last executing test programs: 1m22.949919967s ago: executing program 3 (id=125): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy9/netdev:wlan1/stations/08:02:11:00:00:00/tx_filtered\x00', 0x400002, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, r0, 0x0, 0x3}, 0x6f3) (async) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, r0, 0x0, 0x3}, 0x6f3) socket(0x10, 0x2, 0x0) (async) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f00000000c0)='\xc4--:\xdd:,./-${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket(0x2a, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) (async) eventfd$auto(0x3) socket(0xa, 0x2, 0x88) (async) r2 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_map_fd=r1}, 0xa3) 1m22.465219044s ago: executing program 3 (id=129): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000dbdbdf25020000000800030000000000050004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) socket(0xa, 0x5, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_smaps_operations_internal(r1, &(0x7f00000002c0)=""/190, 0xfffffe39) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto_nsim_psample_enable_fops_psample(0xffffffffffffffff, &(0x7f0000000140)="aaf6120670501b8f18f9a0937d4a9ef58d3459ba73adaae96d9075498cb74e7caa4576309ec5e063ba001f33c6de916a0208c2099cdf22abfe2e5f75e2a26a77266d634e505cddd876aaa99f90355f3fd0ca1fb225f916160b075d0bf5c00eae61035c", 0x63) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000dbdbdf25020000000800030000000000050004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) (async) socket(0xa, 0x5, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) read$auto_proc_pid_smaps_operations_internal(r1, &(0x7f00000002c0)=""/190, 0xfffffe39) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) write$auto_nsim_psample_enable_fops_psample(0xffffffffffffffff, &(0x7f0000000140)="aaf6120670501b8f18f9a0937d4a9ef58d3459ba73adaae96d9075498cb74e7caa4576309ec5e063ba001f33c6de916a0208c2099cdf22abfe2e5f75e2a26a77266d634e505cddd876aaa99f90355f3fd0ca1fb225f916160b075d0bf5c00eae61035c", 0x63) (async) 1m21.855499272s ago: executing program 3 (id=131): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) socket(0xa, 0x801, 0x84) open(&(0x7f00000000c0)='./file1\x00', 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0x2003ed, 0x19) socket(0x2, 0x3, 0x8) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x6, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, 0x0, 0x2001, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/011/001\x00', 0x121002, 0x0) mmap$auto(0x0, 0x380000, 0x2, 0x8000000008011, 0x7, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0x7, 0x0) io_uring_setup$auto(0x2, 0x0) semctl$auto(0x8, 0x806, 0x13, 0x8) setsockopt$auto(0x3, 0x29, 0x40, 0x0, 0x10001) openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/setgroups\x00', 0x800, 0x0) 1m19.882675052s ago: executing program 3 (id=138): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000140)=0x2) socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x400008, 0x7f, 0x9b72, 0x2, 0x8000) clock_gettime$auto(0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000200)=0xe) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, 0x0, 0x4000884) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x6, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x6b) connect$auto(r0, 0x0, 0x55) 1m18.256790827s ago: executing program 3 (id=150): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) fstat$auto(0x2, 0x0) mincore$auto(0x0, 0x10000, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000001880), 0x10b040, 0x0) ioperm$auto(0x0, 0x100000901, 0x402) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) r0 = socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x0, 0xdf, 0x9b72, 0x3, 0x28000) setsockopt$auto(0xffffffffffffffff, 0x29, 0x400, 0x0, 0x200577) memfd_create$auto(&(0x7f00000002c0)='IPVS\x00', 0x7) symlink$auto(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00') mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x40400, 0x48) fchmod$auto(r1, 0x9) setreuid$auto(0x4, 0x8) link$auto(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)='./file1\x00') bpf$auto(0x1, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x7fb, 0x3, 0x8, 0xc, r0, 0x0, 0x3}, 0x6f4) setresuid$auto(0xfffd, 0x8, 0xa2d) mlock$auto(0xffffffffffffff31, 0x100000000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x0, &(0x7f0000000300)=@test={0xffffffffffffffff, 0xe1a, 0x3, 0x25d2, 0x7ff, 0x6, 0x0, 0x6, 0x4000000, 0x6, 0x1, 0x4, 0x7, 0x9, 0x7}, 0x6f4) bpf$auto(0x4, &(0x7f00000001c0)=@bpf_attr_5={@target_ifindex, r0, 0x2, 0x4005, r2, @relative_fd=r2, 0x4}, 0xc) write$auto(0x3, 0x0, 0xfffffdf3) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) read$auto_rtc_dev_fops_dev(r3, 0x0, 0x0) 1m16.896903745s ago: executing program 3 (id=160): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3, 0x401, 0x12, 0x401, 0x1000000000000000) setresgid$auto(0xffffffffffffffff, 0x8, 0x7fffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1c\x00', 0x131102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000000)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x7ffe, 0x0, 0x6) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0008, 0x19) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, 0x0, 0xc800) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x24040010) 1m16.522080531s ago: executing program 32 (id=160): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3, 0x401, 0x12, 0x401, 0x1000000000000000) setresgid$auto(0xffffffffffffffff, 0x8, 0x7fffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1c\x00', 0x131102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000000)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x7ffe, 0x0, 0x6) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0008, 0x19) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, 0x0, 0xc800) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x24040010) 51.992201294s ago: executing program 2 (id=274): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) io_uring_enter$auto(0x3, 0xe0a, 0x80000001, 0x7, 0x0, 0x101) r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x10a) open_by_handle_at$auto(r0, &(0x7f0000000040)={0x8, 0x2, "0600000000000000"}, 0x180000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) 50.410288766s ago: executing program 2 (id=288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x5, 0x0) socket(0xa, 0x2, 0x73) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) getsockname$auto(r1, &(0x7f0000000000), &(0x7f0000000040)=0xd1) open(&(0x7f0000000100)='./file0\x00', 0x201c2, 0x10e) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) sendfile$auto(0x6, 0x3, 0x0, 0xfffffdef) close_range$auto(0x2, 0x8000, 0x0) r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f00000008c0)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x10, 0x4, 0x0, 0x1, [@nested={0xc, 0x29, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="85f65a9a"]}]}]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) 49.792960441s ago: executing program 2 (id=294): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) mmap$auto(0x7ff, 0xcc3, 0xacb, 0x13, 0x9, 0x7f) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) socket(0xa, 0x801, 0x106) listen$auto(0x3, 0x81) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 49.462294564s ago: executing program 2 (id=295): fchmod$auto(0xffffffffffffffff, 0x7439) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), r0) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000042861a8503bba750ca12f229fb316442b151854809193774", @ANYRES16=r1, @ANYBLOB="210026bd7000fedbdf250100000008000500010000001400020077673000"/42], 0x30}, 0x1, 0x0, 0x0, 0x841}, 0x80) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0xb32, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(0xffffffffffffffff, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000240), r0) sendmsg$auto_NETDEV_CMD_NAPI_SET(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x30, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NETDEV_A_NAPI_GRO_FLUSH_TIMEOUT={0xc}, @NETDEV_A_NAPI_ID={0x8}, @NETDEV_A_NAPI_ID={0x8, 0x2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x19) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mkdir$auto(&(0x7f0000000040)='nfsd\x00', 0x7) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) ioctl$auto(0x1, 0x890b, 0x8) clone$auto(0x1, 0x1, 0x0, 0x0, 0x7) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0xfffffffffffffffd, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) setreuid$auto(0x4, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) process_mrelease$auto(0x4, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000080), r4) clone$auto(0x5, 0x9, &(0x7f0000000000)=0xf61, &(0x7f00000000c0)=0x3, 0xcd8) 47.190648664s ago: executing program 2 (id=307): socket(0x840000000002, 0x3, 0xff) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000000), 0x55) write$auto(0x3, 0x0, 0x5c8) r0 = open(&(0x7f0000000200)='./file0\x00', 0x20342, 0x665359a5845eb4b0) open(&(0x7f0000000080)='./file0\x00', 0xeee00, 0x54039ecba431bb44) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) prctl$auto(0x10000000024, 0x2, 0x2008, 0x4000000c, 0x80001) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb4, 0xd, 0x400000000007ffe) setns(0xffffffffffffffff, 0x0) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r0) sendmsg$auto_NFC_CMD_VENDOR(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c002b5aec8073450000", @ANYRES16=r1, @ANYBLOB="100025bd7000fedbdf251d00000008000e000700000005000a009d00000008000d0000100000"], 0x2c}}, 0x20008014) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) socket(0x2, 