last executing test programs: 2m48.842641539s ago: executing program 3 (id=518): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0) ioctl$auto_evdev_fops_evdev(r1, 0x40084502, 0x0) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x4001090) r2 = socket(0x10, 0x80002, 0x0) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="ffa2"], 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), r6) sendmsg$auto_CTRL_CMD_GETFAMILY(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002dbd7000ffdbdf25030000000600010030"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) r8 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000200), r6) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fedbdf25010000000800030000040000080008"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r8, 0x100, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000780)={0x0, 0xffffff24, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc050}, 0x4040080) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 2m47.939582678s ago: executing program 3 (id=528): r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x181040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$auto_USB_RAW_IOCTL_EP_READ(r0, 0xc0085508, 0x0) 2m47.754279735s ago: executing program 3 (id=530): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000040), 0x2880, 0x0) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/tcp\x00', 0x0, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) (async) read$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) (async) mkdir$auto(&(0x7f0000000000)='./file0\x00', 0x7) 2m47.457537092s ago: executing program 3 (id=531): socket(0x200000000000011, 0x2, 0x0) (async) r0 = socket(0x200000000000011, 0x2, 0x0) socket(0x15, 0x5, 0x0) (async) r1 = socket(0x15, 0x5, 0x0) socket(0x15, 0x5, 0x0) (async) r2 = socket(0x15, 0x5, 0x0) setsockopt$auto(r2, 0x114, 0x8, 0x0, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0xc) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x5db60a10051d021c, 0x1, 0x0) (async) socket(0x5db60a10051d021c, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080)=@generic={0x0, "4b9a0fdd15cf05864ee4f9fb2666"}, 0x68) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x1) r3 = open(&(0x7f0000001bc0)='./file0\x00', 0x4140, 0x0) fanotify_mark$auto(r3, 0x105, 0x8209, r3, 0x0) (async) fanotify_mark$auto(r3, 0x105, 0x8209, r3, 0x0) r4 = open(&(0x7f0000001bc0)='./file0\x00', 0x4140, 0x0) fanotify_mark$auto(0x0, 0x105, 0x8009, r4, 0x0) mmap$auto(0x0, 0x4, 0x40, 0xeb2, 0x401, 0x8000) r5 = socket(0x15, 0x5, 0x0) r6 = getsockopt$auto(r5, 0x114, 0x2716, 0xfffffffffffffffc, 0x0) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x5, 0x0, 0x200, 0x8}, 0xffffffff) setsockopt$auto(r0, 0x107, 0x17, 0x0, 0x4) (async) setsockopt$auto(r0, 0x107, 0x17, 0x0, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x400002, 0x0) r9 = openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) close_range$auto(r8, r9, 0x2) r10 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) ioctl$auto(r9, 0x8, r6) (async) ioctl$auto(r9, 0x8, r6) sendmsg$auto_OVS_VPORT_CMD_NEW(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd7000ffdbdf25010000000801090004000800020004000000060003002a0000001958484c080008000000bbf174ff135cb62a2613b832a641fc2552c083179bafcd483006390b087fa7f0a670e242942c0f0b14d2084f2b5d2121c6dc6690ddd396ad1cb5b7636c53c20a88eb51e7fa6ab3ccec53f30c92a980a6636eb57fc26187db0e6b3d84012bfa1946d072aa37b32be043fe4fd5c625d89338dc70c79eea0cdb89821c940ee2ca024957bbbf12f47cdd145ed831441c831a8adaa3367f1df84aeed43015569edb020d7f05819ccabc5aa2f8423c26825eab157e84373d293c1ca5872dac9e12728c6f0f00000000000000", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) sendmsg$auto_OVS_VPORT_CMD_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="34ff95d28d34434a32d494c31f3342770b011b", @ANYRES16=r10, @ANYBLOB="380825bd7000fbdbdf2504000000080002005d720000080002000000000008000100030000000800020023000000"], 0x34}}, 0x20000084) (async) sendmsg$auto_OVS_VPORT_CMD_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="34ff95d28d34434a32d494c31f3342770b011b", @ANYRES16=r10, @ANYBLOB="380825bd7000fbdbdf2504000000080002005d720000080002000000000008000100030000000800020023000000"], 0x34}}, 0x20000084) 2m47.267524398s ago: executing program 3 (id=532): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(0x0, 0x2) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv6/conf/ip6tnl0/stable_secret\x00', 0x141241, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f00000000c0)=@in={0x2, 0x4e20, @broadcast}, 0x1d) mmap$auto(0x0, 0x400000, 0x9, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS2\x00', 0x80000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram7/hidden\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/124, 0x7c) ioctl$auto_KVM_CREATE_VM(r1, 0xc004ae02, 0x88) 2m47.14444315s ago: executing program 3 (id=535): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x7fffffffffffffff, 0xffffffffffff0005, 0x19) (async) mmap$auto(0x0, 0x10000000000004, 0x93b5, 0x40eb1, 0x401, 0x300000000000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x80000002, 0xe}, 0x0) (async) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x80000002}, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, 0x0, 0x20000000) socket(0x0, 0x800, 0x92d) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async) socket(0xa, 0x801, 0x84) (async) getsockopt$auto(r0, 0xfffffffc, 0x7, 0x0, &(0x7f0000000280)=0x4) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x10001, 0x3, 0x8001) (async) madvise$auto(0x0, 0x80000001, 0xa) (async) r1 = gettid() process_vm_writev$auto(r1, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0x7) (async) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) copy_file_range$auto(r2, 0x0, 0x2, 0x0, 0x9, 0x9) (async) mmap$auto(0x8, 0x2020009, 0x3, 0x80000eb1, r2, 0x8000) ioperm$auto(0x7, 0x4, 0xa6) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x4) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x7, 0xffffffffffff0005, 0x4001b) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) faccessat2$auto(0x1, &(0x7f0000000040)='\x00', 0x4, 0x1000) 2m32.046559928s ago: executing program 32 (id=535): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x7fffffffffffffff, 0xffffffffffff0005, 0x19) (async) mmap$auto(0x0, 0x10000000000004, 0x93b5, 0x40eb1, 0x401, 0x300000000000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x80000002, 0xe}, 0x0) (async) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x80000002}, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, 0x0, 0x20000000) socket(0x0, 0x800, 0x92d) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async) socket(0xa, 0x801, 0x84) (async) getsockopt$auto(r0, 0xfffffffc, 0x7, 0x0, &(0x7f0000000280)=0x4) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x10001, 0x3, 0x8001) (async) madvise$auto(0x0, 0x80000001, 0xa) (async) r1 = gettid() process_vm_writev$auto(r1, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0x7) (async) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) copy_file_range$auto(r2, 0x0, 0x2, 0x0, 0x9, 0x9) (async) mmap$auto(0x8, 0x2020009, 0x3, 0x80000eb1, r2, 0x8000) ioperm$auto(0x7, 0x4, 0xa6) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x4) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x7, 0xffffffffffff0005, 0x4001b) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) faccessat2$auto(0x1, &(0x7f0000000040)='\x00', 0x4, 0x1000) 18.853280325s ago: executing program 1 (id=1042): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f00000000c0), 0x2201, 0x0) ioctl$auto_IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, 0x0) sendmsg$auto_BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x40000) fchdir$auto(0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = io_uring_setup$auto(0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) close_range$auto(r3, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'tunl0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'pimreg1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1\x00'}) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff) semctl$auto(0xff, 0x161, 0x3, 0x8) r5 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000680), 0xc, &(0x7f0000000f00)={&(0x7f0000000700)={0x334, r5, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x1}, @IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x200}, @IOAM6_ATTR_SC_DATA={0x17e, 0x5, "c109f0583aed0cbb450efc1e1accc38ba3291d22186ace2e01ce31bcf1abdffda862e05222c1736f97abdfdf55907c7658f2722aae2386727f6e186517a1f0f50d8a93e373c50df921543f6af46e143039bd197afab7ee8418dc9bb06db69bc8ff9ad4fb85a2aa5ae4906e5cfd81a53dc43e4ced47760689a3ac96078768f0c9541548449fe04dd8fdd53515dd2111d8127bcc20fb0ae80116579501c1753f60c747f3da5c8430e1d499681e7bc44b386833177efc43ec48c95abfc398e484cb936eff2b7dc205cef48e20ad4588015041d30a0254887ed11ab685ecfe719f30797a293786f8c464f87cd6f6abfba6709aa6219884badd74b4861c820189200f8a9ba27c478d0270ddfb9648775772a9ba92bb227ab9118f173d4e371eb6b35035a3882dfd728ac1acb7bd2ff3b4c8e774c1a9dd425485723f6bd854745847b540a34715710bcff256cd4424b2eb68bdf687e82016060275d94b7d2b902e199b525a4b7b1228faa30d05f56b5c5c023fd98572bf308b8a4ae50e"}, @IOAM6_ATTR_SC_DATA={0x17a, 0x5, "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"}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x217}]}, 0x334}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) sendmsg$auto_IEEE802154_LLSEC_DEL_SECLEVEL(r2, 0x0, 0x402c800) ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) process_vm_writev$auto(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x19c1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000100)='nl80211\x00', 0xbe62) sendmsg$auto_NFSD_CMD_VERSION_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd35ae43"], 0x2c}, 0x1, 0x0, 0x0, 0x24000001}, 0x4010) socket(0x10, 0x2, 0x0) 18.358837284s ago: executing program 1 (id=1046): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) (async, rerun: 64) socket(0xa, 0x5, 0x0) (async, rerun: 64) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @remote}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) (async) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) 17.258680731s ago: executing program 1 (id=1049): r0 = openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/comm\x00', 0x2, 0x0) prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4) (async) write$auto(r0, &(0x7f0000000000)='/proc/thread-self/comm\x00', 0x75e9) (async) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1e, 0x4, 0x0) (async) r1 = socket(0x1e, 0x1, 0x0) (async) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async) newfstatat$auto(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0xfffffffffffffe01, 0x2, 0x0, 0x3dc3, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0x7, 0xffffffffffffffff, 0x8, 0xcab, 0x6, 0x0, 0x4, 0x7}, 0x1000) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x9, 0x9, 0x3, 0x6, 0x2, 0x9, 0x5e58296f, 0x4000000000000000, 0x9, 0x3, 0x200, 0x8, 0x6]}, 0x0, 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) (async) prctl$auto(0x10000000016, 0x1, 0x4, 0x5, 0x0) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x24004141) (async) sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, &(0x7f0000000080)={0x0, 0x1}, 0x10a, 0x0, 0x0, 0x3ff}, 0xed7138c}, 0x200, 0x0) (async) mbind$auto(0x3, 0x1ff, 0x7ba, &(0x7f00000001c0)=0x200, 0x3, 0x2) (async) r2 = socket(0x2, 0x2, 0x88) splice$auto(r2, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1100000012"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) 16.221538264s ago: executing program 1 (id=1055): r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20240, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x0, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000840)="faa203ba390b5364b0c45f1ccb02cf457a69d8d1", 0x3) r2 = socket(0x15, 0x5, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) write$auto(r3, &(0x7f0000000080)='\\sys kernel/tracing/set_event_notrace_pid\x00', 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0xc9, 0x6, 0xeb1, r0, 0x2) r4 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x4a000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) select$auto(0x8, &(0x7f0000000080)={[0x20000009, 0xfffffffffffbfffc, 0x9, 0x5, 0xc, 0x3, 0x7, 0x1ffe000, 0x2, 0x8, 0x5, 0xf, 0xd, 0x1, 