0)={'\x00', 0x4, 0x3, 0x4}) (async) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x581400, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000280)={'\x00', 0xce, 0x0, 0x800}) (async) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000100)={'\x00', 0xfffffff7, 0x0, 0x10000}) (async) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x15, 0x1, '/dev/dlm-monitor\x00'}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'E,!\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x5) [ 306.888126][ T6187] __pmd_alloc+0x3f/0x5d0 [ 306.888509][ T6189] FAULT_INJECTION: forcing a failure. [ 306.888509][ T6189] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 306.890308][ T6187] ? __pud_alloc+0xe4/0x180 [ 306.890334][ T6187] copy_page_range+0x22c1/0x3830 [ 306.890357][ T6187] ? mas_wr_modify+0x2da/0x16d0 [ 306.890382][ T6187] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 306.890406][ T6187] ? mas_store+0x275/0x3a0 [ 306.890429][ T6187] ? handle_mm_fault+0x9f0/0x9f0 23:08:18 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '[\'&\':^^/\x00'}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ' \x01\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}]}, 0x50}, 0x1, 0x0, 0x0, 0x4084018}, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r2) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x528c01aca1e587fc}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x6f, 0x9, 0x1, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', 0x8, 0x7, 0x1, 0x4de1}}) [ 306.890451][ T6187] ? down_write+0x14f/0x200 [ 306.890473][ T6187] dup_mmap+0x10bc/0x19d0 [ 306.890492][ T6187] ? replace_mm_exe_file+0x4c0/0x4c0 [ 306.890512][ T6187] ? lockdep_hardirqs_on+0x7d/0x100 [ 306.890533][ T6187] ? mm_init+0xc7a/0x1030 [ 306.890552][ T6187] copy_process+0x6663/0x75c0 [ 306.890574][ T6187] ? pidfd_prepare+0x80/0x80 [ 306.890592][ T6187] ? find_held_lock+0x2d/0x110 [ 306.890609][ T6187] ? find_held_lock+0x2d/0x110 [ 306.890651][ T6187] kernel_clone+0xeb/0x890 [ 306.890671][ T6187] ? create_io_thread+0xe0/0xe0 [ 306.890690][ T6187] ? vfs_write+0x15c/0xd50 [ 306.890709][ T6187] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 306.890730][ T6187] ? wait_for_completion_io_timeout+0x20/0x20 [ 306.890751][ T6187] __do_sys_clone+0xba/0x100 [ 306.890771][ T6187] ? kernel_clone+0x890/0x890 [ 306.890793][ T6187] ? syscall_enter_from_user_mode+0x26/0x80 23:08:18 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r1) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '[\'&\':^^/\x00'}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ' \x01\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}]}, 0x50}, 0x1, 0x0, 0x0, 0x4084018}, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r2) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x528c01aca1e587fc}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x6f, 0x9, 0x1, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', 0x8, 0x7, 0x1, 0x4de1}}) [ 306.890816][ T6187] do_syscall_64+0x39/0xb0 [ 306.890832][ T6187] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 306.890861][ T6187] RIP: 0033:0x7f469ba8c389 [ 306.890874][ T6187] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 306.890890][ T6187] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 306.890908][ T6187] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 306.890920][ T6187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 306.968477][ T6187] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 306.971525][ T6187] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 306.974710][ T6187] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 306.978033][ T6187] [ 306.979363][ T6189] CPU: 1 PID: 6189 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 306.983418][ T6189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 306.987026][ T6189] Call Trace: [ 306.988499][ T6189] [ 306.989748][ T6189] dump_stack_lvl+0x136/0x150 [ 306.991764][ T6189] should_fail_ex+0x4a3/0x5b0 [ 306.993803][ T6189] prepare_alloc_pages+0x178/0x570 [ 306.996227][ T6189] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 306.998500][ T6189] __alloc_pages+0x149/0x4a0 [ 307.000217][ T6189] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 307.002627][ T6189] ? copy_page_range+0x1bc0/0x3830 23:08:19 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) 23:08:19 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x500000000000000) 23:08:19 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r1) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '[\'&\':^^/\x00'}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ' \x01\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}]}, 0x50}, 0x1, 0x0, 0x0, 0x4084018}, 0x84) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r2) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x528c01aca1e587fc}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x6f, 0x9, 0x1, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', 0x8, 0x7, 0x1, 0x4de1}}) [ 307.004504][ T6189] alloc_pages+0x1aa/0x270 [ 307.006487][ T6189] get_zeroed_page+0x14/0x40 [ 307.008521][ T6189] __pud_alloc+0x3b/0x180 [ 307.010392][ T6189] copy_page_range+0x2199/0x3830 [ 307.012199][ T6189] ? mas_wr_modify+0x2da/0x16d0 [ 307.014502][ T6189] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 307.017505][ T6189] ? mas_store+0x275/0x3a0 [ 307.019157][ T6189] ? handle_mm_fault+0x9f0/0x9f0 [ 307.021312][ T6189] ? down_write+0x14f/0x200 [ 307.023278][ T6189] dup_mmap+0x10bc/0x19d0 [ 307.024975][ T6189] ? replace_mm_exe_file+0x4c0/0x4c0 [ 307.025071][ T6207] FAULT_INJECTION: forcing a failure. [ 307.025071][ T6207] name failslab, interval 1, probability 0, space 0, times 0 [ 307.027257][ T6189] ? lockdep_hardirqs_on+0x7d/0x100 [ 307.027284][ T6189] ? mm_init+0xc7a/0x1030 [ 307.027303][ T6189] copy_process+0x6663/0x75c0 [ 307.039022][ T6189] ? pidfd_prepare+0x80/0x80 [ 307.041210][ T6189] ? find_held_lock+0x2d/0x110 [ 307.043501][ T6189] ? find_held_lock+0x2d/0x110 [ 307.045796][ T6189] kernel_clone+0xeb/0x890 [ 307.047872][ T6189] ? create_io_thread+0xe0/0xe0 [ 307.050102][ T6189] ? vfs_write+0x15c/0xd50 [ 307.052132][ T6189] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 307.054834][ T6189] ? wait_for_completion_io_timeout+0x20/0x20 [ 307.057524][ T6189] __do_sys_clone+0xba/0x100 [ 307.059539][ T6189] ? kernel_clone+0x890/0x890 [ 307.061687][ T6189] ? syscall_enter_from_user_mode+0x26/0x80 [ 307.064418][ T6189] do_syscall_64+0x39/0xb0 [ 307.066231][ T6189] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 307.068516][ T6189] RIP: 0033:0x7f81ce88c389 [ 307.070229][ T6189] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 307.078297][ T6189] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 307.081767][ T6189] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 307.084883][ T6189] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 307.087651][ T6189] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 307.090512][ T6189] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 307.093646][ T6189] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 307.096757][ T6189] [ 307.097893][ T6207] CPU: 0 PID: 6207 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 307.102650][ T6207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 307.106645][ T6207] Call Trace: [ 307.107825][ T6207] [ 307.108978][ T6207] dump_stack_lvl+0x136/0x150 [ 307.110656][ T6207] should_fail_ex+0x4a3/0x5b0 [ 307.112462][ T6207] should_failslab+0x9/0x20 [ 307.114229][ T6207] kmem_cache_alloc+0x5d/0x3f0 [ 307.116267][ T6207] vm_area_dup+0x55/0x300 [ 307.118063][ T6207] dup_mmap+0x713/0x19d0 [ 307.119795][ T6207] ? replace_mm_exe_file+0x4c0/0x4c0 [ 307.122005][ T6207] ? lockdep_hardirqs_on+0x7d/0x100 [ 307.124176][ T6207] ? mm_init+0xc7a/0x1030 [ 307.125813][ T6207] copy_process+0x6663/0x75c0 [ 307.127692][ T6207] ? pidfd_prepare+0x80/0x80 [ 307.129445][ T6207] ? find_held_lock+0x2d/0x110 [ 307.131267][ T6207] ? find_held_lock+0x2d/0x110 [ 307.133150][ T6207] kernel_clone+0xeb/0x890 [ 307.134896][ T6207] ? create_io_thread+0xe0/0xe0 [ 307.136783][ T6207] ? vfs_write+0x15c/0xd50 [ 307.138459][ T6207] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 307.140636][ T6207] ? wait_for_completion_io_timeout+0x20/0x20 [ 307.143015][ T6207] __do_sys_clone+0xba/0x100 [ 307.144748][ T6207] ? kernel_clone+0x890/0x890 [ 307.146542][ T6207] ? syscall_enter_from_user_mode+0x26/0x80 [ 307.148831][ T6207] do_syscall_64+0x39/0xb0 [ 307.150538][ T6207] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 307.152884][ T6207] RIP: 0033:0x7f469ba8c389 [ 307.154739][ T6207] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 307.162110][ T6207] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 307.165146][ T6207] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 307.167976][ T6207] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 307.170888][ T6207] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 307.173811][ T6207] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 307.176737][ T6207] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 307.179822][ T6207] 23:08:19 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) 23:08:19 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x600000000000000) 23:08:19 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508d7d2c68a) [ 307.191535][ T6214] FAULT_INJECTION: forcing a failure. 23:08:19 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) [ 307.191535][ T6214] name failslab, interval 1, probability 0, space 0, times 0 23:08:19 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508d7d2c68a) [ 307.197260][ T6214] CPU: 0 PID: 6214 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 307.201373][ T6214] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 23:08:19 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x700000000000000) [ 307.204775][ T6214] Call Trace: [ 307.206533][ T6214] [ 307.207921][ T6214] dump_stack_lvl+0x136/0x150 [ 307.209180][ T6220] FAULT_INJECTION: forcing a failure. [ 307.209180][ T6220] name failslab, interval 1, probability 0, space 0, times 0 23:08:19 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0xf00000000000000) 23:08:19 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508d7d2c68a) [ 307.210057][ T6214] should_fail_ex+0x4a3/0x5b0 [ 307.217183][ T6214] should_failslab+0x9/0x20 [ 307.219071][ T6214] kmem_cache_alloc+0x5d/0x3f0 [ 307.221266][ T6214] vm_area_dup+0x23/0x300 [ 307.223077][ T6214] dup_mmap+0x713/0x19d0 [ 307.224745][ T6214] ? replace_mm_exe_file+0x4c0/0x4c0 [ 307.227041][ T6214] ? lockdep_hardirqs_on+0x7d/0x100 [ 307.229163][ T6214] ? mm_init+0xc7a/0x1030 [ 307.230737][ T6214] copy_process+0x6663/0x75c0 [ 307.232456][ T6214] ? pidfd_prepare+0x80/0x80 [ 307.234124][ T6214] ? find_held_lock+0x2d/0x110 [ 307.235861][ T6214] ? find_held_lock+0x2d/0x110 [ 307.237582][ T6214] kernel_clone+0xeb/0x890 [ 307.239231][ T6214] ? create_io_thread+0xe0/0xe0 [ 307.241019][ T6214] ? vfs_write+0x15c/0xd50 [ 307.242646][ T6214] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 307.244692][ T6214] ? wait_for_completion_io_timeout+0x20/0x20 [ 307.246921][ T6214] __do_sys_clone+0xba/0x100 [ 307.248622][ T6214] ? kernel_clone+0x890/0x890 [ 307.250322][ T6214] ? syscall_enter_from_user_mode+0x26/0x80 [ 307.252454][ T6214] do_syscall_64+0x39/0xb0 [ 307.254073][ T6214] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 307.256188][ T6214] RIP: 0033:0x7f81ce88c389 [ 307.257787][ T6214] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 307.264634][ T6214] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 307.267614][ T6214] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 307.270430][ T6214] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 307.273284][ T6214] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 307.276126][ T6214] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 307.279084][ T6214] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 307.282051][ T6214] [ 307.283288][ T6220] CPU: 2 PID: 6220 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 307.287874][ T6220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 23:08:19 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) 23:08:19 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x2000c000) 23:08:19 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x1800000000000000) [ 307.292068][ T6220] Call Trace: [ 307.293987][ T6220] [ 307.295362][ T6220] dump_stack_lvl+0x136/0x150 [ 307.297602][ T6220] should_fail_ex+0x4a3/0x5b0 [ 307.299833][ T6220] should_failslab+0x9/0x20 [ 307.301906][ T6220] kmem_cache_alloc+0x5d/0x3f0 [ 307.304174][ T6220] vm_area_dup+0x55/0x300 [ 307.306274][ T6220] dup_mmap+0x713/0x19d0 [ 307.306496][ T6231] FAULT_INJECTION: forcing a failure. [ 307.306496][ T6231] name failslab, interval 1, probability 0, space 0, times 0 [ 307.308275][ T6220] ? replace_mm_exe_file+0x4c0/0x4c0 [ 307.308310][ T6220] ? lockdep_hardirqs_on+0x7d/0x100 [ 307.308334][ T6220] ? mm_init+0xc7a/0x1030 [ 307.308356][ T6220] copy_process+0x6663/0x75c0 [ 307.321100][ T6220] ? pidfd_prepare+0x80/0x80 [ 307.322784][ T6220] ? find_held_lock+0x2d/0x110 [ 307.324860][ T6220] ? find_held_lock+0x2d/0x110 [ 307.327030][ T6220] kernel_clone+0xeb/0x890 [ 307.328966][ T6220] ? create_io_thread+0xe0/0xe0 [ 307.330944][ T6220] ? vfs_write+0x15c/0xd50 [ 307.332951][ T6220] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 307.335426][ T6220] ? wait_for_completion_io_timeout+0x20/0x20 [ 307.338261][ T6220] __do_sys_clone+0xba/0x100 [ 307.340497][ T6220] ? kernel_clone+0x890/0x890 [ 307.342756][ T6220] ? syscall_enter_from_user_mode+0x26/0x80 [ 307.345514][ T6220] do_syscall_64+0x39/0xb0 [ 307.347169][ T6220] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 307.349395][ T6220] RIP: 0033:0x7f469ba8c389 [ 307.351093][ T6220] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 307.358752][ T6220] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 307.362614][ T6220] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 307.366009][ T6220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 307.369248][ T6220] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 307.372683][ T6220] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 307.376240][ T6220] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 307.379609][ T6220] [ 307.382037][ T6231] CPU: 0 PID: 6231 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 307.385986][ T6231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 307.389204][ T6231] Call Trace: [ 307.390465][ T6231] [ 307.391583][ T6231] dump_stack_lvl+0x136/0x150 [ 307.393356][ T6231] should_fail_ex+0x4a3/0x5b0 [ 307.395145][ T6231] should_failslab+0x9/0x20 [ 307.396866][ T6231] kmem_cache_alloc+0x5d/0x3f0 [ 307.398792][ T6231] vm_area_dup+0x55/0x300 [ 307.400484][ T6231] dup_mmap+0x713/0x19d0 [ 307.402096][ T6231] ? replace_mm_exe_file+0x4c0/0x4c0 [ 307.404095][ T6231] ? lockdep_hardirqs_on+0x7d/0x100 [ 307.406028][ T6231] ? mm_init+0xc7a/0x1030 [ 307.407673][ T6231] copy_process+0x6663/0x75c0 [ 307.409482][ T6231] ? pidfd_prepare+0x80/0x80 [ 307.411290][ T6231] ? find_held_lock+0x2d/0x110 [ 307.413123][ T6231] ? find_held_lock+0x2d/0x110 [ 307.414986][ T6231] kernel_clone+0xeb/0x890 [ 307.416784][ T6231] ? create_io_thread+0xe0/0xe0 [ 307.418637][ T6231] ? vfs_write+0x15c/0xd50 [ 307.420286][ T6231] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 307.422315][ T6231] ? wait_for_completion_io_timeout+0x20/0x20 [ 307.424518][ T6231] __do_sys_clone+0xba/0x100 [ 307.426217][ T6231] ? kernel_clone+0x890/0x890 [ 307.427949][ T6231] ? syscall_enter_from_user_mode+0x26/0x80 [ 307.430507][ T6231] do_syscall_64+0x39/0xb0 [ 307.432484][ T6231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 307.435081][ T6231] RIP: 0033:0x7f81ce88c389 [ 307.437113][ T6231] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 307.445696][ T6231] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 307.449312][ T6231] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 307.452882][ T6231] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 307.456478][ T6231] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 307.459542][ T6231] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 307.462395][ T6231] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 307.465294][ T6231] 23:08:19 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) 23:08:19 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async, rerun: 32) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 32) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x2000c000) 23:08:19 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x2403000000000000) 23:08:19 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) 23:08:19 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x2503000000000000) [ 307.483061][ T6239] FAULT_INJECTION: forcing a failure. [ 307.483061][ T6239] name failslab, interval 1, probability 0, space 0, times 0 [ 307.487763][ T6241] FAULT_INJECTION: forcing a failure. [ 307.487763][ T6241] name failslab, interval 1, probability 0, space 0, times 0 [ 307.488797][ T6239] CPU: 3 PID: 6239 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 307.488820][ T6239] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 307.488830][ T6239] Call Trace: 23:08:19 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0xb023000000000000) 23:08:19 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x2000c000) [ 307.488836][ T6239] [ 307.488842][ T6239] dump_stack_lvl+0x136/0x150 [ 307.488865][ T6239] should_fail_ex+0x4a3/0x5b0 [ 307.510391][ T6239] should_failslab+0x9/0x20 [ 307.512451][ T6239] kmem_cache_alloc+0x5d/0x3f0 [ 307.514638][ T6239] vm_area_dup+0x23/0x300 [ 307.516606][ T6239] dup_mmap+0x713/0x19d0 [ 307.518535][ T6239] ? replace_mm_exe_file+0x4c0/0x4c0 [ 307.521072][ T6239] ? lockdep_hardirqs_on+0x7d/0x100 [ 307.523511][ T6239] ? mm_init+0xc7a/0x1030 [ 307.525600][ T6239] copy_process+0x6663/0x75c0 [ 307.527802][ T6239] ? pidfd_prepare+0x80/0x80 23:08:19 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0xf6ffffff00000000) [ 307.529873][ T6239] ? find_held_lock+0x2d/0x110 [ 307.532187][ T6239] ? find_held_lock+0x2d/0x110 [ 307.534347][ T6239] kernel_clone+0xeb/0x890 [ 307.536354][ T6239] ? create_io_thread+0xe0/0xe0 [ 307.538628][ T6239] ? vfs_write+0x15c/0xd50 [ 307.540780][ T6239] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 307.543488][ T6239] ? wait_for_completion_io_timeout+0x20/0x20 [ 307.546365][ T6239] __do_sys_clone+0xba/0x100 [ 307.548446][ T6239] ? kernel_clone+0x890/0x890 [ 307.550551][ T6239] ? syscall_enter_from_user_mode+0x26/0x80 [ 307.553190][ T6239] do_syscall_64+0x39/0xb0 [ 307.555175][ T6239] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 307.557837][ T6239] RIP: 0033:0x7f469ba8c389 [ 307.559926][ T6239] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 307.568698][ T6239] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 307.572381][ T6239] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 307.575978][ T6239] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 307.579822][ T6239] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 307.583357][ T6239] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 307.586845][ T6239] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 307.590480][ T6239] [ 307.591960][ T6241] CPU: 1 PID: 6241 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 307.596345][ T6241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 307.599992][ T6241] Call Trace: [ 307.601311][ T6241] [ 307.602453][ T6241] dump_stack_lvl+0x136/0x150 [ 307.604324][ T6241] should_fail_ex+0x4a3/0x5b0 23:08:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x24, r2, 0x1, 0x70bd29, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="10002cbd7000fcdbdf252b0000000c0005000200baaaaaaaaaaa08000200", @ANYRES32=r3, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x400c891}, 0x40840) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x1) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r6, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r5, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x21}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4044484) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="50000000c653005683a26f0b207d17eb65dce034d77a66a33855ceb82d5e2cda198b61a75ba89c48c5fd3d2db4970827e946c463be40b4c06856fb1ef2a8e114a80ad9477ad5fb1769e08e889a240470c5567030c943c283758ff2bfc7484c868060de01ee7d352613fbe21172bf15bf9a5390707938b2d9f71504d01dc61f7859", @ANYRES16=0x0, @ANYBLOB="000425bd7000fddbdf2504000000000100000b002c571719c876aa1c913f"], 0xfffffffffffffc2e}, 0x1, 0x0, 0x0, 0x804}, 0x48000) [ 307.606426][ T6241] should_failslab+0x9/0x20 [ 307.608410][ T6241] kmem_cache_alloc+0x5d/0x3f0 [ 307.610324][ T6241] vm_area_dup+0x23/0x300 [ 307.612580][ T6241] dup_mmap+0x713/0x19d0 [ 307.615060][ T6241] ? replace_mm_exe_file+0x4c0/0x4c0 [ 307.617630][ T6241] ? lockdep_hardirqs_on+0x7d/0x100 [ 307.619734][ T6241] ? mm_init+0xc7a/0x1030 [ 307.621633][ T6241] copy_process+0x6663/0x75c0 [ 307.622993][ T6256] FAULT_INJECTION: forcing a failure. [ 307.622993][ T6256] name failslab, interval 1, probability 0, space 0, times 0 [ 307.623574][ T6241] ? pidfd_prepare+0x80/0x80 [ 307.630944][ T6241] ? find_held_lock+0x2d/0x110 [ 307.633066][ T6241] ? find_held_lock+0x2d/0x110 [ 307.635098][ T6241] kernel_clone+0xeb/0x890 [ 307.637064][ T6241] ? create_io_thread+0xe0/0xe0 [ 307.639193][ T6241] ? vfs_write+0x15c/0xd50 [ 307.641278][ T6241] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 307.643868][ T6241] ? wait_for_completion_io_timeout+0x20/0x20 [ 307.646888][ T6241] __do_sys_clone+0xba/0x100 [ 307.649264][ T6241] ? kernel_clone+0x890/0x890 [ 307.651552][ T6241] ? syscall_enter_from_user_mode+0x26/0x80 [ 307.654270][ T6241] do_syscall_64+0x39/0xb0 [ 307.656303][ T6241] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 307.658674][ T6241] RIP: 0033:0x7f81ce88c389 [ 307.660652][ T6241] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 307.669043][ T6241] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 307.672706][ T6241] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 307.676196][ T6241] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 307.679517][ T6241] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 307.682897][ T6241] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 307.686656][ T6241] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 307.690664][ T6241] 23:08:19 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0xff00000000000000) 23:08:19 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) [ 307.692093][ T6256] CPU: 0 PID: 6256 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 307.696942][ T6256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 307.701003][ T6256] Call Trace: [ 307.702625][ T6256] [ 307.704076][ T6256] dump_stack_lvl+0x136/0x150 [ 307.706290][ T6256] should_fail_ex+0x4a3/0x5b0 [ 307.708628][ T6256] should_failslab+0x9/0x20 [ 307.710739][ T6256] kmem_cache_alloc+0x5d/0x3f0 [ 307.712962][ T6256] vm_area_dup+0x23/0x300 [ 307.714951][ T6256] dup_mmap+0x713/0x19d0 [ 307.716945][ T6256] ? replace_mm_exe_file+0x4c0/0x4c0 [ 307.719456][ T6256] ? lockdep_hardirqs_on+0x7d/0x100 [ 307.722051][ T6256] ? mm_init+0xc7a/0x1030 [ 307.724228][ T6256] copy_process+0x6663/0x75c0 [ 307.726414][ T6256] ? pidfd_prepare+0x80/0x80 [ 307.728508][ T6256] ? find_held_lock+0x2d/0x110 [ 307.730684][ T6256] ? find_held_lock+0x2d/0x110 [ 307.732877][ T6256] kernel_clone+0xeb/0x890 [ 307.734912][ T6256] ? create_io_thread+0xe0/0xe0 [ 307.737216][ T6256] ? vfs_write+0x15c/0xd50 [ 307.739422][ T6256] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 307.742257][ T6256] ? wait_for_completion_io_timeout+0x20/0x20 [ 307.745208][ T6256] __do_sys_clone+0xba/0x100 [ 307.747314][ T6256] ? kernel_clone+0x890/0x890 [ 307.749439][ T6256] ? syscall_enter_from_user_mode+0x26/0x80 [ 307.752298][ T6256] do_syscall_64+0x39/0xb0 [ 307.754620][ T6256] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 307.757658][ T6256] RIP: 0033:0x7f469ba8c389 [ 307.759714][ T6256] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 307.768334][ T6256] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 307.771620][ T6256] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 307.775256][ T6256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 307.778497][ T6256] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 307.781272][ T6256] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 307.783982][ T6256] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 307.787108][ T6256] 23:08:19 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) 23:08:19 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0xff0e000000000000) 23:08:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x24, r2, 0x1, 0x70bd29, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="10002cbd7000fcdbdf252b0000000c0005000200baaaaaaaaaaa08000200", @ANYRES32=r3, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x400c891}, 0x40840) (async) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x1) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r6, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r5, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x21}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4044484) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="50000000c653005683a26f0b207d17eb65dce034d77a66a33855ceb82d5e2cda198b61a75ba89c48c5fd3d2db4970827e946c463be40b4c06856fb1ef2a8e114a80ad9477ad5fb1769e08e889a240470c5567030c943c283758ff2bfc7484c868060de01ee7d352613fbe21172bf15bf9a5390707938b2d9f71504d01dc61f7859", @ANYRES16=0x0, @ANYBLOB="000425bd7000fddbdf2504000000000100000b002c571719c876aa1c913f"], 0xfffffffffffffc2e}, 0x1, 0x0, 0x0, 0x804}, 0x48000) 23:08:19 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) 23:08:19 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0xffffff7f00000000) [ 307.804711][ T6264] FAULT_INJECTION: forcing a failure. [ 307.804711][ T6264] name failslab, interval 1, probability 0, space 0, times 0 [ 307.809900][ T6264] CPU: 0 PID: 6264 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 307.814399][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 307.815517][ T6266] FAULT_INJECTION: forcing a failure. [ 307.815517][ T6266] name failslab, interval 1, probability 0, space 0, times 0 [ 307.818165][ T6264] Call Trace: 23:08:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x24, r2, 0x1, 0x70bd29, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}]}, 0x24}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="10002cbd7000fcdbdf252b0000000c0005000200baaaaaaaaaaa08000200", @ANYRES32=r3, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x400c891}, 0x40840) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x1) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r6, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r5, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x21}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4044484) (async, rerun: 32) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="50000000c653005683a26f0b207d17eb65dce034d77a66a33855ceb82d5e2cda198b61a75ba89c48c5fd3d2db4970827e946c463be40b4c06856fb1ef2a8e114a80ad9477ad5fb1769e08e889a240470c5567030c943c283758ff2bfc7484c868060de01ee7d352613fbe21172bf15bf9a5390707938b2d9f71504d01dc61f7859", @ANYRES16=0x0, @ANYBLOB="000425bd7000fddbdf2504000000000100000b002c571719c876aa1c913f"], 0xfffffffffffffc2e}, 0x1, 0x0, 0x0, 0x804}, 0x48000) (rerun: 32) [ 307.818176][ T6264] [ 307.818183][ T6264] dump_stack_lvl+0x136/0x150 23:08:19 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0xffffffff00000000) [ 307.818208][ T6264] should_fail_ex+0x4a3/0x5b0 [ 307.830252][ T6264] should_failslab+0x9/0x20 [ 307.832413][ T6264] kmem_cache_alloc+0x5d/0x3f0 [ 307.834703][ T6264] vm_area_dup+0x55/0x300 [ 307.836880][ T6264] dup_mmap+0x713/0x19d0 [ 307.839221][ T6264] ? replace_mm_exe_file+0x4c0/0x4c0 23:08:19 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508d7d28eda) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r3, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r3, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000ffdbdf250600000008000c0001002d5d230014000500fc00000000000000090000000000000008000c0003000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) [ 307.841873][ T6264] ? lockdep_hardirqs_on+0x7d/0x100 [ 307.844443][ T6264] ? mm_init+0xc7a/0x1030 [ 307.846419][ T6264] copy_process+0x6663/0x75c0 [ 307.848494][ T6264] ? pidfd_prepare+0x80/0x80 [ 307.850453][ T6264] ? find_held_lock+0x2d/0x110 [ 307.852623][ T6264] ? find_held_lock+0x2d/0x110 [ 307.854855][ T6264] kernel_clone+0xeb/0x890 [ 307.857063][ T6264] ? create_io_thread+0xe0/0xe0 [ 307.860013][ T6264] ? vfs_write+0x15c/0xd50 [ 307.862153][ T6264] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 307.864627][ T6264] ? wait_for_completion_io_timeout+0x20/0x20 [ 307.866989][ T6264] __do_sys_clone+0xba/0x100 [ 307.868841][ T6264] ? kernel_clone+0x890/0x890 [ 307.870664][ T6264] ? syscall_enter_from_user_mode+0x26/0x80 [ 307.873420][ T6264] do_syscall_64+0x39/0xb0 [ 307.875418][ T6264] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 307.878070][ T6264] RIP: 0033:0x7f81ce88c389 [ 307.879988][ T6264] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 307.887200][ T6264] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 307.890327][ T6264] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 307.893567][ T6264] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 307.896535][ T6264] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 307.899643][ T6264] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 307.902749][ T6264] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 307.906089][ T6264] [ 307.907261][ T6266] CPU: 3 PID: 6266 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 307.912115][ T6266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 307.915902][ T6266] Call Trace: [ 307.917338][ T6266] [ 307.918728][ T6266] dump_stack_lvl+0x136/0x150 [ 307.920702][ T6266] should_fail_ex+0x4a3/0x5b0 23:08:19 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38) 23:08:19 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x4, 0x0, 0x7, 0x4}, 0x6) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000080)='/sys/kernel/debug/damon/schemes\x00', 0x20) [ 307.922592][ T6266] should_failslab+0x9/0x20 [ 307.924752][ T6266] kmem_cache_alloc+0x5d/0x3f0 [ 307.926514][ T6266] vm_area_dup+0x23/0x300 [ 307.928409][ T6266] dup_mmap+0x713/0x19d0 [ 307.930259][ T6266] ? replace_mm_exe_file+0x4c0/0x4c0 [ 307.932583][ T6266] ? lockdep_hardirqs_on+0x7d/0x100 [ 307.934914][ T6266] ? mm_init+0xc7a/0x1030 [ 307.936939][ T6266] copy_process+0x6663/0x75c0 [ 307.938881][ T6266] ? pidfd_prepare+0x80/0x80 [ 307.941057][ T6266] ? find_held_lock+0x2d/0x110 [ 307.943140][ T6266] ? find_held_lock+0x2d/0x110 [ 307.945227][ T6266] kernel_clone+0xeb/0x890 [ 307.946856][ T6266] ? create_io_thread+0xe0/0xe0 [ 307.948967][ T6266] ? vfs_write+0x15c/0xd50 [ 307.950891][ T6266] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 307.953425][ T6266] ? wait_for_completion_io_timeout+0x20/0x20 [ 307.956165][ T6266] __do_sys_clone+0xba/0x100 [ 307.958173][ T6266] ? kernel_clone+0x890/0x890 [ 307.960242][ T6266] ? syscall_enter_from_user_mode+0x26/0x80 [ 307.962788][ T6266] do_syscall_64+0x39/0xb0 [ 307.964713][ T6266] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 307.966893][ T6266] RIP: 0033:0x7f469ba8c389 [ 307.968750][ T6266] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 307.976581][ T6266] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 307.980353][ T6266] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 307.983552][ T6266] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 307.986930][ T6266] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 307.990398][ T6266] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 307.993887][ T6266] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 307.997346][ T6266] 23:08:20 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38) 23:08:20 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508d7d28eda) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) (async) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r3, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r3, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000ffdbdf250600000008000c0001002d5d230014000500fc00000000000000090000000000000008000c0003000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) [ 308.954392][ T6279] FAULT_INJECTION: forcing a failure. [ 308.954392][ T6279] name failslab, interval 1, probability 0, space 0, times 0 23:08:20 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x4, 0x0, 0x7, 0x4}, 0x6) (async) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000080)='/sys/kernel/debug/damon/schemes\x00', 0x20) [ 308.955146][ T6280] FAULT_INJECTION: forcing a failure. [ 308.955146][ T6280] name failslab, interval 1, probability 0, space 0, times 0 [ 308.960678][ T6279] CPU: 3 PID: 6279 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 308.971125][ T6279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 308.975190][ T6279] Call Trace: [ 308.976763][ T6279] 23:08:21 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x4, 0x0, 0x7, 0x4}, 0x6) (async) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000080)='/sys/kernel/debug/damon/schemes\x00', 0x20) [ 308.978140][ T6279] dump_stack_lvl+0x136/0x150 [ 308.980583][ T6279] should_fail_ex+0x4a3/0x5b0 [ 308.983022][ T6279] should_failslab+0x9/0x20 [ 308.985326][ T6279] kmem_cache_alloc+0x5d/0x3f0 23:08:21 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508d7d28eda) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) (async) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r3, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r3, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r3, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000ffdbdf250600000008000c0001002d5d230014000500fc00000000000000090000000000000008000c0003000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) [ 308.987671][ T6279] vm_area_dup+0x23/0x300 [ 308.990052][ T6279] dup_mmap+0x713/0x19d0 23:08:21 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x8140, 0x30) [ 308.992015][ T6279] ? replace_mm_exe_file+0x4c0/0x4c0 [ 308.994697][ T6279] ? lockdep_hardirqs_on+0x7d/0x100 [ 308.997267][ T6279] ? mm_init+0xc7a/0x1030 [ 308.999633][ T6279] copy_process+0x6663/0x75c0 [ 309.002030][ T6279] ? pidfd_prepare+0x80/0x80 [ 309.004168][ T6279] ? find_held_lock+0x2d/0x110 [ 309.006382][ T6279] ? find_held_lock+0x2d/0x110 [ 309.008573][ T6279] kernel_clone+0xeb/0x890 [ 309.010624][ T6279] ? create_io_thread+0xe0/0xe0 [ 309.012935][ T6279] ? vfs_write+0x15c/0xd50 [ 309.015404][ T6279] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 309.018469][ T6279] ? wait_for_completion_io_timeout+0x20/0x20 [ 309.021313][ T6279] __do_sys_clone+0xba/0x100 [ 309.023448][ T6279] ? kernel_clone+0x890/0x890 [ 309.025538][ T6279] ? syscall_enter_from_user_mode+0x26/0x80 [ 309.028309][ T6279] do_syscall_64+0x39/0xb0 [ 309.030436][ T6279] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 309.033221][ T6279] RIP: 0033:0x7f81ce88c389 [ 309.035341][ T6279] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 309.044363][ T6279] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 309.048450][ T6279] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 309.052205][ T6279] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 309.055912][ T6279] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 309.059490][ T6279] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 309.062945][ T6279] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 309.066600][ T6279] [ 309.068215][ T6280] CPU: 1 PID: 6280 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 309.073476][ T6280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 309.077603][ T6280] Call Trace: [ 309.079159][ T6280] [ 309.080528][ T6280] dump_stack_lvl+0x136/0x150 23:08:21 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 39) 23:08:21 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r3, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r3, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r3, 0xd21, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '@\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4040) [ 309.082740][ T6280] should_fail_ex+0x4a3/0x5b0 [ 309.085122][ T6280] should_failslab+0x9/0x20 [ 309.087229][ T6280] kmem_cache_alloc+0x5d/0x3f0 [ 309.089677][ T6280] vm_area_dup+0x55/0x300 [ 309.091906][ T6280] dup_mmap+0x713/0x19d0 [ 309.094129][ T6280] ? replace_mm_exe_file+0x4c0/0x4c0 [ 309.096626][ T6280] ? lockdep_hardirqs_on+0x7d/0x100 [ 309.099036][ T6280] ? mm_init+0xc7a/0x1030 [ 309.101059][ T6280] copy_process+0x6663/0x75c0 [ 309.103166][ T6280] ? pidfd_prepare+0x80/0x80 [ 309.104504][ T6301] FAULT_INJECTION: forcing a failure. [ 309.104504][ T6301] name failslab, interval 1, probability 0, space 0, times 0 [ 309.105312][ T6280] ? find_held_lock+0x2d/0x110 [ 309.113755][ T6280] ? find_held_lock+0x2d/0x110 [ 309.116056][ T6280] kernel_clone+0xeb/0x890 [ 309.118128][ T6280] ? create_io_thread+0xe0/0xe0 [ 309.120443][ T6280] ? vfs_write+0x15c/0xd50 [ 309.122552][ T6280] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 309.125261][ T6280] ? wait_for_completion_io_timeout+0x20/0x20 [ 309.128316][ T6280] __do_sys_clone+0xba/0x100 [ 309.130585][ T6280] ? kernel_clone+0x890/0x890 [ 309.132821][ T6280] ? syscall_enter_from_user_mode+0x26/0x80 [ 309.135571][ T6280] do_syscall_64+0x39/0xb0 [ 309.137642][ T6280] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 309.140412][ T6280] RIP: 0033:0x7f469ba8c389 [ 309.142536][ T6280] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 309.151499][ T6280] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 309.155430][ T6280] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 309.159391][ T6280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 309.163342][ T6280] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 309.166975][ T6280] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 309.170316][ T6280] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 309.173817][ T6280] [ 309.175268][ T6301] CPU: 3 PID: 6301 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 309.180130][ T6301] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 309.184511][ T6301] Call Trace: [ 309.186033][ T6301] [ 309.187334][ T6301] dump_stack_lvl+0x136/0x150 [ 309.189421][ T6301] should_fail_ex+0x4a3/0x5b0 [ 309.191470][ T6301] should_failslab+0x9/0x20 [ 309.193492][ T6301] kmem_cache_alloc+0x5d/0x3f0 [ 309.195632][ T6301] vm_area_dup+0x55/0x300 [ 309.197612][ T6301] dup_mmap+0x713/0x19d0 [ 309.199737][ T6301] ? replace_mm_exe_file+0x4c0/0x4c0 [ 309.202339][ T6301] ? lockdep_hardirqs_on+0x7d/0x100 [ 309.204716][ T6301] ? mm_init+0xc7a/0x1030 [ 309.206687][ T6301] copy_process+0x6663/0x75c0 [ 309.208739][ T6301] ? pidfd_prepare+0x80/0x80 [ 309.210719][ T6301] ? find_held_lock+0x2d/0x110 [ 309.212796][ T6301] ? find_held_lock+0x2d/0x110 [ 309.214883][ T6301] kernel_clone+0xeb/0x890 [ 309.216850][ T6301] ? create_io_thread+0xe0/0xe0 [ 309.219054][ T6301] ? vfs_write+0x15c/0xd50 [ 309.221156][ T6301] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 309.223769][ T6301] ? wait_for_completion_io_timeout+0x20/0x20 [ 309.226453][ T6301] __do_sys_clone+0xba/0x100 [ 309.228520][ T6301] ? kernel_clone+0x890/0x890 [ 309.230568][ T6301] ? syscall_enter_from_user_mode+0x26/0x80 [ 309.233153][ T6301] do_syscall_64+0x39/0xb0 [ 309.235103][ T6301] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 309.237704][ T6301] RIP: 0033:0x7f81ce88c389 [ 309.239693][ T6301] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 309.248300][ T6301] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 309.251863][ T6301] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 309.255281][ T6301] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 309.258701][ T6301] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 309.262115][ T6301] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 309.265677][ T6301] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 309.269292][ T6301] 23:08:21 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 39) 23:08:21 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x8140, 0x30) 23:08:21 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async, rerun: 64) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) (async) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) (async) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r3, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) (async, rerun: 32) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r3, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) (async, rerun: 32) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r3, 0xd21, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '@\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4040) 23:08:21 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 40) 23:08:21 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x8140, 0x30) 23:08:21 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 40) 23:08:21 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 41) 23:08:21 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x10) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0xb, 0x20, 0x642a}) 23:08:21 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) (async) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) (async) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r3, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r3, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) (async) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r3, 0xd21, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '@\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4040) 23:08:21 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 41) 23:08:21 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x10) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0xb, 0x20, 0x642a}) 23:08:21 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 42) 23:08:21 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x9}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xa}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1f}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040080}, 0x84) 23:08:21 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 42) [ 309.369293][ T6337] FAULT_INJECTION: forcing a failure. [ 309.369293][ T6337] name failslab, interval 1, probability 0, space 0, times 0 23:08:21 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x10) (async) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async, rerun: 64) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0xb, 0x20, 0x642a}) (rerun: 64) 23:08:21 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x9}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xa}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1f}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040080}, 0x84) [ 309.380167][ T6337] CPU: 1 PID: 6337 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 309.384944][ T6337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 309.389145][ T6337] Call Trace: [ 309.390855][ T6337] [ 309.392416][ T6337] dump_stack_lvl+0x136/0x150 [ 309.394738][ T6337] should_fail_ex+0x4a3/0x5b0 [ 309.397077][ T6337] should_failslab+0x9/0x20 [ 309.399227][ T6337] kmem_cache_alloc+0x5d/0x3f0 [ 309.401466][ T6337] anon_vma_fork+0xe2/0x630 [ 309.403595][ T6337] ? anon_vma_name+0xc6/0x170 [ 309.405903][ T6337] dup_mmap+0xfc9/0x19d0 [ 309.407977][ T6337] ? replace_mm_exe_file+0x4c0/0x4c0 [ 309.410573][ T6337] ? lockdep_hardirqs_on+0x7d/0x100 [ 309.412756][ T6337] ? mm_init+0xc7a/0x1030 [ 309.414320][ T6337] copy_process+0x6663/0x75c0 [ 309.416361][ T6337] ? pidfd_prepare+0x80/0x80 [ 309.418377][ T6337] ? find_held_lock+0x2d/0x110 [ 309.420224][ T6337] ? find_held_lock+0x2d/0x110 23:08:21 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x101) 23:08:21 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 43) 23:08:21 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x9}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xa}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1f}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040080}, 0x84) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x9}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xa}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1f}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040080}, 0x84) (async) [ 309.422063][ T6337] kernel_clone+0xeb/0x890 [ 309.424120][ T6337] ? create_io_thread+0xe0/0xe0 [ 309.426178][ T6337] ? vfs_write+0x15c/0xd50 [ 309.427800][ T6337] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 309.429849][ T6337] ? wait_for_completion_io_timeout+0x20/0x20 [ 309.432079][ T6337] __do_sys_clone+0xba/0x100 [ 309.433822][ T6337] ? kernel_clone+0x890/0x890 [ 309.435716][ T6337] ? syscall_enter_from_user_mode+0x26/0x80 [ 309.438537][ T6337] do_syscall_64+0x39/0xb0 [ 309.440634][ T6337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 309.443363][ T6337] RIP: 0033:0x7f81ce88c389 [ 309.445434][ T6337] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 309.454788][ T6337] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 309.458744][ T6337] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 309.462029][ T6337] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 309.465580][ T6337] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 309.469280][ T6337] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 309.472700][ T6337] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 309.476237][ T6337] 23:08:21 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 43) 23:08:21 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x101) 23:08:21 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) 23:08:21 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 44) [ 309.506136][ T6361] FAULT_INJECTION: forcing a failure. [ 309.506136][ T6361] name failslab, interval 1, probability 0, space 0, times 0 23:08:21 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x101) [ 309.506951][ T6363] FAULT_INJECTION: forcing a failure. [ 309.506951][ T6363] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:08:21 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) [ 309.511110][ T6361] CPU: 0 PID: 6361 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 309.521152][ T6361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 309.524493][ T6361] Call Trace: [ 309.525758][ T6361] [ 309.526833][ T6361] dump_stack_lvl+0x136/0x150 23:08:21 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x145503, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) [ 309.528591][ T6361] should_fail_ex+0x4a3/0x5b0 [ 309.530665][ T6361] should_failslab+0x9/0x20 [ 309.532573][ T6361] kmem_cache_alloc+0x5d/0x3f0 [ 309.534847][ T6361] anon_vma_fork+0xe2/0x630 [ 309.536940][ T6361] ? anon_vma_name+0xc6/0x170 [ 309.539130][ T6361] dup_mmap+0xfc9/0x19d0 [ 309.541050][ T6361] ? replace_mm_exe_file+0x4c0/0x4c0 [ 309.542114][ T38] audit: type=1400 audit(1687129701.559:201): avc: denied { read append } for pid=6369 comm="syz-executor.0" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 23:08:21 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) [ 309.543492][ T6361] ? lockdep_hardirqs_on+0x7d/0x100 [ 309.543520][ T6361] ? mm_init+0xc7a/0x1030 [ 309.543540][ T6361] copy_process+0x6663/0x75c0 [ 309.543563][ T6361] ? pidfd_prepare+0x80/0x80 [ 309.552674][ T38] audit: type=1400 audit(1687129701.569:202): avc: denied { ioctl open } for pid=6369 comm="syz-executor.0" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 309.554495][ T6361] ? find_held_lock+0x2d/0x110 [ 309.554514][ T6361] ? find_held_lock+0x2d/0x110 [ 309.554524][ T6361] kernel_clone+0xeb/0x890 [ 309.554537][ T6361] ? create_io_thread+0xe0/0xe0 [ 309.554548][ T6361] ? vfs_write+0x15c/0xd50 [ 309.554559][ T6361] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 309.579585][ T6361] ? wait_for_completion_io_timeout+0x20/0x20 [ 309.582309][ T6361] __do_sys_clone+0xba/0x100 [ 309.584111][ T6361] ? kernel_clone+0x890/0x890 [ 309.585937][ T6361] ? syscall_enter_from_user_mode+0x26/0x80 [ 309.588286][ T6361] do_syscall_64+0x39/0xb0 [ 309.589961][ T6361] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 309.592146][ T6361] RIP: 0033:0x7f81ce88c389 [ 309.593783][ T6361] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 309.601184][ T6361] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 309.604998][ T6361] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 309.607944][ T6361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 309.610840][ T6361] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 309.613702][ T6361] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 309.617101][ T6361] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 309.620689][ T6361] [ 309.622119][ T6363] CPU: 1 PID: 6363 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 309.626082][ T6363] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 309.629361][ T6363] Call Trace: [ 309.630597][ T6363] [ 309.631693][ T6363] dump_stack_lvl+0x136/0x150 [ 309.633440][ T6363] should_fail_ex+0x4a3/0x5b0 [ 309.635209][ T6363] prepare_alloc_pages+0x178/0x570 [ 309.637121][ T6363] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 309.639484][ T6363] __alloc_pages+0x149/0x4a0 [ 309.641469][ T6363] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 23:08:21 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 44) 23:08:21 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x145503, 0x0) (async) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) 23:08:21 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508d3d6c6db) [ 309.644149][ T6363] ? copy_page_range+0x1bc0/0x3830 [ 309.646567][ T6363] alloc_pages+0x1aa/0x270 [ 309.647821][ T6377] FAULT_INJECTION: forcing a failure. [ 309.647821][ T6377] name failslab, interval 1, probability 0, space 0, times 0 [ 309.648587][ T6363] get_zeroed_page+0x14/0x40 [ 309.648609][ T6363] __pud_alloc+0x3b/0x180 [ 309.648628][ T6363] copy_page_range+0x2199/0x3830 [ 309.659753][ T6363] ? mas_wr_modify+0x999/0x16d0 [ 309.661956][ T6363] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 309.664596][ T6363] ? mas_store+0x275/0x3a0 [ 309.666628][ T6363] ? handle_mm_fault+0x9f0/0x9f0 [ 309.668842][ T6363] ? down_write+0x14f/0x200 [ 309.670887][ T6363] dup_mmap+0x10bc/0x19d0 [ 309.672836][ T6363] ? replace_mm_exe_file+0x4c0/0x4c0 [ 309.675191][ T6363] ? lockdep_hardirqs_on+0x7d/0x100 [ 309.677537][ T6363] ? mm_init+0xc7a/0x1030 [ 309.679482][ T6363] copy_process+0x6663/0x75c0 [ 309.681541][ T6363] ? pidfd_prepare+0x80/0x80 [ 309.683624][ T6363] ? find_held_lock+0x2d/0x110 [ 309.685768][ T6363] ? find_held_lock+0x2d/0x110 [ 309.687935][ T6363] kernel_clone+0xeb/0x890 [ 309.689953][ T6363] ? create_io_thread+0xe0/0xe0 [ 309.692151][ T6363] ? vfs_write+0x15c/0xd50 [ 309.694161][ T6363] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 309.696716][ T6363] ? wait_for_completion_io_timeout+0x20/0x20 [ 309.699392][ T6363] __do_sys_clone+0xba/0x100 [ 309.701493][ T6363] ? kernel_clone+0x890/0x890 [ 309.703600][ T6363] ? syscall_enter_from_user_mode+0x26/0x80 [ 309.706212][ T6363] do_syscall_64+0x39/0xb0 [ 309.708211][ T6363] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 309.710852][ T6363] RIP: 0033:0x7f469ba8c389 [ 309.712831][ T6363] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 309.720956][ T6363] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 309.724641][ T6363] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 309.728107][ T6363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 309.731605][ T6363] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 309.735065][ T6363] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 309.738537][ T6363] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 309.742071][ T6363] [ 309.743606][ T6377] CPU: 0 PID: 6377 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 309.747524][ T6377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 309.751387][ T6377] Call Trace: [ 309.752908][ T6377] [ 309.754295][ T6377] dump_stack_lvl+0x136/0x150 [ 309.756495][ T6377] should_fail_ex+0x4a3/0x5b0 23:08:21 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 45) 23:08:21 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x145503, 0x0) (async) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) 23:08:21 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508d3d6c6db) [ 309.758668][ T6377] should_failslab+0x9/0x20 [ 309.760997][ T6377] kmem_cache_alloc+0x5d/0x3f0 [ 309.762620][ T6377] anon_vma_fork+0x1f1/0x630 [ 309.764226][ T6377] ? anon_vma_name+0xc6/0x170 [ 309.766054][ T6377] dup_mmap+0xfc9/0x19d0 [ 309.767674][ T6377] ? replace_mm_exe_file+0x4c0/0x4c0 [ 309.769844][ T6377] ? lockdep_hardirqs_on+0x7d/0x100 [ 309.771856][ T6377] ? mm_init+0xc7a/0x1030 [ 309.773552][ T6377] copy_process+0x6663/0x75c0 [ 309.775354][ T6377] ? pidfd_prepare+0x80/0x80 [ 309.777201][ T6377] ? find_held_lock+0x2d/0x110 [ 309.779102][ T6377] ? find_held_lock+0x2d/0x110 [ 309.780903][ T6377] kernel_clone+0xeb/0x890 [ 309.782724][ T6377] ? create_io_thread+0xe0/0xe0 [ 309.784641][ T6377] ? vfs_write+0x15c/0xd50 23:08:21 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000040), 0x4) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010100}}, 0x24) write$damon_schemes(r0, &(0x7f0000000080)={0x100, 0xffffffffffffffff, 0x20, 0x20, 0x7, 0xff}, 0x66) [ 309.786368][ T6377] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 309.788774][ T6377] ? wait_for_completion_io_timeout+0x20/0x20 [ 309.791256][ T6377] __do_sys_clone+0xba/0x100 [ 309.793376][ T6377] ? kernel_clone+0x890/0x890 [ 309.793610][ T6387] FAULT_INJECTION: forcing a failure. [ 309.793610][ T6387] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:08:21 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508d3d6c6db) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508d3d6c6db) (async) [ 309.795487][ T6377] ? syscall_enter_from_user_mode+0x26/0x80 [ 309.795519][ T6377] do_syscall_64+0x39/0xb0 [ 309.795536][ T6377] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 309.809360][ T6377] RIP: 0033:0x7f81ce88c389 [ 309.811338][ T6377] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 309.819951][ T6377] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 309.822996][ T6377] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 309.825871][ T6377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 309.828768][ T6377] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 309.831567][ T6377] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 309.834632][ T6377] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 309.837490][ T6377] [ 309.838796][ T6387] CPU: 2 PID: 6387 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 309.843359][ T6387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 309.846582][ T6387] Call Trace: [ 309.847790][ T6387] [ 309.848871][ T6387] dump_stack_lvl+0x136/0x150 [ 309.850599][ T6387] should_fail_ex+0x4a3/0x5b0 [ 309.852318][ T6387] prepare_alloc_pages+0x178/0x570 [ 309.854163][ T6387] __alloc_pages+0x149/0x4a0 [ 309.855842][ T6387] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 309.858288][ T6387] ? find_held_lock+0x2d/0x110 [ 309.860048][ T6387] ? lock_downgrade+0x690/0x690 [ 309.861837][ T6387] ? do_raw_spin_lock+0x124/0x2b0 [ 309.863664][ T6387] alloc_pages+0x1aa/0x270 [ 309.865665][ T6387] __pmd_alloc+0x3f/0x5d0 [ 309.867792][ T6387] ? __pud_alloc+0xe4/0x180 [ 309.867959][ T6398] FAULT_INJECTION: forcing a failure. [ 309.867959][ T6398] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 309.870282][ T6387] copy_page_range+0x22c1/0x3830 [ 309.870317][ T6387] ? mas_wr_modify+0x2da/0x16d0 [ 309.870345][ T6387] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 309.882257][ T6387] ? mas_store+0x275/0x3a0 [ 309.883971][ T6387] ? handle_mm_fault+0x9f0/0x9f0 [ 309.886277][ T6387] ? down_write+0x14f/0x200 23:08:21 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 45) 23:08:21 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000040), 0x4) (async) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010100}}, 0x24) write$damon_schemes(r0, &(0x7f0000000080)={0x100, 0xffffffffffffffff, 0x20, 0x20, 0x7, 0xff}, 0x66) 23:08:21 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000480)=ANY=[@ANYBLOB="58303f10", @ANYRES16=r2, @ANYBLOB="010000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040000000000"], 0x58}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x8000, 0x1, 0x5, 0x9, {{0x1f, 0x4, 0x0, 0x1, 0x7c, 0x64, 0x0, 0x4, 0x2b, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @multicast2, {[@lsrr={0x83, 0x17, 0x77, [@rand_addr=0x64010100, @remote, @dev={0xac, 0x14, 0x14, 0x31}, @multicast1, @private=0xa010100]}, @lsrr={0x83, 0x1b, 0x21, [@initdev={0xac, 0x1e, 0x90, 0x0}, @empty, @remote, @private=0xa010100, @local, @loopback]}, @generic={0x94, 0x8, "f729950ebc82"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x15, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x5}, {@private=0xa010100, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@private=0xa010102, 0x9ab}, {@local, 0x3}]}, @end]}}}}}) r6 = inotify_init1(0x0) inotify_rm_watch(r6, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000240)={@local, @multicast2, 0x0}, &(0x7f0000000280)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000ac0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f00000002c0)={0x7c0, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xca000000}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0xff, 0x6, 0x5}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe3d3}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x2, 0x6, 0x7f, 0x9}, {0x6e, 0x8, 0x8, 0xc7}, {0x2, 0x7f, 0x0, 0x5}, {0x7, 0x40, 0x4, 0x80}, {0x8, 0x54, 0x9, 0x4}, {0x7, 0x40, 0xdd, 0x4}, {0x7f, 0x0, 0x6, 0x80000000}]}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x67d}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x92d5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe02}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x28}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x7c0}, 0x1, 0x0, 0x0, 0x8084}, 0x800) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000000)=0x45a) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d7264b) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000b00)='broadcast\x00', 0xa) [ 309.888411][ T6387] dup_mmap+0x10bc/0x19d0 [ 309.890720][ T6387] ? replace_mm_exe_file+0x4c0/0x4c0 [ 309.893187][ T6387] ? lockdep_hardirqs_on+0x7d/0x100 [ 309.895613][ T6387] ? mm_init+0xc7a/0x1030 [ 309.897631][ T6387] copy_process+0x6663/0x75c0 [ 309.899822][ T6387] ? pidfd_prepare+0x80/0x80 [ 309.901938][ T6387] ? find_held_lock+0x2d/0x110 [ 309.904137][ T6387] ? find_held_lock+0x2d/0x110 [ 309.906087][ T6387] kernel_clone+0xeb/0x890 [ 309.907887][ T6387] ? create_io_thread+0xe0/0xe0 [ 309.910133][ T6387] ? vfs_write+0x15c/0xd50 [ 309.911874][ T6387] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 309.913901][ T6387] ? wait_for_completion_io_timeout+0x20/0x20 [ 309.916100][ T6387] __do_sys_clone+0xba/0x100 [ 309.918135][ T6387] ? kernel_clone+0x890/0x890 [ 309.919871][ T6387] ? syscall_enter_from_user_mode+0x26/0x80 [ 309.922135][ T6387] do_syscall_64+0x39/0xb0 [ 309.923722][ T6387] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 309.925860][ T6387] RIP: 0033:0x7f469ba8c389 [ 309.927485][ T6387] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 309.934631][ T6387] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 309.937811][ T6387] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 309.941458][ T6387] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 309.945298][ T6387] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 309.949052][ T6387] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 309.952683][ T6387] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 309.956282][ T6387] [ 309.957719][ T6398] CPU: 1 PID: 6398 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 309.962773][ T6398] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 309.966960][ T6398] Call Trace: [ 309.968468][ T6398] [ 309.969787][ T6398] dump_stack_lvl+0x136/0x150 23:08:22 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 46) 23:08:22 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000040), 0x4) (async) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010100}}, 0x24) (async) write$damon_schemes(r0, &(0x7f0000000080)={0x100, 0xffffffffffffffff, 0x20, 0x20, 0x7, 0xff}, 0x66) 23:08:22 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000480)=ANY=[@ANYBLOB="58303f10", @ANYRES16=r2, @ANYBLOB="010000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040000000000"], 0x58}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x8000, 0x1, 0x5, 0x9, {{0x1f, 0x4, 0x0, 0x1, 0x7c, 0x64, 0x0, 0x4, 0x2b, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @multicast2, {[@lsrr={0x83, 0x17, 0x77, [@rand_addr=0x64010100, @remote, @dev={0xac, 0x14, 0x14, 0x31}, @multicast1, @private=0xa010100]}, @lsrr={0x83, 0x1b, 0x21, [@initdev={0xac, 0x1e, 0x90, 0x0}, @empty, @remote, @private=0xa010100, @local, @loopback]}, @generic={0x94, 0x8, "f729950ebc82"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x15, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x5}, {@private=0xa010100, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@private=0xa010102, 0x9ab}, {@local, 0x3}]}, @end]}}}}}) (async) r6 = inotify_init1(0x0) inotify_rm_watch(r6, 0x0) (async) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000240)={@local, @multicast2, 0x0}, &(0x7f0000000280)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000ac0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f00000002c0)={0x7c0, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xca000000}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0xff, 0x6, 0x5}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe3d3}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x2, 0x6, 0x7f, 0x9}, {0x6e, 0x8, 0x8, 0xc7}, {0x2, 0x7f, 0x0, 0x5}, {0x7, 0x40, 0x4, 0x80}, {0x8, 0x54, 0x9, 0x4}, {0x7, 0x40, 0xdd, 0x4}, {0x7f, 0x0, 0x6, 0x80000000}]}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x67d}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x92d5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe02}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x28}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x7c0}, 0x1, 0x0, 0x0, 0x8084}, 0x800) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000000)=0x45a) (async, rerun: 64) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d7264b) (rerun: 64) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000b00)='broadcast\x00', 0xa) [ 309.971895][ T6398] should_fail_ex+0x4a3/0x5b0 [ 309.974131][ T6398] prepare_alloc_pages+0x178/0x570 [ 309.976444][ T6398] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 309.979125][ T6398] __alloc_pages+0x149/0x4a0 [ 309.981228][ T6398] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 309.983931][ T6402] FAULT_INJECTION: forcing a failure. [ 309.983931][ T6402] name failslab, interval 1, probability 0, space 0, times 0 [ 309.984209][ T6398] ? copy_page_range+0x1bc0/0x3830 [ 309.991529][ T6398] alloc_pages+0x1aa/0x270 [ 309.993583][ T6398] get_zeroed_page+0x14/0x40 [ 309.995642][ T6398] __pud_alloc+0x3b/0x180 [ 309.997599][ T6398] copy_page_range+0x2199/0x3830 [ 309.999941][ T6398] ? mas_wr_modify+0x2da/0x16d0 [ 310.002293][ T6398] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 310.005038][ T6398] ? mas_store+0x275/0x3a0 [ 310.007039][ T6398] ? handle_mm_fault+0x9f0/0x9f0 [ 310.009251][ T6398] ? down_write+0x14f/0x200 [ 310.011326][ T6398] dup_mmap+0x10bc/0x19d0 [ 310.013278][ T6398] ? replace_mm_exe_file+0x4c0/0x4c0 [ 310.015628][ T6398] ? lockdep_hardirqs_on+0x7d/0x100 [ 310.017932][ T6398] ? mm_init+0xc7a/0x1030 [ 310.019893][ T6398] copy_process+0x6663/0x75c0 [ 310.022079][ T6398] ? pidfd_prepare+0x80/0x80 [ 310.024174][ T6398] ? find_held_lock+0x2d/0x110 [ 310.026582][ T6398] ? find_held_lock+0x2d/0x110 [ 310.028965][ T6398] kernel_clone+0xeb/0x890 [ 310.031002][ T6398] ? create_io_thread+0xe0/0xe0 [ 310.033179][ T6398] ? vfs_write+0x15c/0xd50 [ 310.035165][ T6398] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 310.037702][ T6398] ? wait_for_completion_io_timeout+0x20/0x20 [ 310.040520][ T6398] __do_sys_clone+0xba/0x100 [ 310.042682][ T6398] ? kernel_clone+0x890/0x890 [ 310.044887][ T6398] ? syscall_enter_from_user_mode+0x26/0x80 [ 310.047577][ T6398] do_syscall_64+0x39/0xb0 [ 310.049571][ T6398] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 310.052187][ T6398] RIP: 0033:0x7f81ce88c389 [ 310.054196][ T6398] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 310.062954][ T6398] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 310.066766][ T6398] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 310.070587][ T6398] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 310.074144][ T6398] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 310.077665][ T6398] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 310.081192][ T6398] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 310.084804][ T6398] 23:08:22 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000480)=ANY=[@ANYBLOB="58303f10", @ANYRES16=r2, @ANYBLOB="010000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040000000000"], 0x58}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x8000, 0x1, 0x5, 0x9, {{0x1f, 0x4, 0x0, 0x1, 0x7c, 0x64, 0x0, 0x4, 0x2b, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @multicast2, {[@lsrr={0x83, 0x17, 0x77, [@rand_addr=0x64010100, @remote, @dev={0xac, 0x14, 0x14, 0x31}, @multicast1, @private=0xa010100]}, @lsrr={0x83, 0x1b, 0x21, [@initdev={0xac, 0x1e, 0x90, 0x0}, @empty, @remote, @private=0xa010100, @local, @loopback]}, @generic={0x94, 0x8, "f729950ebc82"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x15, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x5}, {@private=0xa010100, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@private=0xa010102, 0x9ab}, {@local, 0x3}]}, @end]}}}}}) (async, rerun: 32) r6 = inotify_init1(0x0) inotify_rm_watch(r6, 0x0) (async) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000240)={@local, @multicast2, 0x0}, &(0x7f0000000280)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000ac0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f00000002c0)={0x7c0, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xca000000}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0xff, 0x6, 0x5}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe3d3}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x2, 0x6, 0x7f, 0x9}, {0x6e, 0x8, 0x8, 0xc7}, {0x2, 0x7f, 0x0, 0x5}, {0x7, 0x40, 0x4, 0x80}, {0x8, 0x54, 0x9, 0x4}, {0x7, 0x40, 0xdd, 0x4}, {0x7f, 0x0, 0x6, 0x80000000}]}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x67d}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x92d5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe02}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x28}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x7c0}, 0x1, 0x0, 0x0, 0x8084}, 0x800) (async) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000000)=0x45a) (async, rerun: 64) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d7264b) (async, rerun: 64) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000b00)='broadcast\x00', 0xa) 23:08:22 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x5c) [ 310.086241][ T6402] CPU: 2 PID: 6402 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 310.091316][ T6402] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 310.095344][ T6402] Call Trace: [ 310.096863][ T6402] 23:08:22 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 46) 23:08:22 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x4004) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x14) 23:08:22 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async, rerun: 32) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x5c) (rerun: 32) [ 310.098145][ T6402] dump_stack_lvl+0x136/0x150 [ 310.100515][ T6402] should_fail_ex+0x4a3/0x5b0 [ 310.102651][ T6402] should_failslab+0x9/0x20 [ 310.104715][ T6402] kmem_cache_alloc+0x5d/0x3f0 [ 310.106705][ T6402] __pmd_alloc+0xc3/0x5d0 [ 310.108664][ T6402] ? __pud_alloc+0xe4/0x180 [ 310.110734][ T6402] copy_page_range+0x22c1/0x3830 [ 310.113024][ T6402] ? mas_wr_modify+0x2da/0x16d0 [ 310.115351][ T6402] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 310.118054][ T6402] ? mas_store+0x275/0x3a0 [ 310.120129][ T6402] ? handle_mm_fault+0x9f0/0x9f0 [ 310.122393][ T6402] ? down_write+0x14f/0x200 [ 310.124580][ T6402] dup_mmap+0x10bc/0x19d0 [ 310.126648][ T6402] ? replace_mm_exe_file+0x4c0/0x4c0 [ 310.129113][ T6402] ? lockdep_hardirqs_on+0x7d/0x100 [ 310.131461][ T6402] ? mm_init+0xc7a/0x1030 [ 310.133474][ T6402] copy_process+0x6663/0x75c0 [ 310.135691][ T6402] ? pidfd_prepare+0x80/0x80 [ 310.137886][ T6402] ? find_held_lock+0x2d/0x110 [ 310.140197][ T6402] ? find_held_lock+0x2d/0x110 [ 310.142370][ T6402] kernel_clone+0xeb/0x890 [ 310.144451][ T6402] ? create_io_thread+0xe0/0xe0 [ 310.146672][ T6402] ? vfs_write+0x15c/0xd50 [ 310.148730][ T6402] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 310.151270][ T6402] ? wait_for_completion_io_timeout+0x20/0x20 [ 310.154051][ T6402] __do_sys_clone+0xba/0x100 [ 310.156154][ T6402] ? kernel_clone+0x890/0x890 [ 310.158318][ T6402] ? syscall_enter_from_user_mode+0x26/0x80 [ 310.161039][ T6402] do_syscall_64+0x39/0xb0 [ 310.163080][ T6402] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 310.165775][ T6402] RIP: 0033:0x7f469ba8c389 [ 310.167495][ T6422] FAULT_INJECTION: forcing a failure. [ 310.167495][ T6422] name failslab, interval 1, probability 0, space 0, times 0 [ 310.167809][ T6402] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 310.167830][ T6402] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 310.167848][ T6402] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 310.167859][ T6402] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 310.191536][ T6402] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 310.195115][ T6402] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 310.198933][ T6402] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 310.202643][ T6402] [ 310.203941][ T6422] CPU: 0 PID: 6422 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 310.208335][ T6422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 23:08:22 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 47) 23:08:22 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x4004) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x14) 23:08:22 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x5c) [ 310.212449][ T6422] Call Trace: [ 310.214972][ T6422] [ 310.216466][ T6422] dump_stack_lvl+0x136/0x150 [ 310.218862][ T6422] should_fail_ex+0x4a3/0x5b0 [ 310.221288][ T6422] should_failslab+0x9/0x20 [ 310.223583][ T6422] kmem_cache_alloc+0x5d/0x3f0 [ 310.225272][ T6432] FAULT_INJECTION: forcing a failure. [ 310.225272][ T6432] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:08:22 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x80184153, &(0x7f0000000240)={0x0, &(0x7f0000000200)=[&(0x7f0000000040)="3092115ec2fd3292afbb33c55a9631bb89d73dc4e056afdaaefe021906c69573c46e777b6ab4d40b08934ecdbfff4cf23032896e6ec127d0110a8f2f30ca942a3551dd61a13fedc0a67a030c492477dd0a22965b8cf736c77f0fa0375a08ff4266da9c0b9ea2", &(0x7f00000000c0)="cbbda4b79a62202323a8fce09c05621d3675945962e48d0fd5bd3427999e", &(0x7f0000000100)="7aae0d6b7b6daac4a88599f70f5409ab6cb970f97963bf9f73d0531570ed45adcb2fbf6e53162d934478d844562e72db82120486e8f6726084d80833d490ac9afcbc576ad60c08e3cc3b0f93efb5158709eb5ff5c2dc87e962d90cc529105b82023ae5d7b76c0015230bca0f77fbb0971a4367714ed95b79a5aee93f1c5a4e1f197a3817f183ebb18f835d34e803159858fffd6aecd5b7e0b13fd159ab14eb08974c5d2302bd5291a906a9edf1227ea7520ae7fd777721e14fb40f01e74593cc9f826b591d159b168bb292362cb2952f9543f1fb78d4c008c1d399b7c0aa124ecba6987b52ba"]}) 23:08:22 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x4004) (async) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x4004) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x14) [ 310.225847][ T6422] __pmd_alloc+0xc3/0x5d0 [ 310.233987][ T6422] ? __pud_alloc+0xe4/0x180 [ 310.235882][ T6422] copy_page_range+0x22c1/0x3830 [ 310.237935][ T6422] ? mas_wr_modify+0x999/0x16d0 [ 310.240046][ T6422] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 310.242654][ T6422] ? mas_store+0x275/0x3a0 [ 310.244678][ T6422] ? handle_mm_fault+0x9f0/0x9f0 [ 310.246750][ T6422] ? down_write+0x14f/0x200 [ 310.248572][ T6422] dup_mmap+0x10bc/0x19d0 [ 310.250327][ T6422] ? replace_mm_exe_file+0x4c0/0x4c0 [ 310.252588][ T6422] ? lockdep_hardirqs_on+0x7d/0x100 [ 310.254771][ T6422] ? mm_init+0xc7a/0x1030 [ 310.256765][ T6422] copy_process+0x6663/0x75c0 [ 310.258934][ T6422] ? pidfd_prepare+0x80/0x80 [ 310.261001][ T6422] ? find_held_lock+0x2d/0x110 [ 310.263127][ T6422] ? find_held_lock+0x2d/0x110 [ 310.265288][ T6422] kernel_clone+0xeb/0x890 [ 310.267277][ T6422] ? create_io_thread+0xe0/0xe0 [ 310.269256][ T6422] ? vfs_write+0x15c/0xd50 [ 310.270924][ T6422] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 310.273185][ T6422] ? wait_for_completion_io_timeout+0x20/0x20 [ 310.275922][ T6422] __do_sys_clone+0xba/0x100 [ 310.277818][ T6422] ? kernel_clone+0x890/0x890 [ 310.279640][ T6422] ? syscall_enter_from_user_mode+0x26/0x80 [ 310.281834][ T6422] do_syscall_64+0x39/0xb0 [ 310.283503][ T6422] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 310.286042][ T6422] RIP: 0033:0x7f81ce88c389 [ 310.288178][ T6422] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 310.297175][ T6422] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 310.301077][ T6422] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 310.304620][ T6422] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 310.308479][ T6422] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 310.312145][ T6422] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 310.315752][ T6422] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 310.319630][ T6422] [ 310.321156][ T6432] CPU: 2 PID: 6432 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 310.325735][ T6432] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 310.328974][ T6432] Call Trace: [ 310.330192][ T6432] [ 310.331265][ T6432] dump_stack_lvl+0x136/0x150 23:08:22 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 47) 23:08:22 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x24048044) 23:08:22 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x80184153, &(0x7f0000000240)={0x0, &(0x7f0000000200)=[&(0x7f0000000040)="3092115ec2fd3292afbb33c55a9631bb89d73dc4e056afdaaefe021906c69573c46e777b6ab4d40b08934ecdbfff4cf23032896e6ec127d0110a8f2f30ca942a3551dd61a13fedc0a67a030c492477dd0a22965b8cf736c77f0fa0375a08ff4266da9c0b9ea2", &(0x7f00000000c0)="cbbda4b79a62202323a8fce09c05621d3675945962e48d0fd5bd3427999e", &(0x7f0000000100)="7aae0d6b7b6daac4a88599f70f5409ab6cb970f97963bf9f73d0531570ed45adcb2fbf6e53162d934478d844562e72db82120486e8f6726084d80833d490ac9afcbc576ad60c08e3cc3b0f93efb5158709eb5ff5c2dc87e962d90cc529105b82023ae5d7b76c0015230bca0f77fbb0971a4367714ed95b79a5aee93f1c5a4e1f197a3817f183ebb18f835d34e803159858fffd6aecd5b7e0b13fd159ab14eb08974c5d2302bd5291a906a9edf1227ea7520ae7fd777721e14fb40f01e74593cc9f826b591d159b168bb292362cb2952f9543f1fb78d4c008c1d399b7c0aa124ecba6987b52ba"]}) [ 310.333210][ T6432] should_fail_ex+0x4a3/0x5b0 [ 310.335428][ T6432] prepare_alloc_pages+0x178/0x570 [ 310.337831][ T6432] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 310.340505][ T6432] __alloc_pages+0x149/0x4a0 [ 310.342537][ T6432] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 310.345104][ T6432] ? print_usage_bug.part.0+0x660/0x660 [ 310.347309][ T6432] ? find_held_lock+0x2d/0x110 [ 310.349388][ T6432] alloc_pages+0x1aa/0x270 [ 310.351320][ T6432] pte_alloc_one+0x1a/0x230 [ 310.353147][ T6432] __pte_alloc+0x6d/0x260 [ 310.354777][ T6432] ? pmd_install+0x160/0x160 [ 310.356666][ T6432] ? _raw_spin_unlock+0x28/0x40 [ 310.358515][ T6432] ? __pmd_alloc+0x30c/0x5d0 [ 310.359371][ T6444] FAULT_INJECTION: forcing a failure. [ 310.359371][ T6444] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 310.360379][ T6432] ? __pud_alloc+0xe4/0x180 [ 310.369345][ T6432] copy_page_range+0x151e/0x3830 [ 310.371260][ T6432] ? mas_wr_modify+0x999/0x16d0 [ 310.373123][ T6432] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 310.375384][ T6432] ? mas_store+0x275/0x3a0 [ 310.377355][ T6432] ? handle_mm_fault+0x9f0/0x9f0 [ 310.379548][ T6432] ? down_write+0x14f/0x200 [ 310.381750][ T6432] dup_mmap+0x10bc/0x19d0 [ 310.383995][ T6432] ? replace_mm_exe_file+0x4c0/0x4c0 [ 310.386520][ T6432] ? lockdep_hardirqs_on+0x7d/0x100 [ 310.388520][ T6432] ? mm_init+0xc7a/0x1030 [ 310.390082][ T6432] copy_process+0x6663/0x75c0 [ 310.391778][ T6432] ? pidfd_prepare+0x80/0x80 [ 310.393482][ T6432] ? find_held_lock+0x2d/0x110 [ 310.395266][ T6432] ? find_held_lock+0x2d/0x110 [ 310.397227][ T6432] kernel_clone+0xeb/0x890 [ 310.399100][ T6432] ? create_io_thread+0xe0/0xe0 [ 310.401028][ T6432] ? vfs_write+0x15c/0xd50 [ 310.402712][ T6432] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 310.404747][ T6432] ? wait_for_completion_io_timeout+0x20/0x20 [ 310.406992][ T6432] __do_sys_clone+0xba/0x100 [ 310.408686][ T6432] ? kernel_clone+0x890/0x890 [ 310.410486][ T6432] ? syscall_enter_from_user_mode+0x26/0x80 [ 310.413335][ T6432] do_syscall_64+0x39/0xb0 [ 310.415593][ T6432] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 310.418406][ T6432] RIP: 0033:0x7f469ba8c389 [ 310.420495][ T6432] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 310.429880][ T6432] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 310.433730][ T6432] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 310.437284][ T6432] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 310.440149][ T6432] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 310.443111][ T6432] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 310.446087][ T6432] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 310.449651][ T6432] [ 310.451098][ T6444] CPU: 0 PID: 6444 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 310.456238][ T6444] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 23:08:22 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 48) 23:08:22 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async, rerun: 32) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x24048044) (rerun: 32) 23:08:22 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x80184153, &(0x7f0000000240)={0x0, &(0x7f0000000200)=[&(0x7f0000000040)="3092115ec2fd3292afbb33c55a9631bb89d73dc4e056afdaaefe021906c69573c46e777b6ab4d40b08934ecdbfff4cf23032896e6ec127d0110a8f2f30ca942a3551dd61a13fedc0a67a030c492477dd0a22965b8cf736c77f0fa0375a08ff4266da9c0b9ea2", &(0x7f00000000c0)="cbbda4b79a62202323a8fce09c05621d3675945962e48d0fd5bd3427999e", &(0x7f0000000100)="7aae0d6b7b6daac4a88599f70f5409ab6cb970f97963bf9f73d0531570ed45adcb2fbf6e53162d934478d844562e72db82120486e8f6726084d80833d490ac9afcbc576ad60c08e3cc3b0f93efb5158709eb5ff5c2dc87e962d90cc529105b82023ae5d7b76c0015230bca0f77fbb0971a4367714ed95b79a5aee93f1c5a4e1f197a3817f183ebb18f835d34e803159858fffd6aecd5b7e0b13fd159ab14eb08974c5d2302bd5291a906a9edf1227ea7520ae7fd777721e14fb40f01e74593cc9f826b591d159b168bb292362cb2952f9543f1fb78d4c008c1d399b7c0aa124ecba6987b52ba"]}) (rerun: 32) [ 310.460478][ T6444] Call Trace: [ 310.462133][ T6444] [ 310.463490][ T6444] dump_stack_lvl+0x136/0x150 [ 310.465680][ T6444] should_fail_ex+0x4a3/0x5b0 [ 310.467873][ T6444] prepare_alloc_pages+0x178/0x570 [ 310.470360][ T6444] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 310.473532][ T6444] __alloc_pages+0x149/0x4a0 [ 310.476062][ T6444] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 310.479213][ T6444] ? print_usage_bug.part.0+0x660/0x660 [ 310.480350][ T6451] FAULT_INJECTION: forcing a failure. 