last executing test programs: 11.695951522s ago: executing program 3 (id=183): r0 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_get_self_attr$auto(0x4, 0x0, 0x0, 0xf0000000) futex_waitv$auto(&(0x7f0000000000)={0xfffffffffffffffc, 0x5d98, 0x140, 0x4}, 0x8, 0xfffffffc, 0x0, 0x62c0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) io_uring_setup$auto(0x7ea, &(0x7f0000000000)={0x6, 0x6c53, 0x10000400, 0x7, 0x3, 0x7, 0x7, [0x4, 0x2e9, 0x30], {0x2, 0x1, 0x8, 0x7, 0xce60, 0x100005, 0x800001, 0xf5c, 0x2000007}, {0x4, 0x1003, 0xffff7ffe, 0x2, 0x8, 0x200, 0x2003, 0x0, 0x3}}) (async) io_uring_setup$auto(0x7ea, &(0x7f0000000000)={0x6, 0x6c53, 0x10000400, 0x7, 0x3, 0x7, 0x7, [0x4, 0x2e9, 0x30], {0x2, 0x1, 0x8, 0x7, 0xce60, 0x100005, 0x800001, 0xf5c, 0x2000007}, {0x4, 0x1003, 0xffff7ffe, 0x2, 0x8, 0x200, 0x2003, 0x0, 0x3}}) mmap$auto(0x7, 0x20007, 0xde, 0x15, 0x8000000000000401, 0x1000000000008000) mmap$auto(0x9, 0x1, 0x9, 0x10, 0x8001, 0x1) setrlimit$auto(0x0, &(0x7f0000000000)={0x0, 0x3ff}) (async) setrlimit$auto(0x0, &(0x7f0000000000)={0x0, 0x3ff}) mmap$auto(0x0, 0x6, 0x6, 0x40eb2, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) lsm_get_self_attr$auto(0x7, &(0x7f0000000440)={0x5dd7, 0x0, 0x4, 0xea, "23a46cf98da3c852e92e3bde87fd1ea0b1f01270a63dff41bf18f7bc9ee2e1ffeb8f34267719676c291981c016710613b330451b46164e42a0f5c4b291e9957df969b954a6d85969d043c61a6d115709571b697de36611922616e2a48c4449a51bc926f292dbede8f8316ad7d78124e83cc0bea48c35871cf13f624514f36e09385dce68819757dedb5226e746709f46fe858c79e333dc70282bd9e79aa70a0047dc202fc5b37c91f080649842081661a437fac06e2584d59cb02e35ca160ab534bf0b90bd721cdeaab95d05a9e64e530d373fde5073556d4704ccc428fa5a017be198947be218c1bd25"}, &(0x7f0000000200)=0x100, 0x1ff) (async) lsm_get_self_attr$auto(0x7, &(0x7f0000000440)={0x5dd7, 0x0, 0x4, 0xea, "23a46cf98da3c852e92e3bde87fd1ea0b1f01270a63dff41bf18f7bc9ee2e1ffeb8f34267719676c291981c016710613b330451b46164e42a0f5c4b291e9957df969b954a6d85969d043c61a6d115709571b697de36611922616e2a48c4449a51bc926f292dbede8f8316ad7d78124e83cc0bea48c35871cf13f624514f36e09385dce68819757dedb5226e746709f46fe858c79e333dc70282bd9e79aa70a0047dc202fc5b37c91f080649842081661a437fac06e2584d59cb02e35ca160ab534bf0b90bd721cdeaab95d05a9e64e530d373fde5073556d4704ccc428fa5a017be198947be218c1bd25"}, &(0x7f0000000200)=0x100, 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f00000007c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_GET_INFO(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) sendmsg$auto_IPVS_CMD_GET_INFO(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5d000000347b1c2b2fae7b899cfd7482025cd9e932b8fae58a6e4faeeba4d81aa01ae383abefb6bfbdf4dc626dc191d6e68803a2b542884eb335ed333738a9584fbddfef440f6b4264c5b2173cd832c2308eed8fa1a879e0dd3ba81d0d3c94d15b8da397e50bb8183d3ca7a81e5d3ae9e19fea4de0e63486d493cddd1218243c76045595aeda913898d007dbae9b20badd64b742f7ad2b31c99e", @ANYRES16=r2, @ANYBLOB="04002abd7000ffdbdf250a00000004000100"], 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5d000000347b1c2b2fae7b899cfd7482025cd9e932b8fae58a6e4faeeba4d81aa01ae383abefb6bfbdf4dc626dc191d6e68803a2b542884eb335ed333738a9584fbddfef440f6b4264c5b2173cd832c2308eed8fa1a879e0dd3ba81d0d3c94d15b8da397e50bb8183d3ca7a81e5d3ae9e19fea4de0e63486d493cddd1218243c76045595aeda913898d007dbae9b20badd64b742f7ad2b31c99e", @ANYRES16=r2, @ANYBLOB="04002abd7000ffdbdf250a00000004000100"], 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$auto_OVS_VPORT_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x54}, 0x4c54) (async) sendmsg$auto_OVS_VPORT_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x54}, 0x4c54) capget$auto(0x0, 0xfffffffffffffffe) socket(0x2, 0x3, 0x1) mbind$auto(0x400000000004, 0x100000004, 0x1, 0x0, 0x3ff, 0x3) (async) mbind$auto(0x400000000004, 0x100000004, 0x1, 0x0, 0x3ff, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x0) mmap$auto(0x0, 0x7, 0x4000000000000, 0x15, 0x7, 0x8000) mmap$auto(0x0, 0x100000001, 0xdf, 0x11, 0x2, 0x4) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 9.763424002s ago: executing program 3 (id=189): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0xa59a, 0x15) open(&(0x7f0000000040)='./file1\x00', 0x4263c2, 0x3) syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000002240), 0xffffffffffffffff) madvise$auto(0x1ffff000, 0x208000000010001, 0x8) connect$auto(0xa0cb, &(0x7f0000000000)={0x6, @sa_data_min="37788c9e9b6e551fd34c824ab613"}, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mbind$auto(0xf000, 0x1, 0x1, 0x0, 0x7fff, 0x2) mmap$auto(0x2, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0xfbe8, 0xc) mlock$auto(0x7, 0x5) clone$auto(0x6, 0x401, 0xffffffffffffffff, 0xfffffffffffffffc, 0xa31b) mlock$auto(0x81, 0xffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) semctl$auto(0x2, 0x4, 0x400, 0xd2b) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fsopen$auto(0x0, 0x1) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) fsmount$auto(0x4, 0x0, 0x200003) mmap$auto(0x0, 0x1000000009, 0x72, 0x8b72, 0x2, 0x8000) memfd_secret$auto(0x0) 8.038629266s ago: executing program 0 (id=193): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0xa, &(0x7f0000002fc0)=@test={0x40005, 0xffffffff, 0x388b, 0xc, 0x800001bfb, 0x5, 0x5, 0x8001, 0x8, 0xfffffff5, 0xc0000000, 0x9, 0xb5a, 0x2, 0x38c132cb}, 0x455) r0 = socket(0xa, 0x3, 0xff) select$auto(0x3, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x0, 0xc, 0x8, 0x3, 0x6, 0x2, 0x9, 0x5e582970, 0x4000000000000000, 0x2, 0x4, 0x5, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) shutdown$auto(0x200000003, 0x2) write$auto(0x3, 0x0, 0x5c8) mremap$auto(0x1fc000, 0x0, 0x3fd6, 0xb, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc855}, 0x20000000) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000380), r2) r4 = syz_genetlink_get_family_id$auto_HSR(&(0x7f0000000640), r2) sendmsg$auto_HSR_C_GET_NODE_LIST(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) sendmsg$auto_HSR_C_GET_NODE_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x2}, @HSR_A_IF2_AGE={0x8, 0x4, 0x10001}, @HSR_A_NODE_ADDR={0xa, 0x1, "1f2b43a838eb"}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4880) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x6, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) pipe2$auto(0x0, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x5452, 0x0) socket(0xa, 0x2, 0x73) 7.426347751s ago: executing program 1 (id=195): setresgid$auto(0x81, 0x800000a0, 0x8) socket(0x2a, 0x2, 0x5) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) exit$auto(0x7) unshare$auto(0x40000080) exit$auto(0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) mknod$auto(&(0x7f0000000180)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e', 0x1, 0x4) acct$auto(&(0x7f0000000380)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') acct$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0xa, 0x3, 0x6) open(0x0, 0xa61c2, 0x84) socket(0x15, 0x5, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7fe, 0x6, 0x8, 0x4, 0x5f, 0x5, 0x6}, 0x6f3) socket(0x2, 0x3, 0x1) bind$auto(0x7, &(0x7f0000000000)={0x2, @sa_data_min="590eac1414349774a263b19050fe"}, 0x6f) getsockopt$auto(0x3, 0xff, 0x99, 0xfffffffffffffffe, 0xfffffffffffffffd) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x9) socket(0x22, 0x2, 0x2) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x1e81, 0x1c003, 0x3) open(0x0, 0x22240, 0x155) open(0x0, 0xa240, 0x1de) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 7.006670127s ago: executing program 3 (id=196): memfd_create$auto(&(0x7f00000002c0)='IPVS\x00', 0x7) fallocate$auto(0x3, 0x1, 0x8b, 0x8) statmount$auto(0x0, &(0x7f0000000040)={0x1, 0x0, 0x36, 0x824, 0x9, 0x8000000000000000, 0x9f, 0x7, 0x9, 0x5, 0x2, 0x9, 0xfffffffffffff7aa, 0x8, 0x0, 0x200000000000f, 0x100, 0x1, 0x10001, 0x2cf8, [0x9, 0x7f, 0x40, 0x1, 0x7fffffffffffffff, 0x48c000000000, 0x600, 0x3, 0x80000000, 0x8, 0x3961, 0xfffffffffffffff9, 0x10, 0x3, 0x35c4, 0x0, 0x6, 0x0, 0xea8, 0xc, 0xd9, 0x48, 0x45, 0x1, 0x200000000803, 0x7fffffffffffffff, 0x14, 0x10, 0xb, 0x8000000000000000, 0x2ab, 0x8, 0x800, 0x1, 0x1, 0x4003, 0xffffffffffff0000, 0x6b, 0xfffffffffffffff9, 0x4, 0x2b7, 0x4, 0xf, 0xffffffffffffff26, 0x8, 0x7, 0x6, 0x7a, 0xdc]}, 0xe3c, 0x0) r0 = socket(0x10, 0x2, 0x4) msync$auto(0xfffffffffffffff5, 0x6, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r1) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf250100000004000100790001"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x4004890) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) capget$auto(0x0, 0x0) capset$auto(0x0, 0xfffffffffffffffe) semctl$auto(0x3, 0x2, 0x13, 0x9) r3 = socket(0xa, 0x801, 0x84) listen$auto(0x3, 0x81) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$auto(0xa, 0x0, 0xaf0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) 6.316597306s ago: executing program 0 (id=197): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) r0 = socket(0x26, 0x80805, 0x0) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f00000022c0)='ns/time_for_children\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket(0x2, 0x2, 0x1) (async) bind$auto(0x7, &(0x7f0000000000)={0x11, @sockaddr_1_1}, 0x3e) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_HSR(&(0x7f0000000dc0), 0xffffffffffffffff) (async) r6 = socket(0xa, 0x801, 0x100) sendmsg$auto_HSR_C_GET_NODE_STATUS(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES16=r5, @ANYRES32=r5, @ANYRES16=r3, @ANYRES16=r2], 0x82}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) (async, rerun: 32) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async, rerun: 32) mount$auto(0x0, &(0x7f0000000100)='}[.