last executing test programs: 3m34.06381988s ago: executing program 2 (id=1256): mmap$auto(0x0, 0x20009, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) pipe$auto(0x0) rseq$auto(0x0, 0x8002, 0x0, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x2010000000000) socket(0x26, 0x80805, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') socket(0x2, 0x1, 0x0) open(0x0, 0x161342, 0x100) mmap$auto(0x0, 0x200004, 0x4, 0x40eb1, 0x402, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) fanotify_init$auto(0x5, 0x2000000000002) socket(0x26, 0x80805, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') open(0x0, 0x4242, 0xe1d2b27bdc14aabc) open(0x0, 0x10677d, 0x37e5c9853cd1b999) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) close_range$auto(0x2, 0x8000, 0x0) 3m33.6928633s ago: executing program 2 (id=1261): close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket(0x2c, 0x3, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) socket(0xa, 0x2, 0x88) r0 = socket(0x11, 0x2, 0x4) bpf$auto(0x0, &(0x7f0000000000)=@iter_create={r0, 0x8}, 0xa3) 3m33.482579358s ago: executing program 2 (id=1263): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22242, 0x155) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0xfffffffffffffffe, 0x4000b, 0x8001, 0x10, 0xa3c6, 0xdc3) syz_genetlink_get_family_id$auto_IPVS(0x0, 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x646a8dac, 0x8, &(0x7f0000000040)=0x1000, 0x0, 0x4) 3m33.036952447s ago: executing program 2 (id=1265): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_VENDOR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x44040) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) fchdir$auto(0xf4400000000) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1213c0, 0xee) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x25, 0x800, 0x8) memfd_secret$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_MAC802154_HWSIM(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x84, 0xd, 0x0, &(0x7f0000000080)=0x9b) 3m32.702976746s ago: executing program 2 (id=1267): socket(0x18, 0xa, 0xc) tkill$auto(0x80000000000001, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_TASKSTATS(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TASKSTATS_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TASKSTATS_CMD_ATTR_PID={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x20011030) bind$auto(0x3, &(0x7f0000000000)={0x10, @sa_data_min="d059b8a5b5bce4bdf082c36111fd"}, 0xf) close_range$auto(0x2, 0x8000, 0x0) setreuid$auto(0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x280, 0x100) r3 = open(&(0x7f0000000040)='./file0\x00', 0x84c1, 0x0) poll$auto(&(0x7f00000000c0)={r2, 0xd, 0x9}, 0x10, 0x2) read$auto(r4, &(0x7f0000000100)='+*\x00', 0x5) lseek$auto(r3, 0x1000, 0x72) setresuid$auto(0xd, 0x0, 0x221) setrlimit$auto(0x6, &(0x7f0000000140)={0x0, 0x6}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, 0x0, 0x800) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) sched_getscheduler$auto(0x1) setresuid$auto(0x0, 0x8, 0x8000) setrlimit$auto(0x8, 0x0) mlock$auto(0xfbe8, 0x4) clone$auto(0xc8, 0x7, 0xfffffffffffffffe, 0x0, 0xd) fanotify_mark$auto(r2, 0xc531, 0x1, r3, &(0x7f0000000080)='\x17-*]\x00') 3m31.506575666s ago: executing program 2 (id=1275): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_VENDOR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x44040) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) fchdir$auto(0xf4400000000) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1213c0, 0xee) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x25, 0x800, 0x8) memfd_secret$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_MAC802154_HWSIM(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x84, 0xd, 0x0, &(0x7f0000000080)=0x9b) 3m31.209943221s ago: executing program 32 (id=1275): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_VENDOR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x44040) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) fchdir$auto(0xf4400000000) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1213c0, 0xee) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x25, 0x800, 0x8) memfd_secret$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_MAC802154_HWSIM(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x84, 0xd, 0x0, &(0x7f0000000080)=0x9b) 34.677451457s ago: executing program 1 (id=1640): syz_genetlink_get_family_id$auto_IPVS(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x53, 0x9) socket(0xa, 0x2, 0x73) sendmsg$auto_NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) sendmmsg$auto(0x3, 0x0, 0x200, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket(0x11, 0x2, 0xbb) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xc, 0x8000) clone$auto(0x8000000000000000, 0x104, 0xfffffffffffffffc, 0x0, 0x100000000) madvise$auto(0x0, 0x3, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x8000) 31.427925433s ago: executing program 1 (id=1643): syz_genetlink_get_family_id$auto_IPVS(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x53, 0x9) socket(0xa, 0x2, 0x73) sendmsg$auto_NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) sendmmsg$auto(0x3, 0x0, 0x200, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xc, 0x8000) clone$auto(0x8000000000000000, 0x104, 0xfffffffffffffffc, 0x0, 0x100000000) madvise$auto(0x0, 0x3, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x8000) 27.610837624s ago: executing program 1 (id=1647): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) get_robust_list$auto(0x100000000, 0xfffffffffffffffc, 0xfffffffffffffffc) getsockopt$auto(0x4, 0x200000000, 0x1, 0xfffffffffffffffc, 0x0) socket(0x5, 0xa, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004180), r0) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf2502000000080001000400000008000800", @ANYRES32=0x0, @ANYBLOB="e0350ae5d5cfdbc84e4e50c89f00b29786ee4ca4b88cf9a8909a45e7642e6e9cc07997b29e5ba54357f2b198e1c67f7a5dd82090e1889565e2106207a3577715296e3d7998dc7c4e8e450b9b8aa0bddef84853fda283"], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x80) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b70, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x800000002, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0xfbe8, 0xc) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto(0xc8, 0x400454d9, 0x5c8d) mlockall$auto(0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0x6, 0xa, 0xb) socket(0x1, 0x1, 0x1) ioctl$auto(0x8, 0x8, 0xfffffffffffffffa) msync$auto(0x1ffff000, 0x80100000000005, 0x400000004) ioctl$auto(0xc8, 0x400454d1, 0x5c8d) socket$nl_generic(0x10, 0x3, 0x10) setresgid$auto(0x8, 0x7, 0x5) bind$auto(0x3, &(0x7f0000000140)={0x1, @sa_data_min="af7af2952a203b6cdd8c8f51372e"}, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 23.815807179s ago: executing program 1 (id=1652): syz_genetlink_get_family_id$auto_IPVS(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x53, 0x9) socket(0xa, 0x2, 0x73) sendmsg$auto_NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) sendmmsg$auto(0x3, 0x0, 0x200, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket(0x11, 0x2, 0xbb) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xc, 0x8000) clone$auto(0x8000000000000000, 0x104, 0xfffffffffffffffc, 0x0, 0x100000000) madvise$auto(0x0, 0x3, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x8000) 17.654883158s ago: executing program 1 (id=1659): keyctl$auto(0xb, 0xfffffffffffffffd, 0x0, 0x401, 0x200073) sendmsg$auto_TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0xf4, 0x0, 0x200, 0x70bd28, 0x25dfdbf7, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_PUBL={0xda, 0x3, "4fa23faf94550b7e047c492d5d5d16c5e646a673dc08e0cfcfaad995ac60c8c40362f46712d393688f4157f3138a22a95ca89c1f3623bf2cea8ba15e0110a134b4f808c30de9dfd0b0a421382f06458c2bb496dfdf6bf95994dbafb613dc1b729b9e7e9d07448126090f66a6da64da739ef0377f9b5284df9f2823afd1ad3aa2cf822e6ce35cf55d806b38c4e3931905e02b00621964a0f7b54a28f269d83910788119d9de82b5e0505816d2627ecb0c61b7d792a1d1b39155206876ee348e2455d15c4db73365425bc0d709d4568a65b3f29c9d2fda"}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x40) setrlimit$auto(0x1000000007, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x48400, 0x40) 15.501616227s ago: executing program 1 (id=1663): rseq$auto(&(0x7f0000000000)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x7ffe, 0x0, 0x6) mmap$auto(0x0, 0x402000b, 0xdf, 0x10000000000eb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x12004) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) open(&(0x7f0000000080)='./file0\x00', 0x22000, 0x50) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) getrlimit$auto(0x1000, &(0x7f0000000040)={0x9, 0x452}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff) bpf$auto(0x8000000000000020, 0xffffffffffffffff, 0x0) creat$auto(&(0x7f0000000040)='X))\x00', 0x5) ioctl$auto(0x3, 0x4c03, 0x38) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setns(0xffffffffffffffff, 0x0) unshare$auto(0x40000080) clone$auto(0x10001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x8) writev$auto(0x1, &(0x7f0000000100)={&(0x7f0000000140), 0x400000000000fdef}, 0x1) vmsplice$auto(0x3, 0x0, 0x9, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x20200, 0x15) socket(0x2, 0x5, 0x0) fcntl$auto(0x0, 0x407, 0x100000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 15.482394126s ago: executing program 3 (id=1664): socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="060028bd70db281903cf556ec93fbf99b207df2502000004"], 0x14}, 0x1, 0x0, 0x0, 0x2000c080}, 0x4004004) mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) setreuid$auto(0x2, 0x6) syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000002c80), r0) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x2000c041) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x409a6, 0x0) recvfrom$auto(0x3, 0x0, 0x8000000012, 0x2, 0x0, 0xfffffffffffffffd) sendfile$auto(0x1, 0x3, 0x0, 0xc01) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x3, 0x3a) socket(0x2, 0x1, 0x106) socket(0x10, 0x2, 0xc) accept$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mlockall$auto(0x7) 14.447374174s ago: executing program 3 (id=1665): keyctl$auto(0xb, 0xfffffffffffffffd, 0x0, 0x401, 0x200073) sendmsg$auto_TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0xf4, 0x0, 0x200, 0x70bd28, 0x25dfdbf7, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_PUBL={0xda, 0x3, "4fa23faf94550b7e047c492d5d5d16c5e646a673dc08e0cfcfaad995ac60c8c40362f46712d393688f4157f3138a22a95ca89c1f3623bf2cea8ba15e0110a134b4f808c30de9dfd0b0a421382f06458c2bb496dfdf6bf95994dbafb613dc1b729b9e7e9d07448126090f66a6da64da739ef0377f9b5284df9f2823afd1ad3aa2cf822e6ce35cf55d806b38c4e3931905e02b00621964a0f7b54a28f269d83910788119d9de82b5e0505816d2627ecb0c61b7d792a1d1b39155206876ee348e2455d15c4db73365425bc0d709d4568a65b3f29c9d2fda"}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x40) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0x2, 0x3, 0x1) mmap$auto(0x0, 0x8, 0xe1, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x48400, 0x40) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(0x0, 0xe63e, 0x20) memfd_secret$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x84, 0x6, 0x0, 0x0) getxattr$auto(0x0, 0x0, 0x0, 0xffffffffffffffba) 13.661446416s ago: executing program 4 (id=1667): syz_genetlink_get_family_id$auto_IPVS(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x53, 0x9) socket(0xa, 0x2, 0x73) sendmsg$auto_NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) sendmmsg$auto(0x3, 0x0, 0x200, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) socket(0x2b, 0x1, 0x1) socket(0x11, 0x2, 0xbb) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xc, 0x8000) clone$auto(0x8000000000000000, 0x104, 0xfffffffffffffffc, 0x0, 0x100000000) madvise$auto(0x0, 0x3, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x8000) 11.659436637s ago: executing program 4 (id=1669): open(0x0, 0x161342, 0x100) open(&(0x7f0000000080)='./file0\x00', 0x22000, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_SMC_PNETID(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000040) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) getrlimit$auto(0x1000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setns(0xffffffffffffffff, 0x0) unshare$auto(0x40000080) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) vmsplice$auto(0x3, 0x0, 0x9, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x20200, 0x15) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f0000000040)={0x0, 0x8000}, 0x4, 0x0, 0x9}, 0xed7138c}, 0x2, 