last executing test programs: 3m20.090771462s ago: executing program 2 (id=350): close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x5, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) mmap$auto(0x8000000, 0x8, 0x1000000016, 0x13, 0x3, 0x180000000) clone$auto(0x8000000000000000, 0x104, 0xfffffffffffffffc, 0x0, 0x100000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 3m19.729093721s ago: executing program 2 (id=353): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) mincore$auto(0x0, 0x1, 0x0) close_range$auto(0x0, 0xe903, 0x2) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x31, 0x0, 0x28) 3m19.207673732s ago: executing program 2 (id=358): socket(0xa, 0x3, 0x73) read$auto(0x3, 0x0, 0xf34) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) mknod$auto(0x0, 0x63c1, 0x7ff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) clock_gettime$auto(0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) 3m18.721084571s ago: executing program 2 (id=362): r0 = socket(0x2, 0x3, 0x6) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x100000000000038, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) open(0x0, 0x22240, 0x154) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) 3m18.368149999s ago: executing program 2 (id=368): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) close_range$auto(0x2, 0x8000, 0x0) tkill$auto(0x1, 0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3, 0xdf, 0x2000000000eb1, 0x404, 0x0) 3m17.328850105s ago: executing program 1 (id=376): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x4f1, 0x0) socket(0x26, 0x80805, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x3, 0x2) socket(0x18, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x6, 0x5, 0x8000000000000000, 0x0) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) 3m16.9211127s ago: executing program 1 (id=380): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) read$auto(0x3, 0x0, 0x10) ioctl$auto(0x3, 0x8906, 0xfffffffffffff4e0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) pkey_free$auto(0x14b) io_uring_setup$auto(0x6, 0x0) mprotect$auto(0x1ffff000, 0x1003, 0x8) landlock_create_ruleset$auto(0x0, 0xf7, 0x0) syslog$auto(0x2, &(0x7f0000000000)='\x00', 0x8) 3m16.890623284s ago: executing program 2 (id=381): mmap$auto(0x0, 0x8, 0xdd, 0x9b72, 0x84, 0x400000008000) mprotect$auto(0x20000000, 0xeb, 0x6) mmap$auto(0x0, 0x8, 0xdf, 0x209b72, 0x4e477f5a, 0x8000) sysfs$auto(0x2, 0x10000000000002d, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) mprotect$auto(0x1ffff000, 0x8007, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) 3m16.74636417s ago: executing program 32 (id=381): mmap$auto(0x0, 0x8, 0xdd, 0x9b72, 0x84, 0x400000008000) mprotect$auto(0x20000000, 0xeb, 0x6) mmap$auto(0x0, 0x8, 0xdf, 0x209b72, 0x4e477f5a, 0x8000) sysfs$auto(0x2, 0x10000000000002d, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) mprotect$auto(0x1ffff000, 0x8007, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) 3m16.219478366s ago: executing program 1 (id=387): sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[], 0x144}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) close_range$auto(0x2, 0x8, 0x0) 3m16.091409887s ago: executing program 1 (id=389): mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, 0x0, 0x7f) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x100082) recvfrom$auto(0x4, 0x0, 0xee1c, 0x3ffffd, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 3m15.875287191s ago: executing program 1 (id=390): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) close_range$auto(0x2, 0x8000, 0x0) tkill$auto(0x1, 0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3, 0xdf, 0x2000000000eb1, 0x404, 0x0) 3m14.616074115s ago: executing program 1 (id=401): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) pipe$auto(0x0) ppoll$auto(0x0, 0x9, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) writev$auto(0x1, &(0x7f0000000100)={&(0x7f0000000140), 0x400000040000fdef}, 0x1) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) move_pages$auto(0x0, 0xd0, &(0x7f0000001100)=0x0, 0x0, 0x0, 0x2) socket(0xa, 0x3, 0xff) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) munmap$auto(0x1ffff000, 0x2000000c) 3m14.509796113s ago: executing program 0 (id=402): sendmsg$auto_NL80211_CMD_REMOVE_LINK(0xffffffffffffffff, 0x0, 0x4041) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) setuid$auto(0x800000000008) socket(0x2, 0x1, 0x0) socket(0xa, 0x2, 0x0) ioctl$auto(0x8000000000000001, 0x8994, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) remap_file_pages$auto(0x5, 0x1000, 0x0, 0x8, 0x10007) setpgid$auto(0x8000000000000000, 0x0) 3m14.489605357s ago: executing program 33 (id=401): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) pipe$auto(0x0) ppoll$auto(0x0, 0x9, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) writev$auto(0x1, &(0x7f0000000100)={&(0x7f0000000140), 0x400000040000fdef}, 0x1) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) move_pages$auto(0x0, 0xd0, &(0x7f0000001100)=0x0, 0x0, 0x0, 0x2) socket(0xa, 0x3, 0xff) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) munmap$auto(0x1ffff000, 0x2000000c) 3m14.115887635s ago: executing program 0 (id=404): pselect6$auto(0x10001, 0x0, 0x0, 0x0, 0x0, 0x0) setgroups$auto(0x3ff, 0x0) unshare$auto(0x20000080) unshare$auto(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) pivot_root$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000040)='.\x00') 3m13.112154985s ago: executing program 0 (id=407): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001400c7d2a2e1917949643de42be7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) socket(0x2, 0x801, 0x100) recvmmsg$auto(0x5, 0x0, 0x3, 0x6, 0x0) 3m12.927958899s ago: executing program 0 (id=408): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) getsockopt$auto(0x6, 0x84, 0x13, 0x0, &(0x7f0000000340)=0x40) 3m12.748815465s ago: executing program 0 (id=409): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) close_range$auto(0x2, 0x8000, 0x0) tkill$auto(0x1, 0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3, 0xdf, 0x2000000000eb1, 0x404, 0x0) 3m12.104728402s ago: executing program 3 (id=410): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) read$auto(0x3, 0x0, 0x10) ioctl$auto(0x3, 0x8906, 0xfffffffffffff4e0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) pkey_free$auto(0x14b) io_uring_setup$auto(0x6, 0x0) mprotect$auto(0x1ffff000, 0x1003, 0x8) landlock_create_ruleset$auto(0x0, 0xf7, 0x0) syslog$auto(0x2, &(0x7f0000000000)='\x00', 0x8) 3m11.95930234s ago: executing program 0 (id=411): sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008844}, 0x2000c000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x57) readv$auto(0x3, 0x0, 0x400) shutdown$auto(0x200000003, 0x0) r0 = socket(0x28, 0x1, 0xec) syz_genetlink_get_family_id$auto_SMC_GEN_NETLINK(0x0, r0) 3m11.823377544s ago: executing program 34 (id=411): sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008844}, 0x2000c000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x57) readv$auto(0x3, 0x0, 0x400) shutdown$auto(0x200000003, 0x0) r0 = socket(0x28, 0x1, 0xec) syz_genetlink_get_family_id$auto_SMC_GEN_NETLINK(0x0, r0) 3m11.472835551s ago: executing program 3 (id=413): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x40000000084, 0x81, 0xfffffffffffffffe, 0x0) 3m5.020109458s ago: executing program 3 (id=415): r0 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$auto(0x2, 0xc, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7020fddbdf251400000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40080) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) 3m4.71390053s ago: executing program 3 (id=416): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket(0x10, 0x3, 0x6) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) socket(0x1d, 0x2, 0x7) bind$auto(0x7, &(0x7f0000000000)={0x1d, @sockaddr_1_1={"aa1f923ebf064f6e96aaeae04593d6"}}, 0x3e) 3m4.552614593s ago: executing program 3 (id=417): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) close_range$auto(0x2, 0x8000, 0x0) tkill$auto(0x1, 0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3, 0xdf, 0x2000000000eb1, 0x404, 0x0) 3m4.049550775s ago: executing program 3 (id=418): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket(0x26, 0x80805, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') open(&(0x7f0000000040)='./cgroup\x00', 0x745240, 0x40) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) bind$auto(0x7, &(0x7f0000000000)={0x2c, @sockaddr_1_1}, 0x3e) 3m3.742276874s ago: executing program 35 (id=418): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket(0x26, 0x80805, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') open(&(0x7f0000000040)='./cgroup\x00', 0x745240, 0x40) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) bind$auto(0x7, &(0x7f0000000000)={0x2c, @sockaddr_1_1}, 0x3e) 1m13.633726577s ago: executing program 6 (id=1051): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x8, 0xdf, 0x209b72, 0x4e477f5a, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioperm$auto(0x3, 0xe, 0x2000000000000149) ioperm$auto(0x7, 0x6, 0x2) modify_ldt$auto(0x11, 0x0, 0x10) ioperm$auto(0x7, 0x6, 0x3) msync$auto(0x1ffff000, 0x5, 0x400000004) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) modify_ldt$auto(0x1, 0x0, 0x10) statx$auto(0xffffffffffffffff, &(0x7f0000000040)='&,/\xd3\x00', 0x978, 0x9, &(0x7f0000000100)={0x7fff, 0x4, 0x220891d1, 0x4, 0xffffffffffffffff, 0xee00, 0x1, 0xe, 0x3f53, 0x200, 0x1, 0x4, {0x4, 0xc47}, {0x100000001, 0xb887}, {0xb, 0x800}, {0x2, 0xffffff7d}, 0x0, 0x7ff, 0x9, 0xcb93, 0x4, 0x9, 0x5, 0x0, 0x2, 0x519, 0xe, 0x8001, [0x400, 0x0, 0x80000001, 0x6, 0x7, 0x2, 0x8, 0x6, 0x3]}) shmctl$auto(0x1, 0x1000, &(0x7f0000000280)={{0xb5d, 0xee00, 0xffffffffffffffff, 0x5, 0xffffff80, 0x5, 0x9}, 0x8000, 0x5186731, 0x5, 0x2, 0x9, 0x3, 0x0, 0x0, &(0x7f0000000200)=[0x8, 0x2, 0x4], &(0x7f0000000240)}) shmctl$auto(0x2, 0x4, &(0x7f0000000380)={{0x7, r0, r1, 0x2, 0xfff, 0x100, 0x9901}, 0x5, 0x8, 0x85, 0x401, 0xd, 0xffff7fff, 0x3, 0x0, &(0x7f0000000300)=[0x200, 0x8000], &(0x7f0000000240)}) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x7, 0x5, 0x0, 0x11, 0x7, 0x8000) lsetxattr$auto(&(0x7f0000000000)='\\\\}\xf3#]\x00', &(0x7f00000000c0)='%\x00', &(0x7f0000000080)=[0xceaa, 0x6], 0x1, 0x7f) madvise$auto(0x800, 0x8, 0x78) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x810) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) 1m12.765714091s ago: executing program 6 (id=1052): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) mmap$auto(0x0, 0x45, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, 0x3, 0x0, 0xc01) r0 = socket(0xa, 0x1, 0x0) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x20008010) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) syz_genetlink_get_family_id$auto_nfsd(0x0, r0) socket(0x22, 0x2, 0x4) ioperm$auto(0x7, 0x6, 0x2) shmat$auto(0x0, 0xfffffffffffffffd, 0x1ae1a4f4) msync$auto(0x1ffff000, 0x80100000000005, 0x400000004) socket$nl_generic(0x10, 0x3, 0x10) setresgid$auto(0x8, 0x7, 0x5) bind$auto(0x3, &(0x7f0000000040)={0x1, @sockaddr_1_1}, 0xd) close_range$auto(0x0, 0xfffffffffffff000, 0x0) write$auto(0x3, 0x0, 0x81) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x400000000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x7, 0x7, 0x5, 0x13, 0x3, 0x3bf7) 1m10.868491653s ago: executing program 6 (id=1055): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2030009, 0x3, 0x100000000eb1, 0xfffffff7fffffff7, 0x8000) sendmmsg$auto(0xc0, &(0x7f0000000000)={{0x0, 0x22, 0x0, 0xa, 0x0, 0x989, 0x1}, 0x3}, 0x9a6, 0xfffffffe) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3ff, 0x0) io_uring_register$auto(0x2, 0x1d, &(0x7f0000000000), 0x0) socket(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000800), r1) sendmsg$auto_TIPC_NL_MEDIA_SET(r1, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000840)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48001}, 0x40010) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x0) r3 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r3, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3) 1m10.44429502s ago: executing program 6 (id=1057): connect$auto(0x3, &(0x7f0000000000)={0xa, @sockaddr_1_1={"85076eb5631b1d2973a27184"}}, 0x55) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket(0x2c, 0x3, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x11, 0x2, 0x4) bpf$auto(0x0, &(0x7f0000000000)=@iter_create={r0, 0x8}, 0xa3) 1m10.134270861s ago: executing program 6 (id=1059): socket(0x18, 0xa, 0xc) tkill$auto(0x80000000000001, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_TASKSTATS(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TASKSTATS_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TASKSTATS_CMD_ATTR_PID={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x20011030) bind$auto(0x3, &(0x7f0000000000)={0x10, @sa_data_min="d059b8a5b5bce4bdf082c36111fd"}, 0xf) close_range$auto(0x2, 0x8000, 0x0) setreuid$auto(0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x280, 0x100) r3 = open(&(0x7f0000000040)='./file0\x00', 0x84c1, 0x0) poll$auto(&(0x7f00000000c0)={r2, 0xd, 0x9}, 0x10, 0x2) read$auto(r4, &(0x7f0000000100)='+*\x00', 0x5) lseek$auto(r3, 0x1000, 0x72) setresuid$auto(0xd, 0x0, 0x221) setrlimit$auto(0x6, &(0x7f0000000140)={0x0, 0x6}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, 0x0, 0x800) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) sched_getscheduler$auto(0x1) setresuid$auto(0x0, 0x8, 0x8000) setrlimit$auto(0x8, 0x0) mlock$auto(0xfbe8, 0x4) clone$auto(0xc8, 0x7, 0xfffffffffffffffe, 0x0, 0xd) fanotify_mark$auto(r2, 0xc531, 0x1, r3, &(0x7f0000000080)='\x17-*]\x00') 1m7.001086802s ago: executing program 6 (id=1067): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x3, 0x1) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) memfd_create$auto(&(0x7f0000000100)='@\\{.}\x00', 0x8) socket(0x2a, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) r0 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa3) 1m6.701998746s ago: executing program 36 (id=1067): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x3, 0x1) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) memfd_create$auto(&(0x7f0000000100)='@\\{.