&*}\x00', &(0x7f0000000140)='Tfsd\x00', 0x10001, 0x0) sendmsg$auto_TIPC_NL_KEY_SET(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000002300)=ANY=[], 0x1564}, 0x1, 0x0, 0x0, 0x8000}, 0x4014) (async) unshare$auto(0x200) (async) r7 = getpid() syz_open_procfs$namespace(r7, &(0x7f0000000000)='ns/cgroup\x00') (async) syz_open_procfs$namespace(r7, &(0x7f0000000000)='ns/pid\x00') socket(0xa, 0x6, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x600640f0}, 0x60044018) (async) connect$auto(0x3, &(0x7f0000000f00)={0x0, @sockaddr_1_1={"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"}}, 0x55) (async, rerun: 32) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0xfffffffffffffff8) (async, rerun: 32) getsockopt$auto(0x3, 0x200000000001, 0x19, 0x0, 0x0) (async) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async, rerun: 32) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) (rerun: 32) 5.843461687s ago: executing program 0 (id=198): ioperm$auto(0x800, 0x5, 0xd) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1ffd, 0x12) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) splice$auto(0x75, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x5) write$auto(0x3, 0x0, 0x100082) fallocate$auto(0x3, 0x3, 0xe, 0x8ec5) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munmap$auto(0x20001000, 0x2000000c) semctl$auto(0x1ff, 0x2, 0x13, 0x1) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x100, 0x70bd2d, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x20000081}, 0x48005) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(&(0x7f0000000240)=0x5) vmsplice$auto(0x4, &(0x7f0000000500)={0x0, 0x2}, 0x5, 0x2) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0xa5, 0x0, 0x1, 0x10011, 0x161615f8, 0xffffffffffffffff) 5.833504803s ago: executing program 1 (id=199): socket(0x2, 0x801, 0x100) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0}, 0x40000) (async) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) io_uring_setup$auto(0x5, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0xcd5, 0x2, 0x7, [0x4, 0x2, 0x8], {0x0, 0x1, 0x7, 0x7, 0x4, 0x5, 0x1, 0xfffffffc, 0x7}, {0x4, 0xfffff654, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) (async) io_uring_setup$auto(0x5, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0xcd5, 0x2, 0x7, [0x4, 0x2, 0x8], {0x0, 0x1, 0x7, 0x7, 0x4, 0x5, 0x1, 0xfffffffc, 0x7}, {0x4, 0xfffff654, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010129bd7010fddbdf25028a000008000300", @ANYRES32=r3, @ANYBLOB="08000b0109000000"], 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010129bd7010fddbdf25028a000008000300", @ANYRES32=r3, @ANYBLOB="08000b0109000000"], 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) (async) socket(0x2b, 0x1, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x2040, 0x0) readv$auto(0x3, 0xfffffffffffffffe, 0x9) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x200, 0x1b, 0x0, &(0x7f0000000080)=0x9c8) (async) getsockopt$auto(0x6, 0x200, 0x1b, 0x0, &(0x7f0000000080)=0x9c8) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) mmap$auto(0x3, 0x41000020009, 0xfffffffffffffff9, 0x3b2, 0x0, 0x3) mmap$auto(0x7, 0x4, 0xfffffffffffff019, 0x17, 0x7, 0x3) r5 = syz_genetlink_get_family_id$auto_802_15_4_MAC(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000126df252800000008001f007bdc297b"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$auto(0x3, 0x894b, 0x38) (async) ioctl$auto(0x3, 0x894b, 0x38) write$auto(0x800000000000c8, 0xfffffffffffffffe, 0xe) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) prctl$auto(0x10000000024, 0x2, 0x2008, 0x4000000c, 0x80001) (async) prctl$auto(0x10000000024, 0x2, 0x2008, 0x4000000c, 0x80001) 5.570992041s ago: executing program 3 (id=201): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x27, 0x7, 0xfc00000000000000, 0x3, 0xffff) 5.035150304s ago: executing program 1 (id=202): socket(0xa, 0x801, 0x106) r0 = open(0x0, 0x261c2, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8947, &(0x7f0000000000)={'vlan1\x00'}) mq_open$auto(&(0x7f0000000000), 0x76d0, 0x1100, &(0x7f0000000100)={0x7, 0xfffffffffffffff9, 0x3, 0x20000, [0x4623d553, 0x0, 0x40, 0x4]}) socket(0x29, 0xa, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x801, 0x84) socket(0x2, 0x1, 0x0) socket(0x1, 0x2, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x0) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) keyctl$auto(0x10, 0xffffffffffffffff, 0x5, 0x5, 0x80000003) sendmsg$auto_NL802154_CMD_STOP_BEACONS(r0, &(0x7f0000000400)={&(0x7f0000000240), 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x104, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x69}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xc}, @NL802154_ATTR_SCAN_MEAN_PRF={0xf, 0x23, "3493b111dfd1ac543fba75"}, @NL802154_ATTR_SEC_LEVEL={0xbe, 0x2d, "6ed1366389452bd1ea8d319d2a8757468b3da13cc1fc67e5ebfa9d2e2af95c7ca3d83e0d6a4de4dd7ee9e07565de7a3c8ae9614cd83675f998a5bead47fea3a5026cf517f7536aad18aa9393438e0f9e3289a41e5d30256bdd3729dfb087df773d39b0717814f23e4e72612a3c117884e960e7d60f875995a3cb4db4a183550aa9b1f375ee1bae18b0f92168676b836878ab656dd852c91ff60224eeb8a318e50387c0a31ebb28eb081689a11129d434ab8de7eb6fd64d285e9c"}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xe}]}, 0x104}, 0x1, 0x0, 0x0, 0x80c0}, 0x4004) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x40200000000, 0xffffffffffffefff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x2) socket(0x2, 0x2, 0x0) socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000040)={0x2, @sockaddr_1_1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) dup2$auto(0x0, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mq_getsetattr$auto(0x5f8, &(0x7f00000000c0)={0x4, 0x80000000, 0x3, 0x0, [0xffff, 0x80, 0x1, 0x3]}, &(0x7f00000001c0)={0x8, 0x0, 0xf2e, 0x1, [0x7, 0x2, 0x81, 0x3]}) clone$auto(0x4, 0x400, 0xfffffffffffffffe, 0xfffffffffffffffc, 0xd1) 4.767663058s ago: executing program 2 (id=203): socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0xd9) mmap$auto(0x8000000000040000, 0x2000b, 0xff, 0xeb1, 0x8000000000000001, 0x7) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x1, 0x1, 0x4c, &(0x7f0000000000)='\x00', 0xbb) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000200), r0) mmap$auto(0x0, 0x8, 0xdf, 0x209b72, 0x4e477f5a, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) llistxattr$auto(&(0x7f00000008c0)='/\x00', 0x0, 0xce3e) statx$auto(0x2, 0x0, 0x1000, 0xbdfa, 0x0) rt_tgsigqueueinfo$auto(0x1ff, 0xffffffff, 0x7, &(0x7f0000000180)={@siginfo_0_0={0x0, 0x9c2a, 0xfffffffa, @_timer={0x4, 0xfa, @sival_ptr=0x0, 0x4}}}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$NS_GET_PARENT(r1, 0xb701, 0x0) socket(0x1d, 0x2, 0x7) connect$auto(0x3, &(0x7f0000000180)={0x1d, @sockaddr_1_1}, 0x54) madvise$auto(0x0, 0x4, 0x15) 4.518900843s ago: executing program 0 (id=204): ioperm$auto(0x2, 0xfffffffffffff001, 0x3) socket(0xa, 0x801, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) select$auto(0xe, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x6, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0xff, 0xa, 0x4, 0xaab, 0x5, 0x4006]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) shutdown$auto(0x200000003, 0x2) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, &(0x7f0000000040)={0x0, 0x5}, 0x4, 0x0, 0x5}, 0xed7138c}, 0x2, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) socket(0xa, 0x3, 0xff) get_mempolicy$auto(0xfffffffffffffffe, 0xffffffffffffffff, 0x3ff, 0x69, 0x4) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x1) setresuid$auto(0xfffd, 0x8, 0xffffffff) bpf$auto(0x9, &(0x7f0000000000)=@bpf_attr_11={0x9, 0xfff, 0x6, 0xffffffff, 0x1, 0xfffffff7, 0x0, 0x9}, 0xc63) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) open(&(0x7f0000000800)='./file0\x00', 0x62241, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) lseek$auto(0x2, 0xffffffffffffffff, 0x1) fanotify_init$auto(0x5, 0x47) fanotify_mark$auto(0x0, 0x80, 0x9, 0x4, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, 0x0, 0x55) io_uring_setup$auto(0x7, &(0x7f00000000c0)={0x8, 0x90b, 0xfffffae3, 0xff99, 0x401, 0x8, 0x316, [0x4, 0x8, 0x400], {0x1, 0x80, 0x5, 0x5, 0x1c, 0x2, 0x6, 0x4, 0x81}, {0xcf0, 0x1db, 0x5, 0x4, 0x3, 0x2, 0x200, 0x3, 0x7fffffffffffffff}}) 4.375231334s ago: executing program 2 (id=205): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3}, 0xf7, 0x0) ioperm$auto(0x800, 0x5, 0xd) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mlock$auto(0xfbe9, 0x5f626901) memfd_create$auto(&(0x7f00000001c0)='IPVS\x00\x84\x94\xbf\x7f\xe0(\xc7^M\xbe\x92\x98?I\xa5ja\xe8\xa1o\xb5-Z\x9dc\x152\xaew`0M\x1b3\r\x8afQ\xc2\x82W?r$\xf0\xce\x7f\x15\xa1\x13\xb2\x84\x04\xad<\x91\x85\xb22G\xf6\x8b\xba<\xe9&\x17%\x1a\xa5c\xe8\x06\xd4ok\x8a\xb2\xbaz\xf1\v\xf4\xaa\xda\x91\xfb\xea\x17~C\xb3\xc4S\xce\x83\x13\xd9\xbd{d\xfdB]\xb0R\x05b\x1b\xa5\xb8\x85\xa9\xbc5-9\x94\xa4QG\x06Z3#\x1cK\xbe\x16\xebaE~\x00\x00\x00\x00\x00', 0x8) fchmod$auto(0x0, 0x9b9a) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) close_range$auto(0x3, 0x1aa, 0xfffffc5d) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x9, 0x21e9, 0x7ff, 0x3, 0x100000000, 0xb, 0x2e, 0x0, 0x3}, 0x6f4) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) open(&(0x7f0000000000)='./file1\x00', 0x10677d, 0x37e5c9853cd1b999) writev$auto(0xcdd9, &(0x7f00000002c0)={&(0x7f0000000280)="56b1aa5c0ba1d1c5ccd78b6b73e522bd2c884c0aa02ed68b891d511d38cd91ca315c87f0634b904097eea163184e182ad574", 0x7}, 0x8) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x40, 0x400008, 0xdf, 0x15, 0x8196, 0x8000) socket(0x2, 0x1, 0x0) clone$auto(0x5, 0xf7a, 0x0, &(0x7f0000000200)=0x1, 0xfffffffffffffeff) madvise$auto(0x0, 0xffffffffffff0401, 0x19) open(0x0, 0x4242, 0xe1d2b27bdc14abcd) execve$auto(0x0, 0xfffffffffffffffe, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40000, 0x14) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), r0) 4.333636319s ago: executing program 3 (id=206): getsockopt$auto(0x4, 0x0, 0xb, &(0x7f0000000000)='\x00', &(0x7f0000000040)=0x92da) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0xdf, 0xc78, 0x401, 0x10000) (async) mmap$auto(0x0, 0x9, 0xdf, 0xc78, 0x401, 0x10000) epoll_ctl$auto(0x7f, 0x7, 0x5, 0xfffffffffffffffe) (async) epoll_ctl$auto(0x7f, 0x7, 0x5, 0xfffffffffffffffe) remap_file_pages$auto(0x6a27, 0x0, 0x0, 0x3, 0x4) mlock2$auto(0x1, 0x8001, 0x0) (async) mlock2$auto(0x1, 0x8001, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlockall$auto(0x7) mmap$auto(0x80000001, 0x8, 0xdd, 0x9b72, 0x1, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(0xfffffffffffffffe, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_ovs_flow(0xfffffffffffffffe, 0xffffffffffffffff) readv$auto(0x3, 0x0, 0x400) keyctl$auto(0x5, 0xfffffffd, 0x8, 0x1, 0xb8b) keyctl$auto(0x7, 0xfffffffd, 0x2400005, 0x4, 0xd) mmap$auto(0x8, 0x7, 0x8000000000000002, 0x11, 0xd, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x1, 0xfdf, 0x2, 0x9b7e, 0x80000000000002, 0x7fff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb0, 0x405, 0x300000000000) 3.660994401s ago: executing program 1 (id=207): mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x8000, 0xc) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) userfaultfd$auto(0x1) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) 3.294932422s ago: executing program 0 (id=208): socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x801, 