0x9) read$auto(0x4, 0x0, 0xfdef) write$auto(0x3, 0x0, 0xfffffdef) recvmsg$auto(0x4, 0x0, 0x33c) syz_genetlink_get_family_id$auto_802_15_4_MAC(0x0, 0xffffffffffffffff) socket(0x2, 0x5, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x0, 0xd0, 0x0, &(0x7f0000001140), 0x0, 0x2) fcntl$auto(0x0, 0x407, 0x100000) 11.620561749s ago: executing program 3 (id=1670): syz_genetlink_get_family_id$auto_IPVS(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x53, 0x9) socket(0xa, 0x2, 0x73) sendmsg$auto_NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) sendmmsg$auto(0x3, 0x0, 0x200, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket(0x11, 0x2, 0xbb) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xc, 0x8000) clone$auto(0x8000000000000000, 0x104, 0xfffffffffffffffc, 0x0, 0x100000000) madvise$auto(0x0, 0x3, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x8000) 10.737157495s ago: executing program 0 (id=1672): keyctl$auto(0xb, 0xfffffffffffffffd, 0x0, 0x401, 0x200073) sendmsg$auto_TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0xf4, 0x0, 0x200, 0x70bd28, 0x25dfdbf7, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_PUBL={0xda, 0x3, "4fa23faf94550b7e047c492d5d5d16c5e646a673dc08e0cfcfaad995ac60c8c40362f46712d393688f4157f3138a22a95ca89c1f3623bf2cea8ba15e0110a134b4f808c30de9dfd0b0a421382f06458c2bb496dfdf6bf95994dbafb613dc1b729b9e7e9d07448126090f66a6da64da739ef0377f9b5284df9f2823afd1ad3aa2cf822e6ce35cf55d806b38c4e3931905e02b00621964a0f7b54a28f269d83910788119d9de82b5e0505816d2627ecb0c61b7d792a1d1b39155206876ee348e2455d15c4db73365425bc0d709d4568a65b3f29c9d2fda"}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x40) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) setrlimit$auto(0x1000000007, 0x0) memfd_secret$auto(0x0) 10.513098759s ago: executing program 0 (id=1673): mmap$auto(0x0, 0xd, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) bpf$auto(0x5, 0x0, 0x504) mknod$auto(0x0, 0x63c1, 0x7ff) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff8005, 0xfff) swapon$auto(&(0x7f0000000000)='X))\x00', 0x5259) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x11) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) pipe$auto(0x0) writev$auto(0x5, 0x0, 0x201) init_module$auto(&(0x7f00000000c0), 0x5, &(0x7f0000000140)='MAC802154_HWSIM\x00') splice$auto(0x4, 0x0, 0x2, 0x0, 0x4, 0xf) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_TIPCv2(0x0, r0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x29, 0x5, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3ec0) fcntl$auto(0x3, 0x4, 0xa553) 8.793370401s ago: executing program 4 (id=1674): syz_genetlink_get_family_id$auto_IPVS(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x53, 0x9) socket(0xa, 0x2, 0x73) sendmsg$auto_NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) sendmmsg$auto(0x3, 0x0, 0x200, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xc, 0x8000) clone$auto(0x8000000000000000, 0x104, 0xfffffffffffffffc, 0x0, 0x100000000) madvise$auto(0x0, 0x3, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x8000) 8.010861644s ago: executing program 3 (id=1675): socket(0xa, 0x801, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x2, 0x88) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="0800e00000000000c1728d2af766"}, 0x55) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) shutdown$auto(0x200000003, 0x2) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000a00), 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) clone$auto(0x0, 0x6, &(0x7f0000000000)=0x5, &(0x7f0000000240)=0x2, 0x7) io_uring_setup$auto(0x6, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x103000, 0x2) read$auto(0x3, 0x0, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x828, 0x9, 0x8000000000000000, 0x8, 0x7, 0x9, 0x5, 0x5, 0x9, 0x3, 0x8, 0x5, 0xf, 0x0, 0x9, 0x10001, 0x5, [0x9, 0x87f, 0x77, 0x1, 0x7fffffffffffffff, 0xe06, 0x404, 0x3, 0x80000000, 0x8, 0x4, 0xfffffffffffffff9, 0x10, 0x8, 0x35c4, 0x1, 0x6, 0x8, 0x8, 0x8, 0xd8, 0x8, 0x5, 0x1, 0x40200000000803, 0x9, 0x5, 0x401, 0x800, 0x8000000000000000, 0x2ab, 0x8, 0x7ff, 0x7, 0x1, 0x100, 0xffffffffffff0000, 0x6b, 0xfffffffffffffff9, 0x4, 0x5, 0x4, 0xf, 0xffffffffffffff26, 0xecc, 0x7fffffff, 0x6, 0x7d, 0xdc]}, 0xe3c, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54) 7.061637525s ago: executing program 0 (id=1676): rseq$auto(&(0x7f0000000300)={0xe, 0x47, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0xfffffffd, 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0x15, 0x5, 0x0) r0 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=r0, 0x4, @old_prog_fd=r0}, 0xa3) madvise$auto(0x401, 0x3, 0xbc4) mmap$auto(0x0, 0x400008, 0xe2, 0x5d5, 0x2, 0x40) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) fcntl$auto(0x0, 0x407, 0xc) r1 = syz_open_procfs$namespace(0x0, 0x0) ioctl$NS_GET_PARENT(r1, 0x8008b705, 0x0) shmat$auto(0x0, 0x0, 0x0) clone$auto(0x40083b42, 0x5c84, 0xfffffffffffffffe, 0x0, 0x100000000000f) mount$auto(0x0, 0x0, 0x0, 0x9, &(0x7f0000000100)) preadv$auto(0x5, 0x0, 0x3, 0xffff, 0x100000000) mmap$auto(0x5, 0x2, 0x4, 0x1e, 0x8000000000000000, 0x8000000000000001) clock_gettime$auto(0x4, 0xfffffffffffffffe) sendmsg$auto_NFSD_CMD_POOL_MODE_SET(0xffffffffffffffff, 0x0, 0x4c040) readv$auto(0x4, 0x0, 0x8) write$auto(0x3, 0x0, 0xfdef) shutdown$auto(0x200000003, 0x2) readv$auto(0x4, 0x0, 0x7) socketpair$auto(0x3, 0x5, 0x7, 0x0) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0x4, 0x0, 0x3}, 0xe) 4.857500422s ago: executing program 3 (id=1677): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x3, 0x6, 0x100000000, 0x11, 0x2, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CTRL_CMD_GETFAMILY(r0, 0x0, 0x20008000) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x1000000009, 0x72, 0x8b72, 0x2, 0x8000) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) madvise$auto(0x0, 0x8000000000000002, 0xd) gettid() clone$auto(0x81000005, 0x6, 0xfffffffffffffffd, 0xffffffffffffffff, 0x80000001) move_pages$auto(0x0, 0xd0, 0x0, &(0x7f0000001140), 0x0, 0x2) socket(0x2, 0x1, 0x0) socket(0xa, 0x2, 0x0) fsopen$auto(0x0, 0x1) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) 4.75094916s ago: executing program 0 (id=1678): syz_genetlink_get_family_id$auto_IPVS(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x53, 0x9) socket(0xa, 0x2, 0x73) sendmsg$auto_NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) sendmmsg$auto(0x3, 0x0, 0x200, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) socket(0x2b, 0x1, 0x1) socket(0x11, 0x2, 0xbb) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xc, 0x8000) clone$auto(0x8000000000000000, 0x104, 0xfffffffffffffffc, 0x0, 0x100000000) madvise$auto(0x0, 0x3, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x8000) 2.697189428s ago: executing program 4 (id=1679): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x3, 0x6) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c457ffffffffffffff000300"}, 0x55) sendmmsg$auto(0x15, 0x0, 0x3, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) socket(0x1e, 0x5, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0x0, 0xb) socket(0x10, 0x2, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') madvise$auto(0x0, 0x2000040080000004, 0xe) socket(0x1e, 0x80805, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) select$auto(0x7, 0x0, &(0x7f0000000100)={[0x9, 0x5, 0x0, 0xfffffffffffffff6, 0x7, 0xfffffffffffdffff, 0xdffffffffffffff8, 0x2, 0x0, 0x10000005e58296f, 0x1e, 0x7, 0x3, 0x200, 0x1, 0x9]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xff00) write$auto(0x3, 0x0, 0xfdef) 957.295211ms ago: executing program 4 (id=1680): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setrlimit$auto(0x1000000007, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x48400, 0x40) 630.941822ms ago: executing program 0 (id=1681): keyctl$auto(0xb, 0xfffffffffffffffd, 0x0, 0x401, 0x200073) sendmsg$auto_TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0xf4, 0x0, 0x200, 0x70bd28, 0x25dfdbf7, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_PUBL={0xda, 0x3, "4fa23faf94550b7e047c492d5d5d16c5e646a673dc08e0cfcfaad995ac60c8c40362f46712d393688f4157f3138a22a95ca89c1f3623bf2cea8ba15e0110a134b4f808c30de9dfd0b0a421382f06458c2bb496dfdf6bf95994dbafb613dc1b729b9e7e9d07448126090f66a6da64da739ef0377f9b5284df9f2823afd1ad3aa2cf822e6ce35cf55d806b38c4e3931905e02b00621964a0f7b54a28f269d83910788119d9de82b5e0505816d2627ecb0c61b7d792a1d1b39155206876ee348e2455d15c4db73365425bc0d709d4568a65b3f29c9d2fda"}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x40) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setrlimit$auto(0x1000000007, 0x0) memfd_secret$auto(0x0) 503.175131ms ago: executing program 4 (id=1682): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x200) ioperm$auto(0x7, 0xc, 0x2) bpf$auto(0x100000001, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) readv$auto(0x3, 0x0, 0x400) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1ffd, 0x12) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x100082) fallocate$auto(0x3, 0x3, 0xe, 0x8000008ec5) semctl$auto(0x1ff, 0x2, 0x13, 0x20001) mlockall$auto(0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2002, 0x100000004, 0x100000003, 0x0, 0x6, 0x2) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x3, 0x388) kexec_load$auto(0x3ff, 0x7, 0x0, 0x4657f944) kexec_load$auto(0x800000008, 0xc, 0x0, 0x0) mmap$auto(0x0, 0x4000a, 0xdb, 0x9b72, 0x7, 0x28000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') close_range$auto(0x2, r0, 0x40000000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) socket(0x2c, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x15, 0x0, 0x56b) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) socket(0x1e, 0x5, 0x0) mkdir$auto(&(0x7f0000000040)='ns/pid_for_children\x00', 0xc) recvfrom$auto(0x3, 0x0, 0x100, 0x101, 0x0, 0x0) mbind$auto(0x5, 0x8, 0x100000001, 0x0, 0x80006, 0xffffffff) 392.728812ms ago: executing program 33 (id=1663): rseq$auto(&(0x7f0000000000)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x7ffe, 0x0, 0x6) mmap$auto(0x0, 0x402000b, 0xdf, 0x10000000000eb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x12004) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) open(&(0x7f0000000080)='./file0\x00', 0x22000, 0x50) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) getrlimit$auto(0x1000, &(0x7f0000000040)={0x9, 0x452}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff) bpf$auto(0x8000000000000020, 0xffffffffffffffff, 0x0) creat$auto(&(0x7f0000000040)='X))\x00', 0x5) ioctl$auto(0x3, 0x4c03, 0x38) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setns(0xffffffffffffffff, 0x0) unshare$auto(0x40000080) clone$auto(0x10001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x8) writev$auto(0x1, &(0x7f0000000100)={&(0x7f0000000140), 0x400000000000fdef}, 0x1) vmsplice$auto(0x3, 0x0, 0x9, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x20200, 0x15) socket(0x2, 0x5, 0x0) fcntl$auto(0x0, 0x407, 0x100000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 243.114096ms ago: executing program 3 (id=1684): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x801, 0x84) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_3={0x8, 0xffffffef, 0x18c, 0x6a, 0x0, 0x8, 0x3, 0x9, 0xfffffff8, "63acf0e05b2d33ebc15774e816ef77cf", 0x0, 0x541, 0x4, 0x7, 0x3, 0x1008, 0x4, 0x2, 0xe, 0x5, @attach_btf_obj_fd=0x3, 0x166, 0x7ff, 0x6, 0x6, 0x48000000, 0xa7c2}, 0x7) connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"d9ef7f"}}, 0x55) listen$auto(0x3, 0x9) accept$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) mmap$auto(0x0, 0x45, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, 0x3, 0x0, 0xc01) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x6, 0x40000000029, 0x46, 0xfffffffffffffffe, 0x0) r0 = socket(0xa, 0x1, 0x0) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x20008010) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) syz_genetlink_get_family_id$auto_nfsd(0x0, r0) ioperm$auto(0x7, 0x6, 0x2) shmat$auto(0x0, 0xfffffffffffffffd, 0x1ae1a4f4) msync$auto(0x1ffff000, 0x80100000000005, 0x400000004) socket$nl_generic(0x10, 0x3, 0x10) setresgid$auto(0x8, 0x7, 0x5) bind$auto(0x3, &(0x7f0000000040)={0x1, @sockaddr_1_1}, 0xd) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 0s ago: executing program 0 (id=1685): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x800000002, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0xfbe8, 0xc) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto(0xc8, 0x400454d9, 0x5c8d) fsopen$auto(&(0x7f0000000000)='ovs_packet\x00', 0xf) mlockall$auto(0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0x6, 