23:08:22 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x4280, 0x0) write$damon_schemes(r0, &(0x7f0000000040)={0x5, 0x401, 0x20, 0x20, 0x800, 0x3f, 0xf3}, 0xfffffffffffffed9) [ 310.480350][ T6451] name failslab, interval 1, probability 0, space 0, times 0 [ 310.481804][ T6444] ? find_held_lock+0x2d/0x110 [ 310.481833][ T6444] alloc_pages+0x1aa/0x270 [ 310.481852][ T6444] pte_alloc_one+0x1a/0x230 [ 310.493863][ T6444] __pte_alloc+0x6d/0x260 [ 310.496124][ T6444] ? pmd_install+0x160/0x160 [ 310.498354][ T6444] ? _raw_spin_unlock+0x28/0x40 [ 310.500610][ T6444] ? __pmd_alloc+0x30c/0x5d0 [ 310.502654][ T6444] ? __pud_alloc+0xe4/0x180 23:08:22 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x4280, 0x0) write$damon_schemes(r0, &(0x7f0000000040)={0x5, 0x401, 0x20, 0x20, 0x800, 0x3f, 0xf3}, 0xfffffffffffffed9) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x4280, 0x0) (async) write$damon_schemes(r0, &(0x7f0000000040)={0x5, 0x401, 0x20, 0x20, 0x800, 0x3f, 0xf3}, 0xfffffffffffffed9) (async) [ 310.504337][ T6444] copy_page_range+0x151e/0x3830 [ 310.506804][ T6444] ? mas_wr_modify+0x999/0x16d0 [ 310.509099][ T6444] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 310.511791][ T6444] ? mas_store+0x275/0x3a0 [ 310.513772][ T6444] ? handle_mm_fault+0x9f0/0x9f0 [ 310.516092][ T6444] ? down_write+0x14f/0x200 [ 310.518039][ T6444] dup_mmap+0x10bc/0x19d0 [ 310.519672][ T6444] ? replace_mm_exe_file+0x4c0/0x4c0 [ 310.521616][ T6444] ? lockdep_hardirqs_on+0x7d/0x100 [ 310.523498][ T6444] ? mm_init+0xc7a/0x1030 [ 310.525306][ T6444] copy_process+0x6663/0x75c0 [ 310.527506][ T6444] ? pidfd_prepare+0x80/0x80 [ 310.529682][ T6444] ? find_held_lock+0x2d/0x110 [ 310.531927][ T6444] ? find_held_lock+0x2d/0x110 [ 310.534168][ T6444] kernel_clone+0xeb/0x890 [ 310.536107][ T6444] ? create_io_thread+0xe0/0xe0 [ 310.538095][ T6444] ? vfs_write+0x15c/0xd50 [ 310.539728][ T6444] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 310.541878][ T6444] ? wait_for_completion_io_timeout+0x20/0x20 [ 310.544423][ T6444] __do_sys_clone+0xba/0x100 [ 310.546835][ T6444] ? kernel_clone+0x890/0x890 [ 310.549124][ T6444] ? syscall_enter_from_user_mode+0x26/0x80 [ 310.551923][ T6444] do_syscall_64+0x39/0xb0 [ 310.554038][ T6444] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 310.556827][ T6444] RIP: 0033:0x7f81ce88c389 [ 310.558954][ T6444] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 310.568098][ T6444] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 310.571098][ T6444] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 310.574047][ T6444] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 310.577047][ T6444] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 310.580185][ T6444] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 310.583773][ T6444] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 310.587590][ T6444] [ 310.589069][ T6451] CPU: 2 PID: 6451 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 310.592845][ T6451] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 310.596088][ T6451] Call Trace: [ 310.597319][ T6451] [ 310.598427][ T6451] dump_stack_lvl+0x136/0x150 [ 310.600441][ T6451] should_fail_ex+0x4a3/0x5b0 [ 310.602673][ T6451] should_failslab+0x9/0x20 [ 310.604477][ T6451] kmem_cache_alloc+0x5d/0x3f0 [ 310.606311][ T6451] ptlock_alloc+0x21/0x70 [ 310.607914][ T6451] pte_alloc_one+0x6c/0x230 [ 310.609654][ T6451] __pte_alloc+0x6d/0x260 [ 310.611238][ T6451] ? pmd_install+0x160/0x160 [ 310.613169][ T6451] ? _raw_spin_unlock+0x28/0x40 [ 310.615085][ T6451] ? __pmd_alloc+0x30c/0x5d0 [ 310.616859][ T6451] ? __pud_alloc+0xe4/0x180 [ 310.618734][ T6451] copy_page_range+0x151e/0x3830 [ 310.620772][ T6451] ? mas_wr_modify+0x2da/0x16d0 [ 310.622693][ T6451] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 310.625020][ T6451] ? mas_store+0x275/0x3a0 [ 310.626750][ T6451] ? handle_mm_fault+0x9f0/0x9f0 [ 310.628598][ T6451] ? down_write+0x14f/0x200 [ 310.630321][ T6451] dup_mmap+0x10bc/0x19d0 [ 310.631916][ T6451] ? replace_mm_exe_file+0x4c0/0x4c0 [ 310.633942][ T6451] ? lockdep_hardirqs_on+0x7d/0x100 [ 310.635858][ T6451] ? mm_init+0xc7a/0x1030 [ 310.637595][ T6451] copy_process+0x6663/0x75c0 [ 310.639539][ T6451] ? pidfd_prepare+0x80/0x80 [ 310.641505][ T6451] ? find_held_lock+0x2d/0x110 [ 310.643614][ T6451] ? find_held_lock+0x2d/0x110 [ 310.645835][ T6451] kernel_clone+0xeb/0x890 [ 310.647777][ T6451] ? create_io_thread+0xe0/0xe0 [ 310.649581][ T6451] ? vfs_write+0x15c/0xd50 [ 310.651183][ T6451] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 310.653651][ T6451] ? wait_for_completion_io_timeout+0x20/0x20 [ 310.656521][ T6451] __do_sys_clone+0xba/0x100 [ 310.658304][ T6451] ? kernel_clone+0x890/0x890 [ 310.660134][ T6451] ? syscall_enter_from_user_mode+0x26/0x80 [ 310.662627][ T6451] do_syscall_64+0x39/0xb0 [ 310.664462][ T6451] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 310.666706][ T6451] RIP: 0033:0x7f469ba8c389 [ 310.668395][ T6451] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 310.676472][ T6451] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 310.680731][ T6451] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 310.683739][ T6451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 310.687044][ T6451] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 310.690677][ T6451] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 310.693995][ T6451] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 310.697440][ T6451] 23:08:22 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 48) 23:08:22 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x24048044) (async) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x24048044) 23:08:22 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x4280, 0x0) write$damon_schemes(r0, &(0x7f0000000040)={0x5, 0x401, 0x20, 0x20, 0x800, 0x3f, 0xf3}, 0xfffffffffffffed9) 23:08:22 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 49) 23:08:22 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) [ 310.720433][ T6465] FAULT_INJECTION: forcing a failure. 23:08:22 executing program 0: write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000040), 0x4) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) [ 310.720433][ T6465] name failslab, interval 1, probability 0, space 0, times 0 [ 310.727947][ T6465] CPU: 2 PID: 6465 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 310.728174][ T6468] FAULT_INJECTION: forcing a failure. [ 310.728174][ T6468] name failslab, interval 1, probability 0, space 0, times 0 [ 310.732206][ T6465] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 310.732216][ T6465] Call Trace: 23:08:22 executing program 0: write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000040), 0x4) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) [ 310.732221][ T6465] 23:08:22 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async, rerun: 64) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) [ 310.743636][ T6465] dump_stack_lvl+0x136/0x150 [ 310.745846][ T6465] should_fail_ex+0x4a3/0x5b0 [ 310.748134][ T6465] should_failslab+0x9/0x20 [ 310.750051][ T6465] kmem_cache_alloc+0x5d/0x3f0 [ 310.752145][ T6465] ptlock_alloc+0x21/0x70 [ 310.753739][ T6465] pte_alloc_one+0x6c/0x230 [ 310.755420][ T6465] __pte_alloc+0x6d/0x260 [ 310.756992][ T6465] ? pmd_install+0x160/0x160 [ 310.758664][ T6465] ? _raw_spin_unlock+0x28/0x40 [ 310.760443][ T6465] ? __pmd_alloc+0x30c/0x5d0 [ 310.762177][ T6465] ? __pud_alloc+0xe4/0x180 [ 310.763818][ T6465] copy_page_range+0x151e/0x3830 [ 310.765783][ T6465] ? mas_wr_modify+0x2da/0x16d0 [ 310.767647][ T6465] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 310.769988][ T6465] ? mas_store+0x275/0x3a0 [ 310.771669][ T6465] ? handle_mm_fault+0x9f0/0x9f0 [ 310.773485][ T6465] ? down_write+0x14f/0x200 [ 310.775329][ T6465] dup_mmap+0x10bc/0x19d0 [ 310.777443][ T6465] ? replace_mm_exe_file+0x4c0/0x4c0 [ 310.779559][ T6465] ? lockdep_hardirqs_on+0x7d/0x100 [ 310.781589][ T6465] ? mm_init+0xc7a/0x1030 [ 310.783172][ T6465] copy_process+0x6663/0x75c0 [ 310.784999][ T6465] ? pidfd_prepare+0x80/0x80 [ 310.787217][ T6465] ? find_held_lock+0x2d/0x110 [ 310.789171][ T6465] ? find_held_lock+0x2d/0x110 [ 310.791045][ T6465] kernel_clone+0xeb/0x890 [ 310.792887][ T6465] ? create_io_thread+0xe0/0xe0 [ 310.794687][ T6465] ? vfs_write+0x15c/0xd50 [ 310.796862][ T6465] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 310.799533][ T6465] ? wait_for_completion_io_timeout+0x20/0x20 [ 310.801873][ T6465] __do_sys_clone+0xba/0x100 [ 310.803564][ T6465] ? kernel_clone+0x890/0x890 [ 310.805542][ T6465] ? syscall_enter_from_user_mode+0x26/0x80 [ 310.808121][ T6465] do_syscall_64+0x39/0xb0 [ 310.809736][ T6465] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 310.812036][ T6465] RIP: 0033:0x7f81ce88c389 [ 310.813921][ T6465] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 310.821211][ T6465] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 310.824225][ T6465] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 310.827099][ T6465] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 310.829960][ T6465] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 310.833016][ T6465] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 310.836659][ T6465] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 310.840331][ T6465] [ 310.841778][ T6468] CPU: 0 PID: 6468 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 310.845564][ T6468] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 310.848788][ T6468] Call Trace: [ 310.850041][ T6468] [ 310.851157][ T6468] dump_stack_lvl+0x136/0x150 [ 310.853054][ T6468] should_fail_ex+0x4a3/0x5b0 [ 310.854759][ T6468] should_failslab+0x9/0x20 [ 310.856402][ T6468] kmem_cache_alloc+0x5d/0x3f0 [ 310.858136][ T6468] ptlock_alloc+0x21/0x70 23:08:22 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 49) 23:08:22 executing program 0: write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000040), 0x4) (async) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000040), 0x4) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) 23:08:22 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) (async) [ 310.859716][ T6468] pte_alloc_one+0x6c/0x230 [ 310.861684][ T6468] __pte_alloc+0x6d/0x260 [ 310.863346][ T6468] ? pmd_install+0x160/0x160 [ 310.865094][ T6468] ? _raw_spin_unlock+0x28/0x40 [ 310.866979][ T6468] ? __pmd_alloc+0x30c/0x5d0 [ 310.869038][ T6468] ? __pud_alloc+0xe4/0x180 [ 310.871062][ T6468] copy_page_range+0x151e/0x3830 [ 310.873406][ T6468] ? mas_wr_modify+0x2da/0x16d0 [ 310.875596][ T6468] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 310.878157][ T6468] ? mas_store+0x275/0x3a0 [ 310.879762][ T6468] ? handle_mm_fault+0x9f0/0x9f0 [ 310.880276][ T6486] FAULT_INJECTION: forcing a failure. [ 310.880276][ T6486] name failslab, interval 1, probability 0, space 0, times 0 [ 310.881733][ T6468] ? down_write+0x14f/0x200 [ 310.889291][ T6468] dup_mmap+0x10bc/0x19d0 [ 310.891048][ T6468] ? replace_mm_exe_file+0x4c0/0x4c0 [ 310.892965][ T6468] ? lockdep_hardirqs_on+0x7d/0x100 [ 310.894839][ T6468] ? mm_init+0xc7a/0x1030 [ 310.896430][ T6468] copy_process+0x6663/0x75c0 [ 310.898214][ T6468] ? pidfd_prepare+0x80/0x80 [ 310.900137][ T6468] ? find_held_lock+0x2d/0x110 [ 310.902154][ T6468] ? find_held_lock+0x2d/0x110 [ 310.904146][ T6468] kernel_clone+0xeb/0x890 [ 310.906069][ T6468] ? create_io_thread+0xe0/0xe0 [ 310.908076][ T6468] ? vfs_write+0x15c/0xd50 [ 310.909884][ T6468] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 310.912291][ T6468] ? wait_for_completion_io_timeout+0x20/0x20 [ 310.914798][ T6468] __do_sys_clone+0xba/0x100 [ 310.916586][ T6468] ? kernel_clone+0x890/0x890 [ 310.918366][ T6468] ? syscall_enter_from_user_mode+0x26/0x80 [ 310.920844][ T6468] do_syscall_64+0x39/0xb0 [ 310.922707][ T6468] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 310.925346][ T6468] RIP: 0033:0x7f469ba8c389 [ 310.927201][ T6468] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 310.935164][ T6468] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 310.938558][ T6468] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 310.942205][ T6468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 310.945956][ T6468] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 310.949458][ T6468] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 310.952951][ T6468] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 310.956117][ T6468] [ 310.957473][ T6486] CPU: 1 PID: 6486 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 310.962100][ T6486] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 310.966172][ T6486] Call Trace: [ 310.967785][ T6486] [ 310.969188][ T6486] dump_stack_lvl+0x136/0x150 [ 310.971315][ T6486] should_fail_ex+0x4a3/0x5b0 [ 310.973472][ T6486] should_failslab+0x9/0x20 [ 310.975534][ T6486] kmem_cache_alloc+0x5d/0x3f0 23:08:23 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 50) 23:08:23 executing program 0: ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000040)={0xc07, 0x7}) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) 23:08:23 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x10000004) [ 310.977708][ T6486] vm_area_dup+0x23/0x300 [ 310.979872][ T6486] dup_mmap+0x713/0x19d0 [ 310.981850][ T6486] ? replace_mm_exe_file+0x4c0/0x4c0 [ 310.984432][ T6486] ? lockdep_hardirqs_on+0x7d/0x100 [ 310.987055][ T6486] ? mm_init+0xc7a/0x1030 [ 310.989238][ T6486] copy_process+0x6663/0x75c0 [ 310.991414][ T6486] ? pidfd_prepare+0x80/0x80 [ 310.993533][ T6486] ? find_held_lock+0x2d/0x110 23:08:23 executing program 0: ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000040)={0xc07, 0x7}) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) 23:08:23 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x10000004) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x10000004) (async) [ 310.995703][ T6486] ? find_held_lock+0x2d/0x110 [ 310.998034][ T6486] kernel_clone+0xeb/0x890 [ 311.000174][ T6486] ? create_io_thread+0xe0/0xe0 [ 311.002580][ T6486] ? vfs_write+0x15c/0xd50 [ 311.004757][ T6486] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 311.004953][ T6493] FAULT_INJECTION: forcing a failure. [ 311.004953][ T6493] name failslab, interval 1, probability 0, space 0, times 0 [ 311.007346][ T6486] ? wait_for_completion_io_timeout+0x20/0x20 [ 311.007374][ T6486] __do_sys_clone+0xba/0x100 [ 311.007396][ T6486] ? kernel_clone+0x890/0x890 [ 311.019372][ T6486] ? syscall_enter_from_user_mode+0x26/0x80 [ 311.022097][ T6486] do_syscall_64+0x39/0xb0 [ 311.024259][ T6486] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 311.027180][ T6486] RIP: 0033:0x7f81ce88c389 [ 311.029257][ T6486] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 311.037793][ T6486] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 311.041515][ T6486] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 311.045065][ T6486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 311.048569][ T6486] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 311.052064][ T6486] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 311.055667][ T6486] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 311.059284][ T6486] [ 311.060688][ T6493] CPU: 0 PID: 6493 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 311.065165][ T6493] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 311.068694][ T6493] Call Trace: [ 311.070341][ T6493] [ 311.071708][ T6493] dump_stack_lvl+0x136/0x150 [ 311.073815][ T6493] should_fail_ex+0x4a3/0x5b0 [ 311.075869][ T6493] should_failslab+0x9/0x20 [ 311.077812][ T6493] kmem_cache_alloc+0x5d/0x3f0 [ 311.079709][ T6493] vm_area_dup+0x23/0x300 [ 311.081544][ T6493] dup_mmap+0x713/0x19d0 [ 311.083361][ T6493] ? replace_mm_exe_file+0x4c0/0x4c0 23:08:23 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 50) 23:08:23 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x10000004) [ 311.085503][ T6493] ? lockdep_hardirqs_on+0x7d/0x100 [ 311.087807][ T6493] ? mm_init+0xc7a/0x1030 [ 311.089819][ T6493] copy_process+0x6663/0x75c0 [ 311.091954][ T6493] ? pidfd_prepare+0x80/0x80 [ 311.093898][ T6493] ? find_held_lock+0x2d/0x110 [ 311.095938][ T6493] ? find_held_lock+0x2d/0x110 [ 311.097802][ T6493] kernel_clone+0xeb/0x890 [ 311.099582][ T6493] ? create_io_thread+0xe0/0xe0 [ 311.099650][ T6502] FAULT_INJECTION: forcing a failure. [ 311.099650][ T6502] name failslab, interval 1, probability 0, space 0, times 0 23:08:23 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6de) [ 311.101770][ T6493] ? vfs_write+0x15c/0xd50 [ 311.101796][ T6493] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 311.112612][ T6493] ? wait_for_completion_io_timeout+0x20/0x20 [ 311.115030][ T6493] __do_sys_clone+0xba/0x100 [ 311.117010][ T6493] ? kernel_clone+0x890/0x890 [ 311.118696][ T6493] ? syscall_enter_from_user_mode+0x26/0x80 [ 311.121133][ T6493] do_syscall_64+0x39/0xb0 [ 311.122962][ T6493] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 311.125918][ T6493] RIP: 0033:0x7f469ba8c389 [ 311.128212][ T6493] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 311.137551][ T6493] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 311.141420][ T6493] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 311.145355][ T6493] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 311.148387][ T6493] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 311.151910][ T6493] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 311.155442][ T6493] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 311.159032][ T6493] [ 311.160658][ T6502] CPU: 1 PID: 6502 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 311.165335][ T6502] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 311.169364][ T6502] Call Trace: [ 311.170922][ T6502] [ 311.172285][ T6502] dump_stack_lvl+0x136/0x150 [ 311.174420][ T6502] should_fail_ex+0x4a3/0x5b0 [ 311.176581][ T6502] should_failslab+0x9/0x20 [ 311.178662][ T6502] kmem_cache_alloc+0x5d/0x3f0 [ 311.180898][ T6502] vm_area_dup+0x55/0x300 [ 311.182955][ T6502] dup_mmap+0x713/0x19d0 [ 311.185015][ T6502] ? replace_mm_exe_file+0x4c0/0x4c0 [ 311.187427][ T6502] ? lockdep_hardirqs_on+0x7d/0x100 [ 311.189817][ T6502] ? mm_init+0xc7a/0x1030 23:08:23 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 51) 23:08:23 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6de) 23:08:23 executing program 0: ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000040)={0xc07, 0x7}) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000040)={0xc07, 0x7}) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) [ 311.191786][ T6502] copy_process+0x6663/0x75c0 [ 311.194207][ T6502] ? pidfd_prepare+0x80/0x80 [ 311.196473][ T6502] ? find_held_lock+0x2d/0x110 [ 311.198842][ T6502] ? find_held_lock+0x2d/0x110 [ 311.199746][ T6508] FAULT_INJECTION: forcing a failure. [ 311.199746][ T6508] name failslab, interval 1, probability 0, space 0, times 0 [ 311.201130][ T6502] kernel_clone+0xeb/0x890 [ 311.201156][ T6502] ? create_io_thread+0xe0/0xe0 [ 311.201175][ T6502] ? vfs_write+0x15c/0xd50 [ 311.212810][ T6502] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 311.215401][ T6502] ? wait_for_completion_io_timeout+0x20/0x20 [ 311.218454][ T6502] __do_sys_clone+0xba/0x100 [ 311.220781][ T6502] ? kernel_clone+0x890/0x890 [ 311.223019][ T6502] ? syscall_enter_from_user_mode+0x26/0x80 [ 311.225891][ T6502] do_syscall_64+0x39/0xb0 [ 311.228370][ T6502] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 311.231562][ T6502] RIP: 0033:0x7f81ce88c389 [ 311.233699][ T6502] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 23:08:23 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r1, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x401, 0x0) bind$isdn_base(r2, &(0x7f00000001c0)={0x22, 0x7, 0x66, 0x20, 0x3}, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000140)=r0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000000c0)={r0, 0x340, 0x3f}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000001900), 0x4) connect$rxrpc(r4, &(0x7f0000001940)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000100)={{0x0, 0x4}, {0x4, 0xba1a}, 0x7fff, 0x1}) clock_gettime(0x6, &(0x7f0000000200)) [ 311.242445][ T6502] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 311.246428][ T6502] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 311.250118][ T6502] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 311.253184][ T6502] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 311.256078][ T6502] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 311.259114][ T6502] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 311.262030][ T6502] [ 311.263170][ T6508] CPU: 0 PID: 6508 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 23:08:23 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r1, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) connect$rxrpc(r1, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x401, 0x0) bind$isdn_base(r2, &(0x7f00000001c0)={0x22, 0x7, 0x66, 0x20, 0x3}, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000140)=r0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000000c0)={r0, 0x340, 0x3f}) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000000c0)={r0, 0x340, 0x3f}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000001900), 0x4) connect$rxrpc(r4, &(0x7f0000001940)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000100)={{0x0, 0x4}, {0x4, 0xba1a}, 0x7fff, 0x1}) clock_gettime(0x6, &(0x7f0000000200)) (async) clock_gettime(0x6, &(0x7f0000000200)) [ 311.267851][ T6508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 311.271687][ T6508] Call Trace: [ 311.273117][ T6508] [ 311.274286][ T6508] dump_stack_lvl+0x136/0x150 [ 311.276301][ T6508] should_fail_ex+0x4a3/0x5b0 [ 311.278110][ T6508] should_failslab+0x9/0x20 [ 311.280141][ T6508] kmem_cache_alloc+0x5d/0x3f0 23:08:23 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 51) 23:08:23 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6de) [ 311.282177][ T6508] vm_area_dup+0x55/0x300 [ 311.284068][ T6508] dup_mmap+0x713/0x19d0 [ 311.285762][ T6508] ? replace_mm_exe_file+0x4c0/0x4c0 [ 311.287970][ T6508] ? lockdep_hardirqs_on+0x7d/0x100 [ 311.290197][ T6508] ? mm_init+0xc7a/0x1030 [ 311.292044][ T6508] copy_process+0x6663/0x75c0 [ 311.294086][ T6508] ? pidfd_prepare+0x80/0x80 23:08:23 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r1, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x401, 0x0) bind$isdn_base(r2, &(0x7f00000001c0)={0x22, 0x7, 0x66, 0x20, 0x3}, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000140)=r0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000000c0)={r0, 0x340, 0x3f}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000001900), 0x4) connect$rxrpc(r4, &(0x7f0000001940)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000100)={{0x0, 0x4}, {0x4, 0xba1a}, 0x7fff, 0x1}) clock_gettime(0x6, &(0x7f0000000200)) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) connect$rxrpc(r1, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x401, 0x0) (async) bind$isdn_base(r2, &(0x7f00000001c0)={0x22, 0x7, 0x66, 0x20, 0x3}, 0x6) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000140)=r0) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000000c0)={r0, 0x340, 0x3f}) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000001900), 0x4) (async) connect$rxrpc(r4, &(0x7f0000001940)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) (async) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000100)={{0x0, 0x4}, {0x4, 0xba1a}, 0x7fff, 0x1}) (async) clock_gettime(0x6, &(0x7f0000000200)) (async) [ 311.296336][ T6508] ? find_held_lock+0x2d/0x110 [ 311.296888][ T6518] FAULT_INJECTION: forcing a failure. [ 311.296888][ T6518] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 311.298756][ T6508] ? find_held_lock+0x2d/0x110 [ 311.298774][ T6508] kernel_clone+0xeb/0x890 [ 311.298787][ T6508] ? create_io_thread+0xe0/0xe0 [ 311.298799][ T6508] ? vfs_write+0x15c/0xd50 23:08:23 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 52) 23:08:23 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7f000000", @ANYRES16=r0, @ANYBLOB="00022dbd7000fcdbdf2508000000080001007b2324000d0001005d29a25d7b7d265c0000000008000700e00000020800040000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28048040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) [ 311.298809][ T6508] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 311.298823][ T6508] ? wait_for_completion_io_timeout+0x20/0x20 [ 311.298835][ T6508] __do_sys_clone+0xba/0x100 [ 311.298846][ T6508] ? kernel_clone+0x890/0x890 [ 311.298858][ T6508] ? syscall_enter_from_user_mode+0x26/0x80 [ 311.298871][ T6508] do_syscall_64+0x39/0xb0 [ 311.298880][ T6508] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 311.298896][ T6508] RIP: 0033:0x7f469ba8c389 23:08:23 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x644142, 0x80) [ 311.298919][ T6508] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 23:08:23 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7f000000", @ANYRES16=r0, @ANYBLOB="00022dbd7000fcdbdf2508000000080001007b2324000d0001005d29a25d7b7d265c0000000008000700e00000020800040000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28048040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7f000000", @ANYRES16=r0, @ANYBLOB="00022dbd7000fcdbdf2508000000080001007b2324000d0001005d29a25d7b7d265c0000000008000700e00000020800040000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28048040) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async) [ 311.298930][ T6508] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 311.298941][ T6508] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 311.298948][ T6508] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 311.298954][ T6508] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 311.298960][ T6508] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 311.298966][ T6508] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 311.298973][ T6508] [ 311.324219][ T6532] FAULT_INJECTION: forcing a failure. [ 311.324219][ T6532] name failslab, interval 1, probability 0, space 0, times 0 [ 311.326872][ T6518] CPU: 1 PID: 6518 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 311.376596][ T6518] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 311.381048][ T6518] Call Trace: [ 311.382620][ T6518] [ 311.384028][ T6518] dump_stack_lvl+0x136/0x150 [ 311.386127][ T6518] should_fail_ex+0x4a3/0x5b0 [ 311.388079][ T6518] prepare_alloc_pages+0x178/0x570 [ 311.390387][ T6518] ? register_lock_class+0xbe/0x1120 [ 311.392854][ T6518] __alloc_pages+0x149/0x4a0 [ 311.394982][ T6518] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 311.397987][ T6518] ? print_usage_bug.part.0+0x660/0x660 [ 311.400486][ T6518] ? write_profile+0x450/0x450 [ 311.402661][ T6518] ? arch_stack_walk+0x97/0xf0 [ 311.404827][ T6518] ? __lock_acquire+0x1987/0x5f30 [ 311.407082][ T6518] alloc_pages+0x1aa/0x270 [ 311.409109][ T6518] pte_alloc_one+0x1a/0x230 [ 311.411271][ T6518] __pte_alloc+0x6d/0x260 [ 311.413454][ T6518] ? pmd_install+0x160/0x160 [ 311.415527][ T6518] copy_page_range+0x151e/0x3830 [ 311.417769][ T6518] ? mas_wr_modify+0x999/0x16d0 [ 311.420032][ T6518] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 311.422684][ T6518] ? mas_store+0x275/0x3a0 [ 311.424699][ T6518] ? handle_mm_fault+0x9f0/0x9f0 [ 311.426928][ T6518] ? up_write+0x1b4/0x520 [ 311.428889][ T6518] dup_mmap+0x10bc/0x19d0 [ 311.430854][ T6518] ? replace_mm_exe_file+0x4c0/0x4c0 [ 311.433265][ T6518] ? lockdep_hardirqs_on+0x7d/0x100 [ 311.435581][ T6518] ? mm_init+0xc7a/0x1030 [ 311.437650][ T6518] copy_process+0x6663/0x75c0 [ 311.439894][ T6518] ? pidfd_prepare+0x80/0x80 [ 311.441990][ T6518] ? find_held_lock+0x2d/0x110 [ 311.444163][ T6518] ? find_held_lock+0x2d/0x110 [ 311.446284][ T6518] kernel_clone+0xeb/0x890 [ 311.448352][ T6518] ? create_io_thread+0xe0/0xe0 [ 311.450543][ T6518] ? vfs_write+0x15c/0xd50 [ 311.452570][ T6518] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 311.455072][ T6518] ? wait_for_completion_io_timeout+0x20/0x20 [ 311.457790][ T6518] __do_sys_clone+0xba/0x100 [ 311.459921][ T6518] ? kernel_clone+0x890/0x890 [ 311.462069][ T6518] ? syscall_enter_from_user_mode+0x26/0x80 [ 311.464782][ T6518] do_syscall_64+0x39/0xb0 [ 311.466840][ T6518] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 311.469504][ T6518] RIP: 0033:0x7f81ce88c389 [ 311.471501][ T6518] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 311.480067][ T6518] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 311.483811][ T6518] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 311.487435][ T6518] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 311.490947][ T6518] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 311.494403][ T6518] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 311.497932][ T6518] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 311.501632][ T6518] [ 311.503143][ T6532] CPU: 3 PID: 6532 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 23:08:23 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x644142, 0x80) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x644142, 0x80) (async) [ 311.508146][ T6532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 311.512590][ T6532] Call Trace: [ 311.514412][ T6532] [ 311.516164][ T6532] dump_stack_lvl+0x136/0x150 [ 311.518845][ T6532] should_fail_ex+0x4a3/0x5b0 [ 311.521082][ T6532] should_failslab+0x9/0x20 [ 311.523208][ T6532] kmem_cache_alloc+0x5d/0x3f0 [ 311.525455][ T6532] ptlock_alloc+0x21/0x70 [ 311.527391][ T6532] pte_alloc_one+0x6c/0x230 [ 311.529158][ T6532] __pte_alloc+0x6d/0x260 [ 311.531087][ T6532] ? pmd_install+0x160/0x160 [ 311.532893][ T6532] copy_page_range+0x151e/0x3830 [ 311.535270][ T6532] ? mas_wr_modify+0x999/0x16d0 [ 311.537825][ T6532] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 311.540565][ T6532] ? mas_store+0x275/0x3a0 [ 311.542211][ T6532] ? handle_mm_fault+0x9f0/0x9f0 [ 311.543978][ T6532] ? up_write+0x1b4/0x520 [ 311.545688][ T6532] dup_mmap+0x10bc/0x19d0 [ 311.547238][ T6532] ? replace_mm_exe_file+0x4c0/0x4c0 [ 311.549159][ T6532] ? lockdep_hardirqs_on+0x7d/0x100 [ 311.551032][ T6532] ? mm_init+0xc7a/0x1030 [ 311.552583][ T6532] copy_process+0x6663/0x75c0 [ 311.554273][ T6532] ? pidfd_prepare+0x80/0x80 [ 311.556088][ T6532] ? find_held_lock+0x2d/0x110 [ 311.558038][ T6532] ? find_held_lock+0x2d/0x110 [ 311.559873][ T6532] kernel_clone+0xeb/0x890 [ 311.561566][ T6532] ? create_io_thread+0xe0/0xe0 [ 311.563303][ T6532] ? vfs_write+0x15c/0xd50 [ 311.564944][ T6532] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 311.567020][ T6532] ? wait_for_completion_io_timeout+0x20/0x20 [ 311.569137][ T6532] __do_sys_clone+0xba/0x100 [ 311.570902][ T6532] ? kernel_clone+0x890/0x890 [ 311.572703][ T6532] ? syscall_enter_from_user_mode+0x26/0x80 [ 311.575008][ T6532] do_syscall_64+0x39/0xb0 [ 311.577115][ T6532] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 311.579728][ T6532] RIP: 0033:0x7f469ba8c389 [ 311.581834][ T6532] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 311.590792][ T6532] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 311.594581][ T6532] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 311.598266][ T6532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 311.601858][ T6532] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 311.605478][ T6532] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 311.609092][ T6532] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 311.612620][ T6532] 23:08:23 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 52) 23:08:23 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7f000000", @ANYRES16=r0, @ANYBLOB="00022dbd7000fcdbdf2508000000080001007b2324000d0001005d29a25d7b7d265c0000000008000700e00000020800040000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28048040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 23:08:23 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x644142, 0x80) [ 311.623099][ T6549] FAULT_INJECTION: forcing a failure. [ 311.623099][ T6549] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:08:23 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 53) 23:08:23 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000080)=0x7a) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000000)={'\x00', 0x6, 0x3, 0x81}) [ 311.630868][ T6549] CPU: 1 PID: 6549 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 311.635343][ T6549] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 311.639016][ T6549] Call Trace: 23:08:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0xd7d18508f3d2c6da) [ 311.640543][ T6549] [ 311.642096][ T6549] dump_stack_lvl+0x136/0x150 [ 311.644219][ T6549] should_fail_ex+0x4a3/0x5b0 [ 311.646418][ T6549] prepare_alloc_pages+0x178/0x570 [ 311.648861][ T6549] ? lockdep_hardirqs_on_prepare+0x410/0x410 23:08:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) (async) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0xd7d18508f3d2c6da) [ 311.651665][ T6549] __alloc_pages+0x149/0x4a0 [ 311.653957][ T6549] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 311.657167][ T6549] ? print_usage_bug.part.0+0x660/0x660 [ 311.659688][ T6549] ? find_held_lock+0x2d/0x110 [ 311.661607][ T6549] alloc_pages+0x1aa/0x270 [ 311.663526][ T6549] pte_alloc_one+0x1a/0x230 [ 311.665534][ T6549] __pte_alloc+0x6d/0x260 [ 311.667416][ T6549] ? pmd_install+0x160/0x160 [ 311.669482][ T6549] ? _raw_spin_unlock+0x28/0x40 [ 311.670783][ T6561] FAULT_INJECTION: forcing a failure. [ 311.670783][ T6561] name failslab, interval 1, probability 0, space 0, times 0 [ 311.671521][ T6549] ? __pmd_alloc+0x30c/0x5d0 [ 311.671539][ T6549] ? __pud_alloc+0xe4/0x180 [ 311.671553][ T6549] copy_page_range+0x151e/0x3830 [ 311.671570][ T6549] ? mas_wr_modify+0x2da/0x16d0 [ 311.671589][ T6549] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 311.688635][ T6549] ? mas_store+0x275/0x3a0 [ 311.690893][ T6549] ? handle_mm_fault+0x9f0/0x9f0 [ 311.693202][ T6549] ? down_write+0x14f/0x200 [ 311.695302][ T6549] dup_mmap+0x10bc/0x19d0 [ 311.697332][ T6549] ? replace_mm_exe_file+0x4c0/0x4c0 [ 311.699803][ T6549] ? lockdep_hardirqs_on+0x7d/0x100 [ 311.702191][ T6549] ? mm_init+0xc7a/0x1030 [ 311.704203][ T6549] copy_process+0x6663/0x75c0 [ 311.706387][ T6549] ? pidfd_prepare+0x80/0x80 [ 311.708505][ T6549] ? find_held_lock+0x2d/0x110 [ 311.710772][ T6549] ? find_held_lock+0x2d/0x110 [ 311.713197][ T6549] kernel_clone+0xeb/0x890 [ 311.715130][ T6549] ? create_io_thread+0xe0/0xe0 [ 311.717442][ T6549] ? vfs_write+0x15c/0xd50 [ 311.719575][ T6549] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 311.722149][ T6549] ? wait_for_completion_io_timeout+0x20/0x20 [ 311.724963][ T6549] __do_sys_clone+0xba/0x100 [ 311.727187][ T6549] ? kernel_clone+0x890/0x890 [ 311.729499][ T6549] ? syscall_enter_from_user_mode+0x26/0x80 [ 311.732541][ T6549] do_syscall_64+0x39/0xb0 [ 311.734618][ T6549] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 311.737353][ T6549] RIP: 0033:0x7f81ce88c389 [ 311.739397][ T6549] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 311.747783][ T6549] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 311.750904][ T6549] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 311.753802][ T6549] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 311.757179][ T6549] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 311.760784][ T6549] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 311.764476][ T6549] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 311.768383][ T6549] [ 311.769936][ T6561] CPU: 2 PID: 6561 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 311.774881][ T6561] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 311.778925][ T6561] Call Trace: [ 311.780486][ T6561] [ 311.781850][ T6561] dump_stack_lvl+0x136/0x150 [ 311.784126][ T6561] should_fail_ex+0x4a3/0x5b0 [ 311.786413][ T6561] should_failslab+0x9/0x20 [ 311.788580][ T6561] kmem_cache_alloc+0x5d/0x3f0 [ 311.790760][ T6561] vm_area_dup+0x55/0x300 [ 311.792729][ T6561] dup_mmap+0x713/0x19d0 [ 311.794663][ T6561] ? replace_mm_exe_file+0x4c0/0x4c0 [ 311.797059][ T6561] ? lockdep_hardirqs_on+0x7d/0x100 [ 311.799523][ T6561] ? mm_init+0xc7a/0x1030 23:08:23 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 54) 23:08:23 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 53) 23:08:23 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000080)=0x7a) (async) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000000)={'\x00', 0x6, 0x3, 0x81}) 23:08:23 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0xd7d18508f3d2c6da) 23:08:23 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000080)=0x7a) (async) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000000)={'\x00', 0x6, 0x3, 0x81}) [ 311.801708][ T6561] copy_process+0x6663/0x75c0 [ 311.804055][ T6561] ? pidfd_prepare+0x80/0x80 [ 311.806172][ T6561] ? find_held_lock+0x2d/0x110 [ 311.808365][ T6561] ? find_held_lock+0x2d/0x110 [ 311.810523][ T6561] kernel_clone+0xeb/0x890 [ 311.812585][ T6561] ? create_io_thread+0xe0/0xe0 [ 311.814892][ T6561] ? vfs_write+0x15c/0xd50 [ 311.817051][ T6561] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 311.819703][ T6561] ? wait_for_completion_io_timeout+0x20/0x20 [ 311.822514][ T6561] __do_sys_clone+0xba/0x100 [ 311.824696][ T6561] ? kernel_clone+0x890/0x890 [ 311.826884][ T6561] ? syscall_enter_from_user_mode+0x26/0x80 [ 311.829581][ T6561] do_syscall_64+0x39/0xb0 [ 311.829602][ T6573] FAULT_INJECTION: forcing a failure. [ 311.829602][ T6573] name failslab, interval 1, probability 0, space 0, times 0 [ 311.831732][ T6561] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 311.831768][ T6561] RIP: 0033:0x7f469ba8c389 [ 311.831784][ T6561] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 311.831804][ T6561] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 311.855804][ T6561] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 311.859389][ T6561] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 311.862960][ T6561] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 311.866523][ T6561] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 311.870054][ T6561] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 311.873700][ T6561] 23:08:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x24000040) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x24, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r6) sendmsg$NLBL_MGMT_C_LISTDEF(r6, 0x0, 0xd7d18508f3d6ce4b) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000440), r9) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r11, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f0000001080)=ANY=[@ANYBLOB, @ANYRES16=r12, @ANYBLOB="010000000000000000002d00000008002f000000000008002f0000000000"], 0x24}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r7, 0x800, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x6}, @IEEE802154_ATTR_CAPABILITY={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8844) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r8, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r12, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r15}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004}, 0x20000000) [ 311.875205][ T6573] CPU: 3 PID: 6573 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 311.880444][ T6573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 311.884644][ T6573] Call Trace: [ 311.886292][ T6573] [ 311.887725][ T6573] dump_stack_lvl+0x136/0x150 [ 311.890042][ T6573] should_fail_ex+0x4a3/0x5b0 [ 311.892305][ T6573] should_failslab+0x9/0x20 [ 311.894429][ T6573] kmem_cache_alloc+0x5d/0x3f0 [ 311.896664][ T6573] vm_area_dup+0x55/0x300 23:08:23 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 55) [ 311.898659][ T6573] dup_mmap+0x713/0x19d0 [ 311.900871][ T6573] ? replace_mm_exe_file+0x4c0/0x4c0 [ 311.903308][ T6573] ? lockdep_hardirqs_on+0x7d/0x100 [ 311.905736][ T6573] ? mm_init+0xc7a/0x1030 [ 311.907809][ T6573] copy_process+0x6663/0x75c0 [ 311.910182][ T6573] ? pidfd_prepare+0x80/0x80 [ 311.912410][ T6573] ? find_held_lock+0x2d/0x110 [ 311.914639][ T6573] ? find_held_lock+0x2d/0x110 [ 311.914861][ T6578] FAULT_INJECTION: forcing a failure. [ 311.914861][ T6578] name failslab, interval 1, probability 0, space 0, times 0 [ 311.916864][ T6573] kernel_clone+0xeb/0x890 [ 311.916898][ T6573] ? create_io_thread+0xe0/0xe0 [ 311.916919][ T6573] ? vfs_write+0x15c/0xd50 [ 311.929164][ T6573] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 311.931925][ T6573] ? wait_for_completion_io_timeout+0x20/0x20 [ 311.934959][ T6573] __do_sys_clone+0xba/0x100 [ 311.937173][ T6573] ? kernel_clone+0x890/0x890 [ 311.939368][ T6573] ? syscall_enter_from_user_mode+0x26/0x80 [ 311.942126][ T6573] do_syscall_64+0x39/0xb0 [ 311.944171][ T6573] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 311.947024][ T6573] RIP: 0033:0x7f81ce88c389 [ 311.949046][ T6573] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 311.957086][ T6573] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 311.960900][ T6573] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 311.964208][ T6573] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 311.967782][ T6573] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 311.971370][ T6573] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 311.975126][ T6573] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 311.978211][ T6573] [ 311.979353][ T6578] CPU: 2 PID: 6578 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 311.984201][ T6578] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 311.988387][ T6578] Call Trace: [ 311.989987][ T6578] [ 311.991347][ T6578] dump_stack_lvl+0x136/0x150 [ 311.993515][ T6578] should_fail_ex+0x4a3/0x5b0 [ 311.995706][ T6578] should_failslab+0x9/0x20 [ 311.997919][ T6578] kmem_cache_alloc+0x5d/0x3f0 [ 312.000359][ T6578] anon_vma_fork+0xe2/0x630 [ 312.002696][ T6578] ? anon_vma_name+0xc6/0x170 [ 312.004805][ T6578] dup_mmap+0xfc9/0x19d0 [ 312.006676][ T6578] ? replace_mm_exe_file+0x4c0/0x4c0 [ 312.008956][ T6578] ? lockdep_hardirqs_on+0x7d/0x100 [ 312.011318][ T6578] ? mm_init+0xc7a/0x1030 [ 312.013343][ T6578] copy_process+0x6663/0x75c0 [ 312.015577][ T6578] ? pidfd_prepare+0x80/0x80 [ 312.017970][ T6578] ? find_held_lock+0x2d/0x110 [ 312.020586][ T6578] ? find_held_lock+0x2d/0x110 [ 312.023168][ T6578] kernel_clone+0xeb/0x890 [ 312.025354][ T6578] ? create_io_thread+0xe0/0xe0 [ 312.027557][ T6578] ? vfs_write+0x15c/0xd50 [ 312.029613][ T6578] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 312.032166][ T6578] ? wait_for_completion_io_timeout+0x20/0x20 [ 312.034911][ T6578] __do_sys_clone+0xba/0x100 [ 312.037041][ T6578] ? kernel_clone+0x890/0x890 [ 312.039198][ T6578] ? syscall_enter_from_user_mode+0x26/0x80 [ 312.041944][ T6578] do_syscall_64+0x39/0xb0 [ 312.044065][ T6578] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 312.046996][ T6578] RIP: 0033:0x7f469ba8c389 [ 312.049183][ T6578] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 312.057936][ T6578] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 312.061871][ T6578] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 312.065419][ T6578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 312.068953][ T6578] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 312.072379][ T6578] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 312.075778][ T6578] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 312.079548][ T6578] 23:08:24 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) write$damon_schemes(r0, &(0x7f0000000040)={0x1, 0x0, 0x20, 0x20, 0x7, 0x7, 0x8}, 0x66) 23:08:24 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 56) 23:08:24 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 54) 23:08:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x24000040) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x24, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r6) sendmsg$NLBL_MGMT_C_LISTDEF(r6, 0x0, 0xd7d18508f3d6ce4b) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000440), r9) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r11, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f0000001080)=ANY=[@ANYBLOB, @ANYRES16=r12, @ANYBLOB="010000000000000000002d00000008002f000000000008002f0000000000"], 0x24}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r7, 0x800, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x6}, @IEEE802154_ATTR_CAPABILITY={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8844) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r8, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r12, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r15}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004}, 0x20000000) 23:08:24 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) write$damon_schemes(r0, &(0x7f0000000040)={0x1, 0x0, 0x20, 0x20, 0x7, 0x7, 0x8}, 0x66) [ 312.119661][ T6587] FAULT_INJECTION: forcing a failure. [ 312.119661][ T6587] name failslab, interval 1, probability 0, space 0, times 0 [ 312.125675][ T6587] CPU: 2 PID: 6587 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 312.125912][ T6589] FAULT_INJECTION: forcing a failure. [ 312.125912][ T6589] name failslab, interval 1, probability 0, space 0, times 0 [ 312.130655][ T6587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 23:08:24 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) write$damon_schemes(r0, &(0x7f0000000040)={0x1, 0x0, 0x20, 0x20, 0x7, 0x7, 0x8}, 0x66) [ 312.130672][ T6587] Call Trace: [ 312.130678][ T6587] [ 312.130686][ T6587] dump_stack_lvl+0x136/0x150 [ 312.144985][ T6587] should_fail_ex+0x4a3/0x5b0 [ 312.147259][ T6587] should_failslab+0x9/0x20 [ 312.149451][ T6587] kmem_cache_alloc+0x5d/0x3f0 [ 312.151734][ T6587] ptlock_alloc+0x21/0x70 [ 312.153758][ T6587] pte_alloc_one+0x6c/0x230 [ 312.155853][ T6587] __pte_alloc+0x6d/0x260 [ 312.157896][ T6587] ? pmd_install+0x160/0x160 [ 312.160138][ T6587] copy_page_range+0x151e/0x3830 [ 312.162469][ T6587] ? mas_wr_modify+0x999/0x16d0 [ 312.164654][ T6587] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 312.167360][ T6587] ? mas_store+0x275/0x3a0 [ 312.169395][ T6587] ? handle_mm_fault+0x9f0/0x9f0 [ 312.171681][ T6587] ? up_write+0x1b4/0x520 [ 312.173694][ T6587] dup_mmap+0x10bc/0x19d0 [ 312.175705][ T6587] ? replace_mm_exe_file+0x4c0/0x4c0 [ 312.178075][ T6587] ? lockdep_hardirqs_on+0x7d/0x100 [ 312.180504][ T6587] ? mm_init+0xc7a/0x1030 [ 312.182523][ T6587] copy_process+0x6663/0x75c0 [ 312.184806][ T6587] ? pidfd_prepare+0x80/0x80 [ 312.187129][ T6587] ? find_held_lock+0x2d/0x110 [ 312.189545][ T6587] ? find_held_lock+0x2d/0x110 [ 312.191836][ T6587] kernel_clone+0xeb/0x890 [ 312.193928][ T6587] ? create_io_thread+0xe0/0xe0 [ 312.196201][ T6587] ? vfs_write+0x15c/0xd50 [ 312.198268][ T6587] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 312.200863][ T6587] ? wait_for_completion_io_timeout+0x20/0x20 [ 312.203561][ T6587] __do_sys_clone+0xba/0x100 [ 312.205731][ T6587] ? kernel_clone+0x890/0x890 [ 312.208010][ T6587] ? syscall_enter_from_user_mode+0x26/0x80 [ 312.210974][ T6587] do_syscall_64+0x39/0xb0 [ 312.213251][ T6587] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 312.216026][ T6587] RIP: 0033:0x7f469ba8c389 [ 312.218009][ T6587] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 312.225885][ T6587] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 312.229435][ T6587] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 312.233192][ T6587] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 312.236784][ T6587] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 312.240406][ T6587] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 312.243741][ T6587] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 312.247053][ T6587] [ 312.248410][ T6589] CPU: 0 PID: 6589 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 312.253627][ T6589] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 312.257699][ T6589] Call Trace: [ 312.259290][ T6589] [ 312.260668][ T6589] dump_stack_lvl+0x136/0x150 [ 312.262875][ T6589] should_fail_ex+0x4a3/0x5b0 [ 312.265365][ T6589] should_failslab+0x9/0x20 [ 312.267791][ T6589] kmem_cache_alloc+0x5d/0x3f0 [ 312.270195][ T6589] vm_area_dup+0x55/0x300 [ 312.272240][ T6589] dup_mmap+0x713/0x19d0 [ 312.274241][ T6589] ? replace_mm_exe_file+0x4c0/0x4c0 [ 312.276771][ T6589] ? lockdep_hardirqs_on+0x7d/0x100 [ 312.279235][ T6589] ? mm_init+0xc7a/0x1030 [ 312.281293][ T6589] copy_process+0x6663/0x75c0 [ 312.283497][ T6589] ? pidfd_prepare+0x80/0x80 [ 312.285671][ T6589] ? find_held_lock+0x2d/0x110 [ 312.288022][ T6589] ? find_held_lock+0x2d/0x110 [ 312.290431][ T6589] kernel_clone+0xeb/0x890 [ 312.292703][ T6589] ? create_io_thread+0xe0/0xe0 [ 312.294987][ T6589] ? vfs_write+0x15c/0xd50 [ 312.297059][ T6589] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 312.299643][ T6589] ? wait_for_completion_io_timeout+0x20/0x20 [ 312.302465][ T6589] __do_sys_clone+0xba/0x100 [ 312.304605][ T6589] ? kernel_clone+0x890/0x890 [ 312.306808][ T6589] ? syscall_enter_from_user_mode+0x26/0x80 [ 312.309537][ T6589] do_syscall_64+0x39/0xb0 [ 312.311572][ T6589] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 312.314339][ T6589] RIP: 0033:0x7f81ce88c389 [ 312.316502][ T6589] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 312.325530][ T6589] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 312.329361][ T6589] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 312.333154][ T6589] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 312.336815][ T6589] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 312.340463][ T6589] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 312.344126][ T6589] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 312.347757][ T6589] 23:08:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x24000040) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x24, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r6) (async) sendmsg$NLBL_MGMT_C_LISTDEF(r6, 0x0, 0xd7d18508f3d6ce4b) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000440), r9) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r11, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f0000001080)=ANY=[@ANYBLOB, @ANYRES16=r12, @ANYBLOB="010000000000000000002d00000008002f000000000008002f0000000000"], 0x24}}, 0x0) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r7, 0x800, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x6}, @IEEE802154_ATTR_CAPABILITY={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8844) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r8, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r12, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r15}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004}, 0x20000000) 23:08:24 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 55) 23:08:24 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000040)) socket$isdn_base(0x22, 0x3, 0x0) 23:08:24 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 57) [ 312.409324][ T6607] FAULT_INJECTION: forcing a failure. [ 312.409324][ T6607] name failslab, interval 1, probability 0, space 0, times 0 [ 312.409702][ T6608] FAULT_INJECTION: forcing a failure. [ 312.409702][ T6608] name failslab, interval 1, probability 0, space 0, times 0 [ 312.417244][ T6607] CPU: 2 PID: 6607 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 23:08:24 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000040)) socket$isdn_base(0x22, 0x3, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000040)) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) 23:08:24 executing program 2: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008800}, 0x200400d4) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) [ 312.426621][ T6607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 312.431243][ T6607] Call Trace: [ 312.432976][ T6607] [ 312.434516][ T6607] dump_stack_lvl+0x136/0x150 [ 312.436930][ T6607] should_fail_ex+0x4a3/0x5b0 [ 312.439271][ T6607] should_failslab+0x9/0x20 23:08:24 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000040)) socket$isdn_base(0x22, 0x3, 0x0) [ 312.441436][ T6607] kmem_cache_alloc+0x5d/0x3f0 [ 312.441470][ T6607] vm_area_dup+0x55/0x300 23:08:24 executing program 2: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008800}, 0x200400d4) (async) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) [ 312.446343][ T6607] dup_mmap+0x713/0x19d0 [ 312.448859][ T6607] ? replace_mm_exe_file+0x4c0/0x4c0 [ 312.451623][ T6607] ? lockdep_hardirqs_on+0x7d/0x100 [ 312.454109][ T6607] ? mm_init+0xc7a/0x1030 [ 312.456134][ T6607] copy_process+0x6663/0x75c0 [ 312.456193][ T6607] ? pidfd_prepare+0x80/0x80 [ 312.460286][ T6607] ? find_held_lock+0x2d/0x110 [ 312.462832][ T6607] ? find_held_lock+0x2d/0x110 [ 312.465428][ T6607] kernel_clone+0xeb/0x890 [ 312.467591][ T6607] ? create_io_thread+0xe0/0xe0 [ 312.469858][ T6607] ? vfs_write+0x15c/0xd50 [ 312.471930][ T6607] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 312.474547][ T6607] ? wait_for_completion_io_timeout+0x20/0x20 23:08:24 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x700, 0x20, 0x3f, 0x18, {{0x1d, 0x4, 0x0, 0x3b, 0x74, 0x65, 0x0, 0x80, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @ssrr={0x89, 0x23, 0xc2, [@multicast1, @dev={0xac, 0x14, 0x14, 0x32}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010102, @rand_addr=0x64010102, @rand_addr=0x64010101, @empty]}, @rr={0x7, 0xf, 0x53, [@multicast2, @remote, @local]}, @end, @generic={0x86, 0xf, "51cb09ace6dd4ee8856dc543e0"}, @rr={0x7, 0x7, 0x6f, [@empty]}, @generic={0x88, 0xf, "78d74f427e3c6e37d603548e65"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x0, 0x4, 0x2a, @rand_addr=' \x01\x00', @mcast2, 0x20, 0x1, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x727, 0x8000, 0x7, 0xdf4, {{0x19, 0x4, 0x3, 0x9, 0x64, 0x64, 0x0, 0x81, 0x0, 0x0, @multicast2, @empty, {[@timestamp={0x44, 0x8, 0x85, 0x0, 0x9, [0x20]}, @rr={0x7, 0x1f, 0x5a, [@rand_addr=0x64010101, @rand_addr=0x64010102, @local, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}]}, @cipso={0x86, 0x28, 0x0, [{0x2, 0x9, "7fa561685f8acd"}, {0x5, 0xa, "7fa08cdbd5071a65"}, {0x5, 0xf, "d25eafdfcc82d307fe01ccb7b1"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x0, 0x4, 0x97, 0x19df, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1, 0x1b3, 0x8}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000500)={@rand_addr, @empty, 0x0}, &(0x7f0000000540)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000040), 0xc, &(0x7f0000000c80)={&(0x7f0000000580)={0x6ec, r0, 0x100, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x401, 0x20, 0xf9, 0x6}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xad2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7503, 0x67, 0xe7, 0x6}, {0x1, 0x6, 0x3f, 0xfffffffb}, {0x3, 0x8, 0xf7, 0x5}, {0x3, 0x45, 0x6, 0x7fff0000}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x28}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd1e}}}]}}, {{0x8, 0x1, r5}, {0x1a0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x14}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x61e}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r7}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x6ec}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) [ 312.477404][ T6607] __do_sys_clone+0xba/0x100 [ 312.480112][ T6607] ? kernel_clone+0x890/0x890 [ 312.482731][ T6607] ? syscall_enter_from_user_mode+0x26/0x80 [ 312.485749][ T6607] do_syscall_64+0x39/0xb0 [ 312.487869][ T6607] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 312.490633][ T6607] RIP: 0033:0x7f81ce88c389 [ 312.492710][ T6607] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 312.501807][ T6607] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 312.505834][ T6607] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 312.509491][ T6607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 312.513156][ T6607] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 312.516882][ T6607] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 312.520763][ T6607] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 312.524394][ T6607] [ 312.525858][ T6608] CPU: 3 PID: 6608 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 312.530161][ T6608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 312.534172][ T6608] Call Trace: [ 312.535770][ T6608] [ 312.537050][ T6608] dump_stack_lvl+0x136/0x150 [ 312.538967][ T6608] should_fail_ex+0x4a3/0x5b0 [ 312.540871][ T6608] should_failslab+0x9/0x20 [ 312.542654][ T6608] kmem_cache_alloc+0x5d/0x3f0 [ 312.544792][ T6608] anon_vma_fork+0xe2/0x630 23:08:24 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 56) 23:08:24 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async, rerun: 64) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x700, 0x20, 0x3f, 0x18, {{0x1d, 0x4, 0x0, 0x3b, 0x74, 0x65, 0x0, 0x80, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @ssrr={0x89, 0x23, 0xc2, [@multicast1, @dev={0xac, 0x14, 0x14, 0x32}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010102, @rand_addr=0x64010102, @rand_addr=0x64010101, @empty]}, @rr={0x7, 0xf, 0x53, [@multicast2, @remote, @local]}, @end, @generic={0x86, 0xf, "51cb09ace6dd4ee8856dc543e0"}, @rr={0x7, 0x7, 0x6f, [@empty]}, @generic={0x88, 0xf, "78d74f427e3c6e37d603548e65"}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x0, 0x4, 0x2a, @rand_addr=' \x01\x00', @mcast2, 0x20, 0x1, 0x6}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x727, 0x8000, 0x7, 0xdf4, {{0x19, 0x4, 0x3, 0x9, 0x64, 0x64, 0x0, 0x81, 0x0, 0x0, @multicast2, @empty, {[@timestamp={0x44, 0x8, 0x85, 0x0, 0x9, [0x20]}, @rr={0x7, 0x1f, 0x5a, [@rand_addr=0x64010101, @rand_addr=0x64010102, @local, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}]}, @cipso={0x86, 0x28, 0x0, [{0x2, 0x9, "7fa561685f8acd"}, {0x5, 0xa, "7fa08cdbd5071a65"}, {0x5, 0xf, "d25eafdfcc82d307fe01ccb7b1"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x0, 0x4, 0x97, 0x19df, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1, 0x1b3, 0x8}}) (async, rerun: 32) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000500)={@rand_addr, @empty, 0x0}, &(0x7f0000000540)=0xc) (rerun: 32) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000040), 0xc, &(0x7f0000000c80)={&(0x7f0000000580)={0x6ec, r0, 0x100, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x401, 0x20, 0xf9, 0x6}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xad2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7503, 0x67, 0xe7, 0x6}, {0x1, 0x6, 0x3f, 0xfffffffb}, {0x3, 0x8, 0xf7, 0x5}, {0x3, 0x45, 0x6, 0x7fff0000}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x28}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd1e}}}]}}, {{0x8, 0x1, r5}, {0x1a0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x14}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x61e}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r7}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x6ec}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) [ 312.546809][ T6608] ? anon_vma_name+0xc6/0x170 [ 312.549140][ T6608] dup_mmap+0xfc9/0x19d0 [ 312.551040][ T6608] ? replace_mm_exe_file+0x4c0/0x4c0 [ 312.553500][ T6608] ? lockdep_hardirqs_on+0x7d/0x100 [ 312.556056][ T6608] ? mm_init+0xc7a/0x1030 [ 312.558460][ T6608] copy_process+0x6663/0x75c0 [ 312.560582][ T6608] ? pidfd_prepare+0x80/0x80 [ 312.562423][ T6608] ? find_held_lock+0x2d/0x110 [ 312.564581][ T6608] ? find_held_lock+0x2d/0x110 [ 312.565749][ T6628] FAULT_INJECTION: forcing a failure. [ 312.565749][ T6628] name failslab, interval 1, probability 0, space 0, times 0 [ 312.566662][ T6608] kernel_clone+0xeb/0x890 [ 312.574703][ T6608] ? create_io_thread+0xe0/0xe0 [ 312.577125][ T6608] ? vfs_write+0x15c/0xd50 [ 312.578925][ T6608] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 312.581343][ T6608] ? wait_for_completion_io_timeout+0x20/0x20 [ 312.583933][ T6608] __do_sys_clone+0xba/0x100 [ 312.586012][ T6608] ? kernel_clone+0x890/0x890 [ 312.588157][ T6608] ? syscall_enter_from_user_mode+0x26/0x80 [ 312.590703][ T6608] do_syscall_64+0x39/0xb0 [ 312.592651][ T6608] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 312.595198][ T6608] RIP: 0033:0x7f469ba8c389 [ 312.597162][ T6608] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 312.605677][ T6608] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 312.609456][ T6608] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 312.612792][ T6608] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 312.616494][ T6608] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 312.620169][ T6608] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 312.623478][ T6608] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 312.626930][ T6608] [ 312.628300][ T6628] CPU: 2 PID: 6628 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 312.633278][ T6628] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 312.637495][ T6628] Call Trace: [ 312.639067][ T6628] [ 312.640487][ T6628] dump_stack_lvl+0x136/0x150 [ 312.642695][ T6628] should_fail_ex+0x4a3/0x5b0 [ 312.645011][ T6628] should_failslab+0x9/0x20 [ 312.647317][ T6628] kmem_cache_alloc+0x5d/0x3f0 [ 312.649670][ T6628] anon_vma_fork+0xe2/0x630 [ 312.651807][ T6628] ? anon_vma_name+0xc6/0x170 [ 312.653998][ T6628] dup_mmap+0xfc9/0x19d0 [ 312.656030][ T6628] ? replace_mm_exe_file+0x4c0/0x4c0 [ 312.657781][ T6634] FAULT_INJECTION: forcing a failure. [ 312.657781][ T6634] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 312.658473][ T6628] ? lockdep_hardirqs_on+0x7d/0x100 [ 312.658501][ T6628] ? mm_init+0xc7a/0x1030 [ 312.658522][ T6628] copy_process+0x6663/0x75c0 [ 312.658546][ T6628] ? pidfd_prepare+0x80/0x80 [ 312.673549][ T6628] ? find_held_lock+0x2d/0x110 [ 312.675784][ T6628] ? find_held_lock+0x2d/0x110 [ 312.678026][ T6628] kernel_clone+0xeb/0x890 [ 312.680195][ T6628] ? create_io_thread+0xe0/0xe0 [ 312.682615][ T6628] ? vfs_write+0x15c/0xd50 [ 312.684895][ T6628] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 312.687578][ T6628] ? wait_for_completion_io_timeout+0x20/0x20 [ 312.690374][ T6628] __do_sys_clone+0xba/0x100 [ 312.692594][ T6628] ? kernel_clone+0x890/0x890 [ 312.694776][ T6628] ? syscall_enter_from_user_mode+0x26/0x80 [ 312.697505][ T6628] do_syscall_64+0x39/0xb0 [ 312.699671][ T6628] entry_SYSCALL_64_after_hwframe+0x63/0xcd 23:08:24 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 58) 23:08:24 executing program 2: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008800}, 0x200400d4) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) 23:08:24 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 23:08:24 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) (async) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) [ 312.702574][ T6628] RIP: 0033:0x7f81ce88c389 [ 312.705244][ T6628] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 312.714061][ T6628] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 312.717923][ T6628] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 312.721605][ T6628] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 312.725416][ T6628] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 312.729487][ T6628] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 312.733315][ T6628] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 312.736956][ T6628] 23:08:24 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 23:08:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0xd7d18508f3d2c65a) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c011f0000000000000000000000e1502ca0031ee246ceaf59a37c4c16ea3e7529da1e76a11397b14f46473bc474b53f7795c7582316f6f297da73fcc305dada68611a31f415e13e2fbfab74b3212c43e3e4b4e1e6d0a3ffaeb8f3f108cf3906c295cd0e0d671926c70d47b44ab2dce381c8c580efc0d126f177e36b84c0499ad4cf7eb4572076eed73893a44295a6eae9", @ANYRES16=r2, @ANYBLOB="000325bd7000fbdbdf250200000008000800ac1414aa0e0001004e4c424c5f4d474d54000000"], 0x2c}, 0x1, 0x0, 0x0, 0xcc010}, 0x20048000) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) [ 312.738439][ T6634] CPU: 0 PID: 6634 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 312.743396][ T6634] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 312.747425][ T6634] Call Trace: [ 312.748976][ T6634] [ 312.750338][ T6634] dump_stack_lvl+0x136/0x150 [ 312.752577][ T6634] should_fail_ex+0x4a3/0x5b0 [ 312.754925][ T6634] prepare_alloc_pages+0x178/0x570 [ 312.757397][ T6634] __alloc_pages+0x149/0x4a0 [ 312.759547][ T6634] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 312.762591][ T6634] ? find_held_lock+0x2d/0x110 [ 312.764811][ T6634] ? lock_downgrade+0x690/0x690 [ 312.767176][ T6634] ? do_raw_spin_lock+0x124/0x2b0 [ 312.769659][ T6634] alloc_pages+0x1aa/0x270 [ 312.771730][ T6634] __pmd_alloc+0x3f/0x5d0 [ 312.773720][ T6634] ? __pud_alloc+0xe4/0x180 [ 312.775779][ T6634] copy_page_range+0x22c1/0x3830 [ 312.778064][ T6634] ? mas_wr_modify+0x999/0x16d0 [ 312.780325][ T6634] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 312.783042][ T6634] ? mas_store+0x275/0x3a0 [ 312.784924][ T6634] ? handle_mm_fault+0x9f0/0x9f0 [ 312.787039][ T6634] ? down_write+0x14f/0x200 [ 312.789165][ T6634] dup_mmap+0x10bc/0x19d0 [ 312.791153][ T6634] ? replace_mm_exe_file+0x4c0/0x4c0 [ 312.793593][ T6634] ? lockdep_hardirqs_on+0x7d/0x100 [ 312.796150][ T6634] ? mm_init+0xc7a/0x1030 [ 312.798138][ T6634] copy_process+0x6663/0x75c0 [ 312.800364][ T6634] ? pidfd_prepare+0x80/0x80 [ 312.802533][ T6634] ? find_held_lock+0x2d/0x110 [ 312.804743][ T6634] ? find_held_lock+0x2d/0x110 [ 312.806932][ T6634] kernel_clone+0xeb/0x890 [ 312.809000][ T6634] ? create_io_thread+0xe0/0xe0 [ 312.811224][ T6634] ? vfs_write+0x15c/0xd50 [ 312.813354][ T6634] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 312.816056][ T6634] ? wait_for_completion_io_timeout+0x20/0x20 [ 312.818812][ T6634] __do_sys_clone+0xba/0x100 [ 312.820953][ T6634] ? kernel_clone+0x890/0x890 [ 312.823092][ T6634] ? syscall_enter_from_user_mode+0x26/0x80 [ 312.825793][ T6634] do_syscall_64+0x39/0xb0 [ 312.827854][ T6634] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 312.830657][ T6634] RIP: 0033:0x7f469ba8c389 [ 312.832767][ T6634] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 312.841538][ T6634] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 312.845428][ T6634] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 312.849337][ T6634] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 312.852944][ T6634] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 312.856516][ T6634] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 312.860156][ T6634] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 312.863803][ T6634] 23:08:24 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 57) 23:08:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0xd7d18508f3d2c65a) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c011f0000000000000000000000e1502ca0031ee246ceaf59a37c4c16ea3e7529da1e76a11397b14f46473bc474b53f7795c7582316f6f297da73fcc305dada68611a31f415e13e2fbfab74b3212c43e3e4b4e1e6d0a3ffaeb8f3f108cf3906c295cd0e0d671926c70d47b44ab2dce381c8c580efc0d126f177e36b84c0499ad4cf7eb4572076eed73893a44295a6eae9", @ANYRES16=r2, @ANYBLOB="000325bd7000fbdbdf250200000008000800ac1414aa0e0001004e4c424c5f4d474d54000000"], 0x2c}, 0x1, 0x0, 0x0, 0xcc010}, 0x20048000) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) 23:08:24 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 59) 23:08:24 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x700, 0x20, 0x3f, 0x18, {{0x1d, 0x4, 0x0, 0x3b, 0x74, 0x65, 0x0, 0x80, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @ssrr={0x89, 0x23, 0xc2, [@multicast1, @dev={0xac, 0x14, 0x14, 0x32}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010102, @rand_addr=0x64010102, @rand_addr=0x64010101, @empty]}, @rr={0x7, 0xf, 0x53, [@multicast2, @remote, @local]}, @end, @generic={0x86, 0xf, "51cb09ace6dd4ee8856dc543e0"}, @rr={0x7, 0x7, 0x6f, [@empty]}, @generic={0x88, 0xf, "78d74f427e3c6e37d603548e65"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x0, 0x4, 0x2a, @rand_addr=' \x01\x00', @mcast2, 0x20, 0x1, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x727, 0x8000, 0x7, 0xdf4, {{0x19, 0x4, 0x3, 0x9, 0x64, 0x64, 0x0, 0x81, 0x0, 0x0, @multicast2, @empty, {[@timestamp={0x44, 0x8, 0x85, 0x0, 0x9, [0x20]}, @rr={0x7, 0x1f, 0x5a, [@rand_addr=0x64010101, @rand_addr=0x64010102, @local, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}]}, @cipso={0x86, 0x28, 0x0, [{0x2, 0x9, "7fa561685f8acd"}, {0x5, 0xa, "7fa08cdbd5071a65"}, {0x5, 0xf, "d25eafdfcc82d307fe01ccb7b1"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x0, 0x4, 0x97, 0x19df, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1, 0x1b3, 0x8}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000500)={@rand_addr, @empty, 0x0}, &(0x7f0000000540)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000040), 0xc, &(0x7f0000000c80)={&(0x7f0000000580)={0x6ec, r0, 0x100, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x401, 0x20, 0xf9, 0x6}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xad2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7503, 0x67, 0xe7, 0x6}, {0x1, 0x6, 0x3f, 0xfffffffb}, {0x3, 0x8, 0xf7, 0x5}, {0x3, 0x45, 0x6, 0x7fff0000}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x28}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd1e}}}]}}, {{0x8, 0x1, r5}, {0x1a0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x14}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x61e}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r7}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x6ec}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x700, 0x20, 0x3f, 0x18, {{0x1d, 0x4, 0x0, 0x3b, 0x74, 0x65, 0x0, 0x80, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @ssrr={0x89, 0x23, 0xc2, [@multicast1, @dev={0xac, 0x14, 0x14, 0x32}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010102, @rand_addr=0x64010102, @rand_addr=0x64010101, @empty]}, @rr={0x7, 0xf, 0x53, [@multicast2, @remote, @local]}, @end, @generic={0x86, 0xf, "51cb09ace6dd4ee8856dc543e0"}, @rr={0x7, 0x7, 0x6f, [@empty]}, @generic={0x88, 0xf, "78d74f427e3c6e37d603548e65"}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x0, 0x4, 0x2a, @rand_addr=' \x01\x00', @mcast2, 0x20, 0x1, 0x6}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x727, 0x8000, 0x7, 0xdf4, {{0x19, 0x4, 0x3, 0x9, 0x64, 0x64, 0x0, 0x81, 0x0, 0x0, @multicast2, @empty, {[@timestamp={0x44, 0x8, 0x85, 0x0, 0x9, [0x20]}, @rr={0x7, 0x1f, 0x5a, [@rand_addr=0x64010101, @rand_addr=0x64010102, @local, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}]}, @cipso={0x86, 0x28, 0x0, [{0x2, 0x9, "7fa561685f8acd"}, {0x5, 0xa, "7fa08cdbd5071a65"}, {0x5, 0xf, "d25eafdfcc82d307fe01ccb7b1"}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x0, 0x4, 0x97, 0x19df, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1, 0x1b3, 0x8}}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000500)={@rand_addr, @empty}, &(0x7f0000000540)=0xc) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000040), 0xc, &(0x7f0000000c80)={&(0x7f0000000580)={0x6ec, r0, 0x100, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x401, 0x20, 0xf9, 0x6}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xad2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7503, 0x67, 0xe7, 0x6}, {0x1, 0x6, 0x3f, 0xfffffffb}, {0x3, 0x8, 0xf7, 0x5}, {0x3, 0x45, 0x6, 0x7fff0000}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x28}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd1e}}}]}}, {{0x8, 0x1, r5}, {0x1a0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x14}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x61e}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r7}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x6ec}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) (async) 23:08:26 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r1, 0x3, r0, 0x0, 0x80000}) 23:08:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0xd7d18508f3d2c65a) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c011f0000000000000000000000e1502ca0031ee246ceaf59a37c4c16ea3e7529da1e76a11397b14f46473bc474b53f7795c7582316f6f297da73fcc305dada68611a31f415e13e2fbfab74b3212c43e3e4b4e1e6d0a3ffaeb8f3f108cf3906c295cd0e0d671926c70d47b44ab2dce381c8c580efc0d126f177e36b84c0499ad4cf7eb4572076eed73893a44295a6eae9", @ANYRES16=r2, @ANYBLOB="000325bd7000fbdbdf250200000008000800ac1414aa0e0001004e4c424c5f4d474d54000000"], 0x2c}, 0x1, 0x0, 0x0, 0xcc010}, 0x20048000) (async) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c011f0000000000000000000000e1502ca0031ee246ceaf59a37c4c16ea3e7529da1e76a11397b14f46473bc474b53f7795c7582316f6f297da73fcc305dada68611a31f415e13e2fbfab74b3212c43e3e4b4e1e6d0a3ffaeb8f3f108cf3906c295cd0e0d671926c70d47b44ab2dce381c8c580efc0d126f177e36b84c0499ad4cf7eb4572076eed73893a44295a6eae9", @ANYRES16=r2, @ANYBLOB="000325bd7000fbdbdf250200000008000800ac1414aa0e0001004e4c424c5f4d474d54000000"], 0x2c}, 0x1, 0x0, 0x0, 0xcc010}, 0x20048000) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) [ 314.690622][ T6656] FAULT_INJECTION: forcing a failure. [ 314.690622][ T6656] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 314.696109][ T6659] FAULT_INJECTION: forcing a failure. 