0x84) socket(0x2, 0x1, 0x0) setsockopt$auto(0x1, 0x1, 0x28, &(0x7f0000000000)='\x00', 0xbb) rt_sigprocmask$auto(0x40, 0x0, &(0x7f0000000040)={0x6}, 0x8) exit$auto(0x5f97) fanotify_init$auto(0x200, 0x2010000000000) open(0x0, 0x4242, 0xe1d2b27bdc14aabc) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x2010000000000) socket(0x26, 0x80805, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') open(&(0x7f0000000000)='./file1\x00', 0x8200, 0xe1d2b27bdc14aab8) open(&(0x7f0000000000)='./file1\x00', 0x10677d, 0x37e5c9853cd1b999) fanotify_mark$auto(0x0, 0x1, 0x4, 0x4, 0x0) fanotify_mark$auto(0x400000000000, 0x101, 0x9, 0x4, 0x0) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0x161342, 0x100) unshare$auto(0x40000080) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) dup2$auto(0x0, 0x3) writev$auto(0x1, &(0x7f0000000100)={&(0x7f0000000140), 0x400000000000fdef}, 0x1) vmsplice$auto(0x3, &(0x7f0000000080)={0x0, 0x6}, 0x9, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ustat$auto(0x6, 0xfffffffffffffffd) ioctl$auto(0x3, 0x40085400, 0x5) madvise$auto(0x0, 0x20200, 0x15) socket(0x2, 0x5, 0x0) 2.090191957s ago: executing program 2 (id=209): mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x7, 0x3) statfs$auto(&(0x7f0000002880)='/\x00', &(0x7f00000028c0)={0x5, 0x9, 0x240000000000, 0xffffffffffff83f4, 0xfffffffeffffffff, 0x1, 0x19, {[0x4, 0x18000]}, 0x6, 0x7, 0x0, [0x817d, 0x1, 0x4, 0x7]}) 2.089432814s ago: executing program 3 (id=210): write$auto(0x1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) (async) write$auto(0x1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) pselect6$auto(0x7, &(0x7f0000000080)={[0x400, 0x0, 0x400, 0x5, 0x100000001, 0x4, 0x9, 0x7fffffffffffffff, 0x5, 0x3, 0xffff, 0x9, 0x7, 0x6, 0x10]}, &(0x7f0000000100)={[0x2e3, 0x101, 0x7, 0x8, 0x8, 0xe2, 0x9, 0x1, 0x0, 0xa, 0x100, 0x2, 0x2, 0x0, 0x8, 0xfff]}, &(0x7f0000000180)={[0x4, 0x7, 0x4dc, 0x98d1, 0x4, 0x1, 0x3, 0x1, 0x4, 0x1, 0x81, 0xa62, 0x8a58, 0x5, 0xe7f, 0x57fd2bcb]}, &(0x7f0000000000)={0x401}, &(0x7f0000000200)="e79a4d5c8bdcdcf11f164c2b057f718f3769832d704fea29ef53cd300364d5991ac6151ea48b5f6cf12c669baecac2f9a248688e7c6213e199a01e8ac4a06252084fdedbe0ceaa0b2ab852960ddbb1e34e4c9e9c9812c5745a90cc6132ebb0379c6cbb01e155f7c8c1de0f1acfa4548a5bdc0d91debb2614754d781331e7a4e2aa904070411328547f9a979f6d5e9440e470dfd324ae8954f2d8348f5270801814236dcafcb658c2a4916e95e90d309634f4fa71a03664e41caffb") (async) pselect6$auto(0x7, &(0x7f0000000080)={[0x400, 0x0, 0x400, 0x5, 0x100000001, 0x4, 0x9, 0x7fffffffffffffff, 0x5, 0x3, 0xffff, 0x9, 0x7, 0x6, 0x10]}, &(0x7f0000000100)={[0x2e3, 0x101, 0x7, 0x8, 0x8, 0xe2, 0x9, 0x1, 0x0, 0xa, 0x100, 0x2, 0x2, 0x0, 0x8, 0xfff]}, &(0x7f0000000180)={[0x4, 0x7, 0x4dc, 0x98d1, 0x4, 0x1, 0x3, 0x1, 0x4, 0x1, 0x81, 0xa62, 0x8a58, 0x5, 0xe7f, 0x57fd2bcb]}, &(0x7f0000000000)={0x401}, &(0x7f0000000200)="e79a4d5c8bdcdcf11f164c2b057f718f3769832d704fea29ef53cd300364d5991ac6151ea48b5f6cf12c669baecac2f9a248688e7c6213e199a01e8ac4a06252084fdedbe0ceaa0b2ab852960ddbb1e34e4c9e9c9812c5745a90cc6132ebb0379c6cbb01e155f7c8c1de0f1acfa4548a5bdc0d91debb2614754d781331e7a4e2aa904070411328547f9a979f6d5e9440e470dfd324ae8954f2d8348f5270801814236dcafcb658c2a4916e95e90d309634f4fa71a03664e41caffb") prctl$auto(0x1000000003b, 0x1, 0x4, 0x8, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000100), r0) (async) r1 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000100), r0) sendmsg$auto_TIPC_NL_MEDIA_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010327bd7000fbdbdf2512"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000880) socket(0x1d, 0x2, 0x6) (async) socket(0x1d, 0x2, 0x6) close_range$auto(0x7, 0xfffffffffffffff8, 0x2) timer_create$auto(0xfffffff9, 0x0, 0x0) (async) timer_create$auto(0xfffffff9, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1, 0x2, 0x0) (async) socket(0x1, 0x2, 0x0) ioctl$auto(0x3, 0x800005411, 0x38) socket(0x2a, 0x2, 0x0) ioctl$auto(0x3, 0x800005411, 0x40000000000007) (async) ioctl$auto(0x3, 0x800005411, 0x40000000000007) madvise$auto(0x0, 0xffffffffffff0001, 0x15) pselect6$auto(0x6, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pselect6$auto(0x6, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0x6, 0x0) socket(0x2b, 0x1, 0x1) mount$auto(0x0, &(0x7f00000001c0)='..\x00', 0x0, 0x9, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setgroups$auto(0x3ff, 0x0) (async) setgroups$auto(0x3ff, 0x0) 2.036567929s ago: executing program 1 (id=211): mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x7, 0x3) statfs$auto(&(0x7f0000002880)='/\x00', &(0x7f00000028c0)={0x5, 0x9, 0x240000000000, 0xffffffffffff83f4, 0xfffffffeffffffff, 0x1, 0x19, {[0x4, 0x18000]}, 0x6, 0x7, 0x0, [0x817d, 0x1, 0x4, 0x7]}) (fail_nth: 2) 1.706792722s ago: executing program 2 (id=212): syz_genetlink_get_family_id$auto_MAC802154_HWSIM(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="40371900d0caf2f6f1eafa4ae01ba1d9176960a1bbf82fb4c0e2ff4487d3012da27b3ea41698af472a843be9704b69dadad5ed7c5eadce80bfcf4fff92e8791a738784fb6831917d5f3f8db4c2b364bbe662eb631689a0b0032a41e064bd10ba6376ee15ec75651a572af3bffafecede410d9ee747bee755d1337a83750e697e", @ANYRES16=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000885) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x1000401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1f, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="0800e00000000000c1728d2af766"}, 0x55) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) bind$auto(0x7, &(0x7f0000000300)={0x6, @sa_data_min="251f1f630d0c7e00fb88f06c884e"}, 0x0) sysfs$auto(0x2, 0x100000000000031, 0x0) fsopen$auto(0x0, 0x1) fsopen$auto(&(0x7f00000002c0)='\x00', 0x50) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket(0x26, 0x80805, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getpeername$auto(0x8, &(0x7f0000000240)={0x0, @sa_data_min="69a5a03db3bedf97c718300af330"}, &(0x7f0000000280)=0x2) setreuid$auto(0x3, 0x20000000007) socket(0xa, 0x5, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe80000000000100"}, 0x55) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mmap$auto(0x0, 0xd, 0xac2, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) mmap$auto(0x9, 0x8, 0x0, 0x9b72, 0x5, 0x45) mremap$auto(0x0, 0x4, 0x4, 0xb, 0x100000000) 1.215435771s ago: executing program 1 (id=213): ioperm$auto(0x800, 0x5, 0xd) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1ffd, 0x12) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) splice$auto(0x75, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x5) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) fallocate$auto(0x3, 0x3, 0xe, 0x8ec5) mmap$auto(0xb9, 0x100, 0x3, 0x9b72, 0x5, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munmap$auto(0x20001000, 0x2000000c) semctl$auto(0x1ff, 0x2, 0x16, 0x5) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x14, 0x0, 0x300, 0x70bd29, 0x8}, 0x14}}, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x22, 0x5, 0x5, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) connect$auto(0x100, &(0x7f0000000280)={0x2, @sa_data_min="6f2b47c59ac7eca05a38fe50c762"}, 0x50f) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0xa5, 0x0, 0x1, 0x10011, 0x161615f8, 0xffffffffffffffff) 642.058742ms ago: executing program 0 (id=214): socket(0xa, 0x2, 0x88) timer_create$auto(0x4, &(0x7f0000000200)={@sival_ptr=&(0x7f0000000280)="614dbb787d93597aab5b83437c763705f0c1b2b2f1d4bf3563b300ccbe4aa0aeda07ba3fc3834e537c997bdb49aafe1f8fed0bf8070ae9566136afac71a44e335f8c83d857cd9a28efdb7cc63a43e1d9069dd1792d7311629f70443c7b2a0bffb30a6068f634fc2b9ddfc450084020c1892874ea5447", 0xb, 0x9}, &(0x7f0000000300)=0x7) select$auto(0x6d0c, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x800000000000008, 0xc, 0xad14, 0x3, 0x6, 0x100000000, 0x40009, 0x5e582972, 0x4000000000000000, 0x10, 0x93, 0x8, 0x8, 0x5]}, 0x0, 0x0) settimeofday$auto(&(0x7f0000000180)={0x4, 0x3}, &(0x7f00000001c0)={0x6, 0xfff}) socket(0xa, 0x2, 0x0) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0x0, 0x9, 0xfffffffffffffffc, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x4000000000000000, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="0800e00000000000c1728d2af766"}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) lseek$auto(0x8, 0xd4e, 0xfff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x2, 0x3a) sendmsg$auto_NL80211_CMD_DEL_PMK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="22b5a18816370ff9cafea89d2e7da394a3050000009f34ccca70e9b8020381c94a958a3984b16c9b9a39", @ANYRES16=0x0, @ANYBLOB="00032bbd7000fcdbdf257c000000060098001f0f00006100cd00ed24902ee38606f21f105577c16404acc014e328b39742b9b95c48521412e23ce533ebec40c1f3cb3852f231d2fc44e01a723ff84b2cd779a05e901278803206528f3f8bcb12f759b10107d8cd85b1b87fe557d00fbda9c9eb05b05630000000"], 0x80}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) sendmmsg$auto(0x10000003, 0x0, 0x9a6, 0x0) mmap$auto(0x6, 0x111, 0x9, 0x18, 0x2, 0x1000) 640.693776ms ago: executing program 2 (id=215): mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mlockall$auto(0x7) socket(0x2b, 0x4, 0x1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2a, 0x2, 0x0) (async) socket(0x2a, 0x2, 0x0) pipe$auto(0x0) mmap$auto(0x0, 0xb, 0x4000000000df, 0x40eb1, 0x401, 0x4000300000000000) (async) mmap$auto(0x0, 0xb, 0x4000000000df, 0x40eb1, 0x401, 0x4000300000000000) 0s ago: executing program 2 (id=216): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) ioprio_set$auto(0x2, 0x800000000, 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.68' (ED25519) to the list of known hosts. [ 53.234938][ T5216] cgroup: Unknown subsys name 'net' [ 53.408507][ T5216] cgroup: Unknown subsys name 'cpuset' [ 53.416434][ T5216] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.743319][ T5216] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.862175][ T5231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.894719][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.903832][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.912479][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.920791][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.928714][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.938064][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.946667][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.954177][ T5241] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.955205][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.969845][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.976477][ T5241] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.977782][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.991180][ T5242] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.994101][ T5241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.000577][ T5242] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.006292][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.013307][ T5242] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.020227][ T5241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 57.026916][ T5242] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.034296][ T5241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.052702][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.075129][ T5242] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.082921][ T5242] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.369355][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 57.427405][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 57.529244][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 57.588529][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.596280][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.603760][ T5225] bridge_slave_0: entered allmulticast mode [ 57.612663][ T5225] bridge_slave_0: entered promiscuous mode [ 57.623384][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.630740][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.638548][ T5225] bridge_slave_1: entered allmulticast mode [ 57.645729][ T5225] bridge_slave_1: entered promiscuous mode [ 57.670108][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 57.687348][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.694775][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.701992][ T5229] bridge_slave_0: entered allmulticast mode [ 57.708989][ T5229] bridge_slave_0: entered promiscuous mode [ 57.716958][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.724160][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.731845][ T5229] bridge_slave_1: entered allmulticast mode [ 57.738716][ T5229] bridge_slave_1: entered promiscuous mode [ 57.773394][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.810648][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.822659][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.834171][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.888114][ T5229] team0: Port device team_slave_0 added [ 57.894234][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.901519][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.909193][ T5226] bridge_slave_0: entered allmulticast mode [ 57.916316][ T5226] bridge_slave_0: entered promiscuous mode [ 57.937571][ T5229] team0: Port device team_slave_1 added [ 57.957450][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.964649][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.971907][ T5226] bridge_slave_1: entered allmulticast mode [ 57.979116][ T5226] bridge_slave_1: entered promiscuous mode [ 57.988836][ T5225] team0: Port device team_slave_0 added [ 58.024731][ T5225] team0: Port device team_slave_1 added [ 58.038205][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.047880][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.074945][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.086790][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.093952][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.101845][ T5228] bridge_slave_0: entered allmulticast mode [ 58.108688][ T5228] bridge_slave_0: entered promiscuous mode [ 58.118029][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.125317][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.132590][ T5228] bridge_slave_1: entered allmulticast mode [ 58.140156][ T5228] bridge_slave_1: entered promiscuous mode [ 58.171259][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.181065][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.188399][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.215081][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.237780][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.245069][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.271894][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.284138][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.291385][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.317473][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.330991][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.372160][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.404243][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.416934][ T5226] team0: Port device team_slave_0 added [ 58.428211][ T5229] hsr_slave_0: entered promiscuous mode [ 58.435148][ T5229] hsr_slave_1: entered promiscuous mode [ 58.458507][ T5226] team0: Port device team_slave_1 added [ 58.475317][ T5225] hsr_slave_0: entered promiscuous mode [ 58.482031][ T5225] hsr_slave_1: entered promiscuous mode [ 58.489117][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.497184][ T5225] Cannot create hsr debugfs directory [ 58.537274][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.544231][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.570903][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.586483][ T5228] team0: Port device team_slave_0 added [ 58.611616][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.618742][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.645048][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.657948][ T5228] team0: Port device team_slave_1 added [ 58.717769][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.725056][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.751505][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.763887][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.771028][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.797471][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.850565][ T5226] hsr_slave_0: entered promiscuous mode [ 58.857611][ T5226] hsr_slave_1: entered promiscuous mode [ 58.863712][ T5226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.871794][ T5226] Cannot create hsr debugfs directory [ 58.965264][ T5228] hsr_slave_0: entered promiscuous mode [ 58.971912][ T5228] hsr_slave_1: entered promiscuous mode [ 58.978280][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.985959][ T5228] Cannot create hsr debugfs directory [ 59.075802][ T5234] Bluetooth: hci3: command tx timeout [ 59.081649][ T5242] Bluetooth: hci0: command tx timeout [ 59.145037][ T5225] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.155129][ T5242] Bluetooth: hci2: command tx timeout [ 59.155173][ T5234] Bluetooth: hci1: command tx timeout [ 59.163497][ T5225] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.187669][ T5225] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.197320][ T5225] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.250679][ T5229] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.260688][ T5229] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.271053][ T5229] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.282080][ T5229] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.338131][ T5226] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.349008][ T5226] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.361687][ T5226] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.383922][ T5226] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.472168][ T5228] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.485854][ T5228] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.505455][ T5228] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.516273][ T5228] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.568097][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.615147][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.646892][ T2941] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.654136][ T2941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.676038][ T2941] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.683199][ T2941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.701506][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.741685][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.761841][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.768951][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.814227][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.821369][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.846833][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.860032][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.912537][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.930375][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.949921][ T2941] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.957063][ T2941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.991587][ T2941] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.998861][ T2941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.011788][ T2941] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.018946][ T2941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.037560][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.045184][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.231169][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.321387][ T5225] veth0_vlan: entered promiscuous mode [ 60.353474][ T5225] veth1_vlan: entered promiscuous mode [ 60.392784][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.468115][ T5225] veth0_macvtap: entered promiscuous mode [ 60.501019][ T5225] veth1_macvtap: entered promiscuous mode [ 60.527465][ T5229] veth0_vlan: entered promiscuous mode [ 60.541843][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.557893][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.573297][ T5229] veth1_vlan: entered promiscuous mode [ 60.585105][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.598014][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.638742][ T5225] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.648506][ T5225] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.658355][ T5225] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.667751][ T5225] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.703510][ T5226] veth0_vlan: entered promiscuous mode [ 60.720901][ T5228] veth0_vlan: entered promiscuous mode [ 60.760841][ T5226] veth1_vlan: entered