0x6, 0x1]}, 0x0, 0x0, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x441, 0x0) write$auto(r5, &(0x7f0000000080)='\\sys kernel/tracing/set_event_notrace_pid\x00', 0x9) r6 = socket(0x26, 0x5, 0xfff) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e9000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fddbdf250200fd0008000300", @ANYRES32=r9, @ANYBLOB="0c0002000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004081}, 0x20000084) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) listen$auto(r2, 0x20000081) sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) close_range$auto(0xffffffffffffffff, r2, 0x80000) r10 = openat$auto_long_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy11/long_retry_limit\x00', 0x200200, 0x0) write$auto(r10, &(0x7f0000000080)='/dev/fb0\x00', 0x9) getpriority$auto(0x2, 0x7ff) read$auto_fb_fops_fb_chrdev(r0, 0x0, 0x0) 15.929959807s ago: executing program 1 (id=1057): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/machinecheck/machinecheck0/monarch_timeout\x00', 0x2, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)="33aa0d7191af", 0x6) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mount$auto(0x0, &(0x7f0000000340)='}[,&*}\x00', 0x0, 0xfffe, 0x0) memfd_create$auto(&(0x7f00000002c0)='IPVS\x00', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x6280c0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) write$auto(r2, 0x0, 0x2) mount$auto(0x0, &(0x7f0000000380)='}[,&*}/file0\x00', 0x0, 0x7f, &(0x7f0000000480)="f75c8c6cf3e7dd882d9264f52f4200000000403407fa47467ac93be8702be2cbc6097f0a5095f1cebaaba2bb5025864a7d5f665f89c2c541e37eda82b8f96639b5d094c2965c0c7b72b5b83aa7eb64222a314271cdd404005b2f35fdaa9689bff3cb0e00000000000000008e8a8605792e0b67a937e72244674ff2080000004fea6e951e48dddcd66ff02226b12ef7a8dd9b9dea7d06454cdf6e1ca466adff4795505793d4334a5970c6eb53bddf7e94df2e1cc6ea41d1b24b14d1bd551de088166b9f370552b29269a6b3702cbd826dfe99d618d2938b8424a67984824c") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_ADD(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="70050000", @ANYRES16=r4, @ANYBLOB="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"/1386], 0x570}, 0x1, 0x0, 0x0, 0x44800}, 0x8001) mmap$auto(0x0, 0x9, 0x4000000000db, 0x1c, 0x400, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000600", @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fddbdf250300000004000380"], 0x18}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) tkill$auto(0x80000000000001, 0x7) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf250a00000a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) socket(0x10, 0x2, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram12/trace/enable\x00', 0x20400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 14.239676944s ago: executing program 1 (id=1060): bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0xb, 0xff00, 0x6, 0x9}, 0x6f4) mmap$auto(0x0, 0x200, 0x1000000004, 0x9b72, 0x2, 0x8000) keyctl$auto(0x2000000000000017, 0x3ff, 0x2a, 0x0, 0x4) keyctl$auto(0x2000000000000017, 0x3ff, 0x0, 0x0, 0x3) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0xb, 0xff00, 0x6, 0x9}, 0x6f4) (async) mmap$auto(0x0, 0x200, 0x1000000004, 0x9b72, 0x2, 0x8000) (async) keyctl$auto(0x2000000000000017, 0x3ff, 0x2a, 0x0, 0x4) (async) keyctl$auto(0x2000000000000017, 0x3ff, 0x0, 0x0, 0x3) (async) 13.648568454s ago: executing program 33 (id=1060): bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0xb, 0xff00, 0x6, 0x9}, 0x6f4) mmap$auto(0x0, 0x200, 0x1000000004, 0x9b72, 0x2, 0x8000) keyctl$auto(0x2000000000000017, 0x3ff, 0x2a, 0x0, 0x4) keyctl$auto(0x2000000000000017, 0x3ff, 0x0, 0x0, 0x3) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0xb, 0xff00, 0x6, 0x9}, 0x6f4) (async) mmap$auto(0x0, 0x200, 0x1000000004, 0x9b72, 0x2, 0x8000) (async) keyctl$auto(0x2000000000000017, 0x3ff, 0x2a, 0x0, 0x4) (async) keyctl$auto(0x2000000000000017, 0x3ff, 0x0, 0x0, 0x3) (async) 9.462518044s ago: executing program 2 (id=1080): mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000100), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)={0x114c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_PEER={0x1128, 0x28, 0x0, 0x1, [@typed={0x35, 0xd9, 0x0, 0x0, @binary="9a4c40951d394159bded8518c29600807bd319edf0b36af50697aec056817a34bbe1e82212e0ace09e255d737a6430c526"}, @nested={0xbd, 0x110, 0x0, 0x1, [@generic="3f38b77cc9f282fbe30ce86cf808b6d99c0dc722358a20108e30baee0b02af71b9cb5f869f28d3c6373031e5bdb7a71492ffbaf2db1e761e6d1a7866da0446f41a5927101a5e53f72c1be7ae1ca3b1f3aaa8159bbd236f17c8f93a291c63c5090564ba4f3d165dace5bfef01010577b787e9ff8344bbfbc6b69cc09cc21d6865df063d56b808c3412edd92e3ae5a3a0b7cfed5891b3435e477321e93e55d29cd5df56ef6b3764e5e22bdfc4dcf643ba84e58ad682fae32232d"]}, @nested={0x15, 0x11d, 0x0, 0x1, [@generic="e3f254165501be008e0fd3767022f13a3d"]}, @typed={0x8, 0x6e, 0x0, 0x0, @u32=0x2}, @typed={0xffd, 0x139, 0x0, 0x0, @binary="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"}, @nested={0xc, 0xf1, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @fd}]}]}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x80}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x114c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$auto_NL80211_CMD_GET_WIPHY(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r3, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x181902, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r6 = socket(0xa, 0x2, 0x1003) setsockopt$auto(r6, 0x29, 0x11, 0x0, 0x1ff) ioctl$auto(r5, 0x80044dfd, 0x4) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001200)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x94) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r7 = openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/buffer_total_size_kb\x00', 0x200000, 0x0) read$auto_tracing_total_entries_fops_trace(r7, &(0x7f0000000140)=""/93, 0x5d) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x94, 0xf1, 0xb0, @raw=0x7}}) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sg0\x00', 0x200, 0x0) unshare$auto(0x8000000000000001) r8 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb1\x00', 0x0, 0x0) r9 = open(&(0x7f0000000340)='./file0\x00', 0x40, 0x40) ioctl$auto_VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000000380)={0x7, r8}) write$auto_proc_fault_inject_operations_base(r10, &(0x7f0000000200)="59c8c3b5b9ce19eba8a8bbf44b0506f82fe28a16498667df989db11848bc8eee298d165801fb7557bd524b173f75de17a8a097d92af9f56740c599c85580ad45ac4d0936ffcb729d178c2968fc2ae14cf34afda124ee74d505ca0702a3c51ccbe39f527ecda21b22d7d358c19a65c48969e10cb0e94bb9a8875b7a457c3480e841f6a7ee8838fcccbc570420e5d0a85504bb1d3c1f30afde5d2a34fac27ebce811830d294028f23c69bb0176cc194dc6d4724ae52dd6e8ff5a2de795fcdc4e68d992d6bd2251a0fa2234d074a13299447b365b6199d1a4ab", 0xd8) 8.947536077s ago: executing program 0 (id=1083): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip_mr_vif\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000280)=""/169, 0xa9) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/class/firmware/timeout\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000540)=""/150, 0x96) getrandom$auto(0x0, 0x6000000, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0x2, @new_prog_fd=0x4, 0x7, @old_map_fd=r2}, 0xa3) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0x9) 8.559571588s ago: executing program 2 (id=1084): r0 = socket(0x10, 0x2, 0x0) socket(0x2, 0x1, 0x0) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) ioctl$auto_I2C_TIMEOUT(r1, 0x702, 0x0) (async) ioctl$auto_I2C_TIMEOUT(r1, 0x702, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) remap_file_pages$auto(0x0, 0xf3a4, 0x0, 0x5, 0x15) (async) remap_file_pages$auto(0x0, 0xf3a4, 0x0, 0x5, 0x15) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x200}, @HSR_A_IF2_AGE={0x8, 0x4, 0x5}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_IFINDEX={0x8}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF1_AGE={0x8, 0x3, 0x400400}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x9c0a7fc06f585e63) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x200}, @HSR_A_IF2_AGE={0x8, 0x4, 0x5}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_IFINDEX={0x8}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF1_AGE={0x8, 0x3, 0x400400}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x9c0a7fc06f585e63) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x1) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180), 0x2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0xb, 0x4008) 7.896191287s ago: executing program 2 (id=1085): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001fc0)='/dev/ptyb3\x00', 0x1202, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x401c5820, 0x0) unshare$auto(0x40000080) clock_nanosleep$auto(0x2, 0x1000, 0x0, 0x0) msgctl$auto(0x5, 0x401, &(0x7f0000000280)={{0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1000, 0x8000, 0xa}, &(0x7f0000000200)=0x3, 0x0, 0x7f, 0x8, 0xc313, 0x9, 0x7fffffffffffffff, 0x6a7b, 0x7, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) stat$auto(0x0, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), r1) mmap$auto(0x0, 0x4000b, 0x4, 0x9b72, 0x0, 0x28000) futex_wake$auto(0x0, 0x8, 0x7, 0x2) mknod$auto(&(0x7f0000000240)='./file0\x00', 0x100, 0x5) read$auto(r1, 0x0, 0x1f36) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x0, 0x1, 0x3, 0x0, 0x2) io_uring_enter$auto(0x3, 0x5, 0x82400004, 0xe, 0x0, 0xd) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYRESOCT=r0], 0x18}, 0x1, 0x0, 0x0, 0x4011}, 0x2008c004) r3 = open(0x0, 0x0, 0xe1d2b27bdc14aabc) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)=ANY=[@ANYBLOB="17df0000", @ANYRES16=r2, @ANYBLOB="010b24bd7000fcdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r1) 7.255507408s ago: executing program 0 (id=1087): socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x1) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/smaps_rollup\x00', 0xe02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) timerfd_create$auto(0x0, 0x0) (async) socket(0x2, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) fanotify_init$auto(0x5, 0x67) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket(0x26, 0x80805, 0x0) (async) clone$auto(0x20003b46, 0x1, 0x0, 0x0, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) socket(0x2, 0x80000, 0x8) (async, rerun: 64) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x400, 0x0) (rerun: 64) io_uring_setup$auto(0x6, 0x0) (async) socket(0x18, 0x5, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r0 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x400000, 0x91) (rerun: 64) read$auto(r0, 0x0, 0x1) (async) read$auto(r0, 0x0, 0xf6c1) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22240, 0x55) (async, rerun: 64) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002c00)='/sys/devices/uprobe/format/retprobe\x00', 0x80, 0x0) (rerun: 64) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000002c40)=""/25, 0x19) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x501600, 0x0) socket(0x2, 0x3, 0xa) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) (async, rerun: 32) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) (rerun: 32) 6.516897687s ago: executing program 4 (id=1088): mmap$auto(0x0, 0x4, 0x3, 0x40eb2, 0x401, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd0/queue/iosched/async_depth\x00', 0xa42, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x80) write$auto(0x3, 0x0, 0xffd8) 6.154308444s ago: executing program 4 (id=1089): statx$auto(0x8, 0x0, 0x1000, 0xfffffffb, 0x0) r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/syscall\x00', 0x0, 0x0) read$auto_proc_single_file_operations_base(r0, &(0x7f00000000c0)=""/41, 0x11) 5.841826606s ago: executing program 4 (id=1090): io_pgetevents$auto(0x76d, 0xffffffffffffffff, 0xa31f, 0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x2000003}}) mmap$auto(0xf, 0x10c1823, 0x7, 0xb54, 0xffffffffffffffff, 0x1fb) setreuid$auto(0x0, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000080), r0) mmap$auto(0x0, 0x40009, 0x20000000df, 0x9b72, 0x7, 0x28000) bpf$auto(0x6, 0x0, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000740)='/dev/snd/controlC1\x00', 0x80000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, 0x0) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2000, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xfffffffffffffffa, 