23:08:26 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r1, 0x3, r0, 0x0, 0x80000}) [ 314.696109][ T6659] name failslab, interval 1, probability 0, space 0, times 0 [ 314.697045][ T6656] CPU: 3 PID: 6656 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 314.707502][ T6656] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 23:08:26 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x480dd) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xffff0001}]}, 0x1c}}, 0x44880) [ 314.711598][ T6656] Call Trace: [ 314.713406][ T6656] [ 314.714780][ T6656] dump_stack_lvl+0x136/0x150 [ 314.716981][ T6656] should_fail_ex+0x4a3/0x5b0 [ 314.719206][ T6656] prepare_alloc_pages+0x178/0x570 [ 314.721599][ T6656] __alloc_pages+0x149/0x4a0 [ 314.723730][ T6656] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 314.726816][ T6656] alloc_pages+0x1aa/0x270 [ 314.728912][ T6656] pte_alloc_one+0x1a/0x230 [ 314.730867][ T6656] __pte_alloc+0x6d/0x260 [ 314.732415][ T6656] ? pmd_install+0x160/0x160 [ 314.734041][ T6656] copy_page_range+0x151e/0x3830 [ 314.735828][ T6656] ? mas_wr_modify+0x332/0x16d0 [ 314.737604][ T6656] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 314.739796][ T6656] ? mas_store+0x275/0x3a0 [ 314.741468][ T6656] ? handle_mm_fault+0x9f0/0x9f0 [ 314.743273][ T6656] ? up_write+0x1b4/0x520 [ 314.744901][ T6656] dup_mmap+0x10bc/0x19d0 [ 314.746486][ T6656] ? replace_mm_exe_file+0x4c0/0x4c0 [ 314.748717][ T6656] ? lockdep_hardirqs_on+0x7d/0x100 [ 314.751100][ T6656] ? mm_init+0xc7a/0x1030 [ 314.753102][ T6656] copy_process+0x6663/0x75c0 [ 314.755261][ T6656] ? pidfd_prepare+0x80/0x80 [ 314.757413][ T6656] ? find_held_lock+0x2d/0x110 [ 314.759597][ T6656] ? find_held_lock+0x2d/0x110 [ 314.761770][ T6656] kernel_clone+0xeb/0x890 [ 314.763825][ T6656] ? create_io_thread+0xe0/0xe0 [ 314.766043][ T6656] ? vfs_write+0x15c/0xd50 [ 314.768070][ T6656] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 314.770651][ T6656] ? wait_for_completion_io_timeout+0x20/0x20 [ 314.773408][ T6656] __do_sys_clone+0xba/0x100 [ 314.775490][ T6656] ? kernel_clone+0x890/0x890 [ 314.777637][ T6656] ? syscall_enter_from_user_mode+0x26/0x80 [ 314.780350][ T6656] do_syscall_64+0x39/0xb0 [ 314.782375][ T6656] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 314.785076][ T6656] RIP: 0033:0x7f469ba8c389 [ 314.787119][ T6656] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 314.795853][ T6656] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 314.799692][ T6656] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 314.803281][ T6656] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 314.806823][ T6656] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 314.810382][ T6656] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 314.813932][ T6656] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 314.817502][ T6656] [ 314.818957][ T6659] CPU: 1 PID: 6659 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 314.822743][ T6659] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 314.826058][ T6659] Call Trace: [ 314.827264][ T6659] [ 314.828340][ T6659] dump_stack_lvl+0x136/0x150 [ 314.830048][ T6659] should_fail_ex+0x4a3/0x5b0 [ 314.832023][ T6659] should_failslab+0x9/0x20 [ 314.833560][ T6659] kmem_cache_alloc+0x5d/0x3f0 [ 314.835115][ T6659] anon_vma_fork+0x1f1/0x630 [ 314.836793][ T6659] ? anon_vma_name+0xc6/0x170 [ 314.838479][ T6659] dup_mmap+0xfc9/0x19d0 [ 314.840039][ T6659] ? replace_mm_exe_file+0x4c0/0x4c0 [ 314.841977][ T6659] ? lockdep_hardirqs_on+0x7d/0x100 [ 314.843815][ T6659] ? mm_init+0xc7a/0x1030 [ 314.845382][ T6659] copy_process+0x6663/0x75c0 [ 314.847079][ T6659] ? pidfd_prepare+0x80/0x80 [ 314.848765][ T6659] ? find_held_lock+0x2d/0x110 [ 314.850520][ T6659] ? find_held_lock+0x2d/0x110 [ 314.852251][ T6659] kernel_clone+0xeb/0x890 [ 314.853859][ T6659] ? create_io_thread+0xe0/0xe0 [ 314.855612][ T6659] ? vfs_write+0x15c/0xd50 [ 314.857227][ T6659] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 314.859259][ T6659] ? wait_for_completion_io_timeout+0x20/0x20 [ 314.861561][ T6659] __do_sys_clone+0xba/0x100 [ 314.863241][ T6659] ? kernel_clone+0x890/0x890 [ 314.864956][ T6659] ? syscall_enter_from_user_mode+0x26/0x80 [ 314.867103][ T6659] do_syscall_64+0x39/0xb0 [ 314.868743][ T6659] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 314.870935][ T6659] RIP: 0033:0x7f81ce88c389 [ 314.872562][ T6659] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 314.879520][ T6659] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 314.882577][ T6659] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 314.885421][ T6659] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 314.888258][ T6659] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 314.891201][ T6659] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 314.894050][ T6659] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 314.896895][ T6659] 23:08:26 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 58) 23:08:26 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r1, 0x3, r0, 0x0, 0x80000}) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r1, 0x3, r0, 0x0, 0x80000}) (async) 23:08:26 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x480dd) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xffff0001}]}, 0x1c}}, 0x44880) 23:08:26 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 60) 23:08:26 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x480dd) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xffff0001}]}, 0x1c}}, 0x44880) [ 314.916806][ T6678] FAULT_INJECTION: forcing a failure. [ 314.916806][ T6678] name failslab, interval 1, probability 0, space 0, times 0 [ 314.919485][ T6679] FAULT_INJECTION: forcing a failure. 23:08:26 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r0, &(0x7f0000000040)={0x22, 0x6, 0x8, 0x81, 0x7}, 0x6) [ 314.919485][ T6679] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 314.921760][ T6678] CPU: 3 PID: 6678 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 23:08:26 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000001900), 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r1, 0x7}) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) [ 314.932007][ T6678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 314.936286][ T6678] Call Trace: [ 314.936295][ T6678] [ 314.936303][ T6678] dump_stack_lvl+0x136/0x150 [ 314.936327][ T6678] should_fail_ex+0x4a3/0x5b0 23:08:26 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r0, &(0x7f0000000040)={0x22, 0x6, 0x8, 0x81, 0x7}, 0x6) (async) bind$isdn_base(r0, &(0x7f0000000040)={0x22, 0x6, 0x8, 0x81, 0x7}, 0x6) [ 314.936356][ T6678] should_failslab+0x9/0x20 [ 314.945976][ T6678] kmem_cache_alloc+0x5d/0x3f0 [ 314.948022][ T6678] __pmd_alloc+0xc3/0x5d0 [ 314.949606][ T6678] ? __pud_alloc+0xe4/0x180 [ 314.951293][ T6678] copy_page_range+0x22c1/0x3830 [ 314.953100][ T6678] ? mas_wr_modify+0x999/0x16d0 [ 314.954858][ T6678] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 314.956998][ T6678] ? mas_store+0x275/0x3a0 [ 314.958656][ T6678] ? handle_mm_fault+0x9f0/0x9f0 [ 314.960622][ T6678] ? down_write+0x14f/0x200 [ 314.960645][ T6678] dup_mmap+0x10bc/0x19d0 [ 314.960660][ T6678] ? replace_mm_exe_file+0x4c0/0x4c0 [ 314.960674][ T6678] ? lockdep_hardirqs_on+0x7d/0x100 [ 314.960688][ T6678] ? mm_init+0xc7a/0x1030 [ 314.960701][ T6678] copy_process+0x6663/0x75c0 [ 314.971988][ T6678] ? pidfd_prepare+0x80/0x80 [ 314.973708][ T6678] ? find_held_lock+0x2d/0x110 [ 314.975447][ T6678] ? find_held_lock+0x2d/0x110 [ 314.977179][ T6678] kernel_clone+0xeb/0x890 [ 314.978783][ T6678] ? create_io_thread+0xe0/0xe0 [ 314.980561][ T6678] ? vfs_write+0x15c/0xd50 [ 314.982182][ T6678] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 314.984140][ T6678] ? wait_for_completion_io_timeout+0x20/0x20 [ 314.986241][ T6678] __do_sys_clone+0xba/0x100 [ 314.987908][ T6678] ? kernel_clone+0x890/0x890 [ 314.989629][ T6678] ? syscall_enter_from_user_mode+0x26/0x80 [ 314.991842][ T6678] do_syscall_64+0x39/0xb0 [ 314.993463][ T6678] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 314.995587][ T6678] RIP: 0033:0x7f469ba8c389 [ 314.997219][ T6678] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 315.004217][ T6678] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 315.007175][ T6678] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 315.009998][ T6678] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 315.012847][ T6678] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 315.015651][ T6678] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 315.018476][ T6678] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 315.021669][ T6678] [ 315.023845][ T6679] CPU: 1 PID: 6679 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 315.028612][ T6679] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 315.032696][ T6679] Call Trace: [ 315.034246][ T6679] [ 315.035645][ T6679] dump_stack_lvl+0x136/0x150 [ 315.037849][ T6679] should_fail_ex+0x4a3/0x5b0 [ 315.040077][ T6679] prepare_alloc_pages+0x178/0x570 [ 315.042426][ T6679] __alloc_pages+0x149/0x4a0 [ 315.044621][ T6679] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 315.047844][ T6679] ? find_held_lock+0x2d/0x110 [ 315.050073][ T6679] ? lock_downgrade+0x690/0x690 [ 315.052349][ T6679] ? do_raw_spin_lock+0x124/0x2b0 [ 315.054512][ T6679] alloc_pages+0x1aa/0x270 [ 315.056636][ T6679] __pmd_alloc+0x3f/0x5d0 [ 315.058663][ T6679] ? __pud_alloc+0xe4/0x180 [ 315.060829][ T6679] copy_page_range+0x22c1/0x3830 [ 315.063095][ T6679] ? mas_wr_modify+0x999/0x16d0 [ 315.065332][ T6679] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 315.068077][ T6679] ? mas_store+0x275/0x3a0 [ 315.070156][ T6679] ? handle_mm_fault+0x9f0/0x9f0 [ 315.072432][ T6679] ? down_write+0x14f/0x200 [ 315.074533][ T6679] dup_mmap+0x10bc/0x19d0 [ 315.076576][ T6679] ? replace_mm_exe_file+0x4c0/0x4c0 [ 315.078666][ T6679] ? lockdep_hardirqs_on+0x7d/0x100 [ 315.080671][ T6679] ? mm_init+0xc7a/0x1030 [ 315.082300][ T6679] copy_process+0x6663/0x75c0 [ 315.084084][ T6679] ? pidfd_prepare+0x80/0x80 [ 315.085806][ T6679] ? find_held_lock+0x2d/0x110 [ 315.087698][ T6679] ? find_held_lock+0x2d/0x110 [ 315.089597][ T6679] kernel_clone+0xeb/0x890 [ 315.091299][ T6679] ? create_io_thread+0xe0/0xe0 [ 315.093288][ T6679] ? vfs_write+0x15c/0xd50 [ 315.094967][ T6679] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 315.097051][ T6679] ? wait_for_completion_io_timeout+0x20/0x20 [ 315.099338][ T6679] __do_sys_clone+0xba/0x100 [ 315.101087][ T6679] ? kernel_clone+0x890/0x890 [ 315.102837][ T6679] ? syscall_enter_from_user_mode+0x26/0x80 [ 315.105027][ T6679] do_syscall_64+0x39/0xb0 [ 315.106778][ T6679] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 315.109182][ T6679] RIP: 0033:0x7f81ce88c389 [ 315.111222][ T6679] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 315.118260][ T6679] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 315.121430][ T6679] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 315.124341][ T6679] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 315.127272][ T6679] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 315.130174][ T6679] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 315.133122][ T6679] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 315.136054][ T6679] 23:08:27 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 59) 23:08:27 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000001900), 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r1, 0x7}) (async) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) 23:08:27 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async, rerun: 64) r0 = socket$isdn_base(0x22, 0x3, 0x0) (rerun: 64) bind$isdn_base(r0, &(0x7f0000000040)={0x22, 0x6, 0x8, 0x81, 0x7}, 0x6) 23:08:27 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 61) [ 315.161469][ T6697] FAULT_INJECTION: forcing a failure. [ 315.161469][ T6697] name failslab, interval 1, probability 0, space 0, times 0 23:08:27 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000001900), 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r1, 0x7}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r1, 0x7}) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) [ 315.167551][ T6697] CPU: 3 PID: 6697 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 315.167821][ T6699] FAULT_INJECTION: forcing a failure. [ 315.167821][ T6699] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 315.172602][ T6697] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 315.172617][ T6697] Call Trace: [ 315.172623][ T6697] [ 315.172630][ T6697] dump_stack_lvl+0x136/0x150 23:08:27 executing program 2: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)=']]\x00', r0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4094}, 0x4840) [ 315.182911][ T6697] should_fail_ex+0x4a3/0x5b0 [ 315.182949][ T6697] should_failslab+0x9/0x20 [ 315.182972][ T6697] kmem_cache_alloc+0x5d/0x3f0 [ 315.182998][ T6697] ptlock_alloc+0x21/0x70 [ 315.183026][ T6697] pte_alloc_one+0x6c/0x230 [ 315.183047][ T6697] __pte_alloc+0x6d/0x260 [ 315.183066][ T6697] ? pmd_install+0x160/0x160 [ 315.183086][ T6697] ? _raw_spin_unlock+0x28/0x40 23:08:27 executing program 2: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)=']]\x00', r0) (async, rerun: 32) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async, rerun: 32) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4094}, 0x4840) [ 315.183110][ T6697] ? __pmd_alloc+0x30c/0x5d0 [ 315.183132][ T6697] ? __pud_alloc+0xe4/0x180 23:08:27 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 62) [ 315.186031][ T6697] copy_page_range+0x151e/0x3830 [ 315.186058][ T6697] ? mas_wr_modify+0x999/0x16d0 [ 315.186087][ T6697] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 315.190552][ T6697] ? mas_store+0x275/0x3a0 [ 315.190581][ T6697] ? handle_mm_fault+0x9f0/0x9f0 [ 315.190604][ T6697] ? down_write+0x14f/0x200 [ 315.190625][ T6697] dup_mmap+0x10bc/0x19d0 23:08:27 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 60) 23:08:27 executing program 2: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)=']]\x00', r0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4094}, 0x4840) [ 315.190647][ T6697] ? replace_mm_exe_file+0x4c0/0x4c0 [ 315.190668][ T6697] ? lockdep_hardirqs_on+0x7d/0x100 [ 315.190689][ T6697] ? mm_init+0xc7a/0x1030 [ 315.190706][ T6697] copy_process+0x6663/0x75c0 [ 315.190726][ T6697] ? pidfd_prepare+0x80/0x80 [ 315.190745][ T6697] ? find_held_lock+0x2d/0x110 [ 315.190762][ T6697] ? find_held_lock+0x2d/0x110 [ 315.190779][ T6697] kernel_clone+0xeb/0x890 [ 315.190821][ T6697] ? create_io_thread+0xe0/0xe0 [ 315.190843][ T6697] ? vfs_write+0x15c/0xd50 [ 315.190863][ T6697] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 315.190883][ T6697] ? wait_for_completion_io_timeout+0x20/0x20 [ 315.190904][ T6697] __do_sys_clone+0xba/0x100 [ 315.190923][ T6697] ? kernel_clone+0x890/0x890 [ 315.190945][ T6697] ? syscall_enter_from_user_mode+0x26/0x80 [ 315.190968][ T6697] do_syscall_64+0x39/0xb0 [ 315.190982][ T6697] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 315.191012][ T6697] RIP: 0033:0x7f469ba8c389 [ 315.191026][ T6697] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 315.191044][ T6697] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 315.191063][ T6697] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 315.191075][ T6697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 315.191087][ T6697] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 315.191099][ T6697] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 315.191110][ T6697] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 315.191124][ T6697] [ 315.191159][ T6699] CPU: 2 PID: 6699 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 315.195645][ T6699] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 315.195655][ T6699] Call Trace: [ 315.199381][ T6699] [ 315.199388][ T6699] dump_stack_lvl+0x136/0x150 [ 315.202655][ T6699] should_fail_ex+0x4a3/0x5b0 [ 315.206295][ T6699] prepare_alloc_pages+0x178/0x570 [ 315.206313][ T6699] __alloc_pages+0x149/0x4a0 [ 315.206324][ T6699] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 315.206338][ T6699] alloc_pages+0x1aa/0x270 [ 315.206348][ T6699] pte_alloc_one+0x1a/0x230 [ 315.206362][ T6699] __pte_alloc+0x6d/0x260 [ 315.206374][ T6699] ? pmd_install+0x160/0x160 [ 315.206386][ T6699] copy_page_range+0x151e/0x3830 [ 315.206399][ T6699] ? mas_wr_modify+0x332/0x16d0 [ 315.206414][ T6699] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 315.206429][ T6699] ? mas_store+0x275/0x3a0 [ 315.206442][ T6699] ? handle_mm_fault+0x9f0/0x9f0 [ 315.206455][ T6699] ? up_write+0x1b4/0x520 [ 315.206483][ T6699] dup_mmap+0x10bc/0x19d0 [ 315.206495][ T6699] ? replace_mm_exe_file+0x4c0/0x4c0 [ 315.206507][ T6699] ? lockdep_hardirqs_on+0x7d/0x100 [ 315.206520][ T6699] ? mm_init+0xc7a/0x1030 [ 315.206530][ T6699] copy_process+0x6663/0x75c0 [ 315.206543][ T6699] ? pidfd_prepare+0x80/0x80 [ 315.206554][ T6699] ? find_held_lock+0x2d/0x110 [ 315.206564][ T6699] ? find_held_lock+0x2d/0x110 [ 315.206574][ T6699] kernel_clone+0xeb/0x890 [ 315.206585][ T6699] ? create_io_thread+0xe0/0xe0 [ 315.206596][ T6699] ? vfs_write+0x15c/0xd50 [ 315.206607][ T6699] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 315.206618][ T6699] ? wait_for_completion_io_timeout+0x20/0x20 [ 315.206630][ T6699] __do_sys_clone+0xba/0x100 [ 315.206641][ T6699] ? kernel_clone+0x890/0x890 [ 315.206653][ T6699] ? syscall_enter_from_user_mode+0x26/0x80 [ 315.206665][ T6699] do_syscall_64+0x39/0xb0 [ 315.206674][ T6699] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 315.206690][ T6699] RIP: 0033:0x7f81ce88c389 [ 315.206699][ T6699] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 315.210638][ T6699] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 315.210662][ T6699] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 315.210674][ T6699] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 315.210686][ T6699] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 315.210697][ T6699] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 315.210708][ T6699] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 315.210721][ T6699] [ 315.229722][ T6711] FAULT_INJECTION: forcing a failure. [ 315.229722][ T6711] name failslab, interval 1, probability 0, space 0, times 0 [ 315.232171][ T6711] CPU: 0 PID: 6711 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 315.236172][ T6711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 315.236181][ T6711] Call Trace: [ 315.239130][ T6713] FAULT_INJECTION: forcing a failure. [ 315.239130][ T6713] name failslab, interval 1, probability 0, space 0, times 0 [ 315.240027][ T6711] [ 315.240033][ T6711] dump_stack_lvl+0x136/0x150 [ 315.244124][ T6711] should_fail_ex+0x4a3/0x5b0 [ 315.244144][ T6711] should_failslab+0x9/0x20 [ 315.244158][ T6711] kmem_cache_alloc+0x5d/0x3f0 [ 315.244173][ T6711] vm_area_dup+0x55/0x300 [ 315.244185][ T6711] dup_mmap+0x713/0x19d0 [ 315.244197][ T6711] ? replace_mm_exe_file+0x4c0/0x4c0 [ 315.244209][ T6711] ? lockdep_hardirqs_on+0x7d/0x100 [ 315.244222][ T6711] ? mm_init+0xc7a/0x1030 [ 315.244232][ T6711] copy_process+0x6663/0x75c0 [ 315.244244][ T6711] ? pidfd_prepare+0x80/0x80 [ 315.244256][ T6711] ? find_held_lock+0x2d/0x110 [ 315.244267][ T6711] ? find_held_lock+0x2d/0x110 [ 315.244277][ T6711] kernel_clone+0xeb/0x890 [ 315.244288][ T6711] ? create_io_thread+0xe0/0xe0 [ 315.244299][ T6711] ? vfs_write+0x15c/0xd50 [ 315.244310][ T6711] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 315.244322][ T6711] ? wait_for_completion_io_timeout+0x20/0x20 [ 315.244334][ T6711] __do_sys_clone+0xba/0x100 [ 315.244345][ T6711] ? kernel_clone+0x890/0x890 [ 315.244356][ T6711] ? syscall_enter_from_user_mode+0x26/0x80 [ 315.248425][ T6711] do_syscall_64+0x39/0xb0 [ 315.252347][ T6711] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 315.256121][ T6711] RIP: 0033:0x7f469ba8c389 [ 315.264692][ T6711] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 315.264709][ T6711] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 315.264720][ T6711] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 315.264727][ T6711] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 315.264733][ T6711] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 315.264739][ T6711] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 315.264745][ T6711] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 315.264753][ T6711] [ 315.264758][ T6713] CPU: 2 PID: 6713 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 315.271420][ T6713] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 315.278412][ T6713] Call Trace: [ 315.284917][ T6713] [ 315.284932][ T6713] dump_stack_lvl+0x136/0x150 [ 315.284955][ T6713] should_fail_ex+0x4a3/0x5b0 [ 315.284981][ T6713] should_failslab+0x9/0x20 [ 315.291149][ T6713] kmem_cache_alloc+0x5d/0x3f0 [ 315.295918][ T6713] ptlock_alloc+0x21/0x70 [ 315.299184][ T6713] pte_alloc_one+0x6c/0x230 [ 315.303618][ T6713] __pte_alloc+0x6d/0x260 [ 315.303647][ T6713] ? pmd_install+0x160/0x160 [ 315.303669][ T6713] copy_page_range+0x151e/0x3830 [ 315.308478][ T6713] ? mas_wr_modify+0x332/0x16d0 [ 315.312207][ T6713] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 315.315977][ T6713] ? mas_store+0x275/0x3a0 [ 315.319632][ T6713] ? handle_mm_fault+0x9f0/0x9f0 [ 315.323419][ T6713] ? up_write+0x1b4/0x520 [ 315.323434][ T6713] dup_mmap+0x10bc/0x19d0 [ 315.323448][ T6713] ? replace_mm_exe_file+0x4c0/0x4c0 [ 315.323461][ T6713] ? lockdep_hardirqs_on+0x7d/0x100 [ 315.323474][ T6713] ? mm_init+0xc7a/0x1030 [ 315.323484][ T6713] copy_process+0x6663/0x75c0 [ 315.327222][ T6713] ? pidfd_prepare+0x80/0x80 [ 315.331517][ T6713] ? find_held_lock+0x2d/0x110 [ 315.335405][ T6713] ? find_held_lock+0x2d/0x110 [ 315.339261][ T6713] kernel_clone+0xeb/0x890 [ 315.343133][ T6713] ? create_io_thread+0xe0/0xe0 [ 315.343151][ T6713] ? vfs_write+0x15c/0xd50 [ 315.343162][ T6713] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 315.343175][ T6713] ? wait_for_completion_io_timeout+0x20/0x20 [ 315.343187][ T6713] __do_sys_clone+0xba/0x100 [ 315.343198][ T6713] ? kernel_clone+0x890/0x890 [ 315.343211][ T6713] ? syscall_enter_from_user_mode+0x26/0x80 [ 315.346751][ T6713] do_syscall_64+0x39/0xb0 [ 315.350464][ T6713] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 315.354699][ T6713] RIP: 0033:0x7f81ce88c389 [ 315.354717][ T6713] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 315.354735][ T6713] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 315.354755][ T6713] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 315.354767][ T6713] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 315.354777][ T6713] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 315.354789][ T6713] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 315.354800][ T6713] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 315.354814][ T6713] 23:08:27 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0xc2940, 0x254) 23:08:27 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xf}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x9}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xe5}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040080}, 0x20040081) 23:08:27 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 63) 23:08:27 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 61) 23:08:27 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xf}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x9}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xe5}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040080}, 0x20040081) [ 315.586911][ T6719] FAULT_INJECTION: forcing a failure. [ 315.586911][ T6719] name failslab, interval 1, probability 0, space 0, times 0 [ 315.591390][ T6719] CPU: 1 PID: 6719 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 315.595792][ T6719] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 315.599503][ T6724] FAULT_INJECTION: forcing a failure. [ 315.599503][ T6724] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 315.599774][ T6719] Call Trace: [ 315.605944][ T6719] [ 315.607080][ T6719] dump_stack_lvl+0x136/0x150 [ 315.608856][ T6719] should_fail_ex+0x4a3/0x5b0 [ 315.610581][ T6719] should_failslab+0x9/0x20 [ 315.612256][ T6719] kmem_cache_alloc+0x5d/0x3f0 [ 315.614105][ T6719] vm_area_dup+0x23/0x300 [ 315.615703][ T6719] dup_mmap+0x713/0x19d0 [ 315.617451][ T6719] ? replace_mm_exe_file+0x4c0/0x4c0 [ 315.619788][ T6719] ? lockdep_hardirqs_on+0x7d/0x100 [ 315.621703][ T6719] ? mm_init+0xc7a/0x1030 [ 315.623352][ T6719] copy_process+0x6663/0x75c0 [ 315.625096][ T6719] ? pidfd_prepare+0x80/0x80 [ 315.626822][ T6719] ? find_held_lock+0x2d/0x110 [ 315.628575][ T6719] ? find_held_lock+0x2d/0x110 [ 315.630279][ T6719] kernel_clone+0xeb/0x890 [ 315.631992][ T6719] ? create_io_thread+0xe0/0xe0 [ 315.633800][ T6719] ? vfs_write+0x15c/0xd50 [ 315.635465][ T6719] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 315.637541][ T6719] ? wait_for_completion_io_timeout+0x20/0x20 [ 315.639905][ T6719] __do_sys_clone+0xba/0x100 [ 315.641602][ T6719] ? kernel_clone+0x890/0x890 [ 315.643309][ T6719] ? syscall_enter_from_user_mode+0x26/0x80 [ 315.645440][ T6719] do_syscall_64+0x39/0xb0 [ 315.647124][ T6719] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 315.649379][ T6719] RIP: 0033:0x7f81ce88c389 [ 315.651017][ T6719] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 315.657820][ T6719] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 315.660800][ T6719] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 315.663626][ T6719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 315.666626][ T6719] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 315.669478][ T6719] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 315.672311][ T6719] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 315.675084][ T6719] 23:08:27 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0xc2940, 0x254) 23:08:27 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xf}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x9}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xe5}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040080}, 0x20040081) [ 315.676554][ T6724] CPU: 3 PID: 6724 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 315.680716][ T6724] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 315.683920][ T6724] Call Trace: 23:08:27 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0xc2940, 0x254) 23:08:27 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 62) [ 315.685182][ T6724] [ 315.686469][ T6724] dump_stack_lvl+0x136/0x150 [ 315.688359][ T6724] should_fail_ex+0x4a3/0x5b0 [ 315.690224][ T6724] prepare_alloc_pages+0x178/0x570 [ 315.692063][ T6724] __alloc_pages+0x149/0x4a0 [ 315.693721][ T6724] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 23:08:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0xd7d18508f3da86de) [ 315.696422][ T6724] alloc_pages+0x1aa/0x270 [ 315.697494][ T6733] FAULT_INJECTION: forcing a failure. [ 315.697494][ T6733] name failslab, interval 1, probability 0, space 0, times 0 [ 315.698292][ T6724] pte_alloc_one+0x1a/0x230 [ 315.704951][ T6724] __pte_alloc+0x6d/0x260 [ 315.706892][ T6724] ? pmd_install+0x160/0x160 [ 315.708593][ T6724] copy_page_range+0x151e/0x3830 [ 315.710487][ T6724] ? mas_wr_modify+0x332/0x16d0 [ 315.712724][ T6724] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 315.715444][ T6724] ? mas_store+0x275/0x3a0 [ 315.717460][ T6724] ? handle_mm_fault+0x9f0/0x9f0 [ 315.719733][ T6724] ? up_write+0x1b4/0x520 [ 315.721708][ T6724] dup_mmap+0x10bc/0x19d0 [ 315.723713][ T6724] ? replace_mm_exe_file+0x4c0/0x4c0 [ 315.726146][ T6724] ? lockdep_hardirqs_on+0x7d/0x100 [ 315.728547][ T6724] ? mm_init+0xc7a/0x1030 [ 315.730542][ T6724] copy_process+0x6663/0x75c0 [ 315.732722][ T6724] ? pidfd_prepare+0x80/0x80 [ 315.734831][ T6724] ? find_held_lock+0x2d/0x110 [ 315.736965][ T6724] ? find_held_lock+0x2d/0x110 [ 315.739104][ T6724] kernel_clone+0xeb/0x890 [ 315.741164][ T6724] ? create_io_thread+0xe0/0xe0 [ 315.743403][ T6724] ? vfs_write+0x15c/0xd50 [ 315.745467][ T6724] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 315.748063][ T6724] ? wait_for_completion_io_timeout+0x20/0x20 [ 315.750837][ T6724] __do_sys_clone+0xba/0x100 [ 315.753006][ T6724] ? kernel_clone+0x890/0x890 [ 315.755095][ T6724] ? syscall_enter_from_user_mode+0x26/0x80 [ 315.757702][ T6724] do_syscall_64+0x39/0xb0 [ 315.759757][ T6724] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 315.762405][ T6724] RIP: 0033:0x7f469ba8c389 [ 315.764340][ T6724] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 315.772791][ T6724] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 315.776715][ T6724] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 315.780253][ T6724] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 315.783731][ T6724] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 315.787314][ T6724] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 315.790934][ T6724] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 315.794476][ T6724] [ 315.795903][ T6733] CPU: 0 PID: 6733 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 315.800491][ T6733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 315.803704][ T6733] Call Trace: [ 315.804952][ T6733] [ 315.806470][ T6733] dump_stack_lvl+0x136/0x150 [ 315.808630][ T6733] should_fail_ex+0x4a3/0x5b0 [ 315.810769][ T6733] should_failslab+0x9/0x20 [ 315.812893][ T6733] kmem_cache_alloc+0x5d/0x3f0 [ 315.815142][ T6733] ptlock_alloc+0x21/0x70 [ 315.817191][ T6733] pte_alloc_one+0x6c/0x230 [ 315.818894][ T6733] __pte_alloc+0x6d/0x260 [ 315.820496][ T6733] ? pmd_install+0x160/0x160 [ 315.822182][ T6733] ? _raw_spin_unlock+0x28/0x40 [ 315.823973][ T6733] ? __pmd_alloc+0x30c/0x5d0 [ 315.825779][ T6733] ? __pud_alloc+0xe4/0x180 [ 315.827512][ T6733] copy_page_range+0x151e/0x3830 [ 315.829490][ T6733] ? mas_wr_modify+0x999/0x16d0 [ 315.831335][ T6733] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 315.833862][ T6733] ? mas_store+0x275/0x3a0 [ 315.836131][ T6733] ? handle_mm_fault+0x9f0/0x9f0 [ 315.838487][ T6733] ? down_write+0x14f/0x200 [ 315.839977][ T6742] FAULT_INJECTION: forcing a failure. [ 315.839977][ T6742] name failslab, interval 1, probability 0, space 0, times 0 [ 315.840423][ T6733] dup_mmap+0x10bc/0x19d0 [ 315.840451][ T6733] ? replace_mm_exe_file+0x4c0/0x4c0 [ 315.840474][ T6733] ? lockdep_hardirqs_on+0x7d/0x100 [ 315.851892][ T6733] ? mm_init+0xc7a/0x1030 [ 315.854051][ T6733] copy_process+0x6663/0x75c0 [ 315.856523][ T6733] ? pidfd_prepare+0x80/0x80 23:08:27 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 64) 23:08:27 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x40) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000080)={'\x00', 0x7fffffff, 0x1, 0x4}) 23:08:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r1) (async) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0xd7d18508f3da86de) 23:08:27 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x40) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000080)={'\x00', 0x7fffffff, 0x1, 0x4}) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x40) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) (async) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000080)={'\x00', 0x7fffffff, 0x1, 0x4}) (async) 23:08:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r1) (async) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0xd7d18508f3da86de) [ 315.858880][ T6733] ? find_held_lock+0x2d/0x110 [ 315.861546][ T6733] ? find_held_lock+0x2d/0x110 [ 315.863773][ T6733] kernel_clone+0xeb/0x890 [ 315.865867][ T6733] ? create_io_thread+0xe0/0xe0 [ 315.868206][ T6733] ? vfs_write+0x15c/0xd50 [ 315.870299][ T6733] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 315.873003][ T6733] ? wait_for_completion_io_timeout+0x20/0x20 [ 315.876002][ T6733] __do_sys_clone+0xba/0x100 [ 315.878342][ T6733] ? kernel_clone+0x890/0x890 [ 315.880610][ T6733] ? syscall_enter_from_user_mode+0x26/0x80 [ 315.883502][ T6733] do_syscall_64+0x39/0xb0 [ 315.885534][ T6733] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 315.888299][ T6733] RIP: 0033:0x7f81ce88c389 [ 315.890371][ T6733] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 315.899202][ T6733] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 23:08:27 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x40) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000080)={'\x00', 0x7fffffff, 0x1, 0x4}) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x40) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) (async) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000080)={'\x00', 0x7fffffff, 0x1, 0x4}) (async) [ 315.903098][ T6733] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 315.906974][ T6733] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 315.910912][ T6733] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 315.914916][ T6733] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 315.918613][ T6733] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 315.922284][ T6733] [ 315.927887][ T6742] CPU: 2 PID: 6742 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 315.932608][ T6742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 315.936659][ T6742] Call Trace: [ 315.938180][ T6742] [ 315.939574][ T6742] dump_stack_lvl+0x136/0x150 [ 315.941786][ T6742] should_fail_ex+0x4a3/0x5b0 23:08:27 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 63) 23:08:27 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x15}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x1}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x1}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x8080) [ 315.943986][ T6742] should_failslab+0x9/0x20 [ 315.946255][ T6742] kmem_cache_alloc+0x5d/0x3f0 [ 315.948527][ T6742] ptlock_alloc+0x21/0x70 [ 315.949286][ T6760] FAULT_INJECTION: forcing a failure. [ 315.949286][ T6760] name failslab, interval 1, probability 0, space 0, times 0 [ 315.950380][ T6742] pte_alloc_one+0x6c/0x230 [ 315.950406][ T6742] __pte_alloc+0x6d/0x260 [ 315.950426][ T6742] ? pmd_install+0x160/0x160 [ 315.960612][ T6742] copy_page_range+0x151e/0x3830 [ 315.962486][ T6742] ? mas_wr_modify+0x332/0x16d0 [ 315.964588][ T6742] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 315.966818][ T6742] ? mas_store+0x275/0x3a0 [ 315.968531][ T6742] ? handle_mm_fault+0x9f0/0x9f0 [ 315.970392][ T6742] ? up_write+0x1b4/0x520 [ 315.972079][ T6742] dup_mmap+0x10bc/0x19d0 [ 315.973702][ T6742] ? replace_mm_exe_file+0x4c0/0x4c0 [ 315.975718][ T6742] ? lockdep_hardirqs_on+0x7d/0x100 [ 315.978065][ T6742] ? mm_init+0xc7a/0x1030 [ 315.980340][ T6742] copy_process+0x6663/0x75c0 [ 315.982572][ T6742] ? pidfd_prepare+0x80/0x80 [ 315.984764][ T6742] ? find_held_lock+0x2d/0x110 [ 315.986933][ T6742] ? find_held_lock+0x2d/0x110 [ 315.989170][ T6742] kernel_clone+0xeb/0x890 [ 315.991268][ T6742] ? create_io_thread+0xe0/0xe0 [ 315.993346][ T6742] ? vfs_write+0x15c/0xd50 [ 315.995415][ T6742] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 315.998085][ T6742] ? wait_for_completion_io_timeout+0x20/0x20 [ 316.000960][ T6742] __do_sys_clone+0xba/0x100 [ 316.003140][ T6742] ? kernel_clone+0x890/0x890 [ 316.005341][ T6742] ? syscall_enter_from_user_mode+0x26/0x80 [ 316.008113][ T6742] do_syscall_64+0x39/0xb0 [ 316.010214][ T6742] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 316.012947][ T6742] RIP: 0033:0x7f469ba8c389 [ 316.014755][ T6742] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 316.021872][ T6742] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 316.025489][ T6742] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 316.028622][ T6742] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 316.031774][ T6742] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 316.035085][ T6742] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 316.038527][ T6742] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 316.041630][ T6742] [ 316.044144][ T6760] CPU: 3 PID: 6760 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 316.047870][ T6760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 316.051022][ T6760] Call Trace: [ 316.052250][ T6760] [ 316.053332][ T6760] dump_stack_lvl+0x136/0x150 [ 316.055045][ T6760] should_fail_ex+0x4a3/0x5b0 [ 316.056745][ T6760] should_failslab+0x9/0x20 [ 316.058362][ T6760] kmem_cache_alloc+0x5d/0x3f0 [ 316.060111][ T6760] __pmd_alloc+0xc3/0x5d0 23:08:28 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 65) 23:08:28 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x143402, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000040)={0x8, 0x0, 0x7, 0x406}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000080)={0xed, 0x2}) 23:08:28 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x15}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x1}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x1}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x8080) [ 316.061674][ T6760] ? __pud_alloc+0xe4/0x180 [ 316.063513][ T6760] copy_page_range+0x22c1/0x3830 [ 316.065332][ T6760] ? mas_wr_modify+0x2da/0x16d0 [ 316.066050][ T6764] FAULT_INJECTION: forcing a failure. 23:08:28 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x143402, 0x0) (async) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x143402, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000040)={0x8, 0x0, 0x7, 0x406}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000080)={0xed, 0x2}) [ 316.066050][ T6764] name failslab, interval 1, probability 0, space 0, times 0 [ 316.067064][ T6760] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 23:08:28 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async, rerun: 64) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x15}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x1}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x1}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x8080) [ 316.067084][ T6760] ? mas_store+0x275/0x3a0 [ 316.067097][ T6760] ? handle_mm_fault+0x9f0/0x9f0 [ 316.067110][ T6760] ? down_write+0x14f/0x200 [ 316.067124][ T6760] dup_mmap+0x10bc/0x19d0 [ 316.067137][ T6760] ? replace_mm_exe_file+0x4c0/0x4c0 23:08:28 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x143402, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000040)={0x8, 0x0, 0x7, 0x406}) (async) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000040)={0x8, 0x0, 0x7, 0x406}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000080)={0xed, 0x2}) [ 316.085951][ T6760] ? lockdep_hardirqs_on+0x7d/0x100 [ 316.088481][ T6760] ? mm_init+0xc7a/0x1030 [ 316.090498][ T6760] copy_process+0x6663/0x75c0 [ 316.092711][ T6760] ? pidfd_prepare+0x80/0x80 [ 316.094894][ T6760] ? find_held_lock+0x2d/0x110 [ 316.097157][ T6760] ? find_held_lock+0x2d/0x110 [ 316.099409][ T6760] kernel_clone+0xeb/0x890 [ 316.101446][ T6760] ? create_io_thread+0xe0/0xe0 [ 316.103666][ T6760] ? vfs_write+0x15c/0xd50 [ 316.105730][ T6760] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 316.108316][ T6760] ? wait_for_completion_io_timeout+0x20/0x20 [ 316.111177][ T6760] __do_sys_clone+0xba/0x100 [ 316.113433][ T6760] ? kernel_clone+0x890/0x890 [ 316.115686][ T6760] ? syscall_enter_from_user_mode+0x26/0x80 [ 316.118540][ T6760] do_syscall_64+0x39/0xb0 [ 316.120668][ T6760] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 316.123449][ T6760] RIP: 0033:0x7f81ce88c389 [ 316.125576][ T6760] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 316.132714][ T6760] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 316.136289][ T6760] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 316.139674][ T6760] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 316.143066][ T6760] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 316.146441][ T6760] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 316.149834][ T6760] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 316.153209][ T6760] [ 316.154542][ T6764] CPU: 0 PID: 6764 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 23:08:28 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 64) 23:08:28 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x4) [ 316.159355][ T6764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 316.163620][ T6764] Call Trace: [ 316.165182][ T6764] [ 316.166564][ T6764] dump_stack_lvl+0x136/0x150 [ 316.168773][ T6764] should_fail_ex+0x4a3/0x5b0 [ 316.170961][ T6764] should_failslab+0x9/0x20 [ 316.173096][ T6764] kmem_cache_alloc+0x5d/0x3f0 [ 316.173571][ T6776] FAULT_INJECTION: forcing a failure. [ 316.173571][ T6776] name failslab, interval 1, probability 0, space 0, times 0 [ 316.174880][ T6764] ptlock_alloc+0x21/0x70 [ 316.174901][ T6764] pte_alloc_one+0x6c/0x230 [ 316.174941][ T6764] __pte_alloc+0x6d/0x260 [ 316.185283][ T6764] ? pmd_install+0x160/0x160 [ 316.186957][ T6764] copy_page_range+0x151e/0x3830 [ 316.188802][ T6764] ? mas_wr_modify+0x999/0x16d0 [ 316.190563][ T6764] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 316.192716][ T6764] ? mas_store+0x275/0x3a0 [ 316.194316][ T6764] ? handle_mm_fault+0x9f0/0x9f0 [ 316.196451][ T6764] ? up_write+0x1b4/0x520 [ 316.198342][ T6764] dup_mmap+0x10bc/0x19d0 [ 316.199935][ T6764] ? replace_mm_exe_file+0x4c0/0x4c0 [ 316.201920][ T6764] ? lockdep_hardirqs_on+0x7d/0x100 [ 316.203806][ T6764] ? mm_init+0xc7a/0x1030 [ 316.205434][ T6764] copy_process+0x6663/0x75c0 [ 316.207135][ T6764] ? pidfd_prepare+0x80/0x80 [ 316.208819][ T6764] ? find_held_lock+0x2d/0x110 [ 316.210749][ T6764] ? find_held_lock+0x2d/0x110 [ 316.212513][ T6764] kernel_clone+0xeb/0x890 [ 316.214121][ T6764] ? create_io_thread+0xe0/0xe0 [ 316.216105][ T6764] ? vfs_write+0x15c/0xd50 [ 316.218087][ T6764] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 316.220711][ T6764] ? wait_for_completion_io_timeout+0x20/0x20 [ 316.223468][ T6764] __do_sys_clone+0xba/0x100 [ 316.225544][ T6764] ? kernel_clone+0x890/0x890 [ 316.227748][ T6764] ? syscall_enter_from_user_mode+0x26/0x80 [ 316.230527][ T6764] do_syscall_64+0x39/0xb0 [ 316.232689][ T6764] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 316.235476][ T6764] RIP: 0033:0x7f469ba8c389 [ 316.237532][ T6764] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 316.246358][ T6764] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 316.250190][ T6764] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 316.253877][ T6764] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 316.257697][ T6764] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 316.261354][ T6764] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 316.265032][ T6764] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 316.268854][ T6764] [ 316.270319][ T6776] CPU: 2 PID: 6776 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 316.274202][ T6776] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 316.277481][ T6776] Call Trace: [ 316.278721][ T6776] [ 316.279829][ T6776] dump_stack_lvl+0x136/0x150 [ 316.281596][ T6776] should_fail_ex+0x4a3/0x5b0 [ 316.283346][ T6776] should_failslab+0x9/0x20 23:08:28 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 66) 23:08:28 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x282, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x48044) 23:08:28 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x4) [ 316.285066][ T6776] kmem_cache_alloc+0x5d/0x3f0 [ 316.287144][ T6776] __pmd_alloc+0xc3/0x5d0 [ 316.288780][ T6776] ? __pud_alloc+0xe4/0x180 [ 316.290516][ T6776] copy_page_range+0x22c1/0x3830 [ 316.292371][ T6776] ? mas_wr_modify+0x999/0x16d0 [ 316.294213][ T6776] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 316.296423][ T6776] ? mas_store+0x275/0x3a0 [ 316.298075][ T6776] ? handle_mm_fault+0x9f0/0x9f0 [ 316.299977][ T6776] ? down_write+0x14f/0x200 [ 316.301667][ T6776] dup_mmap+0x10bc/0x19d0 23:08:28 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x4) [ 316.303303][ T6776] ? replace_mm_exe_file+0x4c0/0x4c0 [ 316.305486][ T6776] ? lockdep_hardirqs_on+0x7d/0x100 23:08:28 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x282, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x48044) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x282, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x48044) (async) [ 316.307570][ T6776] ? mm_init+0xc7a/0x1030 [ 316.309562][ T6776] copy_process+0x6663/0x75c0 [ 316.311355][ T6776] ? pidfd_prepare+0x80/0x80 [ 316.313467][ T6776] ? __schedule+0xca2/0x5880 [ 316.315222][ T6776] kernel_clone+0xeb/0x890 [ 316.316970][ T6776] ? create_io_thread+0xe0/0xe0 [ 316.318815][ T6776] ? vfs_write+0x15c/0xd50 [ 316.320563][ T6776] ? preempt_schedule_irq+0x79/0x90 [ 316.322064][ T6784] FAULT_INJECTION: forcing a failure. [ 316.322064][ T6784] name failslab, interval 1, probability 0, space 0, times 0 [ 316.322526][ T6776] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 316.329731][ T6776] ? lockdep_hardirqs_on+0x7d/0x100 [ 316.331728][ T6776] __do_sys_clone+0xba/0x100 [ 316.333483][ T6776] ? kernel_clone+0x890/0x890 [ 316.335290][ T6776] ? syscall_enter_from_user_mode+0x26/0x80 [ 316.337524][ T6776] do_syscall_64+0x39/0xb0 [ 316.339232][ T6776] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 316.341500][ T6776] RIP: 0033:0x7f81ce88c389 [ 316.343204][ T6776] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 316.350567][ T6776] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 316.353840][ T6776] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 23:08:28 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x282, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x48044) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x282, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x48044) (async) [ 316.356984][ T6776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 316.360636][ T6776] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 316.364096][ T6776] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 316.367226][ T6776] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 316.370180][ T6776] [ 316.371379][ T6784] CPU: 1 PID: 6784 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 316.375128][ T6784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 316.378327][ T6784] Call Trace: [ 316.379554][ T6784] [ 316.380641][ T6784] dump_stack_lvl+0x136/0x150 [ 316.382353][ T6784] should_fail_ex+0x4a3/0x5b0 [ 316.384098][ T6784] should_failslab+0x9/0x20 23:08:28 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 65) 23:08:28 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) [ 316.385756][ T6784] kmem_cache_alloc+0x5d/0x3f0 [ 316.387697][ T6784] vm_area_dup+0x23/0x300 [ 316.389332][ T6784] dup_mmap+0x713/0x19d0 [ 316.390888][ T6784] ? replace_mm_exe_file+0x4c0/0x4c0 [ 316.392829][ T6784] ? lockdep_hardirqs_on+0x7d/0x100 [ 316.394708][ T6784] ? mm_init+0xc7a/0x1030 [ 316.396290][ T6784] copy_process+0x6663/0x75c0 [ 316.397988][ T6784] ? pidfd_prepare+0x80/0x80 [ 316.399615][ T6784] ? find_held_lock+0x2d/0x110 [ 316.401365][ T6784] ? find_held_lock+0x2d/0x110 [ 316.403098][ T6784] kernel_clone+0xeb/0x890 [ 316.404722][ T6784] ? create_io_thread+0xe0/0xe0 [ 316.406485][ T6784] ? vfs_write+0x15c/0xd50 [ 316.408125][ T6784] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 316.409203][ T6796] FAULT_INJECTION: forcing a failure. [ 316.409203][ T6796] name failslab, interval 1, probability 0, space 0, times 0 [ 316.410151][ T6784] ? wait_for_completion_io_timeout+0x20/0x20 [ 316.417684][ T6784] __do_sys_clone+0xba/0x100 [ 316.419398][ T6784] ? kernel_clone+0x890/0x890 [ 316.421193][ T6784] ? syscall_enter_from_user_mode+0x26/0x80 [ 316.423410][ T6784] do_syscall_64+0x39/0xb0 [ 316.425059][ T6784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 316.427205][ T6784] RIP: 0033:0x7f469ba8c389 [ 316.428844][ T6784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 316.435743][ T6784] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 316.438745][ T6784] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 316.441599][ T6784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 316.444441][ T6784] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 316.447284][ T6784] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 316.450148][ T6784] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 316.453018][ T6784] [ 316.454144][ T6796] CPU: 0 PID: 6796 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 316.458111][ T6796] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 316.461414][ T6796] Call Trace: [ 316.462624][ T6796] [ 316.463695][ T6796] dump_stack_lvl+0x136/0x150 [ 316.465400][ T6796] should_fail_ex+0x4a3/0x5b0 [ 316.467097][ T6796] should_failslab+0x9/0x20 [ 316.468748][ T6796] kmem_cache_alloc+0x5d/0x3f0 [ 316.470521][ T6796] ptlock_alloc+0x21/0x70 23:08:28 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 67) 23:08:28 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x1555e}]}, 0x68}, 0x1, 0x0, 0x0, 0x4021}, 0x20000000) 23:08:28 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) [ 316.472184][ T6796] pte_alloc_one+0x6c/0x230 [ 316.474625][ T6796] __pte_alloc+0x6d/0x260 [ 316.476459][ T6796] ? pmd_install+0x160/0x160 [ 316.478399][ T6796] copy_page_range+0x151e/0x3830 [ 316.480727][ T6796] ? mas_wr_modify+0x999/0x16d0 [ 316.482825][ T6796] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 316.485398][ T6796] ? mas_store+0x275/0x3a0 [ 316.487527][ T6796] ? handle_mm_fault+0x9f0/0x9f0 [ 316.489811][ T6796] ? up_write+0x1b4/0x520 [ 316.491765][ T6796] dup_mmap+0x10bc/0x19d0 [ 316.493591][ T6796] ? replace_mm_exe_file+0x4c0/0x4c0 [ 316.495831][ T6796] ? lockdep_hardirqs_on+0x7d/0x100 [ 316.498025][ T6796] ? mm_init+0xc7a/0x1030 [ 316.500196][ T6796] copy_process+0x6663/0x75c0 [ 316.502378][ T6796] ? pidfd_prepare+0x80/0x80 [ 316.504512][ T6796] ? find_held_lock+0x2d/0x110 [ 316.506596][ T6796] ? find_held_lock+0x2d/0x110 [ 316.508639][ T6796] kernel_clone+0xeb/0x890 [ 316.510435][ T6796] ? create_io_thread+0xe0/0xe0 [ 316.512376][ T6796] ? vfs_write+0x15c/0xd50 [ 316.514207][ T6796] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 316.516534][ T6796] ? wait_for_completion_io_timeout+0x20/0x20 [ 316.519213][ T6796] __do_sys_clone+0xba/0x100 [ 316.521281][ T6796] ? kernel_clone+0x890/0x890 [ 316.523203][ T6796] ? syscall_enter_from_user_mode+0x26/0x80 [ 316.525822][ T6796] do_syscall_64+0x39/0xb0 [ 316.527937][ T6796] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 316.530758][ T6796] RIP: 0033:0x7f81ce88c389 [ 316.532882][ T6796] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 316.540511][ T6796] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 316.544124][ T6796] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 316.547716][ T6796] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 316.551253][ T6796] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 316.554655][ T6796] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 316.558160][ T6796] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 316.561627][ T6796] [ 316.568472][ T6801] FAULT_INJECTION: forcing a failure. [ 316.568472][ T6801] name failslab, interval 1, probability 0, space 0, times 0 23:08:28 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 66) 23:08:28 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) 23:08:28 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) (async, rerun: 32) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x1555e}]}, 0x68}, 0x1, 0x0, 0x0, 0x4021}, 0x20000000) (rerun: 32) [ 316.574904][ T6801] CPU: 2 PID: 6801 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 316.579094][ T6801] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 316.582440][ T6801] Call Trace: [ 316.583678][ T6801] [ 316.584791][ T6801] dump_stack_lvl+0x136/0x150 [ 316.585645][ T6807] FAULT_INJECTION: forcing a failure. [ 316.585645][ T6807] name failslab, interval 1, probability 0, space 0, times 0 [ 316.586504][ T6801] should_fail_ex+0x4a3/0x5b0 [ 316.592863][ T6801] should_failslab+0x9/0x20 [ 316.594530][ T6801] kmem_cache_alloc+0x5d/0x3f0 23:08:28 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x1555e}]}, 0x68}, 0x1, 0x0, 0x0, 0x4021}, 0x20000000) [ 316.596293][ T6801] vm_area_dup+0x23/0x300 [ 316.598066][ T6801] dup_mmap+0x713/0x19d0 [ 316.599687][ T6801] ? replace_mm_exe_file+0x4c0/0x4c0 23:08:28 executing program 0: write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/13, 0xd, 0x5, 0x20, 0x1f, 0x74, 0x1ff}}, 0x120) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) [ 316.601707][ T6801] ? lockdep_hardirqs_on+0x7d/0x100 [ 316.603776][ T6801] ? mm_init+0xc7a/0x1030 [ 316.605460][ T6801] copy_process+0x6663/0x75c0 [ 316.607230][ T6801] ? pidfd_prepare+0x80/0x80 [ 316.609050][ T6801] ? find_held_lock+0x2d/0x110 [ 316.610820][ T6801] ? find_held_lock+0x2d/0x110 [ 316.612652][ T6801] kernel_clone+0xeb/0x890 [ 316.614344][ T6801] ? create_io_thread+0xe0/0xe0 [ 316.616511][ T6801] ? vfs_write+0x15c/0xd50 [ 316.618742][ T6801] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 316.621112][ T6801] ? wait_for_completion_io_timeout+0x20/0x20 [ 316.623407][ T6801] __do_sys_clone+0xba/0x100 [ 316.625445][ T6801] ? kernel_clone+0x890/0x890 [ 316.627515][ T6801] ? syscall_enter_from_user_mode+0x26/0x80 [ 316.630106][ T6801] do_syscall_64+0x39/0xb0 [ 316.632096][ T6801] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 316.634425][ T6801] RIP: 0033:0x7f469ba8c389 [ 316.636200][ T6801] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 316.643327][ T6801] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 316.646848][ T6801] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 316.650660][ T6801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 316.654569][ T6801] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 316.658110][ T6801] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 316.661397][ T6801] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 316.664654][ T6801] [ 316.666089][ T6807] CPU: 3 PID: 6807 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 316.670541][ T6807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 23:08:28 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 68) 23:08:28 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x12}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x44}}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="010027bd7000fddbdf25270000000a0001007770616e340000000c002d000203aaaaaaaaaaaa14003000a42a2887b4be4aaceb5d8ed2f0f4c596"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c001100", @ANYRES16=r3, @ANYBLOB="020029bd7000fedbdf250400000014000500ff01000000000000000000000000000108000c000300000008000c000100000008000c0003000000080002000500000014000600fe8000000000000000000000000000aa"], 0x5c}, 0x1, 0x0, 0x0, 0x400c4}, 0x80) 23:08:28 executing program 0: write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/13, 0xd, 0x5, 0x20, 0x1f, 0x74, 0x1ff}}, 0x120) (async, rerun: 32) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (rerun: 32) [ 316.674193][ T6807] Call Trace: [ 316.675896][ T6807] [ 316.677301][ T6807] dump_stack_lvl+0x136/0x150 [ 316.679476][ T6807] should_fail_ex+0x4a3/0x5b0 [ 316.681459][ T6807] should_failslab+0x9/0x20 [ 316.683313][ T6807] kmem_cache_alloc+0x5d/0x3f0 [ 316.685327][ T6807] vm_area_dup+0x55/0x300 [ 316.687163][ T6807] dup_mmap+0x713/0x19d0 [ 316.689014][ T6807] ? replace_mm_exe_file+0x4c0/0x4c0 [ 316.691238][ T6807] ? lockdep_hardirqs_on+0x7d/0x100 [ 316.693227][ T6807] ? mm_init+0xc7a/0x1030 [ 316.695161][ T6807] copy_process+0x6663/0x75c0 [ 316.696658][ T6824] FAULT_INJECTION: forcing a failure. [ 316.696658][ T6824] name failslab, interval 1, probability 0, space 0, times 0 [ 316.697304][ T6807] ? pidfd_prepare+0x80/0x80 [ 316.704787][ T6807] ? find_held_lock+0x2d/0x110 [ 316.707235][ T6807] ? find_held_lock+0x2d/0x110 [ 316.709505][ T6807] kernel_clone+0xeb/0x890 [ 316.711593][ T6807] ? create_io_thread+0xe0/0xe0 [ 316.713851][ T6807] ? vfs_write+0x15c/0xd50 [ 316.716037][ T6807] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 316.718585][ T6807] ? wait_for_completion_io_timeout+0x20/0x20 [ 316.721381][ T6807] __do_sys_clone+0xba/0x100 [ 316.723506][ T6807] ? kernel_clone+0x890/0x890 [ 316.725564][ T6807] ? syscall_enter_from_user_mode+0x26/0x80 [ 316.727794][ T6807] do_syscall_64+0x39/0xb0 [ 316.729517][ T6807] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 316.731769][ T6807] RIP: 0033:0x7f81ce88c389 [ 316.733521][ T6807] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 316.741349][ T6807] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 316.744780][ T6807] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 316.748356][ T6807] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 316.752058][ T6807] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 316.755215][ T6807] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 316.758544][ T6807] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 316.761821][ T6807] [ 316.763511][ T6824] CPU: 0 PID: 6824 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 316.767326][ T6824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 316.770655][ T6824] Call Trace: [ 316.771896][ T6824] [ 316.773022][ T6824] dump_stack_lvl+0x136/0x150 [ 316.774782][ T6824] should_fail_ex+0x4a3/0x5b0 [ 316.776564][ T6824] should_failslab+0x9/0x20 [ 316.778235][ T6824] kmem_cache_alloc+0x5d/0x3f0 [ 316.780146][ T6824] vm_area_dup+0x55/0x300 23:08:28 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 67) 23:08:28 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x12}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x44}}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="010027bd7000fddbdf25270000000a0001007770616e340000000c002d000203aaaaaaaaaaaa14003000a42a2887b4be4aaceb5d8ed2f0f4c596"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c001100", @ANYRES16=r3, @ANYBLOB="020029bd7000fedbdf250400000014000500ff01000000000000000000000000000108000c000300000008000c000100000008000c0003000000080002000500000014000600fe8000000000000000000000000000aa"], 0x5c}, 0x1, 0x0, 0x0, 0x400c4}, 0x80) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c001100", @ANYRES16=r3, @ANYBLOB="020029bd7000fedbdf250400000014000500ff01000000000000000000000000000108000c000300000008000c000100000008000c0003000000080002000500000014000600fe8000000000000000000000000000aa"], 0x5c}, 0x1, 0x0, 0x0, 0x400c4}, 0x80) 23:08:28 executing program 0: write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/13, 0xd, 0x5, 0x20, 0x1f, 0x74, 0x1ff}}, 0x120) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) [ 316.781715][ T6824] dup_mmap+0x713/0x19d0 [ 316.783560][ T6824] ? replace_mm_exe_file+0x4c0/0x4c0 [ 316.786209][ T6824] ? lockdep_hardirqs_on+0x7d/0x100 23:08:28 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) (async) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x12}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x44}}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="010027bd7000fddbdf25270000000a0001007770616e340000000c002d000203aaaaaaaaaaaa14003000a42a2887b4be4aaceb5d8ed2f0f4c596"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c001100", @ANYRES16=r3, @ANYBLOB="020029bd7000fedbdf250400000014000500ff01000000000000000000000000000108000c000300000008000c000100000008000c0003000000080002000500000014000600fe8000000000000000000000000000aa"], 0x5c}, 0x1, 0x0, 0x0, 0x400c4}, 0x80) [ 316.788695][ T6824] ? mm_init+0xc7a/0x1030 [ 316.790929][ T6824] copy_process+0x6663/0x75c0 [ 316.793238][ T6824] ? pidfd_prepare+0x80/0x80 [ 316.793534][ T6832] FAULT_INJECTION: forcing a failure. 23:08:28 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @mcast1, 0xfffff8b9}}, 0x24) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xc00) [ 316.793534][ T6832] name failslab, interval 1, probability 0, space 0, times 0 [ 316.795462][ T6824] ? find_held_lock+0x2d/0x110 [ 316.795490][ T6824] ? find_held_lock+0x2d/0x110 [ 316.795509][ T6824] kernel_clone+0xeb/0x890 [ 316.807623][ T6824] ? create_io_thread+0xe0/0xe0 [ 316.809935][ T6824] ? vfs_write+0x15c/0xd50 [ 316.812035][ T6824] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 316.814682][ T6824] ? wait_for_completion_io_timeout+0x20/0x20 [ 316.817514][ T6824] __do_sys_clone+0xba/0x100 [ 316.819740][ T6824] ? kernel_clone+0x890/0x890 [ 316.821991][ T6824] ? syscall_enter_from_user_mode+0x26/0x80 [ 316.824939][ T6824] do_syscall_64+0x39/0xb0 [ 316.827232][ T6824] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 316.830166][ T6824] RIP: 0033:0x7f469ba8c389 [ 316.832227][ T6824] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 316.841349][ T6824] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 316.845400][ T6824] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 316.848720][ T6824] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 316.852004][ T6824] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 316.855291][ T6824] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 316.858856][ T6824] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 316.862502][ T6824] [ 316.864044][ T6832] CPU: 3 PID: 6832 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 316.868959][ T6832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 316.872913][ T6832] Call Trace: [ 316.874374][ T6832] [ 316.875670][ T6832] dump_stack_lvl+0x136/0x150 [ 316.877734][ T6832] should_fail_ex+0x4a3/0x5b0 [ 316.879795][ T6832] should_failslab+0x9/0x20 [ 316.881568][ T6832] kmem_cache_alloc+0x5d/0x3f0 [ 316.883358][ T6832] vm_area_dup+0x23/0x300 [ 316.885068][ T6832] dup_mmap+0x713/0x19d0 [ 316.886615][ T6832] ? replace_mm_exe_file+0x4c0/0x4c0 [ 316.888560][ T6832] ? lockdep_hardirqs_on+0x7d/0x100 [ 316.890901][ T6832] ? mm_init+0xc7a/0x1030 [ 316.892874][ T6832] copy_process+0x6663/0x75c0 [ 316.894955][ T6832] ? pidfd_prepare+0x80/0x80 [ 316.896984][ T6832] ? find_held_lock+0x2d/0x110 [ 316.898953][ T6832] ? find_held_lock+0x2d/0x110 [ 316.901074][ T6832] kernel_clone+0xeb/0x890 [ 316.902715][ T6832] ? create_io_thread+0xe0/0xe0 [ 316.904938][ T6832] ? vfs_write+0x15c/0xd50 [ 316.907013][ T6832] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 316.909722][ T6832] ? wait_for_completion_io_timeout+0x20/0x20 [ 316.912402][ T6832] __do_sys_clone+0xba/0x100 [ 316.914422][ T6832] ? kernel_clone+0x890/0x890 [ 316.916274][ T6832] ? syscall_enter_from_user_mode+0x26/0x80 [ 316.918399][ T6832] do_syscall_64+0x39/0xb0 [ 316.920313][ T6832] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 316.922876][ T6832] RIP: 0033:0x7f81ce88c389 [ 316.924832][ T6832] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 316.933382][ T6832] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 316.936704][ T6832] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 316.939722][ T6832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 316.942852][ T6832] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 316.946118][ T6832] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 316.949916][ T6832] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 316.953313][ T6832] 23:08:28 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 69) 23:08:28 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x0, r0, 0x80000}) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000080)) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) 23:08:28 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @mcast1, 0xfffff8b9}}, 0x24) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xc00) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @mcast1, 0xfffff8b9}}, 0x24) (async) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xc00) (async) 23:08:28 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 68) [ 316.974881][ T6843] FAULT_INJECTION: forcing a failure. 