promiscuous mode [ 60.772688][ T5228] veth1_vlan: entered promiscuous mode [ 60.810590][ T5229] veth0_macvtap: entered promiscuous mode [ 60.860235][ T1305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.873538][ T1305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.892111][ T5226] veth0_macvtap: entered promiscuous mode [ 60.901030][ T5229] veth1_macvtap: entered promiscuous mode [ 60.929569][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.939087][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.951943][ T5226] veth1_macvtap: entered promiscuous mode [ 60.963192][ T5228] veth0_macvtap: entered promiscuous mode [ 60.975128][ T5228] veth1_macvtap: entered promiscuous mode [ 60.999802][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.010694][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.023013][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.042904][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.054329][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.064998][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.079602][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.091997][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.106848][ T5225] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.108182][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.134979][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.145140][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.156090][ T5234] Bluetooth: hci0: command tx timeout [ 61.156247][ T5234] Bluetooth: hci3: command tx timeout [ 61.167947][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.178513][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.189409][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.202253][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.216351][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.227198][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.235061][ T5242] Bluetooth: hci1: command tx timeout [ 61.241501][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.242495][ T5234] Bluetooth: hci2: command tx timeout [ 61.258936][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.269744][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.279882][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.290568][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.301831][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.314425][ T5229] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.323812][ T5229] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.332661][ T5229] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.341445][ T5229] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.367449][ T5226] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.381463][ T5226] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.390415][ T5226] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.400207][ T5226] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.413182][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.429160][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.440078][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.450838][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.461241][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.472189][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.483689][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.516686][ T5228] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.527123][ T5228] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.537094][ T5228] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.546253][ T5228] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.623213][ T1305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.633201][ T1305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.690740][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.706243][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.726413][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.734246][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.836568][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.850707][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.958939][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.976305][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.040858][ T1595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.064354][ T1595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.149419][ T5292] Process accounting resumed [ 62.167737][ T5292] RDS: rds_bind could not find a transport for ::ffff:172.20.20.52, load rds_tcp or rds_rdma? [ 62.869377][ T5299] Zero length message leads to an empty skb [ 63.235803][ T5234] Bluetooth: hci3: command tx timeout [ 63.236647][ T5242] Bluetooth: hci0: command tx timeout [ 63.304241][ T5315] Process accounting resumed [ 63.316981][ T5242] Bluetooth: hci2: command tx timeout [ 63.326152][ T5242] Bluetooth: hci1: command tx timeout [ 64.968146][ T5335] svc: failed to register nfsdv3 RPC service (errno 101). [ 65.006835][ T5335] svc: failed to register nfsaclv3 RPC service (errno 101). [ 65.316061][ T5242] Bluetooth: hci0: command tx timeout [ 65.317323][ T5234] Bluetooth: hci3: command tx timeout [ 65.394983][ T5234] Bluetooth: hci1: command tx timeout [ 65.400443][ T5234] Bluetooth: hci2: command tx timeout [ 65.600896][ T5346] Process accounting resumed [ 65.869754][ T5340] svc: failed to register nfsdv3 RPC service (errno 101). [ 65.898194][ T5340] svc: failed to register nfsaclv3 RPC service (errno 101). [ 66.339813][ T5351] svc: failed to register nfsdv3 RPC service (errno 101). [ 66.346723][ T5361] Process accounting resumed [ 66.353351][ T5351] svc: failed to register nfsaclv3 RPC service (errno 101). [ 66.379441][ T5361] RDS: rds_bind could not find a transport for ::ffff:172.20.20.52, load rds_tcp or rds_rdma? [ 69.485850][ T5400] Process accounting resumed [ 69.533819][ T5400] RDS: rds_bind could not find a transport for ::ffff:172.20.20.52, load rds_tcp or rds_rdma? [ 69.590653][ T5408] Process accounting resumed [ 69.755238][ T5414] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.056926][ T5426] could not allocate digest TFM handle [ 71.169908][ T5427] could not allocate digest TFM handle [ 71.310851][ T5426] mmap: syz.1.25 (5426) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 71.725836][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.732332][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.369643][ T5430] __kmem_cache_create_args(nfsd_file) failed with error -22 [ 72.404861][ T5430] CPU: 1 UID: 0 PID: 5430 Comm: syz.3.22 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 72.415448][ T5430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 72.425547][ T5430] Call Trace: [ 72.428850][ T5430] [ 72.431802][ T5430] dump_stack_lvl+0x16c/0x1f0 [ 72.436554][ T5430] __kmem_cache_create_args+0x130/0x3c0 [ 72.442157][ T5430] nfsd_file_cache_init+0x126/0x4c0 [ 72.447499][ T5430] ? net_generic+0xf4/0x2a0 [ 72.452051][ T5430] nfsd_svc+0x5db/0x940 [ 72.456243][ T5430] nfsd_nl_threads_set_doit+0x535/0xbe0 [ 72.461840][ T5430] genl_family_rcv_msg_doit+0x202/0x2f0 [ 72.467432][ T5430] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 72.473728][ T5430] ? bpf_lsm_capable+0x9/0x10 [ 72.478454][ T5430] ? security_capable+0x7e/0x260 [ 72.483438][ T5430] genl_rcv_msg+0x565/0x800 [ 72.487990][ T5430] ? __pfx_genl_rcv_msg+0x10/0x10 [ 72.493053][ T5430] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 72.499177][ T5430] netlink_rcv_skb+0x165/0x410 [ 72.503972][ T5430] ? __pfx_genl_rcv_msg+0x10/0x10 [ 72.509032][ T5430] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 72.514369][ T5430] ? down_read+0xc9/0x330 [ 72.518733][ T5430] ? __pfx_down_read+0x10/0x10 [ 72.523621][ T5430] ? netlink_deliver_tap+0x1ae/0xcf0 [ 72.528945][ T5430] genl_rcv+0x28/0x40 [ 72.532957][ T5430] netlink_unicast+0x53c/0x7f0 [ 72.537848][ T5430] ? __pfx_netlink_unicast+0x10/0x10 [ 72.543165][ T5430] ? __phys_addr_symbol+0x30/0x80 [ 72.548237][ T5430] ? __check_object_size+0x488/0x710 [ 72.553745][ T5430] netlink_sendmsg+0x8b8/0xd70 [ 72.558727][ T5430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.564086][ T5430] ____sys_sendmsg+0x9ae/0xb40 [ 72.568908][ T5430] ? copy_msghdr_from_user+0x10b/0x160 [ 72.574501][ T5430] ? __pfx_____sys_sendmsg+0x10/0x10 [ 72.579829][ T5430] ? __pfx___lock_acquire+0x10/0x10 [ 72.585077][ T5430] ___sys_sendmsg+0x135/0x1e0 [ 72.589798][ T5430] ? __pfx____sys_sendmsg+0x10/0x10 [ 72.595056][ T5430] ? lock_acquire+0x2f/0xb0 [ 72.599601][ T5430] ? __fget_files+0x40/0x3f0 [ 72.604232][ T5430] ? fdget+0x176/0x210 [ 72.608419][ T5430] __sys_sendmsg+0x117/0x1f0 [ 72.613133][ T5430] ? __pfx___sys_sendmsg+0x10/0x10 [ 72.618279][ T5430] ? __x64_sys_futex+0x1e1/0x4c0 [ 72.623267][ T5430] do_syscall_64+0xcd/0x250 [ 72.627814][ T5430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.633735][ T5430] RIP: 0033:0x7f2c4b57dff9 [ 72.638188][ T5430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.657838][ T5430] RSP: 002b:00007f2c4c2d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.666281][ T5430] RAX: ffffffffffffffda RBX: 00007f2c4b736130 RCX: 00007f2c4b57dff9 [ 72.674283][ T5430] RDX: 0000000000008004 RSI: 0000000020000140 RDI: 0000000000000008 [ 72.682282][ T5430] RBP: 00007f2c4b5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 72.690277][ T5430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.698292][ T5430] R13: 0000000000000000 R14: 00007f2c4b736130 R15: 00007ffe50ad1778 [ 72.706303][ T5430] [ 73.024635][ T5430] nfsd: unable to create nfsd_file_slab [ 77.852016][ T5242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.864633][ T5242] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.895036][ T5242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.920346][ T5242] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.940902][ T5242] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.954756][ T5242] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.411937][ T2941] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.679854][ T2941] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.872183][ T2941] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.189287][ T5495] Process accounting resumed [ 79.278133][ T2941] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.711744][ T5473] chnl_net:caif_netlink_parms(): no params data found [ 80.034765][ T5234] Bluetooth: hci2: command tx timeout [ 