}\x00', 0x8) socket(0x2a, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) r0 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa3) 19.748998436s ago: executing program 5 (id=1191): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) clone$auto(0x200, 0x8000, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x5) keyctl$auto(0x10, 0x4, 0x5cd, 0x6, 0x1) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) ioperm$auto(0x855, 0x3, 0x2) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[], 0x5f}, 0x1, 0x0, 0x0, 0x200408d5}, 0x5) r0 = socket(0x11, 0x2, 0x4) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008844}, 0x2000c000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x6) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) socket(0x2, 0x1, 0x106) bind$auto(0x3, 0x0, 0x6b) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) getpid() connect$auto(0x3, 0x0, 0x55) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x20004010) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000080)={0xa, @sockaddr_1_1}, 0x6b) setrlimit$auto(0x1000000007, 0x0) memfd_secret$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) socket(0x23, 0x2, 0x0) 18.524845521s ago: executing program 5 (id=1194): r0 = socket(0x10, 0x3, 0x3) getrandom$auto(&(0x7f0000000000)='nfsd\x00', 0x0, 0x7) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008bd7000fedbdf250200000008000425250008000300090000009deb2d4d71ead3502401b3e5e2d1c7aefcd584d75864377ba8a0518209a71ec17db78cbf786e89e255f8e69b617f9ce27bed328ea7097a6b0980685baf0da58f3eb77919f054c09ad4213ceac25a1e6cca3715e04abcb332c2548d94c36f86d087154dd8eb7cfdb733d96c1ec233aa1d6aac9e8da579bfbc005ebf23ca2f3691b5a760345d7e82e14dae4a92ca94eaccefaa1f3466cc674036242298911b1f40ea36e4e4e8c2efae177a5df2635e09bde0b19af85d64"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r0) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x20c2, 0x8) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) ioctl$auto(0x1, 0x541b, 0x8) io_submit$auto(0xfffffffffffffffa, 0x100000001, 0x0) close_range$auto(r2, r2, 0x80000000) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x7, 0x7ffffeffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) getsockopt$auto(0x4, 0x6, 0x24, 0xfffffffffffffffc, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') fanotify_mark$auto(0x0, 0x25, 0x3, 0x4, 0x0) mount$auto(0x0, 0x0, &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_STOP_AP(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYBLOB="000429bd7000fedbdf251000000006001201020000000400410008000a0109000000081146000700000008000b0158be000006006d0009000081fd001100aba3fe24150112b9d2d703ec83f01b085cb97ff462f25d231a07ab0007967b6b55e48178c8984546c9756efafbb9b9367adb266a0e4d2125e8b5ffc04580266f6b3814a3d7e7f4b4b4aa4ba7545f5d1e1aab3bdc6abca14a9cc9eb2ea8ed5f758f94b2e4d229528dd0d674529a2907f56b7318ab4da60000"], 0xbc}, 0x1, 0x0, 0x0, 0x4040}, 0x22044051) syz_open_procfs$namespace(0x0, 0x0) setns(0xffffffffffffffff, 0x20000000) mkdir$auto(&(0x7f0000000040)='/\x00', 0x85a1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) prctl$auto(0x23, 0x3, 0x2008, 0x0, 0x0) mmap$auto(0x5, 0x9, 0x4, 0x12, 0x400, 0xfffffffffffffff9) 17.831205877s ago: executing program 5 (id=1196): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x10, 0x2, 0x7f, 0xf34, 0x6, 0x8) r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x14, r1, 0x1f482e11f4423755, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x44000) getpid() stat$auto(&(0x7f0000000140), &(0x7f0000000180)={0x200000000000000, 0xdb4, 0x750000000, 0x80000000, 0xffffffffffffffff, 0xee01, 0x0, 0x8, 0x6f7ddde7, 0x6, 0x4, 0x2, 0x9, 0x3, 0x7f, 0x425, 0xe}) msgctl$auto(0x10, 0x6, &(0x7f0000000340)={{0x8, 0x0, 0x0, 0x3, 0x2, 0x10001, 0xfffe}, &(0x7f0000000240)=0x83, &(0x7f00000002c0)=0xe, 0x0, 0x3, 0x5, 0x1, 0x8000, 0x7ff, 0xc9, 0x80, 0x0, 0x401}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mprotect$auto(0x0, 0x4, 0x4) stat$auto(&(0x7f0000000100)='^\xbf#%\x00', &(0x7f00000003c0)={0x7fffffffffffffff, 0x3, 0x3, 0xffffffff, r2, r3, 0x0, 0x3, 0x2, 0x4, 0xd4e, 0x1, 0x90b, 0x8, 0x7fff, 0xc, 0x100}) timer_create$auto(0x3, 0x0, &(0x7f0000000280)=0x6) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x5, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x40, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80080001]}, 0x0, 0x0) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x9}}, 0x0) ioperm$auto(0x7, 0x6, 0x2) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x24004141) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1100000012"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) capget$auto(&(0x7f0000000040)={0x1ff, 0x0}, &(0x7f0000000080)={0x0, 0x75204a0b, 0xc4}) capget$auto(&(0x7f0000000480)={0x101}, &(0x7f00000004c0)={0x3, 0x39d2bf71, 0x9}) sched_setaffinity$auto(r4, 0x80, &(0x7f00000000c0)=0x4) vmsplice$auto(0x1, &(0x7f0000000000)={&(0x7f0000000100), 0x5}, 0x6, 0x8) 14.900492542s ago: executing program 5 (id=1204): mmap$auto(0x7, 0x200006, 0x5, 0x40eb1, 0x68, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) get_robust_list$auto(0x0, 0x0, 0x0) creat$auto(0x0, 0xfff9) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x5, 0x1, 0x4b, 0x0, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008844}, 0x2000c000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x2, 0x1, 0x106) sendmsg$auto_TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRES16=0x0, @ANYBLOB="04002abd7000ffdbdf254d00000019000500d5c7f5a9727f2d60c075b334dcb2bc2c1761d11fa60000002c000900d91aef2b96e5eb4019deae6d58c8582987de7bc7a61dbf57a626e7addf6181bf2c0a8f72e80f47ab", @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x24000454}, 0x4000000) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(r1, 0x0, 0xfffffdef) ioperm$auto(0x0, 0x4005, 0x5) mmap$auto(0x0, 0xa19b, 0xdf, 0x9b72, 0x5, 0x8000) writev$auto(0xca, &(0x7f0000000000)={&(0x7f0000000080)=[0x96, 0x3], 0x2}, 0x9) setrlimit$auto(0x1000000007, 0x0) eventfd$auto(0x8c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f0000000180)={0x2, @sa_data_min="e38a16dd37b2d33f678e2238d34c"}, 0x55) ioctl$auto(0x3, 0x541b, 0x38) sched_rr_get_interval$auto(0x0, &(0x7f0000000040)={0x80000000, 0x4}) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) madvise$auto(0x2000, 0x20499d, 0x9) 13.662152429s ago: executing program 5 (id=1208): r0 = socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mknod$auto(0x0, 0xc9, 0xfffffffa) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x400005, 0xdf, 0x13, 0x1, 0x8002) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) dup2$auto(0x0, 0x4) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(r0, 0x0, 0x10000, 0x300, 0x0) select$auto(0xfffffffd, 0x0, &(0x7f0000000100)={[0x7, 0x207, 0x7, 0xc, 0x9, 0x0, 0x8000000000000001, 0x2800000000000002, 0x9, 0xde582971, 0xff, 0x9, 0x4, 0xffff, 0x8, 0xb]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="293ad8c700003ba7ef"], 0x5d}, 0x1, 0x0, 0x0, 0x4000}, 0x4045880) mmap$auto(0x0, 0x8001, 0xdf, 0xeb1, 0x401, 0x8000) inotify_add_watch$auto(0x5, 0xfffffffffffffffc, 0xfffffffffffffffe) bpf$auto(0xe, &(0x7f0000000100)=@link_create={@map_fd=0x62f4, @target_fd=0x4, 0x8, 0x3ed}, 0x9) close_range$auto(r1, 0xfffffffffffff000, 0x1) memfd_create$auto(0x0, 0x12) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x1}, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0x0) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001e80), r2) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYRES32=0x0], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000804) fcntl$auto(0xff80000000000000, 0x409, 0x3f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) pipe2$auto(0x0, 0x80) 12.979055855s ago: executing program 7 (id=1212): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto(0x1ff, 0x2, 0x10000000013, 0x0) prctl$auto(0xf, 0x2, 0x80000001, 0x403, 0x3ff) rseq$auto(&(0x7f0000000000)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x7ffe, 0x0, 0x6) mmap$auto(0x0, 0x402000b, 0xdf, 0x10000000000eb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x12004) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) open(&(0x7f0000000080)='./file0\x00', 0x22000, 0x50) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) getrlimit$auto(0x1000, &(0x7f0000000040)={0x9, 0x452}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff) bpf$auto(0x8000000000000020, 0xffffffffffffffff, 0x0) creat$auto(&(0x7f0000000040)='X))\x00', 0x5) ioctl$auto(0x3, 0x4c03, 0x38) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setns(0xffffffffffffffff, 0x0) unshare$auto(0x40000080) clone$auto(0x10001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x8) writev$auto(0x1, &(0x7f0000000100)={&(0x7f0000000140), 0x400000000000fdef}, 0x1) vmsplice$auto(0x3, 0x0, 0x9, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x20200, 0x15) 11.168529198s ago: executing program 5 (id=1218): rseq$auto(&(0x7f0000000000)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x7ffe, 0x0, 0x6) mmap$auto(0x0, 0x402000b, 0xdf, 0x10000000000eb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x12004) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) open(&(0x7f0000000080)='./file0\x00', 0x22000, 0x50) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) getrlimit$auto(0x1000, &(0x7f0000000040)={0x9, 0x452}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff) bpf$auto(0x8000000000000020, 0xffffffffffffffff, 0x0) creat$auto(&(0x7f0000000040)='X))\x00', 0x5) ioctl$auto(0x3, 0x4c03, 0x38) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setns(0xffffffffffffffff, 0x0) unshare$auto(0x40000080) clone$auto(0x10001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x8) writev$auto(0x1, &(0x7f0000000100)={&(0x7f0000000140), 0x400000000000fdef}, 0x1) vmsplice$auto(0x3, 0x0, 0x9, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x20200, 0x15) socket(0x2, 0x5, 0x0) fcntl$auto(0x0, 0x407, 0x100000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 11.055104329s ago: executing program 7 (id=1220): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000002100), r0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) ioprio_set$auto(0x1, 0x0, 0x0) msync$auto(0x1ffff000, 0x100000000005, 0x400000004) madvise$auto(0x0, 0xffffffffffff0001, 0x17) madvise$auto(0x1ffff000, 0x208000000010001, 0x8) madvise$auto(0x8000000000000000, 0x7fffffffffffffff, 0x889) madvise$auto(0x2000000040000, 0x7, 0xa) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) socket(0x1e, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x9, 0x8000) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r2 = gettid() process_vm_writev$auto(r2, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) pidfd_open$auto(r2, 0x5) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x100000000000, 0x4000d, 0xdf, 0x9b72, 0x9, 0x28000) clone$auto(0x20001002, 0xd7b0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x1000004000008) mq_open$auto(0x0, 0xb0, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000870) 9.892265923s ago: executing program 7 (id=1222): r0 = socket(0xa, 0x3, 0x73) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x6, 0x0) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = gettid() capget$auto(&(0x7f0000000000)={0x0, r1}, &(0x7f0000000040)={0x8, 0xe3, 0x8}) connect$auto(r0, &(0x7f0000000080)={0x4, @sockaddr_1_1={"ba32293d30096b521fed173bbd67699764da1249b6fe370f80de2656ac9db35e5cad30ea1075a4144f19cc09d7b203314e819efc67392b163f01513b760aeb3819e5918880d24ded5383be885fbb00ba84eb326f6e3e853fd670d5a19eb6715c02f9ea0e0ae62f470ae82386fec612596fd67738f6f098159e465804ff69f93802b9323b02e184ad6f539e3929ca89f8920119ff29cada896fb173658d6ce7fe80516db90c008892609d1dd1930a3d6f9978ef6aebd7f106"}}, 0x6) mmap$auto(0x2, 0x7, 0xadd, 0xd0db, 0x5, 0x7fffffffffffffff) getsockopt$auto(0x6, 0x40000000084, 0x1d, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioperm$auto(0x3, 0x6, 0xabdb) msgrcv$auto(0x0, 0xffffffffffffffff, 0x10001, 0x8, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001b40), r2) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x9, 0x21e9, 0x7ff, 0x3, 0x100000000, 0xb, 0x2e, 0x0, 0x3}, 0x6f4) writev$auto(0x2, 0x0, 0x3ff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_SMC_PNETID(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x18, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000904}, 0x48000) getgid() close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0008, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 9.194304664s ago: executing program 4 (id=1223): mkdir$auto(&(0x7f0000000000)='\xe6/\x00', 0x2) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x8, 0x1, 0x8) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x2) mount_setattr$auto(0x1, &(0x7f00000000c0)='\xe6/\x00', 0x7, &(0x7f0000000100)={0x6, 0x8, 0xf215}, 0x9) socket(0x2a, 0x80000, 0x24) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) syz_genetlink_get_family_id$auto_HSR(0x0, 0xffffffffffffffff) ioprio_get$auto(0x1, 0x10000e93) semctl$auto(0x201, 0xa, 0x3, 0x800000000000) mmap$auto(0x3, 0x4, 0x4000000000dc, 0x40eb2, 0xa1c, 0x8) clock_nanosleep$auto(0x7, 0x6, 0x0, 0xfffffffffffffffd) fchown$auto(0x5, 0x8, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x53, 0x9) socket(0xa, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) mkdir$auto(&(0x7f0000000200)='\xc6/\tO\xc4\x8eUaJ\"E\x93#4ju\x9ar\vL-\x96<\xaf\x7f\xb7@\xb9\xacJ\x82\xd79\xc6j5\x93\xe9m\x1f\xe2\x1c\xbd\xa8\xa0%j\xd8\xa6\xb7\xf4\xf2\xae2\xd7\xdd\xa9\xa6I\xbaLD+\xab\x12\x14\xe7-K\xb5\xc1T\xec\xd9\x80\x15\xad\xe4\x1a\xa6\xfe\xc4L\xefe0\xab\x02|\xe0\xa2B\xf0\x1e\x90\f(\x00\xeb\x8c\x7f@\x87.\xca\xe1\x94d\xc4\x90\xef\x11<\xd2{\xbd#\n\x8e\x9d\x96B\xda<\xc6\xffy\x04\xd8\xe2\x9c\xc0V\xc5\xc4\xb7(\xcb\xa05\xda\xd2WBF\xd8\x98\xa9F\x1d\xeeB\x84W\xe4\x99,cp\x98\x04+\xaf\xb8n\xe7I\xc6gx\xba\x97v\x04\xe7', 0x9841) ioctl$auto(0x3, 0x80000541b, 0x38) syz_genetlink_get_family_id$auto_SMC_GEN_NETLINK(&(0x7f00000001c0), r0) socket$nl_generic(0x10, 0x3, 0x10) shmctl$auto(0x57, 0x2, &(0x7f0000000100)={{0x2f29, 0xfd, 0xf, 0x401, 0xa, 0x0, 0x7e}, 0x3, 0xd46, 0x3ff, 0x400, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) fallocate$auto(0x4, 0x9, 0x100000000, 0x24) 7.570320488s ago: executing program 8 (id=1225): socket(0xa, 0x3, 0xff) select$auto(0xfffffffd, 0x0, &(0x7f0000000100)={[0x7, 0x207, 0x7, 0xc, 0x8000000000000000, 0x0, 0x8000000000000001, 0x2800000000000002, 0x6, 0xde582971, 0xff, 0x5, 0x4, 0xffff, 0x8, 0xb]}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) unshare$auto(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r1, 0x0) creat$auto(&(0x7f0000000040)='/\x00', 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0001, 0x15) umount2$auto(&(0x7f0000000080)='.