0xa, 0xb) socket(0x1, 0x1, 0x1) ioctl$auto(0x8, 0x8, 0xfffffffffffffffa) msync$auto(0x1ffff000, 0x80100000000005, 0x400000004) ioctl$auto(0xc8, 0x400454d1, 0x5c8d) socket$nl_generic(0x10, 0x3, 0x10) setresgid$auto(0x8, 0x7, 0x5) bind$auto(0x3, &(0x7f0000000140)={0x1, @sa_data_min="af7af2952a203b6cdd8c8f51372e"}, 0xd) mmap$auto(0x7, 0x0, 0xe2, 0x9b72, 0x2, 0x8000) fchown$auto(0x5, 0x8, 0x3) r0 = socket(0x11, 0x3, 0x2) connect$auto(0x3, &(0x7f0000000140)={0x2, @sa_data_min="09ae0300"}, 0x55) sendto$auto(r0, 0x0, 0xd, 0x101, &(0x7f0000000040)={0x2, @sa_data_min="3600000000000000000100"}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000c40), r1) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000340)={0x38, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x9}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "f80378e3f0cd5b806905f038a814"}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x80000) mlock$auto(0x81, 0xffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.140' (ED25519) to the list of known hosts. [ 82.722670][ T5831] cgroup: Unknown subsys name 'net' [ 82.859391][ T5831] cgroup: Unknown subsys name 'cpuset' [ 82.867556][ T5831] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.551854][ T5831] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.513393][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.521600][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.530331][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.538295][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.546679][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.553971][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.563251][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.570214][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.571072][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.579017][ T5853] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.585829][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.593833][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.599225][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.606373][ T5853] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.622238][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.622788][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.629575][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.644851][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.668687][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.669823][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.683805][ T5859] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.686012][ T5858] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.692498][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.702231][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.126888][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 87.242678][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 87.252228][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 87.313291][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.321387][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.329750][ T5844] bridge_slave_0: entered allmulticast mode [ 87.337030][ T5844] bridge_slave_0: entered promiscuous mode [ 87.350991][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 87.371560][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.378867][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.386386][ T5844] bridge_slave_1: entered allmulticast mode [ 87.393212][ T5844] bridge_slave_1: entered promiscuous mode [ 87.486691][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.499330][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.512950][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.520329][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.527629][ T5840] bridge_slave_0: entered allmulticast mode [ 87.534644][ T5840] bridge_slave_0: entered promiscuous mode [ 87.551392][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.558820][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.566101][ T5843] bridge_slave_0: entered allmulticast mode [ 87.573121][ T5843] bridge_slave_0: entered promiscuous mode [ 87.618925][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.626314][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.633534][ T5840] bridge_slave_1: entered allmulticast mode [ 87.641194][ T5840] bridge_slave_1: entered promiscuous mode [ 87.657843][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.665114][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.672311][ T5843] bridge_slave_1: entered allmulticast mode [ 87.679607][ T5843] bridge_slave_1: entered promiscuous mode [ 87.699390][ T5844] team0: Port device team_slave_0 added [ 87.708194][ T5844] team0: Port device team_slave_1 added [ 87.758523][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.770746][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.790905][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.798160][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.805539][ T5841] bridge_slave_0: entered allmulticast mode [ 87.812330][ T5841] bridge_slave_0: entered promiscuous mode [ 87.821378][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.841993][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.863086][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.870537][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.897743][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.910089][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.917861][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.925326][ T5841] bridge_slave_1: entered allmulticast mode [ 87.932245][ T5841] bridge_slave_1: entered promiscuous mode [ 87.956367][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.963392][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.989630][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.019743][ T5840] team0: Port device team_slave_0 added [ 88.028502][ T5843] team0: Port device team_slave_0 added [ 88.037180][ T5843] team0: Port device team_slave_1 added [ 88.075677][ T5840] team0: Port device team_slave_1 added [ 88.083853][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.137996][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.147891][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.159985][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.186113][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.201094][ T5844] hsr_slave_0: entered promiscuous mode [ 88.207778][ T5844] hsr_slave_1: entered promiscuous mode [ 88.215428][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.222432][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.248917][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.262775][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.270215][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.296573][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.318142][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.325412][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.351423][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.395623][ T5841] team0: Port device team_slave_0 added [ 88.435300][ T5841] team0: Port device team_slave_1 added [ 88.462318][ T5843] hsr_slave_0: entered promiscuous mode [ 88.469854][ T5843] hsr_slave_1: entered promiscuous mode [ 88.476754][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.484811][ T5843] Cannot create hsr debugfs directory [ 88.503554][ T5840] hsr_slave_0: entered promiscuous mode [ 88.510146][ T5840] hsr_slave_1: entered promiscuous mode [ 88.517098][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.525085][ T5840] Cannot create hsr debugfs directory [ 88.553292][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.560327][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.586682][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.613201][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.621357][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.647900][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.716036][ T54] Bluetooth: hci1: command tx timeout [ 88.784759][ T5859] Bluetooth: hci0: command tx timeout [ 88.786470][ T5858] Bluetooth: hci3: command tx timeout [ 88.790741][ T54] Bluetooth: hci2: command tx timeout [ 88.809031][ T5841] hsr_slave_0: entered promiscuous mode [ 88.815734][ T5841] hsr_slave_1: entered promiscuous mode [ 88.822363][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.830056][ T5841] Cannot create hsr debugfs directory [ 88.989315][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.004157][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.024166][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.034312][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.140588][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.151391][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.177768][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.194343][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.235622][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.268137][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.278745][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.289095][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.373460][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.416886][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.433885][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.456978][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.476023][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.483459][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.494118][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.501273][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.520230][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.529854][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.593136][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.649178][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.660183][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.703469][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.710697][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.743524][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.772939][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.780172][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.807377][ T2995] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.814600][ T2995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.860469][ T2995] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.867652][ T2995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.933348][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.009427][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.057974][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.112026][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.119256][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.137635][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.144857][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.302332][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.362535][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.376432][ T5844] veth0_vlan: entered promiscuous mode [ 90.422356][ T5844] veth1_vlan: entered promiscuous mode [ 90.512475][ T5843] veth0_vlan: entered promiscuous mode [ 90.537798][ T5844] veth0_macvtap: entered promiscuous mode [ 90.558822][ T5840] veth0_vlan: entered promiscuous mode [ 90.577618][ T5844] veth1_macvtap: entered promiscuous mode [ 90.596292][ T5843] veth1_vlan: entered promiscuous mode [ 90.608397][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.621503][ T5840] veth1_vlan: entered promiscuous mode [ 90.669764][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.693813][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.728689][ T5843] veth0_macvtap: entered promiscuous mode [ 90.743920][ T5841] veth0_vlan: entered promiscuous mode [ 90.751659][ T5840] veth0_macvtap: entered promiscuous mode [ 90.761847][ T5844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.772648][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.781612][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.790619][ T54] Bluetooth: hci1: command tx timeout [ 90.796801][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.811027][ T5843] veth1_macvtap: entered promiscuous mode [ 