0x8000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7fffffff, 0x5) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x19, 0x0, 0x0) msgrcv$auto(0x0, 0x0, 0xff9, 0x0, 0xb1) msgsnd$auto(0x0, 0x0, 0x8, 0x9) sendmsg$auto_IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9ed6d3af0fb8b7175024435e", @ANYRES16=r2, @ANYRESHEX=r1], 0x2c}, 0x1, 0x0, 0x0, 0x20008094}, 0x24044014) r4 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r4, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xc3) 5.789539921s ago: executing program 2 (id=1091): r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x121601, 0x0) (async) r1 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x4206, r1, 0x0, 0x5) (async) process_vm_readv$auto(r1, &(0x7f0000000040)={0x0, 0x1}, 0x8, &(0x7f0000000080)={0x0}, 0x49, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x4611, 0x0) 4.891766891s ago: executing program 4 (id=1092): close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x4c100, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munmap$auto(0x20001000, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0xfffffffffffffffe, 0x8, 0x8003, 0xeb3, 0xfffffffffffffff9, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100"], 0x20}, 0x1, 0x0, 0x0, 0x4008014}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x0, 0x800}}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x8c3a, 0x2, 0xf) socket(0x2, 0xa, 0xa) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) ioctl$auto(0x1, 0x89a0, 0x8) read$auto(0x3, 0x0, 0x400000) 3.450807834s ago: executing program 0 (id=1093): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) fanotify_mark$auto(0x0, 0x1, 0x7, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfdef) recvmmsg$auto(0x4, &(0x7f0000000200)={{0x0, 0x4, &(0x7f0000000140)={0x0, 0x4da}, 0x4, 0x0, 0x8, 0x800}, 0x1000}, 0x37, 0x0, 0x0) r0 = openat$auto_dfs_dom_ops_debugfs(0xffffffffffffff9c, &(0x7f00000032c0), 0x109200, 0x0) read$auto_dfs_dom_ops_debugfs(r0, &(0x7f0000003300)=""/163, 0xa3) 3.152811237s ago: executing program 2 (id=1094): r0 = socket(0xa, 0x2, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) select$auto(0x9, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x80000000000000b, 0xc, 0x9, 0xf4, 0x6, 0x1, 0x40009, 0x3, 0x4000000000000000, 0xa, 0x93, 0x8, 0x8, 0x6]}, 0x0, 0x0) gettimeofday$auto(&(0x7f0000000180)={0x89, 0x9}, &(0x7f0000000200)={0xffffffff, 0x3be}) (async) pipe2$auto(&(0x7f0000000000)=r0, 0x4) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto(0x1ff, 0x2, 0x13, 0x1) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) fcntl$auto(0x2, 0x5, 0x1) (async) exit$auto(0x7) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) io_uring_setup$auto(0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01032cbd7000fbdbdf250a0000000600010020000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4019}, 0x0) settimeofday$auto(&(0x7f0000000080)={0x5, 0x9}, &(0x7f00000000c0)={0x3, 0x2}) (async) close_range$auto(r1, r0, 0x0) (async) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x1000002, 0x8000) (async) io_uring_setup$auto(0x4dcb, 0x0) (async) mq_open$auto(0x0, 0xde8, 0xb, 0x0) close_range$auto(0x2, 0x8000, 0x486) (async) clone$auto(0x8001, 0x7fffffff, 0xffffffffffffffff, 0xfffffffffffffffc, 0x100005) (async) connect$auto(0x3, &(0x7f0000000140), 0x55) (async) symlink$auto(&(0x7f0000000300)='\\\':.\x00', &(0x7f0000000340)='\xfb\x00') readlink$auto(&(0x7f0000000b00)='\xfb\x00', 0x0, 0x800) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) connect$auto(0x3, &(0x7f00000001c0), 0x55) 1.723606237s ago: executing program 0 (id=1095): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ttyye/power/control\x00', 0x1c1800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/64, 0x40) 1.723218848s ago: executing program 5 (id=1062): setregid$auto(0x81, 0x5) clone$auto(0x7fff, 0xff, &(0x7f0000000600)=0x8000, 0x0, 0x7) socket(0x2, 0x1, 0x0) socket(0x23, 0x2, 0x0) ioctl$auto(0x8000000000000001, 0x8946, 0x9) poll$auto(&(0x7f0000000080)={0x2, 0x0, 0x1a}, 0xff, 0x1) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), 0xffffffffffffffff) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x40802, 0x0) rt_sigaction$auto(0x36, 0x0, 0x0, 0x8) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r2, &(0x7f0000000000)='/sys/ker\"el/debug/tracing/events/vmalloc/filter\x00', 0x1ff) pipe$auto(0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x30, r1, 0x9, 0x70bd27, 0x25dfdbfb, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r4}, @NET_SHAPER_A_HANDLE={0x14, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x6}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) socket(0x10, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) timerfd_gettime$auto(0x6, &(0x7f0000000200)={{0xfffffffffffffff9, 0x8000}, {0x81, 0x5}}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4003763, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x3, 0x9}, 0x4000007}, 0x3, 0x80000001) r5 = socketpair$auto(0x60000005, 0xfffff2be, 0xfffffffd, &(0x7f0000000340)) r6 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_GET_DEVICE(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4b040000a2060b50fc7e75f00307fe22aab0b67b52919d70358c741f16239870e23f9c92e604", @ANYRES16=r6, @ANYBLOB="10002abd7000ffdbdf250100000005000c000600000004001400060011008200000005000a000300000005000b000600000005000c001b000000060011000100000008000e000000008008001d000c000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) madvise$auto(0x0, 0xffffffffffff0004, 0x19) 1.444347702s ago: executing program 0 (id=1096): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/free_buffer\x00', 0xca40, 0x0) write$auto_tracing_free_buffer_fops_trace(r0, &(0x7f0000000040)="fefb77a633fad5869fbb3c641fa2767a34dccb3ba7b755f7f8fad0b302da11c44c449336f60e555a59b0e0812d2e98792872d9b20f2741", 0x37) listen$auto(r0, 0x7fff) (async) listen$auto(r0, 0x7fff) mmap$auto(0x3, 0x200, 0x3, 0x14, r0, 0x3) (async) mmap$auto(0x3, 0x200, 0x3, 0x14, r0, 0x3) getsockopt$auto(0xffffffffffffffff, 0x40000000029, 0x3b, 0xfffffffffffffffe, 0x0) 992.337419ms ago: executing program 4 (id=1097): bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @loopback}, 0x6b) signalfd4$auto(0x10, &(0x7f0000000000)={0x2}, 0x8, 0x20b) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) pipe$auto(&(0x7f0000000000)) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0) ioctl$auto_evdev_fops_evdev(r0, 0x40044591, 0x0) close_range$auto(0x2, 0x8000, 0x2) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r1 = socketpair$auto(0x200, 0x58b, 0x10, &(0x7f0000000000)=0x6) mmap$auto(0x4000, 0x3, 0x3, 0xeb6, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, r1, 0x0) io_setup$auto(0x1, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x106) write$auto(0x3, 0x0, 0x100082) 702.702815ms ago: executing program 0 (id=1098): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) uname$auto(0x0) ioctl$auto(0x3, 0xc040564a, 0x38) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x80802, 0x0) connect$auto(0x3, &(0x7f0000000140), 0x55) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, 0x0, 0x400c080) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x88441, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r3, 0x4c05, 0x0) sendmmsg$auto(r2, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)='L', 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) 376.140586ms ago: executing program 4 (id=1099): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/smbd_max_fragmented_recv_size\x00', 0xe0002, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/smbd_max_fragmented_recv_size\x00', 0xe0002, 0x0) mmap$auto(0x0, 0x7, 0x2000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x7, 0x2000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x100000002, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x109000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/9/smp_affinity\x00', 0x129542, 0x0) read$auto(r0, 0x0, 0x2003) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptye8\x00', 0x149201, 0x0) sysfs$auto(0x2, 0xd, 0x0) ioctl$auto_TIOCSWINSZ2(r1, 0x5414, 0x0) (async) ioctl$auto_TIOCSWINSZ2(r1, 0x5414, 0x0) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon34\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, r2, 0x8000) timerfd_gettime$auto(r2, &(0x7f0000000100)={{0xa9, 0x3}, {0x4, 0x8}}) (async) timerfd_gettime$auto(r2, &(0x7f0000000100)={{0xa9, 0x3}, {0x4, 0x8}}) read$auto(0x3, 0x0, 0x80) write$auto(0x3, 0x0, 0xfffffdef) (async) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x7fffffffffffffff, 0x20005, 0x7ffffffd, 0x12, r2, 0x8002) (async) mmap$auto(0x7fffffffffffffff, 0x20005, 0x7ffffffd, 0x12, r2, 0x8002) bpf$auto(0x12, &(0x7f0000000040)=@bpf_attr_1={r2, 0x0, @next_key, 0xd}, 0x1080) (async) bpf$auto(0x12, &(0x7f0000000040)=@bpf_attr_1={r2, 0x0, @next_key, 0xd}, 0x1080) ioperm$auto(0x3, 0x1, 0x9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async) r3 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) read$auto_usbfs_devices_fops_usb(r3, 0x0, 0x0) (async) read$auto_usbfs_devices_fops_usb(r3, 0x0, 0x0) read$auto(r3, 0x0, 0x1000) socket(0x2b, 0x1, 0x1) (async) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 165.082456ms ago: executing program 2 (id=1100): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1f, 0x6, 0x20000001) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0xc88, 0x0, 0x0, &(0x7f0000000140), 0x8, 0x80000000}, 0x5}, 0x3b8b, 0x800) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) timer_create$auto(0x9, 0x0, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x4, 0x10007}, {0x9}}, 0x0) rt_sigaction$auto(0x36, &(0x7f0000000000)={0x0, 0x4, 0x0}, 0x0, 0x8) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000200)={0x4080, 0x149, 0x3a}, 0x18) mmap$auto(0x0, 0x7, 0xdf, 0x20eb5, 0x40000000000a5, 0x8000) fcntl$auto(0x0, 0x407, 0x1) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) shmctl$auto(0x9, 0xe, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$auto(0x5, 0x0, 0x102) sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000015c0)={&(0x7f0000003980)=ANY=[@ANYRES64=r3, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400018004009c805e2bd91df424af52614153b303e484ad36bc7c5a0fff8d541d2286765b6ee66b2d5b90146e6b0068ebd28689c5a41a262d147117b0eedc468d12ce11f4bdb5422330b0e0cf97493adfb784495708bd064cc6f306a946d79d931d2d06f998d044a90a43ddf0096f4837e5bf604fe02afd14061170c8fa709c3c73f8da2c6c5b11485e69cfc8bde11b0e95ee4c13e8d1ede7187c35aa6a8ec1689fda2e28a1ebf42dae5a7edd6f9a55703941c24cb22056ce903ff1357881ce04fb3e65291b57", @ANYRES32=0xee01, @ANYBLOB="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", @ANYRES32, @ANYBLOB="04003e80040097800400e180000000638ad4611e64065af6da9ff96455b8983f271ca9483a639472d3dcb239439fde47a2429ef52813e49d9f4ca8a176433e8140bf13d852cd9d0185257eb8a1ed5aa5e018d1e6d65250931468dc7fb1bf3430757de61da682b1c9c97e6616bc3c7d9c4a31e81a854d4ac93ce7de2bfe81e5979ad5c3b093931f99b807c01f5d3f21427569fd38df6c91e47ff265510f7d9c78785ede5f549a95662da7c9c2ba3b9b0c427b3a7899493d1a7588eb0ddcbf5c4396535b7ebd0c0f6173453998e6b757", @ANYRES32, @ANYBLOB="0000451502804e0c8c2028b90ce68ff36a22fc7a3396aa8249c3c29629f08e5246d07858ecfe87b397681350eedeb829a544988061ca0341f114c8ec0e7aafa50677db087799b00713cf57df24c2270efcd479bccd7429ad7728bf2b244d32f3f96b6778d2bc534f05c5bbeb838a40915f4e7ae95a74726c6cd3b9e11b0dd25226ddc654b75fd6083e83f341dfd5b17dc4cd126f257eefa73767eb2d50ffe344cb005e54f9fe2bbc0264bf5c249cdc14dbee9cc0a7db0eb8c9c4881da4f10770009f800800c200", @ANYRES32=0x0, @ANYBLOB="45b81938541b68881e7babefc5d027f7e113864f319e1fc50cf61a06a47f0c1769115444c32cbd91518cfe9150ea60ee8704007c807484c2b25d3aa889de7ecc484e1fa61659bf62b015f11c06d9385508005900050000000c0069006e6c38303231310014006900000000000000000000000000000000012c001c8004009b8004004c8019001100a08c0c4330e4dbb1f7ef2c3a50108daa0980c59e560000000400ea803401008004005b80040058806a5926bf87139f54c0122799c379a26fe55c9d993ceb3105f32f97e02ba4d2cac41e42367b29637ad91418833b2e5d8bf3a75d7b764004004b801fd8cd70bc6d5b7c2f5b5cb909523cec58a1d329eaa9810e3963e79224d36e08b78ccd257d72e95c12f209bf1efaa76f13450b58ed5437d47b3ee51b2d26bae9da677d2ba86df7dc185a556d990ad2e571a875e2ef94e4de125fd8c09cd26c936215b940f3c02955e061865692f1309d62bb61372e7b1069c3e690b477d3c938083473f4860b6fede640715414c81665eb7c47ca28a1ac0ef31c7b4831a1f061a5ee97382f6baace7f321c3cbd6ee316ca27b2a24e70ec8d6acc", @ANYRES32, @ANYRES16=r1, @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="04003a000c000200040000000000000000000077120380876a920f379e664596cd3f485a1f60c6010d76e25d27e26ac0b0c02067630c7e23b75ade92b0ea4f88522e1757c753b3f77a92be9240a3c4076d317d9db9428e1159701f11c37ef50a43838ac911333f25fc5dfde0f950ddede9a027994ae188bf5375a929c8a7d261588a1b8fad4681383f193c367e52b9fb179f7307da8c873249596a27240de41414701124a8cbded4123324918d7a564edf67c57ae28f6f9d75649da39fcffd4a047f07e6b5e607709a7a5ff5189972bd942c1016dc3fe7", @ANYRES32=r2, @ANYBLOB="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"], 