23:08:29 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @mcast1, 0xfffff8b9}}, 0x24) (async) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xc00) [ 316.974881][ T6843] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:08:29 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x0, r0, 0x80000}) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000080)) (async) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) [ 316.981821][ T6843] CPU: 3 PID: 6843 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 316.986700][ T6849] FAULT_INJECTION: forcing a failure. [ 316.986700][ T6849] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 316.986741][ T6843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 316.996454][ T6843] Call Trace: [ 316.997983][ T6843] 23:08:29 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x9, 0xffffffffffffffff, 0x81fd23f544cc032f}) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x408000) ioctl$SNDRV_PCM_IOCTL_INFO(r1, 0x81204101, &(0x7f0000000200)) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000180), 0x35842, 0xc2) [ 316.999373][ T6843] dump_stack_lvl+0x136/0x150 [ 317.001679][ T6843] should_fail_ex+0x4a3/0x5b0 23:08:29 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x0, r0, 0x80000}) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000080)) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) [ 317.003863][ T6843] prepare_alloc_pages+0x178/0x570 [ 317.006696][ T6843] ? register_lock_class+0xbe/0x1120 [ 317.009369][ T6843] __alloc_pages+0x149/0x4a0 [ 317.011758][ T6843] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 317.014840][ T6843] ? print_usage_bug.part.0+0x660/0x660 [ 317.017331][ T6843] ? write_profile+0x450/0x450 [ 317.019449][ T6843] ? arch_stack_walk+0x97/0xf0 [ 317.021601][ T6843] ? __lock_acquire+0x1987/0x5f30 [ 317.023867][ T6843] alloc_pages+0x1aa/0x270 [ 317.025920][ T6843] pte_alloc_one+0x1a/0x230 [ 317.027986][ T6843] __pte_alloc+0x6d/0x260 [ 317.029956][ T6843] ? pmd_install+0x160/0x160 [ 317.032073][ T6843] copy_page_range+0x151e/0x3830 [ 317.034355][ T6843] ? mas_wr_modify+0x999/0x16d0 [ 317.036601][ T6843] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 317.039304][ T6843] ? mas_store+0x275/0x3a0 [ 317.041377][ T6843] ? handle_mm_fault+0x9f0/0x9f0 [ 317.043747][ T6843] ? up_write+0x1b4/0x520 [ 317.045792][ T6843] dup_mmap+0x10bc/0x19d0 [ 317.047772][ T6843] ? replace_mm_exe_file+0x4c0/0x4c0 [ 317.050205][ T6843] ? lockdep_hardirqs_on+0x7d/0x100 [ 317.052589][ T6843] ? mm_init+0xc7a/0x1030 [ 317.054562][ T6843] copy_process+0x6663/0x75c0 [ 317.056692][ T6843] ? pidfd_prepare+0x80/0x80 [ 317.058772][ T6843] ? find_held_lock+0x2d/0x110 [ 317.061073][ T6843] ? find_held_lock+0x2d/0x110 [ 317.063483][ T6843] kernel_clone+0xeb/0x890 [ 317.065600][ T6843] ? create_io_thread+0xe0/0xe0 [ 317.067845][ T6843] ? vfs_write+0x15c/0xd50 [ 317.069936][ T6843] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 317.072511][ T6843] ? wait_for_completion_io_timeout+0x20/0x20 [ 317.075182][ T6843] __do_sys_clone+0xba/0x100 [ 317.077027][ T6843] ? kernel_clone+0x890/0x890 [ 317.078912][ T6843] ? syscall_enter_from_user_mode+0x26/0x80 [ 317.081592][ T6843] do_syscall_64+0x39/0xb0 [ 317.083635][ T6843] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 317.086332][ T6843] RIP: 0033:0x7f469ba8c389 [ 317.088359][ T6843] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 317.096968][ T6843] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 317.100737][ T6843] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 317.104270][ T6843] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 317.107816][ T6843] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 317.111396][ T6843] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 317.114933][ T6843] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 317.118530][ T6843] [ 317.119966][ T6849] CPU: 0 PID: 6849 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 317.124226][ T6849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 317.127779][ T6849] Call Trace: [ 317.129233][ T6849] [ 317.130510][ T6849] dump_stack_lvl+0x136/0x150 [ 317.132742][ T6849] should_fail_ex+0x4a3/0x5b0 [ 317.135091][ T6849] prepare_alloc_pages+0x178/0x570 [ 317.137313][ T6849] ? register_lock_class+0xbe/0x1120 23:08:29 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 70) 23:08:29 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x9, 0xffffffffffffffff, 0x81fd23f544cc032f}) (async) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x408000) ioctl$SNDRV_PCM_IOCTL_INFO(r1, 0x81204101, &(0x7f0000000200)) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000180), 0x35842, 0xc2) 23:08:29 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='YF\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdf250200000014000600fe88000000000000000000000000010106000b00320000000800040003000000080008000000000008000800000000000800040000000000"], 0x50}}, 0xc00) [ 317.139479][ T6849] __alloc_pages+0x149/0x4a0 [ 317.141609][ T6849] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 317.144385][ T6849] ? print_usage_bug.part.0+0x660/0x660 [ 317.146681][ T6849] ? write_profile+0x450/0x450 [ 317.148918][ T6849] ? arch_stack_walk+0x97/0xf0 [ 317.151141][ T6849] ? __lock_acquire+0x1987/0x5f30 [ 317.153305][ T6849] alloc_pages+0x1aa/0x270 [ 317.155212][ T6849] pte_alloc_one+0x1a/0x230 [ 317.156912][ T6849] __pte_alloc+0x6d/0x260 [ 317.158496][ T6849] ? pmd_install+0x160/0x160 [ 317.160411][ T6849] copy_page_range+0x151e/0x3830 [ 317.162339][ T6849] ? mas_wr_modify+0x999/0x16d0 [ 317.164402][ T6849] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 317.167034][ T6849] ? mas_store+0x275/0x3a0 [ 317.169052][ T6849] ? handle_mm_fault+0x9f0/0x9f0 [ 317.170982][ T6864] FAULT_INJECTION: forcing a failure. [ 317.170982][ T6864] name failslab, interval 1, probability 0, space 0, times 0 [ 317.171219][ T6849] ? up_write+0x1b4/0x520 [ 317.178176][ T6849] dup_mmap+0x10bc/0x19d0 [ 317.179976][ T6849] ? replace_mm_exe_file+0x4c0/0x4c0 [ 317.182156][ T6849] ? lockdep_hardirqs_on+0x7d/0x100 [ 317.184392][ T6849] ? mm_init+0xc7a/0x1030 [ 317.186328][ T6849] copy_process+0x6663/0x75c0 [ 317.188287][ T6849] ? pidfd_prepare+0x80/0x80 [ 317.190187][ T6849] ? find_held_lock+0x2d/0x110 [ 317.192144][ T6849] ? find_held_lock+0x2d/0x110 [ 317.194089][ T6849] kernel_clone+0xeb/0x890 [ 317.195885][ T6849] ? create_io_thread+0xe0/0xe0 [ 317.197898][ T6849] ? vfs_write+0x15c/0xd50 [ 317.199763][ T6849] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 317.202167][ T6849] ? wait_for_completion_io_timeout+0x20/0x20 [ 317.204653][ T6849] __do_sys_clone+0xba/0x100 [ 317.206538][ T6849] ? kernel_clone+0x890/0x890 [ 317.208456][ T6849] ? syscall_enter_from_user_mode+0x26/0x80 [ 317.210828][ T6849] do_syscall_64+0x39/0xb0 [ 317.212634][ T6849] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 317.215022][ T6849] RIP: 0033:0x7f81ce88c389 [ 317.216862][ T6849] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 317.224596][ T6849] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 317.227912][ T6849] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 317.231104][ T6849] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 317.234297][ T6849] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 317.237480][ T6849] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 317.240693][ T6849] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 317.243612][ T6849] [ 317.246244][ T6864] CPU: 2 PID: 6864 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 317.250895][ T6864] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 317.255240][ T6864] Call Trace: 23:08:29 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 69) 23:08:29 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async, rerun: 64) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='YF\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdf250200000014000600fe88000000000000000000000000010106000b00320000000800040003000000080008000000000008000800000000000800040000000000"], 0x50}}, 0xc00) 23:08:29 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x9, 0xffffffffffffffff, 0x81fd23f544cc032f}) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x408000) ioctl$SNDRV_PCM_IOCTL_INFO(r1, 0x81204101, &(0x7f0000000200)) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000180), 0x35842, 0xc2) [ 317.256712][ T6864] [ 317.258221][ T6864] dump_stack_lvl+0x136/0x150 [ 317.260046][ T6864] should_fail_ex+0x4a3/0x5b0 [ 317.262018][ T6864] should_failslab+0x9/0x20 [ 317.264138][ T6864] kmem_cache_alloc+0x5d/0x3f0 [ 317.266362][ T6864] vm_area_dup+0x23/0x300 [ 317.268456][ T6864] dup_mmap+0x713/0x19d0 [ 317.270738][ T6864] ? replace_mm_exe_file+0x4c0/0x4c0 [ 317.273746][ T6864] ? lockdep_hardirqs_on+0x7d/0x100 [ 317.276556][ T6864] ? mm_init+0xc7a/0x1030 [ 317.278702][ T6864] copy_process+0x6663/0x75c0 [ 317.280593][ T6873] FAULT_INJECTION: forcing a failure. [ 317.280593][ T6873] name failslab, interval 1, probability 0, space 0, times 0 [ 317.280969][ T6864] ? pidfd_prepare+0x80/0x80 [ 317.289127][ T6864] ? find_held_lock+0x2d/0x110 23:08:29 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000040)={0xfffffffb, 0x6, 0x80000001, 0xc, 0x5}) [ 317.291372][ T6864] ? find_held_lock+0x2d/0x110 [ 317.293928][ T6864] kernel_clone+0xeb/0x890 23:08:29 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) (async) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='YF\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdf250200000014000600fe88000000000000000000000000010106000b00320000000800040003000000080008000000000008000800000000000800040000000000"], 0x50}}, 0xc00) [ 317.296111][ T6864] ? create_io_thread+0xe0/0xe0 [ 317.298722][ T6864] ? vfs_write+0x15c/0xd50 [ 317.300760][ T6864] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 317.303405][ T6864] ? wait_for_completion_io_timeout+0x20/0x20 [ 317.305698][ T6864] __do_sys_clone+0xba/0x100 [ 317.307448][ T6864] ? kernel_clone+0x890/0x890 [ 317.309426][ T6864] ? syscall_enter_from_user_mode+0x26/0x80 [ 317.312068][ T6864] do_syscall_64+0x39/0xb0 [ 317.314036][ T6864] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 317.316711][ T6864] RIP: 0033:0x7f469ba8c389 [ 317.318687][ T6864] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 317.327174][ T6864] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 317.330559][ T6864] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 317.333496][ T6864] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 317.336358][ T6864] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 317.339320][ T6864] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 317.342301][ T6864] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 317.345439][ T6864] [ 317.346556][ T6873] CPU: 1 PID: 6873 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 317.350420][ T6873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 317.353659][ T6873] Call Trace: [ 317.354883][ T6873] [ 317.355986][ T6873] dump_stack_lvl+0x136/0x150 [ 317.357707][ T6873] should_fail_ex+0x4a3/0x5b0 23:08:29 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 71) 23:08:29 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '[{\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xd042231316727321}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x8890) 23:08:29 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000040)={0xfffffffb, 0x6, 0x80000001, 0xc, 0x5}) [ 317.359500][ T6873] should_failslab+0x9/0x20 [ 317.361277][ T6873] kmem_cache_alloc+0x5d/0x3f0 [ 317.363096][ T6873] ptlock_alloc+0x21/0x70 [ 317.364733][ T6873] pte_alloc_one+0x6c/0x230 [ 317.366386][ T6873] __pte_alloc+0x6d/0x260 [ 317.367996][ T6873] ? pmd_install+0x160/0x160 [ 317.369790][ T6873] copy_page_range+0x151e/0x3830 [ 317.371662][ T6873] ? mas_wr_modify+0x999/0x16d0 [ 317.373508][ T6873] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 317.373558][ T6884] FAULT_INJECTION: forcing a failure. [ 317.373558][ T6884] name failslab, interval 1, probability 0, space 0, times 0 [ 317.375715][ T6873] ? mas_store+0x275/0x3a0 [ 317.375735][ T6873] ? handle_mm_fault+0x9f0/0x9f0 [ 317.375749][ T6873] ? up_write+0x1b4/0x520 [ 317.375759][ T6873] dup_mmap+0x10bc/0x19d0 [ 317.375772][ T6873] ? replace_mm_exe_file+0x4c0/0x4c0 [ 317.375784][ T6873] ? lockdep_hardirqs_on+0x7d/0x100 [ 317.391711][ T6873] ? mm_init+0xc7a/0x1030 [ 317.393364][ T6873] copy_process+0x6663/0x75c0 [ 317.395133][ T6873] ? pidfd_prepare+0x80/0x80 [ 317.396890][ T6873] ? find_held_lock+0x2d/0x110 [ 317.398740][ T6873] ? find_held_lock+0x2d/0x110 [ 317.400555][ T6873] kernel_clone+0xeb/0x890 [ 317.402268][ T6873] ? create_io_thread+0xe0/0xe0 [ 317.404099][ T6873] ? vfs_write+0x15c/0xd50 [ 317.405790][ T6873] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 317.407924][ T6873] ? wait_for_completion_io_timeout+0x20/0x20 [ 317.410233][ T6873] __do_sys_clone+0xba/0x100 [ 317.411980][ T6873] ? kernel_clone+0x890/0x890 [ 317.413840][ T6873] ? syscall_enter_from_user_mode+0x26/0x80 [ 317.416150][ T6873] do_syscall_64+0x39/0xb0 [ 317.417878][ T6873] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 317.420266][ T6873] RIP: 0033:0x7f81ce88c389 [ 317.422027][ T6873] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 317.429061][ T6873] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 317.432178][ T6873] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 317.435096][ T6873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 317.438094][ T6873] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 317.441682][ T6873] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 317.444607][ T6873] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 317.447464][ T6873] [ 317.448783][ T6884] CPU: 0 PID: 6884 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 317.453336][ T6884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 317.457246][ T6884] Call Trace: 23:08:29 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 70) 23:08:29 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000040)={0xfffffffb, 0x6, 0x80000001, 0xc, 0x5}) 23:08:29 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '[{\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xd042231316727321}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x8890) [ 317.458874][ T6884] [ 317.460379][ T6884] dump_stack_lvl+0x136/0x150 [ 317.462207][ T6884] should_fail_ex+0x4a3/0x5b0 [ 317.463970][ T6884] should_failslab+0x9/0x20 [ 317.465654][ T6884] kmem_cache_alloc+0x5d/0x3f0 [ 317.467383][ T6884] vm_area_dup+0x55/0x300 [ 317.468987][ T6884] dup_mmap+0x713/0x19d0 [ 317.470535][ T6884] ? replace_mm_exe_file+0x4c0/0x4c0 [ 317.472444][ T6884] ? lockdep_hardirqs_on+0x7d/0x100 [ 317.474373][ T6884] ? mm_init+0xc7a/0x1030 [ 317.476084][ T6884] copy_process+0x6663/0x75c0 [ 317.478066][ T6884] ? pidfd_prepare+0x80/0x80 [ 317.479965][ T6884] ? find_held_lock+0x2d/0x110 [ 317.482261][ T6884] ? find_held_lock+0x2d/0x110 23:08:29 executing program 0: r0 = add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="e055f8fafa8b455d5111996c864e66279257ca67a9cd14eca5b1b079167470c77cba051bbb1532c178899c48b4a8e894ff5394e1ddb5a74fec9d07f5257540595e30a4b4e4144350dec6c4a8238e1f40c96bf70a9d3ed73b2780c472882453bda8a84166604e2e2715a07021194f0226bde24f9a1d963bd5f166ae8b1c5c0ed63814dd1e24cfb6fea26363802bf52f4938608876ee8a423db61dd33b76d58ab8f49e02528ba01077ae2b03ba0b73c95c3cbe7becc183c3fbab8ab8bcdf75ff61afed17d8b62fb9d3221a2c286ad74ff3c0e025a8e0f3d83cbdf174708144", 0xde, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r0, 0x35, 0x1000}, &(0x7f00000001c0)={'enc=', 'oaep', ' hash=', {'sha224-avx2\x00'}}, &(0x7f0000000240)="074b2a66d431790aefc2f411b60270ac640767bc0da04fea29aaae3060588a9e36f8df5f26c6e312811e839f2b57a7cc245f297dad", &(0x7f0000000280)=""/4096) [ 317.484161][ T6893] FAULT_INJECTION: forcing a failure. [ 317.484161][ T6893] name failslab, interval 1, probability 0, space 0, times 0 [ 317.484350][ T6884] kernel_clone+0xeb/0x890 [ 317.492227][ T6884] ? create_io_thread+0xe0/0xe0 [ 317.494067][ T6884] ? vfs_write+0x15c/0xd50 [ 317.495604][ T6884] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 317.497616][ T6884] ? wait_for_completion_io_timeout+0x20/0x20 [ 317.500033][ T6884] __do_sys_clone+0xba/0x100 [ 317.501757][ T6884] ? kernel_clone+0x890/0x890 23:08:29 executing program 0: r0 = add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="e055f8fafa8b455d5111996c864e66279257ca67a9cd14eca5b1b079167470c77cba051bbb1532c178899c48b4a8e894ff5394e1ddb5a74fec9d07f5257540595e30a4b4e4144350dec6c4a8238e1f40c96bf70a9d3ed73b2780c472882453bda8a84166604e2e2715a07021194f0226bde24f9a1d963bd5f166ae8b1c5c0ed63814dd1e24cfb6fea26363802bf52f4938608876ee8a423db61dd33b76d58ab8f49e02528ba01077ae2b03ba0b73c95c3cbe7becc183c3fbab8ab8bcdf75ff61afed17d8b62fb9d3221a2c286ad74ff3c0e025a8e0f3d83cbdf174708144", 0xde, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r0, 0x35, 0x1000}, &(0x7f00000001c0)={'enc=', 'oaep', ' hash=', {'sha224-avx2\x00'}}, &(0x7f0000000240)="074b2a66d431790aefc2f411b60270ac640767bc0da04fea29aaae3060588a9e36f8df5f26c6e312811e839f2b57a7cc245f297dad", &(0x7f0000000280)=""/4096) [ 317.503615][ T6884] ? syscall_enter_from_user_mode+0x26/0x80 [ 317.506630][ T6884] do_syscall_64+0x39/0xb0 [ 317.508870][ T6884] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 317.511239][ T6884] RIP: 0033:0x7f469ba8c389 [ 317.513001][ T6884] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 317.520677][ T6884] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 317.524339][ T6884] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 317.527836][ T6884] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 317.531142][ T6884] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 317.534558][ T6884] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 317.537871][ T6884] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 317.541568][ T6884] [ 317.543077][ T6893] CPU: 1 PID: 6893 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 317.548040][ T6893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 317.552084][ T6893] Call Trace: [ 317.553643][ T6893] 23:08:29 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 72) 23:08:29 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '[{\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xd042231316727321}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x8890) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '[{\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xd042231316727321}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x8890) (async) 23:08:29 executing program 0: r0 = add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="e055f8fafa8b455d5111996c864e66279257ca67a9cd14eca5b1b079167470c77cba051bbb1532c178899c48b4a8e894ff5394e1ddb5a74fec9d07f5257540595e30a4b4e4144350dec6c4a8238e1f40c96bf70a9d3ed73b2780c472882453bda8a84166604e2e2715a07021194f0226bde24f9a1d963bd5f166ae8b1c5c0ed63814dd1e24cfb6fea26363802bf52f4938608876ee8a423db61dd33b76d58ab8f49e02528ba01077ae2b03ba0b73c95c3cbe7becc183c3fbab8ab8bcdf75ff61afed17d8b62fb9d3221a2c286ad74ff3c0e025a8e0f3d83cbdf174708144", 0xde, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r0, 0x35, 0x1000}, &(0x7f00000001c0)={'enc=', 'oaep', ' hash=', {'sha224-avx2\x00'}}, &(0x7f0000000240)="074b2a66d431790aefc2f411b60270ac640767bc0da04fea29aaae3060588a9e36f8df5f26c6e312811e839f2b57a7cc245f297dad", &(0x7f0000000280)=""/4096) [ 317.555000][ T6893] dump_stack_lvl+0x136/0x150 [ 317.557503][ T6893] should_fail_ex+0x4a3/0x5b0 [ 317.559571][ T6893] should_failslab+0x9/0x20 [ 317.561585][ T6893] kmem_cache_alloc+0x5d/0x3f0 [ 317.563586][ T6893] vm_area_dup+0x55/0x300 [ 317.565239][ T6893] dup_mmap+0x713/0x19d0 [ 317.566787][ T6893] ? replace_mm_exe_file+0x4c0/0x4c0 [ 317.568701][ T6893] ? lockdep_hardirqs_on+0x7d/0x100 [ 317.570712][ T6893] ? mm_init+0xc7a/0x1030 [ 317.572337][ T6893] copy_process+0x6663/0x75c0 [ 317.574075][ T6893] ? pidfd_prepare+0x80/0x80 [ 317.575761][ T6893] ? find_held_lock+0x2d/0x110 [ 317.577516][ T6893] ? find_held_lock+0x2d/0x110 [ 317.579284][ T6893] kernel_clone+0xeb/0x890 [ 317.581037][ T6893] ? create_io_thread+0xe0/0xe0 [ 317.582823][ T6893] ? vfs_write+0x15c/0xd50 [ 317.584559][ T6893] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 317.586450][ T6907] FAULT_INJECTION: forcing a failure. [ 317.586450][ T6907] name failslab, interval 1, probability 0, space 0, times 0 [ 317.586798][ T6893] ? wait_for_completion_io_timeout+0x20/0x20 [ 317.594517][ T6893] __do_sys_clone+0xba/0x100 [ 317.596540][ T6893] ? kernel_clone+0x890/0x890 [ 317.598580][ T6893] ? syscall_enter_from_user_mode+0x26/0x80 [ 317.601123][ T6893] do_syscall_64+0x39/0xb0 [ 317.603297][ T6893] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 317.606110][ T6893] RIP: 0033:0x7f81ce88c389 [ 317.608032][ T6893] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 317.616277][ T6893] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 317.620035][ T6893] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 317.623444][ T6893] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 317.626767][ T6893] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 317.629887][ T6893] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 317.633236][ T6893] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 317.637075][ T6893] [ 317.638637][ T6907] CPU: 0 PID: 6907 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 317.642534][ T6907] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 317.645717][ T6907] Call Trace: [ 317.646929][ T6907] [ 317.648019][ T6907] dump_stack_lvl+0x136/0x150 [ 317.649720][ T6907] should_fail_ex+0x4a3/0x5b0 [ 317.651445][ T6907] should_failslab+0x9/0x20 [ 317.653079][ T6907] kmem_cache_alloc+0x5d/0x3f0 [ 317.654809][ T6907] vm_area_dup+0x55/0x300 [ 317.656454][ T6907] dup_mmap+0x713/0x19d0 [ 317.658059][ T6907] ? replace_mm_exe_file+0x4c0/0x4c0 [ 317.660098][ T6907] ? lockdep_hardirqs_on+0x7d/0x100 [ 317.662208][ T6907] ? mm_init+0xc7a/0x1030 [ 317.663777][ T6907] copy_process+0x6663/0x75c0 [ 317.665496][ T6907] ? pidfd_prepare+0x80/0x80 [ 317.667161][ T6907] ? find_held_lock+0x2d/0x110 [ 317.668943][ T6907] ? find_held_lock+0x2d/0x110 [ 317.670762][ T6907] kernel_clone+0xeb/0x890 [ 317.672558][ T6907] ? create_io_thread+0xe0/0xe0 [ 317.674665][ T6907] ? vfs_write+0x15c/0xd50 [ 317.676691][ T6907] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 317.679083][ T6907] ? wait_for_completion_io_timeout+0x20/0x20 [ 317.681263][ T6907] __do_sys_clone+0xba/0x100 [ 317.682916][ T6907] ? kernel_clone+0x890/0x890 [ 317.684606][ T6907] ? syscall_enter_from_user_mode+0x26/0x80 [ 317.686703][ T6907] do_syscall_64+0x39/0xb0 [ 317.688310][ T6907] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 317.690438][ T6907] RIP: 0033:0x7f469ba8c389 [ 317.692075][ T6907] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 317.699170][ T6907] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 317.702268][ T6907] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 317.705185][ T6907] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 317.708140][ T6907] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 317.711071][ T6907] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 317.714132][ T6907] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 317.717397][ T6907] 23:08:29 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 71) 23:08:29 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 23:08:29 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x4100, 0x2a) 23:08:29 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 73) 23:08:29 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x4100, 0x2a) [ 317.736009][ T6913] FAULT_INJECTION: forcing a failure. [ 317.736009][ T6913] name failslab, interval 1, probability 0, space 0, times 0 23:08:29 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) [ 317.740649][ T6913] CPU: 0 PID: 6913 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 317.744342][ T6915] FAULT_INJECTION: forcing a failure. [ 317.744342][ T6915] name failslab, interval 1, probability 0, space 0, times 0 [ 317.745187][ T6913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 317.752971][ T6913] Call Trace: [ 317.754243][ T6913] 23:08:29 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) [ 317.755533][ T6913] dump_stack_lvl+0x136/0x150 [ 317.757841][ T6913] should_fail_ex+0x4a3/0x5b0 [ 317.759712][ T6913] should_failslab+0x9/0x20 [ 317.761523][ T6913] kmem_cache_alloc+0x5d/0x3f0 [ 317.763483][ T6913] vm_area_dup+0x23/0x300 23:08:29 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x4100, 0x2a) [ 317.765290][ T6913] dup_mmap+0x713/0x19d0 [ 317.767193][ T6913] ? replace_mm_exe_file+0x4c0/0x4c0 [ 317.769541][ T6913] ? lockdep_hardirqs_on+0x7d/0x100 [ 317.771901][ T6913] ? mm_init+0xc7a/0x1030 [ 317.773933][ T6913] copy_process+0x6663/0x75c0 [ 317.776217][ T6913] ? pidfd_prepare+0x80/0x80 [ 317.778446][ T6913] ? find_held_lock+0x2d/0x110 [ 317.780714][ T6913] ? find_held_lock+0x2d/0x110 [ 317.782930][ T6913] kernel_clone+0xeb/0x890 [ 317.785024][ T6913] ? create_io_thread+0xe0/0xe0 [ 317.787288][ T6913] ? vfs_write+0x15c/0xd50 [ 317.789541][ T6913] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 317.792510][ T6913] ? wait_for_completion_io_timeout+0x20/0x20 [ 317.795685][ T6913] __do_sys_clone+0xba/0x100 [ 317.797878][ T6913] ? kernel_clone+0x890/0x890 [ 317.800089][ T6913] ? syscall_enter_from_user_mode+0x26/0x80 [ 317.802622][ T6913] do_syscall_64+0x39/0xb0 [ 317.804704][ T6913] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 317.807496][ T6913] RIP: 0033:0x7f81ce88c389 [ 317.809626][ T6913] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 317.818683][ T6913] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 317.822582][ T6913] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 317.825965][ T6913] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 317.829072][ T6913] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 317.832212][ T6913] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 317.835318][ T6913] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 317.838371][ T6913] [ 317.839532][ T6915] CPU: 1 PID: 6915 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 317.844208][ T6915] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 317.848154][ T6915] Call Trace: [ 317.849660][ T6915] [ 317.850987][ T6915] dump_stack_lvl+0x136/0x150 23:08:29 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 72) 23:08:29 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0xde, 0x0, 0x10001, 0x40, 0x9, 0x44, "00f55d2f691a182eeb1c232311f8ab845a4d770c24fe715a117942cda19136f43947e64c7e1725a949d990d4c871c01490eb988ce4bbb49fde75ef06cea873af7136bfb59bd7158ad75b3ca9ab23cee3d8c8fc34286d1d8650f1f9c6497085c5595cb767492d51c5198b566188ef5b3dedb7105f1be0b309c0c18b71c3397f7c876ce0677024e36611fc98e3af2a8672cc924d3595b48e8692d7bc96a6b578d50584964d2c6d5909ed5f407288efc457c0db2000c324fb2d98d3e5928e38a8cf76170e220933ac6d0ad4637ec0253194f305c302000000644a82dd7453b0"}}, 0x1f6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000001900), 0x4) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) sendmsg$NLBL_MGMT_C_LISTDEF(r2, 0x0, 0xd7d18508f3d2c6da) 23:08:29 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000040)=0x3) [ 317.853104][ T6915] should_fail_ex+0x4a3/0x5b0 [ 317.855369][ T6915] should_failslab+0x9/0x20 [ 317.857416][ T6915] kmem_cache_alloc+0x5d/0x3f0 [ 317.859569][ T6915] vm_area_dup+0x23/0x300 [ 317.861531][ T6915] dup_mmap+0x713/0x19d0 [ 317.863253][ T6915] ? replace_mm_exe_file+0x4c0/0x4c0 [ 317.864094][ T6926] FAULT_INJECTION: forcing a failure. [ 317.864094][ T6926] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 317.865533][ T6915] ? lockdep_hardirqs_on+0x7d/0x100 [ 317.865565][ T6915] ? mm_init+0xc7a/0x1030 [ 317.875038][ T6915] copy_process+0x6663/0x75c0 [ 317.877191][ T6915] ? pidfd_prepare+0x80/0x80 [ 317.879293][ T6915] ? find_held_lock+0x2d/0x110 [ 317.881427][ T6915] ? find_held_lock+0x2d/0x110 [ 317.883558][ T6915] kernel_clone+0xeb/0x890 [ 317.885587][ T6915] ? create_io_thread+0xe0/0xe0 [ 317.887762][ T6915] ? vfs_write+0x15c/0xd50 [ 317.889875][ T6915] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 317.892564][ T6915] ? wait_for_completion_io_timeout+0x20/0x20 [ 317.895516][ T6915] __do_sys_clone+0xba/0x100 [ 317.897451][ T6915] ? kernel_clone+0x890/0x890 [ 317.899327][ T6915] ? syscall_enter_from_user_mode+0x26/0x80 [ 317.901889][ T6915] do_syscall_64+0x39/0xb0 [ 317.903884][ T6915] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 317.906572][ T6915] RIP: 0033:0x7f469ba8c389 [ 317.908624][ T6915] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 317.917053][ T6915] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 317.920182][ T6915] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 317.923634][ T6915] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 317.927137][ T6915] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 317.930668][ T6915] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 317.934243][ T6915] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 317.937923][ T6915] [ 317.939248][ T6926] CPU: 0 PID: 6926 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 317.943878][ T6926] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 317.947320][ T6926] Call Trace: [ 317.948848][ T6926] [ 317.950039][ T6926] dump_stack_lvl+0x136/0x150 [ 317.952163][ T6926] should_fail_ex+0x4a3/0x5b0 [ 317.954004][ T6926] prepare_alloc_pages+0x178/0x570 [ 317.956021][ T6926] __alloc_pages+0x149/0x4a0 23:08:29 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 74) 23:08:29 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000040)=0x3) [ 317.957726][ T6926] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 317.960659][ T6926] alloc_pages+0x1aa/0x270 [ 317.962288][ T6926] pte_alloc_one+0x1a/0x230 [ 317.963902][ T6926] __pte_alloc+0x6d/0x260 [ 317.965821][ T6926] ? pmd_install+0x160/0x160 [ 317.967704][ T6926] copy_page_range+0x151e/0x3830 [ 317.969747][ T6926] ? mas_wr_modify+0x332/0x16d0 [ 317.971789][ T6926] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 317.974245][ T6926] ? mas_store+0x275/0x3a0 [ 317.975947][ T6926] ? handle_mm_fault+0x9f0/0x9f0 [ 317.977891][ T6926] ? up_write+0x1b4/0x520 [ 317.979670][ T6926] dup_mmap+0x10bc/0x19d0 [ 317.981522][ T6926] ? replace_mm_exe_file+0x4c0/0x4c0 [ 317.983726][ T6926] ? lockdep_hardirqs_on+0x7d/0x100 [ 317.986016][ T6926] ? mm_init+0xc7a/0x1030 [ 317.988075][ T6926] copy_process+0x6663/0x75c0 [ 317.990308][ T6926] ? pidfd_prepare+0x80/0x80 [ 317.992512][ T6926] ? find_held_lock+0x2d/0x110 [ 317.994552][ T6926] ? find_held_lock+0x2d/0x110 [ 317.996352][ T6926] kernel_clone+0xeb/0x890 [ 317.998034][ T6926] ? create_io_thread+0xe0/0xe0 [ 317.999954][ T6926] ? vfs_write+0x15c/0xd50 [ 318.001654][ T6926] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 318.003805][ T6926] ? wait_for_completion_io_timeout+0x20/0x20 [ 318.006294][ T6926] __do_sys_clone+0xba/0x100 [ 318.008121][ T6926] ? kernel_clone+0x890/0x890 [ 318.009914][ T6926] ? syscall_enter_from_user_mode+0x26/0x80 [ 318.012187][ T6926] do_syscall_64+0x39/0xb0 [ 318.013821][ T6926] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 318.016260][ T6926] RIP: 0033:0x7f81ce88c389 [ 318.018102][ T6926] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 318.026519][ T6926] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 318.030314][ T6926] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 318.033621][ T6926] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 318.036757][ T6926] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 318.040132][ T6926] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 318.043384][ T6926] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 318.046789][ T6926] 23:08:30 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 73) [ 319.488165][ T8] hid (null): unknown global tag 0x2f [ 319.490230][ T8] hid (null): global environment stack underflow [ 319.492505][ T8] hid (null): unknown global tag 0xc [ 319.494870][ T8] hid (null): report_id 1885855852 is invalid [ 319.495124][ T6933] FAULT_INJECTION: forcing a failure. [ 319.495124][ T6933] name failslab, interval 1, probability 0, space 0, times 0 [ 319.497116][ T8] hid (null): unknown global tag 0xd 23:08:31 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000040)=0x3) (async) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000040)=0x3) [ 319.501373][ T6933] CPU: 3 PID: 6933 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 319.503605][ T8] hid (null): unknown global tag 0xd [ 319.507102][ T6933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 319.507352][ T6937] FAULT_INJECTION: forcing a failure. [ 319.507352][ T6937] name failslab, interval 1, probability 0, space 0, times 0 [ 319.509022][ T8] hid (null): report_id 0 is invalid 23:08:31 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x90000, 0x0) [ 319.512066][ T6933] Call Trace: [ 319.512073][ T6933] [ 319.516634][ T8] hid (null): unknown global tag 0xc [ 319.518378][ T6933] dump_stack_lvl+0x136/0x150 [ 319.519798][ T8] hid (null): bogus close delimiter [ 319.520813][ T6933] should_fail_ex+0x4a3/0x5b0 [ 319.523139][ T8] hid (null): unknown global tag 0xd [ 319.524481][ T6933] should_failslab+0x9/0x20 [ 319.531281][ T6933] kmem_cache_alloc+0x5d/0x3f0 23:08:31 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x90000, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x90000, 0x0) (async) [ 319.531844][ T8] hid-generic 0000:10001:0040.0002: unknown main item tag 0x0 [ 319.532917][ T6933] ptlock_alloc+0x21/0x70 [ 319.532935][ T6933] pte_alloc_one+0x6c/0x230 [ 319.532950][ T6933] __pte_alloc+0x6d/0x260 [ 319.532962][ T6933] ? pmd_install+0x160/0x160 [ 319.532974][ T6933] copy_page_range+0x151e/0x3830 [ 319.536628][ T8] hid-generic 0000:10001:0040.0002: unexpected long global item [ 319.537524][ T6933] ? mas_wr_modify+0x332/0x16d0 [ 319.539499][ T8] hid-generic: probe of 0000:10001:0040.0002 failed with error -22 [ 319.540673][ T6933] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 319.552831][ T6933] ? mas_store+0x275/0x3a0 [ 319.554331][ T6933] ? handle_mm_fault+0x9f0/0x9f0 [ 319.556006][ T6933] ? up_write+0x1b4/0x520 [ 319.557456][ T6933] dup_mmap+0x10bc/0x19d0 23:08:31 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0xde, 0x0, 0x10001, 0x40, 0x9, 0x44, "00f55d2f691a182eeb1c232311f8ab845a4d770c24fe715a117942cda19136f43947e64c7e1725a949d990d4c871c01490eb988ce4bbb49fde75ef06cea873af7136bfb59bd7158ad75b3ca9ab23cee3d8c8fc34286d1d8650f1f9c6497085c5595cb767492d51c5198b566188ef5b3dedb7105f1be0b309c0c18b71c3397f7c876ce0677024e36611fc98e3af2a8672cc924d3595b48e8692d7bc96a6b578d50584964d2c6d5909ed5f407288efc457c0db2000c324fb2d98d3e5928e38a8cf76170e220933ac6d0ad4637ec0253194f305c302000000644a82dd7453b0"}}, 0x1f6) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000001900), 0x4) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) (async, rerun: 32) sendmsg$NLBL_MGMT_C_LISTDEF(r2, 0x0, 0xd7d18508f3d2c6da) (rerun: 32) 23:08:31 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x90000, 0x0) [ 319.558938][ T6933] ? replace_mm_exe_file+0x4c0/0x4c0 [ 319.560910][ T6933] ? lockdep_hardirqs_on+0x7d/0x100 [ 319.562672][ T6933] ? mm_init+0xc7a/0x1030 [ 319.564147][ T6933] copy_process+0x6663/0x75c0 [ 319.565774][ T6933] ? pidfd_prepare+0x80/0x80 [ 319.567343][ T6933] ? find_held_lock+0x2d/0x110 [ 319.568966][ T6933] ? find_held_lock+0x2d/0x110 [ 319.570719][ T6933] kernel_clone+0xeb/0x890 [ 319.571374][ T5195] hid (null): unknown global tag 0x2f [ 319.572400][ T6933] ? create_io_thread+0xe0/0xe0 [ 319.572419][ T6933] ? vfs_write+0x15c/0xd50 [ 319.572430][ T6933] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 319.572444][ T6933] ? wait_for_completion_io_timeout+0x20/0x20 [ 319.572457][ T6933] __do_sys_clone+0xba/0x100 [ 319.574967][ T5195] hid (null): global environment stack underflow [ 319.576949][ T6933] ? kernel_clone+0x890/0x890 [ 319.578831][ T5195] hid (null): unknown global tag 0xc [ 319.580722][ T6933] ? syscall_enter_from_user_mode+0x26/0x80 [ 319.583385][ T5195] hid (null): report_id 1885855852 is invalid [ 319.584885][ T6933] do_syscall_64+0x39/0xb0 [ 319.588444][ T5195] hid (null): unknown global tag 0xd [ 319.589131][ T6933] entry_SYSCALL_64_after_hwframe+0x63/0xcd 23:08:31 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 75) 23:08:31 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) write$damon_schemes(r0, &(0x7f0000000040)={0xffffffffffff8001, 0x0, 0x20, 0x20, 0x8fc, 0x1, 0x37c2}, 0x66) [ 319.591344][ T5195] hid (null): unknown global tag 0xd [ 319.593402][ T6933] RIP: 0033:0x7f469ba8c389 [ 319.593419][ T6933] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 319.593430][ T6933] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 319.593442][ T6933] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 319.593449][ T6933] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 319.593456][ T6933] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 319.593462][ T6933] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 23:08:31 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 74) 23:08:31 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) write$damon_schemes(r0, &(0x7f0000000040)={0xffffffffffff8001, 0x0, 0x20, 0x20, 0x8fc, 0x1, 0x37c2}, 0x66) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) write$damon_schemes(r0, &(0x7f0000000040)={0xffffffffffff8001, 0x0, 0x20, 0x20, 0x8fc, 0x1, 0x37c2}, 0x66) (async) 23:08:31 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 76) [ 319.593469][ T6933] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 319.593477][ T6933] [ 319.593483][ T6937] CPU: 0 PID: 6937 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 319.593499][ T6937] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 319.593506][ T6937] Call Trace: 23:08:31 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) write$damon_schemes(r0, &(0x7f0000000040)={0xffffffffffff8001, 0x0, 0x20, 0x20, 0x8fc, 0x1, 0x37c2}, 0x66) [ 319.593510][ T6937] [ 319.593513][ T6937] dump_stack_lvl+0x136/0x150 [ 319.593529][ T6937] should_fail_ex+0x4a3/0x5b0 [ 319.593546][ T6937] should_failslab+0x9/0x20 [ 319.593577][ T6937] kmem_cache_alloc+0x5d/0x3f0 [ 319.593594][ T6937] vm_area_dup+0x23/0x300 [ 319.593606][ T6937] dup_mmap+0x713/0x19d0 [ 319.593618][ T6937] ? replace_mm_exe_file+0x4c0/0x4c0 [ 319.593631][ T6937] ? lockdep_hardirqs_on+0x7d/0x100 [ 319.593644][ T6937] ? mm_init+0xc7a/0x1030 [ 319.593656][ T6937] copy_process+0x6663/0x75c0 [ 319.603407][ T5195] hid (null): report_id 0 is invalid [ 319.604630][ T6937] ? pidfd_prepare+0x80/0x80 [ 319.610726][ T5195] hid (null): unknown global tag 0xc [ 319.613409][ T6937] ? find_held_lock+0x2d/0x110 [ 319.613428][ T6937] ? find_held_lock+0x2d/0x110 [ 319.613439][ T6937] kernel_clone+0xeb/0x890 [ 319.613452][ T6937] ? create_io_thread+0xe0/0xe0 [ 319.613464][ T6937] ? vfs_write+0x15c/0xd50 [ 319.613475][ T6937] ? __mutex_unlock_slowpath+0x157/0x5e0 23:08:31 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0xde, 0x0, 0x10001, 0x40, 0x9, 0x44, "00f55d2f691a182eeb1c232311f8ab845a4d770c24fe715a117942cda19136f43947e64c7e1725a949d990d4c871c01490eb988ce4bbb49fde75ef06cea873af7136bfb59bd7158ad75b3ca9ab23cee3d8c8fc34286d1d8650f1f9c6497085c5595cb767492d51c5198b566188ef5b3dedb7105f1be0b309c0c18b71c3397f7c876ce0677024e36611fc98e3af2a8672cc924d3595b48e8692d7bc96a6b578d50584964d2c6d5909ed5f407288efc457c0db2000c324fb2d98d3e5928e38a8cf76170e220933ac6d0ad4637ec0253194f305c302000000644a82dd7453b0"}}, 0x1f6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000001900), 0x4) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) sendmsg$NLBL_MGMT_C_LISTDEF(r2, 0x0, 0xd7d18508f3d2c6da) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) write$UHID_CREATE2(r1, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0xde, 0x0, 0x10001, 0x40, 0x9, 0x44, "00f55d2f691a182eeb1c232311f8ab845a4d770c24fe715a117942cda19136f43947e64c7e1725a949d990d4c871c01490eb988ce4bbb49fde75ef06cea873af7136bfb59bd7158ad75b3ca9ab23cee3d8c8fc34286d1d8650f1f9c6497085c5595cb767492d51c5198b566188ef5b3dedb7105f1be0b309c0c18b71c3397f7c876ce0677024e36611fc98e3af2a8672cc924d3595b48e8692d7bc96a6b578d50584964d2c6d5909ed5f407288efc457c0db2000c324fb2d98d3e5928e38a8cf76170e220933ac6d0ad4637ec0253194f305c302000000644a82dd7453b0"}}, 0x1f6) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000001900), 0x4) (async) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) (async) sendmsg$NLBL_MGMT_C_LISTDEF(r2, 0x0, 0xd7d18508f3d2c6da) (async) 23:08:31 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x2) write$UHID_INPUT2(r0, &(0x7f0000000080)={0xc, {0xbd, "a81bfe0c2effe67d09b316b775495441b8fd1caa3904f2aa6c15c8b999644aaff1c0a03dc2ca9735b2b59e2e89e7f6fa2a2c111e43932357757440a6ecf4c313bd4bb64731c08e412b5b2dbcccf5e357bc735047634530a6278f83970683be0c01ac797307199c8581e564017dfbb406070a27020255216412f7eced1b1aa271a4d3b83f957ee062cdce8cc30db30f0073d184310f143f85f76eb240059a00e8781d65cf14855a1787153eff687c8be45768b37e54469b6ed4115f8a50"}}, 0xc3) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) 23:08:31 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 77) [ 319.613490][ T6937] ? wait_for_completion_io_timeout+0x20/0x20 [ 319.613502][ T6937] __do_sys_clone+0xba/0x100 [ 319.613514][ T6937] ? kernel_clone+0x890/0x890 [ 319.613526][ T6937] ? syscall_enter_from_user_mode+0x26/0x80 [ 319.613540][ T6937] do_syscall_64+0x39/0xb0 [ 319.613549][ T6937] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 319.613566][ T6937] RIP: 0033:0x7f81ce88c389 [ 319.613575][ T6937] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 23:08:31 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x2) write$UHID_INPUT2(r0, &(0x7f0000000080)={0xc, {0xbd, "a81bfe0c2effe67d09b316b775495441b8fd1caa3904f2aa6c15c8b999644aaff1c0a03dc2ca9735b2b59e2e89e7f6fa2a2c111e43932357757440a6ecf4c313bd4bb64731c08e412b5b2dbcccf5e357bc735047634530a6278f83970683be0c01ac797307199c8581e564017dfbb406070a27020255216412f7eced1b1aa271a4d3b83f957ee062cdce8cc30db30f0073d184310f143f85f76eb240059a00e8781d65cf14855a1787153eff687c8be45768b37e54469b6ed4115f8a50"}}, 0xc3) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x2) (async) write$UHID_INPUT2(r0, &(0x7f0000000080)={0xc, {0xbd, "a81bfe0c2effe67d09b316b775495441b8fd1caa3904f2aa6c15c8b999644aaff1c0a03dc2ca9735b2b59e2e89e7f6fa2a2c111e43932357757440a6ecf4c313bd4bb64731c08e412b5b2dbcccf5e357bc735047634530a6278f83970683be0c01ac797307199c8581e564017dfbb406070a27020255216412f7eced1b1aa271a4d3b83f957ee062cdce8cc30db30f0073d184310f143f85f76eb240059a00e8781d65cf14855a1787153eff687c8be45768b37e54469b6ed4115f8a50"}}, 0xc3) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) [ 319.613585][ T6937] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 319.613597][ T6937] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 319.613604][ T6937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 319.613610][ T6937] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 319.613617][ T6937] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 319.613623][ T6937] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 319.613631][ T6937] [ 319.645555][ T6962] FAULT_INJECTION: forcing a failure. [ 319.645555][ T6962] name failslab, interval 1, probability 0, space 0, times 0 [ 319.648374][ T5195] hid (null): bogus close delimiter [ 319.649561][ T6962] CPU: 0 PID: 6962 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 319.651532][ T5195] hid (null): unknown global tag 0xd [ 319.653272][ T6962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 319.653282][ T6962] Call Trace: [ 319.653286][ T6962] [ 319.653290][ T6962] dump_stack_lvl+0x136/0x150 [ 319.653305][ T6962] should_fail_ex+0x4a3/0x5b0 [ 319.653321][ T6962] should_failslab+0x9/0x20 [ 319.653335][ T6962] kmem_cache_alloc+0x5d/0x3f0 [ 319.653351][ T6962] vm_area_dup+0x23/0x300 [ 319.653363][ T6962] dup_mmap+0x713/0x19d0 [ 319.653375][ T6962] ? replace_mm_exe_file+0x4c0/0x4c0 [ 319.658335][ T5195] hid-generic 0000:10001:0040.0003: unknown main item tag 0x0 [ 319.658593][ T6962] ? lockdep_hardirqs_on+0x7d/0x100 [ 319.658616][ T6962] ? mm_init+0xc7a/0x1030 [ 319.660922][ T5195] hid-generic 0000:10001:0040.0003: unexpected long global item [ 319.663218][ T6962] copy_process+0x6663/0x75c0 [ 319.663254][ T6962] ? pidfd_prepare+0x80/0x80 [ 319.663278][ T6962] ? find_held_lock+0x2d/0x110 [ 319.663300][ T6962] ? find_held_lock+0x2d/0x110 [ 319.666215][ T5195] hid-generic: probe of 0000:10001:0040.0003 failed with error -22 23:08:31 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 75) 23:08:31 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x2) (async) write$UHID_INPUT2(r0, &(0x7f0000000080)={0xc, {0xbd, "a81bfe0c2effe67d09b316b775495441b8fd1caa3904f2aa6c15c8b999644aaff1c0a03dc2ca9735b2b59e2e89e7f6fa2a2c111e43932357757440a6ecf4c313bd4bb64731c08e412b5b2dbcccf5e357bc735047634530a6278f83970683be0c01ac797307199c8581e564017dfbb406070a27020255216412f7eced1b1aa271a4d3b83f957ee062cdce8cc30db30f0073d184310f143f85f76eb240059a00e8781d65cf14855a1787153eff687c8be45768b37e54469b6ed4115f8a50"}}, 0xc3) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) [ 319.667115][ T6962] kernel_clone+0xeb/0x890 [ 319.695285][ T6971] FAULT_INJECTION: forcing a failure. [ 319.695285][ T6971] name failslab, interval 1, probability 0, space 0, times 0 [ 319.695956][ T6962] ? create_io_thread+0xe0/0xe0 [ 319.698316][ T28] hid (null): unknown global tag 0x2f [ 319.705251][ T6962] ? vfs_write+0x15c/0xd50 23:08:31 executing program 0: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x2, 0x1, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x1, 0x40, 0x6, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1cc, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r0}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2f}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xf566}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) [ 319.705270][ T6962] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 319.705284][ T6962] ? wait_for_completion_io_timeout+0x20/0x20 [ 319.705296][ T6962] __do_sys_clone+0xba/0x100 [ 319.705309][ T6962] ? kernel_clone+0x890/0x890 [ 319.705321][ T6962] ? syscall_enter_from_user_mode+0x26/0x80 [ 319.705335][ T6962] do_syscall_64+0x39/0xb0 [ 319.705344][ T6962] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 319.705361][ T6962] RIP: 0033:0x7f81ce88c389 23:08:31 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 76) [ 319.709131][ T28] hid (null): global environment stack underflow [ 319.712126][ T6962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 319.729368][ T28] hid (null): unknown global tag 0xc [ 319.732450][ T6962] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 319.735316][ T28] hid (null): report_id 1885855852 is invalid [ 319.738876][ T6962] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 319.740969][ T28] hid (null): unknown global tag 0xd [ 319.745075][ T6962] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 319.745094][ T6962] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 319.745107][ T6962] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 319.745118][ T6962] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 319.745135][ T6962] [ 319.745189][ T6971] CPU: 3 PID: 6971 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 319.747366][ T28] hid (null): unknown global tag 0xd [ 319.748089][ T6971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 319.748102][ T6971] Call Trace: [ 319.748106][ T6971] [ 319.748110][ T6971] dump_stack_lvl+0x136/0x150 [ 319.750374][ T28] hid (null): report_id 0 is invalid [ 319.752723][ T6971] should_fail_ex+0x4a3/0x5b0 [ 319.755294][ T28] hid (null): unknown global tag 0xc [ 319.757185][ T6971] should_failslab+0x9/0x20 [ 319.759007][ T28] hid (null): bogus close delimiter [ 319.760720][ T6971] kmem_cache_alloc+0x5d/0x3f0 [ 319.763437][ T28] hid (null): unknown global tag 0xd [ 319.766217][ T6971] ptlock_alloc+0x21/0x70 [ 319.773105][ T28] hid-generic 0000:10001:0040.0004: unknown main item tag 0x0 [ 319.773208][ T6971] pte_alloc_one+0x6c/0x230 [ 319.775439][ T28] hid-generic 0000:10001:0040.0004: unexpected long global item [ 319.777228][ T6971] __pte_alloc+0x6d/0x260 [ 319.779648][ T28] hid-generic: probe of 0000:10001:0040.0004 failed with error -22 [ 319.781648][ T6971] ? pmd_install+0x160/0x160 [ 319.781676][ T6971] copy_page_range+0x151e/0x3830 [ 319.901395][ T6971] ? mas_wr_modify+0x332/0x16d0 [ 319.903685][ T6971] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 319.906258][ T6971] ? mas_store+0x275/0x3a0 [ 319.908210][ T6971] ? handle_mm_fault+0x9f0/0x9f0 [ 319.910349][ T6971] ? up_write+0x1b4/0x520 [ 319.912252][ T6971] dup_mmap+0x10bc/0x19d0 [ 319.914182][ T6971] ? replace_mm_exe_file+0x4c0/0x4c0 [ 319.916429][ T6971] ? lockdep_hardirqs_on+0x7d/0x100 [ 319.918798][ T6971] ? mm_init+0xc7a/0x1030 [ 319.920759][ T6971] copy_process+0x6663/0x75c0 [ 319.922806][ T6971] ? pidfd_prepare+0x80/0x80 [ 319.924848][ T6971] ? find_held_lock+0x2d/0x110 [ 319.927002][ T6971] ? find_held_lock+0x2d/0x110 [ 319.929115][ T6971] kernel_clone+0xeb/0x890 [ 319.931122][ T6971] ? create_io_thread+0xe0/0xe0 [ 319.933347][ T6971] ? vfs_write+0x15c/0xd50 [ 319.935298][ T6971] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 319.937724][ T6971] ? wait_for_completion_io_timeout+0x20/0x20 [ 319.940048][ T6971] __do_sys_clone+0xba/0x100 [ 319.942052][ T6971] ? kernel_clone+0x890/0x890 [ 319.944124][ T6971] ? syscall_enter_from_user_mode+0x26/0x80 [ 319.946759][ T6971] do_syscall_64+0x39/0xb0 [ 319.948720][ T6971] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 319.951388][ T6971] RIP: 0033:0x7f469ba8c389 [ 319.953489][ T6971] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 319.962217][ T6971] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 319.966097][ T6971] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 319.969758][ T6971] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 319.973389][ T6971] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 319.976933][ T6971] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 319.980468][ T6971] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 319.984042][ T6971] 23:08:32 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000200)={0x0, "5a90cda0e920cba71d09b9dbcc5b3f201578ea06724f9551a081aa3b6b2fb8db8098f5b2cb08cb4e349fbc36ab40c1ce07109e6cf60095eb3e11c0af30528707"}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000280)="ff", 0x1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000)={r0, 0x3f, 0xec}, &(0x7f0000000040)={'enc=', 'raw', ' hash=', {'sha3-256\x00'}}, &(0x7f00000000c0)="a2afaf2cad9e3e7b373f8b0f9843255ab1c206ea05a3fe6e5d48f994c1312aee36e277a2a6eb21d5c07ea3802c55faeb1e415ed431a9fe3a9e291885c4bde7", &(0x7f0000000100)=""/236) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "d73c58823d5df01aee51ef9be187f323aab210a22d7e618704b25b37fe663a977787000439df4f04b109be685631eae913328241c8cfd6b4e6a0143886eb04b6", 0x35}, 0x48, 0xfffffffffffffffd) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) 23:08:32 executing program 0: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x2, 0x1, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x1, 0x40, 0x6, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1cc, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r0}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2f}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xf566}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) 23:08:32 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 78) 23:08:32 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 77) 23:08:32 executing program 0: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x2, 0x1, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x1, 0x40, 0x6, 0x4}}) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1cc, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r0}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2f}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xf566}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) 23:08:32 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000200)={0x0, "5a90cda0e920cba71d09b9dbcc5b3f201578ea06724f9551a081aa3b6b2fb8db8098f5b2cb08cb4e349fbc36ab40c1ce07109e6cf60095eb3e11c0af30528707"}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000280)="ff", 0x1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000)={r0, 0x3f, 0xec}, &(0x7f0000000040)={'enc=', 'raw', ' hash=', {'sha3-256\x00'}}, &(0x7f00000000c0)="a2afaf2cad9e3e7b373f8b0f9843255ab1c206ea05a3fe6e5d48f994c1312aee36e277a2a6eb21d5c07ea3802c55faeb1e415ed431a9fe3a9e291885c4bde7", &(0x7f0000000100)=""/236) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "d73c58823d5df01aee51ef9be187f323aab210a22d7e618704b25b37fe663a977787000439df4f04b109be685631eae913328241c8cfd6b4e6a0143886eb04b6", 0x35}, 0x48, 0xfffffffffffffffd) (async) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) [ 320.014810][ T7003] FAULT_INJECTION: forcing a failure. 23:08:32 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 78) [ 320.014810][ T7003] name failslab, interval 1, probability 0, space 0, times 0 [ 320.020787][ T7003] CPU: 3 PID: 7003 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 320.025528][ T7003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 23:08:32 executing program 0: request_key(&(0x7f0000000040)='blacklist\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='\x00', 0xffffffffffffffff) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) [ 320.029723][ T7003] Call Trace: 23:08:32 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000200)={0x0, "5a90cda0e920cba71d09b9dbcc5b3f201578ea06724f9551a081aa3b6b2fb8db8098f5b2cb08cb4e349fbc36ab40c1ce07109e6cf60095eb3e11c0af30528707"}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000280)="ff", 0x1) (async, rerun: 32) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000)={r0, 0x3f, 0xec}, &(0x7f0000000040)={'enc=', 'raw', ' hash=', {'sha3-256\x00'}}, &(0x7f00000000c0)="a2afaf2cad9e3e7b373f8b0f9843255ab1c206ea05a3fe6e5d48f994c1312aee36e277a2a6eb21d5c07ea3802c55faeb1e415ed431a9fe3a9e291885c4bde7", &(0x7f0000000100)=""/236) (async, rerun: 32) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "d73c58823d5df01aee51ef9be187f323aab210a22d7e618704b25b37fe663a977787000439df4f04b109be685631eae913328241c8cfd6b4e6a0143886eb04b6", 0x35}, 0x48, 0xfffffffffffffffd) (async) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) [ 320.031534][ T7003] [ 320.033310][ T7003] dump_stack_lvl+0x136/0x150 [ 320.035619][ T7003] should_fail_ex+0x4a3/0x5b0 [ 320.037824][ T7003] should_failslab+0x9/0x20 [ 320.038371][ T7012] FAULT_INJECTION: forcing a failure. [ 320.038371][ T7012] name failslab, interval 1, probability 0, space 0, times 0 23:08:32 executing program 0: request_key(&(0x7f0000000040)='blacklist\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='\x00', 0xffffffffffffffff) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) [ 320.039957][ T7003] kmem_cache_alloc+0x5d/0x3f0 [ 320.048186][ T7003] anon_vma_fork+0xe2/0x630 [ 320.050363][ T7003] ? anon_vma_name+0xc6/0x170 [ 320.052689][ T7003] dup_mmap+0xfc9/0x19d0 [ 320.054658][ T7003] ? replace_mm_exe_file+0x4c0/0x4c0 [ 320.057085][ T7003] ? lockdep_hardirqs_on+0x7d/0x100 [ 320.059571][ T7003] ? mm_init+0xc7a/0x1030 [ 320.061718][ T7003] copy_process+0x6663/0x75c0 [ 320.063945][ T7003] ? pidfd_prepare+0x80/0x80 [ 320.065676][ T7003] ? find_held_lock+0x2d/0x110 [ 320.067665][ T7003] ? find_held_lock+0x2d/0x110 [ 320.069458][ T7003] kernel_clone+0xeb/0x890 [ 320.071076][ T7003] ? create_io_thread+0xe0/0xe0 [ 320.073194][ T7003] ? vfs_write+0x15c/0xd50 [ 320.075247][ T7003] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 320.077873][ T7003] ? wait_for_completion_io_timeout+0x20/0x20 [ 320.080677][ T7003] __do_sys_clone+0xba/0x100 [ 320.082813][ T7003] ? kernel_clone+0x890/0x890 [ 320.085001][ T7003] ? syscall_enter_from_user_mode+0x26/0x80 [ 320.087790][ T7003] do_syscall_64+0x39/0xb0 [ 320.089904][ T7003] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 320.092551][ T7003] RIP: 0033:0x7f469ba8c389 [ 320.094615][ T7003] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 320.103375][ T7003] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 320.107194][ T7003] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 320.110814][ T7003] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 320.114458][ T7003] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 320.117951][ T7003] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 320.121596][ T7003] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 320.125301][ T7003] [ 320.126752][ T7012] CPU: 1 PID: 7012 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 320.131526][ T7012] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 320.135482][ T7012] Call Trace: [ 320.136978][ T7012] [ 320.138307][ T7012] dump_stack_lvl+0x136/0x150 [ 320.140469][ T7012] should_fail_ex+0x4a3/0x5b0 [ 320.142589][ T7012] should_failslab+0x9/0x20 [ 320.144654][ T7012] kmem_cache_alloc+0x5d/0x3f0 [ 320.146812][ T7012] anon_vma_fork+0xe2/0x630 [ 320.148894][ T7012] ? anon_vma_name+0xc6/0x170 [ 320.151017][ T7012] dup_mmap+0xfc9/0x19d0 [ 320.152943][ T7012] ? replace_mm_exe_file+0x4c0/0x4c0 [ 320.155318][ T7012] ? lockdep_hardirqs_on+0x7d/0x100 [ 320.157324][ T7012] ? mm_init+0xc7a/0x1030 [ 320.158893][ T7012] copy_process+0x6663/0x75c0 [ 320.160598][ T7012] ? pidfd_prepare+0x80/0x80 [ 320.162272][ T7012] ? find_held_lock+0x2d/0x110 [ 320.164028][ T7012] ? find_held_lock+0x2d/0x110 [ 320.165912][ T7012] kernel_clone+0xeb/0x890 [ 320.167530][ T7012] ? create_io_thread+0xe0/0xe0 [ 320.169300][ T7012] ? vfs_write+0x15c/0xd50 [ 320.170897][ T7012] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 320.172931][ T7012] ? wait_for_completion_io_timeout+0x20/0x20 [ 320.175116][ T7012] __do_sys_clone+0xba/0x100 [ 320.176786][ T7012] ? kernel_clone+0x890/0x890 [ 320.178485][ T7012] ? syscall_enter_from_user_mode+0x26/0x80 [ 320.180618][ T7012] do_syscall_64+0x39/0xb0 [ 320.182232][ T7012] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 320.184366][ T7012] RIP: 0033:0x7f81ce88c389 [ 320.185977][ T7012] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 320.193548][ T7012] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 320.197092][ T7012] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 320.200490][ T7012] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 320.203719][ T7012] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 320.206579][ T7012] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 320.209421][ T7012] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 320.212290][ T7012] 23:08:32 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 79) 23:08:32 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="9057abf575361729dcb0ee20a60000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fbdbdf25270000000c002d000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x8058}, 0x20000004) 23:08:32 executing program 0: request_key(&(0x7f0000000040)='blacklist\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='\x00', 0xffffffffffffffff) (async, rerun: 32) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (rerun: 32) 23:08:32 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="9057abf575361729dcb0ee20a60000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fbdbdf25270000000c002d000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x8058}, 0x20000004) 23:08:32 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 79) 23:08:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x22}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000010}, 0x4000880) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) 23:08:32 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 80) 23:08:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) (async) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x22}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000010}, 0x4000880) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) 23:08:32 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="9057abf575361729dcb0ee20a60000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fbdbdf25270000000c002d000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x8058}, 0x20000004) [ 320.257132][ T7040] FAULT_INJECTION: forcing a failure. 23:08:32 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 80) [ 320.257132][ T7040] name failslab, interval 1, probability 0, space 0, times 0 [ 320.262679][ T7040] CPU: 0 PID: 7040 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 320.266548][ T7040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 23:08:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x22}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000010}, 0x4000880) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) [ 320.269817][ T7040] Call Trace: [ 320.271154][ T7040] [ 320.272354][ T7040] dump_stack_lvl+0x136/0x150 [ 320.274094][ T7040] should_fail_ex+0x4a3/0x5b0 [ 320.275887][ T7040] should_failslab+0x9/0x20 23:08:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x100}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x20}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x6}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x2}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x9}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0xf8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) [ 320.277640][ T7040] kmem_cache_alloc+0x5d/0x3f0 [ 320.279679][ T7040] vm_area_dup+0x55/0x300 [ 320.281448][ T7040] dup_mmap+0x713/0x19d0 [ 320.283043][ T7040] ? replace_mm_exe_file+0x4c0/0x4c0 [ 320.284994][ T7040] ? lockdep_hardirqs_on+0x7d/0x100 [ 320.286531][ T7051] FAULT_INJECTION: forcing a failure. [ 320.286531][ T7051] name failslab, interval 1, probability 0, space 0, times 0 23:08:32 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000040)={0xe, {0x7, 0x1, 0x1, 0x53, "87049a4e3230b9f4ea3fd900b498f33d1ef6a192746e8b6de22d20af4f496975ec35394e54df9b42c162585517245870d3ab6d234c72fd3d13c317075322c2e3e6abaca7f0170c14f9ea9c00f6e2c6922c9856"}}, 0x5f) [ 320.286883][ T7040] ? mm_init+0xc7a/0x1030 [ 320.294065][ T7040] copy_process+0x6663/0x75c0 [ 320.295813][ T7040] ? pidfd_prepare+0x80/0x80 [ 320.297522][ T7040] ? find_held_lock+0x2d/0x110 [ 320.299293][ T7040] ? find_held_lock+0x2d/0x110 [ 320.301171][ T7040] kernel_clone+0xeb/0x890 [ 320.302919][ T7040] ? create_io_thread+0xe0/0xe0 [ 320.304767][ T7040] ? vfs_write+0x15c/0xd50 23:08:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x100}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x20}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x6}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x2}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x9}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0xf8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) (async, rerun: 64) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (rerun: 64) [ 320.306501][ T7040] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 320.308821][ T7040] ? wait_for_completion_io_timeout+0x20/0x20 [ 320.311075][ T7040] __do_sys_clone+0xba/0x100 [ 320.312794][ T7040] ? kernel_clone+0x890/0x890 [ 320.314569][ T7040] ? syscall_enter_from_user_mode+0x26/0x80 [ 320.316846][ T7040] do_syscall_64+0x39/0xb0 [ 320.318520][ T7040] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 320.320822][ T7040] RIP: 0033:0x7f469ba8c389 [ 320.322491][ T7040] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 320.329669][ T7040] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 320.332791][ T7040] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 320.335715][ T7040] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 320.338842][ T7040] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 320.342285][ T7040] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 320.345832][ T7040] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 320.349413][ T7040] [ 320.350818][ T7051] CPU: 1 PID: 7051 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 320.354768][ T7051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 320.358266][ T7051] Call Trace: [ 320.359605][ T7051] [ 320.360722][ T7051] dump_stack_lvl+0x136/0x150 [ 320.362604][ T7051] should_fail_ex+0x4a3/0x5b0 [ 320.364538][ T7051] should_failslab+0x9/0x20 [ 320.366232][ T7051] kmem_cache_alloc+0x5d/0x3f0 [ 320.368294][ T7051] ptlock_alloc+0x21/0x70 [ 320.370338][ T7051] pte_alloc_one+0x6c/0x230 [ 320.372483][ T7051] __pte_alloc+0x6d/0x260 [ 320.374565][ T7051] ? pmd_install+0x160/0x160 [ 320.376838][ T7051] copy_page_range+0x151e/0x3830 [ 320.379307][ T7051] ? mas_wr_modify+0x332/0x16d0 [ 320.381635][ T7051] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 320.384422][ T7051] ? mas_store+0x275/0x3a0 [ 320.386348][ T7051] ? handle_mm_fault+0x9f0/0x9f0 [ 320.388655][ T7051] ? up_write+0x1b4/0x520 [ 320.389613][ T7064] FAULT_INJECTION: forcing a failure. [ 320.389613][ T7064] name failslab, interval 1, probability 0, space 0, times 0 [ 320.390601][ T7051] dup_mmap+0x10bc/0x19d0 [ 320.390632][ T7051] ? replace_mm_exe_file+0x4c0/0x4c0 [ 320.399706][ T7051] ? lockdep_hardirqs_on+0x7d/0x100 [ 320.401793][ T7051] ? mm_init+0xc7a/0x1030 [ 320.403629][ T7051] copy_process+0x6663/0x75c0 [ 320.405540][ T7051] ? pidfd_prepare+0x80/0x80 [ 320.407209][ T7051] ? find_held_lock+0x2d/0x110 [ 320.408933][ T7051] ? find_held_lock+0x2d/0x110 [ 320.410654][ T7051] kernel_clone+0xeb/0x890 [ 320.412341][ T7051] ? create_io_thread+0xe0/0xe0 [ 320.414462][ T7051] ? vfs_write+0x15c/0xd50 [ 320.416359][ T7051] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 320.418689][ T7051] ? wait_for_completion_io_timeout+0x20/0x20 [ 320.421183][ T7051] __do_sys_clone+0xba/0x100 [ 320.423214][ T7051] ? kernel_clone+0x890/0x890 [ 320.425298][ T7051] ? syscall_enter_from_user_mode+0x26/0x80 [ 320.428032][ T7051] do_syscall_64+0x39/0xb0 [ 320.429697][ T7051] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 320.431823][ T7051] RIP: 0033:0x7f81ce88c389 [ 320.433430][ T7051] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 320.440619][ T7051] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 320.443699][ T7051] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 320.447334][ T7051] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 320.450974][ T7051] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 320.454600][ T7051] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 320.458239][ T7051] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 320.462002][ T7051] 23:08:32 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 81) 23:08:32 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000040)={0xe, {0x7, 0x1, 0x1, 0x53, "87049a4e3230b9f4ea3fd900b498f33d1ef6a192746e8b6de22d20af4f496975ec35394e54df9b42c162585517245870d3ab6d234c72fd3d13c317075322c2e3e6abaca7f0170c14f9ea9c00f6e2c6922c9856"}}, 0x5f) 23:08:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x100}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x20}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x6}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x2}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x9}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0xf8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) (async, rerun: 32) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (rerun: 32) [ 320.463428][ T7064] CPU: 3 PID: 7064 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 320.468111][ T7064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 320.471534][ T7064] Call Trace: [ 320.472773][ T7064] [ 320.473867][ T7064] dump_stack_lvl+0x136/0x150 [ 320.475588][ T7064] should_fail_ex+0x4a3/0x5b0 [ 320.477385][ T7064] should_failslab+0x9/0x20 [ 320.479206][ T7064] kmem_cache_alloc+0x5d/0x3f0 [ 320.481473][ T7064] anon_vma_fork+0x1f1/0x630 [ 320.483609][ T7064] ? anon_vma_name+0xc6/0x170 [ 320.485788][ T7064] dup_mmap+0xfc9/0x19d0 [ 320.487753][ T7064] ? replace_mm_exe_file+0x4c0/0x4c0 [ 320.489958][ T7064] ? lockdep_hardirqs_on+0x7d/0x100 [ 320.491973][ T7064] ? mm_init+0xc7a/0x1030 [ 320.493792][ T7064] copy_process+0x6663/0x75c0 [ 320.496007][ T7064] ? pidfd_prepare+0x80/0x80 [ 320.498245][ T7064] ? find_held_lock+0x2d/0x110 [ 320.500503][ T7064] ? find_held_lock+0x2d/0x110 [ 320.502458][ T7064] kernel_clone+0xeb/0x890 [ 320.504126][ T7064] ? create_io_thread+0xe0/0xe0 [ 320.506006][ T7064] ? vfs_write+0x15c/0xd50 23:08:32 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 81) [ 320.507647][ T7064] ? __mutex_unlock_slowpath+0x157/0x5e0 23:08:32 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000c00", @ANYRES16=r3, @ANYBLOB="080000000000ffdbdf2508000000080008000a010102"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r3, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r3, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0xd1fca78c7af1d34) 23:08:32 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000040)={0xe, {0x7, 0x1, 0x1, 0x53, "87049a4e3230b9f4ea3fd900b498f33d1ef6a192746e8b6de22d20af4f496975ec35394e54df9b42c162585517245870d3ab6d234c72fd3d13c317075322c2e3e6abaca7f0170c14f9ea9c00f6e2c6922c9856"}}, 0x5f) [ 320.509985][ T7064] ? wait_for_completion_io_timeout+0x20/0x20 [ 320.512518][ T7064] __do_sys_clone+0xba/0x100 [ 320.514224][ T7064] ? kernel_clone+0x890/0x890 [ 320.516037][ T7064] ? syscall_enter_from_user_mode+0x26/0x80 [ 320.518230][ T7064] do_syscall_64+0x39/0xb0 [ 320.520174][ T7064] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 320.522710][ T7064] RIP: 0033:0x7f469ba8c389 [ 320.524595][ T7064] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 23:08:32 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async, rerun: 64) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000c00", @ANYRES16=r3, @ANYBLOB="080000000000ffdbdf2508000000080008000a010102"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) (async, rerun: 32) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r3, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) (async, rerun: 32) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r3, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) (async) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0xd1fca78c7af1d34) [ 320.525945][ T7070] FAULT_INJECTION: forcing a failure. [ 320.525945][ T7070] name failslab, interval 1, probability 0, space 0, times 0 [ 320.532322][ T7064] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 320.532356][ T7064] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 320.532367][ T7064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 320.532379][ T7064] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 320.532389][ T7064] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 320.532400][ T7064] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 320.532414][ T7064] 23:08:32 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x140, 0x0) 23:08:32 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 82) [ 320.560518][ T7070] CPU: 1 PID: 7070 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 23:08:32 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000c00", @ANYRES16=r3, @ANYBLOB="080000000000ffdbdf2508000000080008000a010102"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) (async) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r3, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r3, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) (async) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r4) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x19}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0xd1fca78c7af1d34) [ 320.564483][ T7070] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 320.567997][ T7070] Call Trace: [ 320.569555][ T7070] [ 320.570902][ T7070] dump_stack_lvl+0x136/0x150 [ 320.572914][ T7070] should_fail_ex+0x4a3/0x5b0 [ 320.574683][ T7070] should_failslab+0x9/0x20 [ 320.576370][ T7082] FAULT_INJECTION: forcing a failure. [ 320.576370][ T7082] name failslab, interval 1, probability 0, space 0, times 0 [ 320.576412][ T7070] kmem_cache_alloc+0x5d/0x3f0 [ 320.583185][ T7070] vm_area_dup+0x55/0x300 [ 320.584817][ T7070] dup_mmap+0x713/0x19d0 [ 320.586373][ T7070] ? replace_mm_exe_file+0x4c0/0x4c0 [ 320.588374][ T7070] ? lockdep_hardirqs_on+0x7d/0x100 [ 320.590260][ T7070] ? mm_init+0xc7a/0x1030 [ 320.591935][ T7070] copy_process+0x6663/0x75c0 [ 320.593683][ T7070] ? pidfd_prepare+0x80/0x80 [ 320.595432][ T7070] ? find_held_lock+0x2d/0x110 [ 320.597221][ T7070] ? find_held_lock+0x2d/0x110 [ 320.599451][ T7070] kernel_clone+0xeb/0x890 [ 320.601284][ T7070] ? create_io_thread+0xe0/0xe0 [ 320.603026][ T7070] ? vfs_write+0x15c/0xd50 [ 320.604772][ T7070] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 320.606830][ T7070] ? wait_for_completion_io_timeout+0x20/0x20 [ 320.609545][ T7070] __do_sys_clone+0xba/0x100 [ 320.611769][ T7070] ? kernel_clone+0x890/0x890 [ 320.613946][ T7070] ? syscall_enter_from_user_mode+0x26/0x80 [ 320.616674][ T7070] do_syscall_64+0x39/0xb0 [ 320.618716][ T7070] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 320.621439][ T7070] RIP: 0033:0x7f81ce88c389 [ 320.623501][ T7070] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 320.632407][ T7070] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 320.636393][ T7070] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 320.640031][ T7070] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 320.643634][ T7070] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 320.647284][ T7070] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 320.650835][ T7070] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 320.654472][ T7070] 23:08:32 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x140, 0x0) [ 320.655926][ T7082] CPU: 3 PID: 7082 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 320.660739][ T7082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 320.664751][ T7082] Call Trace: [ 320.666347][ T7082] [ 320.667774][ T7082] dump_stack_lvl+0x136/0x150 [ 320.669908][ T7082] should_fail_ex+0x4a3/0x5b0 23:08:32 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 82) 23:08:32 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x140, 0x0) 23:08:32 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r3) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x820) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x74, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa0100ff}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008004}, 0x4008010) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f0000001080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000089e4421a76384155000000000000002d0f001208002f0000f4426e"], 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11122}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x300080d0}, 0x24000011) [ 320.671942][ T7082] should_failslab+0x9/0x20 [ 320.674016][ T7082] kmem_cache_alloc+0x5d/0x3f0 [ 320.676101][ T7082] vm_area_dup+0x23/0x300 [ 320.677689][ T7082] dup_mmap+0x713/0x19d0 [ 320.679258][ T7082] ? replace_mm_exe_file+0x4c0/0x4c0 [ 320.681688][ T7082] ? lockdep_hardirqs_on+0x7d/0x100 [ 320.684226][ T7082] ? mm_init+0xc7a/0x1030 [ 320.686146][ T7082] copy_process+0x6663/0x75c0 [ 320.687929][ T7082] ? pidfd_prepare+0x80/0x80 [ 320.689607][ T7082] ? find_held_lock+0x2d/0x110 [ 320.691672][ T7082] ? find_held_lock+0x2d/0x110 [ 320.693429][ T7082] kernel_clone+0xeb/0x890 [ 320.695072][ T7082] ? create_io_thread+0xe0/0xe0 [ 320.696835][ T7082] ? vfs_write+0x15c/0xd50 23:08:32 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) socket$inet(0x2, 0x6, 0x7fff) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 320.698478][ T7082] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 320.700509][ T7095] FAULT_INJECTION: forcing a failure. 