80.238619][ T2941] bridge_slave_1: left allmulticast mode [ 80.244749][ T2941] bridge_slave_1: left promiscuous mode [ 80.252575][ T2941] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.330194][ T2941] bridge_slave_0: left allmulticast mode [ 80.344823][ T2941] bridge_slave_0: left promiscuous mode [ 80.350644][ T2941] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.567559][ T2941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.619347][ T2941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.642096][ T2941] bond0 (unregistering): Released all slaves [ 81.730729][ T5473] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.738522][ T5473] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.751519][ T5473] bridge_slave_0: entered allmulticast mode [ 81.767944][ T5473] bridge_slave_0: entered promiscuous mode [ 81.819966][ T5473] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.836611][ T5473] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.843879][ T5473] bridge_slave_1: entered allmulticast mode [ 81.857730][ T5473] bridge_slave_1: entered promiscuous mode [ 81.968527][ T940] cfg80211: failed to load regulatory.db [ 82.114785][ T5234] Bluetooth: hci2: command tx timeout [ 82.398561][ T5473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.453168][ T5473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.664497][ T5473] team0: Port device team_slave_0 added [ 82.693830][ T5473] team0: Port device team_slave_1 added [ 82.803028][ T5473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.812729][ T5473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.855131][ T5473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.884268][ T2941] hsr_slave_0: left promiscuous mode [ 82.905783][ T2941] hsr_slave_1: left promiscuous mode [ 82.954998][ T2941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.962506][ T2941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.988530][ T2941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.015160][ T2941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.062169][ T2941] veth1_macvtap: left promiscuous mode [ 83.095468][ T2941] veth0_macvtap: left promiscuous mode [ 83.101374][ T2941] veth1_vlan: left promiscuous mode [ 83.122763][ T2941] veth0_vlan: left promiscuous mode [ 84.196288][ T5234] Bluetooth: hci2: command tx timeout [ 84.241736][ T5580] FAULT_INJECTION: forcing a failure. [ 84.241736][ T5580] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 84.256565][ T5580] CPU: 0 UID: 0 PID: 5580 Comm: syz.3.50 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 84.267202][ T5580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 84.277292][ T5580] Call Trace: [ 84.280589][ T5580] [ 84.283534][ T5580] dump_stack_lvl+0x16c/0x1f0 [ 84.288250][ T5580] should_fail_ex+0x497/0x5b0 [ 84.293145][ T5580] _copy_to_user+0x30/0xc0 [ 84.297592][ T5580] simple_read_from_buffer+0xd0/0x160 [ 84.302999][ T5580] proc_fail_nth_read+0x198/0x270 [ 84.308149][ T5580] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 84.313743][ T5580] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 84.319503][ T5580] vfs_read+0x1ce/0xbd0 [ 84.323677][ T5580] ? __pfx_lock_release+0x10/0x10 [ 84.328806][ T5580] ? rcu_is_watching+0x12/0xc0 [ 84.333581][ T5580] ? __pfx_vfs_read+0x10/0x10 [ 84.338265][ T5580] ? lock_acquire.part.0+0x11b/0x380 [ 84.343572][ T5580] ? find_held_lock+0x2d/0x110 [ 84.348354][ T5580] ? __mutex_unlock_slowpath+0x164/0x650 [ 84.354005][ T5580] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 84.360004][ T5580] ksys_read+0x12f/0x260 [ 84.364259][ T5580] ? __pfx_ksys_read+0x10/0x10 [ 84.369034][ T5580] ? syscall_user_dispatch+0x77/0x140 [ 84.374435][ T5580] do_syscall_64+0xcd/0x250 [ 84.378955][ T5580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.384865][ T5580] RIP: 0033:0x7f2c4b57ca3c [ 84.389469][ T5580] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 84.409083][ T5580] RSP: 002b:00007f2c4c312030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 84.417505][ T5580] RAX: ffffffffffffffda RBX: 00007f2c4b735f80 RCX: 00007f2c4b57ca3c [ 84.425483][ T5580] RDX: 000000000000000f RSI: 00007f2c4c3120a0 RDI: 0000000000000003 [ 84.433460][ T5580] RBP: 00007f2c4c312090 R08: 0000000000000000 R09: 0000000000000000 [ 84.441441][ T5580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.449417][ T5580] R13: 0000000000000000 R14: 00007f2c4b735f80 R15: 00007ffe50ad1778 [ 84.457411][ T5580] [ 84.566696][ T5590] nbd: must specify a device to reconfigure [ 84.883212][ T2941] team0 (unregistering): Port device team_slave_1 removed [ 84.932664][ T2941] team0 (unregistering): Port device team_slave_0 removed [ 85.404685][ T5473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.411662][ T5473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.438264][ T5473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.683528][ T5473] hsr_slave_0: entered promiscuous mode [ 85.715773][ T5473] hsr_slave_1: entered promiscuous mode [ 85.735353][ T5473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.753982][ T5473] Cannot create hsr debugfs directory [ 86.052320][ T29] audit: type=1326 audit(1728259134.211:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5616 comm="syz.1.59" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fadd957dff9 code=0x0 [ 86.275199][ T5234] Bluetooth: hci2: command tx timeout [ 87.051257][ T5473] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.092993][ T5473] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.124358][ T5473] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.152923][ T5473] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.381295][ T5473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.443547][ T5473] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.489375][ T2941] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.496558][ T2941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.561990][ T2941] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.569200][ T2941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.668843][ T5473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.113470][ T5473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.247572][ T5473] veth0_vlan: entered promiscuous mode [ 88.292933][ T5473] veth1_vlan: entered promiscuous mode [ 88.383144][ T5473] veth0_macvtap: entered promiscuous mode [ 88.421161][ T5473] veth1_macvtap: entered promiscuous mode [ 88.462182][ T5473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.504142][ T5473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.524453][ T5473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.574651][ T5473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.595215][ T5473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.615332][ T5473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.637119][ T5473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.705433][ T5473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.734657][ T5473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.774865][ T5473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.805938][ T5473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.834951][ T5473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.854656][ T5473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.886060][ T5473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.939952][ T5473] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.983990][ T5473] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.000439][ T5473] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.024988][ T5473] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.308730][ T1305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.333056][ T1305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.382072][ T2941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.409716][ T2941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.373311][ T29] audit: type=1326 audit(1728259138.521:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.0.72" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c6eb7dff9 code=0x0 [ 90.893978][ T5737] delete_channel: no stack [ 91.441576][ T5746] syz.0.81 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 98.935618][ T5831] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 99.013162][ T5831] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 99.198620][ T5836] Process accounting resumed [ 99.828376][ T5831] syz.1.99 (5831) used greatest stack depth: 20984 bytes left [ 101.188383][ T29] audit: type=1326 audit(1728259149.351:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.2.102" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a0d17dff9 code=0x0 [ 103.334067][ T5895] Process accounting resumed [ 104.275192][ T29] audit: type=1326 audit(1728259152.441:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.1.118" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fadd957dff9 code=0x0 [ 105.781369][ T5954] Process accounting resumed [ 106.239373][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.131'. [ 106.315649][ T5976] syz.2.130 (5976): attempted to duplicate a private mapping with mremap. This is not supported. [ 106.797828][ T29] audit: type=1326 audit(1728259154.961:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.0.134" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c6eb7dff9 code=0x0 [ 106.814926][ T5995] openvswitch: netlink: Flow key attr not present in new flow. [ 107.669941][ T6010] Process accounting resumed [ 109.004896][ T6046] process 'syz.3.148' launched ':,' with NULL argv: empty string added [ 109.380358][ T6055] FAULT_INJECTION: forcing a failure. [ 109.380358][ T6055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.414716][ T6055] CPU: 1 UID: 0 PID: 6055 Comm: syz.1.149 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 109.425377][ T6055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 109.435463][ T6055] Call Trace: [ 109.438768][ T6055] [ 109.441722][ T6055] dump_stack_lvl+0x16c/0x1f0 [ 109.446442][ T6055] should_fail_ex+0x497/0x5b0 [ 109.451162][ T6055] _copy_from_user+0x30/0xf0 [ 109.455794][ T6055] sk_setsockopt+0x8dc/0x3e40 [ 109.460595][ T6055] ? __pfx_sk_setsockopt+0x10/0x10 [ 109.465919][ T6055] ? __pfx___might_resched+0x10/0x10 [ 109.471234][ T6055] ? __pfx___lock_acquire+0x10/0x10 [ 109.476484][ T6055] ? aa_sk_perm+0x2f5/0xb20 [ 109.481028][ T6055] ? __pfx_aa_sk_perm+0x10/0x10 [ 109.485937][ T6055] do_sock_setsockopt+0x3f4/0x480 [ 109.490991][ T6055] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 109.496582][ T6055] ? fdget+0x176/0x210 [ 109.500683][ T6055] __sys_setsockopt+0x1a4/0x270 [ 109.505572][ T6055] ? __pfx___sys_setsockopt+0x10/0x10 [ 109.510981][ T6055] ? fput+0x30/0x390 [ 109.514908][ T6055] ? ksys_write+0x1ad/0x260 [ 109.519441][ T6055] ? __pfx_ksys_write+0x10/0x10 [ 109.524306][ T6055] __x64_sys_setsockopt+0xbd/0x160 [ 109.529447][ T6055] ? do_syscall_64+0x91/0x250 [ 109.534145][ T6055] ? lockdep_hardirqs_on+0x7c/0x110 [ 109.539355][ T6055] do_syscall_64+0xcd/0x250 [ 109.543875][ T6055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.549781][ T6055] RIP: 0033:0x7fadd957dff9 [ 109.554205][ T6055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.573830][ T6055] RSP: 002b:00007fadda3e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 109.582261][ T6055] RAX: ffffffffffffffda RBX: 00007fadd9736058 RCX: 00007fadd957dff9 [ 109.590249][ T6055] RDX: 0000000000000019 RSI: 0000000000000001 RDI: 0000000000000003 [ 109.598250][ T6055] RBP: 00007fadda3e5090 R08: 0000000000000009 R09: 0000000000000000 [ 109.606228][ T6055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.614211][ T6055] R13: 0000000000000001 R14: 00007fadd9736058 R15: 00007ffd457bcfb8 [ 109.622207][ T6055] [ 110.853835][ T6078] Process accounting resumed [ 111.405432][ T6092] FAULT_INJECTION: forcing a failure. [ 111.405432][ T6092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.526061][ T6092] CPU: 0 UID: 0 PID: 6092 Comm: syz.1.158 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 111.536724][ T6092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 111.546816][ T6092] Call Trace: [ 111.550126][ T6092] [ 111.553082][ T6092] dump_stack_lvl+0x16c/0x1f0 [ 111.557827][ T6092] should_fail_ex+0x497/0x5b0 [ 111.562549][ T6092] _copy_from_user+0x30/0xf0 [ 111.567180][ T6092] move_addr_to_kernel+0x68/0x160 [ 111.572240][ T6092] __sys_connect+0xb4/0x180 [ 111.577211][ T6092] ? __pfx___sys_connect+0x10/0x10 [ 111.582369][ T6092] ? __pfx_ksys_write+0x10/0x10 [ 111.587360][ T6092] __x64_sys_connect+0x72/0xb0 [ 111.592155][ T6092] ? lockdep_hardirqs_on+0x7c/0x110 [ 111.597392][ T6092] do_syscall_64+0xcd/0x250 [ 111.602015][ T6092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.608031][ T6092] RIP: 0033:0x7fadd957dff9 [ 111.612472][ T6092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.632120][ T6092] RSP: 002b:00007fadda3e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 111.640935][ T6092] RAX: ffffffffffffffda RBX: 00007fadd9736058 RCX: 00007fadd957dff9 [ 111.648940][ T6092] RDX: 0000000000000055 RSI: 0000000020000140 RDI: 0000000000000003 [ 111.657031][ T6092] RBP: 00007fadda3e5090 R08: 0000000000000000 R09: 0000000000000000 [ 111.665048][ T6092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.673058][ T6092] R13: 0000000000000000 R14: 00007fadd9736058 R15: 00007ffd457bcfb8 [ 111.681257][ T6092] [ 113.104762][ T29] audit: type=1326 audit(1728259161.261:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6115 comm="syz.0.166" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c6eb7dff9 code=0x0 [ 113.845392][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.169'. [ 116.526531][ T29] audit: type=1326 audit(1728259164.691:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.3.179" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c4b57dff9 code=0x0 [ 120.832493][ T29] audit: type=1326 audit(1728259168.988:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.1.191" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fadd957dff9 code=0x0 [ 122.189746][ T6225] nbd: must specify at least one socket [ 122.625835][ T6231] Process accounting resumed [ 122.718250][ T6233] Process accounting resumed [ 122.763142][ T6231] RDS: rds_bind could not find a transport for ::ffff:172.20.20.52, load rds_tcp or rds_rdma? [ 122.850939][ T6245] netlink: 172 bytes leftover after parsing attributes in process `syz.3.196'. [ 123.615497][ T6262] FAULT_INJECTION: forcing a failure. [ 123.615497][ T6262] name failslab, interval 1, probability 0, space 0, times 1 [ 123.742679][ T6262] CPU: 0 UID: 0 PID: 6262 Comm: syz.2.200 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 123.753322][ T6262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 123.763412][ T6262] Call Trace: [ 123.766715][ T6262] [ 123.769674][ T6262] dump_stack_lvl+0x16c/0x1f0 [ 123.774399][ T6262] should_fail_ex+0x497/0x5b0 [ 123.779123][ T6262] ? fs_reclaim_acquire+0xae/0x160 [ 123.784297][ T6262] should_failslab+0xc2/0x120 [ 123.789205][ T6262] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 123.794705][ T6262] ? getname_flags.part.0+0x4c/0x550 [ 123.800032][ T6262] getname_flags.part.0+0x4c/0x550 [ 123.805193][ T6262] getname_flags+0x93/0xf0 [ 123.809644][ T6262] user_path_at+0x24/0x60 [ 123.814004][ T6262] user_statfs+0xa0/0x180 [ 123.818372][ T6262] ? __pfx_user_statfs+0x10/0x10 [ 123.823345][ T6262] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 123.829366][ T6262] __do_sys_statfs+0x8a/0x100 [ 123.834085][ T6262] ? __pfx___do_sys_statfs+0x10/0x10 [ 123.839514][ T6262] do_syscall_64+0xcd/0x250 [ 123.844056][ T6262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.849984][ T6262] RIP: 0033:0x7f6a0d17dff9 [ 123.854442][ T6262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.874089][ T6262] RSP: 002b:00007f6a0e04d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 123.882555][ T6262] RAX: ffffffffffffffda RBX: 00007f6a0d335f80 RCX: 00007f6a0d17dff9 [ 123.890558][ T6262] RDX: 0000000000000000 RSI: 00000000200028c0 RDI: 0000000020002880 [ 123.898563][ T6262] RBP: 00007f6a0e04d090 R08: 0000000000000000 R09: 0000000000000000 [ 123.906566][ T6262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.914567][ T6262] R13: 0000000000000000 R14: 00007f6a0d335f80 R15: 00007ffce084d4b8 [ 123.922579][ T6262] [ 127.305380][ T6314] FAULT_INJECTION: forcing a failure. [ 127.305380][ T6314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.465475][ T6314] CPU: 1 UID: 0 PID: 6314 Comm: syz.1.211 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 127.476124][ T6314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 127.486277][ T6314] Call Trace: [ 127.489559][ T6314] [ 127.492492][ T6314] dump_stack_lvl+0x16c/0x1f0 [ 127.497189][ T6314] should_fail_ex+0x497/0x5b0 [ 127.501884][ T6314] strncpy_from_user+0x3b/0x2a0 [ 127.506749][ T6314] getname_flags.part.0+0x8f/0x550 [ 127.511879][ T6314] getname_flags+0x93/0xf0 [ 127.516648][ T6314] user_path_at+0x24/0x60 [ 127.520988][ T6314] user_statfs+0xa0/0x180 [ 127.525326][ T6314] ? __pfx_user_statfs+0x10/0x10 [ 127.530281][ T6314] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 127.536279][ T6314] __do_sys_statfs+0x8a/0x100 [ 127.540968][ T6314] ? __pfx___do_sys_statfs+0x10/0x10 [ 127.546282][ T6314] do_syscall_64+0xcd/0x250 [ 127.550803][ T6314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.556708][ T6314] RIP: 0033:0x7fadd957dff9 [ 127.561138][ T6314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.580757][ T6314] RSP: 002b:00007fadda406038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 127.589181][ T6314] RAX: ffffffffffffffda RBX: 00007fadd9735f80 RCX: 00007fadd957dff9 [ 127.597159][ T6314] RDX: 0000000000000000 RSI: 00000000200028c0 RDI: 0000000020002880 [ 127.605229][ T6314] RBP: 00007fadda406090 R08: 0000000000000000 R09: 0000000000000000 [ 127.613204][ T6314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.621180][ T6314] R13: 0000000000000000 R14: 00007fadd9735f80 R15: 00007ffd457bcfb8 [ 127.629169][ T6314] [ 129.399672][ T6337] svc: failed to register nfsdv3 RPC service (errno 111). [ 129.421355][ T6321] gre0: entered allmulticast mode [ 129.433467][ T6337] svc: failed to register nfsaclv3 RPC service (errno 111). [ 129.498630][ T6337] ================================================================== [ 129.506743][ T6337] BUG: KASAN: slab-use-after-free in rhashtable_walk_enter+0x333/0x370 [ 129.515031][ T6337] Read of size 8 at addr ffff88804e268010 by task syz.2.216/6337 [ 129.522774][ T6337] [ 129.525112][ T6337] CPU: 1 UID: 0 PID: 6337 Comm: syz.2.216 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 129.535724][ T6337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 129.545799][ T6337] Call Trace: [ 129.549092][ T6337] [ 129.552037][ T6337] dump_stack_lvl+0x116/0x1f0 [ 129.556754][ T6337] print_report+0xc3/0x620 [ 129.561205][ T6337] ? __virt_addr_valid+0x5e/0x590 [ 129.566260][ T6337] ? __phys_addr+0xc6/0x150 [ 129.570800][ T6337] kasan_report+0xd9/0x110 [ 129.575253][ T6337] ? rhashtable_walk_enter+0x333/0x370 [ 129.580828][ T6337] ? rhashtable_walk_enter+0x333/0x370 [ 129.586328][ T6337] rhashtable_walk_enter+0x333/0x370 [ 129.591651][ T6337] __nfsd_file_cache_purge+0xad/0x470 [ 129.597054][ T6337] ? __pfx___nfsd_file_cache_purge+0x10/0x10 [ 129.603071][ T6337] ? lockdep_hardirqs_on+0x7c/0x110 [ 129.608309][ T6337] ? enable_work+0x246/0x340 [ 129.612924][ T6337] ? __pfx_enable_work+0x10/0x10 [ 129.617893][ T6337] nfsd_file_cache_shutdown+0xcf/0x4e0 [ 129.623384][ T6337] nfsd_svc+0x6a9/0x940 [ 129.627559][ T6337] nfsd_nl_threads_set_doit+0x535/0xbe0 [ 129.633135][ T6337] genl_family_rcv_msg_doit+0x202/0x2f0 [ 129.638716][ T6337] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 129.644818][ T6337] ? bpf_lsm_capable+0x9/0x10 [ 129.649522][ T6337] ? security_capable+0x7e/0x260 [ 129.654575][ T6337] genl_rcv_msg+0x565/0x800 [ 129.659121][ T6337] ? __pfx_genl_rcv_msg+0x10/0x10 [ 129.664178][ T6337] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 129.670279][ T6337] netlink_rcv_skb+0x165/0x410 [ 129.675082][ T6337] ? __pfx_genl_rcv_msg+0x10/0x10 [ 129.680137][ T6337] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 129.685460][ T6337] ? down_read+0xc9/0x330 [ 129.689832][ T6337] ? __pfx_down_read+0x10/0x10 [ 129.694629][ T6337] ? netlink_deliver_tap+0x1ae/0xcf0 [ 129.700063][ T6337] genl_rcv+0x28/0x40 [ 129.704077][ T6337] netlink_unicast+0x53c/0x7f0 [ 129.708871][ T6337] ? __pfx_netlink_unicast+0x10/0x10 [ 129.714184][ T6337] ? __phys_addr_symbol+0x30/0x80 [ 129.719241][ T6337] ? __check_object_size+0x488/0x710 [ 129.724561][ T6337] netlink_sendmsg+0x8b8/0xd70 [ 129.729436][ T6337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.734762][ T6337] ____sys_sendmsg+0x9ae/0xb40 [ 129.739559][ T6337] ? copy_msghdr_from_user+0x10b/0x160 [ 129.745056][ T6337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.750371][ T6337] ? __pfx___lock_acquire+0x10/0x10 [ 129.755653][ T6337] ___sys_sendmsg+0x135/0x1e0 [ 129.760371][ T6337] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.765698][ T6337] ? lock_acquire+0x2f/0xb0 [ 129.770232][ T6337] ? __fget_files+0x40/0x3f0 [ 129.774855][ T6337] ? fdget+0x176/0x210 [ 129.778944][ T6337] __sys_sendmsg+0x117/0x1f0 [ 129.783566][ T6337] ? __pfx___sys_sendmsg+0x10/0x10 [ 129.788708][ T6337] ? __x64_sys_futex+0x1e1/0x4c0 [ 129.793680][ T6337] do_syscall_64+0xcd/0x250 [ 129.798214][ T6337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.804150][ T6337] RIP: 0033:0x7f6a0d17dff9 [ 129.808606][ T6337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.828244][ T6337] RSP: 002b:00007f6a0e04d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.836686][ T6337] RAX: ffffffffffffffda RBX: 00007f6a0d335f80 RCX: 00007f6a0d17dff9 [ 129.844679][ T6337] RDX: 0000000000008004 RSI: 0000000020000140 RDI: 0000000000000003 [ 129.852691][ T6337] RBP: 00007f6a0d1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 129.860709][ T6337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.868703][ T6337] R13: 0000000000000000 R14: 00007f6a0d335f80 R15: 00007ffce084d4b8 [ 129.876704][ T6337] [ 129.879740][ T6337] [ 129.882071][ T6337] Allocated by task 5272: [ 129.886404][ T6337] kasan_save_stack+0x33/0x60 [ 129.891107][ T6337] kasan_save_track+0x14/0x30 [ 129.895812][ T6337] __kasan_kmalloc+0xaa/0xb0 [ 129.900427][ T6337] __kmalloc_node_track_caller_noprof+0x20f/0x440 [ 129.906874][ T6337] kmalloc_reserve+0xef/0x2c0 [ 129.911744][ T6337] __alloc_skb+0x164/0x380 [ 129.916192][ T6337] nsim_dev_trap_report_work+0x2a4/0xc80 [ 129.922025][ T6337] process_one_work+0x958/0x1b30 [ 129.926993][ T6337] worker_thread+0x6c8/0xf00 [ 129.931610][ T6337] kthread+0x2c1/0x3a0 [ 129.935783][ T6337] ret_from_fork+0x45/0x80 [ 129.940212][ T6337] ret_from_fork_asm+0x1a/0x30 [ 129.945001][ T6337] [ 129.947339][ T6337] Freed by task 5272: [ 129.951343][ T6337] kasan_save_stack+0x33/0x60 [ 129.956050][ T6337] kasan_save_track+0x14/0x30 [ 129.960745][ T6337] kasan_save_free_info+0x3b/0x60 [ 129.965787][ T6337] __kasan_slab_free+0x51/0x70 [ 129.970576][ T6337] kfree+0x14f/0x4b0 [ 129.974493][ T6337] skb_free_head+0x108/0x1d0 [ 129.979107][ T6337] skb_release_data+0x560/0x730 [ 129.983986][ T6337] consume_skb+0xbf/0x100 [ 129.988347][ T6337] nsim_dev_trap_report_work+0x878/0xc80 [ 129.994012][ T6337] process_one_work+0x958/0x1b30 [ 129.998991][ T6337] worker_thread+0x6c8/0xf00 [ 130.003609][ T6337] kthread+0x2c1/0x3a0 [ 130.007701][ T6337] ret_from_fork+0x45/0x80 [ 130.012133][ T6337] ret_from_fork_asm+0x1a/0x30 [ 130.016928][ T6337] [ 130.019263][ T6337] The buggy address belongs to the object at ffff88804e268000 [ 130.019263][ T6337] which belongs to the cache kmalloc-4k of size 4096 [ 130.033338][ T6337] The buggy address is located 16 bytes inside of [ 130.033338][ T6337] freed 4096-byte region [ffff88804e268000, ffff88804e269000) [ 130.047773][ T6337] [ 130.050110][ T6337] The buggy address belongs to the physical page: [ 130.056623][ T6337] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4e268 [ 130.065413][ T6337] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 130.073929][ T6337] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 130.081508][ T6337] page_type: f5(slab) [ 130.085512][ T6337] raw: 00fff00000000040 ffff88801ac42140 dead000000000122 0000000000000000 [ 130.094113][ T6337] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 130.102722][ T6337] head: 00fff00000000040 ffff88801ac42140 dead000000000122 0000000000000000 [ 130.111424][ T6337] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 130.120159][ T6337] head: 00fff00000000003 ffffea0001389a01 ffffffffffffffff 0000000000000000 [ 130.128892][ T6337] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 130.137622][ T6337] page dumped because: kasan: bad access detected [ 130.144058][ T6337] page_owner tracks the page as allocated [ 130.149782][ T6337] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5272, tgid 5272 (kworker/1:4), ts 123185671952, free_ts 123071307477 [ 130.170738][ T6337] post_alloc_hook+0x2d1/0x350 [ 130.175532][ T6337] get_page_from_freelist+0x101e/0x3070 [ 130.181110][ T6337] __alloc_pages_noprof+0x223/0x25c0 [ 130.186424][ T6337] alloc_pages_mpol_noprof+0x2c9/0x610 [ 130.191916][ T6337] new_slab+0x2ba/0x3f0 [ 130.196105][ T6337] ___slab_alloc+0xd1d/0x16f0 [ 130.200819][ T6337] __slab_alloc.constprop.0+0x56/0xb0 [ 130.206216][ T6337] __kmalloc_node_track_caller_noprof+0x365/0x440 [ 130.212666][ T6337] kmalloc_reserve+0xef/0x2c0 [ 130.217368][ T6337] __alloc_skb+0x164/0x380 [ 130.221815][ T6337] nsim_dev_trap_report_work+0x2a4/0xc80 [ 130.227476][ T6337] process_one_work+0x958/0x1b30 [ 130.232446][ T6337] worker_thread+0x6c8/0xf00 [ 130.237069][ T6337] kthread+0x2c1/0x3a0 [ 130.241155][ T6337] ret_from_fork+0x45/0x80 [ 130.245592][ T6337] ret_from_fork_asm+0x1a/0x30 [ 130.250390][ T6337] page last free pid 6244 tgid 6244 stack trace: [ 130.256726][ T6337] free_unref_page+0x5f4/0xdc0 [ 130.261517][ T6337] qlist_free_all+0x4e/0x120 [ 130.266129][ T6337] kasan_quarantine_reduce+0x192/0x1e0 [ 130.271614][ T6337] __kasan_slab_alloc+0x69/0x90 [ 130.276493][ T6337] kmem_cache_alloc_noprof+0x121/0x2f0 [ 130.281982][ T6337] jbd2__journal_start+0x193/0x6a0 [ 130.287126][ T6337] __ext4_journal_start_sb+0x358/0x660 [ 130.292628][ T6337] ext4_dirty_inode+0xa1/0x130 [ 130.297421][ T6337] __mark_inode_dirty+0x1f6/0xe60 [ 130.302473][ T6337] generic_update_time+0xcf/0xf0 [ 130.307438][ T6337] file_update_time+0x12e/0x160 [ 130.312314][ T6337] ext4_page_mkwrite+0x368/0x1760 [ 130.317366][ T6337] do_page_mkwrite+0x177/0x380 [ 130.322153][ T6337] do_pte_missing+0x29e/0x3e50 [ 130.326960][ T6337] __handle_mm_fault+0x100a/0x2a10 [ 130.332099][ T6337] handle_mm_fault+0x3fa/0xaa0 [ 130.336887][ T6337] [ 130.339300][ T6337] Memory state around the buggy address: [ 130.344940][ T6337] ffff88804e267f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 130.353017][ T6337] ffff88804e267f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 130.361103][ T6337] >ffff88804e268000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 130.369193][ T6337] ^ [ 130.373790][ T6337] ffff88804e268080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 130.381875][ T6337] ffff88804e268100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 130.390043][ T6337] ================================================================== [ 130.399551][ T6337] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 130.406785][ T6337] CPU: 1 UID: 0 PID: 6337 Comm: syz.2.216 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 130.417398][ T6337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 130.427477][ T6337] Call Trace: [ 130.430858][ T6337] [ 130.433801][ T6337] dump_stack_lvl+0x3d/0x1f0 [ 130.438424][ T6337] panic+0x71d/0x800 [ 130.442352][ T6337] ? mark_held_locks+0x9f/0xe0 [ 130.447147][ T6337] ? __pfx_panic+0x10/0x10 [ 130.451587][ T6337] ? irqentry_exit+0x3b/0x90 [ 130.456209][ T6337] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.461441][ T6337] check_panic_on_warn+0xab/0xb0 [ 130.466493][ T6337] end_report+0x117/0x180 [ 130.470853][ T6337] kasan_report+0xe9/0x110 [ 130.475486][ T6337] ? rhashtable_walk_enter+0x333/0x370 [ 130.480994][ T6337] ? rhashtable_walk_enter+0x333/0x370 [ 130.486495][ T6337] rhashtable_walk_enter+0x333/0x370 [ 130.491816][ T6337] __nfsd_file_cache_purge+0xad/0x470 [ 130.497225][ T6337] ? __pfx___nfsd_file_cache_purge+0x10/0x10 [ 130.503322][ T6337] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.508563][ T6337] ? enable_work+0x246/0x340 [ 130.513173][ T6337] ? __pfx_enable_work+0x10/0x10 [ 130.518139][ T6337] nfsd_file_cache_shutdown+0xcf/0x4e0 [ 130.523637][ T6337] nfsd_svc+0x6a9/0x940 [ 130.527869][ T6337] nfsd_nl_threads_set_doit+0x535/0xbe0 [ 130.533451][ T6337] genl_family_rcv_msg_doit+0x202/0x2f0 [ 130.539073][ T6337] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 130.545190][ T6337] ? bpf_lsm_capable+0x9/0x10 [ 130.549917][ T6337] ? security_capable+0x7e/0x260 [ 130.554894][ T6337] genl_rcv_msg+0x565/0x800 [ 130.559434][ T6337] ? __pfx_genl_rcv_msg+0x10/0x10 [ 130.564498][ T6337] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 130.570601][ T6337] netlink_rcv_skb+0x165/0x410 [ 130.575394][ T6337] ? __pfx_genl_rcv_msg+0x10/0x10 [ 130.580459][ T6337] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 130.585833][ T6337] ? down_read+0xc9/0x330 [ 130.590215][ T6337] ? __pfx_down_read+0x10/0x10 [ 130.595016][ T6337] ? netlink_deliver_tap+0x1ae/0xcf0 [ 130.600331][ T6337] genl_rcv+0x28/0x40 [ 130.604342][ T6337] netlink_unicast+0x53c/0x7f0 [ 130.609152][ T6337] ? __pfx_netlink_unicast+0x10/0x10 [ 130.614466][ T6337] ? __phys_addr_symbol+0x30/0x80 [ 130.619521][ T6337] ? __check_object_size+0x488/0x710 [ 130.624849][ T6337] netlink_sendmsg+0x8b8/0xd70 [ 130.629648][ T6337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.634969][ T6337] ____sys_sendmsg+0x9ae/0xb40 [ 130.639761][ T6337] ? copy_msghdr_from_user+0x10b/0x160 [ 130.645256][ T6337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.650577][ T6337] ? __pfx___lock_acquire+0x10/0x10 [ 130.655818][ T6337] ___sys_sendmsg+0x135/0x1e0 [ 130.660535][ T6337] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.665774][ T6337] ? lock_acquire+0x2f/0xb0 [ 130.670311][ T6337] ? __fget_files+0x40/0x3f0 [ 130.674943][ T6337] ? fdget+0x176/0x210 [ 130.679037][ T6337] __sys_sendmsg+0x117/0x1f0 [ 130.683745][ T6337] ? __pfx___sys_sendmsg+0x10/0x10 [ 130.688889][ T6337] ? __x64_sys_futex+0x1e1/0x4c0 [ 130.693867][ T6337] do_syscall_64+0xcd/0x250 [ 130.698413][ T6337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.704354][ T6337] RIP: 0033:0x7f6a0d17dff9 [ 130.708789][ T6337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.728424][ T6337] RSP: 002b:00007f6a0e04d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.736892][ T6337] RAX: ffffffffffffffda RBX: 00007f6a0d335f80 RCX: 00007f6a0d17dff9 [ 130.744902][ T6337] RDX: 0000000000008004 RSI: 0000000020000140 RDI: 0000000000000003 [ 130.752902][ T6337] RBP: 00007f6a0d1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 130.760906][ T6337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.768901][ T6337] R13: 0000000000000000 R14: 00007f6a0d335f80 R15: 00007ffce084d4b8 [ 130.776903][ T6337] [ 130.780209][ T6337] Kernel Offset: disabled [ 130.784554][ T6337] Rebooting in 86400 seconds..