0x5, 0x0) fcntl$auto(0x0, 0x407, 0x100000) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) memfd_create$auto(&(0x7f0000000000)='A\x00\x00\x00\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\f\x00\x00\v\x00E\xdb\x81\xd9\xd8\xe640\xc6\xa4Sr\x82\xcc\"K\xe1IIT\x00\x00\x00', 0xe) rseq$auto(0x0, 0x8000, 0x0, 0x6) 46.01319663s ago: executing program 2 (id=312): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0x1010, 0x401, 0x8000) connect$auto(0x3, &(0x7f00000000c0), 0x55) mkdir$auto(&(0x7f0000000300)='./file0\x00', 0xf801) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(r0, 0xffffffffffffffff, 0x1a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0xe6e) chmod$auto(0x0, 0x10fe) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) ioctl$auto(0x3, 0x541b, 0x10000000000402) 45.734946616s ago: executing program 33 (id=312): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0x1010, 0x401, 0x8000) connect$auto(0x3, &(0x7f00000000c0), 0x55) mkdir$auto(&(0x7f0000000300)='./file0\x00', 0xf801) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(r0, 0xffffffffffffffff, 0x1a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0xe6e) chmod$auto(0x0, 0x10fe) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) ioctl$auto(0x3, 0x541b, 0x10000000000402) 2.941263458s ago: executing program 0 (id=548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000100)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x844}, 0x20000000) 2.89805112s ago: executing program 0 (id=549): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nbd11/mq/0/nr_reserved_tags\x00', 0x101000, 0x0) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r1, 0x40046109, &(0x7f0000002c40)=0xd0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={"a2e88999", 0x7fff, 0x0, 0x2, 0x9, 0x10000, "7207661b123ebfab150d5b41ec06a2", "daa98e20", "930a0c1a", "310f5514", ["f1448f541c30b99a96561625", "229d96ef5eac0e1bdb7b7eda", "105d6dc99314e86c9f351da7", "77ea06a4b734ff1c8eb66fe0"]}) mmap$auto(0x0, 0x8, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r2 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x6, 0x0) semctl$auto(0x1009, 0x806, 0x13, 0x6) setsockopt$auto(0x3, 0x29, 0x40, 0x0, 0x10001) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/9, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00y\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fddbdf251200000004002d014f00bd0094bac097ab0e2bf60e67c3fdc6ef6ecab3fcad2f587ffe3070a455902946bd5266924d401c90292737150440a1f7f28c279119b82af5c17b22b2ca13cb3d548f5fd1a336c6129830be536c00"], 0x68}, 0x1, 0x0, 0x0, 0x20004894}, 0x40000000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f00000005c0)={0xc, 0x0, r0}) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000600)=""/78, 0x4e) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000580), r2) statmount$auto(&(0x7f0000000280)={0x0, 0x7ff, 0x89, 0x80000001, 0x4}, &(0x7f0000000300)={0x7, 0x5, 0x3, 0x3, 0x80, 0x8, 0xf, 0x4, 0x69a, 0x7, 0xfffffff9, 0xfd1, 0x5, 0xb47, 0x1000000000000001, 0x9, 0x9, 0x6, 0xfff, 0x8, 0x47, 0x0, 0x3c, 0x6, 0x2, 0x4, [0x5, 0x7, 0x8, 0x2, 0x7, 0x5, 0x0, 0xffffffffaebc0f45, 0x0, 0x10000, 0x9, 0x1, 0x7fffffffffffffff, 0x1, 0x3, 0x4, 0x0, 0x62401c35, 0xbc, 0x0, 0x10001, 0x3, 0x9, 0x3, 0x0, 0x0, 0x5, 0x9, 0x1, 0x401, 0x20000000009, 0x7ff, 0x4, 0x6, 0x4, 0x81, 0x6, 0x69d6, 0x6, 0x2, 0x80, 0xa, 0x1, 0xa, 0x2], "5a5dfbdfe17d6e19f731ab61c71718d72d245ddfa93338b2743bf3e3f6fb354e54162848354f62d87c8a396e464a35becdb76e0a3edf8ec163f576c7ed5e944894767e03eabe81e568eb900685a34f1e5444f781ca01253a4bd84c46c5e2963fe3b4eea24f5d16de382f59822066fab0cf6bdd58f75f"}, 0x401, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) setsockopt$auto(0x4, 0x0, 0x8, 0xfffffffffffffffe, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), r5) sendmsg$auto_NFSD_CMD_THREADS_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r6, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) fsync$auto(r3) 2.875439588s ago: executing program 1 (id=550): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000003680)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(r5, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="210029bd7000fddbdf251c000000080050800400400008000300", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x890) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) close_range$auto(r2, r2, 0x81) socket(0x10, 0x2, 0x0) (async) r8 = socket(0x10, 0x2, 0x0) r9 = socket(0x2, 0x5, 0x0) r10 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000001c0), r8) sendmsg$auto_IEEE802154_SCAN_REQ(r9, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r10, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$auto_IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r10, 0x511, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x48}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x5}]}, 0x2c}}, 0x0) sendmsg$auto_NL80211_CMD_START_NAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2573000000a600d70055c6bac7b56c9be953e6eb9bebad98620bdfedd8372a924e12719013fbe3349b06c462139632d35d71d716cf0a172eab5506fbdbd8181e58c85cc9fabb29b00aca79afef9253a5481eef0310c622f00de7b716746d0204a00a47571b276471e1e98f956b7aa4d454d2289422a29199998cd069cc7a7ce8d31e243e3216724688e5d2d51edf04556c3d13f7f845401a194dd0d46e401c82c70819f342a805be4392b8000008000300", @ANYRES32=r7], 0xcc}, 0x1, 0x0, 0x0, 0x14}, 0x20000) (async) sendmsg$auto_NL80211_CMD_START_NAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2573000000a600d70055c6bac7b56c9be953e6eb9bebad98620bdfedd8372a924e12719013fbe3349b06c462139632d35d71d716cf0a172eab5506fbdbd8181e58c85cc9fabb29b00aca79afef9253a5481eef0310c622f00de7b716746d0204a00a47571b276471e1e98f956b7aa4d454d2289422a29199998cd069cc7a7ce8d31e243e3216724688e5d2d51edf04556c3d13f7f845401a194dd0d46e401c82c70819f342a805be4392b8000008000300", @ANYRES32=r7], 0xcc}, 0x1, 0x0, 0x0, 0x14}, 0x20000) 2.693296299s ago: executing program 0 (id=552): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000005680)='/sys/kernel/debug/tracing/set_event\x00', 0x8000, 0x0) read$auto(r0, 0x0, 0x2) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r1 = socket(0x10, 0x2, 0x4) (async) move_pages$auto(0x0, 0x454, &(0x7f0000000580)=&(0x7f00000001c0)=[0xfffffffffffffffd], 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x4, 0xeb1, 0xfffffffffffffffa, 0x2) (async, rerun: 32) r2 = socket(0x10, 0x800, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) r3 = getuid() statx$auto(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x3, 0x8, &(0x7f0000000300)={0x6, 0x2, 0x1, 0x9, r3, 0xee00, 0x800, 0x1000, 0x1, 0x80000001, 0x4, 0x7, {0x7, 0xa9}, {0xf4}, {0x5, 0x3}, {0x3, 0x2}, 0xce, 0x0, 0x8, 0x8, 0x1, 0x7, 0x10001, 0xd8fe, 0x2, 0xfff, 0x3, 0x6, [0xffffffffffff7e02, 0x2, 0x0, 0x8001, 0x2, 0x6, 0xffffffffffffffff, 0x6, 0x8]}) (async) lstat$auto(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x8, 0x3, 0x6, 0x80000000, 0x0, 0xee00, 0x0, 0x2, 0x101, 0x8, 0x0, 0x1, 0x1, 0xadf8, 0x6, 0x271, 0xa45a}) fstat$auto(r2, &(0x7f00000006c0)={0x5, 0xfffffffffffffffb, 0x10000, 0x4, r3, r4, 0x0, 0x3, 0x9, 0x0, 0x90, 0x100000001, 0x8, 0x2, 0x401, 0x0, 0xa}) (async) read$auto(0x3, 0x0, 0x7) (async) r5 = socket(0xa, 0x3, 0x106) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) memfd_create$auto(&(0x7f0000000040)='&}\x00', 0x80000) (async) socket(0xa, 0x3, 0x6) (async) socket(0x1, 0x1, 0x1) shutdown$auto(r5, 0xfffffd8d) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r5) r8 = getpid() process_vm_readv$auto(r8, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) (async) capset$auto(&(0x7f0000000100)={0x3, 0xffffffffffffffff}, &(0x7f0000000140)={0x1, 0xfaea, 0x6b0}) r10 = getpgid(0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, r10, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r10, 0x0, 0x401, 0x5, 0x3}}}) (async) sendmsg$auto_NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="78030000", @ANYRES16=r7, @ANYBLOB="00002dbd7000fcdbdf251300000059032d80d0eed5bf196e04668660cc6ab3d475559c718f4b5bcb97dddcd0497fae561a4992e45c6ed068e5b39cfbfa89e1586ef3174872cc5513628e7d8aa074a22778206fa95ce4412404670947746ec2f96804962b1151ee43905c265a8a5f40a19fe98b427dee4f9ed68968c3e069666df30040190404cb014917217eba08007900", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="08002b002cedc7b473ce1f46e1bbd30139d3b064b92ddf949611e59b047632183069730ef01224a0749ad288a2858b35851a4edf6b919eee4b792ee919a49f7f34ef306be4a7df654ecf7fc5e9a8fc83b8daf6a328f900d4eee182a57589474ac20563bd2942ba2f2cae0d183d968772f3891e982d17414c022e4ecc98c5bba45dff6543018e775abf81aba0537697c4183fe9305cafc90dcc05631b44462314bcd7490eb01b088305354989b7ba26d6b465f788e2bafee0b15f6cae08a0de12b4028ee4839309a43fd95b56f0bc9910307f8234c52478b4baa198811cdb6ca13f03efa7d3fbe9a8d991677122dcca8907a80e15698f56245eb9e50465c740adaf69756b470d00009effeecbee516153b6cc3178154d71ded34a2cefb0b9f5cfc822b06821bedf56ad09f999d8f429b09049057157e67a7cab3e905d2ce48b110c5ecbfdf27fd6a0dc05059f54325da7298000df17a03cad772a32085171a412b65d23429e8c560000000000003de118479ec5bb52daf38bdfe931000000000000000000000646f528e0fbde5840cc243796f5bcd4fae34e0b25d3146d1a2ef6d3b874a2b12eccc1128975e96a80d21c24573f485f3f93caa0c3d24962ebd98a5d2bbe5e9878182ab22aeeb211d39a520956f1f0712531737f24021d6449da393a05ce5194bf97", @ANYRES32=r9, @ANYBLOB='\b\x00r\x00', @ANYRES32=r10, @ANYBLOB="f72b3430c88d4d7bcafc2c07386f21c1036663b363c88290978d9d01e0c271057d772f7d7bb5e0a792de31550424073f0059e644589c1945733efea10000000500070003000000"], 0x378}, 0x1, 0x0, 0x0, 0x4}, 0x8001) (async, rerun: 32) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0) (rerun: 32) 2.633197108s ago: executing program 1 (id=553): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) clock_gettime$auto(0x1, 0x0) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon1\x00', 0x4ad03, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/001/001\x00', 0x8800, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={0x0, 0x821, 0x1}) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000040)=0x4, 0x6, 0xfffffff1}) open(0x0, 0x22240, 0x155) socket(0x2, 0x6, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x6b) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) connect$auto(r0, 0x0, 0x55) 2.479182206s ago: executing program 5 (id=554): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0x1010, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) ioctl$auto(0x3, 0x541b, 0x10000000000402) 2.424102892s ago: executing program 1 (id=555): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0x1010, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) ioctl$auto(0x3, 0x541b, 0x10000000000402) 2.27312985s ago: executing program 0 (id=557): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000100)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x844}, 0x20000000) 2.100381341s ago: executing program 0 (id=559): socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) mlockall$auto(0x3) socket(0x2, 0x801, 0x106) io_uring_setup$auto(0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r0) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110b27f27200fbdbdf250c00000008000300", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x9800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) munmap$auto(0x5, 0x3) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/ptp/ptp0/n_programmable_pins\x00', 0x200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000140)=""/12, 0xc) memfd_create$auto(&(0x7f0000000000)='\x00', 0x4) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) mmap$auto(0x8000000, 0x8, 0x1000000016, 0x13, 0x3, 0x180000000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) 1.913616113s ago: executing program 5 (id=560): mlockall$auto(0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r2 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x1ff, r2, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000000c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0x91) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/buddyinfo\x00', 0x80, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) statx$auto(r5, 0x0, 0x1003, 0x4005, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2) r6 = socket(0x11, 0x3, 0x2) getsockopt$auto(r6, 0x107, 0xb, 0x0, 0x0) 1.704430553s ago: executing program 1 (id=561): mkdir$auto(&(0x7f0000000040)='./file0\x00', 0xcf18) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x20000, 0x0) poll$auto(&(0x7f0000001040)={r0, 0x6, 0xf4}, 0x5, 0x7fff) socketpair$auto(0x1e, 0x806, 0x4000, 0x0) r1 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x200082, 0x0) sendmmsg$auto(r1, 0x0, 0x80000401, 0xfffffffe) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) getsockopt$auto(r2, 0x29, 0x3b, 0x0, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) openat$auto_ftrace_formats_fops_trace_printk(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/printk_formats\x00', 0x109000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100085) r3 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) read$auto_mISDN_fops_timerdev(r3, &(0x7f0000000180)=""/211, 0xd3) ioctl$auto_IMADDTIMER(r3, 0x80044940, &(0x7f0000000140)=0x4) read$auto(r1, &(0x7f0000000080)='\xa3\xe6\x04(V\xac', 0x8) unshare$auto(0x40000080) 1.499448264s ago: executing program 5 (id=563): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x3, 0x6) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xc, 0x2, 0x8, 0x18, 0x5, 0x25) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r2, @ANYBLOB="110b27f27224c8dbdf250c00000008000300", @ANYRES32=r3], 0x24}}, 0x8040000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, r1) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x801, 0x100) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r4) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r6 = socket(0x10, 0x2, 0x4) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) getsockopt$auto(0x3, 0x6, 0x9, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 1.292387041s ago: executing program 4 (id=565): socket(0x1f, 0x2, 0x126) setsockopt$auto(0x3, 0x6, 0x21, 0x0, 0x10) r0 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f00000000c0), 0xb00, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000280)={0x1000, 0xfffffff4}) socket(0x1f, 0x2, 0x126) (async) setsockopt$auto(0x3, 0x6, 0x21, 0x0, 0x10) (async) openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f00000000c0), 0xb00, 0x0) (async) ioctl$auto_UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000280)={0x1000, 0xfffffff4}) (async) 1.173211068s ago: executing program 4 (id=566): socket(0x2, 0x801, 0x106) open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000001100), 0x42, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000011c0), 0x80, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0xe63e, 0x20) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) getsockname$auto(0x3, &(0x7f00000002c0), &(0x7f0000000180)=0x4) bind$auto(0x3, &(0x7f0000000000), 0x68) 1.098644588s ago: executing program 5 (id=567): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000100)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x844}, 0x20000000) 1.059200853s ago: executing program 4 (id=568): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01032bbd7000ffdbdf2522"], 0x14}, 0x1, 0x0, 0x0, 0x7}, 0x4010) socket(0x6, 0x5, 0x8) (async) socket(0x6, 0x5, 0x8) r2 = open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) write$auto(r2, &(0x7f0000000100)='%\t\x00*@,,,\xc6_X~\x0e\x00\xfd\xb6\x93\x8b\x87\x03 5\x91\xe5C\x13\x0f\xcc)j\xa6H\t\v>q;\xf2\xa6&|\xe5~\xf9K\x91\xb9U$>\xa6kdIY\xc0\n/Y\xb1lJ\xd9\x8cj\xa3\xe5\xd3*\xd4N\xc6\x02\xb9x8\x8b}\xbc\xa3\xbb\xb8\xeb\"\xe70[i\x87pi\x7f\x88\x1d\x93 @\xa6j\xea\xb1o[\xc3\x05u\xdf\xde\x1e\x88v4\x97\x14\xad\xcf\x1f\xc3p\xd8\x1dK\v\x1f\x8c\x95\xfd', 0x101) (async) write$auto(r2, &(0x7f0000000100)='%\t\x00*@,,,\xc6_X~\x0e\x00\xfd\xb6\x93\x8b\x87\x03 5\x91\xe5C\x13\x0f\xcc)j\xa6H\t\v>q;\xf2\xa6&|\xe5~\xf9K\x91\xb9U$>\xa6kdIY\xc0\n/Y\xb1lJ\xd9\x8cj\xa3\xe5\xd3*\xd4N\xc6\x02\xb9x8\x8b}\xbc\xa3\xbb\xb8\xeb\"\xe70[i\x87pi\x7f\x88\x1d\x93 @\xa6j\xea\xb1o[\xc3\x05u\xdf\xde\x1e\x88v4\x97\x14\xad\xcf\x1f\xc3p\xd8\x1dK\v\x1f\x8c\x95\xfd', 0x101) close_range$auto(0x2, 0x8, 0x0) execve$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) execve$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket(0x2, 0x5, 0x0) (async) socket(0x2, 0x5, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x44048000) 935.079669ms ago: executing program 5 (id=569): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) tee$auto(0x32c8, 0x7, 0x0, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x23, 0x2, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) mmap$auto(0x6, 0xe3, 0x2, 0x410, 0x4, 0x713fe1b9) ioctl$auto_RTC_SET_TIME(r0, 0x4024700a, 0x0) setsockopt$auto(r0, 0x7da0, 0x400, &(0x7f00000001c0)='*(\x00', 0x3) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x5, &(0x7f0000000040)=@task_fd_query={0x2, 0x2, 0x8, 0x0, 0xd, 0x6, 0xffffffffffffffff, 0x6, 0x8001}, 0x3b) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x28, r3, 0x301, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_OP={0x8, 0xa, 0x6}, @CTRL_ATTR_FAMILY_NAME={0xb, 0x2, 'TIPCv2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810) bpf$auto(0x5, &(0x7f0000000100)=@iter_create={r1}, 0x101) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) syz_clone(0x40100100, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000100)) mprotect$auto(0x0, 0x8000000000000001, 0x6) 772.318109ms ago: executing program 1 (id=570): times$auto(&(0x7f0000000000)={0x1, 0x7, 0x269a90ba, 0xfffffffffffffb9e}) (async) times$auto(&(0x7f0000000040)={0x8, 0x9, 0x2, 0x9}) (async, rerun: 64) times$auto(&(0x7f0000000080)={0x7, 0x5, 0x1ff, 0x5}) (async, rerun: 64) times$auto(&(0x7f00000000c0)={0x2, 0xded, 0x2, 0x8}) (async) times$auto(&(0x7f0000000100)={0x9, 0x8001, 0x3, 0x9}) times$auto(&(0x7f0000000140)={0x10, 0xffff, 0x8, 0x6}) (async, rerun: 64) times$auto(&(0x7f0000000180)={0x10000, 0x5, 0x5, 0xfffffffffffffff8}) (async, rerun: 64) times$auto(&(0x7f00000001c0)={0x5, 0x8, 0x7c, 0x7}) times$auto(&(0x7f0000000200)={0xb5, 0x8, 0x4, 0x5}) (async) times$auto(&(0x7f0000000240)={0xfffffffffffff001, 0xe, 0x9, 0xfffffffffffffc00}) times$auto(&(0x7f0000000280)={0x0, 0xd86, 0x10000, 0x8001}) times$auto(&(0x7f00000002c0)={0xffffffffffffff0d, 0x3, 0x9, 0xf}) (async) times$auto(&(0x7f0000000300)={0x5, 0x6, 0xfff, 0x2}) times$auto(&(0x7f0000000340)={0x0, 0x9, 0x2, 0x98ca}) (async) times$auto(&(0x7f0000000380)={0x1, 0x1, 0x800, 0x4}) (async) times$auto(&(0x7f00000003c0)={0x7fffffffffffffff, 0x3, 0x2, 0x893}) (async) times$auto(&(0x7f0000000400)={0x0, 0x798, 0x7, 0x80000001}) times$auto(&(0x7f0000000440)={0xffff, 0xb561, 0x6d, 0x4}) (async) times$auto(&(0x7f0000000480)={0x6, 0x5, 0x40, 0x59ec}) times$auto(&(0x7f00000004c0)={0x4, 0x5, 0x0, 0x8}) (async) times$auto(&(0x7f0000000500)={0x9, 0x9, 0x4, 0xaf}) times$auto(&(0x7f0000000540)={0x4, 0x800, 0x7, 0x101}) (async) times$auto(&(0x7f0000000580)={0x4, 0x685f, 0x5, 0x236}) (async) times$auto(&(0x7f00000005c0)={0xfffffffffffffffb, 0x9, 0x83b6e29, 0xf}) (async) times$auto(&(0x7f0000000600)={0x7, 0x7ff, 0x7a1, 0x6}) (async, rerun: 64) times$auto(&(0x7f0000000640)={0x6, 0x8, 0x7ff, 0xfffffffffffffffc}) (rerun: 64) times$auto(&(0x7f0000000680)={0x0, 