23:08:32 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r3) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x820) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x74, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa0100ff}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008004}, 0x4008010) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f0000001080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000089e4421a76384155000000000000002d0f001208002f0000f4426e"], 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11122}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x300080d0}, 0x24000011) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r3) (async) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x820) (async) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x74, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa0100ff}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008004}, 0x4008010) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f0000001080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000089e4421a76384155000000000000002d0f001208002f0000f4426e"], 0x24}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11122}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x300080d0}, 0x24000011) (async) [ 320.700509][ T7095] name failslab, interval 1, probability 0, space 0, times 0 [ 320.700789][ T7082] ? wait_for_completion_io_timeout+0x20/0x20 [ 320.700807][ T7082] __do_sys_clone+0xba/0x100 [ 320.700819][ T7082] ? kernel_clone+0x890/0x890 [ 320.700831][ T7082] ? syscall_enter_from_user_mode+0x26/0x80 [ 320.700852][ T7082] do_syscall_64+0x39/0xb0 [ 320.716023][ T7082] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 320.718229][ T7082] RIP: 0033:0x7f469ba8c389 [ 320.719927][ T7082] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 320.726823][ T7082] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 320.729837][ T7082] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 320.732850][ T7082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 320.735835][ T7082] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 320.738722][ T7082] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 320.741627][ T7082] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 320.744485][ T7082] [ 320.748446][ T7095] CPU: 2 PID: 7095 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 320.752686][ T7095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 320.756530][ T7095] Call Trace: [ 320.757976][ T7095] [ 320.759287][ T7095] dump_stack_lvl+0x136/0x150 23:08:32 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 83) 23:08:32 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) socket$inet(0x2, 0x6, 0x7fff) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 320.761477][ T7095] should_fail_ex+0x4a3/0x5b0 23:08:32 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r3) (async) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x820) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x74, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa0100ff}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008004}, 0x4008010) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f0000001080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000089e4421a76384155000000000000002d0f001208002f0000f4426e"], 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11122}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x300080d0}, 0x24000011) [ 320.764075][ T7095] should_failslab+0x9/0x20 [ 320.766004][ T7095] kmem_cache_alloc+0x5d/0x3f0 [ 320.767748][ T7095] vm_area_dup+0x23/0x300 [ 320.769379][ T7095] dup_mmap+0x713/0x19d0 [ 320.770961][ T7095] ? replace_mm_exe_file+0x4c0/0x4c0 [ 320.773027][ T7095] ? lockdep_hardirqs_on+0x7d/0x100 [ 320.775009][ T7095] ? mm_init+0xc7a/0x1030 [ 320.776764][ T7095] copy_process+0x6663/0x75c0 [ 320.778913][ T7095] ? pidfd_prepare+0x80/0x80 [ 320.780908][ T7095] ? find_held_lock+0x2d/0x110 [ 320.782715][ T7095] ? find_held_lock+0x2d/0x110 [ 320.784212][ T7109] FAULT_INJECTION: forcing a failure. [ 320.784212][ T7109] name failslab, interval 1, probability 0, space 0, times 0 [ 320.784521][ T7095] kernel_clone+0xeb/0x890 [ 320.792225][ T7095] ? create_io_thread+0xe0/0xe0 [ 320.794312][ T7095] ? vfs_write+0x15c/0xd50 [ 320.796237][ T7095] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 320.798387][ T7095] ? wait_for_completion_io_timeout+0x20/0x20 [ 320.800712][ T7095] __do_sys_clone+0xba/0x100 [ 320.802491][ T7095] ? kernel_clone+0x890/0x890 [ 320.804278][ T7095] ? syscall_enter_from_user_mode+0x26/0x80 [ 320.806521][ T7095] do_syscall_64+0x39/0xb0 [ 320.808248][ T7095] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 320.810504][ T7095] RIP: 0033:0x7f81ce88c389 [ 320.812252][ T7095] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 320.819993][ T7095] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 320.823387][ T7095] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 320.826388][ T7095] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 320.829579][ T7095] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 320.832565][ T7095] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 320.835637][ T7095] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 320.838718][ T7095] [ 320.839982][ T7109] CPU: 0 PID: 7109 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 320.844958][ T7109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 320.848947][ T7109] Call Trace: [ 320.850206][ T7109] [ 320.851390][ T7109] dump_stack_lvl+0x136/0x150 [ 320.853407][ T7109] should_fail_ex+0x4a3/0x5b0 [ 320.855486][ T7109] should_failslab+0x9/0x20 [ 320.857634][ T7109] kmem_cache_alloc+0x5d/0x3f0 23:08:32 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 83) 23:08:32 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) socket$inet(0x2, 0x6, 0x7fff) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 23:08:32 executing program 2: ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000000)) [ 320.859737][ T7109] vm_area_dup+0x55/0x300 [ 320.861947][ T7109] dup_mmap+0x713/0x19d0 [ 320.863886][ T7109] ? replace_mm_exe_file+0x4c0/0x4c0 [ 320.866482][ T7109] ? lockdep_hardirqs_on+0x7d/0x100 [ 320.869116][ T7109] ? mm_init+0xc7a/0x1030 [ 320.871181][ T7109] copy_process+0x6663/0x75c0 23:08:32 executing program 2: ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000000)) [ 320.873321][ T7109] ? pidfd_prepare+0x80/0x80 [ 320.875637][ T7109] ? find_held_lock+0x2d/0x110 [ 320.877743][ T7109] ? find_held_lock+0x2d/0x110 [ 320.879685][ T7109] kernel_clone+0xeb/0x890 [ 320.881753][ T7109] ? create_io_thread+0xe0/0xe0 23:08:32 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}}, 0x24) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000100)={"9cb41414c6569a7c29362aaad78b35a1f531495737835ee5ca64d59f2c72ce74", r3}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r4, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(r4, 0x3, &(0x7f0000000180)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f00000001c0)) [ 320.883996][ T7109] ? vfs_write+0x15c/0xd50 [ 320.885491][ T7119] FAULT_INJECTION: forcing a failure. [ 320.885491][ T7119] name failslab, interval 1, probability 0, space 0, times 0 [ 320.886377][ T7109] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 320.886406][ T7109] ? wait_for_completion_io_timeout+0x20/0x20 [ 320.886431][ T7109] __do_sys_clone+0xba/0x100 [ 320.899524][ T7109] ? kernel_clone+0x890/0x890 [ 320.901894][ T7109] ? syscall_enter_from_user_mode+0x26/0x80 [ 320.904512][ T7109] do_syscall_64+0x39/0xb0 [ 320.906237][ T7109] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 320.908604][ T7109] RIP: 0033:0x7f469ba8c389 [ 320.910628][ T7109] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 320.919548][ T7109] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 320.923413][ T7109] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 320.926430][ T7109] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 320.929936][ T7109] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 320.933393][ T7109] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 320.936545][ T7109] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 320.940116][ T7109] [ 320.941584][ T7119] CPU: 1 PID: 7119 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 320.946220][ T7119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 320.950138][ T7119] Call Trace: [ 320.951659][ T7119] [ 320.953002][ T7119] dump_stack_lvl+0x136/0x150 23:08:32 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 84) 23:08:32 executing program 2: ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000000)) 23:08:32 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}}, 0x24) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000100)={"9cb41414c6569a7c29362aaad78b35a1f531495737835ee5ca64d59f2c72ce74", r3}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r4, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(r4, 0x3, &(0x7f0000000180)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f00000001c0)) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) connect$rxrpc(r3, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}}, 0x24) (async) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000100)={"9cb41414c6569a7c29362aaad78b35a1f531495737835ee5ca64d59f2c72ce74", r3}) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) connect$rxrpc(r4, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) clock_gettime(0x0, &(0x7f0000000140)) (async) timerfd_settime(r4, 0x3, &(0x7f0000000180)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f00000001c0)) (async) [ 320.955144][ T7119] should_fail_ex+0x4a3/0x5b0 [ 320.957368][ T7119] should_failslab+0x9/0x20 [ 320.959147][ T7119] kmem_cache_alloc+0x5d/0x3f0 [ 320.960932][ T7119] vm_area_dup+0x55/0x300 [ 320.962530][ T7119] dup_mmap+0x713/0x19d0 [ 320.964096][ T7119] ? replace_mm_exe_file+0x4c0/0x4c0 [ 320.966008][ T7119] ? lockdep_hardirqs_on+0x7d/0x100 [ 320.968006][ T7119] ? mm_init+0xc7a/0x1030 [ 320.969622][ T7119] copy_process+0x6663/0x75c0 [ 320.971448][ T7119] ? pidfd_prepare+0x80/0x80 [ 320.973166][ T7119] ? find_held_lock+0x2d/0x110 [ 320.974874][ T7119] ? find_held_lock+0x2d/0x110 [ 320.976639][ T7119] kernel_clone+0xeb/0x890 [ 320.978236][ T7119] ? create_io_thread+0xe0/0xe0 [ 320.980006][ T7119] ? vfs_write+0x15c/0xd50 [ 320.981644][ T7119] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 320.983642][ T7119] ? wait_for_completion_io_timeout+0x20/0x20 [ 320.985813][ T7119] __do_sys_clone+0xba/0x100 [ 320.986599][ T7144] FAULT_INJECTION: forcing a failure. [ 320.986599][ T7144] name failslab, interval 1, probability 0, space 0, times 0 [ 320.987523][ T7119] ? kernel_clone+0x890/0x890 [ 320.993809][ T7119] ? syscall_enter_from_user_mode+0x26/0x80 [ 320.995983][ T7119] do_syscall_64+0x39/0xb0 [ 320.997583][ T7119] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 320.999722][ T7119] RIP: 0033:0x7f81ce88c389 [ 321.001349][ T7119] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 321.008286][ T7119] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 321.011266][ T7119] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 321.014076][ T7119] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 321.016884][ T7119] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 321.019723][ T7119] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 321.022739][ T7119] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 321.025664][ T7119] [ 321.026805][ T7144] CPU: 0 PID: 7144 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 321.031714][ T7144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 321.035818][ T7144] Call Trace: [ 321.037400][ T7144] [ 321.038776][ T7144] dump_stack_lvl+0x136/0x150 [ 321.040963][ T7144] should_fail_ex+0x4a3/0x5b0 [ 321.043149][ T7144] should_failslab+0x9/0x20 [ 321.045284][ T7144] kmem_cache_alloc+0x5d/0x3f0 [ 321.047532][ T7144] vm_area_dup+0x23/0x300 [ 321.049577][ T7144] dup_mmap+0x713/0x19d0 [ 321.051548][ T7144] ? replace_mm_exe_file+0x4c0/0x4c0 [ 321.053986][ T7144] ? lockdep_hardirqs_on+0x7d/0x100 [ 321.056430][ T7144] ? mm_init+0xc7a/0x1030 [ 321.058454][ T7144] copy_process+0x6663/0x75c0 [ 321.060665][ T7144] ? pidfd_prepare+0x80/0x80 [ 321.062809][ T7144] ? find_held_lock+0x2d/0x110 [ 321.065006][ T7144] ? find_held_lock+0x2d/0x110 [ 321.067228][ T7144] kernel_clone+0xeb/0x890 [ 321.069124][ T7144] ? create_io_thread+0xe0/0xe0 [ 321.070980][ T7144] ? vfs_write+0x15c/0xd50 [ 321.073047][ T7144] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 321.075619][ T7144] ? wait_for_completion_io_timeout+0x20/0x20 [ 321.078191][ T7144] __do_sys_clone+0xba/0x100 [ 321.080387][ T7144] ? kernel_clone+0x890/0x890 [ 321.082135][ T7144] ? syscall_enter_from_user_mode+0x26/0x80 [ 321.084295][ T7144] do_syscall_64+0x39/0xb0 [ 321.085918][ T7144] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 321.088117][ T7144] RIP: 0033:0x7f469ba8c389 [ 321.089732][ T7144] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 321.097226][ T7144] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 321.100318][ T7144] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 321.103220][ T7144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 321.106124][ T7144] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 321.109056][ T7144] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 321.111963][ T7144] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 321.114848][ T7144] 23:08:33 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 84) 23:08:33 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '%://\'){),'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x68}, 0x1, 0x0, 0x0, 0xc810}, 0x44000) 23:08:33 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}}, 0x24) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000100)={"9cb41414c6569a7c29362aaad78b35a1f531495737835ee5ca64d59f2c72ce74", r3}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r4, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) connect$rxrpc(r4, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(r4, 0x3, &(0x7f0000000180)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f00000001c0)) (async) timerfd_settime(r4, 0x3, &(0x7f0000000180)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f00000001c0)) 23:08:33 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 85) 23:08:33 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '%://\'){),'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x68}, 0x1, 0x0, 0x0, 0xc810}, 0x44000) [ 321.131449][ T7149] FAULT_INJECTION: forcing a failure. [ 321.131449][ T7149] name failslab, interval 1, probability 0, space 0, times 0 23:08:33 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000040)) [ 321.137733][ T7149] CPU: 2 PID: 7149 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 321.142642][ T7149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 321.146739][ T7149] Call Trace: [ 321.148295][ T7149] [ 321.149428][ T7149] dump_stack_lvl+0x136/0x150 23:08:33 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '%://\'){),'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x68}, 0x1, 0x0, 0x0, 0xc810}, 0x44000) 23:08:33 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000040)) [ 321.151536][ T7149] should_fail_ex+0x4a3/0x5b0 [ 321.154105][ T7149] should_failslab+0x9/0x20 [ 321.156120][ T7149] kmem_cache_alloc+0x5d/0x3f0 [ 321.158219][ T7149] vm_area_dup+0x23/0x300 [ 321.160111][ T7149] dup_mmap+0x713/0x19d0 [ 321.162015][ T7149] ? replace_mm_exe_file+0x4c0/0x4c0 [ 321.164449][ T7149] ? lockdep_hardirqs_on+0x7d/0x100 [ 321.166339][ T7149] ? mm_init+0xc7a/0x1030 [ 321.167925][ T7149] copy_process+0x6663/0x75c0 [ 321.169934][ T7149] ? pidfd_prepare+0x80/0x80 [ 321.171979][ T7149] ? find_held_lock+0x2d/0x110 [ 321.174097][ T7149] ? find_held_lock+0x2d/0x110 [ 321.176009][ T7149] kernel_clone+0xeb/0x890 [ 321.177953][ T7149] ? create_io_thread+0xe0/0xe0 [ 321.179793][ T7149] ? vfs_write+0x15c/0xd50 [ 321.181723][ T7149] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 321.184162][ T7149] ? wait_for_completion_io_timeout+0x20/0x20 [ 321.186687][ T7149] __do_sys_clone+0xba/0x100 [ 321.188582][ T7149] ? kernel_clone+0x890/0x890 [ 321.190736][ T7149] ? syscall_enter_from_user_mode+0x26/0x80 [ 321.193454][ T7149] do_syscall_64+0x39/0xb0 [ 321.195482][ T7149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 321.198186][ T7149] RIP: 0033:0x7f81ce88c389 [ 321.200067][ T7149] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 321.208212][ T7149] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 321.211746][ T7149] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 321.215255][ T7149] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 321.218875][ T7149] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 321.222288][ T7149] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 321.225668][ T7149] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 321.229152][ T7149] 23:08:33 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 85) 23:08:33 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 86) 23:08:33 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000040)) 23:08:33 executing program 2: getpgid(0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0xd7d18508f3d2c6da) [ 321.250057][ T7167] FAULT_INJECTION: forcing a failure. [ 321.250057][ T7167] name failslab, interval 1, probability 0, space 0, times 0 23:08:33 executing program 2: getpgid(0xffffffffffffffff) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) (async) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0xd7d18508f3d2c6da) [ 321.254877][ T7167] CPU: 0 PID: 7167 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 23:08:33 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x104200, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0x6, r0, 0x80000}) [ 321.258849][ T7167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 321.262293][ T7167] Call Trace: [ 321.263650][ T7167] [ 321.264708][ T7167] dump_stack_lvl+0x136/0x150 [ 321.266583][ T7167] should_fail_ex+0x4a3/0x5b0 [ 321.268546][ T7167] should_failslab+0x9/0x20 [ 321.270203][ T7167] kmem_cache_alloc+0x5d/0x3f0 [ 321.271955][ T7167] vm_area_dup+0x23/0x300 [ 321.273556][ T7167] dup_mmap+0x713/0x19d0 23:08:33 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 86) [ 321.275091][ T7167] ? replace_mm_exe_file+0x4c0/0x4c0 [ 321.277245][ T7167] ? lockdep_hardirqs_on+0x7d/0x100 [ 321.279153][ T7167] ? mm_init+0xc7a/0x1030 [ 321.280774][ T7167] copy_process+0x6663/0x75c0 23:08:33 executing program 2: getpgid(0xffffffffffffffff) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) (async) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0xd7d18508f3d2c6da) 23:08:33 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async, rerun: 32) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x104200, 0x0) (rerun: 32) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0x6, r0, 0x80000}) [ 321.282556][ T7167] ? pidfd_prepare+0x80/0x80 [ 321.284382][ T7167] ? find_held_lock+0x2d/0x110 [ 321.286546][ T7167] ? find_held_lock+0x2d/0x110 [ 321.288651][ T7167] kernel_clone+0xeb/0x890 [ 321.290597][ T7167] ? create_io_thread+0xe0/0xe0 [ 321.292773][ T7167] ? vfs_write+0x15c/0xd50 [ 321.294643][ T7167] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 321.296673][ T7167] ? wait_for_completion_io_timeout+0x20/0x20 [ 321.298880][ T7167] __do_sys_clone+0xba/0x100 [ 321.300584][ T7167] ? kernel_clone+0x890/0x890 [ 321.302320][ T7167] ? syscall_enter_from_user_mode+0x26/0x80 [ 321.304454][ T7167] do_syscall_64+0x39/0xb0 [ 321.306090][ T7167] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 321.308257][ T7167] RIP: 0033:0x7f469ba8c389 [ 321.309894][ T7167] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 321.316852][ T7167] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 321.319836][ T7167] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 321.322714][ T7167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 321.325573][ T7167] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 321.328589][ T7167] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 321.331426][ T7167] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 321.334363][ T7167] 23:08:33 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 87) 23:08:33 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 87) 23:08:33 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x104200, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0x6, r0, 0x80000}) 23:08:33 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0xd7d18508b3d246da) 23:08:33 executing program 0: r0 = syz_clone(0x1146400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="a20e13e4d75b419d37d91bbd7f8365e8ac7f47dd4156361156fe1dd7ce541d5fb5ea8631535f7449a8840d49a52778d7f959e84316993d5bb3d9973aa67f5a937ec460f075f535521a7d23e26503893e15a3b6e2a03679b795c5534b296fa26ece4b1c08ae906779a2250ab15bd7de3575d84053748045d510c93a431b5785956b5549fd748d897c4aadab965e790c303fba51c20f23436193405cd1e09329ea1e74038a4637fd1c82446a6857ec64f3c2948f12d7a74e418297f5da9df27179907f0a7e542f34d32c1cb054b285ed5b274388ddb1a8aa53361b253c") tkill(r0, 0x2c) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x10200, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) [ 321.355334][ T7196] FAULT_INJECTION: forcing a failure. 23:08:33 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) (async) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0xd7d18508b3d246da) [ 321.355334][ T7196] name failslab, interval 1, probability 0, space 0, times 0 [ 321.358709][ T7198] FAULT_INJECTION: forcing a failure. [ 321.358709][ T7198] name failslab, interval 1, probability 0, space 0, times 0 [ 321.360648][ T7196] CPU: 2 PID: 7196 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 321.360673][ T7196] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 321.360684][ T7196] Call Trace: 23:08:33 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) (async) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0xd7d18508b3d246da) [ 321.360690][ T7196] [ 321.360697][ T7196] dump_stack_lvl+0x136/0x150 [ 321.360717][ T7196] should_fail_ex+0x4a3/0x5b0 [ 321.360735][ T7196] should_failslab+0x9/0x20 [ 321.360749][ T7196] kmem_cache_alloc+0x5d/0x3f0 [ 321.360783][ T7196] anon_vma_fork+0xe2/0x630 [ 321.360801][ T7196] ? anon_vma_name+0xc6/0x170 [ 321.360817][ T7196] dup_mmap+0xfc9/0x19d0 [ 321.360830][ T7196] ? replace_mm_exe_file+0x4c0/0x4c0 [ 321.360843][ T7196] ? lockdep_hardirqs_on+0x7d/0x100 [ 321.360859][ T7196] ? mm_init+0xc7a/0x1030 [ 321.360871][ T7196] copy_process+0x6663/0x75c0 [ 321.360883][ T7196] ? pidfd_prepare+0x80/0x80 [ 321.360894][ T7196] ? find_held_lock+0x2d/0x110 [ 321.360904][ T7196] ? find_held_lock+0x2d/0x110 [ 321.360915][ T7196] kernel_clone+0xeb/0x890 [ 321.360926][ T7196] ? create_io_thread+0xe0/0xe0 [ 321.360944][ T7196] ? vfs_write+0x15c/0xd50 [ 321.360956][ T7196] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 321.360969][ T7196] ? wait_for_completion_io_timeout+0x20/0x20 23:08:33 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r4) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2b}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000004) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r3, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r3, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0xf4, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0x87, 0x1, '*\x00#-\x8e\xa6G\xe3\xf5\xf0\x0e\x0eLy\x8b\x9b\xd1_&\xf3\xc2\x92\x108APl\xb4\xdbv\xc1c \'v\xed4\xb7\xc9\x82RTrY\xabSO\f_}\xd6\xa1\xd6c&q\x01w\'\x97=\xb5\xb5\xa0D\x1f\xff\x12R\x00\x1d\x18\xe3\xc5\xe0\xdd\xf9\xbd,\xc7\xd4BCH%<\xd5f\xd67\xd0Gq\xff\xb4\f\x96B\xd5\xbe\x97[p\xf6\x8a\x97\xf8la\x00b\xb6\xa7Le\xa8qs\x97;\xca=\xf8n\xeci$\x05\x87H\xab'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0xf4}, 0x1, 0x0, 0x0, 0x11}, 0x20004000) [ 321.360983][ T7196] __do_sys_clone+0xba/0x100 [ 321.360996][ T7196] ? kernel_clone+0x890/0x890 [ 321.361009][ T7196] ? syscall_enter_from_user_mode+0x26/0x80 [ 321.361023][ T7196] do_syscall_64+0x39/0xb0 [ 321.361036][ T7196] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 321.361053][ T7196] RIP: 0033:0x7f81ce88c389 [ 321.426870][ T7196] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 321.435322][ T7196] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 321.439090][ T7196] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 321.442247][ T7196] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 321.445981][ T7196] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 321.449538][ T7196] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 321.452783][ T7196] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 321.455959][ T7196] [ 321.457218][ T7198] CPU: 0 PID: 7198 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 321.461869][ T7198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 321.466090][ T7198] Call Trace: [ 321.467617][ T7198] [ 321.468770][ T7198] dump_stack_lvl+0x136/0x150 [ 321.470490][ T7198] should_fail_ex+0x4a3/0x5b0 [ 321.472224][ T7198] should_failslab+0x9/0x20 [ 321.473903][ T7198] kmem_cache_alloc+0x5d/0x3f0 [ 321.475679][ T7198] anon_vma_fork+0xe2/0x630 [ 321.477422][ T7198] ? anon_vma_name+0xc6/0x170 [ 321.479231][ T7198] dup_mmap+0xfc9/0x19d0 [ 321.480819][ T7198] ? replace_mm_exe_file+0x4c0/0x4c0 [ 321.482722][ T7198] ? lockdep_hardirqs_on+0x7d/0x100 [ 321.484709][ T7198] ? mm_init+0xc7a/0x1030 [ 321.486318][ T7198] copy_process+0x6663/0x75c0 [ 321.488135][ T7198] ? pidfd_prepare+0x80/0x80 [ 321.489893][ T7198] ? find_held_lock+0x2d/0x110 [ 321.491825][ T7198] ? find_held_lock+0x2d/0x110 [ 321.493739][ T7198] kernel_clone+0xeb/0x890 [ 321.495527][ T7198] ? create_io_thread+0xe0/0xe0 [ 321.497523][ T7198] ? vfs_write+0x15c/0xd50 [ 321.499414][ T7198] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 321.501610][ T7198] ? wait_for_completion_io_timeout+0x20/0x20 [ 321.503912][ T7198] __do_sys_clone+0xba/0x100 [ 321.505639][ T7198] ? kernel_clone+0x890/0x890 [ 321.507416][ T7198] ? syscall_enter_from_user_mode+0x26/0x80 [ 321.509689][ T7198] do_syscall_64+0x39/0xb0 [ 321.511354][ T7198] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 321.513909][ T7198] RIP: 0033:0x7f469ba8c389 [ 321.515808][ T7198] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 321.523224][ T7198] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 321.526374][ T7198] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 321.529347][ T7198] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 321.532306][ T7198] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 321.535373][ T7198] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 321.538367][ T7198] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 321.541499][ T7198] 23:08:33 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 88) 23:08:33 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r4) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r4) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2b}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000004) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r3, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r3, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0xf4, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0x87, 0x1, '*\x00#-\x8e\xa6G\xe3\xf5\xf0\x0e\x0eLy\x8b\x9b\xd1_&\xf3\xc2\x92\x108APl\xb4\xdbv\xc1c \'v\xed4\xb7\xc9\x82RTrY\xabSO\f_}\xd6\xa1\xd6c&q\x01w\'\x97=\xb5\xb5\xa0D\x1f\xff\x12R\x00\x1d\x18\xe3\xc5\xe0\xdd\xf9\xbd,\xc7\xd4BCH%<\xd5f\xd67\xd0Gq\xff\xb4\f\x96B\xd5\xbe\x97[p\xf6\x8a\x97\xf8la\x00b\xb6\xa7Le\xa8qs\x97;\xca=\xf8n\xeci$\x05\x87H\xab'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0xf4}, 0x1, 0x0, 0x0, 0x11}, 0x20004000) (async) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0xf4, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0x87, 0x1, '*\x00#-\x8e\xa6G\xe3\xf5\xf0\x0e\x0eLy\x8b\x9b\xd1_&\xf3\xc2\x92\x108APl\xb4\xdbv\xc1c \'v\xed4\xb7\xc9\x82RTrY\xabSO\f_}\xd6\xa1\xd6c&q\x01w\'\x97=\xb5\xb5\xa0D\x1f\xff\x12R\x00\x1d\x18\xe3\xc5\xe0\xdd\xf9\xbd,\xc7\xd4BCH%<\xd5f\xd67\xd0Gq\xff\xb4\f\x96B\xd5\xbe\x97[p\xf6\x8a\x97\xf8la\x00b\xb6\xa7Le\xa8qs\x97;\xca=\xf8n\xeci$\x05\x87H\xab'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0xf4}, 0x1, 0x0, 0x0, 0x11}, 0x20004000) 23:08:33 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 88) 23:08:33 executing program 0: r0 = syz_clone(0x1146400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="a20e13e4d75b419d37d91bbd7f8365e8ac7f47dd4156361156fe1dd7ce541d5fb5ea8631535f7449a8840d49a52778d7f959e84316993d5bb3d9973aa67f5a937ec460f075f535521a7d23e26503893e15a3b6e2a03679b795c5534b296fa26ece4b1c08ae906779a2250ab15bd7de3575d84053748045d510c93a431b5785956b5549fd748d897c4aadab965e790c303fba51c20f23436193405cd1e09329ea1e74038a4637fd1c82446a6857ec64f3c2948f12d7a74e418297f5da9df27179907f0a7e542f34d32c1cb054b285ed5b274388ddb1a8aa53361b253c") tkill(r0, 0x2c) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x10200, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) [ 321.573969][ T7219] FAULT_INJECTION: forcing a failure. 23:08:33 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) (async) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r4) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2b}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000004) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r3, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r3, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0xf4, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0x87, 0x1, '*\x00#-\x8e\xa6G\xe3\xf5\xf0\x0e\x0eLy\x8b\x9b\xd1_&\xf3\xc2\x92\x108APl\xb4\xdbv\xc1c \'v\xed4\xb7\xc9\x82RTrY\xabSO\f_}\xd6\xa1\xd6c&q\x01w\'\x97=\xb5\xb5\xa0D\x1f\xff\x12R\x00\x1d\x18\xe3\xc5\xe0\xdd\xf9\xbd,\xc7\xd4BCH%<\xd5f\xd67\xd0Gq\xff\xb4\f\x96B\xd5\xbe\x97[p\xf6\x8a\x97\xf8la\x00b\xb6\xa7Le\xa8qs\x97;\xca=\xf8n\xeci$\x05\x87H\xab'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0xf4}, 0x1, 0x0, 0x0, 0x11}, 0x20004000) (async) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0xf4, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0x87, 0x1, '*\x00#-\x8e\xa6G\xe3\xf5\xf0\x0e\x0eLy\x8b\x9b\xd1_&\xf3\xc2\x92\x108APl\xb4\xdbv\xc1c \'v\xed4\xb7\xc9\x82RTrY\xabSO\f_}\xd6\xa1\xd6c&q\x01w\'\x97=\xb5\xb5\xa0D\x1f\xff\x12R\x00\x1d\x18\xe3\xc5\xe0\xdd\xf9\xbd,\xc7\xd4BCH%<\xd5f\xd67\xd0Gq\xff\xb4\f\x96B\xd5\xbe\x97[p\xf6\x8a\x97\xf8la\x00b\xb6\xa7Le\xa8qs\x97;\xca=\xf8n\xeci$\x05\x87H\xab'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0xf4}, 0x1, 0x0, 0x0, 0x11}, 0x20004000) [ 321.573969][ T7219] name failslab, interval 1, probability 0, space 0, times 0 [ 321.575570][ T7220] FAULT_INJECTION: forcing a failure. [ 321.575570][ T7220] name failslab, interval 1, probability 0, space 0, times 0 [ 321.579365][ T7219] CPU: 0 PID: 7219 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 321.579392][ T7219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 321.579402][ T7219] Call Trace: [ 321.579408][ T7219] [ 321.579415][ T7219] dump_stack_lvl+0x136/0x150 [ 321.579442][ T7219] should_fail_ex+0x4a3/0x5b0 [ 321.579471][ T7219] should_failslab+0x9/0x20 23:08:33 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) [ 321.579494][ T7219] kmem_cache_alloc+0x5d/0x3f0 [ 321.579545][ T7219] vm_area_dup+0x55/0x300 [ 321.579569][ T7219] dup_mmap+0x713/0x19d0 [ 321.579588][ T7219] ? replace_mm_exe_file+0x4c0/0x4c0 [ 321.579609][ T7219] ? lockdep_hardirqs_on+0x7d/0x100 [ 321.579632][ T7219] ? mm_init+0xc7a/0x1030 [ 321.579651][ T7219] copy_process+0x6663/0x75c0 [ 321.579673][ T7219] ? pidfd_prepare+0x80/0x80 [ 321.579693][ T7219] ? find_held_lock+0x2d/0x110 23:08:33 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) (async) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) [ 321.579713][ T7219] ? find_held_lock+0x2d/0x110 [ 321.579732][ T7219] kernel_clone+0xeb/0x890 [ 321.579752][ T7219] ? create_io_thread+0xe0/0xe0 [ 321.579774][ T7219] ? vfs_write+0x15c/0xd50 [ 321.579793][ T7219] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 321.579815][ T7219] ? wait_for_completion_io_timeout+0x20/0x20 [ 321.579838][ T7219] __do_sys_clone+0xba/0x100 [ 321.579860][ T7219] ? kernel_clone+0x890/0x890 [ 321.579883][ T7219] ? syscall_enter_from_user_mode+0x26/0x80 23:08:33 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) [ 321.579946][ T7219] do_syscall_64+0x39/0xb0 [ 321.579964][ T7219] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 321.579992][ T7219] RIP: 0033:0x7f81ce88c389 [ 321.580007][ T7219] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 321.580024][ T7219] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 321.580045][ T7219] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 321.580059][ T7219] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 321.662831][ T7219] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 321.666583][ T7219] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 321.670543][ T7219] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 321.674118][ T7219] [ 321.675588][ T7220] CPU: 2 PID: 7220 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 321.679609][ T7220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 321.682985][ T7220] Call Trace: [ 321.684233][ T7220] [ 321.685321][ T7220] dump_stack_lvl+0x136/0x150 [ 321.687059][ T7220] should_fail_ex+0x4a3/0x5b0 [ 321.688850][ T7220] should_failslab+0x9/0x20 [ 321.690549][ T7220] kmem_cache_alloc+0x5d/0x3f0 [ 321.692482][ T7220] anon_vma_fork+0x1f1/0x630 [ 321.694316][ T7220] ? anon_vma_name+0xc6/0x170 [ 321.696282][ T7220] dup_mmap+0xfc9/0x19d0 [ 321.698049][ T7220] ? replace_mm_exe_file+0x4c0/0x4c0 [ 321.700120][ T7220] ? lockdep_hardirqs_on+0x7d/0x100 [ 321.702104][ T7220] ? mm_init+0xc7a/0x1030 [ 321.703748][ T7220] copy_process+0x6663/0x75c0 [ 321.705582][ T7220] ? pidfd_prepare+0x80/0x80 [ 321.707369][ T7220] ? find_held_lock+0x2d/0x110 [ 321.709311][ T7220] ? find_held_lock+0x2d/0x110 [ 321.711145][ T7220] kernel_clone+0xeb/0x890 [ 321.712873][ T7220] ? create_io_thread+0xe0/0xe0 [ 321.714728][ T7220] ? vfs_write+0x15c/0xd50 [ 321.716547][ T7220] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 321.718953][ T7220] ? wait_for_completion_io_timeout+0x20/0x20 [ 321.721444][ T7220] __do_sys_clone+0xba/0x100 [ 321.723269][ T7220] ? kernel_clone+0x890/0x890 [ 321.725064][ T7220] ? syscall_enter_from_user_mode+0x26/0x80 [ 321.727322][ T7220] do_syscall_64+0x39/0xb0 [ 321.729075][ T7220] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 321.731301][ T7220] RIP: 0033:0x7f469ba8c389 [ 321.732974][ T7220] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 321.740397][ T7220] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 321.743635][ T7220] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 321.746612][ T7220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 321.749672][ T7220] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 321.752666][ T7220] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 321.755643][ T7220] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 321.758743][ T7220] 23:08:33 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 89) 23:08:33 executing program 2: ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000000)={0x8}) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x7}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000000) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000040)) 23:08:33 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 89) 23:08:33 executing program 0: syz_clone(0x1146400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="a20e13e4d75b419d37d91bbd7f8365e8ac7f47dd4156361156fe1dd7ce541d5fb5ea8631535f7449a8840d49a52778d7f959e84316993d5bb3d9973aa67f5a937ec460f075f535521a7d23e26503893e15a3b6e2a03679b795c5534b296fa26ece4b1c08ae906779a2250ab15bd7de3575d84053748045d510c93a431b5785956b5549fd748d897c4aadab965e790c303fba51c20f23436193405cd1e09329ea1e74038a4637fd1c82446a6857ec64f3c2948f12d7a74e418297f5da9df27179907f0a7e542f34d32c1cb054b285ed5b274388ddb1a8aa53361b253c") (async) r0 = syz_clone(0x1146400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="a20e13e4d75b419d37d91bbd7f8365e8ac7f47dd4156361156fe1dd7ce541d5fb5ea8631535f7449a8840d49a52778d7f959e84316993d5bb3d9973aa67f5a937ec460f075f535521a7d23e26503893e15a3b6e2a03679b795c5534b296fa26ece4b1c08ae906779a2250ab15bd7de3575d84053748045d510c93a431b5785956b5549fd748d897c4aadab965e790c303fba51c20f23436193405cd1e09329ea1e74038a4637fd1c82446a6857ec64f3c2948f12d7a74e418297f5da9df27179907f0a7e542f34d32c1cb054b285ed5b274388ddb1a8aa53361b253c") tkill(r0, 0x2c) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x10200, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) 23:08:33 executing program 2: ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000000)={0x8}) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x7}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000000) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) connect$rxrpc(r2, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000040)) 23:08:33 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 90) 23:08:33 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 90) 23:08:33 executing program 2: ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000000)={0x8}) (async) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x7}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000000) (async) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000040)) [ 321.804166][ T7252] FAULT_INJECTION: forcing a failure. [ 321.804166][ T7252] name failslab, interval 1, probability 0, space 0, times 0 [ 321.807079][ T7255] FAULT_INJECTION: forcing a failure. [ 321.807079][ T7255] name failslab, interval 1, probability 0, space 0, times 0 [ 321.809095][ T7252] CPU: 1 PID: 7252 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 321.817259][ T7252] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 23:08:33 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, '(\\#&\xf3%\xf9\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '}[@{\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x15}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) [ 321.820507][ T7252] Call Trace: [ 321.821897][ T7252] [ 321.823021][ T7252] dump_stack_lvl+0x136/0x150 [ 321.824780][ T7252] should_fail_ex+0x4a3/0x5b0 [ 321.826496][ T7252] should_failslab+0x9/0x20 [ 321.828218][ T7252] kmem_cache_alloc+0x5d/0x3f0 [ 321.830053][ T7252] vm_area_dup+0x55/0x300 [ 321.831712][ T7252] dup_mmap+0x713/0x19d0 [ 321.833525][ T7252] ? replace_mm_exe_file+0x4c0/0x4c0 [ 321.835621][ T7252] ? lockdep_hardirqs_on+0x7d/0x100 23:08:33 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, '(\\#&\xf3%\xf9\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '}[@{\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x15}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, '(\\#&\xf3%\xf9\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '}[@{\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x15}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async) [ 321.837571][ T7252] ? mm_init+0xc7a/0x1030 [ 321.839425][ T7252] copy_process+0x6663/0x75c0 [ 321.841194][ T7252] ? pidfd_prepare+0x80/0x80 [ 321.843070][ T7252] ? find_held_lock+0x2d/0x110 [ 321.844940][ T7252] ? find_held_lock+0x2d/0x110 [ 321.847079][ T7252] kernel_clone+0xeb/0x890 [ 321.849005][ T7252] ? create_io_thread+0xe0/0xe0 [ 321.850885][ T7252] ? vfs_write+0x15c/0xd50 [ 321.852584][ T7252] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 321.854609][ T7252] ? wait_for_completion_io_timeout+0x20/0x20 [ 321.856824][ T7252] __do_sys_clone+0xba/0x100 [ 321.858508][ T7252] ? kernel_clone+0x890/0x890 [ 321.860259][ T7252] ? syscall_enter_from_user_mode+0x26/0x80 [ 321.862468][ T7252] do_syscall_64+0x39/0xb0 [ 321.864143][ T7252] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 321.866404][ T7252] RIP: 0033:0x7f81ce88c389 [ 321.868322][ T7252] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 321.875854][ T7252] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 321.878927][ T7252] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 321.881916][ T7252] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 321.884963][ T7252] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 321.887820][ T7252] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 321.890646][ T7252] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 321.893484][ T7252] 23:08:33 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, '(\\#&\xf3%\xf9\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '}[@{\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x15}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) [ 321.894753][ T7255] CPU: 3 PID: 7255 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 321.899291][ T7255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 321.902802][ T7255] Call Trace: [ 321.904050][ T7255] [ 321.905152][ T7255] dump_stack_lvl+0x136/0x150 [ 321.906978][ T7255] should_fail_ex+0x4a3/0x5b0 [ 321.908756][ T7255] should_failslab+0x9/0x20 [ 321.910442][ T7255] kmem_cache_alloc+0x5d/0x3f0 [ 321.912219][ T7255] vm_area_dup+0x55/0x300 [ 321.913842][ T7255] dup_mmap+0x713/0x19d0 [ 321.915386][ T7255] ? replace_mm_exe_file+0x4c0/0x4c0 [ 321.917337][ T7255] ? lockdep_hardirqs_on+0x7d/0x100 [ 321.919387][ T7255] ? mm_init+0xc7a/0x1030 [ 321.921203][ T7255] copy_process+0x6663/0x75c0 [ 321.923307][ T7255] ? pidfd_prepare+0x80/0x80 [ 321.925113][ T7255] ? find_held_lock+0x2d/0x110 [ 321.926876][ T7255] ? find_held_lock+0x2d/0x110 [ 321.928711][ T7255] kernel_clone+0xeb/0x890 [ 321.930368][ T7255] ? create_io_thread+0xe0/0xe0 [ 321.932187][ T7255] ? vfs_write+0x15c/0xd50 [ 321.933870][ T7255] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 321.935926][ T7255] ? wait_for_completion_io_timeout+0x20/0x20 [ 321.938222][ T7255] __do_sys_clone+0xba/0x100 [ 321.940094][ T7255] ? kernel_clone+0x890/0x890 [ 321.941949][ T7255] ? syscall_enter_from_user_mode+0x26/0x80 [ 321.944260][ T7255] do_syscall_64+0x39/0xb0 [ 321.945898][ T7255] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 321.948104][ T7255] RIP: 0033:0x7f469ba8c389 [ 321.949760][ T7255] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 321.957588][ T7255] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 321.961452][ T7255] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 321.964951][ T7255] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 321.967876][ T7255] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 321.971426][ T7255] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 321.975321][ T7255] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 321.979001][ T7255] 23:08:34 executing program 0: sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x800) 23:08:34 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r4) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r5) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r7, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r7, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r7, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r7, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r7, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '%,\x81*\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r8, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r8, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r8, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r8, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r8, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002bbd7000fedbdf2505000000080008007f00000106000b0007000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x8001) 23:08:34 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 91) 23:08:34 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 91) 23:08:34 executing program 0: sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x800) 23:08:34 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r4) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r5) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r7, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r7, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r7, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r7, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r7, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '%,\x81*\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) (async) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r8, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r8, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r8, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r8, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r8, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002bbd7000fedbdf2505000000080008007f00000106000b0007000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x8001) 23:08:34 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 92) 23:08:34 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 92) 23:08:34 executing program 0: sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x800) 23:08:34 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r1) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r4) (async) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r5) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r7, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r7, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) (async) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r7, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r7, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r7, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '%,\x81*\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) (async) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r8, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r8, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) (async) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r8, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r8, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r8, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002bbd7000fedbdf2505000000080008007f00000106000b0007000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x8001) 23:08:34 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 93) 23:08:34 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 93) 23:08:34 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) write$damon_schemes(r0, &(0x7f0000000040)={0x8, 0xfffffffffffffff8, 0x20, 0x20, 0x5, 0x8001, 0x7ff}, 0x66) 23:08:34 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r5, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESOCT=r4, @ANYRES16=r6], 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r5, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r5, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r5, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x45}, 0x7f90b1287155c266) 23:08:34 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 94) 23:08:34 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) write$damon_schemes(r0, &(0x7f0000000040)={0x8, 0xfffffffffffffff8, 0x20, 0x20, 0x5, 0x8001, 0x7ff}, 0x66) (async) write$damon_schemes(r0, &(0x7f0000000040)={0x8, 0xfffffffffffffff8, 0x20, 0x20, 0x5, 0x8001, 0x7ff}, 0x66) 23:08:34 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 94) [ 322.078576][ T7311] FAULT_INJECTION: forcing a failure. 23:08:34 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) (async) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r5, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r6) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESOCT=r4, @ANYRES16=r6], 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) (async) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r5, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r5, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r5, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x45}, 0x7f90b1287155c266) [ 322.078576][ T7311] name failslab, interval 1, probability 0, space 0, times 0 [ 322.083573][ T7311] CPU: 2 PID: 7311 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 23:08:34 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) write$damon_schemes(r0, &(0x7f0000000040)={0x8, 0xfffffffffffffff8, 0x20, 0x20, 0x5, 0x8001, 0x7ff}, 0x66) [ 322.087382][ T7311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 322.090926][ T7311] Call Trace: [ 322.092154][ T7311] [ 322.093245][ T7311] dump_stack_lvl+0x136/0x150 [ 322.094958][ T7311] should_fail_ex+0x4a3/0x5b0 [ 322.096478][ T7320] FAULT_INJECTION: forcing a failure. [ 322.096478][ T7320] name failslab, interval 1, probability 0, space 0, times 0 23:08:34 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x41) [ 322.096734][ T7311] should_failslab+0x9/0x20 [ 322.103564][ T7311] kmem_cache_alloc+0x5d/0x3f0 [ 322.105337][ T7311] anon_vma_fork+0xe2/0x630 [ 322.107047][ T7311] ? anon_vma_name+0xc6/0x170 [ 322.109233][ T7311] dup_mmap+0xfc9/0x19d0 [ 322.110968][ T7311] ? replace_mm_exe_file+0x4c0/0x4c0 [ 322.112958][ T7311] ? lockdep_hardirqs_on+0x7d/0x100 23:08:34 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async, rerun: 64) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r2) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) (rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) (async, rerun: 32) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r5, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) (async, rerun: 64) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESOCT=r4, @ANYRES16=r6], 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) (async, rerun: 64) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r5, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) (rerun: 64) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r5, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r5, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x45}, 0x7f90b1287155c266) [ 322.114823][ T7311] ? mm_init+0xc7a/0x1030 [ 322.116695][ T7311] copy_process+0x6663/0x75c0 [ 322.118416][ T7311] ? pidfd_prepare+0x80/0x80 [ 322.120137][ T7311] ? find_held_lock+0x2d/0x110 [ 322.121898][ T7311] ? find_held_lock+0x2d/0x110 [ 322.123755][ T7311] kernel_clone+0xeb/0x890 [ 322.125495][ T7311] ? create_io_thread+0xe0/0xe0 [ 322.127344][ T7311] ? vfs_write+0x15c/0xd50 [ 322.128972][ T7311] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 322.131101][ T7311] ? wait_for_completion_io_timeout+0x20/0x20 [ 322.133484][ T7311] __do_sys_clone+0xba/0x100 [ 322.135630][ T7311] ? kernel_clone+0x890/0x890 [ 322.137754][ T7311] ? syscall_enter_from_user_mode+0x26/0x80 [ 322.140094][ T7311] do_syscall_64+0x39/0xb0 [ 322.141712][ T7311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 322.143842][ T7311] RIP: 0033:0x7f81ce88c389 [ 322.145474][ T7311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 322.154020][ T7311] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 322.157826][ T7311] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 322.161554][ T7311] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 322.165307][ T7311] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 322.168833][ T7311] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 322.172172][ T7311] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 322.175022][ T7311] 23:08:34 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x41) [ 322.177707][ T1343] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.180398][ T1343] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.185160][ T7320] CPU: 1 PID: 7320 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 322.188934][ T7320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 322.192276][ T7320] Call Trace: [ 322.193609][ T7320] [ 322.194791][ T7320] dump_stack_lvl+0x136/0x150 [ 322.196627][ T7320] should_fail_ex+0x4a3/0x5b0 23:08:34 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 95) 23:08:34 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x41) [ 322.198402][ T7320] should_failslab+0x9/0x20 [ 322.200256][ T7320] kmem_cache_alloc+0x5d/0x3f0 [ 322.202058][ T7320] anon_vma_fork+0xe2/0x630 [ 322.203757][ T7320] ? anon_vma_name+0xc6/0x170 [ 322.205493][ T7320] dup_mmap+0xfc9/0x19d0 [ 322.207108][ T7320] ? replace_mm_exe_file+0x4c0/0x4c0 [ 322.209298][ T7320] ? lockdep_hardirqs_on+0x7d/0x100 [ 322.211415][ T7320] ? mm_init+0xc7a/0x1030 [ 322.213015][ T7320] copy_process+0x6663/0x75c0 [ 322.214694][ T7320] ? pidfd_prepare+0x80/0x80 [ 322.215948][ T7335] FAULT_INJECTION: forcing a failure. [ 322.215948][ T7335] name failslab, interval 1, probability 0, space 0, times 0 [ 322.216326][ T7320] ? find_held_lock+0x2d/0x110 [ 322.216342][ T7320] ? find_held_lock+0x2d/0x110 [ 322.216353][ T7320] kernel_clone+0xeb/0x890 [ 322.216364][ T7320] ? create_io_thread+0xe0/0xe0 [ 322.228028][ T7320] ? vfs_write+0x15c/0xd50 [ 322.229748][ T7320] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 322.231823][ T7320] ? wait_for_completion_io_timeout+0x20/0x20 [ 322.234030][ T7320] __do_sys_clone+0xba/0x100 [ 322.235837][ T7320] ? kernel_clone+0x890/0x890 [ 322.237612][ T7320] ? syscall_enter_from_user_mode+0x26/0x80 [ 322.239864][ T7320] do_syscall_64+0x39/0xb0 [ 322.241553][ T7320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 322.243689][ T7320] RIP: 0033:0x7f469ba8c389 [ 322.245307][ T7320] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 322.252352][ T7320] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 322.255465][ T7320] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 322.258319][ T7320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 322.261296][ T7320] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 322.264182][ T7320] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 322.267042][ T7320] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 322.269922][ T7320] [ 322.271054][ T7335] CPU: 0 PID: 7335 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 322.275529][ T7335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 322.279015][ T7335] Call Trace: [ 322.280376][ T7335] [ 322.281457][ T7335] dump_stack_lvl+0x136/0x150 [ 322.283165][ T7335] should_fail_ex+0x4a3/0x5b0 23:08:34 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 95) 23:08:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0x20408c0) 23:08:34 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x1, {0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x32}, 0x8}}}, 0x38) [ 322.284868][ T7335] should_failslab+0x9/0x20 [ 322.286691][ T7335] kmem_cache_alloc+0x5d/0x3f0 [ 322.288442][ T7335] anon_vma_fork+0x1f1/0x630 [ 322.290119][ T7335] ? anon_vma_name+0xc6/0x170 [ 322.291831][ T7335] dup_mmap+0xfc9/0x19d0 23:08:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0x20408c0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) (async) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0x20408c0) (async) 23:08:34 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x1, {0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x32}, 0x8}}}, 0x38) [ 322.293839][ T7335] ? replace_mm_exe_file+0x4c0/0x4c0 [ 322.296556][ T7335] ? lockdep_hardirqs_on+0x7d/0x100 [ 322.298602][ T7335] ? mm_init+0xc7a/0x1030 [ 322.299559][ T7341] FAULT_INJECTION: forcing a failure. [ 322.299559][ T7341] name failslab, interval 1, probability 0, space 0, times 0 [ 322.300232][ T7335] copy_process+0x6663/0x75c0 [ 322.300257][ T7335] ? pidfd_prepare+0x80/0x80 23:08:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0x20408c0) [ 322.300276][ T7335] ? find_held_lock+0x2d/0x110 [ 322.300295][ T7335] ? find_held_lock+0x2d/0x110 [ 322.300312][ T7335] kernel_clone+0xeb/0x890 [ 322.300331][ T7335] ? create_io_thread+0xe0/0xe0 [ 322.317528][ T7335] ? vfs_write+0x15c/0xd50 [ 322.319936][ T7335] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 322.322690][ T7335] ? wait_for_completion_io_timeout+0x20/0x20 [ 322.325614][ T7335] __do_sys_clone+0xba/0x100 [ 322.327750][ T7335] ? kernel_clone+0x890/0x890 [ 322.329903][ T7335] ? syscall_enter_from_user_mode+0x26/0x80 [ 322.332735][ T7335] do_syscall_64+0x39/0xb0 [ 322.334817][ T7335] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 322.337524][ T7335] RIP: 0033:0x7f81ce88c389 [ 322.339875][ T7335] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 322.348764][ T7335] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 322.352491][ T7335] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 322.356095][ T7335] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 322.360027][ T7335] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 322.363707][ T7335] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 322.367153][ T7335] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 322.370760][ T7335] [ 322.372201][ T7341] CPU: 2 PID: 7341 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 322.376064][ T7341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 322.379323][ T7341] Call Trace: [ 322.380557][ T7341] [ 322.381636][ T7341] dump_stack_lvl+0x136/0x150 [ 322.383354][ T7341] should_fail_ex+0x4a3/0x5b0 [ 322.385073][ T7341] should_failslab+0x9/0x20 [ 322.386722][ T7341] kmem_cache_alloc+0x5d/0x3f0 [ 322.388473][ T7341] vm_area_dup+0x23/0x300 [ 322.390044][ T7341] dup_mmap+0x713/0x19d0 [ 322.391609][ T7341] ? replace_mm_exe_file+0x4c0/0x4c0 [ 322.393585][ T7341] ? lockdep_hardirqs_on+0x7d/0x100 [ 322.395460][ T7341] ? mm_init+0xc7a/0x1030 [ 322.397093][ T7341] copy_process+0x6663/0x75c0 [ 322.398812][ T7341] ? pidfd_prepare+0x80/0x80 [ 322.400486][ T7341] ? find_held_lock+0x2d/0x110 [ 322.402244][ T7341] ? find_held_lock+0x2d/0x110 [ 322.404068][ T7341] kernel_clone+0xeb/0x890 [ 322.405702][ T7341] ? create_io_thread+0xe0/0xe0 [ 322.407468][ T7341] ? vfs_write+0x15c/0xd50 [ 322.409100][ T7341] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 322.411118][ T7341] ? wait_for_completion_io_timeout+0x20/0x20 [ 322.413315][ T7341] __do_sys_clone+0xba/0x100 [ 322.414991][ T7341] ? kernel_clone+0x890/0x890 [ 322.416748][ T7341] ? syscall_enter_from_user_mode+0x26/0x80 [ 322.418901][ T7341] do_syscall_64+0x39/0xb0 [ 322.420530][ T7341] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 322.422710][ T7341] RIP: 0033:0x7f469ba8c389 [ 322.424333][ T7341] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 322.431235][ T7341] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 322.434238][ T7341] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 322.437154][ T7341] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 322.440028][ T7341] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 322.442863][ T7341] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 322.445717][ T7341] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 322.448568][ T7341] 23:08:34 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 96) 23:08:34 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x1, {0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x32}, 0x8}}}, 0x38) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x1, {0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x32}, 0x8}}}, 0x38) (async) 23:08:34 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 96) 23:08:34 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="2000000000000000000000e70106000a000000000005000700100000000500110000e1ffff05000800a2aa0000060008000000"], 0x3c}}, 0x8000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r1) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r4, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r4, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r4, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r4, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c801}, 0x20000000) [ 322.468892][ T7353] FAULT_INJECTION: forcing a failure. [ 322.468892][ T7353] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:08:34 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x20140, 0x29) [ 322.473903][ T7353] CPU: 0 PID: 7353 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 322.475669][ T7359] FAULT_INJECTION: forcing a failure. 23:08:34 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="2000000000000000000000e70106000a000000000005000700100000000500110000e1ffff05000800a2aa0000060008000000"], 0x3c}}, 0x8000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r1) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r4, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) (async) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r4, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r4, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) (async) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r4, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r4, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r4, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r4, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c801}, 0x20000000) [ 322.475669][ T7359] name failslab, interval 1, probability 0, space 0, times 0 [ 322.477909][ T7353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 322.477923][ T7353] Call Trace: [ 322.477927][ T7353] [ 322.477931][ T7353] dump_stack_lvl+0x136/0x150 [ 322.477947][ T7353] should_fail_ex+0x4a3/0x5b0 [ 322.477965][ T7353] prepare_alloc_pages+0x178/0x570 [ 322.493926][ T7353] __alloc_pages+0x149/0x4a0 23:08:34 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x20140, 0x29) [ 322.495828][ T7353] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 322.498478][ T7353] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 322.500746][ T7353] ? find_held_lock+0x2d/0x110 [ 322.502501][ T7353] ? lock_downgrade+0x690/0x690 [ 322.504300][ T7353] alloc_pages+0x1aa/0x270 [ 322.505947][ T7353] pte_alloc_one+0x1a/0x230 23:08:34 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="2000000000000000000000e70106000a000000000005000700100000000500110000e1ffff05000800a2aa0000060008000000"], 0x3c}}, 0x8000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r1) (async) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r4, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r4, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r4, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) (async) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r4, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c801}, 0x20000000) [ 322.507742][ T7353] __pte_alloc+0x6d/0x260 [ 322.509400][ T7353] ? pmd_install+0x160/0x160 [ 322.511098][ T7353] ? do_raw_spin_unlock+0x175/0x230 [ 322.513071][ T7353] copy_page_range+0x151e/0x3830 [ 322.514879][ T7353] ? mas_store+0x275/0x3a0 [ 322.516520][ T7353] ? handle_mm_fault+0x9f0/0x9f0 [ 322.518332][ T7353] ? down_write+0x14f/0x200 [ 322.520031][ T7353] dup_mmap+0x10bc/0x19d0 [ 322.521587][ T7353] ? replace_mm_exe_file+0x4c0/0x4c0 [ 322.523512][ T7353] ? lockdep_hardirqs_on+0x7d/0x100 [ 322.525406][ T7353] ? mm_init+0xc7a/0x1030 [ 322.527001][ T7353] copy_process+0x6663/0x75c0 [ 322.528736][ T7353] ? pidfd_prepare+0x80/0x80 [ 322.530440][ T7353] ? find_held_lock+0x2d/0x110 [ 322.532206][ T7353] ? find_held_lock+0x2d/0x110 [ 322.533963][ T7353] kernel_clone+0xeb/0x890 [ 322.535600][ T7353] ? create_io_thread+0xe0/0xe0 [ 322.537384][ T7353] ? vfs_write+0x15c/0xd50 [ 322.539037][ T7353] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 322.541099][ T7353] ? wait_for_completion_io_timeout+0x20/0x20 [ 322.543304][ T7353] __do_sys_clone+0xba/0x100 [ 322.544999][ T7353] ? kernel_clone+0x890/0x890 [ 322.546714][ T7353] ? syscall_enter_from_user_mode+0x26/0x80 [ 322.548878][ T7353] do_syscall_64+0x39/0xb0 [ 322.550507][ T7353] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 322.552668][ T7353] RIP: 0033:0x7f81ce88c389 [ 322.554300][ T7353] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 322.561313][ T7353] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 322.564358][ T7353] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 322.567254][ T7353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 322.570134][ T7353] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 322.573015][ T7353] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 322.575902][ T7353] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 322.578957][ T7353] [ 322.580157][ T7359] CPU: 2 PID: 7359 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 322.584672][ T7359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 322.588000][ T7359] Call Trace: [ 322.589224][ T7359] [ 322.590304][ T7359] dump_stack_lvl+0x136/0x150 23:08:34 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 97) 23:08:34 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x20140, 0x29) [ 322.592059][ T7359] should_fail_ex+0x4a3/0x5b0 [ 322.594014][ T7359] should_failslab+0x9/0x20 [ 322.595803][ T7359] kmem_cache_alloc+0x5d/0x3f0 [ 322.597631][ T7359] vm_area_dup+0x23/0x300 [ 322.599214][ T7359] dup_mmap+0x713/0x19d0 [ 322.600771][ T7359] ? replace_mm_exe_file+0x4c0/0x4c0 [ 322.602697][ T7359] ? lockdep_hardirqs_on+0x7d/0x100 [ 322.604625][ T7359] ? mm_init+0xc7a/0x1030 [ 322.606231][ T7359] copy_process+0x6663/0x75c0 [ 322.607975][ T7359] ? pidfd_prepare+0x80/0x80 [ 322.609649][ T7359] ? find_held_lock+0x2d/0x110 [ 322.611381][ T7359] ? find_held_lock+0x2d/0x110 [ 322.613131][ T7359] kernel_clone+0xeb/0x890 [ 322.614788][ T7359] ? create_io_thread+0xe0/0xe0 [ 322.616743][ T7359] ? vfs_write+0x15c/0xd50 [ 322.618536][ T7359] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 322.620882][ T7359] ? wait_for_completion_io_timeout+0x20/0x20 [ 322.623681][ T7359] __do_sys_clone+0xba/0x100 [ 322.625844][ T7359] ? kernel_clone+0x890/0x890 [ 322.628074][ T7359] ? syscall_enter_from_user_mode+0x26/0x80 [ 322.630796][ T7359] do_syscall_64+0x39/0xb0 [ 322.632879][ T7359] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 322.635643][ T7359] RIP: 0033:0x7f469ba8c389 [ 322.637708][ T7359] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 322.646161][ T7359] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 322.649193][ T7359] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 322.652017][ T7359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 322.654848][ T7359] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 322.657704][ T7359] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 322.660599][ T7359] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 322.663647][ T7359] 23:08:34 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 97) 23:08:34 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 98) 23:08:34 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000040)={0x6}) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000600), 0x202000, 0x10c) r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000500), 0x3, 0x2) r1 = socket(0xb, 0x2, 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000740)={'sit0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x10, 0x0, 0x0, 0x1, {{0x1d, 0x4, 0x2, 0x2f, 0x74, 0x66, 0x0, 0xff, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp_addr={0x44, 0x2c, 0x31, 0x1, 0x8, [{@multicast1, 0x7}, {@empty, 0x1000}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}]}, @cipso={0x86, 0x32, 0xffffffffffffffff, [{0x0, 0x8, "b714fe55ddf6"}, {0x5, 0x12, "03b287c34e059766dcc76c434576856a"}, {0x7, 0x8, "9275f1bd3676"}, {0x1, 0xa, "c17e700de522094f"}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a00)={'syztnl0\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x7, 0x7, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @local}, 0x8, 0x710, 0xfffffe00, 0x400}}) prctl$PR_SET_FP_MODE(0x2d, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000a40)={@initdev, @remote, 0x0}, &(0x7f0000000a80)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000bc0)={'ip_vti0\x00', &(0x7f0000001300)={'tunl0\x00', 0x0, 0x10, 0x700, 0x2, 0x9, {{0x33, 0x4, 0x0, 0x5, 0xcc, 0x66, 0x0, 0x39, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x1b, 0x64, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x9b}, @multicast1, @remote, @remote]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0xa5, [@multicast1, @multicast2, @multicast2, @multicast1, @multicast2]}, @rr={0x7, 0xf, 0x95, [@empty, @multicast1, @multicast1]}, @end, @cipso={0x86, 0x65, 0x3, [{0x6, 0x10, "aacd55a09197da4f652d32e08b52"}, {0x6, 0x12, "9cf5641f1925334d57f65ddbafa1056a"}, {0x5, 0xc, "c9907ac4da1c01a26a2e"}, {0x1, 0x5, "2c5ce7"}, {0x7, 0xa, "7428ade45c7865fa"}, {0x6, 0xa, "aa5b445f44979287"}, {0x5, 0xe, "34a02856a0180ad7c874af55"}, {0x5, 0xa, "9e06466d81a924f2"}]}, @noop, @lsrr={0x83, 0xb, 0x58, [@loopback, @multicast1]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000012c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001280)={&(0x7f0000000c00)={0x668, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff7fff}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0xff, 0x1, 0x1}, {0x9, 0x80, 0x5, 0x1000}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc29}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7a}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x120, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x9, 0x4, 0x6, 0x32f}, {0xa5, 0x1d, 0x4, 0xf549}, {0x9, 0x7, 0x1, 0x20}, {0x4, 0x7, 0x2, 0x17}, {0x3ff, 0x3f, 0x1, 0x37}, {0x2, 0x5, 0x6, 0x8}, {0x9b5, 0x7f, 0x5, 0x3}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x8, 0x0, 0xf8, 0x677}, {0x800, 0xac, 0xe, 0x10001}, {0x3, 0x40, 0x0, 0x2}, {0x5, 0x0, 0x3, 0x8000}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa593}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x668}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) write$damon_schemes(r0, &(0x7f0000000540)={0xe1c, 0x0, 0x20, 0x20, 0x7, 0x8000000000000000, 0x8001}, 0x66) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000005c0)={0xffffffffffffffff, 0x1, 0x2000, 0x8000}) 23:08:34 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x20}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008810}, 0x80000) [ 322.695201][ T7384] FAULT_INJECTION: forcing a failure. 