][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.516308][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.550910][ T4180] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.558117][ T4180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.572917][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.580071][ T4180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.617304][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.633568][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.640708][ T4180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.690388][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.697592][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.708495][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.715665][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.864699][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.131157][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.164865][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.195005][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.293812][ T5833] veth0_vlan: entered promiscuous mode [ 91.302796][ T5831] veth0_vlan: entered promiscuous mode [ 91.311993][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.344674][ T5831] veth1_vlan: entered promiscuous mode [ 91.369973][ T5833] veth1_vlan: entered promiscuous mode [ 91.380290][ T5832] veth0_vlan: entered promiscuous mode [ 91.428937][ T5832] veth1_vlan: entered promiscuous mode [ 91.435287][ T5835] veth0_vlan: entered promiscuous mode [ 91.473556][ T5835] veth1_vlan: entered promiscuous mode [ 91.492104][ T5833] veth0_macvtap: entered promiscuous mode [ 91.514625][ T5831] veth0_macvtap: entered promiscuous mode [ 91.523169][ T5833] veth1_macvtap: entered promiscuous mode [ 91.536317][ T5831] veth1_macvtap: entered promiscuous mode [ 91.557945][ T5843] Bluetooth: hci1: command tx timeout [ 91.563434][ T5843] Bluetooth: hci2: command tx timeout [ 91.566830][ T5849] Bluetooth: hci0: command tx timeout [ 91.580624][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.611337][ T5835] veth0_macvtap: entered promiscuous mode [ 91.623559][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.634032][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.645692][ T5849] Bluetooth: hci3: command tx timeout [ 91.652358][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.663636][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.673738][ T5832] veth0_macvtap: entered promiscuous mode [ 91.693233][ T5835] veth1_macvtap: entered promiscuous mode [ 91.705992][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.715241][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.725368][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.734517][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.747959][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.758696][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.771039][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.787078][ T5832] veth1_macvtap: entered promiscuous mode [ 91.795594][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.806367][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.816779][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.825625][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.861857][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.872755][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.884404][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.895392][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.911034][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.922084][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.933402][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.943698][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.954376][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.965975][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.002848][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.015593][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.028686][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.037869][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.083503][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.094615][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.105972][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.118355][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.128843][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.139582][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.151410][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.222781][ T3436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.236776][ T3436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.266137][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.284639][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.295136][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.311857][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.322097][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.339685][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.353747][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.386309][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.397874][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.418447][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.431623][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.473569][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.487213][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.550119][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.573437][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.609972][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.628297][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.718015][ T3436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.725891][ T3436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.785561][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.833129][ T3436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.861404][ T3436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.926422][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.975601][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.017946][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.075628][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.184532][ T5902] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.637921][ T5849] Bluetooth: hci0: command tx timeout [ 93.643717][ T5849] Bluetooth: hci1: command tx timeout [ 93.649381][ T5849] Bluetooth: hci2: command tx timeout [ 93.716941][ T5843] Bluetooth: hci3: command tx timeout [ 93.807219][ T5907] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 93.987563][ T5912] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5'. [ 94.481364][ T5912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.521695][ T5912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.576544][ T5912] bond0 (unregistering): Released all slaves [ 95.672692][ T5931] Zero length message leads to an empty skb [ 95.716952][ T5843] Bluetooth: hci2: command tx timeout [ 95.722537][ T5843] Bluetooth: hci1: command tx timeout [ 95.728078][ T5849] Bluetooth: hci0: command tx timeout [ 95.797411][ T5843] Bluetooth: hci3: command tx timeout [ 97.094453][ T5953] Process accounting resumed [ 97.329252][ T46] cfg80211: failed to load regulatory.db [ 98.527131][ T5977] netlink: zone id is out of range [ 98.538888][ T5977] netlink: set zone limit has 8 unknown bytes [ 98.994730][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24'. [ 101.080837][ T6007] syz.0.26 (6007): drop_caches: 0 [ 101.097185][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'. [ 102.107604][ T6027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.30'. [ 102.116812][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.124282][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.207899][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.215387][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.272290][ T6036] vhci_hcd: not connected 4 [ 102.567654][ T6028] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 102.585364][ T6028] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 105.305386][ T6066] syz.2.41 (6066): drop_caches: 0 [ 105.325665][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.41'. [ 106.597699][ T6098] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 106.631597][ T6098] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 107.937141][ T6112] vhci_hcd: not connected 4 [ 108.404963][ T6120] netlink: zone id is out of range [ 108.457453][ T6120] netlink: set zone limit has 8 unknown bytes [ 109.699930][ T6131] syz.1.57 (6131): drop_caches: 0 [ 109.738381][ T6131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'. [ 111.042268][ T6141] Process accounting resumed [ 111.891469][ T6157] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 