0x4a, 0x2aaa1a5d, 0x6}) (async) times$auto(&(0x7f00000006c0)={0xcb000000000000, 0x8, 0x2, 0x3}) (async) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/debug/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x2a02, 0x0) times$auto(&(0x7f0000000740)={0x9, 0x2, 0x8000, 0x1}) 677.186302ms ago: executing program 4 (id=571): mmap$auto(0x0, 0x4, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getpriority$auto(0x2, 0x7ff) socket$nl_generic(0x10, 0x3, 0x10) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x7f) mq_open$auto(0x0, 0xde8, 0xb, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB, @ANYBLOB="e26f"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mq_timedreceive$auto(0x4, 0x0, 0x7, 0x0, 0x0) 572.382944ms ago: executing program 4 (id=572): memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x4) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7fffffff, 0x5) socket$nl_generic(0x10, 0x3, 0x10) 560.807465ms ago: executing program 1 (id=573): mmap$auto(0x0, 0x2, 0x4000000000df, 0x10010, 0x405, 0x7fffffff) ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000000c0)={0xffffffffffffffff, 0x2, 0x2, 0x7e6909af}) getpid() r1 = gettid() kill$auto(r1, 0x11) statx$auto(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x3, 0xa2, &(0x7f0000000180)={0xc8, 0x3, 0x9, 0x80000001, 0x0, 0xee00, 0x9, 0x9, 0x4, 0x2, 0x2, 0x4, {0x5, 0x5}, {0x43, 0x2}, {0x9e, 0x7}, {0x9, 0xfffffffa}, 0x9, 0x6, 0x2, 0x6, 0xa, 0x5, 0x4, 0xec, 0x7, 0xd, 0x40, 0x8, [0xfffffffffffffff6, 0x7fffffffffffffff, 0x6, 0x1ff, 0x5, 0x0, 0x8000000000000001, 0x1000, 0x3]}) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x2, 0x0) read$auto_tomoyo_operations_securityfs_if(r2, 0x0, 0x0) openat$auto_fops_u16_(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/netdevsim/netdevsim5/psample/out_tc\x00', 0x0, 0x0) capset$auto(&(0x7f00000002c0)={0x3, 0xffffffffffffffff}, &(0x7f0000000300)={0x10000, 0x8000, 0x6}) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000480), r0) sendmsg$auto_NL80211_CMD_SET_BEACON(r0, &(0x7f0000000540)={&(0x7f0000000280), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r3, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_HE_OBSS_PD={0x14, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x2}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xf7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8044}, 0x80d5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptywa\x00', 0x400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0x1f40) write$auto(0x3, 0x0, 0xfdef) 396.841959ms ago: executing program 4 (id=574): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000500), r1) sendmsg$auto_IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x14ae4701}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40008000) mmap$auto(0x0, 0x20009, 0xdf, 0x90, 0x40000000000a5, 0x8000) clock_gettime$auto(0x1, 0x0) r3 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/smaps\x00', 0x101000, 0x0) mmap$auto(0x0, 0x11d, 0xdf, 0x2eb1, 0x401, 0x8000) read$auto_proc_pid_smaps_operations_internal(r3, &(0x7f0000000040)=""/93, 0x5d) rt_sigtimedwait$auto(&(0x7f0000000000)={0x45}, &(0x7f00000000c0)={@_si_pad}, &(0x7f0000000040)={0xffffffff, 0x8000}, 0x8) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x6, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x67) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) connect$auto(r0, 0x0, 0x55) 181.120779ms ago: executing program 5 (id=575): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0x0, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) landlock_add_rule$auto(0xf6, 0x3, 0x0, 0x6cf) (async) landlock_add_rule$auto(0xf6, 0x3, 0x0, 0x6cf) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x6, 0x1, 0x2a, &(0x7f00000003c0)='ns/cgroup\x00', 0xc) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x240400c4}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1700", @ANYBLOB="7f"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) getcwd$auto(0x0, 0xfffffffffffffff9) setxattr$auto(0x0, 0x0, 0x0, 0x0, 0x0) (async) setxattr$auto(0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x7, 0xc9e8, 0x8, 0x13, 0x4, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_setup$auto(0x1, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x40802, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) (async) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r5, 0x5459, 0x0) (async) ioctl$auto_TIOCGDEV2(r5, 0x5459, 0x0) 0s ago: executing program 0 (id=576): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) sysfs$auto(0x2, 0x100000000000027, 0x0) fsopen$auto(0x0, 0x1) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f00000000c0), 0x55) bind$auto(0x3, &(0x7f0000000040), 0x69) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x80002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000000), r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.174' (ED25519) to the list of known hosts. [ 65.867597][ T5816] cgroup: Unknown subsys name 'net' [ 66.021221][ T5816] cgroup: Unknown subsys name 'cpuset' [ 66.029597][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.404239][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.113606][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.122186][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.131362][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.153606][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.161507][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.176480][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.178557][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.193362][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.194395][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.201665][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.208238][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.215858][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.223282][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.236067][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.236508][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.243644][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.251523][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.259016][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.265933][ T5838] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.272547][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.280043][ T5143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.295567][ T5143] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.304284][ T5143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.307154][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.636778][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 69.732504][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 69.759928][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 69.802257][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.810422][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.817783][ T5826] bridge_slave_0: entered allmulticast mode [ 69.824399][ T5826] bridge_slave_0: entered promiscuous mode [ 69.851743][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 69.860701][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.867969][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.875128][ T5826] bridge_slave_1: entered allmulticast mode [ 69.881985][ T5826] bridge_slave_1: entered promiscuous mode [ 69.937014][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.950617][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.989066][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.996262][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.003504][ T5827] bridge_slave_0: entered allmulticast mode [ 70.010657][ T5827] bridge_slave_0: entered promiscuous mode [ 70.037303][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.046146][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.054022][ T5827] bridge_slave_1: entered allmulticast mode [ 70.060928][ T5827] bridge_slave_1: entered promiscuous mode [ 70.081453][ T5826] team0: Port device team_slave_0 added [ 70.101845][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.109062][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.116172][ T5828] bridge_slave_0: entered allmulticast mode [ 70.123567][ T5828] bridge_slave_0: entered promiscuous mode [ 70.131708][ T5826] team0: Port device team_slave_1 added [ 70.137601][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.144734][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.151936][ T5828] bridge_slave_1: entered allmulticast mode [ 70.158874][ T5828] bridge_slave_1: entered promiscuous mode [ 70.205808][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.215851][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.223525][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.231194][ T5825] bridge_slave_0: entered allmulticast mode [ 70.238336][ T5825] bridge_slave_0: entered promiscuous mode [ 70.245822][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.252814][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.278858][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.298993][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.323463][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.331090][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.339030][ T5825] bridge_slave_1: entered allmulticast mode [ 70.345620][ T5825] bridge_slave_1: entered promiscuous mode [ 