0x5208}, 0x1, 0x0, 0x0, 0x4}, 0x4c000) connect$auto(0x3, 0x0, 0x54) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0xc8, 0x2, 0x9, 0xffffffffffff8001, 0xbef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) adjtimex$auto(&(0x7f0000000200)={0x5f95, 0x0, 0x2, 0x4, 0xff7d, 0xbd58, 0x4000005, 0x0, 0x5, 0x8, 0x80000000, {0x7ff, 0xf4243}, 0x2744, 0x1, 0xff, 0x7, 0x0, 0x3c8, 0x8, 0x8, 0xffffffffffffffff, 0x1560cc85, 0x9}) futex$auto(0x0, 0x8d, 0x0, 0x0, 0x0, 0x100) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) get_robust_list$auto(0x1, 0x0, 0x0) kexec_load$auto(0x0, 0x4, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x7ff, 0x8000}, 0x1) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) 0s ago: executing program 5 (id=1101): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) socket(0xa, 0x3, 0x100) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x7fff, 0xff, 0x0, 0x0, 0x7) socketpair$auto(0x8, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) sendmsg$auto_L2TP_CMD_SESSION_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x24, r1, 0x1, 0x74bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000044) kernel console output (not intermixed with test programs): DUID 00:04:b7:d5:f8:ee:8b:f8:ce:c6:f2:e0:c5:17:b2:3a:e2:85 forked to background, child pid 5497 [ 40.877899][ T5498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.891812][ T5498] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.76' (ED25519) to the list of known hosts. syzkaller login: [ 64.392961][ T5816] cgroup: Unknown subsys name 'net' [ 64.501797][ T5816] cgroup: Unknown subsys name 'cpuset' [ 64.510004][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.831924][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.561615][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.581428][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.588996][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.597061][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.605549][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.612844][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.621167][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.630776][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.638703][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.642949][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.646212][ T5834] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.661474][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.663671][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.669844][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.677500][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.692150][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.699881][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.707668][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.713708][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.715700][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.732446][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.733152][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.755969][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.763387][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.087372][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 68.172279][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 68.184020][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 68.218749][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 68.277872][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.285170][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.294284][ T5827] bridge_slave_0: entered allmulticast mode [ 68.301664][ T5827] bridge_slave_0: entered promiscuous mode [ 68.346469][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.353685][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.360912][ T5827] bridge_slave_1: entered allmulticast mode [ 68.367461][ T5827] bridge_slave_1: entered promiscuous mode [ 68.390909][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.398016][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.405280][ T5826] bridge_slave_0: entered allmulticast mode [ 68.412752][ T5826] bridge_slave_0: entered promiscuous mode [ 68.447743][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.457386][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.464704][ T5826] bridge_slave_1: entered allmulticast mode [ 68.471453][ T5826] bridge_slave_1: entered promiscuous mode [ 68.490724][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.521219][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.539608][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.546764][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.554066][ T5825] bridge_slave_0: entered allmulticast mode [ 68.560683][ T5825] bridge_slave_0: entered promiscuous mode [ 68.589072][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.596196][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.605975][ T5825] bridge_slave_1: entered allmulticast mode [ 68.612744][ T5825] bridge_slave_1: entered promiscuous mode [ 68.631737][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.639054][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.646228][ T5830] bridge_slave_0: entered allmulticast mode [ 68.653272][ T5830] bridge_slave_0: entered promiscuous mode [ 68.663773][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.676107][ T5827] team0: Port device team_slave_0 added [ 68.686085][ T5827] team0: Port device team_slave_1 added [ 68.702827][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.712226][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.719621][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.726778][ T5830] bridge_slave_1: entered allmulticast mode [ 68.733586][ T5830] bridge_slave_1: entered promiscuous mode [ 68.748863][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.779302][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.803966][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.811166][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.837481][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.850761][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.857738][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.883858][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.906355][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.943820][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.955408][ T5826] team0: Port device team_slave_0 added [ 68.974968][ T5825] team0: Port device team_slave_0 added [ 68.991635][ T5826] team0: Port device team_slave_1 added [ 69.007109][ T5825] team0: Port device team_slave_1 added [ 69.030541][ T5827] hsr_slave_0: entered promiscuous mode [ 69.036830][ T5827] hsr_slave_1: entered promiscuous mode [ 69.053405][ T5830] team0: Port device team_slave_0 added [ 69.063056][ T5830] team0: Port device team_slave_1 added [ 69.077364][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.086976][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.114058][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.153220][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.160486][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.187183][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.204824][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.212020][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.238500][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.251413][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.258490][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.284550][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.332222][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.339563][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.365809][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.396512][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.406079][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.432595][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.459896][ T5826] hsr_slave_0: entered promiscuous mode [ 69.466039][ T5826] hsr_slave_1: entered promiscuous mode [ 69.474065][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.482785][ T5826] Cannot create hsr debugfs directory [ 69.500847][ T5825] hsr_slave_0: entered promiscuous mode [ 69.506935][ T5825] hsr_slave_1: entered promiscuous mode [ 69.513270][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.520931][ T5825] Cannot create hsr debugfs directory [ 69.586955][ T5830] hsr_slave_0: entered promiscuous mode [ 69.593466][ T5830] hsr_slave_1: entered promiscuous mode [ 69.601434][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.609071][ T5830] Cannot create hsr debugfs directory [ 69.729214][ T5836] Bluetooth: hci1: command tx timeout [ 69.808454][ T5836] Bluetooth: hci2: command tx timeout [ 69.814091][ T5836] Bluetooth: hci3: command tx timeout [ 69.818450][ T5837] Bluetooth: hci0: command tx timeout [ 69.845696][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.857420][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.875226][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.893008][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.924495][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.935198][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.961735][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.981571][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.003973][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.020776][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.049386][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.070567][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.119505][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.139914][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.150011][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.164423][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.263889][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.273299][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.327203][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.353074][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.360375][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.377824][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.392616][ T3576] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.399772][ T3576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.427592][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.436362][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.452342][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.459442][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.491210][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.498366][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.522902][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.532319][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.563486][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.570601][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.582157][ T3576] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.589301][ T3576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.598099][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.605238][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.614887][ T3576] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.622014][ T3576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.671916][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.733346][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.819041][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.982397][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.041151][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.051212][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.120776][ T5826] veth0_vlan: entered promiscuous mode [ 71.143867][ T5827] veth0_vlan: entered promiscuous mode [ 71.152186][ T5826] veth1_vlan: entered promiscuous mode [ 71.165852][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.189711][ T5827] veth1_vlan: entered promiscuous mode [ 71.223302][ T5826] veth0_macvtap: entered promiscuous mode [ 71.245769][ T5826] veth1_macvtap: entered promiscuous mode [ 71.258935][ T5827] veth0_macvtap: entered promiscuous mode [ 71.273271][ T5825] veth0_vlan: entered promiscuous mode [ 71.286104][ T5827] veth1_macvtap: entered promiscuous mode [ 71.301297][ T5825] veth1_vlan: entered promiscuous mode [ 71.320903][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.358911][ T5830] veth0_vlan: entered promiscuous mode [ 71.371929][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.383138][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.395148][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.406806][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.427858][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.436863][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.445920][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.455442][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.466796][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.478314][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.490573][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.504012][ T5830] veth1_vlan: entered promiscuous mode [ 71.512644][ T5825] veth0_macvtap: entered promiscuous mode [ 71.522173][ T5825] veth1_macvtap: entered promiscuous mode [ 71.532188][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.541317][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.551056][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.560787][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.594844][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.606240][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.616775][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.628596][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.641117][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.659263][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.669923][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.679795][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.690456][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.701443][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.731854][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.736067][ T5825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.747476][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.754419][ T5825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.767523][ T5825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.776640][ T5825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.809750][ T5837] Bluetooth: hci1: command tx timeout [ 71.812878][ T5830] veth0_macvtap: entered promiscuous mode [ 71.824931][ T5830] veth1_macvtap: entered promiscuous mode [ 71.867745][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.878795][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.889511][ T5837] Bluetooth: hci0: command tx timeout [ 71.894951][ T5837] Bluetooth: hci3: command tx timeout [ 71.900616][ T5836] Bluetooth: hci2: command tx timeout [ 71.906220][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.917118][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.927268][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.937780][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.952697][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.994953][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.006525][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.016657][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.031246][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.041186][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.052856][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.063789][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.077059][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.092999][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.097599][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.111333][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.120478][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.129694][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.168759][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.176995][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.221203][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.230500][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.264747][ T2916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.272759][ T2916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.288538][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.296503][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.339521][ T3576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.367467][ T3576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.407138][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.429838][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.437690][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.528154][ T2916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.580175][ T2916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.786256][ T29] audit: type=1326 audit(1735199006.732:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz.3.4" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f708f385d29 code=0x0 [ 72.862531][ T5904] mmap: syz.1.5 (5904) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 73.151824][ T5913] Zero length message leads to an empty skb [ 73.888904][ T5837] Bluetooth: hci1: command tx timeout [ 73.968747][ T5837] Bluetooth: hci3: command tx timeout [ 73.974271][ T54] Bluetooth: hci2: command tx timeout [ 73.981324][ T54] Bluetooth: hci0: command tx timeout [ 75.838351][ T5999] process 'syz.1.27' launched ':,' with NULL argv: empty string added [ 75.970187][ T5837] Bluetooth: hci1: command tx timeout [ 76.077589][ T5837] Bluetooth: hci3: command tx timeout [ 76.083153][ T5837] Bluetooth: hci0: command tx timeout [ 76.089466][ T5837] Bluetooth: hci2: command tx timeout [ 77.111635][ T6050] netlink: 342 bytes leftover after parsing attributes in process `syz.3.33'. [ 77.315961][ T6052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.770640][ T6070] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.533689][ T6094] netlink: 'syz.1.42': attribute type 33 has an invalid length. [ 78.551943][ T6094] netlink: 322 bytes leftover after parsing attributes in process `syz.1.42'. [ 79.073738][ T6102] netlink: 342 bytes leftover after parsing attributes in process `syz.2.44'. [ 79.787262][ T6132] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.246506][ T6142] netlink: 246 bytes leftover after parsing attributes in process `syz.1.53'. [ 80.750950][ T6157] perf: Dynamic interrupt throttling disabled, can hang your system! [ 80.906829][ T6160] mkiss: ax0: crc mode is auto. [ 80.972903][ T6152] kernel read not supported for file /#)-\&[} (pid: 6152 comm: syz.1.56) [ 80.988703][ T29] audit: type=1804 audit(1735199014.922:3): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.56" name="#)-\&[}" dev="mqueue" ino=8884 res=1 errno=0 [ 81.024219][ T29] audit: type=1800 audit(1735199014.942:4): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.56" name="#)-\&[}" dev="mqueue" ino=8884 res=0 errno=0 [ 81.096092][ T29] audit: type=1804 audit(1735199015.002:5): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.56" name="#)-\&[}" dev="mqueue" ino=8884 res=1 errno=0 [ 81.121886][ T6158] can: request_module (can-proto-0) failed. [ 81.134687][ T29] audit: type=1804 audit(1735199015.002:6): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.56" name="#)-\&[}" dev="mqueue" ino=8884 res=1 errno=0 [ 81.653289][ T29] audit: type=1800 audit(1735199015.602:7): pid=6174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.61" name="dbroot" dev="configfs" ino=8921 res=0 errno=0 [ 81.995371][ T8] cfg80211: failed to load regulatory.db [ 82.201323][ T6195] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 82.216741][ T6185] netlink: 'syz.2.63': attribute type 4 has an invalid length. [ 82.238762][ T6185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.63'. [ 83.315853][ T6215] syz.2.72 uses obsolete (PF_INET,SOCK_PACKET) [ 87.109547][ T6297] netlink: 206 bytes leftover after parsing attributes in process `syz.0.89'. [ 88.209382][ T6332] netlink: 'syz.0.99': attribute type 1 has an invalid length. [ 88.387819][ T6330] Process accounting resumed [ 89.969293][ T6360] < [ 90.011711][ T6383] netlink: 'syz.2.112': attribute type 4 has an invalid length. [ 90.074449][ T6381] netlink: 'syz.3.113': attribute type 1 has an invalid length. [ 92.458949][ T6416] mkiss: ax0: crc mode is auto. [ 95.059860][ T6448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.129'. [ 95.079496][ T6448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.125499][ T6448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.303551][ T6448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.329094][ T6448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.832305][ T6441] kexec: Could not allocate control_code_buffer [ 96.453338][ T54] Bluetooth: hci3: Malformed Event: 0x2f [ 97.268501][ T6484] Process accounting resumed [ 100.805990][ T6546] Process accounting resumed [ 101.790269][ T6569] netlink: 32 bytes leftover after parsing attributes in process `syz.2.161'. [ 101.855829][ T6574] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.460250][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'. [ 104.621974][ T6652] netlink: 28 bytes leftover after parsing attributes in process `syz.2.179'. [ 105.135133][ T6652] team0: Port device team_slave_0 removed [ 105.648919][ T6663] netlink: 342 bytes leftover after parsing attributes in process `syz.3.182'. [ 105.694240][ T6663] netlink: 342 bytes leftover after parsing attributes in process `syz.3.182'. [ 107.297719][ T6706] capability: warning: `syz.3.192' uses 32-bit capabilities (legacy support in use) [ 109.155648][ T6777] Line length is too long: Should be less than 4094 [ 109.857186][ T6794] synth uevent: /bus/memstick: unknown uevent action string [ 111.131497][ T6820] netlink: 146 bytes leftover after parsing attributes in process `syz.2.220'. [ 111.278537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.534069][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.542692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.651238][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.190874][ T6867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.233'. [ 112.765080][ T6890] Invalid ELF header magic: != ELF [ 113.250802][ T6892] netlink: 28 bytes leftover after parsing attributes in process `syz.3.239'. [ 113.741077][ T6905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.243'. [ 116.166981][ T6973] binder: 6972:6973 ioctl c0046209 3 returned -22 [ 116.179294][ T6973] openvswitch: netlink: IP tunnel dst address not specified [ 116.740786][ T6988] netlink: 342 bytes leftover after parsing attributes in process `syz.1.263'. [ 117.050463][ T6996] Process accounting resumed [ 117.882789][ T7033] program syz.0.273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.528811][ T7048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.275'. [ 118.602674][ T7048] hsr_slave_0: left promiscuous mode [ 118.629168][ T7048] hsr_slave_1: left promiscuous mode [ 119.163849][ T7059] netlink: 342 bytes leftover after parsing attributes in process `syz.3.279'. [ 119.189728][ T7059] netlink: 306 bytes leftover after parsing attributes in process `syz.3.279'. [ 119.530216][ T7074] netlink: 330 bytes leftover after parsing attributes in process `syz.3.284'. [ 122.633936][ T7139] kexec: Could not allocate control_code_buffer [ 122.969622][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.306'. [ 