90.829602][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.841505][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.853295][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.866631][ T54] Bluetooth: hci2: command tx timeout [ 90.866659][ T5858] Bluetooth: hci3: command tx timeout [ 90.872049][ T5859] Bluetooth: hci0: command tx timeout [ 90.887683][ T5841] veth1_vlan: entered promiscuous mode [ 90.903233][ T5840] veth1_macvtap: entered promiscuous mode [ 90.938286][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.951486][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.963527][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.980813][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.991808][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.002297][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.015797][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.029583][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.046039][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.056835][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.067525][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.078394][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.090283][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.101386][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.111650][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.121072][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.131206][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.160051][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.169434][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.180222][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.190197][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.233127][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.251046][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.299400][ T5841] veth0_macvtap: entered promiscuous mode [ 91.344153][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.353371][ T5841] veth1_macvtap: entered promiscuous mode [ 91.373533][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.384328][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.387718][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.444236][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.458157][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.469902][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.481927][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.493363][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.504337][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.519418][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.542820][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.558036][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.558577][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.571422][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.593787][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.606323][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.617225][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.627522][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.638683][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.649681][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.677336][ T2995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.679714][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.695226][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.704113][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.708185][ T2995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.723885][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.867239][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.934131][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.108176][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.127790][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.155728][ T1215] cfg80211: failed to load regulatory.db [ 92.338739][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.363518][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.851087][ T5926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 92.866368][ T54] Bluetooth: hci1: command tx timeout [ 92.951642][ T54] Bluetooth: hci2: command tx timeout [ 92.957274][ T54] Bluetooth: hci0: command tx timeout [ 92.963362][ T5859] Bluetooth: hci3: command tx timeout [ 93.543807][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 93.641548][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 94.946346][ T5859] Bluetooth: hci1: command tx timeout [ 95.002566][ T5978] process 'syz.2.29' launched ':,' with NULL argv: empty string added [ 95.024804][ T5859] Bluetooth: hci3: command tx timeout [ 95.030296][ T5859] Bluetooth: hci0: command tx timeout [ 95.035890][ T54] Bluetooth: hci2: command tx timeout [ 101.404886][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.62'. [ 101.443817][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.62'. [ 101.579804][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.62'. [ 101.985264][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.62'. [ 102.047879][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.62'. [ 102.094957][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.62'. [ 102.132601][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.62'. [ 102.186075][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.62'. [ 102.297698][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.62'. [ 102.355021][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.62'. [ 106.550969][ T6168] nbd: illegal input index 50331648 [ 108.987944][ T6211] __nla_validate_parse: 7 callbacks suppressed [ 108.987968][ T6211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.106'. [ 109.027208][ T6211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.106'. [ 109.387802][ T6214] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.712043][ T6243] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.983740][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'. [ 113.019951][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'. [ 113.041460][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'. [ 113.060980][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'. [ 113.078649][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'. [ 113.105113][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'. [ 113.135104][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'. [ 113.156498][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'. [ 121.114104][ T6446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.076045][ T6511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.749433][ T6630] Zero length message leads to an empty skb [ 134.938763][ T6736] delete_channel: no stack [ 138.235361][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.241947][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.214692][ T6830] mmap: syz.0.317 (6830) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 142.293784][ T6898] syz.3.341 uses obsolete (PF_INET,SOCK_PACKET) [ 144.556831][ T6948] kernel read not supported for file /#)-\&[} (pid: 6948 comm: syz.0.358) [ 144.566855][ T29] audit: type=1804 audit(8277292048.990:2): pid=6948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.358" name="#)-\&[}" dev="mqueue" ino=11540 res=1 errno=0 [ 144.674563][ T29] audit: type=1800 audit(8277292049.100:3): pid=6948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.358" name="#)-\&[}" dev="mqueue" ino=11540 res=0 errno=0 [ 144.694759][ T29] audit: type=1804 audit(8277292049.100:4): pid=6952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.358" name="#)-\&[}" dev="mqueue" ino=11540 res=1 errno=0 [ 144.714857][ T29] audit: type=1804 audit(8277292049.110:5): pid=6952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.358" name="#)-\&[}" dev="mqueue" ino=11540 res=1 errno=0 [ 147.535399][ T7018] ======================================================= [ 147.535399][ T7018] WARNING: The mand mount option has been deprecated and [ 147.535399][ T7018] and is ignored by this kernel. Remove the mand [ 147.535399][ T7018] option from the mount to silence this warning. [ 147.535399][ T7018] ======================================================= [ 151.412027][ T7094] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 151.478020][ T7094] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 155.831649][ T7171] sctp: [Deprecated]: syz.1.441 (pid 7171) Use of struct sctp_assoc_value in delayed_ack socket option. [ 155.831649][ T7171] Use struct sctp_sack_info instead [ 158.229628][ T7215] HfR: entered promiscuous mode [ 158.282482][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.460'. [ 158.314659][ T7215] HfR: left promiscuous mode [ 161.911400][ T7303] HfR: entered promiscuous mode [ 162.115958][ T7303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.489'. [ 162.194640][ T7303] HfR: left promiscuous mode [ 164.349968][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'. [ 165.258410][ T7354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.707060][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'. [ 167.584796][ T7449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.539'. [ 168.241322][ T7468] netlink: 20 bytes leftover after parsing attributes in process `syz.1.547'. [ 168.268054][ T7468] netlink: 20 bytes leftover after parsing attributes in process `syz.1.547'. [ 168.753163][ T7479] team0: entered allmulticast mode [ 168.759488][ T7479] team_slave_0: entered allmulticast mode [ 168.792245][ T7479] team_slave_1: entered allmulticast mode [ 171.235483][ T7540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.276289][ T5858] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 173.809209][ T7613] svc: failed to register nfsdv3 RPC service (errno 111). [ 173.821173][ T7613] svc: failed to register nfsaclv3 RPC service (errno 111). [ 174.389704][ T7629] bridge0: entered allmulticast mode [ 174.449221][ T7631] netlink: 24 bytes leftover after parsing attributes in process `syz.0.600'. [ 176.463962][ T7686] kernel read not supported for file /" (pid: 7686 comm: syz.1.623) [ 176.495078][ T29] audit: type=1800 audit(4294967298.590:6): pid=7686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.623" name=220E dev="mqueue" ino=13893 res=0 errno=0 [ 178.380494][ T7725] svc: failed to register nfsdv3 RPC service (errno 111). [ 178.446979][ T7725] svc: failed to register nfsaclv3 RPC service (errno 111). [ 179.843799][ T7750] svc: failed to register nfsdv3 RPC service (errno 111). [ 179.857303][ T7750] svc: failed to register nfsaclv3 RPC service (errno 111). [ 190.020431][ T7898] svc: failed to register nfsdv3 RPC service (errno 111). [ 190.034022][ T7899] nbd: must specify at least one socket [ 190.042597][ T7898] svc: failed to register nfsaclv3 RPC service (errno 111). [ 192.961615][ T7953] HSR: entered promiscuous mode [ 192.994696][ T7942] svc: failed to register nfsdv3 RPC service (errno 111). [ 193.063426][ T7942] svc: failed to register nfsaclv3 RPC service (errno 111). [ 193.151588][ T7956] delete_channel: no stack [ 195.433104][ T7997] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.668034][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.674406][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.494713][ T8072] netlink: 20 bytes leftover after parsing attributes in process `syz.1.733'. [ 201.529236][ T8072] netlink: 20 bytes leftover after parsing attributes in process `syz.1.733'. [ 203.040115][ T29] audit: type=1800 audit(8277292053.497:7): pid=8085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.738" name="SYSV00010000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 204.834386][ T8132] bond0: entered allmulticast mode [ 204.840755][ T8132] bond_slave_0: entered allmulticast mode [ 204.884174][ T8132] bond_slave_1: entered allmulticast mode [ 205.157979][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.752'. [ 205.215048][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.752'. [ 206.365019][ T8146] svc: failed to register nfsdv3 RPC service (errno 111). [ 206.447061][ T8146] svc: failed to register nfsaclv3 RPC service (errno 111). [ 208.056217][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 208.084382][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 208.099896][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 208.109598][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 208.124778][ T5859] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 208.132573][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 