70.353007][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.362603][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.389021][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.401862][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.413658][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.425561][ T5827] team0: Port device team_slave_0 added [ 70.436300][ T5827] team0: Port device team_slave_1 added [ 70.486000][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.498606][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.524348][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.532574][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.558859][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.587164][ T5828] team0: Port device team_slave_0 added [ 70.595586][ T5828] team0: Port device team_slave_1 added [ 70.604188][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.611375][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.637607][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.667332][ T5825] team0: Port device team_slave_0 added [ 70.690124][ T5826] hsr_slave_0: entered promiscuous mode [ 70.696532][ T5826] hsr_slave_1: entered promiscuous mode [ 70.705926][ T5825] team0: Port device team_slave_1 added [ 70.749917][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.756904][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.783669][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.801105][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.808213][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.834957][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.855271][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.862468][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.888545][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.906388][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.913476][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.939615][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.967512][ T5827] hsr_slave_0: entered promiscuous mode [ 70.976402][ T5827] hsr_slave_1: entered promiscuous mode [ 70.982841][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.990936][ T5827] Cannot create hsr debugfs directory [ 71.051984][ T5825] hsr_slave_0: entered promiscuous mode [ 71.059610][ T5825] hsr_slave_1: entered promiscuous mode [ 71.065577][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.073461][ T5825] Cannot create hsr debugfs directory [ 71.099279][ T5828] hsr_slave_0: entered promiscuous mode [ 71.106131][ T5828] hsr_slave_1: entered promiscuous mode [ 71.112447][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.120674][ T5828] Cannot create hsr debugfs directory [ 71.298237][ T5830] Bluetooth: hci3: command tx timeout [ 71.298248][ T5833] Bluetooth: hci0: command tx timeout [ 71.337728][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.363433][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.373388][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.382296][ T5830] Bluetooth: hci2: command tx timeout [ 71.382304][ T5833] Bluetooth: hci1: command tx timeout [ 71.407214][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.446779][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.471455][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.489640][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.511586][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.541843][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.564926][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.593251][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.605770][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.631352][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.641142][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.657137][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.682080][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.703044][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.710102][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.804604][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.825674][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.873156][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.882120][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.904561][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.919160][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.926445][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.939698][ T4522] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.946810][ T4522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.973200][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.982767][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.989876][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.001646][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.028519][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.035626][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.044985][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.052455][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.075166][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.082291][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.119371][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.162901][ T4522] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.170052][ T4522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.224546][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.231698][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.416325][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.512555][ T5827] veth0_vlan: entered promiscuous mode [ 72.554986][ T5827] veth1_vlan: entered promiscuous mode [ 72.616575][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.632216][ T5827] veth0_macvtap: entered promiscuous mode [ 72.642294][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.660317][ T5827] veth1_macvtap: entered promiscuous mode [ 72.687535][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.726808][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.746506][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.760143][ T5828] veth0_vlan: entered promiscuous mode [ 72.788408][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.797335][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.809137][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.819258][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.834719][ T5828] veth1_vlan: entered promiscuous mode [ 72.849979][ T5826] veth0_vlan: entered promiscuous mode [ 72.886120][ T5825] veth0_vlan: entered promiscuous mode [ 72.898559][ T5826] veth1_vlan: entered promiscuous mode [ 72.909861][ T5825] veth1_vlan: entered promiscuous mode [ 72.943619][ T5828] veth0_macvtap: entered promiscuous mode [ 72.985534][ T5828] veth1_macvtap: entered promiscuous mode [ 73.001881][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.005642][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.020737][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.033675][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.045375][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.083588][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.094146][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.105656][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.120738][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.129594][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.139922][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.149509][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.169722][ T5826] veth0_macvtap: entered promiscuous mode [ 73.179846][ T5825] veth0_macvtap: entered promiscuous mode [ 73.188212][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.196992][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.211553][ T5825] veth1_macvtap: entered promiscuous mode [ 73.223514][ T5826] veth1_macvtap: entered promiscuous mode [ 73.253467][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.266810][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.277528][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.288651][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.300949][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.320778][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.346776][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.358892][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.369543][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.380197][ T5830] Bluetooth: hci0: command tx timeout [ 73.385961][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.396313][ T5830] Bluetooth: hci3: command tx timeout [ 73.401662][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.414025][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.424898][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.445455][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.458091][ T5833] Bluetooth: hci1: command tx timeout [ 73.463731][ T5830] Bluetooth: hci2: command tx timeout [ 73.473223][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.508383][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.519387][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.530461][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.544979][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.556642][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.567217][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.578031][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.588397][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.599198][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.610787][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.622203][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.631050][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.639855][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.648726][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.690347][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.705420][ T4522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.718088][ T5825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.726833][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.740702][ T5825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.748194][ T4522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.893543][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.919389][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.933587][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.943522][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.023836][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.032918][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.099769][ T3117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.107605][ T3117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.223055][ T3117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.258264][ T3117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.611071][ T5905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7'. [ 75.468189][ T5830] Bluetooth: hci3: command tx timeout [ 75.472050][ T5833] Bluetooth: hci0: command tx timeout [ 75.538163][ T5833] Bluetooth: hci2: command tx timeout [ 75.538422][ T5830] Bluetooth: hci1: command tx timeout [ 75.808444][ T5913] Zero length message leads to an empty skb [ 76.441413][ T5916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10'. [ 76.528355][ T5916] veth0_macvtap: left promiscuous mode [ 76.577985][ T5916] macvtap0: entered allmulticast mode [ 77.537848][ T5830] Bluetooth: hci0: command tx timeout [ 77.548821][ T5830] Bluetooth: hci3: command tx timeout [ 77.619204][ T5830] Bluetooth: hci2: command tx timeout [ 77.624677][ T5830] Bluetooth: hci1: command tx timeout [ 79.782945][ T5943] netlink: 342 bytes leftover after parsing attributes in process `syz.3.15'. [ 80.982783][ T5984] bridge0: port 3(hsr0) entered blocking state [ 80.990776][ T5984] bridge0: port 3(hsr0) entered disabled state [ 80.997149][ T5984] hsr0: entered allmulticast mode [ 81.003848][ T5984] hsr_slave_0: entered allmulticast mode [ 81.013977][ T5984] hsr_slave_1: entered allmulticast mode [ 81.025273][ T5984] hsr0: entered promiscuous mode [ 81.045054][ T5984] bridge0: port 3(hsr0) entered blocking state [ 81.051669][ T5984] bridge0: port 3(hsr0) entered forwarding state [ 81.990155][ T46] cfg80211: failed to load regulatory.db [ 82.783039][ T6012] kernel read not supported for file /#)-\&[} (pid: 6012 comm: syz.3.32) [ 82.784951][ T29] audit: type=1804 audit(1734107651.056:2): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.32" name="#)-\&[}" dev="mqueue" ino=7762 res=1 errno=0 [ 82.867832][ T29] audit: type=1800 audit(1734107651.116:3): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.32" name="#)-\&[}" dev="mqueue" ino=7762 res=0 errno=0 [ 82.918001][ T29] audit: type=1804 audit(1734107651.126:4): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.32" name="#)-\&[}" dev="mqueue" ino=7762 res=1 errno=0 [ 82.957980][ T29] audit: type=1804 audit(1734107651.126:5): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.32" name="#)-\&[}" dev="mqueue" ino=7762 res=1 errno=0 [ 82.984996][ T29] audit: type=1800 audit(1734107651.216:6): pid=6011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.31" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 84.803548][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'. [ 85.435139][ T6045] netlink: 7 bytes leftover after parsing attributes in process `syz.3.35'. [ 85.444416][ T6045] netlink: 7 bytes leftover after parsing attributes in process `syz.3.35'. [ 85.773679][ T6068] bridge0: port 3(macvlan0) entered blocking state [ 85.816825][ T6068] bridge0: port 3(macvlan0) entered disabled state [ 85.847636][ T6068] macvlan0: entered allmulticast mode [ 85.898991][ T6068] veth1_vlan: entered allmulticast mode [ 85.917328][ T6068] macvlan0: entered promiscuous mode [ 85.951352][ T6068] bridge0: port 3(macvlan0) entered blocking state [ 85.958059][ T6068] bridge0: port 3(macvlan0) entered forwarding state [ 86.064083][ T6068] netlink: 28 bytes leftover after parsing attributes in process `syz.2.42'. [ 86.674336][ T6088] process 'syz.3.44' launched ':,' with NULL argv: empty string added [ 86.740462][ T6088] Process accounting resumed [ 87.482344][ T6094] netlink: 28 bytes leftover after parsing attributes in process `syz.3.46'. [ 87.501798][ T6094] bridge_slave_1: left allmulticast mode [ 87.514351][ T6094] bridge_slave_1: left promiscuous mode [ 87.525173][ T6094] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.602387][ T6094] bridge_slave_0: left allmulticast mode [ 87.622826][ T6094] bridge_slave_0: left promiscuous mode [ 87.634434][ T6094] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.441556][ T6110] bridge0: port 3(batadv0) entered blocking state [ 88.458610][ T6110] bridge0: port 3(batadv0) entered disabled state [ 88.472996][ T6110] batadv0: entered allmulticast mode [ 88.498677][ T6110] batadv0: entered promiscuous mode [ 88.518289][ T6110] bridge0: port 3(batadv0) entered blocking state [ 88.524825][ T6110] bridge0: port 3(batadv0) entered forwarding state [ 88.698234][ T35] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 88.707961][ T35] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 89.188381][ T6130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.55'. [ 90.736329][ T6151] futex_wake_op: syz.1.61 tries to shift op by 64; fix this program [ 96.210814][ T6245] netlink: 330 bytes leftover after parsing attributes in process `syz.2.80'. [ 96.270157][ T6224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.75'. [ 96.294446][ T6244] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.311250][ T6224] batadv0: left allmulticast mode [ 96.321269][ T6224] batadv0: left promiscuous mode [ 96.326438][ T6224] bridge0: port 3(batadv0) entered disabled state [ 96.408614][ T6224] bridge_slave_1: left allmulticast mode [ 96.423465][ T6224] bridge_slave_1: left promiscuous mode [ 96.445229][ T6224] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.455457][ T6250] aoe: invalid device specification [ 96.466294][ T6224] bridge_slave_0: left allmulticast mode [ 96.473446][ T6224] bridge_slave_0: left promiscuous mode [ 96.481164][ T6224] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.655182][ T6256] mmap: syz.2.84 (6256) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 98.012224][ T6300] netlink: zone id is out of range [ 98.035181][ T6300] netlink: zone id is out of range [ 98.056266][ T6300] netlink: zone id is out of range [ 98.061866][ T6300] netlink: zone id is out of range [ 98.067109][ T6300] netlink: zone id is out of range [ 98.077236][ T6300] netlink: zone id is out of range [ 98.087970][ T6300] netlink: zone id is out of range [ 98.096427][ T6300] netlink: zone id is out of range [ 98.110443][ T6300] netlink: set zone limit has 4 unknown bytes [ 99.854876][ T6376] program syz.0.112 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.974476][ T6367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.109'. [ 101.475473][ T6396] netlink: 28 bytes leftover after parsing attributes in process `syz.3.119'. [ 101.486372][ T6396] lo: entered promiscuous mode [ 101.497940][ T6396] lo: entered allmulticast mode [ 101.748293][ T6406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.121'. [ 101.902164][ T6406] veth1_macvtap: left promiscuous mode [ 102.528169][ T6429] netlink: 'syz.3.129': attribute type 4 has an invalid length. [ 102.642339][ T6416] syz.1.126 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 102.653298][ T6430] netlink: 'syz.3.129': attribute type 4 has an invalid length. [ 102.698036][ T6433] netlink: 'syz.3.129': attribute type 4 has an invalid length. [ 103.209584][ T6438] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.118455][ T6505] netlink: 24 bytes leftover after parsing attributes in process `syz.0.146'. [ 106.824888][ T6525] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 107.304709][ T6536] : entered promiscuous mode [ 108.013328][ T6331] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.187560][ T6331] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.316849][ T6331] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.458893][ T6331] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.928521][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.162'. [ 108.967335][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.976502][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.985564][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.995060][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 109.005933][ T5830] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 109.013698][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 109.898367][ T6331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.921041][ T6331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.952655][ T6331] bond0 (unregistering): Released all slaves [ 109.987030][ T6580] netlink: 350 bytes leftover after parsing attributes in process `syz.1.165'. [ 111.001245][ T6331] hsr_slave_0: left promiscuous mode [ 111.012037][ T6331] hsr_slave_1: left promiscuous mode [ 111.048035][ T6331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.063974][ T6331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.081711][ T6331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.089385][ T5830] Bluetooth: hci3: command tx timeout [ 111.114826][ T6331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.169087][ T6331] veth1_macvtap: left promiscuous mode [ 111.176091][ T6331] veth0_macvtap: left promiscuous mode [ 111.182937][ T6331] veth1_vlan: left promiscuous mode [ 111.188714][ T6331] veth0_vlan: left promiscuous mode [ 111.656660][ T6331] team0 (unregistering): Port device team_slave_1 removed [ 111.699423][ T6331] team0 (unregistering): Port device team_slave_0 removed [ 112.195046][ T6570] chnl_net:caif_netlink_parms(): no params data found [ 112.246391][ T6643] netlink: 252 bytes leftover after parsing attributes in process `syz.2.174'. [ 112.482400][ T6570] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.511917][ T6570] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.530592][ T6570] bridge_slave_0: entered allmulticast mode [ 112.553904][ T6570] bridge_slave_0: entered promiscuous mode [ 112.579717][ T6570] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.614090][ T6570] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.626115][ T6570] bridge_slave_1: entered allmulticast mode [ 112.657207][ T6570] bridge_slave_1: entered promiscuous mode [ 112.740339][ T6570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.760194][ T6570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.810334][ T6676] nbd: couldn't find a device at index -4 [ 113.049396][ T6570] team0: Port device team_slave_0 added [ 113.068634][ T6570] team0: Port device team_slave_1 added [ 113.139376][ T5830] Bluetooth: hci3: command tx timeout [ 113.318286][ T6570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.338623][ T6570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.397811][ T6570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.418468][ T6570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.425694][ T6570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.477800][ T6570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.578639][ T6570] hsr_slave_0: entered promiscuous mode [ 113.597530][ T6570] hsr_slave_1: entered promiscuous mode [ 113.610172][ T6570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.627803][ T6570] Cannot create hsr debugfs directory [ 113.978092][ T6570] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 114.010272][ T6570] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 114.056749][ T6570] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 114.138173][ T6570] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.234035][ T6570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.252343][ T6570] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.266501][ T6331] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.273725][ T6331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.284625][ T6331] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.291819][ T6331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.356221][ T6570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.766518][ T6570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.218026][ T5830] Bluetooth: hci3: command tx timeout [ 115.414244][ T6570] veth0_vlan: entered promiscuous mode [ 115.439635][ T6570] veth1_vlan: entered promiscuous mode [ 115.506701][ T6570] veth0_macvtap: entered promiscuous mode [ 115.537356][ T6570] veth1_macvtap: entered promiscuous mode [ 115.574198][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.600031][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.628155][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.647857][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.673690][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.699650][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.714527][ T6570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.760217][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.791932][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.812416][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.828500][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.849618][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.867493][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.884927][ T6570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.916913][ T6570] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.926839][ T6570] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.936317][ T6570] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.946466][ T6570] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.012926][ T6749] svc: failed to register nfsdv3 RPC service (errno 111). [ 116.079351][ T6749] svc: failed to register nfsaclv3 RPC service (errno 111). [ 116.140865][ T6041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.153447][ T6041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.195659][ T6331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.210416][ T6331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.954545][ T6774] sd 0:0:1:0: PR command failed: 1026 [ 116.981338][ T6774] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 117.062368][ T6774] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 117.299381][ T5830] Bluetooth: hci3: command tx timeout [ 117.932515][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 118.062058][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 118.190117][ T6814] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 118.408152][ T29] audit: type=1800 audit(1734107695.652:7): pid=6822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.198" name="discovery_nqn" dev="configfs" ino=11724 res=0 errno=0 [ 119.752079][ T6869] ======================================================= [ 119.752079][ T6869] WARNING: The mand mount option has been deprecated and [ 119.752079][ T6869] and is ignored by this kernel. Remove the mand [ 119.752079][ T6869] option from the mount to silence this warning. [ 119.752079][ T6869] ======================================================= [ 120.972395][ T6918] netlink: 'syz.1.218': attribute type 27 has an invalid length. [ 120.980651][ T6918] netlink: 334 bytes leftover after parsing attributes in process `syz.1.218'. [ 122.900737][ T6967] svc: failed to register nfsdv3 RPC service (errno 111). [ 122.934858][ T6967] svc: failed to register nfsaclv3 RPC service (errno 111). [ 123.533019][ T6984] Process accounting resumed [ 123.730287][ T6991] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 126.308068][ T7024] netlink: 350 bytes leftover after parsing attributes in process `syz.0.244'. [ 130.297591][ T7125] netlink: 7 bytes leftover after parsing attributes in process `syz.0.261'. [ 130.337938][ T7125] netlink: 7 bytes leftover after parsing attributes in process `syz.0.261'. [ 133.150098][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.157224][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.175890][ T7289] netlink: 342 bytes leftover after parsing attributes in process `syz.2.294'. [ 135.830036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 136.218245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 136.557975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 136.618140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 136.626467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 136.635120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 136.768601][ T7326] syz.0.301 uses obsolete (PF_INET,SOCK_PACKET) [ 136.834390][ T7326] nfsd: Unknown parameter '' [ 138.636874][ T7381] raw_sendmsg: syz.0.310 forgot to set AF_INET. Fix it! [ 139.425531][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 139.437055][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 139.476084][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 139.485495][ T7407] snd_virmidi snd_virmidi.0: control 3:6:8:Dž:24578 is already present [ 139.498411][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 139.506233][ T5143] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 139.514324][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 139.872567][ T7402] chnl_net:caif_netlink_parms(): no params data found [ 140.148363][ T7428] netlink: 36 bytes leftover after parsing attributes in process `syz.0.320'. [ 140.322657][ T7402] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.350469][ T7402] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.377834][ T7402] bridge_slave_0: entered allmulticast mode [ 140.394992][ T7402] bridge_slave_0: entered promiscuous mode [ 140.415768][ T7402] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.458587][ T7402] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.466126][ T7402] bridge_slave_1: entered allmulticast mode [ 140.500873][ T7402] bridge_slave_1: entered promiscuous mode [ 140.610132][ T7402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.635967][ T7402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.712448][ T7402] team0: Port device team_slave_0 added [ 140.731507][ T7402] team0: Port device team_slave_1 added [ 140.832736][ T7402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.856678][ T7402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.914538][ T7402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.939899][ T7402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.947819][ T7402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.977844][ T7402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.032341][ T7402] hsr_slave_0: entered promiscuous mode [ 141.041156][ T7402] hsr_slave_1: entered promiscuous