122.990630][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.306'. [ 123.092521][ T29] audit: type=1806 audit(1735199057.042:8): xattr="." res=0 [ 123.579052][ T7182] netlink: 28 bytes leftover after parsing attributes in process `syz.1.310'. [ 124.379252][ T7203] ======================================================= [ 124.379252][ T7203] WARNING: The mand mount option has been deprecated and [ 124.379252][ T7203] and is ignored by this kernel. Remove the mand [ 124.379252][ T7203] option from the mount to silence this warning. [ 124.379252][ T7203] ======================================================= [ 125.127469][ T7229] netlink: 326 bytes leftover after parsing attributes in process `syz.1.320'. [ 126.670720][ T7260] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.689904][ T7260] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 126.718142][ T7260] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 126.743994][ T7260] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.756365][ T7260] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 126.776399][ T7260] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 126.824272][ T7260] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 126.835113][ T7260] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 126.861839][ T7260] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 126.884024][ T7260] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 126.930443][ T7260] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 126.966217][ T7260] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 127.253116][ T7301] random: crng reseeded on system resumption [ 127.909426][ T7309] warning: `syz.1.335' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.128918][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.444451][ T7339] tty tty17: ldisc open failed (-12), clearing slot 16 [ 128.633630][ T7341] UHID_CREATE from different security context by process 251 (syz.0.344), this is not allowed. [ 128.787899][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.848413][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.928552][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.209586][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.341782][ T7371] netlink: 28 bytes leftover after parsing attributes in process `syz.1.352'. [ 130.765404][ T7371] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 130.848558][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.897396][ T7378] netlink: 330 bytes leftover after parsing attributes in process `syz.1.354'. [ 130.906758][ T7378] ü: renamed from team0 (while UP) [ 130.928345][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 131.008336][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.490220][ T7390] netlink: 178 bytes leftover after parsing attributes in process `syz.2.358'. [ 132.298304][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.942759][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.957942][ T7423] i2c i2c-0: Invalid block write size 128 [ 133.008304][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 133.088338][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.174696][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.181986][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.809849][ T7438] Process accounting resumed [ 135.342949][ T7462] nbd: must specify a device to reconfigure [ 135.540640][ T7462] nbd: must specify a device to reconfigure [ 136.928654][ T7510] can: request_module (can-proto-0) failed. [ 137.360757][ T7526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.394'. [ 137.991439][ T7505] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 138.336617][ T7543] netlink: 342 bytes leftover after parsing attributes in process `syz.3.399'. [ 138.862683][ T29] audit: type=1800 audit(1735199072.772:9): pid=7553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.405" name="version" dev="configfs" ino=15039 res=0 errno=0 [ 138.964864][ T7553] Invalid ELF header magic: != ELF [ 141.320226][ T7595] Invalid ELF header magic: != ELF [ 143.065140][ T7633] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 146.391992][ T7697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.428'. [ 146.878798][ T7705] could not allocate digest TFM handle [ 148.074693][ T7760] netlink: 244 bytes leftover after parsing attributes in process `syz.3.443'. [ 148.415969][ T7775] syz.3.446 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 148.805388][ T7787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.449'. [ 150.183973][ T7829] netlink: 'syz.1.457': attribute type 9 has an invalid length. [ 152.324887][ T7895] nbd: must specify a device to reconfigure [ 152.384305][ T7849] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 157.903134][ T8004] Process accounting resumed [ 158.187652][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.503'. [ 159.086222][ T8053] dlm: non-version read from control device 2147479552 [ 159.155931][ T8047] Process accounting resumed [ 159.640646][ T8071] netlink: 'syz.3.518': attribute type 3 has an invalid length. [ 159.651983][ T8071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.518'. [ 160.161546][ T8093] tipc: Can't bind to reserved service type 63 [ 160.696968][ T8108] sp0: Synchronizing with TNC [ 160.703467][ T8106] openvswitch: netlink: Key 5 has unexpected len 4 expected 2 [ 161.010200][ T8116] netlink: 'syz.3.531': attribute type 8 has an invalid length. [ 163.849390][ T8204] netlink: 330 bytes leftover after parsing attributes in process `syz.0.543'. [ 167.424702][ T8258] raw_sendmsg: syz.1.559 forgot to set AF_INET. Fix it! [ 167.623221][ T8263] HSR: entered promiscuous mode [ 167.903045][ T8265] random: crng reseeded on system resumption [ 168.108701][ T8268] netlink: 330 bytes leftover after parsing attributes in process `syz.0.561'. [ 168.265532][ T8269] netlink: 330 bytes leftover after parsing attributes in process `syz.0.561'. [ 169.559703][ T8283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.566'. [ 169.584647][ T8279] netlink: 330 bytes leftover after parsing attributes in process `syz.0.564'. [ 169.756504][ T8283] bond0: (slave bond_slave_1): Releasing backup interface [ 172.438772][ T8324] netlink: 28 bytes leftover after parsing attributes in process `syz.2.578'. [ 172.463546][ T8180] failed to send hello msg [ 172.468153][ T8180] failed while handling packet from 1:16384 [ 174.688720][ T8359] netlink: 28 bytes leftover after parsing attributes in process `syz.1.586'. [ 177.103831][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.113282][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 177.248981][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 177.256919][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 177.265937][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 177.273858][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.513428][ T8400] chnl_net:caif_netlink_parms(): no params data found [ 179.070329][ T8400] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.097984][ T8400] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.118769][ T8400] bridge_slave_0: entered allmulticast mode [ 179.133195][ T8400] bridge_slave_0: entered promiscuous mode [ 179.167542][ T8400] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.198462][ T8400] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.205723][ T8400] bridge_slave_1: entered allmulticast mode [ 179.229582][ T8400] bridge_slave_1: entered promiscuous mode [ 179.506491][ T54] Bluetooth: hci4: command tx timeout [ 179.515927][ T8400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.637986][ T8400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.842684][ T8400] team0: Port device team_slave_0 added [ 179.910972][ T8400] team0: Port device team_slave_1 added [ 180.230781][ T8400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.278704][ T8400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.394642][ T8400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.478327][ T8400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.524275][ T8400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.550362][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.637518][ T8400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.837024][ T8400] hsr_slave_0: entered promiscuous mode [ 180.869850][ T8400] hsr_slave_1: entered promiscuous mode [ 180.886931][ T8400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.917793][ T8400] Cannot create hsr debugfs directory [ 181.507549][ T8400] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 181.543981][ T8400] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 181.572682][ T54] Bluetooth: hci4: command tx timeout [ 181.842083][ T8400] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 182.340621][ T8400] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 183.610806][ T8400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.628825][ T8400] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.641788][ T6733] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.648975][ T6733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.657097][ T54] Bluetooth: hci4: command tx timeout [ 183.784045][ T8180] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.792173][ T8180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.282409][ T8400] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.666034][ T8400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.768435][ T54] Bluetooth: hci4: command tx timeout [ 185.785062][ T8400] veth0_vlan: entered promiscuous mode [ 186.021904][ T8400] veth1_vlan: entered promiscuous mode [ 186.113298][ T8400] veth0_macvtap: entered promiscuous mode [ 186.164618][ T8400] veth1_macvtap: entered promiscuous mode [ 186.254775][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.303377][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.365502][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.413147][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.468536][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.518225][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.551905][ T8400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.601503][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.668753][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.733895][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.788324][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.829914][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.888297][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.937644][ T8400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.019304][ T8400] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.067107][ T8400] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.108233][ T8400] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.116977][ T8400] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.600163][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 187.649110][ T6028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.697663][ T6028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.837661][ T8179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.892708][ T8179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.303106][ T8535] snd_aloop snd_aloop.0: control 1:6:0:ª¸è^ [ 188.303106][ T8535] :0 is already present [ 188.420384][ T8539] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 189.902606][ T8565] synth uevent: /module/vxlan: unknown uevent action string [ 190.129604][ T8552] syz.1.630 (8552) used greatest stack depth: 18816 bytes left [ 192.696789][ T8603] bdi 31:0: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 192.823678][ T8610] netlink: 28 bytes leftover after parsing attributes in process `syz.0.642'. [ 193.464096][ T8609] Dead loop on virtual device ip6_vti0, fix it urgently! [ 193.478772][ T8609] Dead loop on virtual device ip6_vti0, fix it urgently! [ 193.508768][ T8609] Dead loop on virtual device ip6_vti0, fix it urgently! [ 193.517639][ T8609] Dead loop on virtual device ip6_vti0, fix it urgently! [ 193.568675][ T8609] Dead loop on virtual device ip6_vti0, fix it urgently! [ 193.588614][ T8609] Dead loop on virtual device ip6_vti0, fix it urgently! [ 