111.921562][ T6157] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 113.069567][ T6171] vhci_hcd: not connected 4 [ 115.287177][ T6189] syz.3.69 (6189): drop_caches: 0 [ 115.313906][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.69'. [ 115.364692][ T6199] netlink: 28 bytes leftover after parsing attributes in process `syz.0.80'. [ 115.398040][ T6199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.408179][ T6199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.426310][ T6199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.468167][ T6199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.165543][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 117.188209][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 118.207444][ T6246] Process accounting resumed [ 119.755206][ T6264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.94'. [ 119.778154][ T6264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.803843][ T6264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.816971][ T6264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.824673][ T6264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.622667][ T6327] FAULT_INJECTION: forcing a failure. [ 121.622667][ T6327] name failslab, interval 1, probability 0, space 0, times 1 [ 121.641366][ T6327] CPU: 0 UID: 0 PID: 6327 Comm: syz.0.113 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 121.652065][ T6327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 121.662176][ T6327] Call Trace: [ 121.665506][ T6327] [ 121.668488][ T6327] dump_stack_lvl+0x16c/0x1f0 [ 121.673275][ T6327] should_fail_ex+0x497/0x5b0 [ 121.678031][ T6327] ? fs_reclaim_acquire+0xae/0x150 [ 121.683230][ T6327] should_failslab+0xc2/0x120 [ 121.687990][ T6327] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 121.693453][ T6327] ? __pfx___might_resched+0x10/0x10 [ 121.698812][ T6327] ? __anon_vma_prepare+0xae/0x5e0 [ 121.704013][ T6327] __anon_vma_prepare+0xae/0x5e0 [ 121.709049][ T6327] __vmf_anon_prepare+0x11c/0x240 [ 121.714247][ T6327] do_wp_page+0xf7e/0x4670 [ 121.718751][ T6327] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 121.724453][ T6327] ? __pfx_do_wp_page+0x10/0x10 [ 121.729374][ T6327] ? rcu_is_watching+0x12/0xc0 [ 121.734305][ T6327] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 121.739754][ T6327] ? lock_acquire+0x2f/0xb0 [ 121.744334][ T6327] ? __handle_mm_fault+0xdfa/0x2a40 [ 121.749627][ T6327] __handle_mm_fault+0x1ade/0x2a40 [ 121.754838][ T6327] ? __pfx___handle_mm_fault+0x10/0x10 [ 121.760382][ T6327] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 121.766100][ T6327] ? find_vma+0xc0/0x140 [ 121.770428][ T6327] ? __pfx_find_vma+0x10/0x10 [ 121.775148][ T6327] handle_mm_fault+0x3fa/0xaa0 [ 121.779989][ T6327] do_user_addr_fault+0x7a3/0x13f0 [ 121.785183][ T6327] exc_page_fault+0x5c/0xc0 [ 121.789721][ T6327] asm_exc_page_fault+0x26/0x30 [ 121.794602][ T6327] RIP: 0010:rep_movs_alternative+0x33/0x70 [ 121.800641][ T6327] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 121.820344][ T6327] RSP: 0018:ffffc9000c9a7b20 EFLAGS: 00050206 [ 121.826551][ T6327] RAX: 372039352e313231 RBX: 0000000000000000 RCX: 000000000000000d [ 121.834548][ T6327] RDX: ffffed100fac4c02 RSI: ffff88807d626000 RDI: 0000000000000000 [ 121.842558][ T6327] RBP: ffffc9000c9a7da0 R08: 0000000000000000 R09: ffffed100fac4c01 [ 121.850575][ T6327] R10: ffff88807d62600c R11: 0000000000000002 R12: 000000000000000d [ 121.858574][ T6327] R13: 00007ffffffff000 R14: ffff88807d626000 R15: 000000000000000d [ 121.866613][ T6327] _copy_to_iter+0x384/0x1400 [ 121.871383][ T6327] ? trace_lock_acquire+0x14e/0x1f0 [ 121.876655][ T6327] ? __pfx__copy_to_iter+0x10/0x10 [ 121.881828][ T6327] ? __virt_addr_valid+0x1a4/0x590 [ 121.887087][ T6327] ? __virt_addr_valid+0x5e/0x590 [ 121.892163][ T6327] ? __phys_addr_symbol+0x30/0x80 [ 121.897237][ T6327] ? __check_object_size+0x488/0x710 [ 121.902586][ T6327] seq_read_iter+0xd00/0x12b0 [ 121.907307][ T6327] proc_reg_read_iter+0x118/0x310 [ 121.912378][ T6327] vfs_read+0x87f/0xbe0 [ 121.916581][ T6327] ? __pfx_vfs_read+0x10/0x10 [ 121.921327][ T6327] ksys_read+0x12b/0x250 [ 121.925607][ T6327] ? __pfx_ksys_read+0x10/0x10 [ 121.930411][ T6327] do_syscall_64+0xcd/0x250 [ 121.934949][ T6327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.940878][ T6327] RIP: 0033:0x7f1bb2585d29 [ 121.945337][ T6327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.965006][ T6327] RSP: 002b:00007f1bb32e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 121.973453][ T6327] RAX: ffffffffffffffda RBX: 00007f1bb2775fa0 RCX: 00007f1bb2585d29 [ 121.981468][ T6327] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 121.989486][ T6327] RBP: 00007f1bb32e7090 R08: 0000000000000000 R09: 0000000000000000 [ 121.997515][ T6327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.005541][ T6327] R13: 0000000000000000 R14: 00007f1bb2775fa0 R15: 00007ffc46e7f248 [ 122.013596][ T6327] [ 122.256383][ T6338] Process accounting resumed [ 122.880524][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.123'. [ 124.580270][ T6382] ------------[ cut here ]------------ [ 124.586075][ T6382] WARNING: CPU: 1 PID: 6382 at mm/page_alloc.c:4727 __alloc_pages_noprof+0xeff/0x25b0 [ 124.595931][ T6382] Modules linked in: [ 124.600132][ T6382] CPU: 1 UID: 0 PID: 6382 Comm: syz.3.129 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 124.611530][ T6382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 124.622405][ T6382] RIP: 0010:__alloc_pages_noprof+0xeff/0x25b0 [ 124.628723][ T6382] Code: 24 2c 00 00 00 00 89 cd 0f 84 8b f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 0e b3 fe ff e9 69 f9 ff ff c6 05 e3 70 16 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 9f a3 0c 00 8b 14 24 e9 [ 124.648714][ T6382] RSP: 0018:ffffc9000fd57918 EFLAGS: 00010246 [ 124.655230][ T6382] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 124.663417][ T6382] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 124.671636][ T6382] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 124.679838][ T6382] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000013 [ 124.688099][ T6382] R13: 0000000000040cc0 R14: 1ffff92001faaf37 R15: 00000000ffffffff [ 124.696238][ T6382] FS: 00007fd776b3e6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 124.705631][ T6382] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.712959][ T6382] CR2: 000000110c300257 CR3: 0000000028910000 CR4: 00000000003526f0 [ 124.721869][ T6382] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 124.729989][ T6382] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 124.738090][ T6382] Call Trace: [ 124.741418][ T6382] [ 124.744392][ T6382] ? __warn+0xea/0x3c0 [ 124.748620][ T6382] ? __alloc_pages_noprof+0xeff/0x25b0 [ 124.754164][ T6382] ? report_bug+0x3c0/0x580 [ 124.758819][ T6382] ? handle_bug+0x54/0xa0 [ 124.763226][ T6382] ? exc_invalid_op+0x17/0x50 [ 124.768089][ T6382] ? asm_exc_invalid_op+0x1a/0x20 [ 124.773219][ T6382] ? __alloc_pages_noprof+0xeff/0x25b0 [ 124.778867][ T6382] ? hlock_class+0x4e/0x130 [ 124.783460][ T6382] ? mark_lock+0xb5/0xc60 [ 124.787994][ T6382] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 124.793808][ T6382] ? __pfx_mark_lock+0x10/0x10 [ 124.798782][ T6382] ? aa_file_perm+0x4c6/0xfe0 [ 124.803535][ T6382] ? __pfx_lock_release+0x10/0x10 [ 124.808701][ T6382] ? trace_lock_acquire+0x14e/0x1f0 [ 124.814572][ T6382] ? hlock_class+0x4e/0x130 [ 124.819860][ T6382] ? __lock_acquire+0x15a9/0x3c40 [ 124.824990][ T6382] ___kmalloc_large_node+0x84/0x1b0 [ 124.830386][ T6382] __kmalloc_large_node_noprof+0x1c/0x70 [ 124.836100][ T6382] __kmalloc_node_track_caller_noprof.cold+0x5/0x5f [ 124.843368][ T6382] ? __pfx_aa_file_perm+0x10/0x10 [ 124.848552][ T6382] ? bitmap_parse_user+0x24/0x90 [ 124.853576][ T6382] memdup_user_nul+0x2b/0x110 [ 124.858395][ T6382] bitmap_parse_user+0x24/0x90 [ 124.863237][ T6382] default_affinity_write+0xac/0x1c0 [ 124.868656][ T6382] ? __pfx_default_affinity_write+0x10/0x10 [ 124.874614][ T6382] ? trace_lock_acquire+0x14e/0x1f0 [ 124.880048][ T6382] ? __pfx_default_affinity_write+0x10/0x10 [ 124.886030][ T6382] proc_reg_write+0x23d/0x330 [ 124.890902][ T6382] ? __pfx_proc_reg_write+0x10/0x10 [ 124.896185][ T6382] vfs_write+0x24c/0x1150 [ 124.900672][ T6382] ? __fget_files+0x1fc/0x3a0 [ 124.905424][ T6382] ? __pfx___mutex_lock+0x10/0x10 [ 124.910617][ T6382] ? __pfx_vfs_write+0x10/0x10 [ 124.916085][ T6382] ? __fget_files+0x206/0x3a0 [ 124.921673][ T6382] ksys_write+0x12b/0x250 [ 124.926078][ T6382] ? __pfx_ksys_write+0x10/0x10 [ 124.931131][ T6382] do_syscall_64+0xcd/0x250 [ 124.935713][ T6382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.941777][ T6382] RIP: 0033:0x7fd775d85d29 [ 124.946250][ T6382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.966058][ T6382] RSP: 002b:00007fd776b3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.974659][ T6382] RAX: ffffffffffffffda RBX: 00007fd775f75fa0 RCX: 00007fd775d85d29 [ 124.982769][ T6382] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 124.990858][ T6382] RBP: 00007fd775e01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 124.999016][ T6382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.007114][ T6382] R13: 0000000000000000 R14: 00007fd775f75fa0 R15: 00007ffd51da6be8 [ 125.015258][ T6382] [ 125.019031][ T6382] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 125.026370][ T6382] CPU: 1 UID: 0 PID: 6382 Comm: syz.3.129 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 125.037035][ T6382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 125.047145][ T6382] Call Trace: [ 125.050466][ T6382] [ 125.053442][ T6382] dump_stack_lvl+0x3d/0x1f0 [ 125.058113][ T6382] panic+0x71d/0x800 [ 125.062093][ T6382] ? __pfx_panic+0x10/0x10 [ 125.066590][ T6382] ? show_trace_log_lvl+0x29d/0x3d0 [ 125.071872][ T6382] ? __alloc_pages_noprof+0xeff/0x25b0 [ 125.077412][ T6382] check_panic_on_warn+0xab/0xb0 [ 125.082429][ T6382] __warn+0xf6/0x3c0 [ 125.086403][ T6382] ? __alloc_pages_noprof+0xeff/0x25b0 [ 125.091937][ T6382] report_bug+0x3c0/0x580 [ 125.096309][ T6382] handle_bug+0x54/0xa0 [ 125.100513][ T6382] exc_invalid_op+0x17/0x50 [ 125.105064][ T6382] asm_exc_invalid_op+0x1a/0x20 [ 125.109958][ T6382] RIP: 0010:__alloc_pages_noprof+0xeff/0x25b0 [ 125.116069][ T6382] Code: 24 2c 00 00 00 00 89 cd 0f 84 8b f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 0e b3 fe ff e9 69 f9 ff ff c6 05 e3 70 16 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 9f a3 0c 00 8b 14 24 e9 [ 125.135724][ T6382] RSP: 0018:ffffc9000fd57918 EFLAGS: 00010246 [ 125.141832][ T6382] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 125.149831][ T6382] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 125.157828][ T6382] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 125.165826][ T6382] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000013 [ 125.173846][ T6382] R13: 0000000000040cc0 R14: 1ffff92001faaf37 R15: 00000000ffffffff [ 125.181881][ T6382] ? hlock_class+0x4e/0x130 [ 125.186436][ T6382] ? mark_lock+0xb5/0xc60 [ 125.190818][ T6382] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 125.196580][ T6382] ? __pfx_mark_lock+0x10/0x10 [ 125.201411][ T6382] ? aa_file_perm+0x4c6/0xfe0 [ 125.206124][ T6382] ? __pfx_lock_release+0x10/0x10 [ 125.211176][ T6382] ? trace_lock_acquire+0x14e/0x1f0 [ 125.216424][ T6382] ? hlock_class+0x4e/0x130 [ 125.220988][ T6382] ? __lock_acquire+0x15a9/0x3c40 [ 125.226068][ T6382] ___kmalloc_large_node+0x84/0x1b0 [ 125.231308][ T6382] __kmalloc_large_node_noprof+0x1c/0x70 [ 125.236985][ T6382] __kmalloc_node_track_caller_noprof.cold+0x5/0x5f [ 125.243623][ T6382] ? __pfx_aa_file_perm+0x10/0x10 [ 125.248685][ T6382] ? bitmap_parse_user+0x24/0x90 [ 125.253674][ T6382] memdup_user_nul+0x2b/0x110 [ 125.258391][ T6382] bitmap_parse_user+0x24/0x90 [ 125.263225][ T6382] default_affinity_write+0xac/0x1c0 [ 125.268569][ T6382] ? __pfx_default_affinity_write+0x10/0x10 [ 125.274514][ T6382] ? trace_lock_acquire+0x14e/0x1f0 [ 125.279782][ T6382] ? __pfx_default_affinity_write+0x10/0x10 [ 125.285726][ T6382] proc_reg_write+0x23d/0x330 [ 125.290452][ T6382] ? __pfx_proc_reg_write+0x10/0x10 [ 125.295690][ T6382] vfs_write+0x24c/0x1150 [ 125.300060][ T6382] ? __fget_files+0x1fc/0x3a0 [ 125.304775][ T6382] ? __pfx___mutex_lock+0x10/0x10 [ 125.309841][ T6382] ? __pfx_vfs_write+0x10/0x10 [ 125.314654][ T6382] ? __fget_files+0x206/0x3a0 [ 125.319389][ T6382] ksys_write+0x12b/0x250 [ 125.323762][ T6382] ? __pfx_ksys_write+0x10/0x10 [ 125.328676][ T6382] do_syscall_64+0xcd/0x250 [ 125.333224][ T6382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.339159][ T6382] RIP: 0033:0x7fd775d85d29 [ 125.343604][ T6382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.363247][ T6382] RSP: 002b:00007fd776b3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 125.371696][ T6382] RAX: ffffffffffffffda RBX: 00007fd775f75fa0 RCX: 00007fd775d85d29 [ 125.379709][ T6382] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 125.387706][ T6382] RBP: 00007fd775e01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 125.395700][ T6382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.403698][ T6382] R13: 0000000000000000 R14: 00007fd775f75fa0 R15: 00007ffd51da6be8 [ 125.411713][ T6382] [ 125.415062][ T6382] Kernel Offset: disabled [ 125.419448][ T6382] Rebooting in 86400 seconds..