208.623315][ T2995] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.958147][ T2995] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.344097][ T2995] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.083677][ T2995] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.252902][ T5852] Bluetooth: hci1: command tx timeout [ 210.717379][ T8166] chnl_net:caif_netlink_parms(): no params data found [ 210.997939][ T8182] svc: failed to register nfsdv3 RPC service (errno 111). [ 211.033010][ T8182] svc: failed to register nfsaclv3 RPC service (errno 111). [ 211.069938][ T2995] bridge_slave_1: left allmulticast mode [ 211.094744][ T2995] bridge_slave_1: left promiscuous mode [ 211.123686][ T2995] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.235482][ T2995] bridge_slave_0: left allmulticast mode [ 211.254546][ T2995] bridge_slave_0: left promiscuous mode [ 211.270888][ T2995] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.984910][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 211.986140][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 211.991054][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 212.311122][ T5858] Bluetooth: hci1: command tx timeout [ 212.552285][ T2995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.603698][ T2995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.656620][ T2995] bond0 (unregistering): Released all slaves [ 213.089213][ T8166] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.102274][ T8166] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.126281][ T8166] bridge_slave_0: entered allmulticast mode [ 213.145392][ T8166] bridge_slave_0: entered promiscuous mode [ 213.431285][ T8166] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.445467][ T8166] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.452758][ T8166] bridge_slave_1: entered allmulticast mode [ 213.498022][ T8166] bridge_slave_1: entered promiscuous mode [ 214.123915][ T8166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.338778][ T8166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.384586][ T5858] Bluetooth: hci1: command tx timeout [ 214.477116][ T8166] team0: Port device team_slave_0 added [ 214.533462][ T2995] hsr_slave_0: left promiscuous mode [ 214.567238][ T2995] hsr_slave_1: left promiscuous mode [ 214.575112][ T2995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.582628][ T2995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.616021][ T2995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.623540][ T2995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.701281][ T2995] veth1_macvtap: left promiscuous mode [ 214.714841][ T2995] veth0_macvtap: left promiscuous mode [ 214.720620][ T2995] veth1_vlan: left promiscuous mode [ 214.735213][ T2995] veth0_vlan: left promiscuous mode [ 216.043154][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.054852][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.063213][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.071970][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.080555][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 216.088076][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.464598][ T54] Bluetooth: hci1: command tx timeout [ 216.650076][ T2995] team0 (unregistering): Port device team_slave_1 removed [ 216.702190][ T2995] team0 (unregistering): Port device team_slave_0 removed [ 217.661049][ T8166] team0: Port device team_slave_1 added [ 217.704544][ T8243] netlink: 20 bytes leftover after parsing attributes in process `syz.3.771'. [ 217.860033][ T8166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.874484][ T8166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.921615][ T8166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.963132][ T8166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.994718][ T8166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.033422][ T8166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.145024][ T54] Bluetooth: hci0: command tx timeout [ 218.361016][ T8166] hsr_slave_0: entered promiscuous mode [ 218.388943][ T8166] hsr_slave_1: entered promiscuous mode [ 218.425918][ T8166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.444922][ T8166] Cannot create hsr debugfs directory [ 218.969978][ T2995] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.177008][ T2995] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.233879][ T8239] chnl_net:caif_netlink_parms(): no params data found [ 220.047384][ T2995] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.224546][ T54] Bluetooth: hci0: command tx timeout [ 220.394393][ T8284] raw_sendmsg: syz.0.772 forgot to set AF_INET. Fix it! [ 220.468111][ T2995] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.760220][ T8268] syz.0.772 (8268) used greatest stack depth: 20048 bytes left [ 221.354003][ T8239] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.374603][ T8239] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.382002][ T8239] bridge_slave_0: entered allmulticast mode [ 221.391468][ T8239] bridge_slave_0: entered promiscuous mode [ 221.411206][ T8239] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.434723][ T8239] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.442031][ T8239] bridge_slave_1: entered allmulticast mode [ 221.453705][ T8239] bridge_slave_1: entered promiscuous mode [ 222.012665][ T8239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.042568][ T8239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.086731][ T2995] bridge_slave_1: left allmulticast mode [ 222.092473][ T2995] bridge_slave_1: left promiscuous mode [ 222.121574][ T2995] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.149066][ T2995] bridge_slave_0: left allmulticast mode [ 222.160443][ T2995] bridge_slave_0: left promiscuous mode [ 222.174932][ T2995] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.304707][ T54] Bluetooth: hci0: command tx timeout [ 222.568065][ T8293] syz.0.772 (8293) used greatest stack depth: 19728 bytes left [ 222.858432][ T2995] bridge0 (unregistering): left allmulticast mode [ 223.134815][ T2995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.168677][ T2995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.196744][ T2995] bond0 (unregistering): Released all slaves [ 223.453889][ T8239] team0: Port device team_slave_0 added [ 223.481555][ T8239] team0: Port device team_slave_1 added [ 223.635904][ T8239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.642917][ T8239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.694973][ T8239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.706657][ T8166] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 223.763386][ T8239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.774623][ T8239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.834567][ T8239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.865141][ T8166] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 223.876236][ T8105] syz.0.741 (8105) used greatest stack depth: 19472 bytes left [ 223.894292][ T8166] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 223.950820][ T2995] hsr_slave_0: left promiscuous mode [ 223.958116][ T2995] hsr_slave_1: left promiscuous mode [ 223.975687][ T2995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.983151][ T2995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.011788][ T2995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.019442][ T2995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.054760][ T2995] veth1_macvtap: left promiscuous mode [ 224.060361][ T2995] veth0_macvtap: left promiscuous mode [ 224.074760][ T2995] veth1_vlan: left promiscuous mode [ 224.080185][ T2995] veth0_vlan: left promiscuous mode [ 224.400001][ T54] Bluetooth: hci0: command tx timeout [ 224.582484][ T8173] syz.0.762 (8173) used greatest stack depth: 19456 bytes left [ 224.759437][ T2995] team_slave_1 (unregistering): left allmulticast mode [ 224.771376][ T2995] team0 (unregistering): Port device team_slave_1 removed [ 224.808079][ T2995] team_slave_0 (unregistering): left allmulticast mode [ 224.817230][ T2995] team0 (unregistering): Port device team_slave_0 removed [ 225.147827][ T2995] team0 (unregistering): left allmulticast mode [ 225.187806][ T8166] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 225.262929][ T8239] hsr_slave_0: entered promiscuous mode [ 225.271286][ T8239] hsr_slave_1: entered promiscuous mode [ 225.285590][ T8239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.293175][ T8239] Cannot create hsr debugfs directory [ 225.537081][ T8166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.672555][ T8166] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.751750][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.759076][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.789530][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.796750][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.877450][ T8325] HSR: entered promiscuous mode [ 226.036547][ T8332] delete_channel: no stack [ 226.215921][ T8239] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 226.264241][ T8239] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 226.315511][ T8239] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 226.353181][ T8239] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 226.533369][ T8166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.674093][ T8166] veth0_vlan: entered promiscuous mode [ 226.767496][ T8166] veth1_vlan: entered promiscuous mode [ 226.896715][ T8239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.911150][ T8166] veth0_macvtap: entered promiscuous mode [ 226.934332][ T8166] veth1_macvtap: entered promiscuous mode [ 226.982870][ T8239] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.992915][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.008406][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.020056][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.063138][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.088280][ T8166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.116944][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.139369][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.168422][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.224491][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.277369][ T8166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.356507][ T2995] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.363683][ T2995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.400576][ T2995] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.407798][ T2995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.506898][ T8166] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.526298][ T8166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.553052][ T8166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.568495][ T8166] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.713369][ T8239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.245986][ T2995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.253883][ T2995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.317660][ T8239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.441181][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.480332][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.807956][ T8239] veth0_vlan: entered promiscuous mode [ 228.881489][ T8239] veth1_vlan: entered promiscuous mode [ 229.127220][ T8239] veth0_macvtap: entered promiscuous mode [ 229.160343][ T8239] veth1_macvtap: entered promiscuous mode [ 229.243430][ T8239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.269220][ T8239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.289189][ T8239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.308272][ T8239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.336151][ T8239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.363174][ T8239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.391519][ T8239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.444540][ T8239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.475402][ T8239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.495055][ T8239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.524526][ T8239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.549465][ T8239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.574612][ T8239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.645107][ T8239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.677919][ T8239] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.704587][ T8239] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.730482][ T8431] nbd: must specify at least one socket [ 229.745346][ T8239] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.764583][ T8239] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.081481][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.111650][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.294075][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.330690][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.023920][ T8522] GUP no longer grows the stack in syz.0.815 (8522): 1000-401000 (0) [ 234.089852][ T8522] CPU: 0 UID: 0 PID: 8522 Comm: syz.0.815 Not tainted 6.12.0-rc5-syzkaller #0 [ 234.098810][ T8522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 234.108923][ T8522] Call Trace: [ 234.112245][ T8522] [ 234.115228][ T8522] dump_stack_lvl+0x16c/0x1f0 [ 234.120000][ T8522] gup_vma_lookup+0x1d2/0x220 [ 234.124761][ T8522] fixup_user_fault+0x26f/0x540 [ 234.129693][ T8522] fault_in_user_writeable+0x70/0xe0 [ 234.135046][ T8522] futex_wake_op+0x96c/0xdc0 [ 234.139725][ T8522] ? __pfx_futex_wake_op+0x10/0x10 [ 234.144920][ T8522] ? futex_wait+0x121/0x380 [ 234.149506][ T8522] ? __pfx_do_splice_direct+0x10/0x10 [ 234.154974][ T8522] ? bpf_lsm_file_permission+0x9/0x10 [ 234.160434][ T8522] ? security_file_permission+0x71/0x210 [ 234.166141][ T8522] ? fput+0x30/0x390 [ 234.170122][ T8522] do_futex+0x2eb/0x350 [ 234.174359][ T8522] ? __pfx_do_futex+0x10/0x10 [ 234.179125][ T8522] ? __pfx_do_sendfile+0x10/0x10 [ 234.184143][ T8522] __x64_sys_futex+0x1e1/0x4c0 [ 234.189039][ T8522] ? __pfx___x64_sys_futex+0x10/0x10 [ 234.194409][ T8522] ? rcu_is_watching+0x12/0xc0 [ 234.199255][ T8522] do_syscall_64+0xcd/0x250 [ 234.203837][ T8522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.209819][ T8522] RIP: 0033:0x7f965cb7e719 [ 234.214311][ T8522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.233999][ T8522] RSP: 002b:00007f965d928038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 234.242491][ T8522] RAX: ffffffffffffffda RBX: 00007f965cd35f80 RCX: 00007f965cb7e719 [ 234.250531][ T8522] RDX: 0000000000000002 RSI: 0000000000000085 RDI: 0000000000000000 [ 234.258565][ T8522] RBP: 00007f965cbf132e R08: 0000000000000000 R09: 0000000000000001 [ 234.266656][ T8522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.274682][ T8522] R13: 0000000000000000 R14: 00007f965cd35f80 R15: 00007ffebd47e778 [ 234.282729][ T8522] [ 236.341565][ T8524] netlink: 24 bytes leftover after parsing attributes in process `syz.1.816'. [ 237.734686][ T8562] svc: failed to register nfsdv3 RPC service (errno 111). [ 237.771584][ T8562] svc: failed to register nfsaclv3 RPC service (errno 111). [ 237.815533][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.825'. [ 237.928039][ T8552] kexec: Could not allocate control_code_buffer [ 244.288050][ T8672] netlink: 24 bytes leftover after parsing attributes in process `syz.3.857'. [ 245.150394][ T29] audit: type=1800 audit(8277292095.607:8): pid=8689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.861" name="SYSV00010000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 245.915021][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.867'. [ 246.448708][ T8721] svc: failed to register nfsdv3 RPC service (errno 111). [ 246.506246][ T8721] svc: failed to register nfsaclv3 RPC service (errno 111). [ 246.535015][ T8725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.870'. [ 247.790815][ T8750] delete_channel: no stack [ 247.844717][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.880'. [ 249.371239][ T8777] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[8777] [ 250.040518][ T8794] Dead loop on virtual device ip6_vti0, fix it urgently! [ 250.068205][ T8794] Dead loop on virtual device ip6_vti0, fix it urgently! [ 250.086127][ T8794] Dead loop on virtual device ip6_vti0, fix it urgently! [ 250.105284][ T8794] Dead loop on virtual device ip6_vti0, fix it urgently! [ 250.136469][ T8794] Dead loop on virtual device ip6_vti0, fix it urgently! [ 250.180606][ T8794] Dead loop on virtual device ip6_vti0, fix it urgently! [ 250.191468][ T8779] netlink: 24 bytes leftover after parsing attributes in process `syz.0.887'. [ 253.421816][ T8841] kexec: Could not allocate control_code_buffer [ 253.751612][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.903'. [ 253.805183][ T8868] veth0_macvtap: left promiscuous mode [ 261.106937][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.113942][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.587194][ T9060] netlink: 40 bytes leftover after parsing attributes in process `syz.0.969'. [ 264.658707][ T9060] openvswitch: HSR: Dropping previously announced user features [ 266.552619][ T9091] netlink: 'syz.0.975': attribute type 11 has an invalid length. [ 266.573382][ T9091] netlink: 'syz.0.975': attribute type 11 has an invalid length. [ 268.560803][ T9127] Dead loop on virtual device ip6_vti0, fix it urgently! [ 268.652656][ T9127] Dead loop on virtual device ip6_vti0, fix it urgently! [ 268.685044][ T9127] Dead loop on virtual device ip6_vti0, fix it urgently! [ 268.720373][ T9127] Dead loop on virtual device ip6_vti0, fix it urgently! [ 268.794886][ T9127] Dead loop on virtual device ip6_vti0, fix it urgently! [ 268.802376][ T9127] Dead loop on virtual device ip6_vti0, fix it urgently! [ 268.854837][ T9127] Dead loop on virtual device ip6_vti0, fix it urgently! [ 270.188951][ T9155] Invalid ELF header magic: != ELF [ 273.554830][ T9203] netlink: 'syz.1.1005': attribute type 11 has an invalid length. [ 273.562903][ T9203] netlink: 'syz.1.1005': attribute type 11 has an invalid length. [ 276.629791][ T9251] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1016'. [ 276.744560][ T9255] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1016'. [ 279.295019][ T9298] netlink: 'syz.2.1028': attribute type 11 has an invalid length. [ 279.316182][ T9298] netlink: 'syz.2.1028': attribute type 11 has an invalid length. [ 281.261779][ T9332] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1040'. [ 281.311174][ T9332] openvswitch: HSR: Dropping previously announced user features [ 283.239469][ T9359] netlink: 'syz.0.1047': attribute type 11 has an invalid length. [ 283.247581][ T9359] netlink: 'syz.0.1047': attribute type 11 has an invalid length. [ 285.199613][ T9393] workqueue: name exceeds WQ_NAME_LEN. Truncating to: -侞6yռ ka; [ 289.832335][ T9479] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1081'. [ 292.313474][ T9502] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1089'. [ 300.574469][ T9617] syz.2.1117 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 300.607573][ T9617] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1117'. [ 308.126580][ T9755] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1149'. [ 312.067915][ T9800] svc: failed to register nfsdv3 RPC service (errno 111). [ 312.349168][ T9800] svc: failed to register nfsaclv3 RPC service (errno 512). [ 319.745847][ T29] audit: type=1800 audit(8277292170.207:9): pid=9881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1182" name="SYSV00000005" dev="hugetlbfs" ino=0 res=0 errno=0 [ 322.564926][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.571399][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.070981][ T9944] Dead loop on virtual device ip6_vti0, fix it urgently! [ 324.084859][ T9944] Dead loop on virtual device ip6_vti0, fix it urgently! [ 324.092400][ T9944] Dead loop on virtual device ip6_vti0, fix it urgently! [ 324.114859][ T9944] Dead loop on virtual device ip6_vti0, fix it urgently! [ 324.122554][ T9944] Dead loop on virtual device ip6_vti0, fix it urgently! [ 324.130283][ T9944] Dead loop on virtual device ip6_vti0, fix it urgently! [ 328.514599][ T9996] Dead loop on virtual device ip6_vti0, fix it urgently! [ 328.574912][ T9996] Dead loop on virtual device ip6_vti0, fix it urgently! [ 328.617528][ T9996] Dead loop on virtual device ip6_vti0, fix it urgently! [ 328.664897][ T9996] Dead loop on virtual device ip6_vti0, fix it urgently! [ 334.890583][ T5858] Bluetooth: hci1: command 0x0406 tx timeout [ 336.064636][T10077] net_ratelimit: 2 callbacks suppressed [ 336.064663][T10077] Dead loop on virtual device ip6_vti0, fix it urgently! [ 336.099112][T10077] Dead loop on virtual device ip6_vti0, fix it urgently! [ 336.127298][T10077] Dead loop on virtual device ip6_vti0, fix it urgently! [ 336.145073][T10077] Dead loop on virtual device ip6_vti0, fix it urgently! [ 336.153062][T10077] Dead loop on virtual device ip6_vti0, fix it urgently! [ 336.216132][T10077] Dead loop on virtual device ip6_vti0, fix it urgently! [ 338.894170][T10106] Dead loop on virtual device ip6_vti0, fix it urgently! [ 338.924871][T10106] Dead loop on virtual device ip6_vti0, fix it urgently! [ 338.932552][T10106] Dead loop on virtual device ip6_vti0, fix it urgently! [ 338.964903][T10106] Dead loop on virtual device ip6_vti0, fix it urgently! [ 339.986608][ T5858] Bluetooth: hci0: command 0x0406 tx timeout [ 343.788805][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.084014][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.104098][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.116816][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.133651][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.143704][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.153796][ T5858] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 344.175076][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.385793][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.535987][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.861226][T10224] chnl_net:caif_netlink_parms(): no params data found [ 345.051090][T10240] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1284'. [ 345.149562][T10224] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.161472][T10224] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.170681][T10224] bridge_slave_0: entered allmulticast mode [ 345.178250][T10224] bridge_slave_0: entered promiscuous mode [ 345.187378][T10224] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.194732][T10224] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.202019][T10224] bridge_slave_1: entered allmulticast mode [ 345.209436][T10224] bridge_slave_1: entered promiscuous mode [ 345.316406][T10224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.340625][ T12] bridge_slave_1: left allmulticast mode [ 345.367860][ T12] bridge_slave_1: left promiscuous mode [ 345.373678][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.443682][ T12] bridge_slave_0: left allmulticast mode [ 345.449686][ T12] bridge_slave_0: left promiscuous mode [ 345.470550][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.316396][ T54] Bluetooth: hci1: command tx timeout [ 346.870188][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.885599][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.934006][ T12] bond0 (unregistering): Released all slaves [ 346.981101][T10224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.048646][T10224] team0: Port device team_slave_0 added [ 347.128386][T10224] team0: Port device team_slave_1 added [ 347.277292][T10224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.294681][T10224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.325703][T10224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.367065][T10224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.374083][T10224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.467214][T10224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.689186][T10224] hsr_slave_0: entered promiscuous mode [ 347.746443][T10224] hsr_slave_1: entered promiscuous mode [ 347.758363][T10224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.769006][T10224] Cannot create hsr debugfs directory [ 348.388125][ T54] Bluetooth: hci1: command tx timeout [ 348.864638][ T12] hsr_slave_0: left promiscuous mode [ 348.884600][ T12] hsr_slave_1: left promiscuous mode [ 348.934698][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.942198][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.006026][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.013523][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.111430][ T12] veth1_macvtap: left promiscuous mode [ 349.154558][ T12] veth0_macvtap: left promiscuous mode [ 349.160822][ T12] veth1_vlan: left promiscuous mode [ 349.192224][ T12] veth0_vlan: left promiscuous mode [ 350.470429][ T54] Bluetooth: hci1: command tx timeout [ 350.817069][ T12] team0 (unregistering): Port device team_slave_1 removed [ 351.159770][ T12] team0 (unregistering): Port device team_slave_0 removed [ 351.268676][T10326] net_ratelimit: 8 callbacks suppressed [ 351.268706][T10326] Dead loop on virtual device ip6_vti0, fix it urgently! [ 351.299917][T10326] Dead loop on virtual device ip6_vti0, fix it urgently! [ 351.326201][T10326] Dead loop on virtual device ip6_vti0, fix it urgently! [ 351.333709][T10326] Dead loop on virtual device ip6_vti0, fix it urgently! [ 351.383354][T10326] Dead loop on virtual device ip6_vti0, fix it urgently! [ 351.410223][T10326] Dead loop on virtual device ip6_vti0, fix it urgently! [ 352.554285][ T54] Bluetooth: hci1: command tx timeout [ 353.324105][T10224] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 353.527959][T10224] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 353.565282][T10224] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 353.714681][T10224] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 353.900206][T10224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.918682][T10224] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.942901][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.950081][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.018119][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.025401][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.681960][T10224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.773430][T10224] veth0_vlan: entered promiscuous mode [ 355.826870][T10224] veth1_vlan: entered promiscuous mode [ 355.992516][T10224] veth0_macvtap: entered promiscuous mode [ 356.034005][T10224] veth1_macvtap: entered promiscuous mode [ 356.429460][T10224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.474508][T10224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.518662][T10224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.538351][T10224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.563201][T10224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.595507][T10224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.617078][T10224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.628955][T10224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.640378][T10224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.650976][T10224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.666331][T10224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.694773][T10224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.733768][T10224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.756223][T10224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.921971][T10224] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.944625][T10224] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.973785][T10224] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.984304][T10224] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.467023][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.503988][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.615335][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.644592][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.917983][T10508] Dead loop on virtual device ip6_vti0, fix it urgently! [ 362.980055][T10508] Dead loop on virtual device ip6_vti0, fix it urgently! [ 363.035245][T10508] Dead loop on virtual device ip6_vti0, fix it urgently! [ 363.105317][T10508] Dead loop on virtual device ip6_vti0, fix it urgently! [ 363.142788][T10508] Dead loop on virtual device ip6_vti0, fix it urgently! [ 363.215735][T10508] Dead loop on virtual device ip6_vti0, fix it urgently! [ 363.241536][T10508] Dead loop on virtual device ip6_vti0, fix it urgently! [ 365.262933][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1331'. [ 365.330435][T10557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1331'. [ 365.357283][T10554] team0: entered promiscuous mode [ 365.376496][T10554] team_slave_0: entered promiscuous mode [ 365.401844][T10554] team_slave_1: entered promiscuous mode [ 368.892780][T10614] Dead loop on virtual device ip6_vti0, fix it urgently! [ 368.940184][T10614] Dead loop on virtual device ip6_vti0, fix it urgently! [ 368.984386][T10614] Dead loop on virtual device ip6_vti0, fix it urgently! [ 369.019783][T10614] Dead loop on virtual device ip6_vti0, fix it urgently! [ 369.047546][T10614] Dead loop on virtual device ip6_vti0, fix it urgently! [ 369.081090][T10614] Dead loop on virtual device ip6_vti0, fix it urgently! [ 372.769012][T10688] Dead loop on virtual device ip6_vti0, fix it urgently! [ 372.830629][T10688] Dead loop on virtual device ip6_vti0, fix it urgently! [ 372.915073][T10688] Dead loop on virtual device ip6_vti0, fix it urgently! [ 372.922767][T10688] Dead loop on virtual device ip6_vti0, fix it urgently! [ 376.188495][T10746] net_ratelimit: 2 callbacks suppressed [ 376.188523][T10746] Dead loop on virtual device ip6_vti0, fix it urgently! [ 376.274588][T10746] Dead loop on virtual device ip6_vti0, fix it urgently! [ 376.344268][T10746] Dead loop on virtual device ip6_vti0, fix it urgently! [ 376.384957][T10746] Dead loop on virtual device ip6_vti0, fix it urgently! [ 376.432946][T10746] Dead loop on virtual device ip6_vti0, fix it urgently! [ 376.454906][T10746] Dead loop on virtual device ip6_vti0, fix it urgently! [ 376.490246][T10746] Dead loop on virtual device ip6_vti0, fix it urgently! [ 384.005724][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.012154][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.000185][T10933] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1378'. [ 387.580477][T10942] Dead loop on virtual device ip6_vti0, fix it urgently! [ 387.622886][T10942] Dead loop on virtual device ip6_vti0, fix it urgently! [ 387.660922][T10942] Dead loop on virtual device ip6_vti0, fix it urgently! [ 387.700432][T10942] Dead loop on virtual device ip6_vti0, fix it urgently! [ 387.750129][T10942] Dead loop on virtual device ip6_vti0, fix it urgently! [ 387.761914][T10942] Dead loop on virtual device ip6_vti0, fix it urgently! [ 395.606307][ T29] audit: type=1800 audit(8277292064.640:10): pid=11033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1400" name="SYSV00000005" dev="hugetlbfs" ino=0 res=0 errno=0 [ 396.758961][T11041] Dead loop on virtual device ip6_vti0, fix it urgently! [ 396.794835][T11041] Dead loop on virtual device ip6_vti0, fix it urgently! [ 396.802455][T11041] Dead loop on virtual device ip6_vti0, fix it urgently! [ 396.834733][T11041] Dead loop on virtual device ip6_vti0, fix it urgently! [ 396.842810][T11041] Dead loop on virtual device ip6_vti0, fix it urgently! [ 396.884717][T11041] Dead loop on virtual device ip6_vti0, fix it urgently! [ 400.883434][T11062] Dead loop on virtual device ip6_vti0, fix it urgently! [ 401.115154][T11062] Dead loop on virtual device ip6_vti0, fix it urgently! [ 401.122663][T11062] Dead loop on virtual device ip6_vti0, fix it urgently! [ 401.254999][T11062] Dead loop on virtual device ip6_vti0, fix it urgently! [ 407.194892][T11113] Process accounting resumed [ 412.417279][T11163] net_ratelimit: 3 callbacks suppressed [ 412.417308][T11163] Dead loop on virtual device ip6_vti0, fix it urgently! [ 412.506687][T11163] Dead loop on virtual device ip6_vti0, fix it urgently! [ 412.514196][T11163] Dead loop on virtual device ip6_vti0, fix it urgently! [ 412.563027][T11163] Dead loop on virtual device ip6_vti0, fix it urgently! [ 412.590330][T11163] Dead loop on virtual device ip6_vti0, fix it urgently! [ 412.650723][T11163] Dead loop on virtual device ip6_vti0, fix it urgently! [ 412.705040][T11163] Dead loop on virtual device ip6_vti0, fix it urgently! [ 414.856685][T11200] can: request_module (can-proto-0) failed. [ 415.246375][T11190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1437'. [ 415.523357][T11211] Dead loop on virtual device ip6_vti0, fix it urgently! [ 415.545041][T11211] Dead loop on virtual device ip6_vti0, fix it urgently! [ 415.578003][T11211] Dead loop on virtual device ip6_vti0, fix it urgently! [ 436.722583][T11406] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1480'. [ 436.827229][T11406] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1480'. [ 444.909941][T11467] net_ratelimit: 3 callbacks suppressed [ 444.909966][T11467] Dead loop on virtual device ip6_vti0, fix it urgently! [ 445.099482][T11467] Dead loop on virtual device ip6_vti0, fix it urgently! [ 445.171048][T11467] Dead loop on virtual device ip6_vti0, fix it urgently! [ 445.284867][T11467] Dead loop on virtual device ip6_vti0, fix it urgently! [ 445.292384][T11467] Dead loop on virtual device ip6_vti0, fix it urgently! [ 445.431524][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.444433][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.714894][T11467] Dead loop on virtual device ip6_vti0, fix it urgently! [ 445.793514][T11467] Dead loop on virtual device ip6_vti0, fix it urgently! [ 445.812805][T11467] Dead loop on virtual device ip6_vti0, fix it urgently! [ 445.844839][T11467] Dead loop on virtual device ip6_vti0, fix it urgently! [ 467.984618][ T5858] Bluetooth: hci1: command 0x0406 tx timeout [ 470.236355][T11291] syz.1.1455 (11291) used greatest stack depth: 19008 bytes left [ 480.363905][T11767] nbd: must specify at least one socket [ 480.454653][T11766] svc: failed to register nfsdv3 RPC service (errno 111). [ 480.498860][T11766] svc: failed to register nfsaclv3 RPC service (errno 111). [ 497.489694][T11890] Dead loop on virtual device ip6_vti0, fix it urgently! [ 497.535976][T11890] Dead loop on virtual device ip6_vti0, fix it urgently! [ 497.555054][T11890] Dead loop on virtual device ip6_vti0, fix it urgently! [ 497.593628][T11890] Dead loop on virtual device ip6_vti0, fix it urgently! [ 497.624789][T11890] Dead loop on virtual device ip6_vti0, fix it urgently! [ 497.634745][T11890] Dead loop on virtual device ip6_vti0, fix it urgently! [ 503.380309][T11941] Dead loop on virtual device ip6_vti0, fix it urgently! [ 503.419936][T11941] Dead loop on virtual device ip6_vti0, fix it urgently! [ 503.491009][T11941] Dead loop on virtual device ip6_vti0, fix it urgently! [ 503.534574][T11941] Dead loop on virtual device ip6_vti0, fix it urgently! [ 503.565007][T11941] Dead loop on virtual device ip6_vti0, fix it urgently! [ 503.599703][T11941] Dead loop on virtual device ip6_vti0, fix it urgently! [ 503.649871][T11941] Dead loop on virtual device ip6_vti0, fix it urgently! [ 506.870186][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.876807][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.153879][T11977] Dead loop on virtual device ip6_vti0, fix it urgently! [ 508.236639][T11977] Dead loop on virtual device ip6_vti0, fix it urgently! [ 508.244164][T11977] Dead loop on virtual device ip6_vti0, fix it urgently! [ 513.034149][T12022] net_ratelimit: 3 callbacks suppressed [ 513.034177][T12022] Dead loop on virtual device ip6_vti0, fix it urgently! [ 513.132924][T12022] Dead loop on virtual device ip6_vti0, fix it urgently! [ 513.157510][T12022] Dead loop on virtual device ip6_vti0, fix it urgently! [ 513.224758][T12022] Dead loop on virtual device ip6_vti0, fix it urgently! [ 513.232302][T12022] Dead loop on virtual device ip6_vti0, fix it urgently! [ 513.334872][T12022] Dead loop on virtual device ip6_vti0, fix it urgently! [ 513.374935][T12022] Dead loop on virtual device ip6_vti0, fix it urgently! [ 514.785927][T12016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1623'. [ 518.817765][T12069] Dead loop on virtual device ip6_vti0, fix it urgently! [ 518.854976][T12069] Dead loop on virtual device ip6_vti0, fix it urgently! [ 518.894186][T12069] Dead loop on virtual device ip6_vti0, fix it urgently! [ 518.954597][T12069] Dead loop on virtual device ip6_vti0, fix it urgently! [ 519.054542][T12069] Dead loop on virtual device ip6_vti0, fix it urgently! [ 519.126960][T12069] Dead loop on virtual device ip6_vti0, fix it urgently! [ 519.212699][T12069] Dead loop on virtual device ip6_vti0, fix it urgently! [ 521.952891][T12092] svc: failed to register nfsdv3 RPC service (errno 111). [ 522.070851][T12092] svc: failed to register nfsaclv3 RPC service (errno 111). [ 523.886203][T12092] nbd: must specify at least one socket [ 524.788442][T11595] syz.0.1522 (11595) used greatest stack depth: 18656 bytes left [ 526.544834][T11562] syz.0.1518 (11562) used greatest stack depth: 18032 bytes left [ 528.330939][T12137] can: request_module (can-proto-0) failed. [ 528.425028][T12125] kernel read not supported for file /#E-\yċF B|ctpL#kZrV]Le- m,oOɧ (pid: 12125 comm: syz.3.1646) [ 528.589371][ T29] audit: type=1800 audit(8277292056.790:11): pid=12125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1646" name=23452D5CF886C079018CC48BB4CA46A30B427C08A3A663917418DE704C23A8FD90F26B5AA17256B65D4C652D0C1A6DBE2CE66F4FC9A7 dev="mqueue" ino=33490 res=0 errno=0 [ 535.731584][T12183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1656'. [ 541.867711][T12225] netlink: 'syz.0.1666': attribute type 2 has an invalid length. [ 552.599028][T12301] Dead loop on virtual device ip6_vti0, fix it urgently! [ 552.684715][T12301] Dead loop on virtual device ip6_vti0, fix it urgently! [ 552.731400][T12301] Dead loop on virtual device ip6_vti0, fix it urgently! [ 552.798175][T12301] Dead loop on virtual device ip6_vti0, fix it urgently! [ 552.852218][T12301] Dead loop on virtual device ip6_vti0, fix it urgently! [ 552.925950][T12301] Dead loop on virtual device ip6_vti0, fix it urgently! [ 552.933994][T12301] Dead loop on virtual device ip6_vti0, fix it urgently! [ 554.896633][ T5858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 554.906641][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 554.924516][ T5858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 554.934732][ T5858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 554.942450][ T5858] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 554.951020][ T5858] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 555.375951][T12313] chnl_net:caif_netlink_parms(): no params data found [ 555.464135][T12312] [ 555.466544][T12312] ====================================================== [ 555.473614][T12312] WARNING: possible circular locking dependency detected [ 555.480668][T12312] 6.12.0-rc5-syzkaller #0 Not tainted [ 555.486076][T12312] ------------------------------------------------------ [ 555.493130][T12312] syz.4.1682/12312 is trying to acquire lock: [ 555.499232][T12312] ffff88807e189e18 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x3a9/0x6a0 [ 555.508903][T12312] [ 555.508903][T12312] but task is already holding lock: [ 555.516302][T12312] ffff8880292ce4c0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x86/0x140 [ 555.527127][T12312] [ 555.527127][T12312] which lock already depends on the new lock. [ 555.527127][T12312] [ 555.537588][T12312] [ 555.537588][T12312] the existing dependency chain (in reverse order) is: [ 555.546643][T12312] [ 555.546643][T12312] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 555.555418][T12312] down_write+0x93/0x200 [ 555.560252][T12312] process_measurement+0x39c/0x2370 [ 555.566049][T12312] ima_file_mmap+0x146/0x1d0 [ 555.571301][T12312] security_mmap_file+0x8bd/0x990 [ 555.576904][T12312] __do_sys_remap_file_pages+0x526/0x900 [ 555.583135][T12312] do_syscall_64+0xcd/0x250 [ 555.588225][T12312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.594715][T12312] [ 555.594715][T12312] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 555.602339][T12312] __lock_acquire+0x250b/0x3ce0 [ 555.607796][T12312] lock_acquire.part.0+0x11b/0x380 [ 555.613505][T12312] down_read_killable+0x9d/0x380 [ 555.619045][T12312] lock_mm_and_find_vma+0x3a9/0x6a0 [ 555.624836][T12312] do_user_addr_fault+0x2b5/0x13f0 [ 555.630540][T12312] exc_page_fault+0x5c/0xc0 [ 555.635669][T12312] asm_exc_page_fault+0x26/0x30 [ 555.641107][T12312] fault_in_readable+0x160/0x200 [ 555.646627][T12312] fault_in_iov_iter_readable+0x101/0x2c0 [ 555.652937][T12312] generic_perform_write+0x21b/0x920 [ 555.658903][T12312] shmem_file_write_iter+0x10e/0x140 [ 555.664794][T12312] vfs_write+0x5ae/0x1150 [ 555.669728][T12312] ksys_write+0x12f/0x260 [ 555.674649][T12312] do_syscall_64+0xcd/0x250 [ 555.679745][T12312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.686236][T12312] [ 555.686236][T12312] other info that might help us debug this: [ 555.686236][T12312] [ 555.696518][T12312] Possible unsafe locking scenario: [ 555.696518][T12312] [ 555.704018][T12312] CPU0 CPU1 [ 555.709513][T12312] ---- ---- [ 555.714915][T12312] lock(&sb->s_type->i_mutex_key#12); [ 555.720436][T12312] lock(&mm->mmap_lock); [ 555.727342][T12312] lock(&sb->s_type->i_mutex_key#12); [ 555.735401][T12312] rlock(&mm->mmap_lock); [ 555.739880][T12312] [ 555.739880][T12312] *** DEADLOCK *** [ 555.739880][T12312] [ 555.748065][T12312] 3 locks held by syz.4.1682/12312: [ 555.753310][T12312] #0: ffff8880322b82b8 (&f->f_pos_lock){+.+.}-{3:3}, at: fdget_pos+0x24c/0x360 [ 555.762482][T12312] #1: ffff88804d902420 (sb_writers#5){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 555.771564][T12312] #2: ffff8880292ce4c0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x86/0x140 [ 555.782923][T12312] [ 555.782923][T12312] stack backtrace: [ 555.788855][T12312] CPU: 0 UID: 0 PID: 12312 Comm: syz.4.1682 Not tainted 6.12.0-rc5-syzkaller #0 [ 555.797933][T12312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 555.808037][T12312] Call Trace: [ 555.811355][T12312] [ 555.814338][T12312] dump_stack_lvl+0x116/0x1f0 [ 555.819091][T12312] print_circular_bug+0x419/0x5d0 [ 555.824208][T12312] check_noncircular+0x31a/0x400 [ 555.829229][T12312] ? __pfx_check_noncircular+0x10/0x10 [ 555.834761][T12312] ? lock_acquire+0x2f/0xb0 [ 555.839342][T12312] ? lockdep_lock+0xc6/0x200 [ 555.844000][T12312] ? __pfx_lockdep_lock+0x10/0x10 [ 555.849092][T12312] __lock_acquire+0x250b/0x3ce0 [ 555.854031][T12312] ? __pfx___lock_acquire+0x10/0x10 [ 555.859302][T12312] ? try_to_wake_up+0x154/0x14f0 [ 555.864400][T12312] ? rwsem_wake.isra.0+0xbe/0x120 [ 555.869493][T12312] lock_acquire.part.0+0x11b/0x380 [ 555.874678][T12312] ? lock_mm_and_find_vma+0x3a9/0x6a0 [ 555.880115][T12312] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 555.885826][T12312] ? rcu_is_watching+0x12/0xc0 [ 555.890646][T12312] ? trace_lock_acquire+0x14a/0x1d0 [ 555.895909][T12312] ? lock_mm_and_find_vma+0x3a9/0x6a0 [ 555.901366][T12312] ? lock_acquire+0x2f/0xb0 [ 555.905940][T12312] ? lock_mm_and_find_vma+0x3a9/0x6a0 [ 555.911389][T12312] down_read_killable+0x9d/0x380 [ 555.916383][T12312] ? lock_mm_and_find_vma+0x3a9/0x6a0 [ 555.921820][T12312] ? __pfx_down_read_killable+0x10/0x10 [ 555.927423][T12312] ? __pfx_search_extable+0x10/0x10 [ 555.932677][T12312] ? fault_in_readable+0x160/0x200 [ 555.937856][T12312] lock_mm_and_find_vma+0x3a9/0x6a0 [ 555.943114][T12312] do_user_addr_fault+0x2b5/0x13f0 [ 555.948310][T12312] exc_page_fault+0x5c/0xc0 [ 555.952879][T12312] asm_exc_page_fault+0x26/0x30 [ 555.957799][T12312] RIP: 0010:fault_in_readable+0x160/0x200 [ 555.963581][T12312] Code: 42 e8 45 31 f6 e8 70 36 ba ff 48 39 eb 75 13 eb 2e e8 64 36 ba ff 48 81 c3 00 10 00 00 48 39 eb 74 1d e8 53 36 ba ff 45 89 f7 <8a> 03 31 ff 44 89 fe 88 44 24 28 e8 80 38 ba ff 45 85 ff 74 d2 e8 [ 555.983272][T12312] RSP: 0018:ffffc900040e7b18 EFLAGS: 00050246 [ 555.989401][T12312] RAX: 0000000000040000 RBX: 00000000000f4000 RCX: ffffc9000f82c000 [ 555.997424][T12312] RDX: 0000000000040000 RSI: ffffffff81d26f9d RDI: 0000000000000005 [ 556.005444][T12312] RBP: 0000000000101000 R08: 0000000000000005 R09: 0000000000000000 [ 556.013466][T12312] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000100082 [ 556.021561][T12312] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 556.029590][T12312] ? fault_in_readable+0x15d/0x200 [ 556.034779][T12312] ? fault_in_readable+0x15d/0x200 [ 556.039964][T12312] ? __pfx_fault_in_readable+0x10/0x10 [ 556.045489][T12312] ? find_held_lock+0x2d/0x110 [ 556.050313][T12312] ? inode_to_bdi+0x9e/0x160 [ 556.054970][T12312] fault_in_iov_iter_readable+0x101/0x2c0 [ 556.060756][T12312] generic_perform_write+0x21b/0x920 [ 556.066109][T12312] ? __mark_inode_dirty+0x6b0/0xe60 [ 556.071374][T12312] ? __pfx_generic_perform_write+0x10/0x10 [ 556.077244][T12312] ? __mark_inode_dirty+0x71a/0xe60 [ 556.082508][T12312] ? generic_update_time+0xcf/0xf0 [ 556.087679][T12312] ? mnt_put_write_access_file+0x45/0xf0 [ 556.093384][T12312] shmem_file_write_iter+0x10e/0x140 [ 556.098740][T12312] vfs_write+0x5ae/0x1150 [ 556.103133][T12312] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 556.109015][T12312] ? trace_lock_acquire+0x14a/0x1d0 [ 556.114266][T12312] ? __pfx_vfs_write+0x10/0x10 [ 556.119076][T12312] ? __pfx___mutex_lock+0x10/0x10 [ 556.124186][T12312] ksys_write+0x12f/0x260 [ 556.128595][T12312] ? __pfx_ksys_write+0x10/0x10 [ 556.133510][T12312] do_syscall_64+0xcd/0x250 [ 556.138071][T12312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.144032][T12312] RIP: 0033:0x7eff84f7e719 [ 556.148498][T12312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.168175][T12312] RSP: 002b:00007eff849ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 556.176648][T12312] RAX: ffffffffffffffda RBX: 00007eff85135f80 RCX: 00007eff84f7e719 [ 556.184672][T12312] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 556.192697][T12312] RBP: 00007eff84ff132e R08: 0000000000000000 R09: 0000000000000000 [ 556.200713][T12312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.208729][T12312] R13: 0000000000000000 R14: 00007eff85135f80 R15: 00007ffe6d4cdba8 [ 556.216756][T12312] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 557.114391][ T54] Bluetooth: hci4: command tx timeout [ 557.373794][T12327] kexec: Could not allocate control_code_buffer [ 559.487022][ T35] bond0 (unregistering): Released all slaves [ 560.350631][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.393848][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.439293][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.500289][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.600260][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.670937][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.709782][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.760781][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.870009][ T35] bridge_slave_1: left allmulticast mode [ 560.878128][ T35] bridge_slave_1: left promiscuous mode [ 560.884710][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.893466][ T35] bridge_slave_0: left allmulticast mode [ 560.899818][ T35] bridge_slave_0: left promiscuous mode [ 560.905793][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.914535][ T35] bridge_slave_1: left allmulticast mode [ 560.920536][ T35] bridge_slave_1: left promiscuous mode [ 560.926603][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.935285][ T35] bridge_slave_0: left allmulticast mode [ 560.940952][ T35] bridge_slave_0: left promiscuous mode [ 560.948194][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.150410][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.161005][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.171137][ T35] bond0 (unregistering): Released all slaves [ 561.185883][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.197125][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.207766][ T35] bond0 (unregistering): Released all slaves [ 561.705731][ T35] hsr_slave_0: left promiscuous mode [ 561.711614][ T35] hsr_slave_1: left promiscuous mode [ 561.718447][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.727539][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.740188][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.750079][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.760843][ T35] hsr_slave_0: left promiscuous mode [ 561.769025][ T35] hsr_slave_1: left promiscuous mode [ 561.775533][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.782975][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.792894][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.800904][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.815982][ T35] veth1_macvtap: left promiscuous mode [ 561.821600][ T35] veth1_vlan: left promiscuous mode [ 561.827094][ T35] veth0_vlan: left promiscuous mode [ 561.833036][ T35] veth1_macvtap: left promiscuous mode [ 561.838694][ T35] veth0_macvtap: left promiscuous mode [ 561.844469][ T35] veth1_vlan: left promiscuous mode [ 561.849810][ T35] veth0_vlan: left promiscuous mode [ 562.052726][ T35] team_slave_1 (unregistering): left promiscuous mode [ 562.060276][ T35] team0 (unregistering): Port device team_slave_1 removed [ 562.071577][ T35] team_slave_0 (unregistering): left promiscuous mode [ 562.079670][ T35] team0 (unregistering): Port device team_slave_0 removed [ 562.359064][ T35] team0 (unregistering): Port device team_slave_1 removed [ 562.386867][ T35] team0 (unregistering): Port device team_slave_0 removed