194.616874][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.623477][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.917819][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.653'. [ 195.734583][ T8681] netlink: 11 bytes leftover after parsing attributes in process `syz.2.659'. [ 195.773167][ T8681] nbd: must specify a size in bytes for the device [ 195.805787][ T8681] block nbd0: not configured, cannot reconfigure [ 195.962615][ T8672] could not allocate digest TFM handle [ 197.359503][ T8730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.668'. [ 197.610242][ T8737] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000010006 [ 199.011733][ T8764] random: crng reseeded on system resumption [ 200.285176][ T8789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.685'. [ 201.541702][ T8816] Invalid ELF header magic: != ELF [ 201.891804][ T8822] openvswitch: netlink: Duplicate key (type 15). [ 201.942043][ T8827] netlink: 648 bytes leftover after parsing attributes in process `syz.0.696'. [ 201.954916][ T8827] netlink: 16 bytes leftover after parsing attributes in process `syz.0.696'. [ 202.480518][ T8851] tipc: Trying to set illegal importance in message [ 202.537474][ T8851] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 202.847633][ T8866] netlink: 28 bytes leftover after parsing attributes in process `syz.4.705'. [ 203.086268][ T8866] team0: Port device team_slave_0 removed [ 203.460890][ T8881] delete_channel: no stack [ 204.093645][ T29] audit: type=1800 audit(8277292039.410:10): pid=8900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.713" name="lu_gp_id" dev="configfs" ino=22665 res=0 errno=0 [ 204.195464][ T8903] netlink: 40 bytes leftover after parsing attributes in process `syz.0.714'. [ 206.262956][ T8900] erspan0: entered allmulticast mode [ 206.960384][ T8943] netlink: 28 bytes leftover after parsing attributes in process `syz.1.721'. [ 207.038680][ T8943] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.260742][ T8943] bridge_slave_0 (unregistering): left allmulticast mode [ 207.268026][ T8943] bridge_slave_0 (unregistering): left promiscuous mode [ 207.281692][ T8943] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.818833][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.725'. [ 209.848233][ T8996] sock: sock_timestamping_bind_phc: sock not bind to device [ 212.956403][ T9042] mkiss: ax0: crc mode is auto. [ 213.209803][ T9043] erspan0: entered allmulticast mode [ 216.077247][ T9075] block nbd12: NBD_DISCONNECT [ 217.838965][ T9096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.760'. [ 217.968792][ T9096] veth0_macvtap: left promiscuous mode [ 218.077138][ T9096] macvtap0: entered allmulticast mode [ 218.528560][ T9087] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 220.478451][ T9090] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 220.620079][ T9128] svc: failed to register nfsdv3 RPC service (errno 111). [ 220.657847][ T9128] svc: failed to register nfsaclv3 RPC service (errno 111). [ 222.160930][ T9159] MTRR 2 not used [ 222.193940][ T9160] MTRR 2 not used [ 222.775738][ T9174] zero sized request [ 222.833635][ T9174] zero sized request [ 222.928753][ T9174] zero sized request [ 222.932827][ T9174] zero sized request [ 223.023581][ T9174] zero sized request [ 223.027576][ T9174] zero sized request [ 223.042946][ T9178] block nbd12: NBD_DISCONNECT [ 223.083960][ T9174] zero sized request [ 223.107546][ T9174] zero sized request [ 223.186092][ T9174] zero sized request [ 223.210746][ T9174] zero sized request [ 223.254014][ T9174] zero sized request [ 238.487560][ T9385] netlink: 342 bytes leftover after parsing attributes in process `syz.4.820'. [ 238.736025][ T9390] binder: 9389:9390 ioctl c0046209 3 returned -22 [ 238.805302][ T9390] openvswitch: netlink: IP tunnel dst address not specified [ 238.994029][ T9394] netlink: 342 bytes leftover after parsing attributes in process `syz.2.825'. [ 241.376415][ T9436] random: crng reseeded on system resumption [ 243.265014][ T9455] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 244.238553][ T9479] HSR: entered promiscuous mode [ 244.279470][ T9477] Process accounting resumed [ 244.285994][ T9477] kstrtoul() returned -22 for lu_gp_id [ 244.306426][ T9482] dlm: non-version read from control device 2147479552 [ 244.887875][ T9491] netlink: 342 bytes leftover after parsing attributes in process `syz.4.849'. [ 245.396718][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'. [ 246.051968][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'. [ 246.096034][ T9506] netlink: 342 bytes leftover after parsing attributes in process `syz.4.853'. [ 246.677553][ T9514] netlink: 322 bytes leftover after parsing attributes in process `syz.0.854'. [ 246.758580][ T9514] bond0: entered promiscuous mode [ 246.788727][ T9514] bond_slave_0: entered promiscuous mode [ 246.815059][ T9514] bond_slave_1: entered promiscuous mode [ 246.868506][ T9514] bond0: entered allmulticast mode [ 246.906182][ T9514] bond_slave_0: entered allmulticast mode [ 246.945344][ T9514] bond_slave_1: entered allmulticast mode [ 247.187487][ T9521] netlink: 306 bytes leftover after parsing attributes in process `syz.1.857'. [ 249.771907][ T9559] bridge0: port 1(bond0) entered blocking state [ 249.808530][ T9559] bridge0: port 1(bond0) entered disabled state [ 249.844169][ T9559] bond0: entered allmulticast mode [ 249.898332][ T9559] bond_slave_0: entered allmulticast mode [ 249.952547][ T9559] bond_slave_1: entered allmulticast mode [ 249.961184][ T9559] bond0: entered promiscuous mode [ 250.028399][ T9559] bond_slave_0: entered promiscuous mode [ 250.056926][ T9559] bond_slave_1: entered promiscuous mode [ 250.099169][ T9559] bridge0: port 1(bond0) entered blocking state [ 250.105569][ T9559] bridge0: port 1(bond0) entered forwarding state [ 254.505603][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.877'. [ 254.616373][ T9628] Process accounting resumed [ 254.730668][ T9628] kstrtoul() returned -22 for lu_gp_id [ 254.736366][ T9631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.881'. [ 256.050932][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.058742][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.313409][ T9650] Invalid ELF header magic: != ELF [ 256.509797][ T9657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.890'. [ 257.132188][ T9656] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 257.240662][ T9656] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 257.355724][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'. [ 257.399295][ T9672] netlink: 20 bytes leftover after parsing attributes in process `syz.1.893'. [ 260.328718][ T9683] netlink: 146 bytes leftover after parsing attributes in process `syz.0.896'. [ 260.488478][ T9684] netlink: 146 bytes leftover after parsing attributes in process `syz.0.896'. [ 261.423549][ T9723] netlink: 286 bytes leftover after parsing attributes in process `syz.0.903'. [ 266.210843][ T29] audit: type=1804 audit(8277292050.680:11): pid=9776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.915" name="/newroot/sys/kernel/tracing/uprobe_events" dev="tracefs" ino=23 res=1 errno=0 [ 266.390660][ T29] audit: type=1804 audit(8277292050.790:12): pid=9777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.915" name="/newroot/sys/kernel/tracing/uprobe_events" dev="tracefs" ino=23 res=1 errno=0 [ 267.150972][ T9787] vivid-013: ================= START STATUS ================= [ 267.278649][ T9787] vivid-013: Generate PTS: true [ 267.408384][ T9787] vivid-013: Generate SCR: true [ 267.413314][ T9787] tpg source WxH: 640x360 (Y'CbCr) [ 267.539034][ T9787] tpg field: 1 [ 267.682818][ T9787] tpg crop: 640x360@0x0 [ 267.687039][ T9787] tpg compose: 640x360@0x0 [ 267.748320][ T9787] tpg colorspace: 8 [ 267.849107][ T9787] tpg transfer function: 0/0 [ 267.853749][ T9787] tpg Y'CbCr encoding: 0/0 [ 267.974940][ T9787] tpg quantization: 0/0 [ 268.032129][ T9787] tpg RGB range: 0/2 [ 268.148958][ T9787] vivid-013: ================== END STATUS ================== [ 270.130065][ T9831] netlink: 'syz.4.927': attribute type 2 has an invalid length. [ 274.533370][ T9887] netlink: 32 bytes leftover after parsing attributes in process `syz.0.939'. [ 274.564146][ T9890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.940'. [ 283.308352][ T9945] Invalid ELF header magic: != ELF [ 288.369640][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.965'. [ 288.904935][T10003] Invalid ELF header magic: != ELF [ 292.178620][T10055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.982'. [ 292.475486][T10059] netlink: 342 bytes leftover after parsing attributes in process `syz.4.984'. [ 292.609035][T10061] netlink: 98 bytes leftover after parsing attributes in process `syz.4.984'. [ 294.975165][T10085] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 295.502886][T10102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.995'. [ 297.258305][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.997'. [ 301.360116][T10148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1005'. [ 303.345739][T10185] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1013'. [ 304.212916][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 305.905138][ T29] audit: type=1800 audit(2067.180:13): pid=10240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1029" name="lu_gp_id" dev="configfs" ino=26314 res=0 errno=0 [ 306.597225][T10255] erspan0: entered allmulticast mode [ 306.933158][T10262] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1031'. [ 307.770858][T10286] ptrace attach of "./syz-executor exec"[5827] was attempted by ""[10286] [ 310.109940][T10320] bond0: option mode: unable to set because the bond device is up [ 310.915061][T10346] ubi0: attaching mtd0 [ 311.020150][T10346] ubi0: scanning is finished [ 311.087785][T10346] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 311.238544][ T29] audit: type=1326 audit(2072.510:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10348 comm="syz.1.1049" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72ed385d29 code=0x0 [ 311.332585][ T29] audit: type=1326 audit(2072.550:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10348 comm="syz.1.1049" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72ed385d29 code=0x0 [ 311.469263][T10346] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 314.149599][T10380] [U] [ 314.152580][T10380] [U] [ 314.155295][T10380] [U] [ 314.158021][T10380] [U] [ 314.272004][T10380] [U] [ 314.274760][T10380] [U] [ 314.277477][T10380] [U] [ 314.280192][T10380] [U] [ 314.328674][T10380] [U] [ 314.331443][T10380] [U] [ 314.334163][T10380] [U] [ 314.336887][T10380] [U] [ 314.358614][T10380] [U] [ 314.361361][T10380] [U] [ 314.364071][T10380] [U] [ 314.366783][T10380] [U] [ 314.465980][T10380] [U] [ 314.819425][T10405] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1065'. [ 315.315344][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 315.324646][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 315.346361][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 315.365557][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 315.374933][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 315.382489][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 315.922132][T10425] chnl_net:caif_netlink_parms(): no params data found [ 315.993173][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1069'. [ 316.310209][T10425] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.317350][T10425] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.345068][T10425] bridge_slave_0: entered allmulticast mode [ 316.356121][T10425] bridge_slave_0: entered promiscuous mode [ 316.376504][T10425] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.398446][T10425] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.428562][T10425] bridge_slave_1: entered allmulticast mode [ 316.435682][T10425] bridge_slave_1: entered promiscuous mode [ 316.554145][T10425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.600747][T10425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.833115][T10425] team0: Port device team_slave_0 added [ 316.871417][T10425] team0: Port device team_slave_1 added [ 