\x00', 0x3) setns(r0, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x155) socket(0x18, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(0x3, 0x0, 0x6b) close_range$auto(0x0, 0xfffffffffffff040, 0x4000000000002) socket(0xa, 0x801, 0x106) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xfffffffffffff000, 0x2) bpf$auto(0x8, 0xffffffffffffffff, 0x0) socket(0xf, 0x3, 0xffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x6, 0xfffffffffffffffe, 0x801) select$auto(0x7ff, 0x0, 0x0, 0x0, 0x0) connect$auto(0x3, 0x0, 0x55) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) 7.305511345s ago: executing program 4 (id=1226): syz_genetlink_get_family_id$auto_IPVS(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x8, 0x12, 0x401, 0x8) socketpair$auto(0x3, 0x5, 0x0, 0x0) socket(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x2) connect$auto(0x5, 0x0, 0x9) syz_open_procfs$namespace(0x0, 0x0) pidfd_open$auto(0x1, 0x0) socket(0x15, 0x5, 0x0) close_range$auto(0x5, 0x8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket(0x1d, 0x4, 0x665c) getsockopt$auto(0xffffffffffffffff, 0x3a, 0x50000000, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x8, &(0x7f0000000040)=@link_create={@map_fd, @target_ifindex, 0x6, 0x8, @target_btf_id=0xffff}, 0x8a3) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x4) fallocate$auto(0x3, 0x0, 0xe, 0x8ec5) mlockall$auto(0x7) rename$auto(&(0x7f0000000000)=')!\'\\\x00', &(0x7f0000000040)='vcan0\x00') mmap$auto(0x0, 0x200009, 0x2, 0x40eb1, 0x8, 0x300000000000) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0xffff, 0x10}, 0x80000000, &(0x7f0000000180)={0x400, 0x4}, &(0x7f00000001c0)={0x8001}, 0x0) close_range$auto(r0, r0, 0x2000002) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mlockall$auto(0x7) madvise$auto(0x0, 0x80000001, 0x9) 7.078430503s ago: executing program 7 (id=1227): socket(0xa, 0x801, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x2, 0x88) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="0800e00000000000c1728d2af766"}, 0x55) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) shutdown$auto(0x200000003, 0x2) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000a00), 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) clone$auto(0x0, 0x6, &(0x7f0000000000)=0x5, &(0x7f0000000240)=0x2, 0x7) io_uring_setup$auto(0x6, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x103000, 0x2) read$auto(0x3, 0x0, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x828, 0x9, 0x8000000000000000, 0x8, 0x7, 0x9, 0x5, 0x5, 0x9, 0x3, 0x8, 0x5, 0xf, 0x0, 0x9, 0x10001, 0x5, [0x9, 0x87f, 0x77, 0x1, 0x7fffffffffffffff, 0xe06, 0x404, 0x3, 0x80000000, 0x8, 0x4, 0xfffffffffffffff9, 0x10, 0x8, 0x35c4, 0x1, 0x6, 0x8, 0x8, 0x8, 0xd8, 0x8, 0x5, 0x1, 0x40200000000803, 0x9, 0x5, 0x401, 0x800, 0x8000000000000000, 0x2ab, 0x8, 0x7ff, 0x7, 0x1, 0x100, 0xffffffffffff0000, 0x6b, 0xfffffffffffffff9, 0x4, 0x5, 0x4, 0xf, 0xffffffffffffff26, 0xecc, 0x7fffffff, 0x6, 0x7d, 0xdc]}, 0xe3c, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54) 6.238452975s ago: executing program 8 (id=1228): socket(0x2c, 0x3, 0x73) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000140)={0xa}, 0x55) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mlockall$auto(0x7) mprotect$auto(0x0, 0x8000000000000001, 0x6) clone3$auto(&(0x7f0000000240)={0x100000000, 0x980, 0x401, 0x6, 0x2, 0x1, 0xff7fffffffffffff, 0x8, 0xe, 0x9, 0x3}, 0x40) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) madvise$auto(0x0, 0x2000000080000001, 0x3) setuid$auto(0xe) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000140), 0xffffffffffffffff) bpf$auto(0x5, &(0x7f0000003c80)=@bpf_attr_7={@map_id=0x8, 0x81, 0xf}, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x4) fallocate$auto(0x3, 0x0, 0xe, 0x8ec5) mlockall$auto(0x7) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) open(0x0, 0x4242, 0x0) mlockall$auto(0x7) madvise$auto(0x0, 0x80000001, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_NL802154_CMD_SEND_BEACONS(0xffffffffffffffff, 0x0, 0x8080) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x8, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 6.215541868s ago: executing program 4 (id=1229): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x2000000, 0xfffffffffffffffe, 0x9, 0x1010, 0x943, 0x5) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xc, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22242, 0x155) io_submit$auto(0x6, 0x7f, &(0x7f0000000040)=&(0x7f0000000000)={0x6fffffffffffff, 0xb, 0x10001, 0x3, 0x2, 0x3b, 0xfffffffffffffc00, 0x9, 0xfff, 0x0, 0x6, 0xffffffffffffffff}) writev$auto(0xc8, &(0x7f00000028c0)={&(0x7f0000000000), 0xfdef}, 0x9) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) write$auto(0x3, 0x0, 0xfffffdef) socket(0xa, 0x801, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, 0x0, 0x8004) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0xff, 0xa, 0x4, 0xaab, 0x5, 0x4006]}, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x800, 0x104) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) socket(0x1d, 0x2, 0x7) getsockopt$auto(0x6, 0x6b, 0x1, 0xfffffffffffffffe, 0x0) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) mbind$auto(0xf000, 0x2, 0x8000000000000000, 0x0, 0x6, 0x2) 5.746526934s ago: executing program 7 (id=1230): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x27, 0x2, 0x3) keyctl$auto(0xb, 0xfffffffd, 0x5, 0x0, 0xb) accept$auto(0x3, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) prctl$auto(0x23, 0x2, 0x2008, 0x0, 0x0) waitid$auto(0x7f, 0x9, &(0x7f0000000000)={@siginfo_0_0={0x3, 0x8, 0xfff, @_timer={0x7, 0x0, @sival_int=0x6, 0xf}}}, 0x2, 0x0) mprotect$auto(0x81, 0x81, 0x9) mlockall$auto(0x7) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) madvise$auto(0x4, 0x5cd, 0x1000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf250200000800130001"], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) r0 = socket(0x1f, 0x2, 0xfffffffe) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22242, 0x155) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) copy_file_range$auto(r1, &(0x7f0000000140)=0xffff, r1, 0x0, 0x21c1, 0x0) sendmmsg$auto(0x3, 0x0, 0x2, 0x9) sendfile$auto(0x1, 0x3, 0x0, 0x6) r2 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fcntl$auto(r2, 0x4, 0xfffffffffffffffa) madvise$auto(0x0, 0xffffffffffff0001, 0x15) waitid$auto(0x9, 0x6, &(0x7f0000000100)={@_si_pad}, 0x18, &(0x7f0000000180)={{0x401, 0x8000000000000001}, {0x1, 0xfff}, 0x8, 0xe3, 0x200, 0x6, 0x7, 0xffffffffffffd223, 0x8001, 0x3, 0x0, 0x47c, 0x6, 0x0, 0xffffffff, 0x7ff}) 5.4244798s ago: executing program 4 (id=1231): getgroups$auto(0x7, 0xffffffffffffffff) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x4, 0x400008, 0x19, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) dup2$auto(0x0, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) socket(0xa, 0x2, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x40040c0) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x0) poll$auto(&(0x7f0000000100)={0x9, 0xfff7, 0x9}, 0x2, 0x8) mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0xfffffffa, 0x0, 0x8000000000000000, 0x0) r0 = socket(0x1d, 0x2, 0x4) sendfile$auto(0x1, 0x3, 0x0, 0xc01) fcntl$auto(0x0, 0x407, 0xc) splice$auto(0xea, 0x0, 0xe38f, 0x0, 0x1000, 0x491a84f5) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), 0xffffffffffffffff) getresgid$auto(0x0, 0xfffffffffffffffe, 0xfffffffffffffffc) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="210025bd7000fedbdf1d80627700"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x28044004) mmap$auto(0x5, 0x8, 0x3, 0x2b3, 0x90, 0x8000) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$NS_GET_PARENT(r2, 0x8008b705, 0x0) shmat$auto(0x0, 0x0, 0x0) clone$auto(0xc, 0x3dbe1b34, 0xfffffffffffffffe, 0x0, 0x4) 4.216686534s ago: executing program 7 (id=1232): mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) open(0x0, 0x261c2, 0x175) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xffffffff) mlockall$auto(0x7) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) madvise$auto(0x0, 0x1d26, 0x17) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) getrlimit$auto(0x1000, &(0x7f0000000040)={0x9, 0x452}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000040080000004, 0xe) sysfs$auto(0x2, 0x2, 0x20020000) setns(0xffffffffffffffff, 0x0) mmap$auto(0x7ff, 0x2, 0x0, 0x12, 0x4, 0xc) unshare$auto(0x40000080) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) writev$auto(0x1, &(0x7f0000000100)={&(0x7f0000000140), 0x400000000000fdef}, 0x1) vmsplice$auto(0x3, 0x0, 0x409, 0x7) madvise$auto(0x4, 0x3, 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x10d, 0x20200, 0x15) socket(0x2, 0x5, 0x0) fcntl$auto(0x0, 0x407, 0x100000) munmap$auto(0x20001000, 0x7) munmap$auto(0xd, 0xffeffffffffffff7) tkill$auto(0x0, 0x9) 3.26553659s ago: executing program 8 (id=1233): syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, 0xffffffffffffffff) mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8) mknod$auto(&(0x7f00000002c0)='\x00\b', 0x2, 0x2) link$auto(&(0x7f0000000380)='\'-!\x00\xab^U\x9c\xa6\xe0\xcc/\xd7\x87\x83W\x1b\xfcQ?\xef)\ns\x06|\x96\xef\xe1\x87\xae\xaeeH{k+062\nK-\xd8\xa6F\xd2\xf4\xb7~\x94\xcb\xdb\xf3_\x14\t\xb2\x8b\xa8\x8bioA[\x87\xec\x1c\xaf\x91[\x90u+\x06\xb7#-\xba\'\xd6F\xcd\x7fXk\xc1;\xe2BP\xcfJ\xd2\xc48\xd2s\xa7\xb5\x03\x1c\x96\xaa\xee\x18\xf1\an\x18\x17\xf3\xfd^\x99\x01v\xce\xb5\x14\xd0\xbfZ\x1dM\xaa\xc3\x90\x96\xb1-\xfa\xe5\'\x0f\xa1_\\\x13\x15\x85\x7f\xb2\x12\xb3\xd5\flR\xcb\xcf\x18z\xce\xd6\xab;c\x92m\x16)\xb8\xb8\xb5h\x1c\x04\xaa\xac\xa47\xc9\xce\x92&\xb3K\xb1\xd7\xe95\x9d', &(0x7f0000000340)=':,\x00') symlink$auto(0x0, &(0x7f0000000040)='-{\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_SMC_PNETID(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="04000000", @ANYRES16=r1, @ANYBLOB="010027bd7000fc"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000040) symlink$auto(0x0, &(0x7f00000000c0)='#\x00') symlink$auto(0x0, &(0x7f0000000140)='^-\x00') set_mempolicy$auto(0x3, &(0x7f0000000040)=0x3, 0x9) get_mempolicy$auto(0xfffffffffffffffe, 0xfffffffffffffffd, 0x2, 0x0, 0x1) symlink$auto(&(0x7f0000000200)='#\x00', &(0x7f0000000240)='[[%\\.\'!{%#\x00') symlink$auto(0x0, &(0x7f00000004c0)='+2+\x9b.@]\x00') symlink$auto(&(0x7f0000000580)='+2+\x9b.@]\x00', &(0x7f00000005c0)='##\xf1\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) remap_file_pages$auto(0x101, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) bpf$auto(0xa24, &(0x7f0000000600)=@enable_stats, 0x1) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) vmsplice$auto(0x1, &(0x7f0000000000)={0x0, 0x40005}, 0x6, 0x8) mmap$auto(0xf34, 0x20009, 0xdf, 0x1b, 0x3ff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x7ffc, 0xc49, 0xe, 0xffffffffffff8010, 0x4, 0x100) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x6) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4000010) symlink$auto(&(0x7f0000000700)='^-\x00', &(0x7f0000000740)='{,]!\x00') 2.09665591s ago: executing program 4 (id=1234): open(0x0, 0x161342, 0x100) open(&(0x7f0000000080)='./file0\x00', 0x22000, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_SMC_PNETID(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000040) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) getrlimit$auto(0x1000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setns(0xffffffffffffffff, 0x0) unshare$auto(0x40000080) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) vmsplice$auto(0x3, 0x0, 0x9, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x20200, 0x15) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f0000000040)={0x0, 0x8000}, 0x4, 0x0, 0x9}, 0xed7138c}, 0x2, 0x9) read$auto(0x4, 0x0, 0xfdef) write$auto(0x3, 0x0, 0xfffffdef) recvmsg$auto(0x4, 0x0, 0x33c) syz_genetlink_get_family_id$auto_802_15_4_MAC(0x0, 0xffffffffffffffff) socket(0x2, 0x5, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x0, 0xd0, 0x0, &(0x7f0000001140), 0x0, 0x2) fcntl$auto(0x0, 0x407, 0x100000) 1.279764611s ago: executing program 8 (id=1235): socket(0xa, 0x801, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x62181, 0x83}, 0x18) ioctl$auto(r0, 0x8936, 0xf) mmap$auto(0x0, 0x6, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000) socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x22, 0x0, 0x56b) openat$auto(r0, &(0x7f0000000080)='-\x00', 0x0, 0x1) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c40900448dc7fe8000"}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r1 = socket(0xa, 0x2, 0x0) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x9, 0x9, 0x3, 0x6, 0x2, 0x9, 0x5e58296f, 0x4000000000000000, 0x6, 0x3, 0x200, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) connect$auto(0x3, &(0x7f0000000040)={0x2, @sa_data_min="9057130be82ba522e95cf480395e"}, 0x55) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x24004141) connect$auto(r1, &(0x7f00000000c0)={0x2, @sa_data_min="d108635e16103a2eaa2b2cc27bab"}, 0x8001) futex$auto(0xfffffffffffffffe, 0xa, 0x7, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x3) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1100000012"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4ae00"}, 0x55) connect$auto(0x3, &(0x7f00000001c0)={0x2, @sockaddr_1_1}, 0x51) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0xff, 0xa, 0x4, 0xaab, 0x5, 0x4006]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) shutdown$auto(0x200000003, 0x2) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f0000000040)={0x0, 0x1}, 0x4, 0x0, 0x1}, 0xed7138c}, 0x2, 0x50) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) socket(0xa, 0x2, 0x73) setsockopt$auto(0x4, 0x29, 0x35, 0x0, 0x10000) close_range$auto(0x2, 0x8000, 0x0) 820.048407ms ago: executing program 8 (id=1236): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x5, 0x8, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210026bd7000fedbdf253d8e9d2e1400020077673000000000000000000000000000060006000f200000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) timer_getoverrun$auto(0x650) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) shutdown$auto(0x200000003, 0x2) mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) clock_adjtime$auto(0x100, &(0x7f00000004c0)={0x6, 0x7, 0x9, 0x47f0, 0x3b5b759e, 0xffff, 0xb, 0x4, 0x7, {0x1fff, 0x6}, 0x0, 0x8, 0xff, 0x37dc, 0x3ff, 0x3, 0x1101, 0x400008, 0x7, 0x7}) r2 = socket(0x10, 0x3, 0x6) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r2, &(0x7f0000000100)={0x0, 0x28, &(0x7f00000000c0)={&(0x7f0000000800)={0x50, r3, 0x1, 0x70bd28, 0x25dfdbfb}, 0x50}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) socket(0x22, 0x2, 0x24) socket(0x28, 0x5, 0x0) getsockopt$auto(0x200000000006, 0x28, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ethtool(0x0, r4) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000005c0), r4) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYRES16=r5, @ANYBLOB="f51b26bd7000fedbdf2507"], 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4000) 295.708443ms ago: executing program 4 (id=1237): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x18, 0x5, 0x2) bind$auto(0x4, 0x0, 0x0) connect$auto(r0, &(0x7f0000000180)={0x2, @sa_data_min="6d9b7c63dcb820f81cedab660dd4"}, 0x55) mmap$auto(0x0, 0x40008, 0xdb, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r1) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7fffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f00000000c0)={0x2}, 0x55) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc855}, 