23:08:34 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x20}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008810}, 0x80000) 23:08:34 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 98) 23:08:34 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000040)={0x6}) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000600), 0x202000, 0x10c) (async) r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000500), 0x3, 0x2) r1 = socket(0xb, 0x2, 0x8) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000740)={'sit0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x10, 0x0, 0x0, 0x1, {{0x1d, 0x4, 0x2, 0x2f, 0x74, 0x66, 0x0, 0xff, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp_addr={0x44, 0x2c, 0x31, 0x1, 0x8, [{@multicast1, 0x7}, {@empty, 0x1000}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}]}, @cipso={0x86, 0x32, 0xffffffffffffffff, [{0x0, 0x8, "b714fe55ddf6"}, {0x5, 0x12, "03b287c34e059766dcc76c434576856a"}, {0x7, 0x8, "9275f1bd3676"}, {0x1, 0xa, "c17e700de522094f"}]}]}}}}}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a00)={'syztnl0\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x7, 0x7, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @local}, 0x8, 0x710, 0xfffffe00, 0x400}}) prctl$PR_SET_FP_MODE(0x2d, 0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000a40)={@initdev, @remote, 0x0}, &(0x7f0000000a80)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000bc0)={'ip_vti0\x00', &(0x7f0000001300)={'tunl0\x00', 0x0, 0x10, 0x700, 0x2, 0x9, {{0x33, 0x4, 0x0, 0x5, 0xcc, 0x66, 0x0, 0x39, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x1b, 0x64, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x9b}, @multicast1, @remote, @remote]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0xa5, [@multicast1, @multicast2, @multicast2, @multicast1, @multicast2]}, @rr={0x7, 0xf, 0x95, [@empty, @multicast1, @multicast1]}, @end, @cipso={0x86, 0x65, 0x3, [{0x6, 0x10, "aacd55a09197da4f652d32e08b52"}, {0x6, 0x12, "9cf5641f1925334d57f65ddbafa1056a"}, {0x5, 0xc, "c9907ac4da1c01a26a2e"}, {0x1, 0x5, "2c5ce7"}, {0x7, 0xa, "7428ade45c7865fa"}, {0x6, 0xa, "aa5b445f44979287"}, {0x5, 0xe, "34a02856a0180ad7c874af55"}, {0x5, 0xa, "9e06466d81a924f2"}]}, @noop, @lsrr={0x83, 0xb, 0x58, [@loopback, @multicast1]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000012c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001280)={&(0x7f0000000c00)={0x668, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff7fff}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0xff, 0x1, 0x1}, {0x9, 0x80, 0x5, 0x1000}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc29}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7a}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x120, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x9, 0x4, 0x6, 0x32f}, {0xa5, 0x1d, 0x4, 0xf549}, {0x9, 0x7, 0x1, 0x20}, {0x4, 0x7, 0x2, 0x17}, {0x3ff, 0x3f, 0x1, 0x37}, {0x2, 0x5, 0x6, 0x8}, {0x9b5, 0x7f, 0x5, 0x3}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x8, 0x0, 0xf8, 0x677}, {0x800, 0xac, 0xe, 0x10001}, {0x3, 0x40, 0x0, 0x2}, {0x5, 0x0, 0x3, 0x8000}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa593}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x668}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) (async) write$damon_schemes(r0, &(0x7f0000000540)={0xe1c, 0x0, 0x20, 0x20, 0x7, 0x8000000000000000, 0x8001}, 0x66) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000005c0)={0xffffffffffffffff, 0x1, 0x2000, 0x8000}) [ 322.695201][ T7384] name failslab, interval 1, probability 0, space 0, times 0 [ 322.700520][ T7384] CPU: 2 PID: 7384 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 322.704816][ T7384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 322.708275][ T7384] Call Trace: [ 322.709504][ T7384] 23:08:34 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x20}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008810}, 0x80000) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x20}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008810}, 0x80000) (async) [ 322.709718][ T7386] FAULT_INJECTION: forcing a failure. 23:08:34 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000040)={0x6}) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000600), 0x202000, 0x10c) (async) r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000500), 0x3, 0x2) r1 = socket(0xb, 0x2, 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000740)={'sit0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x10, 0x0, 0x0, 0x1, {{0x1d, 0x4, 0x2, 0x2f, 0x74, 0x66, 0x0, 0xff, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp_addr={0x44, 0x2c, 0x31, 0x1, 0x8, [{@multicast1, 0x7}, {@empty, 0x1000}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}]}, @cipso={0x86, 0x32, 0xffffffffffffffff, [{0x0, 0x8, "b714fe55ddf6"}, {0x5, 0x12, "03b287c34e059766dcc76c434576856a"}, {0x7, 0x8, "9275f1bd3676"}, {0x1, 0xa, "c17e700de522094f"}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x4) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a00)={'syztnl0\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x7, 0x7, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @local}, 0x8, 0x710, 0xfffffe00, 0x400}}) (async) prctl$PR_SET_FP_MODE(0x2d, 0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000a40)={@initdev, @remote, 0x0}, &(0x7f0000000a80)=0xc) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000bc0)={'ip_vti0\x00', &(0x7f0000001300)={'tunl0\x00', 0x0, 0x10, 0x700, 0x2, 0x9, {{0x33, 0x4, 0x0, 0x5, 0xcc, 0x66, 0x0, 0x39, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x1b, 0x64, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x9b}, @multicast1, @remote, @remote]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0xa5, [@multicast1, @multicast2, @multicast2, @multicast1, @multicast2]}, @rr={0x7, 0xf, 0x95, [@empty, @multicast1, @multicast1]}, @end, @cipso={0x86, 0x65, 0x3, [{0x6, 0x10, "aacd55a09197da4f652d32e08b52"}, {0x6, 0x12, "9cf5641f1925334d57f65ddbafa1056a"}, {0x5, 0xc, "c9907ac4da1c01a26a2e"}, {0x1, 0x5, "2c5ce7"}, {0x7, 0xa, "7428ade45c7865fa"}, {0x6, 0xa, "aa5b445f44979287"}, {0x5, 0xe, "34a02856a0180ad7c874af55"}, {0x5, 0xa, "9e06466d81a924f2"}]}, @noop, @lsrr={0x83, 0xb, 0x58, [@loopback, @multicast1]}]}}}}}) (rerun: 32) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000012c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001280)={&(0x7f0000000c00)={0x668, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff7fff}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0xff, 0x1, 0x1}, {0x9, 0x80, 0x5, 0x1000}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc29}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7a}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x120, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x9, 0x4, 0x6, 0x32f}, {0xa5, 0x1d, 0x4, 0xf549}, {0x9, 0x7, 0x1, 0x20}, {0x4, 0x7, 0x2, 0x17}, {0x3ff, 0x3f, 0x1, 0x37}, {0x2, 0x5, 0x6, 0x8}, {0x9b5, 0x7f, 0x5, 0x3}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x8, 0x0, 0xf8, 0x677}, {0x800, 0xac, 0xe, 0x10001}, {0x3, 0x40, 0x0, 0x2}, {0x5, 0x0, 0x3, 0x8000}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa593}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x668}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) (async) write$damon_schemes(r0, &(0x7f0000000540)={0xe1c, 0x0, 0x20, 0x20, 0x7, 0x8000000000000000, 0x8001}, 0x66) (async) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000005c0)={0xffffffffffffffff, 0x1, 0x2000, 0x8000}) [ 322.709718][ T7386] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 322.710579][ T7384] dump_stack_lvl+0x136/0x150 [ 322.710597][ T7384] should_fail_ex+0x4a3/0x5b0 [ 322.720908][ T7384] should_failslab+0x9/0x20 [ 322.722737][ T7384] kmem_cache_alloc+0x5d/0x3f0 [ 322.724622][ T7384] vm_area_dup+0x55/0x300 [ 322.726298][ T7384] dup_mmap+0x713/0x19d0 [ 322.727861][ T7384] ? replace_mm_exe_file+0x4c0/0x4c0 [ 322.729890][ T7384] ? lockdep_hardirqs_on+0x7d/0x100 [ 322.731779][ T7384] ? mm_init+0xc7a/0x1030 [ 322.733372][ T7384] copy_process+0x6663/0x75c0 [ 322.735079][ T7384] ? pidfd_prepare+0x80/0x80 [ 322.736975][ T7384] ? find_held_lock+0x2d/0x110 [ 322.738741][ T7384] ? find_held_lock+0x2d/0x110 [ 322.740532][ T7384] kernel_clone+0xeb/0x890 [ 322.742197][ T7384] ? create_io_thread+0xe0/0xe0 [ 322.744058][ T7384] ? vfs_write+0x15c/0xd50 [ 322.745691][ T7384] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 322.747723][ T7384] ? wait_for_completion_io_timeout+0x20/0x20 [ 322.749915][ T7384] __do_sys_clone+0xba/0x100 [ 322.751600][ T7384] ? kernel_clone+0x890/0x890 [ 322.753317][ T7384] ? syscall_enter_from_user_mode+0x26/0x80 [ 322.755461][ T7384] do_syscall_64+0x39/0xb0 [ 322.757105][ T7384] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 322.759242][ T7384] RIP: 0033:0x7f81ce88c389 [ 322.760854][ T7384] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 322.767961][ T7384] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 322.771029][ T7384] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 322.773913][ T7384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 322.776807][ T7384] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 322.779682][ T7384] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 322.782590][ T7384] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 322.785453][ T7384] [ 322.786664][ T7386] CPU: 0 PID: 7386 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 322.791814][ T7386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 322.796136][ T7386] Call Trace: [ 322.797701][ T7386] [ 322.799119][ T7386] dump_stack_lvl+0x136/0x150 23:08:34 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 99) 23:08:34 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0x0) 23:08:34 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0xc8000, 0x40) socket$igmp(0x2, 0x3, 0x2) [ 322.801505][ T7386] should_fail_ex+0x4a3/0x5b0 [ 322.803348][ T7386] prepare_alloc_pages+0x178/0x570 [ 322.805232][ T7386] __alloc_pages+0x149/0x4a0 [ 322.807133][ T7386] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 322.810003][ T7386] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 322.812430][ T7386] ? find_held_lock+0x2d/0x110 [ 322.814614][ T7386] ? lock_downgrade+0x690/0x690 23:08:34 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0x0) [ 322.816755][ T7386] alloc_pages+0x1aa/0x270 [ 322.819002][ T7386] pte_alloc_one+0x1a/0x230 [ 322.821195][ T7386] __pte_alloc+0x6d/0x260 [ 322.823021][ T7386] ? pmd_install+0x160/0x160 [ 322.824948][ T7386] ? do_raw_spin_unlock+0x175/0x230 [ 322.827123][ T7386] copy_page_range+0x151e/0x3830 [ 322.827458][ T7409] FAULT_INJECTION: forcing a failure. [ 322.827458][ T7409] name failslab, interval 1, probability 0, space 0, times 0 [ 322.829360][ T7386] ? mas_store+0x275/0x3a0 [ 322.836054][ T7386] ? handle_mm_fault+0x9f0/0x9f0 [ 322.838100][ T7386] ? down_write+0x14f/0x200 [ 322.839898][ T7386] dup_mmap+0x10bc/0x19d0 [ 322.841553][ T7386] ? replace_mm_exe_file+0x4c0/0x4c0 [ 322.843915][ T7386] ? lockdep_hardirqs_on+0x7d/0x100 [ 322.845813][ T7386] ? mm_init+0xc7a/0x1030 [ 322.847477][ T7386] copy_process+0x6663/0x75c0 [ 322.849336][ T7386] ? pidfd_prepare+0x80/0x80 [ 322.851238][ T7386] ? find_held_lock+0x2d/0x110 [ 322.853181][ T7386] ? find_held_lock+0x2d/0x110 [ 322.854877][ T7386] kernel_clone+0xeb/0x890 [ 322.856564][ T7386] ? create_io_thread+0xe0/0xe0 [ 322.858455][ T7386] ? vfs_write+0x15c/0xd50 [ 322.860241][ T7386] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 322.862414][ T7386] ? wait_for_completion_io_timeout+0x20/0x20 [ 322.864803][ T7386] __do_sys_clone+0xba/0x100 [ 322.866763][ T7386] ? kernel_clone+0x890/0x890 [ 322.868742][ T7386] ? syscall_enter_from_user_mode+0x26/0x80 [ 322.871074][ T7386] do_syscall_64+0x39/0xb0 [ 322.873072][ T7386] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 322.875828][ T7386] RIP: 0033:0x7f469ba8c389 [ 322.877896][ T7386] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 322.887008][ T7386] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 322.890569][ T7386] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 322.894045][ T7386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 322.897721][ T7386] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 322.901356][ T7386] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 322.904384][ T7386] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 322.907303][ T7386] [ 322.908494][ T7409] CPU: 1 PID: 7409 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 322.912225][ T7409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 322.915419][ T7409] Call Trace: [ 322.916670][ T7409] [ 322.917785][ T7409] dump_stack_lvl+0x136/0x150 [ 322.919579][ T7409] should_fail_ex+0x4a3/0x5b0 [ 322.921341][ T7409] should_failslab+0x9/0x20 [ 322.923101][ T7409] kmem_cache_alloc+0x5d/0x3f0 [ 322.925037][ T7409] vm_area_dup+0x55/0x300 [ 322.926801][ T7409] dup_mmap+0x713/0x19d0 23:08:34 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 99) [ 322.928506][ T7409] ? replace_mm_exe_file+0x4c0/0x4c0 [ 322.930681][ T7409] ? lockdep_hardirqs_on+0x7d/0x100 [ 322.932607][ T7409] ? mm_init+0xc7a/0x1030 [ 322.934173][ T7409] copy_process+0x6663/0x75c0 [ 322.935909][ T7409] ? pidfd_prepare+0x80/0x80 [ 322.937613][ T7409] ? find_held_lock+0x2d/0x110 [ 322.939391][ T7417] FAULT_INJECTION: forcing a failure. [ 322.939391][ T7417] name failslab, interval 1, probability 0, space 0, times 0 [ 322.943867][ T7409] ? find_held_lock+0x2d/0x110 [ 322.945677][ T7409] kernel_clone+0xeb/0x890 [ 322.947317][ T7409] ? create_io_thread+0xe0/0xe0 [ 322.949277][ T7409] ? vfs_write+0x15c/0xd50 [ 322.951230][ T7409] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 322.953473][ T7409] ? wait_for_completion_io_timeout+0x20/0x20 [ 322.955756][ T7409] __do_sys_clone+0xba/0x100 [ 322.957570][ T7409] ? kernel_clone+0x890/0x890 [ 322.959462][ T7409] ? syscall_enter_from_user_mode+0x26/0x80 [ 322.961747][ T7409] do_syscall_64+0x39/0xb0 [ 322.963451][ T7409] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 322.965779][ T7409] RIP: 0033:0x7f81ce88c389 [ 322.967367][ T7409] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 322.973938][ T7409] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 322.976901][ T7409] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 322.979777][ T7409] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 322.982691][ T7409] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 322.985517][ T7409] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 322.988313][ T7409] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 322.991103][ T7409] [ 322.992215][ T7417] CPU: 0 PID: 7417 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 322.996846][ T7417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 323.000707][ T7417] Call Trace: [ 323.002160][ T7417] 23:08:35 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) (async) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0x0) [ 323.003440][ T7417] dump_stack_lvl+0x136/0x150 [ 323.005787][ T7417] should_fail_ex+0x4a3/0x5b0 [ 323.007865][ T7417] should_failslab+0x9/0x20 [ 323.009538][ T7417] kmem_cache_alloc+0x5d/0x3f0 [ 323.011274][ T7417] ptlock_alloc+0x21/0x70 [ 323.012874][ T7417] pte_alloc_one+0x6c/0x230 [ 323.014519][ T7417] __pte_alloc+0x6d/0x260 [ 323.016104][ T7417] ? pmd_install+0x160/0x160 [ 323.017821][ T7417] ? do_raw_spin_unlock+0x175/0x230 [ 323.019716][ T7417] copy_page_range+0x151e/0x3830 [ 323.021532][ T7417] ? mas_store+0x275/0x3a0 [ 323.023175][ T7417] ? handle_mm_fault+0x9f0/0x9f0 [ 323.024967][ T7417] ? down_write+0x14f/0x200 [ 323.026660][ T7417] dup_mmap+0x10bc/0x19d0 [ 323.028234][ T7417] ? replace_mm_exe_file+0x4c0/0x4c0 [ 323.030130][ T7417] ? lockdep_hardirqs_on+0x7d/0x100 [ 323.032010][ T7417] ? mm_init+0xc7a/0x1030 23:08:35 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) [ 323.033578][ T7417] copy_process+0x6663/0x75c0 [ 323.035436][ T7417] ? pidfd_prepare+0x80/0x80 [ 323.037241][ T7417] ? find_held_lock+0x2d/0x110 [ 323.038975][ T7417] ? find_held_lock+0x2d/0x110 [ 323.040701][ T7417] kernel_clone+0xeb/0x890 [ 323.042305][ T7417] ? create_io_thread+0xe0/0xe0 [ 323.044059][ T7417] ? vfs_write+0x15c/0xd50 [ 323.045656][ T7417] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 323.047776][ T7417] ? wait_for_completion_io_timeout+0x20/0x20 23:08:35 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) [ 323.049964][ T7417] __do_sys_clone+0xba/0x100 [ 323.051828][ T7417] ? kernel_clone+0x890/0x890 [ 323.053413][ T7417] ? syscall_enter_from_user_mode+0x26/0x80 [ 323.055535][ T7417] do_syscall_64+0x39/0xb0 [ 323.057204][ T7417] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 323.059359][ T7417] RIP: 0033:0x7f469ba8c389 [ 323.061001][ T7417] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 323.069113][ T7417] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 323.072069][ T7417] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 323.074880][ T7417] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 323.077705][ T7417] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 323.080569][ T7417] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 323.083393][ T7417] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 323.086238][ T7417] 23:08:35 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 100) 23:08:35 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) 23:08:35 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0xc8000, 0x40) (async) socket$igmp(0x2, 0x3, 0x2) 23:08:35 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 100) 23:08:35 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x4004000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r3) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="f500404ce637dc00f7e3d74f275d2aed6e7e7509a4a1236b23b9cb229cbe268f8ec1b065a4126c6e64020049c6e5f144661b749d56d6ce9121c0072d4ccf2ae177dab2bfe2c2344d46ef3efd8d5876a6f4315b1692bf51a492af7bba354aa49bc28afc2df33c621ce062205f47a20b5ea67717908bccd19ae6632a4d7654b2ae3658ca4eb98c79d7c050035fc5ae5eb0db34f9359a885eeb55cf18e9bf642e9d556320c7d6375b99a234239c87062f2a", @ANYRES16=r1, @ANYBLOB="00042cbd7000ffdbdf250300000006000800a3aa00000c0009000203aaaaaaaaaaaa0500120007000000050012000300000006000800a2aa0000"], 0x40}, 0x1, 0x0, 0x0, 0x18854}, 0x8000001) [ 323.108394][ T7433] FAULT_INJECTION: forcing a failure. [ 323.108394][ T7433] name failslab, interval 1, probability 0, space 0, times 0 [ 323.110948][ T7434] FAULT_INJECTION: forcing a failure. [ 323.110948][ T7434] name failslab, interval 1, probability 0, space 0, times 0 23:08:35 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0xc8000, 0x40) socket$igmp(0x2, 0x3, 0x2) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0xc8000, 0x40) (async) socket$igmp(0x2, 0x3, 0x2) (async) [ 323.113471][ T7433] CPU: 2 PID: 7433 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 323.122873][ T7433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 323.127062][ T7433] Call Trace: [ 323.128810][ T7433] [ 323.130255][ T7433] dump_stack_lvl+0x136/0x150 [ 323.132524][ T7433] should_fail_ex+0x4a3/0x5b0 [ 323.134739][ T7433] should_failslab+0x9/0x20 [ 323.136938][ T7433] kmem_cache_alloc+0x5d/0x3f0 23:08:35 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) (async) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x4004000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r3) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="f500404ce637dc00f7e3d74f275d2aed6e7e7509a4a1236b23b9cb229cbe268f8ec1b065a4126c6e64020049c6e5f144661b749d56d6ce9121c0072d4ccf2ae177dab2bfe2c2344d46ef3efd8d5876a6f4315b1692bf51a492af7bba354aa49bc28afc2df33c621ce062205f47a20b5ea67717908bccd19ae6632a4d7654b2ae3658ca4eb98c79d7c050035fc5ae5eb0db34f9359a885eeb55cf18e9bf642e9d556320c7d6375b99a234239c87062f2a", @ANYRES16=r1, @ANYBLOB="00042cbd7000ffdbdf250300000006000800a3aa00000c0009000203aaaaaaaaaaaa0500120007000000050012000300000006000800a2aa0000"], 0x40}, 0x1, 0x0, 0x0, 0x18854}, 0x8000001) [ 323.139259][ T7433] anon_vma_fork+0xe2/0x630 [ 323.141666][ T7433] ? anon_vma_name+0xc6/0x170 [ 323.143864][ T7433] dup_mmap+0xfc9/0x19d0 [ 323.145897][ T7433] ? replace_mm_exe_file+0x4c0/0x4c0 [ 323.148411][ T7433] ? lockdep_hardirqs_on+0x7d/0x100 23:08:35 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000140)={0xffffffffe5fe2092, 0xffffffffffffffff}) write$ppp(r0, &(0x7f0000000200)="622defa317e31ea25997659be95a695d9dac6ac8d0e182651cdd6049efb5f6f717273df86e3ffb1a28577535e67303cdb832498958ef9e62d993771a59a8800e75bc81491a00e4cc12963606dd6a56cd2db0e6750bd64618356710c2863aef4c7baa1d8dcffdd884e35c4760aa92474dd70884f9c16b3f87330568542919bb2ae6ba36450ee8b2cb368b3e13061b03547fcd910f96e73755b963fdc2e29648537fae531672a8fab40e7c76c0129236a481e60b065d95b75840ce4193840de071994295195f0bf8", 0xc7) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x2, 0x4}}, 0x20) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000440)=0x5f14) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000480)={0xfff, r0, 0x2}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x29, 0x81, 0x1, 0x200, 0x1b, @mcast2, @private0, 0x40, 0x8000, 0x80, 0x101}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xd8, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r3}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000400)={0x1000, r0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x401, 0x3, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x8000}, {0x6, 0x6, 0xa7, 0x6}, {0x6, 0x1, 0x5e, 0x9a}, {0xfff8, 0x0, 0x0, 0x9541}, {0x8, 0x72, 0x8d, 0x7fffffff}, {0x2, 0x77, 0x2, 0x10001}]}) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000100)=0x9) write$ppp(r4, &(0x7f0000000300)="320daa48f9cc04f38b4bd999f35db896585ca6725755720b3b85f34e7af0c53ebf0d7e97f42fa5134158a72a25bbd33876fbf718456f95f65d41a199e7552bcc361149fbe230b540253876d5fee8a05de4b0dd76b3537c7f2eabf6b2bb8482ab4f8b39f4016a2283ca275468e3c8aa3c742c845b3feb263ad66bef08f0575f8177802d82e78b5ca7f2963c2f65ea7b21cf9712b5ab49b1ee32d40052b122b180a417e5b150dd6aa2f85a1a05177a20df28e2e34de9095900c3f6553c8a3451ee39236446ec5fe0e28f231c1819889997c528f3ef8891c5cb554bd36016e96920514d6efb0a36", 0xe6) [ 323.150811][ T7433] ? mm_init+0xc7a/0x1030 [ 323.153092][ T7433] copy_process+0x6663/0x75c0 [ 323.155296][ T7433] ? pidfd_prepare+0x80/0x80 [ 323.157477][ T7433] ? find_held_lock+0x2d/0x110 [ 323.159787][ T7433] ? find_held_lock+0x2d/0x110 [ 323.162181][ T7433] kernel_clone+0xeb/0x890 [ 323.164337][ T7433] ? create_io_thread+0xe0/0xe0 [ 323.166668][ T7433] ? vfs_write+0x15c/0xd50 [ 323.168753][ T7433] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 323.171344][ T7433] ? wait_for_completion_io_timeout+0x20/0x20 [ 323.174200][ T7433] __do_sys_clone+0xba/0x100 [ 323.176362][ T7433] ? kernel_clone+0x890/0x890 [ 323.178560][ T7433] ? syscall_enter_from_user_mode+0x26/0x80 [ 323.181355][ T7433] do_syscall_64+0x39/0xb0 [ 323.183439][ T7433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 323.186292][ T7433] RIP: 0033:0x7f81ce88c389 [ 323.188462][ T7433] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 323.197261][ T7433] RSP: 002b:00007f81cf568118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 323.200823][ T7433] RAX: ffffffffffffffda RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 323.203859][ T7433] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 323.206854][ T7433] RBP: 00007f81cf5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 323.209833][ T7433] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003 [ 323.212773][ T7433] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 323.215918][ T7433] [ 323.217365][ T7434] CPU: 0 PID: 7434 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 323.221251][ T7434] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 323.224638][ T7434] Call Trace: [ 323.225856][ T7434] [ 323.226932][ T7434] dump_stack_lvl+0x136/0x150 [ 323.228644][ T7434] should_fail_ex+0x4a3/0x5b0 [ 323.230436][ T7434] should_failslab+0x9/0x20 [ 323.232097][ T7434] kmem_cache_alloc+0x5d/0x3f0 [ 323.233837][ T7434] vm_area_dup+0x23/0x300 [ 323.235413][ T7434] dup_mmap+0x713/0x19d0 [ 323.236977][ T7434] ? replace_mm_exe_file+0x4c0/0x4c0 [ 323.238902][ T7434] ? lockdep_hardirqs_on+0x7d/0x100 [ 323.240808][ T7434] ? mm_init+0xc7a/0x1030 [ 323.242384][ T7434] copy_process+0x6663/0x75c0 [ 323.244103][ T7434] ? pidfd_prepare+0x80/0x80 [ 323.245775][ T7434] ? find_held_lock+0x2d/0x110 [ 323.247509][ T7434] ? find_held_lock+0x2d/0x110 [ 323.249255][ T7434] kernel_clone+0xeb/0x890 [ 323.250870][ T7434] ? create_io_thread+0xe0/0xe0 [ 323.252625][ T7434] ? vfs_write+0x15c/0xd50 [ 323.254233][ T7434] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 323.256268][ T7434] ? wait_for_completion_io_timeout+0x20/0x20 [ 323.258455][ T7434] __do_sys_clone+0xba/0x100 [ 323.260164][ T7434] ? kernel_clone+0x890/0x890 [ 323.261869][ T7434] ? syscall_enter_from_user_mode+0x26/0x80 [ 323.264009][ T7434] do_syscall_64+0x39/0xb0 [ 323.265624][ T7434] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 323.267769][ T7434] RIP: 0033:0x7f469ba8c389 [ 323.269405][ T7434] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 323.276361][ T7434] RSP: 002b:00007f469c721118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 323.280130][ T7434] RAX: ffffffffffffffda RBX: 00007f469bbabf80 RCX: 00007f469ba8c389 [ 323.283318][ T7434] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 323.286538][ T7434] RBP: 00007f469c7211d0 R08: 0000000000000000 R09: 0000000000000000 [ 323.289934][ T7434] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003 [ 323.293362][ T7434] R13: 00007ffedf0c990f R14: 00007f469c721300 R15: 0000000000022000 [ 323.296884][ T7434] 23:08:35 executing program 3: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000140)={0xffffffffe5fe2092, 0xffffffffffffffff}) write$ppp(r0, &(0x7f0000000200)="622defa317e31ea25997659be95a695d9dac6ac8d0e182651cdd6049efb5f6f717273df86e3ffb1a28577535e67303cdb832498958ef9e62d993771a59a8800e75bc81491a00e4cc12963606dd6a56cd2db0e6750bd64618356710c2863aef4c7baa1d8dcffdd884e35c4760aa92474dd70884f9c16b3f87330568542919bb2ae6ba36450ee8b2cb368b3e13061b03547fcd910f96e73755b963fdc2e29648537fae531672a8fab40e7c76c0129236a481e60b065d95b75840ce4193840de071994295195f0bf8", 0xc7) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x2, 0x4}}, 0x20) (async) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000440)=0x5f14) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000480)={0xfff, r0, 0x2}) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x29, 0x81, 0x1, 0x200, 0x1b, @mcast2, @private0, 0x40, 0x8000, 0x80, 0x101}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xd8, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r3}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000400)={0x1000, r0}) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x401, 0x3, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x8000}, {0x6, 0x6, 0xa7, 0x6}, {0x6, 0x1, 0x5e, 0x9a}, {0xfff8, 0x0, 0x0, 0x9541}, {0x8, 0x72, 0x8d, 0x7fffffff}, {0x2, 0x77, 0x2, 0x10001}]}) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000100)=0x9) (async) write$ppp(r4, &(0x7f0000000300)="320daa48f9cc04f38b4bd999f35db896585ca6725755720b3b85f34e7af0c53ebf0d7e97f42fa5134158a72a25bbd33876fbf718456f95f65d41a199e7552bcc361149fbe230b540253876d5fee8a05de4b0dd76b3537c7f2eabf6b2bb8482ab4f8b39f4016a2283ca275468e3c8aa3c742c845b3feb263ad66bef08f0575f8177802d82e78b5ca7f2963c2f65ea7b21cf9712b5ab49b1ee32d40052b122b180a417e5b150dd6aa2f85a1a05177a20df28e2e34de9095900c3f6553c8a3451ee39236446ec5fe0e28f231c1819889997c528f3ef8891c5cb554bd36016e96920514d6efb0a36", 0xe6) 23:08:35 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x4004000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r3) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="f500404ce637dc00f7e3d74f275d2aed6e7e7509a4a1236b23b9cb229cbe268f8ec1b065a4126c6e64020049c6e5f144661b749d56d6ce9121c0072d4ccf2ae177dab2bfe2c2344d46ef3efd8d5876a6f4315b1692bf51a492af7bba354aa49bc28afc2df33c621ce062205f47a20b5ea67717908bccd19ae6632a4d7654b2ae3658ca4eb98c79d7c050035fc5ae5eb0db34f9359a885eeb55cf18e9bf642e9d556320c7d6375b99a234239c87062f2a", @ANYRES16=r1, @ANYBLOB="00042cbd7000ffdbdf250300000006000800a3aa00000c0009000203aaaaaaaaaaaa0500120007000000050012000300000006000800a2aa0000"], 0x40}, 0x1, 0x0, 0x0, 0x18854}, 0x8000001) 23:08:35 executing program 1: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000140)={0xffffffffe5fe2092, 0xffffffffffffffff}) write$ppp(r0, &(0x7f0000000200)="622defa317e31ea25997659be95a695d9dac6ac8d0e182651cdd6049efb5f6f717273df86e3ffb1a28577535e67303cdb832498958ef9e62d993771a59a8800e75bc81491a00e4cc12963606dd6a56cd2db0e6750bd64618356710c2863aef4c7baa1d8dcffdd884e35c4760aa92474dd70884f9c16b3f87330568542919bb2ae6ba36450ee8b2cb368b3e13061b03547fcd910f96e73755b963fdc2e29648537fae531672a8fab40e7c76c0129236a481e60b065d95b75840ce4193840de071994295195f0bf8", 0xc7) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x2, 0x4}}, 0x20) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000440)=0x5f14) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000480)={0xfff, r0, 0x2}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x29, 0x81, 0x1, 0x200, 0x1b, @mcast2, @private0, 0x40, 0x8000, 0x80, 0x101}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xd8, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r3}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000400)={0x1000, r0}) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x401, 0x3, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x8000}, {0x6, 0x6, 0xa7, 0x6}, {0x6, 0x1, 0x5e, 0x9a}, {0xfff8, 0x0, 0x0, 0x9541}, {0x8, 0x72, 0x8d, 0x7fffffff}, {0x2, 0x77, 0x2, 0x10001}]}) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000100)=0x9) (async) write$ppp(r4, &(0x7f0000000300)="320daa48f9cc04f38b4bd999f35db896585ca6725755720b3b85f34e7af0c53ebf0d7e97f42fa5134158a72a25bbd33876fbf718456f95f65d41a199e7552bcc361149fbe230b540253876d5fee8a05de4b0dd76b3537c7f2eabf6b2bb8482ab4f8b39f4016a2283ca275468e3c8aa3c742c845b3feb263ad66bef08f0575f8177802d82e78b5ca7f2963c2f65ea7b21cf9712b5ab49b1ee32d40052b122b180a417e5b150dd6aa2f85a1a05177a20df28e2e34de9095900c3f6553c8a3451ee39236446ec5fe0e28f231c1819889997c528f3ef8891c5cb554bd36016e96920514d6efb0a36", 0xe6) 23:08:35 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2020100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000080) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", "", ""]}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r3) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r6) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r7) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r9, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r9, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) sendmsg$NLBL_MGMT_C_ADD(r8, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r9, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r9, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendmsg$NLBL_MGMT_C_VERSION(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r9, 0x100, 0x1, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x35}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ':\x00'}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, '%,:*/\x028,L\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '^$\\{\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x60028494}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x400, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4001) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000004c0)={'wpan3\x00'}) 23:08:35 executing program 3: syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 0: sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000100)="46d7754a2aabc73b9ff35126f8fb3c291ca4ee3aab4d30c69cf078e4b1f312cd0de91ea4d0a5fe126a827066118b96c3db670f1477c58a", 0x37, 0x20000000, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @multicast2}}, 0x24) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)=0x2) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000080)) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x163f00, 0x8) 23:08:35 executing program 1: syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 3: syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 0: sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000100)="46d7754a2aabc73b9ff35126f8fb3c291ca4ee3aab4d30c69cf078e4b1f312cd0de91ea4d0a5fe126a827066118b96c3db670f1477c58a", 0x37, 0x20000000, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @multicast2}}, 0x24) (async) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000040)) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)=0x2) (async) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000080)) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x163f00, 0x8) 23:08:35 executing program 3: syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 1: syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2020100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000080) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", "", ""]}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r3) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r6) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r6) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r7) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r9, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r9, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) sendmsg$NLBL_MGMT_C_ADD(r8, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r9, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r9, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendmsg$NLBL_MGMT_C_VERSION(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r9, 0x100, 0x1, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x35}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ':\x00'}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, '%,:*/\x028,L\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '^$\\{\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x60028494}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x400, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4001) (async) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x400, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4001) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000004c0)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000004c0)={'wpan3\x00'}) 23:08:35 executing program 0: sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000100)="46d7754a2aabc73b9ff35126f8fb3c291ca4ee3aab4d30c69cf078e4b1f312cd0de91ea4d0a5fe126a827066118b96c3db670f1477c58a", 0x37, 0x20000000, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @multicast2}}, 0x24) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000040)) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)=0x2) (async) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000080)) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x163f00, 0x8) 23:08:35 executing program 1: syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 3: syz_clone(0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x2, 0xa039, @vifc_lcl_addr=@broadcast, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x2d, 0x0, 0x6, 0x40e, 0x0, @rand_addr=' \x01\x00', @private1, 0x80, 0x8000, 0x8, 0xffff}}) recvfrom$rxrpc(r0, &(0x7f00000000c0)=""/62, 0x3e, 0x40000143, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x1, @local, 0x2}}, 0x24) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)=@flushpolicy={0x340, 0x1d, 0x1, 0x70bd28, 0x8000, "", [@algo_auth_trunc={0xb7, 0x14, {{'sha256-avx\x00'}, 0x358, 0x60, "2dfd0d62f5c43a07ad5fd3662b97495e46dc69dd58731988a16ad9698e8e4d573e0066b52a1665f36a6f68591efb097b78d9c27cecd44ebf2206a45f4027fa8c641ac789af0805a78da5d1e1dc5b1aa949078ee306a4a19385e17af9933be428f7fc7b3d3b7aa9546f1c4c"}}, @mark={0xc, 0x15, {0x35075b, 0x2}}, @algo_aead={0x56, 0x12, {{'morus1280\x00'}, 0x50, 0xc0, "f3bb75ced592f7ff6007"}}, @tfcpad={0x8, 0x16, 0x8}, @algo_auth_trunc={0xee, 0x14, {{'wp256\x00'}, 0x510, 0x80, "f63af6697cb5d16281974ef393cc2f8d95b548506815bf54f9574fedc43fc343030eb38660d55e36a43fd5514327261e2879ffa29bd896f0ab8254de9da802e06cf7d34ec5057667392383ca1ebe0a885d31d58fa9b4c9b4c704d05389e931c75cbcbe578a6598ed5259a4127fa15e1168fc03df5a37533e226c050a85ba80f95c56dc5ddff4bd3bf8bc0577bb866486baf6c0bd6d80729209bad37f97b80ea29f22"}}, @sa={0xe4, 0x6, {{@in6=@mcast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0x7, 0x4e21, 0x9, 0xa, 0x0, 0x0, 0x32, r1, 0xee00}, {@in=@empty, 0x4d6, 0xff}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x0, 0x3f, 0x76, 0x100, 0x201, 0x2, 0x4c}, {0x7, 0x0, 0x2, 0x5}, {0x8000, 0x6, 0x80}, 0x70bd26, 0x34ff, 0x4, 0x2, 0xff, 0x20}}, @lifetime_val={0x24, 0x9, {0x1f, 0x80000000, 0xfffffffffffffa9f, 0x80000001}}, @srcaddr={0x14, 0xd, @in=@local}]}, 0x340}, 0x1, 0x0, 0x0, 0x8004}, 0x41) [ 323.406044][ T38] audit: type=1400 audit(1687129715.429:203): avc: denied { create } for pid=7501 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 323.414319][ T38] audit: type=1400 audit(1687129715.429:204): avc: denied { sys_admin } for pid=7501 comm="syz-executor.3" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 23:08:35 executing program 1: syz_clone(0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 3: syz_clone(0x1fffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x2, 0xa039, @vifc_lcl_addr=@broadcast, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x2d, 0x0, 0x6, 0x40e, 0x0, @rand_addr=' \x01\x00', @private1, 0x80, 0x8000, 0x8, 0xffff}}) recvfrom$rxrpc(r0, &(0x7f00000000c0)=""/62, 0x3e, 0x40000143, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x1, @local, 0x2}}, 0x24) (async) recvfrom$rxrpc(r0, &(0x7f00000000c0)=""/62, 0x3e, 0x40000143, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x1, @local, 0x2}}, 0x24) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)=@flushpolicy={0x340, 0x1d, 0x1, 0x70bd28, 0x8000, "", [@algo_auth_trunc={0xb7, 0x14, {{'sha256-avx\x00'}, 0x358, 0x60, "2dfd0d62f5c43a07ad5fd3662b97495e46dc69dd58731988a16ad9698e8e4d573e0066b52a1665f36a6f68591efb097b78d9c27cecd44ebf2206a45f4027fa8c641ac789af0805a78da5d1e1dc5b1aa949078ee306a4a19385e17af9933be428f7fc7b3d3b7aa9546f1c4c"}}, @mark={0xc, 0x15, {0x35075b, 0x2}}, @algo_aead={0x56, 0x12, {{'morus1280\x00'}, 0x50, 0xc0, "f3bb75ced592f7ff6007"}}, @tfcpad={0x8, 0x16, 0x8}, @algo_auth_trunc={0xee, 0x14, {{'wp256\x00'}, 0x510, 0x80, "f63af6697cb5d16281974ef393cc2f8d95b548506815bf54f9574fedc43fc343030eb38660d55e36a43fd5514327261e2879ffa29bd896f0ab8254de9da802e06cf7d34ec5057667392383ca1ebe0a885d31d58fa9b4c9b4c704d05389e931c75cbcbe578a6598ed5259a4127fa15e1168fc03df5a37533e226c050a85ba80f95c56dc5ddff4bd3bf8bc0577bb866486baf6c0bd6d80729209bad37f97b80ea29f22"}}, @sa={0xe4, 0x6, {{@in6=@mcast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0x7, 0x4e21, 0x9, 0xa, 0x0, 0x0, 0x32, r1, 0xee00}, {@in=@empty, 0x4d6, 0xff}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x0, 0x3f, 0x76, 0x100, 0x201, 0x2, 0x4c}, {0x7, 0x0, 0x2, 0x5}, {0x8000, 0x6, 0x80}, 0x70bd26, 0x34ff, 0x4, 0x2, 0xff, 0x20}}, @lifetime_val={0x24, 0x9, {0x1f, 0x80000000, 0xfffffffffffffa9f, 0x80000001}}, @srcaddr={0x14, 0xd, @in=@local}]}, 0x340}, 0x1, 0x0, 0x0, 0x8004}, 0x41) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)=@flushpolicy={0x340, 0x1d, 0x1, 0x70bd28, 0x8000, "", [@algo_auth_trunc={0xb7, 0x14, {{'sha256-avx\x00'}, 0x358, 0x60, "2dfd0d62f5c43a07ad5fd3662b97495e46dc69dd58731988a16ad9698e8e4d573e0066b52a1665f36a6f68591efb097b78d9c27cecd44ebf2206a45f4027fa8c641ac789af0805a78da5d1e1dc5b1aa949078ee306a4a19385e17af9933be428f7fc7b3d3b7aa9546f1c4c"}}, @mark={0xc, 0x15, {0x35075b, 0x2}}, @algo_aead={0x56, 0x12, {{'morus1280\x00'}, 0x50, 0xc0, "f3bb75ced592f7ff6007"}}, @tfcpad={0x8, 0x16, 0x8}, @algo_auth_trunc={0xee, 0x14, {{'wp256\x00'}, 0x510, 0x80, "f63af6697cb5d16281974ef393cc2f8d95b548506815bf54f9574fedc43fc343030eb38660d55e36a43fd5514327261e2879ffa29bd896f0ab8254de9da802e06cf7d34ec5057667392383ca1ebe0a885d31d58fa9b4c9b4c704d05389e931c75cbcbe578a6598ed5259a4127fa15e1168fc03df5a37533e226c050a85ba80f95c56dc5ddff4bd3bf8bc0577bb866486baf6c0bd6d80729209bad37f97b80ea29f22"}}, @sa={0xe4, 0x6, {{@in6=@mcast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0x7, 0x4e21, 0x9, 0xa, 0x0, 0x0, 0x32, r1, 0xee00}, {@in=@empty, 0x4d6, 0xff}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x0, 0x3f, 0x76, 0x100, 0x201, 0x2, 0x4c}, {0x7, 0x0, 0x2, 0x5}, {0x8000, 0x6, 0x80}, 0x70bd26, 0x34ff, 0x4, 0x2, 0xff, 0x20}}, @lifetime_val={0x24, 0x9, {0x1f, 0x80000000, 0xfffffffffffffa9f, 0x80000001}}, @srcaddr={0x14, 0xd, @in=@local}]}, 0x340}, 0x1, 0x0, 0x0, 0x8004}, 0x41) [ 323.433049][ T38] audit: type=1400 audit(1687129715.439:205): avc: denied { sys_module } for pid=7490 comm="syz-executor.2" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 323.444491][ T38] audit: type=1400 audit(1687129715.459:206): avc: denied { sys_module } for pid=7490 comm="syz-executor.2" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 23:08:35 executing program 3: syz_clone(0x20000002, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 1: syz_clone(0x1fffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r0) (rerun: 64) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2020100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000080) (async, rerun: 64) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) (async, rerun: 64) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", "", ""]}, 0x14}}, 0x0) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r3) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r6) (async, rerun: 32) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r7) (rerun: 32) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r9, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) (async, rerun: 64) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r9, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) (async, rerun: 64) sendmsg$NLBL_MGMT_C_ADD(r8, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r9, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r9, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendmsg$NLBL_MGMT_C_VERSION(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r9, 0x100, 0x1, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x35}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ':\x00'}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, '%,:*/\x028,L\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '^$\\{\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x60028494}, 0x0) (async) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x400, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4001) (async, rerun: 32) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r10) (async) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000004c0)={'wpan3\x00'}) 23:08:35 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async, rerun: 32) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (rerun: 32) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x2, 0xa039, @vifc_lcl_addr=@broadcast, @local}, 0x10) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x2d, 0x0, 0x6, 0x40e, 0x0, @rand_addr=' \x01\x00', @private1, 0x80, 0x8000, 0x8, 0xffff}}) (rerun: 32) recvfrom$rxrpc(r0, &(0x7f00000000c0)=""/62, 0x3e, 0x40000143, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x1, @local, 0x2}}, 0x24) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)=@flushpolicy={0x340, 0x1d, 0x1, 0x70bd28, 0x8000, "", [@algo_auth_trunc={0xb7, 0x14, {{'sha256-avx\x00'}, 0x358, 0x60, "2dfd0d62f5c43a07ad5fd3662b97495e46dc69dd58731988a16ad9698e8e4d573e0066b52a1665f36a6f68591efb097b78d9c27cecd44ebf2206a45f4027fa8c641ac789af0805a78da5d1e1dc5b1aa949078ee306a4a19385e17af9933be428f7fc7b3d3b7aa9546f1c4c"}}, @mark={0xc, 0x15, {0x35075b, 0x2}}, @algo_aead={0x56, 0x12, {{'morus1280\x00'}, 0x50, 0xc0, "f3bb75ced592f7ff6007"}}, @tfcpad={0x8, 0x16, 0x8}, @algo_auth_trunc={0xee, 0x14, {{'wp256\x00'}, 0x510, 0x80, "f63af6697cb5d16281974ef393cc2f8d95b548506815bf54f9574fedc43fc343030eb38660d55e36a43fd5514327261e2879ffa29bd896f0ab8254de9da802e06cf7d34ec5057667392383ca1ebe0a885d31d58fa9b4c9b4c704d05389e931c75cbcbe578a6598ed5259a4127fa15e1168fc03df5a37533e226c050a85ba80f95c56dc5ddff4bd3bf8bc0577bb866486baf6c0bd6d80729209bad37f97b80ea29f22"}}, @sa={0xe4, 0x6, {{@in6=@mcast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0x7, 0x4e21, 0x9, 0xa, 0x0, 0x0, 0x32, r1, 0xee00}, {@in=@empty, 0x4d6, 0xff}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x0, 0x3f, 0x76, 0x100, 0x201, 0x2, 0x4c}, {0x7, 0x0, 0x2, 0x5}, {0x8000, 0x6, 0x80}, 0x70bd26, 0x34ff, 0x4, 0x2, 0xff, 0x20}}, @lifetime_val={0x24, 0x9, {0x1f, 0x80000000, 0xfffffffffffffa9f, 0x80000001}}, @srcaddr={0x14, 0xd, @in=@local}]}, 0x340}, 0x1, 0x0, 0x0, 0x8004}, 0x41) 23:08:35 executing program 3: syz_clone(0x20000004, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 1: syz_clone(0x20000002, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) write$damon_schemes(r1, &(0x7f0000000140)={0x3, 0xffffffff, 0x20, 0x20, 0x5, 0xfffffffffffffffe, 0x9}, 0x66) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x8000) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"bd7cb78b391a0668d9258590bb959c695a276d8149dd1e57011d63aef972eb40", r0}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000240)={{0x1}, {0x2, 0x6}, 0x5}) 23:08:35 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000002d0000cf080004000096006e6db1e111e80e8a8d974185f7bc90a8d79a84175eb9ccd04cbb1584900cce9ac7e92c7e380d9ebcf2691523c8151c534a0b3102c27bfd8db7259040b7b9dcdcfb4f746968ba16c79361770f5d6c7f6d99bede5b00"/117], 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4009001}, 0x4000050) sendmsg$nl_crypto(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd7e8702beca1cd29}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@upd={0xf0, 0x12, 0x100, 0x70bd2a, 0x25dfdbfb, {{'xts(cast6)\x00'}, '\x00', '\x00', 0xa00, 0x400}, [{0x8, 0x1, 0x7ff}, {0x8, 0x1, 0x4}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000010) 23:08:35 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) write$damon_schemes(r1, &(0x7f0000000140)={0x3, 0xffffffff, 0x20, 0x20, 0x5, 0xfffffffffffffffe, 0x9}, 0x66) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x8000) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"bd7cb78b391a0668d9258590bb959c695a276d8149dd1e57011d63aef972eb40", r0}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000240)={{0x1}, {0x2, 0x6}, 0x5}) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) (async) write$damon_schemes(r1, &(0x7f0000000140)={0x3, 0xffffffff, 0x20, 0x20, 0x5, 0xfffffffffffffffe, 0x9}, 0x66) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) (async) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x8000) (async) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"bd7cb78b391a0668d9258590bb959c695a276d8149dd1e57011d63aef972eb40", r0}) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) (async) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000240)={{0x1}, {0x2, 0x6}, 0x5}) (async) [ 323.518345][ T38] audit: type=1400 audit(1687129715.539:207): avc: denied { ioctl } for pid=7534 comm="syz-executor.0" path="/dev/video3" dev="devtmpfs" ino=881 ioctlcmd=0x5610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 23:08:35 executing program 3: syz_clone(0x20000005, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 1: syz_clone(0x20000004, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000002d0000cf080004000096006e6db1e111e80e8a8d974185f7bc90a8d79a84175eb9ccd04cbb1584900cce9ac7e92c7e380d9ebcf2691523c8151c534a0b3102c27bfd8db7259040b7b9dcdcfb4f746968ba16c79361770f5d6c7f6d99bede5b00"/117], 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4009001}, 0x4000050) sendmsg$nl_crypto(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd7e8702beca1cd29}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@upd={0xf0, 0x12, 0x100, 0x70bd2a, 0x25dfdbfb, {{'xts(cast6)\x00'}, '\x00', '\x00', 0xa00, 0x400}, [{0x8, 0x1, 0x7ff}, {0x8, 0x1, 0x4}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000010) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r1) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000002d0000cf080004000096006e6db1e111e80e8a8d974185f7bc90a8d79a84175eb9ccd04cbb1584900cce9ac7e92c7e380d9ebcf2691523c8151c534a0b3102c27bfd8db7259040b7b9dcdcfb4f746968ba16c79361770f5d6c7f6d99bede5b00"/117], 0x24}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4009001}, 0x4000050) (async) sendmsg$nl_crypto(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd7e8702beca1cd29}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@upd={0xf0, 0x12, 0x100, 0x70bd2a, 0x25dfdbfb, {{'xts(cast6)\x00'}, '\x00', '\x00', 0xa00, 0x400}, [{0x8, 0x1, 0x7ff}, {0x8, 0x1, 0x4}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000010) (async) 23:08:35 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) (async) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) write$damon_schemes(r1, &(0x7f0000000140)={0x3, 0xffffffff, 0x20, 0x20, 0x5, 0xfffffffffffffffe, 0x9}, 0x66) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x8000) (async) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x8000) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"bd7cb78b391a0668d9258590bb959c695a276d8149dd1e57011d63aef972eb40", r0}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000240)={{0x1}, {0x2, 0x6}, 0x5}) 23:08:35 executing program 1: syz_clone(0x20000005, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 3: syz_clone(0x20000007, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000002d0000cf080004000096006e6db1e111e80e8a8d974185f7bc90a8d79a84175eb9ccd04cbb1584900cce9ac7e92c7e380d9ebcf2691523c8151c534a0b3102c27bfd8db7259040b7b9dcdcfb4f746968ba16c79361770f5d6c7f6d99bede5b00"/117], 0x24}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4009001}, 0x4000050) (async) sendmsg$nl_crypto(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd7e8702beca1cd29}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@upd={0xf0, 0x12, 0x100, 0x70bd2a, 0x25dfdbfb, {{'xts(cast6)\x00'}, '\x00', '\x00', 0xa00, 0x400}, [{0x8, 0x1, 0x7ff}, {0x8, 0x1, 0x4}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000010) 23:08:35 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x7) 23:08:35 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x86ea}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_CSMA_MIN_BE={0x1, 0x26, 0x2}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xff}, @IEEE802154_ATTR_TXPOWER={0x0, 0x21, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0xc004}, 0x8c0) 23:08:35 executing program 3: syz_clone(0x20000008, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 1: syz_clone(0x20000007, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x7) 23:08:35 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x7) 23:08:35 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x86ea}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_CSMA_MIN_BE={0x1, 0x26, 0x2}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xff}, @IEEE802154_ATTR_TXPOWER={0x0, 0x21, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0xc004}, 0x8c0) 23:08:35 executing program 3: syz_clone(0x20000011, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 1: syz_clone(0x20000008, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x10000, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000040)=0x9000400) 23:08:35 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x86ea}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_CSMA_MIN_BE={0x1, 0x26, 0x2}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xff}, @IEEE802154_ATTR_TXPOWER={0x0, 0x21, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0xc004}, 0x8c0) 23:08:35 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x10000, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000040)=0x9000400) 23:08:35 executing program 3: syz_clone(0x20000057, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 1: syz_clone(0x20000010, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 2: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x141400, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0x2404c005) 23:08:35 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x10000, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000040)=0x9000400) 23:08:35 executing program 1: syz_clone(0x20000011, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 3: syz_clone(0x200001d5, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 2: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x141400, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0x2404c005) 23:08:35 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000040)) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000080)=0x1, 0x4) 23:08:35 executing program 3: syz_clone(0x200001d6, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 2: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x141400, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0x2404c005) 23:08:35 executing program 1: syz_clone(0x200000f4, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000040)) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000080)=0x1, 0x4) 23:08:35 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x4004010) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x498303, 0x0) 23:08:35 executing program 1: syz_clone(0x200000fd, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000040)) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000080)=0x1, 0x4) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000040)) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000080)=0x1, 0x4) (async) 23:08:35 executing program 3: syz_clone(0x200001d7, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 1: syz_clone(0x200000fe, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x7}, 0x4) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) 23:08:35 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x4004010) (async, rerun: 32) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x498303, 0x0) (rerun: 32) 23:08:35 executing program 3: syz_clone(0x200001d8, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 1: syz_clone(0x20000102, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x7}, 0x4) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) 23:08:35 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x4004010) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x498303, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x4004010) (async) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x498303, 0x0) (async) 23:08:35 executing program 3: syz_clone(0x200001d9, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 1: syz_clone(0x20000103, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x7}, 0x4) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x7}, 0x4) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) 23:08:35 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x24, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x74, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x81}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x912}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x890}, 0x4000840) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0x0, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x0) munlockall() sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000280)={0x3c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x14}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_REALIGN={0xfffffffffffffe75, 0x1b, 0xb2}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x3}, @IEEE802154_ATTR_COORD_PAN_ID={0x0, 0xa, 0x1}, @IEEE802154_ATTR_PAN_COORD={0x0, 0x19, 0x4}, @IEEE802154_ATTR_COORD_PAN_ID={0x0, 0xa, 0xffff}, @IEEE802154_ATTR_BCN_ORD={0x0, 0x17, 0x4}]}, 0x3c}}, 0x40004) 23:08:35 executing program 1: syz_clone(0x20000104, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 3: syz_clone(0x200001da, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x10) 23:08:35 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r1) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r2) (rerun: 64) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x24, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x74, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x81}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x912}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x890}, 0x4000840) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0x0, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async) munlockall() (async) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000280)={0x3c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x14}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_REALIGN={0xfffffffffffffe75, 0x1b, 0xb2}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x3}, @IEEE802154_ATTR_COORD_PAN_ID={0x0, 0xa, 0x1}, @IEEE802154_ATTR_PAN_COORD={0x0, 0x19, 0x4}, @IEEE802154_ATTR_COORD_PAN_ID={0x0, 0xa, 0xffff}, @IEEE802154_ATTR_BCN_ORD={0x0, 0x17, 0x4}]}, 0x3c}}, 0x40004) 23:08:35 executing program 1: syz_clone(0x20000105, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x10) 23:08:35 executing program 3: syz_clone(0x200001db, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x10) 23:08:35 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x24, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x74, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x81}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x912}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x890}, 0x4000840) (async) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0x0, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x0) munlockall() (async) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000280)={0x3c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x14}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_REALIGN={0xfffffffffffffe75, 0x1b, 0xb2}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x3}, @IEEE802154_ATTR_COORD_PAN_ID={0x0, 0xa, 0x1}, @IEEE802154_ATTR_PAN_COORD={0x0, 0x19, 0x4}, @IEEE802154_ATTR_COORD_PAN_ID={0x0, 0xa, 0xffff}, @IEEE802154_ATTR_BCN_ORD={0x0, 0x17, 0x4}]}, 0x3c}}, 0x40004) 23:08:35 executing program 3: syz_clone(0x200001dc, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) write$damon_schemes(r0, &(0x7f0000000040)={0x1, 0x7, 0x20, 0x20, 0x49, 0x4, 0x8}, 0x66) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001080)={0x8, {"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", 0xfd72}}, 0x1006) 23:08:35 executing program 1: syz_clone(0x20000107, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f7d2c6da) 23:08:35 executing program 3: syz_clone(0x200001dd, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) write$damon_schemes(r0, &(0x7f0000000040)={0x1, 0x7, 0x20, 0x20, 0x49, 0x4, 0x8}, 0x66) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001080)={0x8, {"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", 0xfd72}}, 0x1006) 23:08:35 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f7d2c6da) 23:08:35 executing program 1: syz_clone(0x20000108, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f7d2c6da) 23:08:35 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) write$damon_schemes(r0, &(0x7f0000000040)={0x1, 0x7, 0x20, 0x20, 0x49, 0x4, 0x8}, 0x66) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001080)={0x8, {"8bb3338dda096bb46a7a18602b40a864a4edc846dcad2737c2b5c191e6b42d638c0fba42f2a86678f3d254020938ec00e029d5edd54823bd66a445734a725b26afe88b0939adaafbe716de3a57195e7c452a140faf693565fe1f620a2784900aa8d1b698683e10fcbee101ff6f03aa5421d3f9fb46fd1647ab14f7cb4bcbcf7738493a1f0491d76f1922b126027cfbfa254cf8f9cf9039954833d7da7650311d68d6dc37908083c05977e10df57cd3842166a54bb34d10c1f4e9476aa55bff3fa54f41aabeebc2f2df1b604d81180c6e49c465d476e723fdba04768e6046abf85ab6c3c57e4d621881303da61fe0e69d401777ff662ce2384926fb1cb8228ae401a040cc3262b34ed545177f9aaf49c88d6a572074679f4a87266c7842a25af3896a76aab3d8c3d14747a7b599caf8b5a2aac710eddc5a5ec7f83e076bc2f4b7dab0a21070990fc37c33b4f659d599fed14d1d181e541ca6059dac9346d7bede345ea9a01e04544c27b8b3e43f2669c1db2b41384e45e1bc25d4beca89a732b285e46105198211ab9e9903f1e977a2b009ebc0e460fe397e1deb28c78519b79da5c1765828e276e538b28035f236ccc0a12fde1060eb751af86cbafc9f5dbdd8265a6d41a3237966f771bc6f0a005ceedb07b17fb2b9b84af0eeb097eb16f8bd42bea3ee4e4ac3ab11ab84a3491042a880e770fd69e9df85aa7ace1784416735125815cc496421896268ea29478fd8890162420607dc3d8d620d0d9363c9a39a1464ec3a100c7fd7ad79be6c42840d8b03ebf68d0a85e79ddc7ca81d071b20493d6685dcf0f9c20b9b57b4984cbaa6506ef3d3836ec6d45941b45c4b7ada3a25b105dbf721890886211efed8d4ef3b62cbfca4864e463c1702e84a9a996d89f6d0966d34e0b4bed48f79d6c80376a713dc5ad1374e3d407850e30c4e64449e519995f4f9920afa2095fc2680e0e395fdc7b9d025c25e4775049bbca7b98240749158c8464f70e834fbfa6b2a004ab1dfac2056b33eba6b247aef3c083bd97795381627b6108a29d26ca214b214e7101e093ab7727e88e00bdee986faf37a2dab7e5c1e017eeda939fd8b87c49458c5899bb8a4c91a59251673aad3908446cf7dd8420c01f2cacf1ca8c35b8eac6f38ed5f79396322330a39db24081eb3ed7c6842c7b074db6d9d69ce1a23c7feedb86161b566ec09d3320c3197746cbbd79ea7f0afc006e52214aa9f5833f7fbc3a3c79009254f5fc0d390ac8d97407a2fe2c5cd42a7585f1113845eaa9ee36491222ca097a65a113b1386cdcd81418af72d81c37e6b42d05d00bcab05d96623fd436f9fb6ad134eaeb1ffbe42906c579fc1c95c7159ef2a16ab6e2eb87ffcce23431c9fd390168c302c0d08bac4f4d132fc37c30d256f35506609be7ee1257fdd8a8180f8fb87b44a0947bd946a99cbcb84b6df7f93e055f46d19bd5f1e7830bf3bcfda5d6d7eedf307a2a6b88827215131ece308f947ed93bf1d872f1ade91e134ab858ac2bfbbaa14bf0a595b47a4a42c7aac026888aee5df1ce560c8522ff595fc4fb2c51a5ebaf347e39c31a7086522cbb97681af502b5d95751cc0bbfc9360a00a33b5c8e222af77b7aceb96c19f5eb72c7c44365cde98810a6af9d9c587bbe5b0c4cfb1dd46aff40006c7a5fe84da5f9326749754d346afdd8166cdfc30489b759701da08a5b64271085053415d22f4757baece9d5735d21ebc1a645b93028dc600f8a735662dae5778521869581914b20d0771cb4b05bb87de82c86a7945d992954473ac76c8b6eccbcc456a1d2f231675f28d92ae6a9e43e3154b7c61c94c6fb0a5553e9d6a72b47a07d7fb7034cd28a3a4bdefd527039c11e28871d331dd0c39bb370258b83a0dc43855b808766dc1ac40d349e47c80621f0b6f2eb5c336b56375e6108ef1be056b5abbcd5da114596eb4430707f4f0d36b61c600ceefbe835d409c087541d04049ac4501cb1139e31635a792b23f583b133b9806f98cbe3166e0676a661874a61389acc642f0fdac6139ab1f7ab07d0e23cec593b7e53c14f9127e6b87e0774652ee21a49ad8384a369de7fc1d4f569aa5ff4c17e525b2fe9bcb0d8f71e8e15fb6fd94943e58d0cf6d5857b94dea8c58f65cb7a98b84b9ac596819acded1d28908200cbf98fb0957fed714d1ad3374bbc632ef43ad8dcfdac489403b43ae28e0d3506cea3e2b25bec99fcf6cea0b982b3476d5fa3e8dd3a1b9b931ee1be32fbd6106b4bb6e0bf4eb32a9f187686277b8eeeab7324289f765bc34f51d532b3a15ccb8d73bb36ba2b54844cadb7ea7ae1d23e48a7b092d7c72c7eca1370eaa9aa95c93821831bad2c67ca52d30c892c9005a273d26367696c3a5d6f052a6724ab1965ae03d337438c099ee8e4c4983fdd46e65b9a25c3f3fb0717b976512c2941a40cbd72bb6829fb396a962a9c91d5593060deab5053be26c00fe800aac940703863cc1ec769d522f42d127ec27f3f24c588fc21c4f2309949f1f369e6941eb931f9b5b3c84eb18e021f1bcecf38daf54efd61c3d073370a159d8e0ba88efa47c0c19734d66a2034a899327987115cde5fb38acffedcbf126b671d5369a9863107d4ce02d145340e0a92a847cf3d76b0e402a712d00479e892fa55667501f4f42843455d56266a06d574ac6a387f16e1e2a1735380500db525b9e836745f05c2824fbdffbafd7551f1684dc775e1247ac8be50456490fc70c82b4a886e9039f8e38afdf469da4384304781fd5cf26d469bd068995006a299c3580ff1d3d0788692e2a3216437198ad64b5839f5a0395ff7b06cba51a7405fcf333b1d7eb9a5e9e404c0fb6c63e1ef9a2a890324a04d01a3f1e42ba7834ceb810a93b8e049b9905d60556050c4dd06bcd4a3eb04ee6500e61e52f1222c00012f29f5d44cd6ad30142107bb715407ea63e41d5fd09de8a497c5930587319a19e1696239880537483e28fccea58bd9b5e7f0d2a222126f0596c35f66cb2cdff9a48c2d7634ec660742e4cea09280a9f9c614476039ac4db157474770263324064f698860a52b0d2426e970273632abea4f22a0a6d73dd1b909efaf61e8982780ed84772f75a8ed0a9b23fa073613dfaf9b5743c11e860bb8e79f0e221d09509f578fa9572000a3ca02294423c01a31f72e1005b7dc5ec24ac4eb9a63c43c0e35f9a06ec9149f5adf192fe1efd60ed3b82a220637a6ab59ab8c67e73462c5d02c3cf93fb36a494b667751f5b762fb1f468a69ef685120270086b8fa7b2444cfe42e664b05172e20191da3910e594c17397bb5448266222feda0f2dc580f2f8ad7fa5bf4c819210e210853d45a7f6c549e36f3e834b8b739fcd13a5ac1c0d61513a7eb5ab93640cb910f5c8717b57cbae218c05afcaf0fe1a4f4a4a89f13d99abf97541fefff33f41e82ee8c2dea5667dcaf71e31f71f1f95cd7a1a97ef3f55507515c761a405d6ee99dd7f280a72c96322395dc466cec59d10d3236da1baffc72a9f0bdc8c3037a240c2cec645887002613f3e9d1d646f2866b857cd473ddcf57b106467a16e211449a72eb5551398dffae4767d4aa491a138d79754670d28f9bd364aa64c7d0a43d368a5c410ea64a1073cef68ca5d79fe736dfeb55be0594e2ae9a6bc348c9a6c9e339da6eb24ddfa63f769030a5508e27c97a5df2b5a9abd67ca6d2c33c1c0c13f271ee38cbe10f2502835f29686622b212ec8f8bedbc47d598dabcc87e7257876d269aab96adecd1e85bd65fa7ab41b1bf524da933c58dda0c0e94a7c35c4005d60c6029f32bc40ea3a4b3e08dd7e89be425f4135f7460493611bb6b14a94a2775d4705efacdbb4cf8240ea82cbf5305bced3ebdbd87164abe410c0132c2f3acb5cbd2d96ab5a9c286e160f77500c4c16b53ad02977c9d5f9f9c549efcd37b197febacb3072fb81e8a51bd2da7f89b2b3449e4d3ed88ba7b842566ed8d9743a5378770ab5a50721af32735b8fac3999bcc34ac794a5f35a1901d26269d4991a2007b03bb7fe00cb302a44238120b147bb58d9dae9ac073c9569e3fb4d0002fa757ab6a34019951d60872de797e85b7887bd9a6510e9c0d4c1e3236c972b3cc9a0408a3e2870d02d24f88430de89572ee3057a1cee056820b383350fd8dd7b45f554060a6f54afef98f40910ac9e349f0f8b2646f498e03be5a987cdd119c074d1e4664224ea61b51c09631251fe1532852ed44e8f84062523404e43a68693f0b193dbb111477e8516e6af6a2f575311696c1503b692f47bfe7718768ff493cd172abd680f62042cb295aa0b86c37096af07bfd7b16d238f326ca8bf083bade01506bd3d9e77850e77e618c5b56d31c1bb0eff8cc74f7a5c8a898f4f05a85599589eefc7d9fd00d378d4f77893f47bdc9491e691a335fbeee90d2fed828b01210ce72ea0dea13bd10dcf1eb068125354aa2e7a65a12c2fe02c82aa4f758ac711b04beeca1029af379ff6e61f81befa16cab4b9bd79f6f66281ab6640cb00cb171d874064e0c0f8dd9b3331640a1216ba05213dd16c6074c62e6eb205058a30631b9b1d533344e1bdd7f446e2fc779ab8209e6b4d689d60341fc7c3cef11e1d9af0ea284f03aba0fb49fed48b9b832653d9fb10117512a5de4b1986e2266f418e5ca875f3813f5036db3fac10bd9487f4e8cedc07fdb1da6273b78556e63a93f3d799898bcde1c9f2631d4780316ce792f1d61ae96cd843e2cba57cc41f5195a0d7cb85509813652f965bb30618dba24e5fa18ebdfe8b94ff8d44056a7415dd21f7666c651b55e83f8c364c07792a4443777abf071519f5b4481885c4b88ac286c706be279f3ae9f32bf4175043cfa3c9e313b5c2642b49b6e8daade41f4dee255bed36da6ec0b14e3b5b951248089534fa19d44067db3673943f734bfa27739ee7edb8262de5e73160937f9bc5d94b13878732488ffde52247151cb6b2299c923c517df5a4978066ae3bb6c93611d2a0d0ffc306ca49a1f401536d293a8a1b1b5ce9a7ae4515213004910d1ec26255eb1529798eb3104e4cbee177a750e70859d84e1100f25f67f76cd7cad755fc6d1822abe81910d306ed32b260ee07c45c9926cc882c31ea5d59c87b10ab1b7363ff0decce3ce28d8f64a7afd242fbaca8b9791c0a9d2003b74695384f8b2de5ab8d28b73e1ed33ee51bac35f65443260a5a4a34b85d7f9a276d9a61dd3a31ea4b7d94c69285761996737cbb431cf99868fc68d3da8ebf64fec28bdf5341d99a2983b7417fd90f6aaf9a5c6a48189d4a2aa11c28bab3e2a2ac4342b2f0dc5e4e7c1dcd62525a525cc614b40be3f4268debfc5f755143723f3584182d349e75ad406647f60ef6eb9af90212147c82c90128f0281063a4c6c3263d2833b8773c5144203d9aba140fbadb509fb79612a9f2c67087337dadd394cd254004c4731feaa029f7449b799e529386be2fa5bbf672975d034afaebc5b0cf50eb073dfc712d18369436ddfd3ed6c9a8734f5d361b5d01c0a782e0507c33c36aa453bf8fd683a091885624074ffa652bfe1a8f36c6c0d98227b2420cff9c314839f4b527c12bb9fb30651e2436c27cf3121626fd8cc68a23481a172a99db492dcf30c25cf89be7c89df690d81954648c06904ac756b6bb21ea23a79a2ff8a93cd1a872c142e18da11cdb30cfccd756f55bc877a86620d444238b89f2953b4ff208cb5c26c3ca57ce101537b56ebbf61d5ec61254eb64d29b547ed07db79de9355ea826c58b5e36230afc51cb7ffc36bb7c9b7eb39faff000", 0xfd72}}, 0x1006) 23:08:35 executing program 3: syz_clone(0x200001df, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000000c0)={r0, 0x71c, 0x3f}) 23:08:35 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f7d2c64f) 23:08:35 executing program 1: syz_clone(0x20000109, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f7d2c64f) 23:08:35 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000000c0)={r0, 0x71c, 0x3f}) 23:08:35 executing program 3: syz_clone(0x200001e0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 1: syz_clone(0x2000010a, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:35 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f7d2c64f) 23:08:36 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000000c0)={r0, 0x71c, 0x3f}) 23:08:36 executing program 3: syz_clone(0x200001e1, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xfdc4, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x630, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x20004801) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, 0x0, 0x880) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r3, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r3, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2d}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x400c010) 23:08:36 executing program 1: syz_clone(0x2000010b, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xfdc4, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x630, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x20004801) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, 0x0, 0x880) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r3, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r3, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2d}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x400c010) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xfdc4, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x630, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x20004801) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, 0x0, 0x880) (async) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) (async) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r3, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r3, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) (async) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2d}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x400c010) (async) 23:08:36 