mode [ 141.048078][ T7402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.056576][ T7402] Cannot create hsr debugfs directory [ 141.328565][ T7402] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 141.344056][ T7402] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 141.437424][ T7402] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 141.575642][ T7402] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 141.618117][ T5830] Bluetooth: hci2: command tx timeout [ 141.685659][ T7402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.704006][ T7402] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.745830][ T6041] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.753853][ T6041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.805109][ T6041] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.812329][ T6041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.852353][ T7402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.055988][ T7470] delete_channel: no stack [ 142.185401][ T7402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.380103][ T7484] netlink: 74 bytes leftover after parsing attributes in process `syz.1.334'. [ 142.830699][ T7402] veth0_vlan: entered promiscuous mode [ 142.863428][ T7402] veth1_vlan: entered promiscuous mode [ 142.913695][ T7497] netlink: 28 bytes leftover after parsing attributes in process `syz.1.335'. [ 142.941247][ T7402] veth0_macvtap: entered promiscuous mode [ 142.970211][ T7402] veth1_macvtap: entered promiscuous mode [ 143.018484][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.051579][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.069217][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.085626][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.097098][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.115367][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.125702][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.142729][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.156509][ T7402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.191962][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.212979][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.233275][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.251783][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.278049][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.293812][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.311231][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.335334][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.348566][ T7402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.397564][ T7402] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.418454][ T7402] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.427212][ T7402] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.444855][ T7402] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.605167][ T6041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.646016][ T6041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.696397][ T6325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.704971][ T5830] Bluetooth: hci2: command tx timeout [ 143.761983][ T6325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.777814][ T5830] Bluetooth: hci2: command tx timeout [ 146.602314][ T7574] netlink: 330 bytes leftover after parsing attributes in process `syz.1.354'. [ 147.858203][ T5830] Bluetooth: hci2: command tx timeout [ 150.679839][ T7636] netlink: 'syz.0.367': attribute type 1 has an invalid length. [ 152.099947][ T7661] netlink: 342 bytes leftover after parsing attributes in process `syz.4.374'. [ 152.147111][ T7661] netlink: 342 bytes leftover after parsing attributes in process `syz.4.374'. [ 157.852625][ T7770] netlink: 342 bytes leftover after parsing attributes in process `syz.0.403'. [ 158.852274][ T7796] netlink: 'syz.4.409': attribute type 1 has an invalid length. [ 159.078643][ T7804] netlink: 'syz.0.411': attribute type 1 has an invalid length. [ 159.568966][ T7812] syz.1.415(7812): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 167.051656][ T7949] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 167.352957][ T7949] CIFS mount error: No usable UNC path provided in device string! [ 167.352957][ T7949] [ 167.446496][ T7949] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 168.629378][ T7987] netlink: 28 bytes leftover after parsing attributes in process `syz.5.465'. [ 170.344029][ T8035] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 171.170938][ T8050] netlink: 330 bytes leftover after parsing attributes in process `syz.5.484'. [ 172.345592][ T8090] netlink: 206 bytes leftover after parsing attributes in process `syz.4.496'. [ 175.673066][ T29] audit: type=1800 audit(4294967335.910:8): pid=8167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.514" name="trace_pipe" dev="tracefs" ino=159 res=0 errno=0 [ 176.409450][ T8190] Invalid ELF header magic: != ELF [ 179.748391][ T8254] Process accounting resumed [ 179.771191][ T8254] kstrtoul() returned -22 for lu_gp_id [ 181.244980][ T8281] netlink: 146 bytes leftover after parsing attributes in process `syz.4.544'. [ 181.371265][ T29] audit: type=1800 audit(4294967341.610:9): pid=8282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.542" name="discovery_nqn" dev="configfs" ino=16630 res=0 errno=0 [ 181.686841][ T8291] capability: warning: `syz.0.547' uses 32-bit capabilities (legacy support in use) [ 181.961667][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.550'. [ 181.981576][ T8302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.550'. [ 181.981795][ T8301] netlink: 'syz.1.550': attribute type 11 has an invalid length. [ 182.016776][ T8299] netlink: 330 bytes leftover after parsing attributes in process `syz.0.549'. [ 182.020487][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.550'. [ 184.822982][ T8392] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 184.835628][ T8392] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 184.844082][ T8392] CPU: 0 UID: 0 PID: 8392 Comm: GC for TOMOYO Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 184.855059][ T8392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 184.865139][ T8392] RIP: 0010:tomoyo_gc_thread+0x1ab/0x1390 [ 184.870908][ T8392] Code: 8b 5a 47 fd c6 45 18 ff 4c 89 ee bf 09 00 00 00 e8 8a f1 ff ff e8 75 5a 47 fd 48 89 d8 48 89 de 49 89 dd 48 c1 e8 03 83 e6 07 <42> 0f b6 0c 20 48 8d 43 07 48 89 c2 48 c1 ea 03 42 0f b6 14 22 40 [ 184.890547][ T8392] RSP: 0018:ffffc90005ec7e78 EFLAGS: 00010246 [ 184.896619][ T8392] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8451e35b [ 184.904590][ T8392] RDX: ffff88806a9b5a00 RSI: 0000000000000000 RDI: 0000000000000001 [ 184.912563][ T8392] RBP: ffff8880249d3e80 R08: 0000000000000001 R09: 0000000000000000 [ 184.920537][ T8392] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 184.928508][ T8392] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802eb41100 [ 184.936488][ T8392] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 184.945424][ T8392] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.952041][ T8392] CR2: 000055558a447808 CR3: 000000006b3e8000 CR4: 00000000003526f0 [ 184.960019][ T8392] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 184.967988][ T8392] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 184.975959][ T8392] Call Trace: [ 184.979236][ T8392] [ 184.982169][ T8392] ? die_addr+0x3b/0xa0 [ 184.986332][ T8392] ? exc_general_protection+0x155/0x230 [ 184.991888][ T8392] ? asm_exc_general_protection+0x26/0x30 [ 184.997616][ T8392] ? tomoyo_gc_thread+0x17b/0x1390 [ 185.002766][ T8392] ? tomoyo_gc_thread+0x1ab/0x1390 [ 185.007903][ T8392] ? tomoyo_gc_thread+0x19b/0x1390 [ 185.013028][ T8392] ? __kthread_parkme+0x148/0x220 [ 185.018057][ T8392] ? __pfx_tomoyo_gc_thread+0x10/0x10 [ 185.023441][ T8392] kthread+0x2c1/0x3a0 [ 185.027515][ T8392] ? _raw_spin_unlock_irq+0x23/0x50 [ 185.032717][ T8392] ? __pfx_kthread+0x10/0x10 [ 185.037308][ T8392] ret_from_fork+0x45/0x80 [ 185.041726][ T8392] ? __pfx_kthread+0x10/0x10 [ 185.046315][ T8392] ret_from_fork_asm+0x1a/0x30 [ 185.051094][ T8392] [ 185.054107][ T8392] Modules linked in: [ 185.058888][ T8392] ---[ end trace 0000000000000000 ]--- [ 185.066480][ T8392] RIP: 0010:tomoyo_gc_thread+0x1ab/0x1390 [ 185.073800][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.576'. [ 185.123439][ T8392] Code: 8b 5a 47 fd c6 45 18 ff 4c 89 ee bf 09 00 00 00 e8 8a f1 ff ff e8 75 5a 47 fd 48 89 d8 48 89 de 49 89 dd 48 c1 e8 03 83 e6 07 <42> 0f b6 0c 20 48 8d 43 07 48 89 c2 48 c1 ea 03 42 0f b6 14 22 40 [ 185.145895][ T8392] RSP: 0018:ffffc90005ec7e78 EFLAGS: 00010246 [ 185.152335][ T8392] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8451e35b [ 185.162321][ T8392] RDX: ffff88806a9b5a00 RSI: 0000000000000000 RDI: 0000000000000001 [ 185.174800][ T8392] RBP: ffff8880249d3e80 R08: 0000000000000001 R09: 0000000000000000 [ 185.185895][ T8392] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 185.194965][ T8392] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802eb41100 [ 185.204995][ T8392] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 185.214507][ T8392] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.221799][ T8392] CR2: 0000001b2fe09ff8 CR3: 000000006dbd4000 CR4: 00000000003526f0 [ 185.230095][ T8392] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 185.238445][ T8392] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 185.246592][ T8392] Kernel panic - not syncing: Fatal exception [ 185.252968][ T8392] Kernel Offset: disabled [ 185.257284][ T8392] Rebooting in 86400 seconds..