0x20000000) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000380), r3) prctl$auto(0x5, 0x8, 0xb22, 0x8, 0x20) r5 = syz_genetlink_get_family_id$auto_HSR(&(0x7f0000000640), r3) sendmsg$auto_HSR_C_GET_NODE_LIST(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) bpf$auto(0x5, &(0x7f0000000000)=@test={0x8, 0x1, 0x1, 0x1, 0x8, 0x63a, 0x10001, 0x8, 0xc511, 0x7, 0xff, 0x49, 0xff, 0x4, 0x9f31}, 0x779) sendmsg$auto_IPVS_CMD_GET_INFO(r3, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) write$auto(0x2, 0x0, 0x1100082) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) madvise$auto(0x0, 0xf5, 0x9) 0s ago: executing program 8 (id=1238): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x200) ioperm$auto(0x7, 0xc, 0x2) bpf$auto(0x100000001, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) readv$auto(0x3, 0x0, 0x400) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1ffd, 0x12) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x100082) fallocate$auto(0x3, 0x3, 0xe, 0x8000008ec5) semctl$auto(0x1ff, 0x2, 0x13, 0x20001) mlockall$auto(0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2002, 0x100000004, 0x100000003, 0x0, 0x6, 0x2) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x3, 0x388) kexec_load$auto(0x3ff, 0x7, 0x0, 0x4657f944) kexec_load$auto(0x800000008, 0xc, 0x0, 0x0) mmap$auto(0x0, 0x4000a, 0xdb, 0x9b72, 0x7, 0x28000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') close_range$auto(0x2, r0, 0x40000000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) socket(0x2c, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x15, 0x0, 0x56b) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) socket(0x1e, 0x5, 0x0) mkdir$auto(&(0x7f0000000040)='ns/pid_for_children\x00', 0xc) recvfrom$auto(0x3, 0x0, 0x100, 0x101, 0x0, 0x0) mbind$auto(0x5, 0x8, 0x100000001, 0x0, 0x80006, 0xffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.136' (ED25519) to the list of known hosts. [ 57.412214][ T5827] cgroup: Unknown subsys name 'net' [ 57.546434][ T5827] cgroup: Unknown subsys name 'cpuset' [ 57.554247][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.938090][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.660823][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.669260][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.679126][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.686614][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.695247][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.696869][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.703428][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.720934][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.727641][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.728886][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.736910][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.743843][ T5848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.751127][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.757478][ T5848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.763250][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.770870][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.777675][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.792386][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.801196][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.805507][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.809077][ T5852] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.823293][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.830655][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.838525][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.082704][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 61.290895][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.298829][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.306589][ T5838] bridge_slave_0: entered allmulticast mode [ 61.314198][ T5838] bridge_slave_0: entered promiscuous mode [ 61.324954][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.332045][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.339354][ T5838] bridge_slave_1: entered allmulticast mode [ 61.346319][ T5838] bridge_slave_1: entered promiscuous mode [ 61.364659][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 61.375054][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 61.417252][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 61.429177][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.464790][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.528557][ T5838] team0: Port device team_slave_0 added [ 61.551186][ T5838] team0: Port device team_slave_1 added [ 61.564079][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.571223][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.578545][ T5840] bridge_slave_0: entered allmulticast mode [ 61.585682][ T5840] bridge_slave_0: entered promiscuous mode [ 61.611282][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.619595][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.627103][ T5840] bridge_slave_1: entered allmulticast mode [ 61.633814][ T5840] bridge_slave_1: entered promiscuous mode [ 61.655884][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.662831][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.689041][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.701234][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.708769][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.716233][ T5839] bridge_slave_0: entered allmulticast mode [ 61.723770][ T5839] bridge_slave_0: entered promiscuous mode [ 61.743431][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.750399][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.779135][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.795445][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.802551][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.810171][ T5839] bridge_slave_1: entered allmulticast mode [ 61.817859][ T5839] bridge_slave_1: entered promiscuous mode [ 61.831379][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.838658][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.845887][ T5837] bridge_slave_0: entered allmulticast mode [ 61.852408][ T5837] bridge_slave_0: entered promiscuous mode [ 61.860635][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.868008][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.875274][ T5837] bridge_slave_1: entered allmulticast mode [ 61.881883][ T5837] bridge_slave_1: entered promiscuous mode [ 61.906841][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.918367][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.952012][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.964578][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.982331][ T5840] team0: Port device team_slave_0 added [ 62.005830][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.017791][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.035271][ T5840] team0: Port device team_slave_1 added [ 62.044245][ T5838] hsr_slave_0: entered promiscuous mode [ 62.050881][ T5838] hsr_slave_1: entered promiscuous mode [ 62.092671][ T5837] team0: Port device team_slave_0 added [ 62.131328][ T5837] team0: Port device team_slave_1 added [ 62.140578][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.147963][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.174259][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.187715][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.195331][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.221756][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.243622][ T5839] team0: Port device team_slave_0 added [ 62.269258][ T5839] team0: Port device team_slave_1 added [ 62.283981][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.291095][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.317291][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.355936][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.365961][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.392035][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.416751][ T5840] hsr_slave_0: entered promiscuous mode [ 62.422823][ T5840] hsr_slave_1: entered promiscuous mode [ 62.429548][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.437472][ T5840] Cannot create hsr debugfs directory [ 62.444911][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.451880][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.477945][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.489905][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.496994][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.523152][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.620053][ T5839] hsr_slave_0: entered promiscuous mode [ 62.626296][ T5839] hsr_slave_1: entered promiscuous mode [ 62.632318][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.640483][ T5839] Cannot create hsr debugfs directory [ 62.659600][ T5837] hsr_slave_0: entered promiscuous mode [ 62.667521][ T5837] hsr_slave_1: entered promiscuous mode [ 62.673641][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.681192][ T5837] Cannot create hsr debugfs directory [ 62.823986][ T5153] Bluetooth: hci1: command tx timeout [ 62.881154][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.901680][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.908693][ T5153] Bluetooth: hci3: command tx timeout [ 62.908791][ T5848] Bluetooth: hci0: command tx timeout [ 62.914845][ T54] Bluetooth: hci2: command tx timeout [ 62.928659][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.939631][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.992199][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.014231][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.030184][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.041422][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.099111][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.114835][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.124954][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.168252][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.209301][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.221999][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.246630][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.264328][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.286088][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.302565][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.337000][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.344359][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.371717][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.387599][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.394761][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.448402][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.472319][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.479504][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.534911][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.542264][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.586779][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.641204][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.682715][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.689942][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.725876][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.733052][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.799632][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.817127][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.839962][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.877172][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.884323][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.897390][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.904538][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.986092][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.001528][ T5837] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.018034][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.043819][ T5838] veth0_vlan: entered promiscuous mode [ 64.085943][ T5838] veth1_vlan: entered promiscuous mode [ 64.162646][ T5840] veth0_vlan: entered promiscuous mode [ 64.191832][ T5838] veth0_macvtap: entered promiscuous mode [ 64.203158][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.212600][ T5840] veth1_vlan: entered promiscuous mode [ 64.224943][ T5838] veth1_macvtap: entered promiscuous mode [ 64.266123][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.296246][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.320209][ T5839] veth0_vlan: entered promiscuous mode [ 64.332710][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.342805][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.352823][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.361855][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.376165][ T5840] veth0_macvtap: entered promiscuous mode [ 64.387125][ T5839] veth1_vlan: entered promiscuous mode [ 64.416718][ T5840] veth1_macvtap: entered promiscuous mode [ 64.468371][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.495561][ T5839] veth0_macvtap: entered promiscuous mode [ 64.505734][ T5839] veth1_macvtap: entered promiscuous mode [ 64.540427][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.551812][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.564828][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.572595][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.585909][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.596953][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.607553][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.618924][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.636845][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.639783][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.656929][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.667887][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.679068][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.690615][ T5840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.700392][ T5840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.709890][ T5840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.719017][ T5840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.737227][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.748730][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.759545][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.770358][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.781401][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.792416][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.801293][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.810992][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.819968][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.870795][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.879837][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.903286][ T54] Bluetooth: hci1: command tx timeout [ 64.920229][ T5837] veth0_vlan: entered promiscuous mode [ 64.974027][ T5837] veth1_vlan: entered promiscuous mode [ 64.984021][ T54] Bluetooth: hci0: command tx timeout [ 64.988530][ T5153] Bluetooth: hci2: command tx timeout [ 64.989431][ T5848] Bluetooth: hci3: command tx timeout [ 65.020816][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.062190][ T5837] veth0_macvtap: entered promiscuous mode [ 65.091188][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.099367][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.128557][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.138704][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.164765][ T5837] veth1_macvtap: entered promiscuous mode [ 65.207516][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.214220][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.226322][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.230326][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.236187][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.236207][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.236220][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.236236][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.237602][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.302782][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.326563][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.329129][ T3543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.342162][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.352408][ T3543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.365995][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.376197][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.387130][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.398554][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.409862][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.418902][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.428180][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.437534][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.579847][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.589062][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.709629][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.759980][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.646399][ T5933] netlink: get zone limit has 4 unknown bytes [ 66.983192][ T5848] Bluetooth: hci1: command tx timeout [ 67.064682][ T5848] Bluetooth: hci3: command tx timeout [ 67.070518][ T5848] Bluetooth: hci0: command tx timeout [ 67.076182][ T5848] Bluetooth: hci2: command tx timeout [ 68.451866][ T5970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24'. [ 68.505389][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'. [ 68.540043][ T5970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24'. [ 69.063207][ T5848] Bluetooth: hci1: command tx timeout [ 69.144192][ T5848] Bluetooth: hci0: command tx timeout [ 69.150585][ T5153] Bluetooth: hci2: command tx timeout [ 69.150594][ T54] Bluetooth: hci3: command tx timeout [ 69.379003][ T5997] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.446172][ T5997] Zero length message leads to an empty skb [ 69.599255][ T6001] syz.1.37 uses obsolete (PF_INET,SOCK_PACKET) [ 70.404629][ T6021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'. [ 70.450019][ T6021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'. [ 71.551184][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.557818][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.828038][ T6039] workqueue: name exceeds WQ_NAME_LEN. Truncating to: -侞6yռ ka; [ 72.220070][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.59'. [ 72.252599][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.59'. [ 72.281794][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.59'. [ 72.309142][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.59'. [ 72.343986][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.59'. [ 77.480702][ T6188] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.150443][ T6256] __nla_validate_parse: 3 callbacks suppressed [ 80.150465][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.128'. [ 80.192813][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.128'. [ 80.253368][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.128'. [ 80.262617][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.128'. [ 80.272029][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.128'. [ 80.281892][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.128'. [ 80.291054][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.128'. [ 80.300670][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.128'. [ 80.311202][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.128'. [ 80.320406][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.128'. [ 81.794338][ T1217] cfg80211: failed to load regulatory.db [ 83.157757][ T6333] mmap: syz.3.155 (6333) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.585769][ T6383] process 'syz.0.176' launched ':,' with NULL argv: empty string added [ 86.030811][ T6425] netlink: zone id is out of range [ 86.036392][ T6425] netlink: zone id is out of range [ 86.042292][ T6425] netlink: zone id is out of range [ 86.048219][ T6425] netlink: zone id is out of range [ 86.053684][ T6425] netlink: zone id is out of range [ 86.058820][ T6425] netlink: zone id is out of range [ 86.064245][ T6425] netlink: zone id is out of range [ 86.069384][ T6425] netlink: zone id is out of range [ 86.074641][ T6425] netlink: zone id is out of range [ 86.079773][ T6425] netlink: zone id is out of range [ 87.055691][ T6460] kernel read not supported for file /#)-\&[} (pid: 6460 comm: syz.0.203) [ 87.066224][ T29] audit: type=1804 audit(1730119065.074:2): pid=6460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.203" name="#)-\&[}" dev="mqueue" ino=9758 res=1 errno=0 [ 87.133336][ T29] audit: type=1800 audit(1730119065.084:3): pid=6460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.203" name="#)-\&[}" dev="mqueue" ino=9758 res=0 errno=0 [ 87.153284][ T29] audit: type=1804 audit(1730119065.134:4): pid=6459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.203" name="#)-\&[}" dev="mqueue" ino=9758 res=1 errno=0 [ 87.174436][ T29] audit: type=1804 audit(1730119065.134:5): pid=6459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.203" name="#)-\&[}" dev="mqueue" ino=9758 res=1 errno=0 [ 88.684081][ T6500] ======================================================= [ 88.684081][ T6500] WARNING: The mand mount option has been deprecated and [ 88.684081][ T6500] and is ignored by this kernel. Remove the mand [ 88.684081][ T6500] option from the mount to silence this warning. [ 88.684081][ T6500] ======================================================= [ 90.703862][ T6534] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 90.732529][ T6534] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 93.475277][ T6572] svc: failed to register nfsdv3 RPC service (errno 111). [ 93.523334][ T6572] svc: failed to register nfsaclv3 RPC service (errno 111). [ 96.669750][ T6641] svc: failed to register nfsdv3 RPC service (errno 111). [ 96.713077][ T6641] svc: failed to register nfsaclv3 RPC service (errno 111). [ 97.814305][ T6673] __nla_validate_parse: 1 callbacks suppressed [ 97.814328][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.283'. [ 97.933819][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.283'. [ 98.006101][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.283'. [ 98.050624][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.283'. [ 98.113387][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.283'. [ 98.159006][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.283'. [ 98.179551][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.283'. [ 98.199795][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.283'. [ 98.231114][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.283'. [ 98.258964][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.283'. [ 102.991651][ T6820] __nla_validate_parse: 9 callbacks suppressed [ 102.991675][ T6820] netlink: 342 bytes leftover after parsing attributes in process `syz.0.334'. [ 104.617568][ T6870] TCP: TCP_TX_DELAY enabled [ 106.663387][ T6934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.086941][ T1100] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.644100][ T5153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.658782][ T5153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.683021][ T5153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.700139][ T1100] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.722798][ T5153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.748182][ T5153] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 107.772264][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.928920][ T1100] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.092794][ T1100] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.201228][ T6954] chnl_net:caif_netlink_parms(): no params data found [ 108.353256][ T6954] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.363290][ T6954] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.370623][ T6954] bridge_slave_0: entered allmulticast mode [ 108.379376][ T6954] bridge_slave_0: entered promiscuous mode [ 108.392738][ T6954] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.400547][ T6954] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.408340][ T6954] bridge_slave_1: entered allmulticast mode [ 108.415969][ T6954] bridge_slave_1: entered promiscuous mode [ 108.429921][ T1100] bridge_slave_1: left allmulticast mode [ 108.437220][ T1100] bridge_slave_1: left promiscuous mode [ 108.444846][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.474179][ T1100] bridge_slave_0: left allmulticast mode [ 108.480019][ T1100] bridge_slave_0: left promiscuous mode [ 108.486716][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.152289][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.169685][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.183254][ T1100] bond0 (unregistering): Released all slaves [ 109.350256][ T6954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.792604][ T6954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.831806][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 109.840852][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 109.867404][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 109.899343][ T6954] team0: Port device team_slave_0 added [ 109.908416][ T6954] team0: Port device team_slave_1 added [ 109.921669][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 109.932127][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 109.940701][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.948149][ T5848] Bluetooth: hci1: command tx timeout [ 110.083627][ T6954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.094147][ T6954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.133755][ T6954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.205616][ T1100] hsr_slave_0: left promiscuous mode [ 110.219390][ T1100] hsr_slave_1: left promiscuous mode [ 110.232350][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.247810][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.274099][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.288617][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.330641][ T1100] veth1_macvtap: left promiscuous mode [ 110.343677][ T1100] veth0_macvtap: left promiscuous mode [ 110.356038][ T1100] veth1_vlan: left promiscuous mode [ 110.367333][ T1100] veth0_vlan: left promiscuous mode [ 111.187391][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 111.264550][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 111.798145][ T6954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.808615][ T6954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.838405][ T6954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.024322][ T5848] Bluetooth: hci1: command tx timeout [ 112.024329][ T5153] Bluetooth: hci2: command tx timeout [ 112.084162][ T6954] hsr_slave_0: entered promiscuous mode [ 112.093286][ T6954] hsr_slave_1: entered promiscuous mode [ 112.496617][ T7007] chnl_net:caif_netlink_parms(): no params data found [ 112.731108][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.743420][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.757607][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.769667][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.779243][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 112.780287][ T1100] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.803820][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.894295][ T1100] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.958040][ T6954] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 112.988433][ T1100] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.007301][ T7007] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.014701][ T7007] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.021865][ T7007] bridge_slave_0: entered allmulticast mode [ 113.028781][ T7007] bridge_slave_0: entered promiscuous mode [ 113.036126][ T6954] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.048761][ T7007] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.056266][ T7007] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.063564][ T7007] bridge_slave_1: entered allmulticast mode [ 113.070952][ T7007] bridge_slave_1: entered promiscuous mode [ 113.100521][ T1100] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.124907][ T6954] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.152843][ T7007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.168432][ T6954] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.183623][ T7007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.246561][ T7007] team0: Port device team_slave_0 added [ 113.264322][ T7007] team0: Port device team_slave_1 added [ 113.422429][ T1100] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.447930][ T7007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.455613][ T7007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.483297][ T7007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.496386][ T7007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.504575][ T7007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.530930][ T7007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.586632][ T1100] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.697854][ T1100] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.731177][ T7007] hsr_slave_0: entered promiscuous mode [ 113.738551][ T7007] hsr_slave_1: entered promiscuous mode [ 113.744696][ T7007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.752245][ T7007] Cannot create hsr debugfs directory [ 113.801608][ T1100] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.832124][ T7061] chnl_net:caif_netlink_parms(): no params data found [ 113.967387][ T6954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.012081][ T7061] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.019388][ T7061] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.028606][ T7061] bridge_slave_0: entered allmulticast mode [ 114.035986][ T7061] bridge_slave_0: entered promiscuous mode [ 114.052571][ T6954] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.072386][ T7061] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.083074][ T7061] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.090340][ T7061] bridge_slave_1: entered allmulticast mode [ 114.098712][ T7061] bridge_slave_1: entered promiscuous mode [ 114.105234][ T5153] Bluetooth: hci2: command tx timeout [ 114.110659][ T5848] Bluetooth: hci1: command tx timeout [ 114.153007][ T7061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.165008][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.172095][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.181256][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.188388][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.199015][ T1100] bridge_slave_1: left allmulticast mode [ 114.204833][ T1100] bridge_slave_1: left promiscuous mode [ 114.210476][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.220215][ T1100] bridge_slave_0: left allmulticast mode [ 114.227089][ T1100] bridge_slave_0: left promiscuous mode [ 114.232736][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.249153][ T1100] bridge_slave_1: left allmulticast mode [ 114.255316][ T1100] bridge_slave_1: left promiscuous mode [ 114.260954][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.269848][ T1100] bridge_slave_0: left allmulticast mode [ 114.276101][ T1100] bridge_slave_0: left promiscuous mode [ 114.281970][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.826651][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.834177][ T5153] Bluetooth: hci0: command tx timeout [ 114.847158][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.857869][ T1100] bond0 (unregistering): Released all slaves [ 114.946890][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.958497][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.970017][ T1100] bond0 (unregistering): Released all slaves [ 114.987551][ T7061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.074917][ T7061] team0: Port device team_slave_0 added [ 115.125261][ T7061] team0: Port device team_slave_1 added [ 115.210763][ T7061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.223356][ T7061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.260611][ T7061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.289898][ T7007] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 115.332237][ T7061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.339629][ T7061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.369293][ T7061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.393139][ T7007] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 115.406208][ T7007] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 115.438038][ T6954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.467311][ T7007] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 115.566628][ T7061] hsr_slave_0: entered promiscuous mode [ 115.600593][ T7061] hsr_slave_1: entered promiscuous mode [ 115.621905][ T7061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.643310][ T7061] Cannot create hsr debugfs directory [ 115.848148][ T6954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.939654][ T1100] hsr_slave_0: left promiscuous mode [ 115.949268][ T1100] hsr_slave_1: left promiscuous mode [ 115.955659][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.966138][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.974452][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.981899][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.996575][ T1100] hsr_slave_0: left promiscuous mode [ 116.002484][ T1100] hsr_slave_1: left promiscuous mode [ 116.010152][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.017903][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.027014][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.034915][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.065418][ T1100] veth1_macvtap: left promiscuous mode [ 116.070947][ T1100] veth0_macvtap: left promiscuous mode [ 116.076829][ T1100] veth1_vlan: left promiscuous mode [ 116.082142][ T1100] veth0_vlan: left promiscuous mode [ 116.089474][ T1100] veth1_macvtap: left promiscuous mode [ 116.095184][ T1100] veth0_macvtap: left promiscuous mode [ 116.100708][ T1100] veth1_vlan: left promiscuous mode [ 116.106829][ T1100] veth0_vlan: left promiscuous mode [ 116.183152][ T5153] Bluetooth: hci2: command tx timeout [ 116.184380][ T5848] Bluetooth: hci1: command tx timeout [ 116.557949][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 116.595171][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 116.906436][ T5848] Bluetooth: hci0: command tx timeout [ 117.207133][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 117.241876][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 117.618450][ T7007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.711307][ T7007] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.764120][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.771240][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.794815][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.801931][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.851842][ T7061] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 117.892113][ T6954] veth0_vlan: entered promiscuous mode [ 117.912387][ T7061] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 117.939575][ T7061] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 117.955515][ T7061] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 117.995760][ T6954] veth1_vlan: entered promiscuous mode [ 118.140892][ T6954] veth0_macvtap: entered promiscuous mode [ 118.192621][ T6954] veth1_macvtap: entered promiscuous mode [ 118.263780][ T5848] Bluetooth: hci2: command tx timeout [ 118.266350][ T6954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.285440][ T6954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.304499][ T6954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.332321][ T7061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.379729][ T6954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.412260][ T6954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.426137][ T6954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.439430][ T6954] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.448878][ T6954] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.457797][ T6954] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.467326][ T6954] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.511618][ T7061] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.564432][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.571500][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.586769][ T7007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.597270][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.604439][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.654059][ T3003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.662007][ T3003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.722008][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.741008][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.963351][ T7142] nbd: illegal input index 50331648 [ 118.984557][ T5848] Bluetooth: hci0: command tx timeout [ 119.127275][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.415'. [ 119.128257][ T7007] veth0_vlan: entered promiscuous mode [ 119.171221][ T7007] veth1_vlan: entered promiscuous mode [ 119.195243][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.415'. [ 119.221933][ T7061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.282049][ T7007] veth0_macvtap: entered promiscuous mode [ 119.312071][ T7007] veth1_macvtap: entered promiscuous mode [ 119.390737][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.411410][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.433681][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.457844][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.501133][ T7007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.540052][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.560909][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.572256][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.584943][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.597066][ T7007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.612434][ T7007] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.623038][ T7007] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.634318][ T7007] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.643131][ T7007] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.759555][ T7061] veth0_vlan: entered promiscuous mode [ 119.828666][ T7061] veth1_vlan: entered promiscuous mode [ 119.865673][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.884161][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.918300][ T7061] veth0_macvtap: entered promiscuous mode [ 119.942456][ T7061] veth1_macvtap: entered promiscuous mode [ 119.951219][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.970652][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.098630][ T1100] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.177070][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.202926][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.252945][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.283448][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.308732][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.334859][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.351934][ T7061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.421491][ T1100] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.496094][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.512594][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.546121][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.580209][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.612790][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.652929][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.687941][ T7061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.785964][ T5153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 120.795633][ T5153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 120.806127][ T5153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 120.825412][ T5153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 120.827650][ T1100] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.860416][ T5153] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 120.868511][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 120.915471][ T7061] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.932998][ T7061] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.941796][ T7061] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.950654][ T7061] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.969179][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.422'. [ 121.019444][ T1100] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.063696][ T5848] Bluetooth: hci0: command tx timeout [ 121.355608][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.381166][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.511814][ T1100] bridge_slave_1: left allmulticast mode [ 121.517976][ T1100] bridge_slave_1: left promiscuous mode [ 121.543338][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.585050][ T1100] bridge_slave_0: left allmulticast mode [ 121.600373][ T1100] bridge_slave_0: left promiscuous mode [ 121.612365][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.204977][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.219850][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.239462][ T1100] bond0 (unregistering): Released all slaves [ 122.330808][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.338999][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.905430][ T5848] Bluetooth: hci3: command tx timeout [ 122.952483][ T7196] chnl_net:caif_netlink_parms(): no params data found [ 123.367802][ T7259] netlink: 342 bytes leftover after parsing attributes in process `syz.5.435'. [ 123.396010][ T7259] netlink: 342 bytes leftover after parsing attributes in process `syz.5.435'. [ 123.459943][ T1100] hsr_slave_0: left promiscuous mode [ 123.478162][ T1100] hsr_slave_1: left promiscuous mode [ 123.543561][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.572193][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.613528][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.621789][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.694282][ T1100] veth1_macvtap: left promiscuous mode [ 123.725652][ T1100] veth0_macvtap: left promiscuous mode [ 123.766891][ T1100] veth1_vlan: left promiscuous mode [ 123.776028][ T1100] veth0_vlan: left promiscuous mode [ 124.591362][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 124.655912][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 124.983153][ T5848] Bluetooth: hci3: command tx timeout [ 125.597884][ T7196] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.633170][ T7196] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.677130][ T7196] bridge_slave_0: entered allmulticast mode [ 125.719397][ T7196] bridge_slave_0: entered promiscuous mode [ 125.755567][ T7196] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.791285][ T7196] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.822605][ T7196] bridge_slave_1: entered allmulticast mode [ 125.847472][ T7196] bridge_slave_1: entered promiscuous mode [ 125.960722][ T7196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.024948][ T7196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.166834][ T7196] team0: Port device team_slave_0 added [ 126.202301][ T7196] team0: Port device team_slave_1 added [ 126.334799][ T7196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.352548][ T7196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.397865][ T7196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.509282][ T7196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.532642][ T7196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.576069][ T7196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.743242][ T7196] hsr_slave_0: entered promiscuous mode [ 126.769288][ T7196] hsr_slave_1: entered promiscuous mode [ 126.785058][ T7196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.803754][ T7196] Cannot create hsr debugfs directory [ 127.063958][ T5848] Bluetooth: hci3: command tx timeout [ 127.294030][ T7196] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 127.339913][ T7196] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 127.414868][ T7196] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 127.444374][ T7196] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 127.657027][ T7196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.720861][ T7196] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.766811][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.773994][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.834242][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.842165][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.928539][ T7196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.286208][ T7196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.996386][ T7196] veth0_vlan: entered promiscuous mode [ 129.029087][ T7196] veth1_vlan: entered promiscuous mode [ 129.126214][ T7196] veth0_macvtap: entered promiscuous mode [ 129.147166][ T5848] Bluetooth: hci3: command tx timeout [ 129.191316][ T7196] veth1_macvtap: entered promiscuous mode [ 129.290326][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.322501][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.332632][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.343245][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.353755][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.364440][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.375883][ T7196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.399533][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.410106][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.420133][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.430723][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.440611][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.451084][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.464166][ T7196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.476537][ T7196] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.485350][ T7196] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.494248][ T7196] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.503013][ T7196] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.615546][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.628430][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.667823][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.676631][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.996583][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.005532][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.456847][ T7680] netlink: 'syz.6.530': attribute type 11 has an invalid length. [ 137.497742][ T7680] netlink: 'syz.6.530': attribute type 11 has an invalid length. [ 137.782993][ T7692] netlink: 4 bytes leftover after parsing attributes in process `syz.5.532'. [ 139.581723][ T7744] netlink: 24 bytes leftover after parsing attributes in process `syz.4.543'. [ 141.403986][ T7782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.645444][ T7849] team0: entered allmulticast mode [ 142.650753][ T7849] team_slave_0: entered allmulticast mode [ 142.656604][ T7849] team_slave_1: entered allmulticast mode [ 143.286283][ T7876] sctp: [Deprecated]: syz.6.575 (pid 7876) Use of struct sctp_assoc_value in delayed_ack socket option. [ 143.286283][ T7876] Use struct sctp_sack_info instead [ 143.661482][ T7892] HfR: entered promiscuous mode [ 143.704153][ T7892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.580'. [ 143.722739][ T7892] HfR: left promiscuous mode [ 144.835049][ T5848] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 147.035289][ T8013] svc: failed to register nfsdv3 RPC service (errno 111). [ 147.074088][ T8013] svc: failed to register nfsaclv3 RPC service (errno 111). [ 150.114048][ T8144] bridge0: entered allmulticast mode [ 151.276742][ T8171] nbd: must specify at least one socket [ 151.297723][ T8168] svc: failed to register nfsdv3 RPC service (errno 111). [ 151.391396][ T8168] svc: failed to register nfsaclv3 RPC service (errno 111). [ 152.578144][ T8231] kernel read not supported for file /" (pid: 8231 comm: syz.4.659) [ 152.588752][ T29] audit: type=1800 audit(4294967298.900:6): pid=8231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.659" name=220E dev="mqueue" ino=18570 res=0 errno=0 [ 154.550139][ T8280] svc: failed to register nfsdv3 RPC service (errno 111). [ 154.570166][ T8280] svc: failed to register nfsaclv3 RPC service (errno 111). [ 155.398747][ T8274] svc: failed to register nfsdv3 RPC service (errno 111). [ 155.497948][ T8274] svc: failed to register nfsaclv3 RPC service (errno 512). [ 159.513583][ T8401] Invalid ELF header magic: != ELF [ 162.504785][ T8491] netlink: 20 bytes leftover after parsing attributes in process `syz.7.708'. [ 162.575783][ T8491] netlink: 20 bytes leftover after parsing attributes in process `syz.7.708'. [ 162.621756][ T8491] netlink: 20 bytes leftover after parsing attributes in process `syz.7.708'. [ 165.373286][ T8589] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.664286][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.6.742'. [ 167.714067][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.6.742'. [ 172.245322][ T8793] netlink: 'syz.5.769': attribute type 11 has an invalid length. [ 172.266313][ T8793] netlink: 'syz.5.769': attribute type 11 has an invalid length. [ 172.717565][ T8814] netlink: 20 bytes leftover after parsing attributes in process `syz.5.772'. [ 174.721443][ T8885] vcan0: entered allmulticast mode [ 174.945505][ T8896] HSR: entered promiscuous mode [ 175.075006][ T8902] delete_channel: no stack [ 182.236312][ T9101] Invalid ELF header magic: != ELF [ 185.480915][ T9200] nbd: must specify at least one socket [ 185.740153][ T9210] svc: failed to register nfsdv3 RPC service (errno 111). [ 185.755272][ T9210] svc: failed to register nfsaclv3 RPC service (errno 111). [ 185.789558][ T9215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.840'. [ 187.652438][ T9263] GUP no longer grows the stack in syz.4.848 (9263): 1000-401000 (0) [ 187.718008][ T9263] CPU: 0 UID: 0 PID: 9263 Comm: syz.4.848 Not tainted 6.12.0-rc5-syzkaller #0 [ 187.727029][ T9263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 187.737136][ T9263] Call Trace: [ 187.740446][ T9263] [ 187.743418][ T9263] dump_stack_lvl+0x16c/0x1f0 [ 187.748163][ T9263] gup_vma_lookup+0x1d2/0x220 [ 187.752892][ T9263] fixup_user_fault+0x26f/0x540 [ 187.757799][ T9263] fault_in_user_writeable+0x70/0xe0 [ 187.763154][ T9263] futex_wake_op+0x96c/0xdc0 [ 187.767810][ T9263] ? __pfx_futex_wake_op+0x10/0x10 [ 187.772982][ T9263] ? futex_wake+0x18e/0x4e0 [ 187.777529][ T9263] ? __pfx_futex_wake+0x10/0x10 [ 187.782408][ T9263] ? bpf_lsm_file_permission+0x9/0x10 [ 187.787790][ T9263] ? security_file_permission+0x71/0x210 [ 187.793441][ T9263] ? fput+0x30/0x390 [ 187.797357][ T9263] do_futex+0x2eb/0x350 [ 187.801521][ T9263] ? __pfx_do_futex+0x10/0x10 [ 187.806207][ T9263] ? __pfx_do_sendfile+0x10/0x10 [ 187.811159][ T9263] __x64_sys_futex+0x1e1/0x4c0 [ 187.815939][ T9263] ? __pfx___x64_sys_futex+0x10/0x10 [ 187.821238][ T9263] ? rcu_is_watching+0x12/0xc0 [ 187.826032][ T9263] do_syscall_64+0xcd/0x250 [ 187.830552][ T9263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.836460][ T9263] RIP: 0033:0x7f881b77e719 [ 187.840891][ T9263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.860505][ T9263] RSP: 002b:00007f881c4cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 187.868933][ T9263] RAX: ffffffffffffffda RBX: 00007f881b935f80 RCX: 00007f881b77e719 [ 187.876911][ T9263] RDX: 0000000000000002 RSI: 0000000000000085 RDI: 0000000000000000 [ 187.884889][ T9263] RBP: 00007f881b7f132e R08: 0000000000000000 R09: 0000000000000001 [ 187.892869][ T9263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.900842][ T9263] R13: 0000000000000000 R14: 00007f881b935f80 R15: 00007ffcfe60f5d8 [ 187.908836][ T9263] [ 187.913162][ T9267] svc: failed to register nfsdv3 RPC service (errno 111). [ 187.952447][ T9267] svc: failed to register nfsaclv3 RPC service (errno 111). [ 190.392602][ T9356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.863'. [ 190.924087][ T9365] sctp: [Deprecated]: syz.4.866 (pid 9365) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.924087][ T9365] Use struct sctp_sack_info instead [ 194.427357][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.433804][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.619931][ T29] audit: type=1326 audit(8277292074.655:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9462 comm="syz.5.879" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b8cb7e719 code=0x0 [ 195.938509][ T9478] kexec: Could not allocate control_code_buffer [ 197.643944][ T9570] svc: failed to register nfsdv3 RPC service (errno 111). [ 197.684573][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.895'. [ 197.715532][ T9570] svc: failed to register nfsaclv3 RPC service (errno 111). [ 199.657597][ T9637] delete_channel: no stack [ 201.418780][ T9678] ptrace attach of "./syz-executor exec"[7196] was attempted by "./syz-executor exec"[9678] [ 202.548220][ T9703] netlink: 4 bytes leftover after parsing attributes in process `syz.7.921'. [ 202.612067][ T9702] netlink: 'syz.4.923': attribute type 11 has an invalid length. [ 202.631893][ T9702] netlink: 'syz.4.923': attribute type 11 has an invalid length. [ 202.703708][ T9703] veth0_macvtap: left promiscuous mode [ 207.392295][ T9783] netlink: 4 bytes leftover after parsing attributes in process `syz.5.945'. [ 207.405213][ T9781] Dead loop on virtual device ip6_vti0, fix it urgently! [ 207.423204][ T9781] Dead loop on virtual device ip6_vti0, fix it urgently! [ 207.460370][ T9781] Dead loop on virtual device ip6_vti0, fix it urgently! [ 207.503318][ T9781] Dead loop on virtual device ip6_vti0, fix it urgently! [ 207.533183][ T9781] Dead loop on virtual device ip6_vti0, fix it urgently! [ 207.540855][ T9781] Dead loop on virtual device ip6_vti0, fix it urgently! [ 209.476602][ T9820] netlink: 'syz.7.955': attribute type 11 has an invalid length. [ 209.498225][ T9820] netlink: 'syz.7.955': attribute type 11 has an invalid length. [ 212.647811][ T9878] netlink: 'syz.4.966': attribute type 11 has an invalid length. [ 212.727987][ T9878] netlink: 'syz.4.966': attribute type 11 has an invalid length. [ 213.509850][ T9889] netlink: 'syz.7.974': attribute type 11 has an invalid length. [ 213.517723][ T9889] netlink: 'syz.7.974': attribute type 11 has an invalid length. [ 213.857884][ T9891] netlink: 342 bytes leftover after parsing attributes in process `syz.5.973'. [ 215.853677][ T9906] kexec: Could not allocate control_code_buffer [ 215.935599][ T9926] Dead loop on virtual device ip6_vti0, fix it urgently! [ 215.943133][ T9926] Dead loop on virtual device ip6_vti0, fix it urgently! [ 215.985304][ T9926] Dead loop on virtual device ip6_vti0, fix it urgently! [ 216.032680][ T9926] Dead loop on virtual device ip6_vti0, fix it urgently! [ 216.063411][ T9926] Dead loop on virtual device ip6_vti0, fix it urgently! [ 216.091836][ T9926] Dead loop on virtual device ip6_vti0, fix it urgently! [ 217.274790][ T9942] debugfs: Directory '-侞6yռ ka;+1)p;!X+@' with parent 'ieee80211' already present! [ 217.577327][ T9959] netlink: 64 bytes leftover after parsing attributes in process `syz.5.995'. [ 218.312048][ T9973] svc: failed to register nfsdv3 RPC service (errno 111). [ 218.328259][ T9973] svc: failed to register nfsaclv3 RPC service (errno 111). [ 220.557509][T10014] syz.4.1009 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 220.604986][T10014] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1009'. [ 230.126660][T10183] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1045'. [ 232.345221][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 232.351315][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 232.598477][ T29] audit: type=1800 audit(8277292112.635:8): pid=10210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1052" name="SYSV00000005" dev="hugetlbfs" ino=0 res=0 errno=0 [ 232.974884][T10225] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1054'. [ 235.165764][T10264] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1061'. [ 235.279080][T10265] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1061'. [ 235.336403][T10264] team0: entered promiscuous mode [ 235.341554][T10264] team_slave_0: entered promiscuous mode [ 235.563216][T10264] team_slave_1: entered promiscuous mode [ 237.623199][ T5153] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.632709][ T5153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.641777][ T5153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.654620][ T5153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.666699][ T5153] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 237.674231][ T5153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 238.146188][ T3543] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.017306][ T3543] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.546340][ T3543] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.783039][ T5848] Bluetooth: hci0: command tx timeout [ 240.164020][ T3543] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.859696][ T3543] bridge_slave_1: left promiscuous mode [ 240.891952][ T3543] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.064027][ T3543] bridge_slave_0: left allmulticast mode [ 241.088665][ T3543] bridge_slave_0: left promiscuous mode [ 241.103287][ T3543] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.872933][ T5848] Bluetooth: hci0: command tx timeout [ 242.697088][ T3543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.751423][ T3543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.805824][ T3543] bond0 (unregistering): Released all slaves [ 243.107834][T10290] chnl_net:caif_netlink_parms(): no params data found [ 243.170299][T10319] kexec: Could not allocate control_code_buffer [ 