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000040)) 23:08:36 executing program 3: syz_clone(0x200001e2, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)) (async) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000040)) 23:08:36 executing program 1: syz_clone(0x2000010c, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xfdc4, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x630, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x20004801) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, 0x0, 0x880) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r3, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r3, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2d}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x400c010) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xfdc4, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x630, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x20004801) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, 0x0, 0x880) (async) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) (async) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r3, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r3, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) (async) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2d}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x400c010) (async) 23:08:36 executing program 3: syz_clone(0x200001e3, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000040)) 23:08:36 executing program 1: syz_clone(0x2000010d, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 2: ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) 23:08:36 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000040)={0x19}) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380), 0x101042, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f00000003c0)={0x8000, 0xc}) 23:08:36 executing program 3: syz_clone(0x200001e4, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 1: syz_clone(0x2000010e, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 2: ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) (async) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) 23:08:36 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000040)={0x19}) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380), 0x101042, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f00000003c0)={0x8000, 0xc}) 23:08:36 executing program 2: ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) 23:08:36 executing program 3: syz_clone(0x200001e5, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 1: syz_clone(0x2000010f, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000040)={0x19}) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380), 0x101042, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f00000003c0)={0x8000, 0xc}) 23:08:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0xd7d18508f7d246db) 23:08:36 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x1) 23:08:36 executing program 3: syz_clone(0x200001e6, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 1: syz_clone(0x20000110, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) (async, rerun: 32) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0xd7d18508f7d246db) (rerun: 32) 23:08:36 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x1) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x1) (async) 23:08:36 executing program 3: syz_clone(0x200001e7, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 1: syz_clone(0x20000111, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0xd7d18508f7d246db) 23:08:36 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x1) 23:08:36 executing program 3: syz_clone(0x200001e8, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf250300000006000b0009000000090001005c3a5b2b00000000080004000300000014000600fe8000000000000000000000000000bb14000600fc00000000000000000000000000000008000700ffffffff14000600fc0100000000000000000000000000010800020007000000080002000500000029f0ac34c617b5a335884dd91cac3f68492b1075951c3ae235be8643b175b82ef6bdaf599dd9edeeafc02eb2"], 0x84}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000480)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'gre0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x7800, 0x7898, 0x2, 0x6, {{0x6, 0x4, 0x0, 0x2b, 0x18, 0x65, 0x0, 0xfc, 0x4, 0x0, @local, @local, {[@noop]}}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x4, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x7800, 0x0, 0x7, 0x1, {{0x7, 0x4, 0x2, 0x20, 0x1c, 0x67, 0x0, 0x20, 0x4, 0x0, @loopback, @empty, {[@noop, @ra={0x94, 0x4}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000c00)=ANY=[@ANYRES32=r1, @ANYBLOB="e3f8ce7d56f617b7de6438ecc584ba612f7d68b8e392a1e574941b50d5424de44010c4c9a8525c9d4333bcfa6a3a96487fe6d87d853da0b2d88ec11399c43f7d85ceb3569b5fcbd4fc2957e063d1608ff3ca6615ef06554d60688c4f7f", @ANYRES64=r2, @ANYBLOB="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", @ANYBLOB="19384388760565c82ad1c23384c252adac73df1dc76d9bc2c0c713ef1ec8852169d3a0e55ed58ab953b0b7ad87dd3400b3b6aca5d264b1c6d0d3b2199d9332ff6609"], 0x124}, 0x1, 0x0, 0x0, 0x20048042}, 0x24048081) 23:08:36 executing program 1: syz_clone(0x20000112, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) syz_clone(0x80000000, &(0x7f00000000c0)="1181b37aaa870000a16e59e62ce4dadba6811125ce45", 0x16, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="7acabfa67f35b5e4fedc1c97d21b45361f6f2cb1814708d80b4be39f8fe778bddb2fbf2760e78f0ffbef00489debe714d1ebc95150e2752df1682dfe714fb577d5448da8909b406ba759175f11fd60606054f9ad020a") bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) write$damon_schemes(r0, &(0x7f0000000240)={0x8, 0x7f, 0x20, 0x20, 0x2, 0x6, 0x7fffffffffffffff}, 0x66) r3 = socket$rxrpc(0x21, 0x2, 0x2) socket(0x6, 0x3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000001900), 0x4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000001900), 0x4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000200), 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x3000, 0x2000}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000002c0)) 23:08:36 executing program 1: syz_clone(0x20000113, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 3: syz_clone(0x200001e9, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) syz_clone(0x80000000, &(0x7f00000000c0)="1181b37aaa870000a16e59e62ce4dadba6811125ce45", 0x16, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="7acabfa67f35b5e4fedc1c97d21b45361f6f2cb1814708d80b4be39f8fe778bddb2fbf2760e78f0ffbef00489debe714d1ebc95150e2752df1682dfe714fb577d5448da8909b406ba759175f11fd60606054f9ad020a") (async) syz_clone(0x80000000, &(0x7f00000000c0)="1181b37aaa870000a16e59e62ce4dadba6811125ce45", 0x16, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="7acabfa67f35b5e4fedc1c97d21b45361f6f2cb1814708d80b4be39f8fe778bddb2fbf2760e78f0ffbef00489debe714d1ebc95150e2752df1682dfe714fb577d5448da8909b406ba759175f11fd60606054f9ad020a") bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) write$damon_schemes(r0, &(0x7f0000000240)={0x8, 0x7f, 0x20, 0x20, 0x2, 0x6, 0x7fffffffffffffff}, 0x66) r3 = socket$rxrpc(0x21, 0x2, 0x2) socket(0x6, 0x3, 0x0) (async) socket(0x6, 0x3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000001900), 0x4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000001900), 0x4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000001900), 0x4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000200), 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x3000, 0x2000}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x3000, 0x2000}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000002c0)) 23:08:36 executing program 1: syz_clone(0x20000186, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf250300000006000b0009000000090001005c3a5b2b00000000080004000300000014000600fe8000000000000000000000000000bb14000600fc00000000000000000000000000000008000700ffffffff14000600fc0100000000000000000000000000010800020007000000080002000500000029f0ac34c617b5a335884dd91cac3f68492b1075951c3ae235be8643b175b82ef6bdaf599dd9edeeafc02eb2"], 0x84}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000480)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'gre0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x7800, 0x7898, 0x2, 0x6, {{0x6, 0x4, 0x0, 0x2b, 0x18, 0x65, 0x0, 0xfc, 0x4, 0x0, @local, @local, {[@noop]}}}}}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$inet(0x2, 0x4, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x7800, 0x0, 0x7, 0x1, {{0x7, 0x4, 0x2, 0x20, 0x1c, 0x67, 0x0, 0x20, 0x4, 0x0, @loopback, @empty, {[@noop, @ra={0x94, 0x4}]}}}}}) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000c00)=ANY=[@ANYRES32=r1, @ANYBLOB="e3f8ce7d56f617b7de6438ecc584ba612f7d68b8e392a1e574941b50d5424de44010c4c9a8525c9d4333bcfa6a3a96487fe6d87d853da0b2d88ec11399c43f7d85ceb3569b5fcbd4fc2957e063d1608ff3ca6615ef06554d60688c4f7f", @ANYRES64=r2, @ANYBLOB="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", @ANYBLOB="19384388760565c82ad1c23384c252adac73df1dc76d9bc2c0c713ef1ec8852169d3a0e55ed58ab953b0b7ad87dd3400b3b6aca5d264b1c6d0d3b2199d9332ff6609"], 0x124}, 0x1, 0x0, 0x0, 0x20048042}, 0x24048081) 23:08:36 executing program 3: syz_clone(0x200001ea, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r2 = socket$rxrpc(0x21, 0x2, 0x2) syz_clone(0x80000000, &(0x7f00000000c0)="1181b37aaa870000a16e59e62ce4dadba6811125ce45", 0x16, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="7acabfa67f35b5e4fedc1c97d21b45361f6f2cb1814708d80b4be39f8fe778bddb2fbf2760e78f0ffbef00489debe714d1ebc95150e2752df1682dfe714fb577d5448da8909b406ba759175f11fd60606054f9ad020a") (async) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) write$damon_schemes(r0, &(0x7f0000000240)={0x8, 0x7f, 0x20, 0x20, 0x2, 0x6, 0x7fffffffffffffff}, 0x66) (async) r3 = socket$rxrpc(0x21, 0x2, 0x2) (async) socket(0x6, 0x3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000001900), 0x4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000001900), 0x4) (async, rerun: 64) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000200), 0x4) (async, rerun: 64) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x3000, 0x2000}) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000002c0)) 23:08:36 executing program 3: syz_clone(0x200001eb, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf250300000006000b0009000000090001005c3a5b2b00000000080004000300000014000600fe8000000000000000000000000000bb14000600fc00000000000000000000000000000008000700ffffffff14000600fc0100000000000000000000000000010800020007000000080002000500000029f0ac34c617b5a335884dd91cac3f68492b1075951c3ae235be8643b175b82ef6bdaf599dd9edeeafc02eb2"], 0x84}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000480)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) (async) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000480)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'gre0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x7800, 0x7898, 0x2, 0x6, {{0x6, 0x4, 0x0, 0x2b, 0x18, 0x65, 0x0, 0xfc, 0x4, 0x0, @local, @local, {[@noop]}}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x4, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x7800, 0x0, 0x7, 0x1, {{0x7, 0x4, 0x2, 0x20, 0x1c, 0x67, 0x0, 0x20, 0x4, 0x0, @loopback, @empty, {[@noop, @ra={0x94, 0x4}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x7800, 0x0, 0x7, 0x1, {{0x7, 0x4, 0x2, 0x20, 0x1c, 0x67, 0x0, 0x20, 0x4, 0x0, @loopback, @empty, {[@noop, @ra={0x94, 0x4}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000c00)=ANY=[@ANYRES32=r1, @ANYBLOB="e3f8ce7d56f617b7de6438ecc584ba612f7d68b8e392a1e574941b50d5424de44010c4c9a8525c9d4333bcfa6a3a96487fe6d87d853da0b2d88ec11399c43f7d85ceb3569b5fcbd4fc2957e063d1608ff3ca6615ef06554d60688c4f7f", @ANYRES64=r2, @ANYBLOB="5385e81b5da5dd83c177f7cf5a8b5d52810f42cac4745785a95b75cdc00f5d6c8b9b68b4e0abbdac869c6ca87ff41f34628d8fba22e612848e504c664e0d842dddb4ec7170146297ad5d57ce136728e7474e5431fa475975063af1071ce3eff8b5d5a7e29b206dcf2213685bbb05b879dfea410ecb87e303308032c40d97e8473ee07c9a2afaa1e564955690880b58e791902a73e6d23f8d19314bf828ea547be39c15eab94acdad3087b534ea98569262975e780c189c136767f947c877f73f644de4a8bbcade6f01264eb13043792ba5904f68151eb6dabc928ad123fa3086f5602e02b3442787f7a897e209a1d83a68b65ba9813b923c8a8b1995cf2980d503d74401d48c356ce9f328ebf7fa6e282047c65185a220de7aca7371a11609d9541971b3bea83380f6fa689ebd6d442384403e9e3d2d84da58c505b5d3906ab4509d6fc579a82ac3f9467f4324fe672206cba39b329ec70f9753fc2d4b830a7631e9bf966a318e12eaf0f052f302c95df0a80e09ccd382250cfff77b07224043203e00d7a56f5efba1efd814651eef8971d9ad866ada62d69f13fe3ecbc3bd80a49e334299a3030f6b2deb43740036f80d2e036de22abe0d85798c50c4f77a475b96fee5b7fff2f6fed74232b7489411bbc71ffd992837aaf88afd1aac6c3de56e3eebbc4ca0d160f63c659338e9ab1083d9069f9eff046fe4daa166605f97eff1471a939547c04d9eb908814db2bc22ba786b6052a9cf82512903edb5a04ccbc5637b824bf0dcb627fab14cee2653aa8b2da733c6586c72fe7bc91cf558cd0ff88069967ea0ffe5694c8f6bcbc396c001b005fc15f8e40e3346da14fbb0b4bba7efe601410f2288868f2357b8a9d58b8674b3840ac2b7376d60bdb161506f54f8595deeb48a7f08c178a776702656a3d0b0f822beb7f3ec4cee552721ea4bcd3e5e4a1d9acd711033f7e211a6f3ab04cff8d02e89f2180a4a5d35082664f9eccdb5109e8d50f9e021edd547567d7059329ca5ca6d9b032276309b50ca9f90d3f237624af83a0d9c404e1a86260553cf7599b1d28f8b2eeb9142358e7e8d648fac99c3c0e96bad35f69a0e8bffb7f2f98750bf26ac325b27b49701d1f944f121709e20272b3119d0a89fda34312fcbf25b14cb91a101ca9848b1cbd4461fad490bb92f5b77eddf631a955ed2bdcd9236c5532aebd210dd897082e15e954c989a9746b2d9884a65ce015b32d20e6ad8d4026d406ca361ee9c53fa01c46dc2822aa5f827722c3d42ae32d5fe7a1ea674f39537f79a1c3864d8cec62e7b06dadaa740407571cae87bed33cb327a25880c5198e1fa7dbc62dc096430252d94b069dcee8e8f3a5f180403fa3ab0280aefc1ea95dcbedd71107505e01869dc6a96c1909732744b39cb97a4114f44016eb92901ac9fbecc255a10adaf3e8de54ae385f86da9db4b75929b99197d85a98fb58672bdb007a6eaa87932af83ead38279ff4d90863677269e2859fef7c9b91a8e56ade8909cba4f62db115aa6ba87a06e143a3047d118317362c1d5ae4504bdf13031221259cd5a7c5cc43ebcfcbf3254bd847ee0e7c032925d7b4379032f10516f521203a6058257cdb7f70548e8725b359d387ef08b5c801815960446efebc06c0e584c2beeca98b0402afcf2f3d2ecb56c74ffcd763a1b1ecd255d32f93e9d9adc58453c8b6aaff6ae340de02d2ad943b3407fe33b8ddeeb62998787ded66a3cf051a11399fd17507163b8eb12797a44ba44f2ca7367f119377d878fd902c1399140905532032db8e393677665ebb987675ff7bc5999966b44a5924f34d8f5e855f03dd7653d8d9de6f74e85ac0d88a15427ce4e94f6e3889a2084ca4151f3d232ea3650a31229c19f8a9a479359aa6148e54bda94f45dfe1c5f752ce08cf43d89d3e21960a45f5ff3040a3cc3922280dccbe6d2423908b2535f4d47fb77244e44d53d0694f38db91212454bfd730272dff1332ad1369b277656d2397a173e4d90b2040f918d261961c662d98d0f990978c887a8a3dbaafccbd689cfafc165237bc09feaa08717a48e5007bcc746d73731220a1fc4d6d07df80a67dfef9802ae462181eb869d7b7a3e5d9a4bf4a15995e1e879133fd740c5824761320ab8ee6ddaf13c8ce6accccae7feab0396b3dd687ad1b6021f1b7f1aebaec5e19beef70b1f495a7579bb76a0cf74cbbfe3e442d2d6e47f78377d41919720a776909ccf733730e6abc0a46ce968b3896035d712836a645e818a6faaced3eecf9cb64d82ac0ee8a31800ef050bae5aed5b77c312ecab33af2d8ff33ff9787189b4cc7918953e8dd28cbceab23a61d64a21ca747671decb0bb52c331be7b809dcfe668bc9af5b6f8ded7a3412ac821c115adae82b787ed8841c4104f0e8ee0f0b67977f3fca2c8a21550320386f3a87d34801047ee9a15ba85f1d32e592e8085436cd19b52a4a34c90fa21ba38775fe534f524acda0e6c4110d4707b6901142a38a36b40d67ed2e1467ded78781f07f3a5505f76e5ae2d9bfb2c701ca9af04530a542334db9c1c00e416cce122e4ff98ef30c7531ab4c9e2c960257a6d83a56fba9964e21332377f719764ecdb3f4500cbaf00ae189b729fa5913b2bda366f0426263f611a4c4fbba9085b7278d623a6435886fd5e90c06a5fdb2965a49b140a921346dac67dde90a146a1d9025f0c6f636c2541b6dbd0cdb6783a0734d5be5a18b72be47a85b141bafc856f4ba7253516f5710ec1295a64a22e2d8332e0cf849f2e7ce26b54c61f2e4c0a063e4ecf94ccff9b9001c96125c638e0bd28cce88cfcec02552c3bede623c52aaecf7a52d5351aacf8c941b7d5f9a463d4319de4738cd6690985e53ead4a29a6e201756741c3199cfbe862f75d7b74388d35357794ee9166b1ae91b81c45f39dfa659eaf801f8eb196b7fdccbdfd2173d4c0a39b6d97d8b0e2377cccd8ab3337dd2e535d4a1ef4aefe3031b9d8b36f1b61450fb56831772de78bb7bf3b6e006e07da4a212f3d916405f8c767afdd9ab04d2133c271c0023807bf432667b1eb9283729be7c008d06763f824b5c614291acae2846983d87d292c8529da3b89c0bef89dc00e546d7638541b20dba96a61e7224c7a841ef07bdd9bcfbfb39bf4a11e7e4e288fa53c0b5f9bbd1e9fb8e81d8009adb5576ae1849124f3ea9699f194e4146336319a999433697318ec9948f6f6e92a501812cb9dc747fe704a86ad9cf58eac635f0a212b692091736d70615a78b560f2662dbb3b0d99aea1050cbdad87cf80eda2ac24fed9554bc45c3e1e1921e728e613e2fce11a043b5b4a5db81eebbc5c1088c052bc858af0a3cdedad2bae90de428d95fd8a45856d1322f04690d793704cf35ab890fe0395b953ba67de2d07a6ee9d2b7350d64fa204c84bc6aa8bd32210ccb1a2876552bc7935efc7d756000717fb92596db28aa63fa4276d8905e60a27853522e91b41b7f7c98fdcc4fc993f0cc4348a9cd752906adc74a1b5d46ff87020d77777792c3c902a03671e16c319523321b872d626198bbf30ff99e69258ba24cac706d647f0c4b85d023b9c18ea11905a41b578adff345aa785ce5642804f852f183cac987148e4fcb4cb20287f7be7fe289e1dd48557828bcc7b60a6f42087232d56db0f531fd6cb45ae6aa08c696a9f982743f58139aa700348b7e1617bcb490d99d9d355e33134022bf32d4a309415a6cbc61b602f410807540da016458440bf9a863de854609e747f2e1cc8f7d1d1fc2f429ca55dc599bdf5d88296566ebcba34f78e3d7ec2c57d3a7f4c86bd8e549a6379accf8941d1230fb4845364621a97085bf2bc5008579678ea5af5cf8fb6ac50c0a6f9773327803accc6e3503c01c5eea2d019f81aba1f61f30593cae1f0d9bf7f287f62f7dbeef991995ef1123bf21fe6de4adf41d35a0a64c916c24e0d37f0335b61daf0421dc12439d8f875fdc08a0993cedaddc5097ce0a2bd146e85aaf5d87c4824d4d9adc3496e40ff1123f97839caf315107a994c751e6c4b8b78b7be7bcee9f9a9c86029b2cde6ce03f433cb90c71e7dd2f3770a21e231798e86e6c4e1c853a079ded0f7aaaf90a93ab5310ffc678edd9fb26280097e927c733f7bbd2434eefd612e4bfc3eaf0a6b9406d0c5749e50f19be3a2dfecf168aa396b9dc44922e987cc8ad468f6db5d1f8dd1111fee7a408d66ef0cc1a082c6d10a6fa4ec9dc905ef505ee87e1c5a97e92a48479a6466504d219b05bd3273a5808baf629c2e54d4d233d1549b452526607c94783f023ba1b552bfb344f9a8b15a937ba9b49a8d1def06bf5c6ff06ef0abf770e65331eb532b5add171a5a6346ad2cf09aa7dc9a0eab5f8f7aeddce912edebe5fd2422050c72284bf7c48662b07420d996dfae5346a25600048feecdc89106528f8df67c83a246bc040c32acef872845b9bc799ffb791568b1cd4cb221c6a8a6b3835d531148ad2ea9f1201a2b789753534ee471cf11596c2dd336fd9f29af908646bc8744b5c8a6cca6accb18750b3c2e14caf5c80b719f2c6ac14e7d23f3470577a7af161acbdea6d786310bf12524ace72b5e9991957e430a61b6d84b11b9fa2b1a762d767dd4ce169ad54279cb16679a3709b425d6ef90de3fd8ca143d35e45a2a6bc3a7a7b11bd3d7dbe2a4c50707f1dbc1b4e39675bf67c95d1d23652a8405b756ed26469d3836cae63e706293c1b70a3b628642eb07e3d13dc372bef2df3d87f69219557ee17de370a404dec5957c4c9167f44e1745896de563d2b012e97dbde9329875b01a7948f590069e4e52b2d9584783e4647d28361b955574f8cfc350486ac93e2ed5927009d6904c439c9c0fa577f6224af1f36f61194c9c90db8d09d796df8bf2b892e193392a92575ef205a670fe8e28c08f6493991c794ef7beebd9739afef8994e4d02c7fbbaea0be74ffb4f8ff99cc6518726ea46a66634995eba3c3943f7fe4c7904234b7a9d771e6ff9738ea4c9c10cb59540e6709bebdc28980b401989cf7dcf9883037fcb0a2d8d13e380228c1a02af34eb7075e616e66c2c5f1bd293375ffa903e27831a1711cebd363d753f1b449152df58c8ba3e261d5a78841158984a5786be4f22119f0d826cd8d5faba0a36a309e110a9570497b7fe56baa4016c4f321f3ff74e59d7840acbd83947c2200ad839a187777491849e2c8392510b7ec79b7cc8b2561fa0ac6d5ee3ca48a90cb28b92e7c2764967be910c1790321a1f88661fe53a16337079e05079ecef90729760aa344f8d11e5457e9958b7aa8225032c541ab162230b614ed7429903b0b5e6007ec960a27e7d693a5143fcbea39de67ba29f81aa09a5190b1ddb859571db253a182dd2dc00d433a5a4bf3c2561607dd7de0a5c12aeb0a6d1e0a38cef35e480cc3ccc864a7542a1dc933eaf5ec953a043bb26109522cd424505bde49a159d9906c2db5fe18d353197ec33b4024345a629d3dc9a6f3044653fd1805f63a226c813219afb85067bc96946047087168de20285aea617a148e0696cd1ed206379259c4f42a521c25f8eeae7f21ed68ff8eaf106ba142b492b9bbff0b2d68d58ef50055eff77b5254d2892ff7839393a26f0332f97b6880bc5b450090065b777937d6dc9e2955d0fb13e6312e8ef9cfa09cb9cf0b0c28ddfc4beadb61d3d2c17ba5b2eb1a99fba31f65bb9b99080b7e94335efd70f15b43f0a7d0eb2576637a0a6fd5784ef3c227586bee091fd67884e14bcc87342b03a3b02e9da16934d54f5e0d51170fa839b1a6d9c80558b927", @ANYBLOB="19384388760565c82ad1c23384c252adac73df1dc76d9bc2c0c713ef1ec8852169d3a0e55ed58ab953b0b7ad87dd3400b3b6aca5d264b1c6d0d3b2199d9332ff6609"], 0x124}, 0x1, 0x0, 0x0, 0x20048042}, 0x24048081) 23:08:36 executing program 1: syz_clone(0x20000201, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 3: syz_clone(0x200002e2, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 1: syz_clone(0x20000237, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x9, 0x8b5, 0xa72, 0x880}) 23:08:36 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x24, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000800}, 0x80) 23:08:36 executing program 3: syz_clone(0x200003a8, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x9, 0x8b5, 0xa72, 0x880}) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r0) (async) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x9, 0x8b5, 0xa72, 0x880}) (async) 23:08:36 executing program 1: syz_clone(0x20000301, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x24, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000800}, 0x80) 23:08:36 executing program 3: syz_clone(0x200003e5, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x24, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000800}, 0x80) 23:08:36 executing program 1: syz_clone(0x20000500, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0x20000800) 23:08:36 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) (async) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x9, 0x8b5, 0xa72, 0x880}) (async) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x9, 0x8b5, 0xa72, 0x880}) 23:08:36 executing program 3: syz_clone(0x20000500, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 1: syz_clone(0x20000501, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0x20000800) 23:08:36 executing program 3: syz_clone(0x2000060f, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0x20000800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0x20000800) (async) 23:08:36 executing program 1: syz_clone(0x20000700, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x0, 0x70bd2a, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008011}, 0x40030) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) 23:08:36 executing program 2: r0 = socket(0x1d, 0x5, 0xffffd4af) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x78, 0x5, 0x81, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x7800, 0x1, 0x7, 0x4}}) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x202001, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl2\x00', r1, 0x700, 0x7, 0x7f, 0x6000000, {{0x17, 0x4, 0x3, 0x7, 0x5c, 0x68, 0x0, 0x7f, 0x4, 0x0, @initdev={0xac, 0x1e, 0x80, 0x0}, @loopback, {[@timestamp={0x44, 0x24, 0xd9, 0x0, 0x1, [0x3, 0x21d, 0x8, 0x0, 0x2bf, 0xffff, 0x6c7e, 0x3ff]}, @generic={0x94, 0xd, "1371ac8a33e6e3a69737af"}, @timestamp_prespec={0x44, 0x14, 0x5, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffe00}, {@remote, 0x2}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="73797a746e6c3100000000f800000000", @ANYRES32=r1, @ANYBLOB="8000002000000001000000014b71006c00680000012f9078e0000001640101028603160144542e43ffffffff000010457f00000100000fff0a0101000000007fffffffff00000008ac1414bb0000001c0a010102000100010a010100000000067f00000100000002ac141442ffffff47ac1414aa000008c0"]}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl1\x00', r1, 0x4, 0x3f, 0x2, 0x3f, 0x40, @loopback, @mcast2, 0x0, 0x1, 0x9, 0x7f}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000600)={'tunl0\x00', &(0x7f00000005c0)={'syztnl0\x00', r1, 0x700, 0x10, 0xfffff23a, 0x3f, {{0x8, 0x4, 0x3, 0x9, 0x20, 0x64, 0x0, 0x3, 0x4, 0x0, @multicast1, @broadcast, {[@noop, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x4, [@dev={0xac, 0x14, 0x14, 0x43}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000700)={@rand_addr, @empty, 0x0}, &(0x7f0000000740)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000780)={@local, @loopback, 0x0}, &(0x7f00000007c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000840)={'tunl0\x00', r1, 0x40, 0x1, 0x4, 0x8, {{0x22, 0x4, 0x0, 0x1c, 0x88, 0x65, 0x0, 0x2, 0x0, 0x0, @broadcast, @private=0xa010101, {[@rr={0x7, 0x1b, 0x3b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010100, @broadcast, @loopback, @empty]}, @timestamp_addr={0x44, 0xc, 0x55, 0x1, 0xf, [{@broadcast, 0x2}]}, @end, @lsrr={0x83, 0xf, 0x7, [@local, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x3c, 0x6, 0x1, 0x6, [{@rand_addr=0x64010101, 0x7}, {@loopback, 0xfffffff9}, {@rand_addr=0x64010102, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x9822}, {@remote, 0xffff}, {@private=0xa010102, 0x3}, {@private=0xa010102, 0x23f8a419}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000ac0)={'syztnl1\x00', &(0x7f0000000940)={'erspan0\x00', r1, 0x1, 0xbf27, 0x5, 0x10001, {{0x54, 0x4, 0x2, 0x0, 0x150, 0x66, 0x0, 0x5, 0x2f, 0x0, @broadcast, @rand_addr=0x64010101, {[@lsrr={0x83, 0x27, 0x7e, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local, @loopback, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xa}, @dev={0xac, 0x14, 0x14, 0x39}, @remote]}, @cipso={0x86, 0x68, 0x3, [{0x5, 0x8, "1048624ccf2e"}, {0x1, 0xd, "e857d71efc6d622934f049"}, {0x2, 0x4, 'a{'}, {0x5, 0xc, "75531d17024305fc69df"}, {0x0, 0x10, "5cafaa9357d6b593a041ed3fb3c3"}, {0x1, 0xd, "51114b7cfac71b19ca3f39"}, {0x7, 0xe, "fddd4f20182cf94838fde689"}, {0x7, 0x12, "06d4fd3f17d3a98dfd0ddf05bd553f79"}]}, @ssrr={0x89, 0x1b, 0xd4, [@private=0xa010101, @remote, @local, @remote, @multicast1, @multicast2]}, @timestamp={0x44, 0x2c, 0x63, 0x0, 0x8, [0x3ff, 0x3f, 0x2, 0x81, 0x6, 0x40, 0x468, 0x3, 0x7, 0x4]}, @lsrr={0x83, 0x7, 0xb0, [@broadcast]}, @timestamp_prespec={0x44, 0xc, 0xac, 0x3, 0x9, [{@remote, 0x7ff}]}, @noop, @timestamp_prespec={0x44, 0x24, 0xba, 0x3, 0x7, [{@multicast1, 0x7}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@multicast1, 0x80000000}]}, @cipso={0x86, 0x2e, 0x0, [{0x1, 0xb, "52966df13a2b6ac88a"}, {0x5, 0xb, "700c9a27c6df25fb04"}, {0x1, 0x12, "7d0ae22d0264dcb97d4640f976a92633"}]}]}}}}}) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000b00)={@remote, @dev, 0x0}, &(0x7f0000000b40)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000015c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001580)={&(0x7f0000000b80)={0x9f8, 0x0, 0x421, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x5, 0x40, 0x58, 0x3}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r1}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8eda}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa8e5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8, 0x1, r1}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r11}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x22c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r16}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x371}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8, 0x7, 0x80000001}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2f8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r1}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xad}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}]}}]}, 0x9f8}, 0x1, 0x0, 0x0, 0x20048840}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r2, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400000d}, 0x20000800) 23:08:36 executing program 3: syz_clone(0x20000700, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 1: syz_clone(0x20000701, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 3: syz_clone(0x20000f06, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 2: r0 = socket(0x1d, 0x5, 0xffffd4af) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x78, 0x5, 0x81, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x7800, 0x1, 0x7, 0x4}}) (async) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x202001, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl2\x00', r1, 0x700, 0x7, 0x7f, 0x6000000, {{0x17, 0x4, 0x3, 0x7, 0x5c, 0x68, 0x0, 0x7f, 0x4, 0x0, @initdev={0xac, 0x1e, 0x80, 0x0}, @loopback, {[@timestamp={0x44, 0x24, 0xd9, 0x0, 0x1, [0x3, 0x21d, 0x8, 0x0, 0x2bf, 0xffff, 0x6c7e, 0x3ff]}, @generic={0x94, 0xd, "1371ac8a33e6e3a69737af"}, @timestamp_prespec={0x44, 0x14, 0x5, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffe00}, {@remote, 0x2}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="73797a746e6c3100000000f800000000", @ANYRES32=r1, @ANYBLOB="8000002000000001000000014b71006c00680000012f9078e0000001640101028603160144542e43ffffffff000010457f00000100000fff0a0101000000007fffffffff00000008ac1414bb0000001c0a010102000100010a010100000000067f00000100000002ac141442ffffff47ac1414aa000008c0"]}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl1\x00', r1, 0x4, 0x3f, 0x2, 0x3f, 0x40, @loopback, @mcast2, 0x0, 0x1, 0x9, 0x7f}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000600)={'tunl0\x00', &(0x7f00000005c0)={'syztnl0\x00', r1, 0x700, 0x10, 0xfffff23a, 0x3f, {{0x8, 0x4, 0x3, 0x9, 0x20, 0x64, 0x0, 0x3, 0x4, 0x0, @multicast1, @broadcast, {[@noop, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x4, [@dev={0xac, 0x14, 0x14, 0x43}]}]}}}}}) (async, rerun: 32) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x4) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000700)={@rand_addr, @empty, 0x0}, &(0x7f0000000740)=0xc) (async) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000780)={@local, @loopback, 0x0}, &(0x7f00000007c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000840)={'tunl0\x00', r1, 0x40, 0x1, 0x4, 0x8, {{0x22, 0x4, 0x0, 0x1c, 0x88, 0x65, 0x0, 0x2, 0x0, 0x0, @broadcast, @private=0xa010101, {[@rr={0x7, 0x1b, 0x3b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010100, @broadcast, @loopback, @empty]}, @timestamp_addr={0x44, 0xc, 0x55, 0x1, 0xf, [{@broadcast, 0x2}]}, @end, @lsrr={0x83, 0xf, 0x7, [@local, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x3c, 0x6, 0x1, 0x6, [{@rand_addr=0x64010101, 0x7}, {@loopback, 0xfffffff9}, {@rand_addr=0x64010102, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x9822}, {@remote, 0xffff}, {@private=0xa010102, 0x3}, {@private=0xa010102, 0x23f8a419}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000ac0)={'syztnl1\x00', &(0x7f0000000940)={'erspan0\x00', r1, 0x1, 0xbf27, 0x5, 0x10001, {{0x54, 0x4, 0x2, 0x0, 0x150, 0x66, 0x0, 0x5, 0x2f, 0x0, @broadcast, @rand_addr=0x64010101, {[@lsrr={0x83, 0x27, 0x7e, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local, @loopback, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xa}, @dev={0xac, 0x14, 0x14, 0x39}, @remote]}, @cipso={0x86, 0x68, 0x3, [{0x5, 0x8, "1048624ccf2e"}, {0x1, 0xd, "e857d71efc6d622934f049"}, {0x2, 0x4, 'a{'}, {0x5, 0xc, "75531d17024305fc69df"}, {0x0, 0x10, "5cafaa9357d6b593a041ed3fb3c3"}, {0x1, 0xd, "51114b7cfac71b19ca3f39"}, {0x7, 0xe, "fddd4f20182cf94838fde689"}, {0x7, 0x12, "06d4fd3f17d3a98dfd0ddf05bd553f79"}]}, @ssrr={0x89, 0x1b, 0xd4, [@private=0xa010101, @remote, @local, @remote, @multicast1, @multicast2]}, @timestamp={0x44, 0x2c, 0x63, 0x0, 0x8, [0x3ff, 0x3f, 0x2, 0x81, 0x6, 0x40, 0x468, 0x3, 0x7, 0x4]}, @lsrr={0x83, 0x7, 0xb0, [@broadcast]}, @timestamp_prespec={0x44, 0xc, 0xac, 0x3, 0x9, [{@remote, 0x7ff}]}, @noop, @timestamp_prespec={0x44, 0x24, 0xba, 0x3, 0x7, [{@multicast1, 0x7}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@multicast1, 0x80000000}]}, @cipso={0x86, 0x2e, 0x0, [{0x1, 0xb, "52966df13a2b6ac88a"}, {0x5, 0xb, "700c9a27c6df25fb04"}, {0x1, 0x12, "7d0ae22d0264dcb97d4640f976a92633"}]}]}}}}}) (async) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000b00)={@remote, @dev, 0x0}, &(0x7f0000000b40)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000015c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001580)={&(0x7f0000000b80)={0x9f8, 0x0, 0x421, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x5, 0x40, 0x58, 0x3}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r1}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8eda}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa8e5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8, 0x1, r1}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r11}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x22c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r16}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x371}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8, 0x7, 0x80000001}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2f8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r1}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xad}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}]}}]}, 0x9f8}, 0x1, 0x0, 0x0, 0x20048840}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r2, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400000d}, 0x20000800) 23:08:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x0, 0x70bd2a, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008011}, 0x40030) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r0) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x0, 0x70bd2a, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008011}, 0x40030) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) 23:08:36 executing program 2: r0 = socket(0x1d, 0x5, 0xffffd4af) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x78, 0x5, 0x81, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x7800, 0x1, 0x7, 0x4}}) (async) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x202001, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl2\x00', r1, 0x700, 0x7, 0x7f, 0x6000000, {{0x17, 0x4, 0x3, 0x7, 0x5c, 0x68, 0x0, 0x7f, 0x4, 0x0, @initdev={0xac, 0x1e, 0x80, 0x0}, @loopback, {[@timestamp={0x44, 0x24, 0xd9, 0x0, 0x1, [0x3, 0x21d, 0x8, 0x0, 0x2bf, 0xffff, 0x6c7e, 0x3ff]}, @generic={0x94, 0xd, "1371ac8a33e6e3a69737af"}, @timestamp_prespec={0x44, 0x14, 0x5, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffe00}, {@remote, 0x2}]}]}}}}}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="73797a746e6c3100000000f800000000", @ANYRES32=r1, @ANYBLOB="8000002000000001000000014b71006c00680000012f9078e0000001640101028603160144542e43ffffffff000010457f00000100000fff0a0101000000007fffffffff00000008ac1414bb0000001c0a010102000100010a010100000000067f00000100000002ac141442ffffff47ac1414aa000008c0"]}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl1\x00', r1, 0x4, 0x3f, 0x2, 0x3f, 0x40, @loopback, @mcast2, 0x0, 0x1, 0x9, 0x7f}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000600)={'tunl0\x00', &(0x7f00000005c0)={'syztnl0\x00', r1, 0x700, 0x10, 0xfffff23a, 0x3f, {{0x8, 0x4, 0x3, 0x9, 0x20, 0x64, 0x0, 0x3, 0x4, 0x0, @multicast1, @broadcast, {[@noop, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x4, [@dev={0xac, 0x14, 0x14, 0x43}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000700)={@rand_addr, @empty, 0x0}, &(0x7f0000000740)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000780)={@local, @loopback, 0x0}, &(0x7f00000007c0)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000840)={'tunl0\x00', r1, 0x40, 0x1, 0x4, 0x8, {{0x22, 0x4, 0x0, 0x1c, 0x88, 0x65, 0x0, 0x2, 0x0, 0x0, @broadcast, @private=0xa010101, {[@rr={0x7, 0x1b, 0x3b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010100, @broadcast, @loopback, @empty]}, @timestamp_addr={0x44, 0xc, 0x55, 0x1, 0xf, [{@broadcast, 0x2}]}, @end, @lsrr={0x83, 0xf, 0x7, [@local, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x3c, 0x6, 0x1, 0x6, [{@rand_addr=0x64010101, 0x7}, {@loopback, 0xfffffff9}, {@rand_addr=0x64010102, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x9822}, {@remote, 0xffff}, {@private=0xa010102, 0x3}, {@private=0xa010102, 0x23f8a419}]}]}}}}}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000ac0)={'syztnl1\x00', &(0x7f0000000940)={'erspan0\x00', r1, 0x1, 0xbf27, 0x5, 0x10001, {{0x54, 0x4, 0x2, 0x0, 0x150, 0x66, 0x0, 0x5, 0x2f, 0x0, @broadcast, @rand_addr=0x64010101, {[@lsrr={0x83, 0x27, 0x7e, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local, @loopback, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xa}, @dev={0xac, 0x14, 0x14, 0x39}, @remote]}, @cipso={0x86, 0x68, 0x3, [{0x5, 0x8, "1048624ccf2e"}, {0x1, 0xd, "e857d71efc6d622934f049"}, {0x2, 0x4, 'a{'}, {0x5, 0xc, "75531d17024305fc69df"}, {0x0, 0x10, "5cafaa9357d6b593a041ed3fb3c3"}, {0x1, 0xd, "51114b7cfac71b19ca3f39"}, {0x7, 0xe, "fddd4f20182cf94838fde689"}, {0x7, 0x12, "06d4fd3f17d3a98dfd0ddf05bd553f79"}]}, @ssrr={0x89, 0x1b, 0xd4, [@private=0xa010101, @remote, @local, @remote, @multicast1, @multicast2]}, @timestamp={0x44, 0x2c, 0x63, 0x0, 0x8, [0x3ff, 0x3f, 0x2, 0x81, 0x6, 0x40, 0x468, 0x3, 0x7, 0x4]}, @lsrr={0x83, 0x7, 0xb0, [@broadcast]}, @timestamp_prespec={0x44, 0xc, 0xac, 0x3, 0x9, [{@remote, 0x7ff}]}, @noop, @timestamp_prespec={0x44, 0x24, 0xba, 0x3, 0x7, [{@multicast1, 0x7}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@multicast1, 0x80000000}]}, @cipso={0x86, 0x2e, 0x0, [{0x1, 0xb, "52966df13a2b6ac88a"}, {0x5, 0xb, "700c9a27c6df25fb04"}, {0x1, 0x12, "7d0ae22d0264dcb97d4640f976a92633"}]}]}}}}}) (async, rerun: 64) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000b00)={@remote, @dev, 0x0}, &(0x7f0000000b40)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000015c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001580)={&(0x7f0000000b80)={0x9f8, 0x0, 0x421, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x5, 0x40, 0x58, 0x3}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r1}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8eda}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa8e5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8, 0x1, r1}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r11}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x22c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r16}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x371}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8, 0x7, 0x80000001}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2f8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r1}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xad}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}]}}]}, 0x9f8}, 0x1, 0x0, 0x0, 0x20048840}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r2, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400000d}, 0x20000800) 23:08:36 executing program 3: syz_clone(0x20000f54, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 1: syz_clone(0x20000801, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 3: syz_clone(0x20001100, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x84, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xffffffffffffffc0, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x20008001) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x73aaedbd00146dd1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20040000) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x801) 23:08:36 executing program 1: syz_clone(0x20000901, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x0, 0x70bd2a, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008011}, 0x40030) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) 23:08:36 executing program 1: syz_clone(0x20000a01, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 3: syz_clone(0x20001f00, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 3: syz_clone(0x20003f00, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 1: syz_clone(0x20000b01, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 3: syz_clone(0x2000540f, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x84, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xffffffffffffffc0, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x20008001) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x73aaedbd00146dd1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20040000) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x801) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan3\x00'}) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x84, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xffffffffffffffc0, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x20008001) (async) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x73aaedbd00146dd1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20040000) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x801) (async) 23:08:36 executing program 1: syz_clone(0x20000c01, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 3: syz_clone(0x20005700, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 0: r0 = socket(0x855c43c5dd1716b8, 0x3, 0x7) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040)) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x20140, 0x0) 23:08:36 executing program 1: syz_clone(0x20000d01, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 0: r0 = socket(0x855c43c5dd1716b8, 0x3, 0x7) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040)) (async) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040)) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x20140, 0x0) 23:08:36 executing program 3: syz_clone(0x2000a803, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 1: syz_clone(0x20000e01, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x84, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xffffffffffffffc0, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x20008001) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x73aaedbd00146dd1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20040000) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x801) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan3\x00'}) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x84, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xffffffffffffffc0, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x20008001) (async) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x73aaedbd00146dd1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20040000) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x801) (async) 23:08:36 executing program 1: syz_clone(0x20000e15, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 3: syz_clone(0x2000d501, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 0: r0 = socket(0x855c43c5dd1716b8, 0x3, 0x7) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040)) (async, rerun: 64) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x20140, 0x0) (rerun: 64) 23:08:36 executing program 1: syz_clone(0x20000e52, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 3: syz_clone(0x2000d601, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 1: syz_clone(0x20000e55, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:36 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000040)) 23:08:37 executing program 1: syz_clone(0x20000efb, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d62edf) 23:08:37 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000040)) 23:08:37 executing program 3: syz_clone(0x2000d701, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000040)) 23:08:37 executing program 3: syz_clone(0x2000d801, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d62edf) 23:08:37 executing program 1: syz_clone(0x20000efc, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000040)) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x400003, 0x0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000100)=0x81) 23:08:37 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d62edf) (async) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d62edf) 23:08:37 executing program 3: syz_clone(0x2000d901, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 1: syz_clone(0x20000f01, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000040)) (async) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x400003, 0x0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000100)=0x81) 23:08:37 executing program 1: syz_clone(0x20001001, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 3: syz_clone(0x2000da01, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14a9d04be98470f7e98e149b7e785eb01b7fe7", @ANYRES16=r1, @ANYBLOB="000325bd7000fbdbdf250200000008000c0003000000140006002001000000000000000000000000000008000800ffffffff0800020005000000"], 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x40) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r2, 0x0, 0x0) 23:08:37 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async, rerun: 32) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000040)) (async, rerun: 32) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x400003, 0x0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000100)=0x81) 23:08:37 executing program 3: syz_clone(0x2000db01, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) (async) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14a9d04be98470f7e98e149b7e785eb01b7fe7", @ANYRES16=r1, @ANYBLOB="000325bd7000fbdbdf250200000008000c0003000000140006002001000000000000000000000000000008000800ffffffff0800020005000000"], 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x40) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r2, 0x0, 0x0) 23:08:37 executing program 1: syz_clone(0x20001100, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) write$damon_schemes(r0, &(0x7f0000000040)={0x7, 0x9, 0x20, 0x20, 0x3, 0x4, 0x7}, 0x66) 23:08:37 executing program 3: syz_clone(0x2000dc01, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) write$damon_schemes(r0, &(0x7f0000000040)={0x7, 0x9, 0x20, 0x20, 0x3, 0x4, 0x7}, 0x66) 23:08:37 executing program 1: syz_clone(0x20001101, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) (async) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14a9d04be98470f7e98e149b7e785eb01b7fe7", @ANYRES16=r1, @ANYBLOB="000325bd7000fbdbdf250200000008000c0003000000140006002001000000000000000000000000000008000800ffffffff0800020005000000"], 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x40) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r2, 0x0, 0x0) 23:08:37 executing program 3: syz_clone(0x2000dd01, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) write$damon_schemes(r0, &(0x7f0000000040)={0x7, 0x9, 0x20, 0x20, 0x3, 0x4, 0x7}, 0x66) 23:08:37 executing program 3: syz_clone(0x2000df01, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x6041, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) 23:08:37 executing program 1: syz_clone(0x20001201, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x206000, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr, @broadcast, 0x0}, &(0x7f0000000100)=0xc) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x516, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x84}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000300)={'erspan0\x00', r1, 0x8000, 0x7800, 0x7, 0x0, {{0x34, 0x4, 0x2, 0x3c, 0xd0, 0x68, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @loopback, {[@timestamp_addr={0x44, 0x44, 0x59, 0x1, 0x1, [{@remote, 0x4}, {@empty, 0x3}, {@empty, 0xfffffbff}, {@rand_addr=0x64010102, 0xffff}, {@broadcast}, {@private=0xa010101, 0x2}, {@local, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @timestamp_addr={0x44, 0x14, 0x33, 0x1, 0xe, [{@broadcast, 0x48af}, {@private=0xa010100, 0x3f}]}, @noop, @timestamp_prespec={0x44, 0x34, 0x4a, 0x3, 0x9, [{@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xaf13}, {@empty, 0x7}, {@broadcast, 0x1}, {@remote, 0x8001}, {@multicast2, 0x7}]}, @timestamp_prespec={0x44, 0x1c, 0x8b, 0x3, 0x3, [{@remote, 0xfffffff7}, {@loopback, 0x7}, {@local, 0xac}]}, @generic={0x94, 0x10, "2087baffaebc4e439eb026235269"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'gretap0\x00', r1, 0x10, 0x0, 0x1, 0x16, {{0x9, 0x4, 0x2, 0x4, 0x24, 0x68, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf1, [@broadcast]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'gre0\x00', 0x0, 0x20, 0x7, 0x1, 0x80, {{0x12, 0x4, 0x1, 0x8, 0x48, 0x67, 0x0, 0x0, 0x29, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x7, 0x4c, [@private=0xa010102]}, @timestamp_addr={0x44, 0xc, 0x38, 0x1, 0x0, [{@multicast2, 0x1}]}, @ssrr={0x89, 0x1f, 0x7a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'syztnl2\x00', r1, 0x2f, 0x3, 0x94, 0xe52, 0x30, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x0, 0x8000000, 0xfffffc00}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000800)={'erspan0\x00', &(0x7f0000000780)={'gre0\x00', r1, 0x7800, 0x1, 0x1, 0xffffffff, {{0x14, 0x4, 0x1, 0x4, 0x50, 0x65, 0x0, 0x6, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x13, 0x8b, [@private=0xa010102, @remote, @multicast2, @empty]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0xa5, [@dev={0xac, 0x14, 0x14, 0x10}, @rand_addr=0x64010102, @private=0xa010101, @local]}, @noop, @cipso={0x86, 0xc, 0x1, [{0x0, 0x4, "daad"}, {0x6, 0x2}]}]}}}}}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000840)={@initdev, @empty, 0x0}, &(0x7f0000000880)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000940)={'sit0\x00', &(0x7f00000008c0)={'sit0\x00', r1, 0x20, 0x7, 0x4, 0x10001, {{0xe, 0x4, 0x2, 0x37, 0x38, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x83, 0x10, "605bda5f90690b48d310f634355b"}, @rr={0x7, 0x13, 0x70, [@dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @private=0xa010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000a00)={'erspan0\x00', &(0x7f0000000980)={'sit0\x00', r1, 0x8000, 0x10, 0xffffffff, 0x9, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x64, 0x0, 0x3f, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @rand_addr=0x64010102, {[@ssrr={0x89, 0xb, 0x90, [@rand_addr=0x64010100, @remote]}, @noop, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000ac0)={'ip6gre0\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x10, 0x0, 0x2, 0x9, 0x24, @private1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, 0x7800, 0x3, 0x1}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001840)={&(0x7f0000000b00)={0xd14, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x260, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x6, 0x1, 0x55, 0x6}, {0xf50, 0x80, 0x1f, 0x2}, {0x401, 0x76, 0x29, 0x6}, {0x4, 0x6, 0x36, 0x5}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x2, 0x80, 0xfc, 0x1}, {0x100, 0x4d, 0x8, 0x5e}, {0x1000, 0x8, 0x7f, 0x10001}, {0x1, 0x3, 0x9, 0x101}, {0xc6c, 0xc1, 0x3f, 0xffffffff}, {0x80, 0x7f, 0xff, 0x1}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r1}, {0x4}}, {{0x8, 0x1, r1}, {0x1bc, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4, 0x6, 0x7, 0x7f}, {0xf11, 0x5, 0x7, 0xffff4a7d}, {0x7, 0x2, 0x70, 0x4}, {0x6, 0x5, 0x81}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x62}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x1c4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xa3, 0x7}, {0x2, 0x7, 0x7, 0x7f}, {0x80, 0x0, 0x9, 0x380000}, {0x1, 0x55, 0x2, 0x7e0000}, {0x4, 0x7f, 0x20, 0x88}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x66f3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x1d0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}]}}, {{0x8, 0x1, r1}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x0, 0x0, 0x6, 0x9}, {0x377, 0x6, 0x9, 0x77}, {0x7, 0x6, 0xf2, 0x2}, {0x7, 0x3, 0x1, 0xfffffffa}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r1}, {0x244, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xd6ae, 0x0, 0x2}, {0x8, 0xfc, 0x1f, 0x81}, {0x80, 0x1, 0x61, 0x4}, {0xbb, 0x0, 0x81, 0xff}, {0x7, 0x81, 0x4, 0x5}, {0x7, 0x20, 0xa8, 0xfff}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}]}, 0xd14}, 0x1, 0x0, 0x0, 0xc080}, 0x40000000) [ 325.221972][ T38] audit: type=1400 audit(1687129717.239:208): avc: denied { write } for pid=8160 comm="syz-executor.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 23:08:37 executing program 1: syz_clone(0x20001301, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x6041, 0x0) (async) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) 23:08:37 executing program 3: syz_clone(0x2000e001, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x206000, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr, @broadcast, 0x0}, &(0x7f0000000100)=0xc) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x516, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x84}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000300)={'erspan0\x00', r1, 0x8000, 0x7800, 0x7, 0x0, {{0x34, 0x4, 0x2, 0x3c, 0xd0, 0x68, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @loopback, {[@timestamp_addr={0x44, 0x44, 0x59, 0x1, 0x1, [{@remote, 0x4}, {@empty, 0x3}, {@empty, 0xfffffbff}, {@rand_addr=0x64010102, 0xffff}, {@broadcast}, {@private=0xa010101, 0x2}, {@local, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @timestamp_addr={0x44, 0x14, 0x33, 0x1, 0xe, [{@broadcast, 0x48af}, {@private=0xa010100, 0x3f}]}, @noop, @timestamp_prespec={0x44, 0x34, 0x4a, 0x3, 0x9, [{@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xaf13}, {@empty, 0x7}, {@broadcast, 0x1}, {@remote, 0x8001}, {@multicast2, 0x7}]}, @timestamp_prespec={0x44, 0x1c, 0x8b, 0x3, 0x3, [{@remote, 0xfffffff7}, {@loopback, 0x7}, {@local, 0xac}]}, @generic={0x94, 0x10, "2087baffaebc4e439eb026235269"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'gretap0\x00', r1, 0x10, 0x0, 0x1, 0x16, {{0x9, 0x4, 0x2, 0x4, 0x24, 0x68, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf1, [@broadcast]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'gre0\x00', 0x0, 0x20, 0x7, 0x1, 0x80, {{0x12, 0x4, 0x1, 0x8, 0x48, 0x67, 0x0, 0x0, 0x29, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x7, 0x4c, [@private=0xa010102]}, @timestamp_addr={0x44, 0xc, 0x38, 0x1, 0x0, [{@multicast2, 0x1}]}, @ssrr={0x89, 0x1f, 0x7a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'syztnl2\x00', r1, 0x2f, 0x3, 0x94, 0xe52, 0x30, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x0, 0x8000000, 0xfffffc00}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000800)={'erspan0\x00', &(0x7f0000000780)={'gre0\x00', r1, 0x7800, 0x1, 0x1, 0xffffffff, {{0x14, 0x4, 0x1, 0x4, 0x50, 0x65, 0x0, 0x6, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x13, 0x8b, [@private=0xa010102, @remote, @multicast2, @empty]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0xa5, [@dev={0xac, 0x14, 0x14, 0x10}, @rand_addr=0x64010102, @private=0xa010101, @local]}, @noop, @cipso={0x86, 0xc, 0x1, [{0x0, 0x4, "daad"}, {0x6, 0x2}]}]}}}}}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000840)={@initdev, @empty, 0x0}, &(0x7f0000000880)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000940)={'sit0\x00', &(0x7f00000008c0)={'sit0\x00', r1, 0x20, 0x7, 0x4, 0x10001, {{0xe, 0x4, 0x2, 0x37, 0x38, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x83, 0x10, "605bda5f90690b48d310f634355b"}, @rr={0x7, 0x13, 0x70, [@dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @private=0xa010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000a00)={'erspan0\x00', &(0x7f0000000980)={'sit0\x00', r1, 0x8000, 0x10, 0xffffffff, 0x9, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x64, 0x0, 0x3f, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @rand_addr=0x64010102, {[@ssrr={0x89, 0xb, 0x90, [@rand_addr=0x64010100, @remote]}, @noop, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000ac0)={'ip6gre0\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x10, 0x0, 0x2, 0x9, 0x24, @private1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, 0x7800, 0x3, 0x1}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001840)={&(0x7f0000000b00)={0xd14, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x260, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x6, 0x1, 0x55, 0x6}, {0xf50, 0x80, 0x1f, 0x2}, {0x401, 0x76, 0x29, 0x6}, {0x4, 0x6, 0x36, 0x5}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x2, 0x80, 0xfc, 0x1}, {0x100, 0x4d, 0x8, 0x5e}, {0x1000, 0x8, 0x7f, 0x10001}, {0x1, 0x3, 0x9, 0x101}, {0xc6c, 0xc1, 0x3f, 0xffffffff}, {0x80, 0x7f, 0xff, 0x1}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r1}, {0x4}}, {{0x8, 0x1, r1}, {0x1bc, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4, 0x6, 0x7, 0x7f}, {0xf11, 0x5, 0x7, 0xffff4a7d}, {0x7, 0x2, 0x70, 0x4}, {0x6, 0x5, 0x81}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x62}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x1c4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xa3, 0x7}, {0x2, 0x7, 0x7, 0x7f}, {0x80, 0x0, 0x9, 0x380000}, {0x1, 0x55, 0x2, 0x7e0000}, {0x4, 0x7f, 0x20, 0x88}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x66f3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x1d0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}]}}, {{0x8, 0x1, r1}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x0, 0x0, 0x6, 0x9}, {0x377, 0x6, 0x9, 0x77}, {0x7, 0x6, 0xf2, 0x2}, {0x7, 0x3, 0x1, 0xfffffffa}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r1}, {0x244, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xd6ae, 0x0, 0x2}, {0x8, 0xfc, 0x1f, 0x81}, {0x80, 0x1, 0x61, 0x4}, {0xbb, 0x0, 0x81, 0xff}, {0x7, 0x81, 0x4, 0x5}, {0x7, 0x20, 0xa8, 0xfff}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}]}, 0xd14}, 0x1, 0x0, 0x0, 0xc080}, 0x40000000) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x206000, 0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr, @broadcast}, &(0x7f0000000100)=0xc) (async) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x516, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x84}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000300)={'erspan0\x00', r1, 0x8000, 0x7800, 0x7, 0x0, {{0x34, 0x4, 0x2, 0x3c, 0xd0, 0x68, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @loopback, {[@timestamp_addr={0x44, 0x44, 0x59, 0x1, 0x1, [{@remote, 0x4}, {@empty, 0x3}, {@empty, 0xfffffbff}, {@rand_addr=0x64010102, 0xffff}, {@broadcast}, {@private=0xa010101, 0x2}, {@local, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @timestamp_addr={0x44, 0x14, 0x33, 0x1, 0xe, [{@broadcast, 0x48af}, {@private=0xa010100, 0x3f}]}, @noop, @timestamp_prespec={0x44, 0x34, 0x4a, 0x3, 0x9, [{@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xaf13}, {@empty, 0x7}, {@broadcast, 0x1}, {@remote, 0x8001}, {@multicast2, 0x7}]}, @timestamp_prespec={0x44, 0x1c, 0x8b, 0x3, 0x3, [{@remote, 0xfffffff7}, {@loopback, 0x7}, {@local, 0xac}]}, @generic={0x94, 0x10, "2087baffaebc4e439eb026235269"}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'gretap0\x00', r1, 0x10, 0x0, 0x1, 0x16, {{0x9, 0x4, 0x2, 0x4, 0x24, 0x68, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf1, [@broadcast]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000580), &(0x7f00000005c0)=0x4) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'gre0\x00', 0x0, 0x20, 0x7, 0x1, 0x80, {{0x12, 0x4, 0x1, 0x8, 0x48, 0x67, 0x0, 0x0, 0x29, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x7, 0x4c, [@private=0xa010102]}, @timestamp_addr={0x44, 0xc, 0x38, 0x1, 0x0, [{@multicast2, 0x1}]}, @ssrr={0x89, 0x1f, 0x7a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'syztnl2\x00', r1, 0x2f, 0x3, 0x94, 0xe52, 0x30, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x0, 0x8000000, 0xfffffc00}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000800)={'erspan0\x00', &(0x7f0000000780)={'gre0\x00', r1, 0x7800, 0x1, 0x1, 0xffffffff, {{0x14, 0x4, 0x1, 0x4, 0x50, 0x65, 0x0, 0x6, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x13, 0x8b, [@private=0xa010102, @remote, @multicast2, @empty]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0xa5, [@dev={0xac, 0x14, 0x14, 0x10}, @rand_addr=0x64010102, @private=0xa010101, @local]}, @noop, @cipso={0x86, 0xc, 0x1, [{0x0, 0x4, "daad"}, {0x6, 0x2}]}]}}}}}) (async) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000840)={@initdev, @empty}, &(0x7f0000000880)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000940)={'sit0\x00', &(0x7f00000008c0)={'sit0\x00', r1, 0x20, 0x7, 0x4, 0x10001, {{0xe, 0x4, 0x2, 0x37, 0x38, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x83, 0x10, "605bda5f90690b48d310f634355b"}, @rr={0x7, 0x13, 0x70, [@dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @private=0xa010100]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000a00)={'erspan0\x00', &(0x7f0000000980)={'sit0\x00', r1, 0x8000, 0x10, 0xffffffff, 0x9, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x64, 0x0, 0x3f, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @rand_addr=0x64010102, {[@ssrr={0x89, 0xb, 0x90, [@rand_addr=0x64010100, @remote]}, @noop, @noop]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000ac0)={'ip6gre0\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x10, 0x0, 0x2, 0x9, 0x24, @private1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, 0x7800, 0x3, 0x1}}) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001840)={&(0x7f0000000b00)={0xd14, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x260, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x6, 0x1, 0x55, 0x6}, {0xf50, 0x80, 0x1f, 0x2}, {0x401, 0x76, 0x29, 0x6}, {0x4, 0x6, 0x36, 0x5}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x2, 0x80, 0xfc, 0x1}, {0x100, 0x4d, 0x8, 0x5e}, {0x1000, 0x8, 0x7f, 0x10001}, {0x1, 0x3, 0x9, 0x101}, {0xc6c, 0xc1, 0x3f, 0xffffffff}, {0x80, 0x7f, 0xff, 0x1}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r1}, {0x4}}, {{0x8, 0x1, r1}, {0x1bc, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4, 0x6, 0x7, 0x7f}, {0xf11, 0x5, 0x7, 0xffff4a7d}, {0x7, 0x2, 0x70, 0x4}, {0x6, 0x5, 0x81}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x62}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x1c4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xa3, 0x7}, {0x2, 0x7, 0x7, 0x7f}, {0x80, 0x0, 0x9, 0x380000}, {0x1, 0x55, 0x2, 0x7e0000}, {0x4, 0x7f, 0x20, 0x88}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x66f3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x1d0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}]}}, {{0x8, 0x1, r1}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x0, 0x0, 0x6, 0x9}, {0x377, 0x6, 0x9, 0x77}, {0x7, 0x6, 0xf2, 0x2}, {0x7, 0x3, 0x1, 0xfffffffa}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r1}, {0x244, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xd6ae, 0x0, 0x2}, {0x8, 0xfc, 0x1f, 0x81}, {0x80, 0x1, 0x61, 0x4}, {0xbb, 0x0, 0x81, 0xff}, {0x7, 0x81, 0x4, 0x5}, {0x7, 0x20, 0xa8, 0xfff}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}]}, 0xd14}, 0x1, 0x0, 0x0, 0xc080}, 0x40000000) (async) 23:08:37 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x6041, 0x0) (async) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) 23:08:37 executing program 1: syz_clone(0x2000150e, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x4) 23:08:37 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x206000, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr, @broadcast, 0x0}, &(0x7f0000000100)=0xc) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x516, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x84}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000300)={'erspan0\x00', r1, 0x8000, 0x7800, 0x7, 0x0, {{0x34, 0x4, 0x2, 0x3c, 0xd0, 0x68, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @loopback, {[@timestamp_addr={0x44, 0x44, 0x59, 0x1, 0x1, [{@remote, 0x4}, {@empty, 0x3}, {@empty, 0xfffffbff}, {@rand_addr=0x64010102, 0xffff}, {@broadcast}, {@private=0xa010101, 0x2}, {@local, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @timestamp_addr={0x44, 0x14, 0x33, 0x1, 0xe, [{@broadcast, 0x48af}, {@private=0xa010100, 0x3f}]}, @noop, @timestamp_prespec={0x44, 0x34, 0x4a, 0x3, 0x9, [{@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xaf13}, {@empty, 0x7}, {@broadcast, 0x1}, {@remote, 0x8001}, {@multicast2, 0x7}]}, @timestamp_prespec={0x44, 0x1c, 0x8b, 0x3, 0x3, [{@remote, 0xfffffff7}, {@loopback, 0x7}, {@local, 0xac}]}, @generic={0x94, 0x10, "2087baffaebc4e439eb026235269"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'gretap0\x00', r1, 0x10, 0x0, 0x1, 0x16, {{0x9, 0x4, 0x2, 0x4, 0x24, 0x68, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf1, [@broadcast]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'gre0\x00', 0x0, 0x20, 0x7, 0x1, 0x80, {{0x12, 0x4, 0x1, 0x8, 0x48, 0x67, 0x0, 0x0, 0x29, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x7, 0x4c, [@private=0xa010102]}, @timestamp_addr={0x44, 0xc, 0x38, 0x1, 0x0, [{@multicast2, 0x1}]}, @ssrr={0x89, 0x1f, 0x7a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'syztnl2\x00', r1, 0x2f, 0x3, 0x94, 0xe52, 0x30, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x0, 0x8000000, 0xfffffc00}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000800)={'erspan0\x00', &(0x7f0000000780)={'gre0\x00', r1, 0x7800, 0x1, 0x1, 0xffffffff, {{0x14, 0x4, 0x1, 0x4, 0x50, 0x65, 0x0, 0x6, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x13, 0x8b, [@private=0xa010102, @remote, @multicast2, @empty]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0xa5, [@dev={0xac, 0x14, 0x14, 0x10}, @rand_addr=0x64010102, @private=0xa010101, @local]}, @noop, @cipso={0x86, 0xc, 0x1, [{0x0, 0x4, "daad"}, {0x6, 0x2}]}]}}}}}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000840)={@initdev, @empty, 0x0}, &(0x7f0000000880)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000940)={'sit0\x00', &(0x7f00000008c0)={'sit0\x00', r1, 0x20, 0x7, 0x4, 0x10001, {{0xe, 0x4, 0x2, 0x37, 0x38, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x83, 0x10, "605bda5f90690b48d310f634355b"}, @rr={0x7, 0x13, 0x70, [@dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @private=0xa010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000a00)={'erspan0\x00', &(0x7f0000000980)={'sit0\x00', r1, 0x8000, 0x10, 0xffffffff, 0x9, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x64, 0x0, 0x3f, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @rand_addr=0x64010102, {[@ssrr={0x89, 0xb, 0x90, [@rand_addr=0x64010100, @remote]}, @noop, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000ac0)={'ip6gre0\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x10, 0x0, 0x2, 0x9, 0x24, @private1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, 0x7800, 0x3, 0x1}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001840)={&(0x7f0000000b00)={0xd14, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x260, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x6, 0x1, 0x55, 0x6}, {0xf50, 0x80, 0x1f, 0x2}, {0x401, 0x76, 0x29, 0x6}, {0x4, 0x6, 0x36, 0x5}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x2, 0x80, 0xfc, 0x1}, {0x100, 0x4d, 0x8, 0x5e}, {0x1000, 0x8, 0x7f, 0x10001}, {0x1, 0x3, 0x9, 0x101}, {0xc6c, 0xc1, 0x3f, 0xffffffff}, {0x80, 0x7f, 0xff, 0x1}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r1}, {0x4}}, {{0x8, 0x1, r1}, {0x1bc, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4, 0x6, 0x7, 0x7f}, {0xf11, 0x5, 0x7, 0xffff4a7d}, {0x7, 0x2, 0x70, 0x4}, {0x6, 0x5, 0x81}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x62}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x1c4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xa3, 0x7}, {0x2, 0x7, 0x7, 0x7f}, {0x80, 0x0, 0x9, 0x380000}, {0x1, 0x55, 0x2, 0x7e0000}, {0x4, 0x7f, 0x20, 0x88}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x66f3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x1d0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}]}}, {{0x8, 0x1, r1}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x0, 0x0, 0x6, 0x9}, {0x377, 0x6, 0x9, 0x77}, {0x7, 0x6, 0xf2, 0x2}, {0x7, 0x3, 0x1, 0xfffffffa}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r1}, {0x244, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xd6ae, 0x0, 0x2}, {0x8, 0xfc, 0x1f, 0x81}, {0x80, 0x1, 0x61, 0x4}, {0xbb, 0x0, 0x81, 0xff}, {0x7, 0x81, 0x4, 0x5}, {0x7, 0x20, 0xa8, 0xfff}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}]}, 0xd14}, 0x1, 0x0, 0x0, 0xc080}, 0x40000000) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x206000, 0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr, @broadcast}, &(0x7f0000000100)=0xc) (async) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x516, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x84}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000300)={'erspan0\x00', r1, 0x8000, 0x7800, 0x7, 0x0, {{0x34, 0x4, 0x2, 0x3c, 0xd0, 0x68, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @loopback, {[@timestamp_addr={0x44, 0x44, 0x59, 0x1, 0x1, [{@remote, 0x4}, {@empty, 0x3}, {@empty, 0xfffffbff}, {@rand_addr=0x64010102, 0xffff}, {@broadcast}, {@private=0xa010101, 0x2}, {@local, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @timestamp_addr={0x44, 0x14, 0x33, 0x1, 0xe, [{@broadcast, 0x48af}, {@private=0xa010100, 0x3f}]}, @noop, @timestamp_prespec={0x44, 0x34, 0x4a, 0x3, 0x9, [{@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xaf13}, {@empty, 0x7}, {@broadcast, 0x1}, {@remote, 0x8001}, {@multicast2, 0x7}]}, @timestamp_prespec={0x44, 0x1c, 0x8b, 0x3, 0x3, [{@remote, 0xfffffff7}, {@loopback, 0x7}, {@local, 0xac}]}, @generic={0x94, 0x10, "2087baffaebc4e439eb026235269"}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'gretap0\x00', r1, 0x10, 0x0, 0x1, 0x16, {{0x9, 0x4, 0x2, 0x4, 0x24, 0x68, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf1, [@broadcast]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000580), &(0x7f00000005c0)=0x4) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'gre0\x00', 0x0, 0x20, 0x7, 0x1, 0x80, {{0x12, 0x4, 0x1, 0x8, 0x48, 0x67, 0x0, 0x0, 0x29, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x7, 0x4c, [@private=0xa010102]}, @timestamp_addr={0x44, 0xc, 0x38, 0x1, 0x0, [{@multicast2, 0x1}]}, @ssrr={0x89, 0x1f, 0x7a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'syztnl2\x00', r1, 0x2f, 0x3, 0x94, 0xe52, 0x30, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x0, 0x8000000, 0xfffffc00}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000800)={'erspan0\x00', &(0x7f0000000780)={'gre0\x00', r1, 0x7800, 0x1, 0x1, 0xffffffff, {{0x14, 0x4, 0x1, 0x4, 0x50, 0x65, 0x0, 0x6, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x13, 0x8b, [@private=0xa010102, @remote, @multicast2, @empty]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0xa5, [@dev={0xac, 0x14, 0x14, 0x10}, @rand_addr=0x64010102, @private=0xa010101, @local]}, @noop, @cipso={0x86, 0xc, 0x1, [{0x0, 0x4, "daad"}, {0x6, 0x2}]}]}}}}}) (async) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000840)={@initdev, @empty}, &(0x7f0000000880)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000940)={'sit0\x00', &(0x7f00000008c0)={'sit0\x00', r1, 0x20, 0x7, 0x4, 0x10001, {{0xe, 0x4, 0x2, 0x37, 0x38, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x83, 0x10, "605bda5f90690b48d310f634355b"}, @rr={0x7, 0x13, 0x70, [@dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @private=0xa010100]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000a00)={'erspan0\x00', &(0x7f0000000980)={'sit0\x00', r1, 0x8000, 0x10, 0xffffffff, 0x9, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x64, 0x0, 0x3f, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @rand_addr=0x64010102, {[@ssrr={0x89, 0xb, 0x90, [@rand_addr=0x64010100, @remote]}, @noop, @noop]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000ac0)={'ip6gre0\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x10, 0x0, 0x2, 0x9, 0x24, @private1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, 0x7800, 0x3, 0x1}}) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001840)={&(0x7f0000000b00)={0xd14, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x260, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x6, 0x1, 0x55, 0x6}, {0xf50, 0x80, 0x1f, 0x2}, {0x401, 0x76, 0x29, 0x6}, {0x4, 0x6, 0x36, 0x5}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x2, 0x80, 0xfc, 0x1}, {0x100, 0x4d, 0x8, 0x5e}, {0x1000, 0x8, 0x7f, 0x10001}, {0x1, 0x3, 0x9, 0x101}, {0xc6c, 0xc1, 0x3f, 0xffffffff}, {0x80, 0x7f, 0xff, 0x1}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r1}, {0x4}}, {{0x8, 0x1, r1}, {0x1bc, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4, 0x6, 0x7, 0x7f}, {0xf11, 0x5, 0x7, 0xffff4a7d}, {0x7, 0x2, 0x70, 0x4}, {0x6, 0x5, 0x81}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x62}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x1c4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xa3, 0x7}, {0x2, 0x7, 0x7, 0x7f}, {0x80, 0x0, 0x9, 0x380000}, {0x1, 0x55, 0x2, 0x7e0000}, {0x4, 0x7f, 0x20, 0x88}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x66f3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x1d0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}]}}, {{0x8, 0x1, r1}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x0, 