317.398820][T10425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.405858][T10425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.431913][T10425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.447000][T10425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.454068][T10425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.480175][T10425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.494621][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.494701][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.552039][ T5837] Bluetooth: hci2: command tx timeout [ 317.697876][T10425] hsr_slave_0: entered promiscuous mode [ 317.771693][T10425] hsr_slave_1: entered promiscuous mode [ 317.787567][T10425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.816796][T10425] Cannot create hsr debugfs directory [ 318.236289][T10467] openvswitch: netlink: Message has 4 unknown bytes. [ 318.804415][T10425] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 318.879382][T10425] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 318.962744][T10425] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 319.014673][T10425] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 319.081992][T10480] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1081'. [ 319.241184][T10425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.383616][T10425] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.571497][ T6733] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.578700][ T6733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.586332][ T5837] Bluetooth: hci2: command tx timeout [ 319.595975][ T6733] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.603162][ T6733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.690398][T10425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.095415][T10493] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1084'. [ 320.848722][T10425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.626784][T10425] veth0_vlan: entered promiscuous mode [ 321.648400][ T54] Bluetooth: hci2: command tx timeout [ 321.700125][T10425] veth1_vlan: entered promiscuous mode [ 321.807686][T10425] veth0_macvtap: entered promiscuous mode [ 321.855456][T10425] veth1_macvtap: entered promiscuous mode [ 321.937781][T10425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.998489][T10425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.178406][T10425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.191959][T10425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.228230][T10425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.277186][T10425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.311356][T10425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.347995][T10425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.409520][T10425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.742041][T10425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.808547][T10425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.862870][T10425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.895025][T10425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.938207][T10425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.994002][T10425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.038262][T10425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.094916][T10425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.154572][T10425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.236976][T10425] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.311697][T10425] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.368554][T10425] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.377300][T10425] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.729735][ T54] Bluetooth: hci2: command tx timeout [ 324.028641][ T6733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.028691][ T6733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.210383][ T6733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.210408][ T6733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.757163][T10583] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1098'. [ 328.434307][T10588] ------------[ cut here ]------------ [ 328.440214][T10588] WARNING: CPU: 1 PID: 10588 at mm/page_alloc.c:4729 __alloc_pages_noprof+0xeff/0x25b0 [ 328.450077][T10588] Modules linked in: [ 328.454253][T10588] CPU: 1 UID: 0 PID: 10588 Comm: syz.4.1099 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 328.465486][T10588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 328.475749][T10588] RIP: 0010:__alloc_pages_noprof+0xeff/0x25b0 [ 328.481923][T10588] Code: 24 2c 00 00 00 00 89 cd 0f 84 8b f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 de b2 fe ff e9 69 f9 ff ff c6 05 34 6d 16 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 6f a4 0c 00 8b 14 24 e9 [ 328.502078][T10588] RSP: 0018:ffffc9000ca37918 EFLAGS: 00010246 [ 328.508637][T10588] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 328.516704][T10588] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 328.524733][T10588] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 328.532776][T10588] R10: 0000000000000000 R11: 0000000000000002 R12: 0000000000000013 [ 328.540833][T10588] R13: 0000000000040cc0 R14: 1ffff92001946f37 R15: 00000000ffffffff [ 328.548886][T10588] FS: 00007f64d8b116c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 328.558227][T10588] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 328.565328][T10588] CR2: 0000000000000000 CR3: 0000000029dfc000 CR4: 00000000003526f0 [ 328.573411][T10588] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 328.581482][T10588] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 328.589515][T10588] Call Trace: [ 328.592817][T10588] [ 328.595805][T10588] ? __warn+0xea/0x3c0 [ 328.600402][T10588] ? __alloc_pages_noprof+0xeff/0x25b0 [ 328.605920][T10588] ? report_bug+0x3c0/0x580 [ 328.610775][T10588] ? handle_bug+0x54/0xa0 [ 328.615452][T10588] ? exc_invalid_op+0x17/0x50 [ 328.620311][T10588] ? asm_exc_invalid_op+0x1a/0x20 [ 328.625384][T10588] ? __alloc_pages_noprof+0xeff/0x25b0 [ 328.630994][T10588] ? __pfx___lock_acquire+0x10/0x10 [ 328.636224][T10588] ? hlock_class+0x4e/0x130 [ 328.640813][T10588] ? mark_lock+0xb5/0xc60 [ 328.645181][T10588] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 328.650993][T10588] ? find_held_lock+0x2d/0x110 [ 328.655796][T10588] ? __pfx_lock_release+0x10/0x10 [ 328.661268][T10588] ? trace_lock_acquire+0x14e/0x1f0 [ 328.666511][T10588] ? __pfx_lock_release+0x10/0x10 [ 328.671967][T10588] ___kmalloc_large_node+0x84/0x1b0 [ 328.677214][T10588] __kmalloc_large_node_noprof+0x1c/0x70 [ 328.683229][T10588] __kmalloc_node_track_caller_noprof.cold+0x5/0x5f [ 328.690437][T10588] ? bitmap_parse_user+0x24/0x90 [ 328.695429][T10588] memdup_user_nul+0x2b/0x110 [ 328.700784][T10588] bitmap_parse_user+0x24/0x90 [ 328.705596][T10588] irq_affinity_proc_write+0x148/0x260 [ 328.711583][T10588] ? __pfx_irq_affinity_proc_write+0x10/0x10 [ 328.717603][T10588] ? rcu_is_watching+0x12/0xc0 [ 328.722675][T10588] ? trace_lock_acquire+0x14e/0x1f0 [ 328.727987][T10588] ? __pfx_irq_affinity_proc_write+0x10/0x10 [ 328.734080][T10588] proc_reg_write+0x23d/0x330 [ 328.738824][T10588] ? __pfx_proc_reg_write+0x10/0x10 [ 328.744055][T10588] vfs_write+0x24c/0x1150 [ 328.748473][T10588] ? __fget_files+0x1fc/0x3a0 [ 328.753187][T10588] ? __pfx___mutex_lock+0x10/0x10 [ 328.758290][T10588] ? __pfx_vfs_write+0x10/0x10 [ 328.763454][T10588] ? __fget_files+0x206/0x3a0 [ 328.768604][T10588] ksys_write+0x12b/0x250 [ 328.772975][T10588] ? __pfx_ksys_write+0x10/0x10 [ 328.777874][T10588] do_syscall_64+0xcd/0x250 [ 328.782510][T10588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.788487][T10588] RIP: 0033:0x7f64d7d85d29 [ 328.792927][T10588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.812888][T10588] RSP: 002b:00007f64d8b11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 328.821679][T10588] RAX: ffffffffffffffda RBX: 00007f64d7f76160 RCX: 00007f64d7d85d29 [ 328.829718][T10588] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 328.837715][T10588] RBP: 00007f64d7e01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 328.845779][T10588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.854044][T10588] R13: 0000000000000000 R14: 00007f64d7f76160 R15: 00007ffd9a9f7918 [ 328.862249][T10588] [ 328.865659][T10588] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 328.872960][T10588] CPU: 1 UID: 0 PID: 10588 Comm: syz.4.1099 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 328.883751][T10588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 328.893818][T10588] Call Trace: [ 328.897111][T10588] [ 328.900049][T10588] dump_stack_lvl+0x3d/0x1f0 [ 328.904652][T10588] panic+0x71d/0x800 [ 328.908561][T10588] ? __pfx_panic+0x10/0x10 [ 328.912992][T10588] ? show_trace_log_lvl+0x29d/0x3d0 [ 328.918208][T10588] ? check_panic_on_warn+0x1f/0xb0 [ 328.923424][T10588] ? __alloc_pages_noprof+0xeff/0x25b0 [ 328.928894][T10588] check_panic_on_warn+0xab/0xb0 [ 328.933842][T10588] __warn+0xf6/0x3c0 [ 328.937746][T10588] ? __alloc_pages_noprof+0xeff/0x25b0 [ 328.943211][T10588] report_bug+0x3c0/0x580 [ 328.947546][T10588] handle_bug+0x54/0xa0 [ 328.951707][T10588] exc_invalid_op+0x17/0x50 [ 328.956214][T10588] asm_exc_invalid_op+0x1a/0x20 [ 328.961071][T10588] RIP: 0010:__alloc_pages_noprof+0xeff/0x25b0 [ 328.967158][T10588] Code: 24 2c 00 00 00 00 89 cd 0f 84 8b f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 de b2 fe ff e9 69 f9 ff ff c6 05 34 6d 16 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 6f a4 0c 00 8b 14 24 e9 [ 328.986790][T10588] RSP: 0018:ffffc9000ca37918 EFLAGS: 00010246 [ 328.992877][T10588] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 329.000865][T10588] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 329.008840][T10588] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 329.016813][T10588] R10: 0000000000000000 R11: 0000000000000002 R12: 0000000000000013 [ 329.024787][T10588] R13: 0000000000040cc0 R14: 1ffff92001946f37 R15: 00000000ffffffff [ 329.032787][T10588] ? __pfx___lock_acquire+0x10/0x10 [ 329.037993][T10588] ? hlock_class+0x4e/0x130 [ 329.042499][T10588] ? mark_lock+0xb5/0xc60 [ 329.046840][T10588] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 329.052569][T10588] ? find_held_lock+0x2d/0x110 [ 329.057346][T10588] ? __pfx_lock_release+0x10/0x10 [ 329.062370][T10588] ? trace_lock_acquire+0x14e/0x1f0 [ 329.067575][T10588] ? __pfx_lock_release+0x10/0x10 [ 329.072626][T10588] ___kmalloc_large_node+0x84/0x1b0 [ 329.077839][T10588] __kmalloc_large_node_noprof+0x1c/0x70 [ 329.083482][T10588] __kmalloc_node_track_caller_noprof.cold+0x5/0x5f [ 329.090097][T10588] ? bitmap_parse_user+0x24/0x90 [ 329.095060][T10588] memdup_user_nul+0x2b/0x110 [ 329.099753][T10588] bitmap_parse_user+0x24/0x90 [ 329.104532][T10588] irq_affinity_proc_write+0x148/0x260 [ 329.109998][T10588] ? __pfx_irq_affinity_proc_write+0x10/0x10 [ 329.115979][T10588] ? rcu_is_watching+0x12/0xc0 [ 329.120748][T10588] ? trace_lock_acquire+0x14e/0x1f0 [ 329.125956][T10588] ? __pfx_irq_affinity_proc_write+0x10/0x10 [ 329.131939][T10588] proc_reg_write+0x23d/0x330 [ 329.136621][T10588] ? __pfx_proc_reg_write+0x10/0x10 [ 329.141823][T10588] vfs_write+0x24c/0x1150 [ 329.146155][T10588] ? __fget_files+0x1fc/0x3a0 [ 329.150838][T10588] ? __pfx___mutex_lock+0x10/0x10 [ 329.155883][T10588] ? __pfx_vfs_write+0x10/0x10 [ 329.160672][T10588] ? __fget_files+0x206/0x3a0 [ 329.165377][T10588] ksys_write+0x12b/0x250 [ 329.169719][T10588] ? __pfx_ksys_write+0x10/0x10 [ 329.174587][T10588] do_syscall_64+0xcd/0x250 [ 329.179198][T10588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.185100][T10588] RIP: 0033:0x7f64d7d85d29 [ 329.189524][T10588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.209133][T10588] RSP: 002b:00007f64d8b11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 329.217554][T10588] RAX: ffffffffffffffda RBX: 00007f64d7f76160 RCX: 00007f64d7d85d29 [ 329.225528][T10588] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 329.233880][T10588] RBP: 00007f64d7e01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 329.241851][T10588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.249821][T10588] R13: 0000000000000000 R14: 00007f64d7f76160 R15: 00007ffd9a9f7918 [ 329.257805][T10588] [ 329.260957][T10588] Kernel Offset: disabled [ 329.265325][T10588] Rebooting in 86400 seconds..