243.636463][T10290] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.671835][T10290] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.683145][T10290] bridge_slave_0: entered allmulticast mode [ 243.714134][T10290] bridge_slave_0: entered promiscuous mode [ 243.842136][T10290] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.874525][T10290] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.881898][T10290] bridge_slave_1: entered allmulticast mode [ 243.909645][T10290] bridge_slave_1: entered promiscuous mode [ 243.943196][ T5848] Bluetooth: hci0: command tx timeout [ 244.301146][T10290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.313709][T10290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.442651][T10290] team0: Port device team_slave_0 added [ 244.488712][T10290] team0: Port device team_slave_1 added [ 244.806294][T10290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.824416][T10290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.901847][T10290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.977536][ T3543] hsr_slave_0: left promiscuous mode [ 245.109707][ T3543] hsr_slave_1: left promiscuous mode [ 245.132120][ T3543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.145069][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.170724][ T3543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.192360][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.245991][ T3543] veth1_macvtap: left promiscuous mode [ 245.292992][ T3543] veth0_macvtap: left promiscuous mode [ 245.306508][ T3543] veth1_vlan: left promiscuous mode [ 245.329994][ T3543] veth0_vlan: left promiscuous mode [ 246.033507][ T5153] Bluetooth: hci0: command tx timeout [ 246.630987][ T29] audit: type=1800 audit(8277292126.665:9): pid=10406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1087" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 247.138675][ T3543] team0 (unregistering): Port device team_slave_1 removed [ 247.249105][ T3543] team0 (unregistering): Port device team_slave_0 removed [ 247.710523][ T5153] Bluetooth: hci3: command 0x0406 tx timeout [ 248.633796][T10290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.640797][T10290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.669339][T10290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.044060][T10290] hsr_slave_0: entered promiscuous mode [ 249.060414][T10290] hsr_slave_1: entered promiscuous mode [ 249.089118][T10290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.126891][T10290] Cannot create hsr debugfs directory [ 250.663301][T10290] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 250.715981][T10290] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 250.843929][T10290] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 250.987699][T10290] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 251.327293][T10290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.443517][T10290] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.476807][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.483995][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.596627][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.603847][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.852631][T10290] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.710699][T10290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.813120][ T29] audit: type=1800 audit(8277292132.855:10): pid=10514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1100" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 253.240641][T10532] nbd: couldn't find device at index 511 [ 253.621226][T10290] veth0_vlan: entered promiscuous mode [ 253.664654][T10290] veth1_vlan: entered promiscuous mode [ 253.759531][T10290] veth0_macvtap: entered promiscuous mode [ 253.864984][T10290] veth1_macvtap: entered promiscuous mode [ 254.169044][T10290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.184234][T10290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.201999][T10290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.225497][T10290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.243337][T10290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.283251][T10290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.314244][T10290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.354764][T10290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.372921][T10290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.393504][T10290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.412892][T10290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.428199][T10290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.454061][T10290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.471647][T10290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.561671][T10290] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.592997][T10290] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.601763][T10290] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.611173][T10290] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.320957][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.354884][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.435148][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.449147][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.870449][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.877652][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.966783][T10673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1116'. [ 267.226946][T10823] Process accounting resumed [ 268.933350][T10861] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1150'. [ 268.986513][T10861] netlink: 342 bytes leftover after parsing attributes in process `syz.8.1150'. [ 269.103125][T10858] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1149'. [ 269.575926][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1152'. [ 269.794015][T10887] can: request_module (can-proto-0) failed. [ 275.733130][T11049] netlink: 342 bytes leftover after parsing attributes in process `syz.7.1170'. [ 276.097620][T11053] svc: failed to register nfsdv3 RPC service (errno 111). [ 276.103771][T11054] nbd: must specify at least one socket [ 276.196971][T11053] svc: failed to register nfsaclv3 RPC service (errno 111). [ 282.914653][T11122] can: request_module (can-proto-4) failed. [ 284.680976][T11155] netlink: 172 bytes leftover after parsing attributes in process `syz.7.1189'. [ 288.141668][T11200] netlink: 'syz.4.1199': attribute type 2 has an invalid length. [ 289.517718][T11221] netlink: 4 bytes leftover after parsing attributes in process `'. [ 292.615491][T11281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1216'. [ 293.296040][T11292] can: request_module (can-proto-0) failed. [ 299.182898][T11362] can: request_module (can-proto-4) failed. [ 301.644312][T11379] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1233'. [ 303.945093][T11392] delete_channel: no stack [ 304.032974][T11400] svc: failed to register nfsdv3 RPC service (errno 111). [ 304.078779][T11400] svc: failed to register nfsaclv3 RPC service (errno 111). [ 304.169031][T11405] [ 304.171410][T11405] ====================================================== [ 304.178440][T11405] WARNING: possible circular locking dependency detected [ 304.185466][T11405] 6.12.0-rc5-syzkaller #0 Not tainted [ 304.190845][T11405] ------------------------------------------------------ [ 304.197878][T11405] syz.8.1238/11405 is trying to acquire lock: [ 304.203964][T11405] ffff88801ac76a18 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x3a9/0x6a0 [ 304.213595][T11405] [ 304.213595][T11405] but task is already holding lock: [ 304.220974][T11405] ffff8880325b9660 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x86/0x140 [ 304.231740][T11405] [ 304.231740][T11405] which lock already depends on the new lock. [ 304.231740][T11405] [ 304.242166][T11405] [ 304.242166][T11405] the existing dependency chain (in reverse order) is: [ 304.251207][T11405] [ 304.251207][T11405] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 304.259969][T11405] down_write+0x93/0x200 [ 304.264800][T11405] process_measurement+0x39c/0x2370 [ 304.270584][T11405] ima_file_mmap+0x146/0x1d0 [ 304.275730][T11405] security_mmap_file+0x8bd/0x990 [ 304.281312][T11405] __do_sys_remap_file_pages+0x526/0x900 [ 304.287516][T11405] do_syscall_64+0xcd/0x250 [ 304.292586][T11405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.299062][T11405] [ 304.299062][T11405] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 304.306688][T11405] __lock_acquire+0x250b/0x3ce0 [ 304.312112][T11405] lock_acquire.part.0+0x11b/0x380 [ 304.317814][T11405] down_read_killable+0x9d/0x380 [ 304.323426][T11405] lock_mm_and_find_vma+0x3a9/0x6a0 [ 304.329190][T11405] do_user_addr_fault+0x2b5/0x13f0 [ 304.329743][T11403] nbd: must specify at least one socket [ 304.334844][T11405] exc_page_fault+0x5c/0xc0 [ 304.334884][T11405] asm_exc_page_fault+0x26/0x30 [ 304.334913][T11405] fault_in_readable+0x160/0x200 [ 304.334940][T11405] fault_in_iov_iter_readable+0x101/0x2c0 [ 304.362575][T11405] generic_perform_write+0x21b/0x920 [ 304.368421][T11405] shmem_file_write_iter+0x10e/0x140 [ 304.374335][T11405] vfs_write+0x5ae/0x1150 [ 304.379229][T11405] ksys_write+0x12f/0x260 [ 304.384165][T11405] do_syscall_64+0xcd/0x250 [ 304.389223][T11405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.395680][T11405] [ 304.395680][T11405] other info that might help us debug this: [ 304.395680][T11405] [ 304.405926][T11405] Possible unsafe locking scenario: [ 304.405926][T11405] [ 304.413405][T11405] CPU0 CPU1 [ 304.418792][T11405] ---- ---- [ 304.424201][T11405] lock(&sb->s_type->i_mutex_key#12); [ 304.429724][T11405] lock(&mm->mmap_lock); [ 304.436600][T11405] lock(&sb->s_type->i_mutex_key#12); [ 304.444623][T11405] rlock(&mm->mmap_lock); [ 304.449080][T11405] [ 304.449080][T11405] *** DEADLOCK *** [ 304.449080][T11405] [ 304.457241][T11405] 3 locks held by syz.8.1238/11405: [ 304.462455][T11405] #0: ffff888033b1ab78 (&f->f_pos_lock){+.+.}-{3:3}, at: fdget_pos+0x24c/0x360 [ 304.471617][T11405] #1: ffff8880259c2420 (sb_writers#5){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 304.480682][T11405] #2: ffff8880325b9660 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x86/0x140 [ 304.491980][T11405] [ 304.491980][T11405] stack backtrace: [ 304.497890][T11405] CPU: 0 UID: 0 PID: 11405 Comm: syz.8.1238 Not tainted 6.12.0-rc5-syzkaller #0 [ 304.506948][T11405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 304.517041][T11405] Call Trace: [ 304.520342][T11405] [ 304.523297][T11405] dump_stack_lvl+0x116/0x1f0 [ 304.528016][T11405] print_circular_bug+0x419/0x5d0 [ 304.533094][T11405] check_noncircular+0x31a/0x400 [ 304.538087][T11405] ? __pfx_check_noncircular+0x10/0x10 [ 304.543595][T11405] ? lock_acquire+0x2f/0xb0 [ 304.548147][T11405] ? lockdep_lock+0xc6/0x200 [ 304.552777][T11405] ? __pfx_lockdep_lock+0x10/0x10 [ 304.557841][T11405] __lock_acquire+0x250b/0x3ce0 [ 304.562737][T11405] ? __pfx___lock_acquire+0x10/0x10 [ 304.567980][T11405] ? try_to_wake_up+0x154/0x14f0 [ 304.572993][T11405] ? rwsem_wake.isra.0+0xbe/0x120 [ 304.578094][T11405] lock_acquire.part.0+0x11b/0x380 [ 304.583251][T11405] ? lock_mm_and_find_vma+0x3a9/0x6a0 [ 304.588665][T11405] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 304.594341][T11405] ? rcu_is_watching+0x12/0xc0 [ 304.599147][T11405] ? trace_lock_acquire+0x14a/0x1d0 [ 304.604389][T11405] ? lock_mm_and_find_vma+0x3a9/0x6a0 [ 304.609806][T11405] ? lock_acquire+0x2f/0xb0 [ 304.614353][T11405] ? lock_mm_and_find_vma+0x3a9/0x6a0 [ 304.619774][T11405] down_read_killable+0x9d/0x380 [ 304.624756][T11405] ? lock_mm_and_find_vma+0x3a9/0x6a0 [ 304.630178][T11405] ? __pfx_down_read_killable+0x10/0x10 [ 304.635777][T11405] ? __pfx_search_extable+0x10/0x10 [ 304.641048][T11405] ? fault_in_readable+0x160/0x200 [ 304.646218][T11405] lock_mm_and_find_vma+0x3a9/0x6a0 [ 304.651517][T11405] do_user_addr_fault+0x2b5/0x13f0 [ 304.656725][T11405] exc_page_fault+0x5c/0xc0 [ 304.661330][T11405] asm_exc_page_fault+0x26/0x30 [ 304.666231][T11405] RIP: 0010:fault_in_readable+0x160/0x200 [ 304.672000][T11405] Code: 42 e8 45 31 f6 e8 70 36 ba ff 48 39 eb 75 13 eb 2e e8 64 36 ba ff 48 81 c3 00 10 00 00 48 39 eb 74 1d e8 53 36 ba ff 45 89 f7 <8a> 03 31 ff 44 89 fe 88 44 24 28 e8 80 38 ba ff 45 85 ff 74 d2 e8 [ 304.691650][T11405] RSP: 0018:ffffc9000c1b7b18 EFLAGS: 00050246 [ 304.697761][T11405] RAX: 0000000000040000 RBX: 00000000000ec000 RCX: ffffc9001191d000 [ 304.705764][T11405] RDX: 0000000000040000 RSI: ffffffff81d26f9d RDI: 0000000000000005 [ 304.713768][T11405] RBP: 0000000000101000 R08: 0000000000000005 R09: 0000000000000000 [ 304.721784][T11405] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000100082 [ 304.729839][T11405] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 304.737887][T11405] ? fault_in_readable+0x15d/0x200 [ 304.743067][T11405] ? fault_in_readable+0x15d/0x200 [ 304.748237][T11405] ? __pfx_fault_in_readable+0x10/0x10 [ 304.753737][T11405] ? find_held_lock+0x2d/0x110 [ 304.758580][T11405] ? inode_to_bdi+0x9e/0x160 [ 304.763214][T11405] fault_in_iov_iter_readable+0x101/0x2c0 [ 304.768976][T11405] generic_perform_write+0x21b/0x920 [ 304.774317][T11405] ? __mark_inode_dirty+0x6b0/0xe60 [ 304.779561][T11405] ? __pfx_generic_perform_write+0x10/0x10 [ 304.785420][T11405] ? __mark_inode_dirty+0x71a/0xe60 [ 304.790718][T11405] ? generic_update_time+0xcf/0xf0 [ 304.795878][T11405] ? mnt_put_write_access_file+0x45/0xf0 [ 304.801567][T11405] shmem_file_write_iter+0x10e/0x140 [ 304.806907][T11405] vfs_write+0x5ae/0x1150 [ 304.811271][T11405] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 304.817126][T11405] ? trace_lock_acquire+0x14a/0x1d0 [ 304.822366][T11405] ? __pfx_vfs_write+0x10/0x10 [ 304.827173][T11405] ? __pfx___mutex_lock+0x10/0x10 [ 304.832261][T11405] ksys_write+0x12f/0x260 [ 304.836628][T11405] ? __pfx_ksys_write+0x10/0x10 [ 304.841519][T11405] do_syscall_64+0xcd/0x250 [ 304.846066][T11405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.852016][T11405] RIP: 0033:0x7f4196d7e719 [ 304.856463][T11405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.876106][T11405] RSP: 002b:00007f4197ba2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 304.884564][T11405] RAX: ffffffffffffffda RBX: 00007f4196f35f80 RCX: 00007f4196d7e719 [ 304.892580][T11405] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 304.900595][T11405] RBP: 00007f4196df132e R08: 0000000000000000 R09: 0000000000000000 [ 304.908605][T11405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.916614][T11405] R13: 0000000000000000 R14: 00007f4196f35f80 R15: 00007ffdeef43c48 [ 304.924628][T11405] [ 305.381493][T11405] kexec: Could not allocate control_code_buffer