0x0, 0x6, 0x9}, {0x377, 0x6, 0x9, 0x77}, {0x7, 0x6, 0xf2, 0x2}, {0x7, 0x3, 0x1, 0xfffffffa}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r1}, {0x244, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xd6ae, 0x0, 0x2}, {0x8, 0xfc, 0x1f, 0x81}, {0x80, 0x1, 0x61, 0x4}, {0xbb, 0x0, 0x81, 0xff}, {0x7, 0x81, 0x4, 0x5}, {0x7, 0x20, 0xa8, 0xfff}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}]}, 0xd14}, 0x1, 0x0, 0x0, 0xc080}, 0x40000000) (async) 23:08:37 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x4) 23:08:37 executing program 1: syz_clone(0x20001f00, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 3: syz_clone(0x2000e101, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000040)={0x8}) 23:08:37 executing program 2: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x4) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x4) (async) 23:08:37 executing program 1: syz_clone(0x20003702, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000040)={0x8}) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000040)={0x8}) (async) 23:08:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r1, 0x0, 0x20000004) 23:08:37 executing program 1: syz_clone(0x20003f00, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000040)={0x8}) 23:08:37 executing program 3: syz_clone(0x2000e201, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 1: syz_clone(0x2000520e, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r1, 0x0, 0x20000004) 23:08:37 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x2}) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={r0, 0x0, 0x1000, 0x1000000}) 23:08:37 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x2}) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={r0, 0x0, 0x1000, 0x1000000}) 23:08:37 executing program 1: syz_clone(0x2000550e, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r1, 0x0, 0x20000004) (async) sendmsg$NLBL_MGMT_C_LISTDEF(r1, 0x0, 0x20000004) 23:08:37 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x2}) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={r0, 0x0, 0x1000, 0x1000000}) 23:08:37 executing program 3: syz_clone(0x2000e202, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 2: syz_clone(0x2000e001, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 1: syz_clone(0x20008601, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 0: prctl$PR_MCE_KILL(0x21, 0x1, 0x2) socket(0x1a, 0x0, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x42a803, 0x2) 23:08:37 executing program 0: prctl$PR_MCE_KILL(0x21, 0x1, 0x2) socket(0x1a, 0x0, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x42a803, 0x2) 23:08:37 executing program 1: syz_clone(0x2000f400, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 0: prctl$PR_MCE_KILL(0x21, 0x1, 0x2) socket(0x1a, 0x0, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x42a803, 0x2) 23:08:37 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, r1, 0x0, r2, 0x0, 0x0, r3, 0x0], 0x9}) 23:08:37 executing program 3: syz_clone(0x2000e301, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 2: syz_clone(0x2000e001, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 1: syz_clone(0x2000fb0e, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, r1, 0x0, r2, 0x0, 0x0, r3, 0x0], 0x9}) 23:08:37 executing program 1: syz_clone(0x2000fc0e, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:37 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, r1, 0x0, r2, 0x0, 0x0, r3, 0x0], 0x9}) 23:08:38 executing program 1: syz_clone(0x2000fd00, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:38 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) 23:08:38 executing program 3: syz_clone(0x2000e401, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:38 executing program 2: syz_clone(0x2000e001, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:38 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) (async) syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) 23:08:38 executing program 1: syz_clone(0x2000fe00, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:38 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) (async) 23:08:38 executing program 1: syz_clone(0x2000ff00, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:38 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) write$damon_schemes(0xffffffffffffffff, &(0x7f0000000040)={0x8000000000000001, 0x5, 0x20, 0x20, 0x43, 0x6, 0x7}, 0x66) 23:08:38 executing program 1: syz_clone(0x20ffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:38 executing program 3: syz_clone(0x2000e501, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:38 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:38 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) write$damon_schemes(0xffffffffffffffff, &(0x7f0000000040)={0x8000000000000001, 0x5, 0x20, 0x20, 0x43, 0x6, 0x7}, 0x66) 23:08:38 executing program 1: syz_clone(0x20000000, 0x0, 0x2, 0x0, 0x0, 0x0) 23:08:38 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) write$damon_schemes(0xffffffffffffffff, &(0x7f0000000040)={0x8000000000000001, 0x5, 0x20, 0x20, 0x43, 0x6, 0x7}, 0x66) 23:08:38 executing program 1: syz_clone(0x20000000, 0x0, 0x4, 0x0, 0x0, 0x0) 23:08:38 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:38 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x428901, 0x0) 23:08:38 executing program 3: syz_clone(0x2000e503, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:38 executing program 1: syz_clone(0x20000000, 0x0, 0x5, 0x0, 0x0, 0x0) 23:08:38 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:38 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x428901, 0x0) 23:08:38 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x428901, 0x0) 23:08:38 executing program 1: syz_clone(0x20000000, 0x0, 0x7, 0x0, 0x0, 0x0) 23:08:38 executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) socket$igmp(0x2, 0x3, 0x2) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 23:08:38 executing program 2: syz_clone(0x20000000, 0x0, 0x4, 0x0, 0x0, 0x0) [ 326.553688][ T38] audit: type=1400 audit(1687129718.579:209): avc: denied { ioctl } for pid=8339 comm="syz-executor.0" path="socket:[148594]" dev="sockfs" ino=148594 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 23:08:38 executing program 3: syz_clone(0x2000e601, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:38 executing program 1: syz_clone(0x20000000, 0x0, 0x8, 0x0, 0x0, 0x0) 23:08:38 executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) socket$igmp(0x2, 0x3, 0x2) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) (async) socket$igmp(0x2, 0x3, 0x2) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) 23:08:38 executing program 2: syz_clone(0x2000e401, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:38 executing program 1: syz_clone(0x20000000, 0x0, 0x10, 0x0, 0x0, 0x0) 23:08:38 executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_crypto(0x10, 0x3, 0x15) (async) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) socket$igmp(0x2, 0x3, 0x2) (async) socket$igmp(0x2, 0x3, 0x2) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 23:08:38 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x3017c0, 0x0) 23:08:38 executing program 1: syz_clone(0x20000000, 0x0, 0x11, 0x0, 0x0, 0x0) 23:08:38 executing program 3: syz_clone(0x2000e701, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:38 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x3017c0, 0x0) 23:08:38 executing program 1: syz_clone(0x20000000, 0x0, 0xf4, 0x0, 0x0, 0x0) 23:08:38 executing program 2: syz_clone(0x2000e401, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:38 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x3017c0, 0x0) 23:08:38 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x3, 0x3, 0x217}) 23:08:38 executing program 1: syz_clone(0x20000000, 0x0, 0xfd, 0x0, 0x0, 0x0) 23:08:38 executing program 1: syz_clone(0x20000000, 0x0, 0xfe, 0x0, 0x0, 0x0) 23:08:39 executing program 3: syz_clone(0x2000e801, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:39 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x3, 0x3, 0x217}) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x3, 0x3, 0x217}) (async) 23:08:39 executing program 1: syz_clone(0x20000000, 0x0, 0x102, 0x0, 0x0, 0x0) 23:08:39 executing program 2: syz_clone(0x2000e401, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:39 executing program 3: syz_clone(0x2000e901, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:39 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x3, 0x3, 0x217}) (async) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x3, 0x3, 0x217}) 23:08:39 executing program 3: syz_clone(0x2000ea01, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:39 executing program 1: syz_clone(0x20000000, 0x0, 0x103, 0x0, 0x0, 0x0) 23:08:39 executing program 3: syz_clone(0x2000eb01, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:39 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) socket(0x9, 0x800, 0x2) 23:08:39 executing program 3: syz_clone(0x20ffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:39 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) socket(0x9, 0x800, 0x2) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) socket(0x9, 0x800, 0x2) (async) 23:08:39 executing program 1: syz_clone(0x20000000, 0x0, 0x104, 0x0, 0x0, 0x0) 23:08:39 executing program 3: syz_clone(0x38010000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:39 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:39 executing program 3: syz_clone(0xc8000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:39 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) socket(0x9, 0x800, 0x2) 23:08:39 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:39 executing program 1: syz_clone(0x20000000, 0x0, 0x105, 0x0, 0x0, 0x0) 23:08:39 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:39 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000040)={0x7, 0xe}) 23:08:39 executing program 3: syz_clone(0x20000000, 0x0, 0x2, 0x0, 0x0, 0x0) 23:08:39 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000040)={0x7, 0xe}) 23:08:39 executing program 3: syz_clone(0x20000000, 0x0, 0x4, 0x0, 0x0, 0x0) 23:08:39 executing program 2: syz_clone(0xc8000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:39 executing program 1: syz_clone(0x20000000, 0x0, 0x107, 0x0, 0x0, 0x0) 23:08:39 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async, rerun: 32) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000040)={0x7, 0xe}) (rerun: 32) 23:08:39 executing program 3: syz_clone(0x20000000, 0x0, 0x5, 0x0, 0x0, 0x0) 23:08:39 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000040)) 23:08:39 executing program 3: syz_clone(0x20000000, 0x0, 0x7, 0x0, 0x0, 0x0) 23:08:39 executing program 1: syz_clone(0x20000000, 0x0, 0x108, 0x0, 0x0, 0x0) 23:08:39 executing program 2: syz_clone(0xc8000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:39 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000040)) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000040)) (async) 23:08:39 executing program 3: syz_clone(0x20000000, 0x0, 0x8, 0x0, 0x0, 0x0) 23:08:39 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000040)) 23:08:39 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x188) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x10) 23:08:39 executing program 1: syz_clone(0x20000000, 0x0, 0x109, 0x0, 0x0, 0x0) 23:08:39 executing program 3: syz_clone(0x20000000, 0x0, 0x11, 0x0, 0x0, 0x0) 23:08:39 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x188) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x10) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x188) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x10) (async) 23:08:39 executing program 2: syz_clone(0xc8000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:39 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x188) (async, rerun: 64) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x10) (rerun: 64) 23:08:39 executing program 3: syz_clone(0x20000000, 0x0, 0x57, 0x0, 0x0, 0x0) 23:08:39 executing program 1: syz_clone(0x20000000, 0x0, 0x10a, 0x0, 0x0, 0x0) 23:08:39 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x1, r0, 0x6}) 23:08:39 executing program 3: syz_clone(0x20000000, 0x0, 0x1d5, 0x0, 0x0, 0x0) 23:08:39 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x1, r0, 0x6}) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x1, r0, 0x6}) (async) 23:08:39 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x1, r0, 0x6}) 23:08:40 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:40 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) write$damon_schemes(r0, &(0x7f0000000040)={0x5, 0x10001, 0x20, 0x20, 0x4, 0x72bf, 0x1}, 0x66) 23:08:40 executing program 3: syz_clone(0x20000000, 0x0, 0x1d6, 0x0, 0x0, 0x0) 23:08:40 executing program 1: syz_clone(0x20000000, 0x0, 0x10b, 0x0, 0x0, 0x0) 23:08:40 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async, rerun: 64) write$damon_schemes(r0, &(0x7f0000000040)={0x5, 0x10001, 0x20, 0x20, 0x4, 0x72bf, 0x1}, 0x66) (rerun: 64) 23:08:40 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:40 executing program 3: syz_clone(0x20000000, 0x0, 0x1d7, 0x0, 0x0, 0x0) 23:08:40 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) write$damon_schemes(r0, &(0x7f0000000040)={0x5, 0x10001, 0x20, 0x20, 0x4, 0x72bf, 0x1}, 0x66) 23:08:40 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:40 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x58) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000080)) 23:08:40 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x58) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000080)) 23:08:40 executing program 1: syz_clone(0x20000000, 0x0, 0x10c, 0x0, 0x0, 0x0) 23:08:40 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x58) (async) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000080)) 23:08:40 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x58) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000080)) 23:08:40 executing program 3: syz_clone(0x20000000, 0x0, 0x1d8, 0x0, 0x0, 0x0) 23:08:40 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000040)) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) 23:08:40 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x58) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000080)) 23:08:40 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000040)) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000040)) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) 23:08:41 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x58) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000080)) 23:08:41 executing program 1: syz_clone(0x20000000, 0x0, 0x10d, 0x0, 0x0, 0x0) 23:08:41 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x58) 23:08:41 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000040)) (async, rerun: 32) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (rerun: 32) 23:08:41 executing program 3: syz_clone(0x20000000, 0x0, 0x1d9, 0x0, 0x0, 0x0) 23:08:41 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x58) 23:08:41 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x80) 23:08:41 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x80) 23:08:41 executing program 2: openat$damon_schemes(0xffffffffffffff9c, 0x0, 0x4001, 0x58) 23:08:41 executing program 1: syz_clone(0x20000000, 0x0, 0x10e, 0x0, 0x0, 0x0) 23:08:41 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x80) 23:08:41 executing program 2: openat$damon_schemes(0xffffffffffffff9c, 0x0, 0x4001, 0x58) 23:08:41 executing program 3: syz_clone(0x20000000, 0x0, 0x1da, 0x0, 0x0, 0x0) 23:08:41 executing program 2: openat$damon_schemes(0xffffffffffffff9c, 0x0, 0x4001, 0x58) 23:08:41 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) bind$isdn_base(r0, &(0x7f0000000040)={0x22, 0x3, 0x2, 0x0, 0x4}, 0x6) 23:08:41 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) bind$isdn_base(r0, &(0x7f0000000040)={0x22, 0x3, 0x2, 0x0, 0x4}, 0x6) 23:08:41 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x58) 23:08:41 executing program 1: syz_clone(0x20000000, 0x0, 0x10f, 0x0, 0x0, 0x0) 23:08:41 executing program 0: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) (async) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) bind$isdn_base(r0, &(0x7f0000000040)={0x22, 0x3, 0x2, 0x0, 0x4}, 0x6) 23:08:41 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x58) 23:08:41 executing program 3: syz_clone(0x20000000, 0x0, 0x1db, 0x0, 0x0, 0x0) 23:08:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x50) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) 23:08:41 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x58) 23:08:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x50) (async) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x50) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) 23:08:41 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x0) 23:08:41 executing program 1: syz_clone(0x20000000, 0x0, 0x110, 0x0, 0x0, 0x0) 23:08:41 executing program 2: syz_clone(0x20000000, 0x0, 0x10c, 0x0, 0x0, 0x0) 23:08:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x50) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) 23:08:41 executing program 3: syz_clone(0x20000000, 0x0, 0x1dc, 0x0, 0x0, 0x0) 23:08:41 executing program 0: ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000140)={{0x696, 0x9d2}, {0x1, 0x3}, 0x8}) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f00000000c0)={'\x00', 0xfffffff7, 0x1, 0x5}) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x10c01, 0x0) write$damon_monitor_on(r0, &(0x7f00000001c0), 0x3) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000040)={'\x00', 0xfffffffb, 0x3, 0x1}) 23:08:41 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:41 executing program 0: ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000140)={{0x696, 0x9d2}, {0x1, 0x3}, 0x8}) (async) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f00000000c0)={'\x00', 0xfffffff7, 0x1, 0x5}) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x10c01, 0x0) write$damon_monitor_on(r0, &(0x7f00000001c0), 0x3) (async) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000040)={'\x00', 0xfffffffb, 0x3, 0x1}) 23:08:41 executing program 3: syz_clone(0x20000000, 0x0, 0x1dd, 0x0, 0x0, 0x0) 23:08:41 executing program 1: syz_clone(0x20000000, 0x0, 0x111, 0x0, 0x0, 0x0) 23:08:41 executing program 2: syz_clone(0x20000000, 0x0, 0x104, 0x0, 0x0, 0x0) 23:08:41 executing program 0: ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000140)={{0x696, 0x9d2}, {0x1, 0x3}, 0x8}) (async) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f00000000c0)={'\x00', 0xfffffff7, 0x1, 0x5}) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x10c01, 0x0) write$damon_monitor_on(r0, &(0x7f00000001c0), 0x3) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000040)={'\x00', 0xfffffffb, 0x3, 0x1}) 23:08:41 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0xe548, 0x0, 0x9}) 23:08:41 executing program 2: syz_clone(0x38010000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:41 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0xe548, 0x0, 0x9}) 23:08:41 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0xe548, 0x0, 0x9}) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0xe548, 0x0, 0x9}) (async) 23:08:42 executing program 3: syz_clone(0x20000000, 0x0, 0x1df, 0x0, 0x0, 0x0) 23:08:42 executing program 1: syz_clone(0x20000000, 0x0, 0x112, 0x0, 0x0, 0x0) 23:08:42 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000040), 0x20102, 0x6) 23:08:42 executing program 2: syz_clone(0x38010000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:42 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000040), 0x20102, 0x6) 23:08:42 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000040), 0x20102, 0x6) 23:08:42 executing program 3: syz_clone(0x20000000, 0x0, 0x1e0, 0x0, 0x0, 0x0) 23:08:42 executing program 2: syz_clone(0x38010000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:42 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) write$damon_schemes(r0, &(0x7f0000000080)={0x3, 0xb2f8, 0x20, 0x20, 0x6666, 0x5, 0x1}, 0x66) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x29) 23:08:42 executing program 1: syz_clone(0x20000000, 0x0, 0x113, 0x0, 0x0, 0x0) 23:08:42 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) write$damon_schemes(r0, &(0x7f0000000080)={0x3, 0xb2f8, 0x20, 0x20, 0x6666, 0x5, 0x1}, 0x66) (async, rerun: 64) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x29) (rerun: 64) 23:08:42 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:42 executing program 3: syz_clone(0x20000000, 0x0, 0x1e1, 0x0, 0x0, 0x0) 23:08:42 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) write$damon_schemes(r0, &(0x7f0000000080)={0x3, 0xb2f8, 0x20, 0x20, 0x6666, 0x5, 0x1}, 0x66) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x29) 23:08:42 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:42 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x101141, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r1, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000080)) 23:08:42 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) (async, rerun: 64) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x101141, 0x0) (rerun: 64) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r1, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000080)) 23:08:42 executing program 1: syz_clone(0x20000000, 0x0, 0x186, 0x0, 0x0, 0x0) 23:08:42 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:42 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x101141, 0x0) (async) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r1, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000080)) (rerun: 64) 23:08:42 executing program 3: syz_clone(0x20000000, 0x0, 0x1e2, 0x0, 0x0, 0x0) 23:08:42 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:42 executing program 0: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000040)={'\x00', 0x7, 0x2, 0x7fffffff}) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x515040, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) 23:08:42 executing program 0: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000040)={'\x00', 0x7, 0x2, 0x7fffffff}) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x515040, 0x0) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x515040, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) 23:08:42 executing program 2: syz_clone(0x20000000, 0x0, 0x1e1, 0x0, 0x0, 0x0) 23:08:42 executing program 1: syz_clone(0x20000000, 0x0, 0x201, 0x0, 0x0, 0x0) 23:08:42 executing program 0: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000040)={'\x00', 0x7, 0x2, 0x7fffffff}) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x515040, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) 23:08:42 executing program 3: syz_clone(0x20000000, 0x0, 0x1e3, 0x0, 0x0, 0x0) 23:08:42 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x101141, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r1, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000080)) 23:08:42 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x101141, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r1, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000080)) 23:08:42 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x101141, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r1, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000080)) 23:08:42 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x101141, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r1, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000080)) 23:08:42 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x101141, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r1, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000080)) 23:08:42 executing program 1: syz_clone(0x20000000, 0x0, 0x237, 0x0, 0x0, 0x0) 23:08:42 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x101141, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r1, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000080)) 23:08:42 executing program 3: syz_clone(0x20000000, 0x0, 0x1e4, 0x0, 0x0, 0x0) 23:08:42 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x101141, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r1, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) 23:08:42 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x101141, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) 23:08:43 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x101141, 0x0) 23:08:43 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x101141, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r1, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) 23:08:43 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) 23:08:43 executing program 0: ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0) 23:08:43 executing program 3: syz_clone(0x20000000, 0x0, 0x1e5, 0x0, 0x0, 0x0) 23:08:43 executing program 1: syz_clone(0x20000000, 0x0, 0x301, 0x0, 0x0, 0x0) 23:08:43 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x101141, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) 23:08:43 executing program 0: ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0) 23:08:43 executing program 0: ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0) 23:08:43 executing program 0: r0 = syz_open_dev$sndpcmp(0x0, 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) 23:08:43 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x101141, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) 23:08:43 executing program 0: r0 = syz_open_dev$sndpcmp(0x0, 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) 23:08:43 executing program 1: syz_clone(0x20000000, 0x0, 0x500, 0x0, 0x0, 0x0) 23:08:43 executing program 0: r0 = syz_open_dev$sndpcmp(0x0, 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) 23:08:43 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x101141, 0x0) 23:08:43 executing program 3: syz_clone(0x20000000, 0x0, 0x1e6, 0x0, 0x0, 0x0) 23:08:43 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) 23:08:43 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) 23:08:43 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) 23:08:43 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0) 23:08:43 executing program 1: syz_clone(0x20000000, 0x0, 0x501, 0x0, 0x0, 0x0) 23:08:43 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2) 23:08:43 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0) 23:08:43 executing program 3: syz_clone(0x20000000, 0x0, 0x1e7, 0x0, 0x0, 0x0) 23:08:43 executing program 2: syz_open_dev$sndpcmp(0x0, 0x1, 0x2) 23:08:43 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0) 23:08:43 executing program 2: syz_open_dev$sndpcmp(0x0, 0x1, 0x2) 23:08:43 executing program 0: syz_clone(0x20000000, 0x0, 0x301, 0x0, 0x0, 0x0) 23:08:43 executing program 1: syz_clone(0x20000000, 0x0, 0x700, 0x0, 0x0, 0x0) 23:08:43 executing program 2: syz_open_dev$sndpcmp(0x0, 0x1, 0x2) 23:08:43 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x101141, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) 23:08:43 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x101141, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) 23:08:43 executing program 3: syz_clone(0x20000000, 0x0, 0x1e8, 0x0, 0x0, 0x0) 23:08:43 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x2) 23:08:43 executing program 1: syz_clone(0x20000000, 0x0, 0x701, 0x0, 0x0, 0x0) 23:08:43 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x101141, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) 23:08:43 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x2) 23:08:43 executing program 1: syz_clone(0x20000000, 0x0, 0x801, 0x0, 0x0, 0x0) 23:08:43 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x2) 23:08:43 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x101141, 0x0) 23:08:43 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x0) 23:08:43 executing program 3: syz_clone(0x20000000, 0x0, 0x1e9, 0x0, 0x0, 0x0) 23:08:43 executing program 2: syz_clone(0x20000000, 0x0, 0x701, 0x0, 0x0, 0x0) 23:08:43 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) 23:08:43 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2) 23:08:43 executing program 1: syz_clone(0x20000000, 0x0, 0x901, 0x0, 0x0, 0x0) 23:08:43 executing program 0: syz_open_dev$sndpcmp(0x0, 0x1, 0x2) 23:08:43 executing program 2: syz_clone(0x20000000, 0x0, 0x501, 0x0, 0x0, 0x0) 23:08:43 executing program 1: syz_clone(0x20000000, 0x0, 0xa01, 0x0, 0x0, 0x0) 23:08:43 executing program 0: syz_open_dev$sndpcmp(0x0, 0x1, 0x2) 23:08:43 executing program 3: syz_clone(0x20000000, 0x0, 0x1ea, 0x0, 0x0, 0x0) 23:08:43 executing program 0: syz_open_dev$sndpcmp(0x0, 0x1, 0x2) 23:08:43 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x2) 23:08:43 executing program 2: syz_clone(0x20000000, 0x0, 0x901, 0x0, 0x0, 0x0) 23:08:43 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x2) 23:08:43 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x2) 23:08:43 executing program 1: syz_clone(0x20000000, 0x0, 0xb01, 0x0, 0x0, 0x0) 23:08:43 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x0) 23:08:43 executing program 3: syz_clone(0x20000000, 0x0, 0x1eb, 0x0, 0x0, 0x0) 23:08:43 executing program 0: syz_clone(0x20000000, 0x0, 0x102, 0x0, 0x0, 0x0) 23:08:43 executing program 0: syz_clone(0x20000000, 0x0, 0xfd, 0x0, 0x0, 0x0) 23:08:44 executing program 2: syz_clone(0x20000000, 0x0, 0xf4, 0x0, 0x0, 0x0) 23:08:44 executing program 1: syz_clone(0x20000000, 0x0, 0xc01, 0x0, 0x0, 0x0) 23:08:44 executing program 3: syz_clone(0x20000000, 0x0, 0x2e2, 0x0, 0x0, 0x0) 23:08:44 executing program 0: syz_clone(0x2000e503, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:44 executing program 1: syz_clone(0x20000000, 0x0, 0xd01, 0x0, 0x0, 0x0) 23:08:44 executing program 2: syz_clone(0x20000000, 0x0, 0xc01, 0x0, 0x0, 0x0) 23:08:44 executing program 1: syz_clone(0x20000000, 0x0, 0xe01, 0x0, 0x0, 0x0) 23:08:44 executing program 3: syz_clone(0x20000000, 0x0, 0x3a8, 0x0, 0x0, 0x0) 23:08:44 executing program 2: prctl$PR_MCE_KILL(0x21, 0x1, 0x2) socket(0x1a, 0x0, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x42a803, 0x2) 23:08:44 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x6041, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) 23:08:44 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x6041, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) 23:08:44 executing program 1: syz_clone(0x20000000, 0x0, 0xe15, 0x0, 0x0, 0x0) 23:08:44 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x6041, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) 23:08:44 executing program 2: prctl$PR_MCE_KILL(0x21, 0x1, 0x2) socket(0x1a, 0x0, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x42a803, 0x2) 23:08:44 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x6041, 0x0) 23:08:44 executing program 3: syz_clone(0x20000000, 0x0, 0x3e5, 0x0, 0x0, 0x0) 23:08:44 executing program 2: prctl$PR_MCE_KILL(0x21, 0x1, 0x2) socket(0x1a, 0x0, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x42a803, 0x2) 23:08:44 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x6041, 0x0) 23:08:44 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x6041, 0x0) 23:08:44 executing program 1: syz_clone(0x20000000, 0x0, 0xe52, 0x0, 0x0, 0x0) 23:08:44 executing program 2: prctl$PR_MCE_KILL(0x21, 0x1, 0x2) socket(0x1a, 0x0, 0x0) 23:08:44 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x6041, 0x0) 23:08:44 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 23:08:44 executing program 3: syz_clone(0x20000000, 0x0, 0x500, 0x0, 0x0, 0x0) 23:08:44 executing program 2: prctl$PR_MCE_KILL(0x21, 0x1, 0x2) 23:08:44 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 23:08:44 executing program 2: prctl$PR_MCE_KILL(0x21, 0x0, 0x2) 23:08:44 executing program 1: syz_clone(0x20000000, 0x0, 0xe55, 0x0, 0x0, 0x0) 23:08:44 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 23:08:44 executing program 2: prctl$PR_MCE_KILL(0x21, 0x0, 0x2) 23:08:44 executing program 0: syz_clone(0x20000000, 0x0, 0x3a8, 0x0, 0x0, 0x0) 23:08:44 executing program 3: syz_clone(0x20000000, 0x0, 0x60f, 0x0, 0x0, 0x0) 23:08:44 executing program 2: prctl$PR_MCE_KILL(0x21, 0x0, 0x2) 23:08:44 executing program 0: syz_clone(0x20001201, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:44 executing program 2: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 23:08:44 executing program 1: syz_clone(0x20000000, 0x0, 0xefb, 0x0, 0x0, 0x0) 23:08:44 executing program 2: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 23:08:44 executing program 2: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 23:08:44 executing program 2: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 23:08:44 executing program 3: syz_clone(0x20000000, 0x0, 0x700, 0x0, 0x0, 0x0) 23:08:44 executing program 0: syz_clone(0x20001201, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:44 executing program 2: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 23:08:44 executing program 1: syz_clone(0x20000000, 0x0, 0xefc, 0x0, 0x0, 0x0) 23:08:45 executing program 2: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 23:08:45 executing program 1: syz_clone(0x20000000, 0x0, 0xf01, 0x0, 0x0, 0x0) 23:08:45 executing program 2: prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 23:08:45 executing program 1: syz_clone(0x20000000, 0x0, 0x1001, 0x0, 0x0, 0x0) 23:08:45 executing program 3: syz_clone(0x20000000, 0x0, 0xf06, 0x0, 0x0, 0x0) 23:08:45 executing program 0: syz_clone(0x20001201, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:45 executing program 2: prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 23:08:45 executing program 1: syz_clone(0x20000000, 0x0, 0x1100, 0x0, 0x0, 0x0) 23:08:45 executing program 2: prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 23:08:45 executing program 2: syz_clone(0x20001100, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:45 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:45 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:45 executing program 3: syz_clone(0x20000000, 0x0, 0xf54, 0x0, 0x0, 0x0) 23:08:45 executing program 2: syz_clone(0x20001100, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:45 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:45 executing program 1: syz_clone(0x20000000, 0x0, 0x1101, 0x0, 0x0, 0x0) 23:08:45 executing program 2: syz_clone(0x20001100, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:45 executing program 0: syz_clone(0x20000f06, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:45 executing program 0: syz_clone(0x20000f06, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:45 executing program 0: syz_clone(0x20000f06, 0x0, 0x0, 0x0, 0x0, 0x0) [ 333.388549][ T9076] cgroup: fork rejected by pids controller in /syz1 23:08:45 executing program 3: syz_clone(0x20000000, 0x0, 0x1100, 0x0, 0x0, 0x0) 23:08:45 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:45 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:45 executing program 1: syz_clone(0x20000000, 0x0, 0x1201, 0x0, 0x0, 0x0) 23:08:45 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:45 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:45 executing program 1: syz_clone(0x20000000, 0x0, 0x1301, 0x0, 0x0, 0x0) 23:08:45 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:46 executing program 3: syz_clone(0x20000000, 0x0, 0x1f00, 0x0, 0x0, 0x0) 23:08:46 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:46 executing program 1: syz_clone(0x20000000, 0x0, 0x150e, 0x0, 0x0, 0x0) 23:08:46 executing program 2: syz_clone(0x20000000, 0x0, 0x1101, 0x0, 0x0, 0x0) 23:08:46 executing program 0: syz_clone(0x20000237, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:46 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x9, 0x8b5, 0xa72, 0x880}) 23:08:47 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x9, 0x8b5, 0xa72, 0x880}) 23:08:47 executing program 0: syz_clone(0x20000237, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:47 executing program 3: syz_clone(0x20000000, 0x0, 0x3f00, 0x0, 0x0, 0x0) 23:08:47 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x9, 0x8b5, 0xa72, 0x880}) 23:08:47 executing program 0: syz_clone(0x20000237, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:47 executing program 1: syz_clone(0x20000000, 0x0, 0x1f00, 0x0, 0x0, 0x0) 23:08:47 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x9, 0x8b5, 0xa72, 0x880}) 23:08:47 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:47 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x9, 0x8b5, 0xa72, 0x880}) 23:08:47 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x9, 0x8b5, 0xa72, 0x880}) 23:08:47 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:47 executing program 3: syz_clone(0x20000000, 0x0, 0x540f, 0x0, 0x0, 0x0) 23:08:47 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x9, 0x8b5, 0xa72, 0x880}) 23:08:47 executing program 1: syz_clone(0x20000000, 0x0, 0x3702, 0x0, 0x0, 0x0) 23:08:47 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:47 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r0) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x9, 0x8b5, 0xa72, 0x880}) 23:08:47 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x9, 0x8b5, 0xa72, 0x880}) 23:08:47 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:47 executing program 1: syz_clone(0x20000000, 0x0, 0x3f00, 0x0, 0x0, 0x0) 23:08:47 executing program 3: syz_clone(0x20000000, 0x0, 0x5700, 0x0, 0x0, 0x0) 23:08:47 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x9, 0x8b5, 0xa72, 0x880}) 23:08:47 executing program 0: syz_clone(0x20000186, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:47 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x9, 0x8b5, 0xa72, 0x880}) 23:08:47 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) syz_clone(0x80000000, &(0x7f00000000c0)="1181b37aaa870000a16e59e62ce4dadba6811125ce45", 0x16, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="7acabfa67f35b5e4fedc1c97d21b45361f6f2cb1814708d80b4be39f8fe778bddb2fbf2760e78f0ffbef00489debe714d1ebc95150e2752df1682dfe714fb577d5448da8909b406ba759175f11fd60606054f9ad020a") bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) write$damon_schemes(r0, &(0x7f0000000240)={0x8, 0x7f, 0x20, 0x20, 0x2, 0x6, 0x7fffffffffffffff}, 0x66) r3 = socket$rxrpc(0x21, 0x2, 0x2) socket(0x6, 0x3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000001900), 0x4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000001900), 0x4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000200), 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x3000, 0x2000}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000002c0)) 23:08:47 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x9, 0x8b5, 0xa72, 0x880}) 23:08:47 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x9, 0x8b5, 0xa72, 0x880}) 23:08:48 executing program 1: syz_clone(0x20000000, 0x0, 0x520e, 0x0, 0x0, 0x0) 23:08:48 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) syz_clone(0x80000000, &(0x7f00000000c0)="1181b37aaa870000a16e59e62ce4dadba6811125ce45", 0x16, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="7acabfa67f35b5e4fedc1c97d21b45361f6f2cb1814708d80b4be39f8fe778bddb2fbf2760e78f0ffbef00489debe714d1ebc95150e2752df1682dfe714fb577d5448da8909b406ba759175f11fd60606054f9ad020a") bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) write$damon_schemes(r0, &(0x7f0000000240)={0x8, 0x7f, 0x20, 0x20, 0x2, 0x6, 0x7fffffffffffffff}, 0x66) r3 = socket$rxrpc(0x21, 0x2, 0x2) socket(0x6, 0x3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000001900), 0x4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000001900), 0x4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000200), 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x3000, 0x2000}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000002c0)) 23:08:48 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x9, 0x8b5, 0xa72, 0x880}) 23:08:48 executing program 3: syz_clone(0x20000000, 0x0, 0xa803, 0x0, 0x0, 0x0) 23:08:48 executing program 3: syz_clone(0x20000000, 0x0, 0xd501, 0x0, 0x0, 0x0) 23:08:48 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x9, 0x8b5, 0xa72, 0x880}) 23:08:48 executing program 0: syz_clone(0x20000112, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:48 executing program 2: r0 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x9, 0x8b5, 0xa72, 0x880}) 23:08:48 executing program 1: syz_clone(0x20000000, 0x0, 0x550e, 0x0, 0x0, 0x0) 23:08:48 executing program 2: r0 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x9, 0x8b5, 0xa72, 0x880}) 23:08:48 executing program 0: syz_clone(0x20000111, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:48 executing program 2: r0 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x9, 0x8b5, 0xa72, 0x880}) 23:08:48 executing program 3: syz_clone(0x20000000, 0x0, 0xd601, 0x0, 0x0, 0x0) 23:08:48 executing program 0: syz_clone(0x200001e7, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:48 executing program 2: syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x9, 0x8b5, 0xa72, 0x880}) 23:08:48 executing program 3: syz_clone(0x20000000, 0x0, 0xd701, 0x0, 0x0, 0x0) 23:08:48 executing program 1: syz_clone(0x20000000, 0x0, 0x8601, 0x0, 0x0, 0x0) 23:08:48 executing program 2: syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x9, 0x8b5, 0xa72, 0x880}) 23:08:48 executing program 0: syz_clone(0x200001dd, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:48 executing program 2: syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x9, 0x8b5, 0xa72, 0x880}) 23:08:48 executing program 1: syz_clone(0x20000000, 0x0, 0xf400, 0x0, 0x0, 0x0) 23:08:48 executing program 0: syz_clone(0x200001dc, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:48 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 23:08:48 executing program 3: syz_clone(0x20000000, 0x0, 0xd801, 0x0, 0x0, 0x0) 23:08:48 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 23:08:48 executing program 1: syz_clone(0x20000000, 0x0, 0xfb0e, 0x0, 0x0, 0x0) 23:08:48 executing program 0: syz_clone(0x20000105, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:48 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 23:08:48 executing program 1: syz_clone(0x20000000, 0x0, 0xfc0e, 0x0, 0x0, 0x0) 23:08:48 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x8b5, 0xa72, 0x880}) 23:08:48 executing program 0: syz_clone(0x200001d9, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:48 executing program 3: syz_clone(0x20000000, 0x0, 0xd901, 0x0, 0x0, 0x0) 23:08:48 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x0, 0xa72, 0x880}) 23:08:48 executing program 1: syz_clone(0x20000000, 0x0, 0xfd00, 0x0, 0x0, 0x0) 23:08:48 executing program 0: syz_clone(0x200001d8, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:48 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x880}) 23:08:48 executing program 0: syz_clone(0x20000011, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:48 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)) 23:08:48 executing program 1: syz_clone(0x20000000, 0x0, 0xfe00, 0x0, 0x0, 0x0) 23:08:48 executing program 3: syz_clone(0x20000000, 0x0, 0xda01, 0x0, 0x0, 0x0) 23:08:48 executing program 1: syz_clone(0x20000000, 0x0, 0xff00, 0x0, 0x0, 0x0) 23:08:48 executing program 2: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x141400, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0x2404c005) 23:08:48 executing program 0: syz_clone(0x20000011, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:48 executing program 2: syz_clone(0x20000007, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:48 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) write$damon_schemes(r1, &(0x7f0000000140)={0x3, 0xffffffff, 0x20, 0x20, 0x5, 0xfffffffffffffffe, 0x9}, 0x66) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x8000) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"bd7cb78b391a0668d9258590bb959c695a276d8149dd1e57011d63aef972eb40", r0}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000240)={{0x1}, {0x2, 0x6}, 0x5}) 23:08:48 executing program 1: syz_clone(0x20000000, 0x0, 0x10fff, 0x0, 0x0, 0x0) 23:08:48 executing program 3: syz_clone(0x20000000, 0x0, 0xdb01, 0x0, 0x0, 0x0) 23:08:48 executing program 2: syz_clone(0x20000007, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:48 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) write$damon_schemes(r1, &(0x7f0000000140)={0x3, 0xffffffff, 0x20, 0x20, 0x5, 0xfffffffffffffffe, 0x9}, 0x66) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x8000) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"bd7cb78b391a0668d9258590bb959c695a276d8149dd1e57011d63aef972eb40", r0}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000240)={{0x1}, {0x2, 0x6}, 0x5}) 23:08:48 executing program 1: syz_clone(0x20000000, 0x0, 0x20010, 0x0, 0x0, 0x0) 23:08:48 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) write$damon_schemes(r1, &(0x7f0000000140)={0x3, 0xffffffff, 0x20, 0x20, 0x5, 0xfffffffffffffffe, 0x9}, 0x66) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x8000) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"bd7cb78b391a0668d9258590bb959c695a276d8149dd1e57011d63aef972eb40", r0}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000240)={{0x1}, {0x2, 0x6}, 0x5}) 23:08:48 executing program 3: syz_clone(0x20000000, 0x0, 0xdc01, 0x0, 0x0, 0x0) 23:08:48 executing program 2: syz_clone(0x20000000, 0x0, 0xdb01, 0x0, 0x0, 0x0) 23:08:49 executing program 1: syz_clone(0x20000000, 0x0, 0x20200, 0x0, 0x0, 0x0) 23:08:49 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) write$damon_schemes(r1, &(0x7f0000000140)={0x3, 0xffffffff, 0x20, 0x20, 0x5, 0xfffffffffffffffe, 0x9}, 0x66) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x8000) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"bd7cb78b391a0668d9258590bb959c695a276d8149dd1e57011d63aef972eb40", r0}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000240)={{0x1}, {0x2, 0x6}, 0x5}) 23:08:49 executing program 3: syz_clone(0x20000000, 0x0, 0xdd01, 0x0, 0x0, 0x0) 23:08:49 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) write$damon_schemes(r1, &(0x7f0000000140)={0x3, 0xffffffff, 0x20, 0x20, 0x5, 0xfffffffffffffffe, 0x9}, 0x66) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x8000) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"bd7cb78b391a0668d9258590bb959c695a276d8149dd1e57011d63aef972eb40", r0}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000240)={{0x1}, {0x2, 0x6}, 0x5}) 23:08:49 executing program 1: syz_clone(0x20000000, 0x0, 0x80000, 0x0, 0x0, 0x0) 23:08:49 executing program 2: syz_clone(0x20000000, 0x0, 0x10fff, 0x0, 0x0, 0x0) 23:08:49 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) write$damon_schemes(r1, &(0x7f0000000140)={0x3, 0xffffffff, 0x20, 0x20, 0x5, 0xfffffffffffffffe, 0x9}, 0x66) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x8000) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"bd7cb78b391a0668d9258590bb959c695a276d8149dd1e57011d63aef972eb40", r0}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000240)={{0x1}, {0x2, 0x6}, 0x5}) 23:08:49 executing program 3: syz_clone(0x20000000, 0x0, 0xdf01, 0x0, 0x0, 0x0) 23:08:49 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) write$damon_schemes(r1, &(0x7f0000000140)={0x3, 0xffffffff, 0x20, 0x20, 0x5, 0xfffffffffffffffe, 0x9}, 0x66) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x8000) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000240)={{0x1}, {0x2, 0x6}, 0x5}) 23:08:49 executing program 1: syz_clone(0x20000000, 0x0, 0x100000, 0x0, 0x0, 0x0) 23:08:49 executing program 3: syz_clone(0x20000000, 0x0, 0xe001, 0x0, 0x0, 0x0) 23:08:49 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) write$damon_schemes(r0, &(0x7f0000000140)={0x3, 0xffffffff, 0x20, 0x20, 0x5, 0xfffffffffffffffe, 0x9}, 0x66) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x8000) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000240)={{0x1}, {0x2, 0x6}, 0x5}) 23:08:49 executing program 1: syz_clone(0x20000000, 0x0, 0x101000, 0x0, 0x0, 0x0) 23:08:49 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) write$damon_schemes(r0, &(0x7f0000000140)={0x3, 0xffffffff, 0x20, 0x20, 0x5, 0xfffffffffffffffe, 0x9}, 0x66) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000240)={{0x1}, {0x2, 0x6}, 0x5}) 23:08:49 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) write$damon_schemes(r0, &(0x7f0000000140)={0x3, 0xffffffff, 0x20, 0x20, 0x5, 0xfffffffffffffffe, 0x9}, 0x66) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x8000) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000240)={{0x1}, {0x2, 0x6}, 0x5}) 23:08:49 executing program 3: syz_clone(0x20000000, 0x0, 0xe101, 0x0, 0x0, 0x0) 23:08:49 executing program 1: syz_clone(0x20000000, 0x0, 0x1000000, 0x0, 0x0, 0x0) 23:08:49 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) write$damon_schemes(r0, &(0x7f0000000140)={0x3, 0xffffffff, 0x20, 0x20, 0x5, 0xfffffffffffffffe, 0x9}, 0x66) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000240)={{0x1}, {0x2, 0x6}, 0x5}) 23:08:49 executing program 1: syz_clone(0x20000000, 0x0, 0x1010000, 0x0, 0x0, 0x0) 23:08:49 executing program 3: syz_clone(0x20000000, 0x0, 0xe201, 0x0, 0x0, 0x0) 23:08:49 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) write$damon_schemes(r0, &(0x7f0000000140)={0x3, 0xffffffff, 0x20, 0x20, 0x5, 0xfffffffffffffffe, 0x9}, 0x66) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000240)={{0x1}, {0x2, 0x6}, 0x5}) 23:08:49 executing program 1: syz_clone(0x20000000, 0x0, 0x2000000, 0x0, 0x0, 0x0) 23:08:49 executing program 2: syz_clone(0x20000000, 0x0, 0xdf01, 0x0, 0x0, 0x0) 23:08:49 executing program 3: syz_clone(0x20000000, 0x0, 0xe202, 0x0, 0x0, 0x0) 23:08:49 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000240)={{0x1}, {0x2, 0x6}, 0x5}) 23:08:49 executing program 1: syz_clone(0x20000000, 0x0, 0x2010000, 0x0, 0x0, 0x0) 23:08:49 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000240)={{0x1}, {0x2, 0x6}, 0x5}) 23:08:49 executing program 1: syz_clone(0x20000000, 0x0, 0x3010000, 0x0, 0x0, 0x0) 23:08:49 executing program 3: syz_clone(0x20000000, 0x0, 0xe301, 0x0, 0x0, 0x0) 23:08:49 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) write$damon_schemes(r1, &(0x7f0000000140)={0x3, 0xffffffff, 0x20, 0x20, 0x5, 0xfffffffffffffffe, 0x9}, 0x66) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x8000) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"bd7cb78b391a0668d9258590bb959c695a276d8149dd1e57011d63aef972eb40", r0}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000240)={{0x1}, {0x2, 0x6}, 0x5}) 23:08:49 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000240)={{0x1}, {0x2, 0x6}, 0x5}) 23:08:49 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000240)={{0x1}, {0x2, 0x6}, 0x5}) 23:08:49 executing program 3: syz_clone(0x20000000, 0x0, 0xe401, 0x0, 0x0, 0x0) 23:08:49 executing program 1: syz_clone(0x20000000, 0x0, 0x4000000, 0x0, 0x0, 0x0) 23:08:49 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000240)={{0x1}, {0x2, 0x6}, 0x5}) 23:08:49 executing program 3: syz_clone(0x20000000, 0x0, 0xe501, 0x0, 0x0, 0x0) 23:08:49 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000240)={{0x1}, {0x2, 0x6}, 0x5}) 23:08:49 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) write$damon_schemes(r1, &(0x7f0000000140)={0x3, 0xffffffff, 0x20, 0x20, 0x5, 0xfffffffffffffffe, 0x9}, 0x66) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x8000) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"bd7cb78b391a0668d9258590bb959c695a276d8149dd1e57011d63aef972eb40", r0}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000240)={{0x1}, {0x2, 0x6}, 0x5}) 23:08:49 executing program 1: syz_clone(0x20000000, 0x0, 0x4010000, 0x0, 0x0, 0x0) 23:08:49 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000240)={{0x1}, {0x2, 0x6}, 0x5}) 23:08:49 executing program 3: syz_clone(0x20000000, 0x0, 0xe503, 0x0, 0x0, 0x0) 23:08:49 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000240)={{0x1}, {0x2, 0x6}, 0x5}) 23:08:49 executing program 3: syz_clone(0x20000000, 0x0, 0xe601, 0x0, 0x0, 0x0) 23:08:49 executing program 0: openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000240)={{0x1}, {0x2, 0x6}, 0x5}) 23:08:49 executing program 3: syz_clone(0x20000000, 0x0, 0xe701, 0x0, 0x0, 0x0) 23:08:49 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) write$damon_schemes(r1, &(0x7f0000000140)={0x3, 0xffffffff, 0x20, 0x20, 0x5, 0xfffffffffffffffe, 0x9}, 0x66) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x8000) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"bd7cb78b391a0668d9258590bb959c695a276d8149dd1e57011d63aef972eb40", r0}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000240)={{0x1}, {0x2, 0x6}, 0x5}) 23:08:49 executing program 1: syz_clone(0x20000000, 0x0, 0x5000000, 0x0, 0x0, 0x0) 23:08:49 executing program 0: openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000240)={{0x1}, {0x2, 0x6}, 0x5}) 23:08:49 executing program 0: openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000240)={{0x1}, {0x2, 0x6}, 0x5}) 23:08:49 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) write$damon_schemes(r1, &(0x7f0000000140)={0x3, 0xffffffff, 0x20, 0x20, 0x5, 0xfffffffffffffffe, 0x9}, 0x66) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x8000) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"bd7cb78b391a0668d9258590bb959c695a276d8149dd1e57011d63aef972eb40", r0}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) 23:08:49 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) 23:08:49 executing program 3: syz_clone(0x20000000, 0x0, 0xe801, 0x0, 0x0, 0x0) 23:08:49 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) write$damon_schemes(r1, &(0x7f0000000140)={0x3, 0xffffffff, 0x20, 0x20, 0x5, 0xfffffffffffffffe, 0x9}, 0x66) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x8000) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"bd7cb78b391a0668d9258590bb959c695a276d8149dd1e57011d63aef972eb40", r0}) 23:08:50 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) 23:08:50 executing program 1: syz_clone(0x20000000, 0x0, 0x5010000, 0x0, 0x0, 0x0) 23:08:50 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) write$damon_schemes(r1, &(0x7f0000000140)={0x3, 0xffffffff, 0x20, 0x20, 0x5, 0xfffffffffffffffe, 0x9}, 0x66) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x8000) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) 23:08:50 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) write$damon_schemes(r0, &(0x7f0000000140)={0x3, 0xffffffff, 0x20, 0x20, 0x5, 0xfffffffffffffffe, 0x9}, 0x66) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x8000) 23:08:50 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) 23:08:50 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) write$damon_schemes(r0, &(0x7f0000000140)={0x3, 0xffffffff, 0x20, 0x20, 0x5, 0xfffffffffffffffe, 0x9}, 0x66) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) 23:08:50 executing program 3: syz_clone(0x20000000, 0x0, 0xe901, 0x0, 0x0, 0x0) 23:08:50 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000240)={{}, {0x2, 0x6}, 0x5}) 23:08:50 executing program 1: syz_clone(0x20000000, 0x0, 0x7000000, 0x0, 0x0, 0x0) 23:08:50 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) write$damon_schemes(r0, &(0x7f0000000140)={0x3, 0xffffffff, 0x20, 0x20, 0x5, 0xfffffffffffffffe, 0x9}, 0x66) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) 23:08:50 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000240)={{}, {0x0, 0x6}, 0x5}) 23:08:50 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) write$damon_schemes(r0, &(0x7f0000000140)={0x3, 0xffffffff, 0x20, 0x20, 0x5, 0xfffffffffffffffe, 0x9}, 0x66) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) 23:08:50 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000240)={{}, {}, 0x5}) 23:08:50 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) write$damon_schemes(r0, &(0x7f0000000140)={0x3, 0xffffffff, 0x20, 0x20, 0x5, 0xfffffffffffffffe, 0x9}, 0x66) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) 23:08:50 executing program 3: syz_clone(0x20000000, 0x0, 0xea01, 0x0, 0x0, 0x0) 23:08:50 executing program 1: syz_clone(0x20000000, 0x0, 0x7010000, 0x0, 0x0, 0x0) 23:08:50 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) 23:08:50 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000240)) 23:08:50 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) 23:08:50 executing program 3: syz_clone(0x20000000, 0x0, 0xeb01, 0x0, 0x0, 0x0) 23:08:50 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) 23:08:50 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000240)={{}, {0x0, 0x6}, 0x5}) 23:08:50 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) 23:08:50 executing program 1: syz_clone(0x20000000, 0x0, 0x8000000, 0x0, 0x0, 0x0) 23:08:50 executing program 0: syz_clone(0x20000000, 0x0, 0x5010000, 0x0, 0x0, 0x0) 23:08:50 executing program 3: syz_clone(0x20000000, 0x0, 0x20010, 0x0, 0x0, 0x0) 23:08:50 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) 23:08:50 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) 23:08:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) 23:08:50 executing program 3: syz_clone(0x20000000, 0x0, 0x20200, 0x0, 0x0, 0x0) 23:08:50 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) 23:08:50 executing program 1: syz_clone(0x20000000, 0x0, 0x8010000, 0x0, 0x0, 0x0) 23:08:50 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) 23:08:50 executing program 3: syz_clone(0x20000000, 0x0, 0x80000, 0x0, 0x0, 0x0) 23:08:50 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) 23:08:50 executing program 1: syz_clone(0x20000000, 0x0, 0x9010000, 0x0, 0x0, 0x0) 23:08:50 executing program 0: syz_clone(0x20000000, 0x0, 0x9010000, 0x0, 0x0, 0x0) 23:08:50 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000280)={0x2, 0xffff, 0xce75, 0x880}) 23:08:50 executing program 3: syz_clone(0x20000000, 0x0, 0x101000, 0x0, 0x0, 0x0) 23:08:50 executing program 1: syz_clone(0x20000000, 0x0, 0xa010000, 0x0, 0x0, 0x0) 23:08:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 23:08:51 executing program 1: syz_clone(0x20000000, 0x0, 0xb010000, 0x0, 0x0, 0x0) 23:08:51 executing program 0: syz_clone(0x20000000, 0x0, 0x8000000, 0x0, 0x0, 0x0) 23:08:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 23:08:51 executing program 1: syz_clone(0x20000000, 0x0, 0xc010000, 0x0, 0x0, 0x0) 23:08:51 executing program 3: syz_clone(0x20000000, 0x0, 0x1000000, 0x0, 0x0, 0x0) 23:08:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 23:08:51 executing program 0: syz_clone(0x20000000, 0x0, 0x8000000, 0x0, 0x0, 0x0) 23:08:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000280)={0x0, 0xffff, 0xce75, 0x880}) 23:08:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 23:08:51 executing program 1: syz_clone(0x20000000, 0x0, 0xd010000, 0x0, 0x0, 0x0) 23:08:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000280)={0x0, 0xffff, 0xce75, 0x880}) 23:08:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000280)={0x0, 0xffff, 0xce75, 0x880}) 23:08:51 executing program 3: syz_clone(0x20000000, 0x0, 0x2000000, 0x0, 0x0, 0x0) 23:08:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000280)={0x0, 0xffff, 0xce75, 0x880}) 23:08:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000280)={0x2, 0x0, 0xce75, 0x880}) 23:08:51 executing program 1: syz_clone(0x20000000, 0x0, 0xe010000, 0x0, 0x0, 0x0) 23:08:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000280)={0x2, 0x0, 0x0, 0x880}) 23:08:51 executing program 0: syz_clone(0x20000000, 0x0, 0x1000000, 0x0, 0x0, 0x0) 23:08:51 executing program 1: syz_clone(0x20000000, 0x0, 0xf010000, 0x0, 0x0, 0x0) 23:08:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000280)={0x2}) 23:08:51 executing program 3: syz_clone(0x20000000, 0x0, 0x4000000, 0x0, 0x0, 0x0) 23:08:51 executing program 2: syz_clone(0x20000000, 0x0, 0xd010000, 0x0, 0x0, 0x0) 23:08:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000280)={0x0, 0xffff, 0xce75, 0x880}) 23:08:51 executing program 3: syz_clone(0x20000000, 0x0, 0x5000000, 0x0, 0x0, 0x0) 23:08:51 executing program 1: syz_clone(0x20000000, 0x0, 0x10000200, 0x0, 0x0, 0x0) 23:08:51 executing program 3: syz_clone(0x20000000, 0x0, 0x60f0000, 0x0, 0x0, 0x0) 23:08:51 executing program 2: syz_clone(0x20000000, 0x0, 0x5000000, 0x0, 0x0, 0x0) 23:08:51 executing program 3: syz_clone(0x20000000, 0x0, 0x7000000, 0x0, 0x0, 0x0) 23:08:51 executing program 1: syz_clone(0x20000000, 0x0, 0x10010000, 0x0, 0x0, 0x0) 23:08:51 executing program 3: syz_clone(0x20000000, 0x0, 0x8000000, 0x0, 0x0, 0x0) 23:08:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000280)={0x0, 0xffff, 0xce75, 0x880}) 23:08:52 executing program 1: syz_clone(0x20000000, 0x0, 0x11000000, 0x0, 0x0, 0x0) 23:08:52 executing program 3: syz_clone(0x20000000, 0x0, 0x10000200, 0x0, 0x0, 0x0) 23:08:52 executing program 1: syz_clone(0x20000000, 0x0, 0x11010000, 0x0, 0x0, 0x0) 23:08:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000280)={0x0, 0xffff, 0xce75, 0x880}) 23:08:52 executing program 3: syz_clone(0x20000000, 0x0, 0x11000000, 0x0, 0x0, 0x0) 23:08:52 executing program 2: syz_clone(0x20000000, 0x0, 0x10000200, 0x0, 0x0, 0x0) 23:08:52 executing program 1: syz_clone(0x20000000, 0x0, 0x12010000, 0x0, 0x0, 0x0) 23:08:52 executing program 0: ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000280)={0x0, 0xffff, 0xce75, 0x880}) 23:08:52 executing program 3: syz_clone(0x20000000, 0x0, 0x1f000000, 0x0, 0x0, 0x0) 23:08:52 executing program 1: syz_clone(0x20000000, 0x0, 0x13010000, 0x0, 0x0, 0x0) 23:08:52 executing program 0: ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000280)={0x0, 0xffff, 0xce75, 0x880}) 23:08:52 executing program 0: ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000280)={0x0, 0xffff, 0xce75, 0x880}) 23:08:52 executing program 3: syz_clone(0x20000000, 0x0, 0x1fffefff, 0x0, 0x0, 0x0) 23:08:52 executing program 1: syz_clone(0x20000000, 0x0, 0x150e0000, 0x0, 0x0, 0x0) 23:08:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000280)={0x0, 0xffff, 0xce75, 0x880}) 23:08:52 executing program 3: syz_clone(0x20000000, 0x0, 0x3f000000, 0x0, 0x0, 0x0) 23:08:52 executing program 2: syz_clone(0x20000000, 0x0, 0xe701, 0x0, 0x0, 0x0) 23:08:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000280)={0x0, 0xffff, 0xce75, 0x880}) 23:08:52 executing program 3: syz_clone(0x20000000, 0x0, 0x540f0000, 0x0, 0x0, 0x0) 23:08:52 executing program 1: syz_clone(0x20000000, 0x0, 0x1f000000, 0x0, 0x0, 0x0) 23:08:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000280)={0x0, 0xffff, 0xce75, 0x880}) 23:08:52 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000280)={0x0, 0xffff, 0xce75, 0x880}) 23:08:52 executing program 3: syz_clone(0x20000000, 0x0, 0x57000000, 0x0, 0x0, 0x0) 23:08:52 executing program 1: syz_clone(0x20000000, 0x0, 0x1fffefff, 0x0, 0x0, 0x0) 23:08:53 executing program 2: syz_clone(0x20000000, 0x0, 0x3f000000, 0x0, 0x0, 0x0) 23:08:53 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000280)={0x0, 0xffff, 0xce75, 0x880}) 23:08:53 executing program 3: syz_clone(0x20000000, 0x0, 0xa8030000, 0x0, 0x0, 0x0) 23:08:53 executing program 1: syz_clone(0x20000000, 0x0, 0x37020000, 0x0, 0x0, 0x0) 23:08:53 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000280)={0x0, 0xffff, 0xce75, 0x880}) 23:08:53 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 23:08:53 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 23:08:53 executing program 3: syz_clone(0x20000000, 0x0, 0xd5010000, 0x0, 0x0, 0x0) 23:08:53 executing program 2: syz_clone(0x20000000, 0x0, 0xe601, 0x0, 0x0, 0x0) 23:08:53 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 23:08:53 executing program 1: syz_clone(0x20000000, 0x0, 0x3f000000, 0x0, 0x0, 0x0) 23:08:53 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000280)={0x0, 0x0, 0xce75, 0x880}) 23:08:53 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x880}) 23:08:53 executing program 3: syz_clone(0x20000000, 0x0, 0xd6010000, 0x0, 0x0, 0x0) 23:08:53 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000280)) 23:08:53 executing program 1: syz_clone(0x20000000, 0x0, 0x520e0000, 0x0, 0x0, 0x0) 23:08:53 executing program 2: syz_clone(0x20000000, 0x0, 0xe401, 0x0, 0x0, 0x0) 23:08:53 executing program 0: syz_clone(0x20000000, 0x0, 0xe503, 0x0, 0x0, 0x0) 23:08:53 executing program 3: syz_clone(0x20000000, 0x0, 0xd7010000, 0x0, 0x0, 0x0) 23:08:53 executing program 1: syz_clone(0x20000000, 0x0, 0x550e0000, 0x0, 0x0, 0x0) 23:08:53 executing program 1: syz_clone(0x20000000, 0x0, 0x86010000, 0x0, 0x0, 0x0) 23:08:53 executing program 0: syz_clone(0x1fffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:53 executing program 0: syz_clone(0x1fffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:53 executing program 2: syz_clone(0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:53 executing program 3: syz_clone(0x20000000, 0x0, 0xd8010000, 0x0, 0x0, 0x0) 23:08:53 executing program 2: syz_clone(0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:53 executing program 0: syz_clone(0x1fffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:54 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:54 executing program 1: syz_clone(0x20000000, 0x0, 0xf0ffffff, 0x0, 0x0, 0x0) 23:08:54 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:54 executing program 2: syz_clone(0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:54 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:54 executing program 3: syz_clone(0x20000000, 0x0, 0xd9010000, 0x0, 0x0, 0x0) 23:08:54 executing program 1: syz_clone(0x20000000, 0x0, 0xf4000000, 0x0, 0x0, 0x0) 23:08:54 executing program 0: syz_clone(0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:54 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:54 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:54 executing program 0: syz_clone(0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:54 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:54 executing program 0: syz_clone(0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:54 executing program 3: syz_clone(0x20000000, 0x0, 0xda010000, 0x0, 0x0, 0x0) 23:08:54 executing program 2: syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:54 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:54 executing program 1: syz_clone(0x20000000, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0) 23:08:54 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:54 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:54 executing program 2: syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:54 executing program 1: syz_clone(0x20000000, 0x0, 0xfb0e0000, 0x0, 0x0, 0x0) 23:08:55 executing program 3: syz_clone(0x20000000, 0x0, 0xdb010000, 0x0, 0x0, 0x0) 23:08:55 executing program 0: syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:55 executing program 2: syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:55 executing program 0: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0xd7d18508f3d2c6da) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2020100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000080) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", "", ""]}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r3) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r6) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r7) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r9, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r9, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) sendmsg$NLBL_MGMT_C_ADD(r8, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r9, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r9, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendmsg$NLBL_MGMT_C_VERSION(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r9, 0x100, 0x1, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x35}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ':\x00'}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, '%,:*/\x028,L\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '^$\\{\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x60028494}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x400, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4001) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000004c0)={'wpan3\x00'}) 23:08:55 executing program 2: syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:55 executing program 0: syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:55 executing program 3: syz_clone(0x20000000, 0x0, 0xdc010000, 0x0, 0x0, 0x0) 23:08:55 executing program 2: syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:55 executing program 1: syz_clone(0x20000000, 0x0, 0xfbffffff, 0x0, 0x0, 0x0) 23:08:55 executing program 0: syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:55 executing program 2: syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:55 executing program 3: syz_clone(0x20000000, 0x0, 0xdd010000, 0x0, 0x0, 0x0) 23:08:55 executing program 1: syz_clone(0x20000000, 0x0, 0xfc0e0000, 0x0, 0x0, 0x0) 23:08:55 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:55 executing program 0: syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:56 executing program 0: syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:56 executing program 3: syz_clone(0x20000000, 0x0, 0xdf010000, 0x0, 0x0, 0x0) 23:08:56 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:56 executing program 1: syz_clone(0x20000000, 0x0, 0xfd000000, 0x0, 0x0, 0x0) 23:08:56 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:56 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:56 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:56 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:56 executing program 0: syz_clone(0x20000000, 0x0, 0xdd010000, 0x0, 0x0, 0x0) 23:08:56 executing program 1: syz_clone(0x20000000, 0x0, 0xfe000000, 0x0, 0x0, 0x0) 23:08:56 executing program 3: syz_clone(0x20000000, 0x0, 0xe0010000, 0x0, 0x0, 0x0) 23:08:56 executing program 2: syz_clone(0x20000000, 0x0, 0xfb0e0000, 0x0, 0x0, 0x0) 23:08:56 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000140)={0xffffffffe5fe2092, 0xffffffffffffffff}) write$ppp(r0, &(0x7f0000000200)="622defa317e31ea25997659be95a695d9dac6ac8d0e182651cdd6049efb5f6f717273df86e3ffb1a28577535e67303cdb832498958ef9e62d993771a59a8800e75bc81491a00e4cc12963606dd6a56cd2db0e6750bd64618356710c2863aef4c7baa1d8dcffdd884e35c4760aa92474dd70884f9c16b3f87330568542919bb2ae6ba36450ee8b2cb368b3e13061b03547fcd910f96e73755b963fdc2e29648537fae531672a8fab40e7c76c0129236a481e60b065d95b75840ce4193840de071994295195f0bf8", 0xc7) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x2, 0x4}}, 0x20) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000440)=0x5f14) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000480)={0xfff, r0, 0x2}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x29, 0x81, 0x1, 0x200, 0x1b, @mcast2, @private0, 0x40, 0x8000, 0x80, 0x101}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xd8, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r3}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000400)={0x1000, r0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x401, 0x3, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x8000}, {0x6, 0x6, 0xa7, 0x6}, {0x6, 0x1, 0x5e, 0x9a}, {0xfff8, 0x0, 0x0, 0x9541}, {0x8, 0x72, 0x8d, 0x7fffffff}, {0x2, 0x77, 0x2, 0x10001}]}) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000100)=0x9) write$ppp(r4, &(0x7f0000000300)="320daa48f9cc04f38b4bd999f35db896585ca6725755720b3b85f34e7af0c53ebf0d7e97f42fa5134158a72a25bbd33876fbf718456f95f65d41a199e7552bcc361149fbe230b540253876d5fee8a05de4b0dd76b3537c7f2eabf6b2bb8482ab4f8b39f4016a2283ca275468e3c8aa3c742c845b3feb263ad66bef08f0575f8177802d82e78b5ca7f2963c2f65ea7b21cf9712b5ab49b1ee32d40052b122b180a417e5b150dd6aa2f85a1a05177a20df28e2e34de9095900c3f6553c8a3451ee39236446ec5fe0e28f231c1819889997c528f3ef8891c5cb554bd36016e96920514d6efb0a36", 0xe6) 23:08:56 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x41) 23:08:56 executing program 1: syz_clone(0x20000000, 0x0, 0xff000000, 0x0, 0x0, 0x0) 23:08:56 executing program 1: syz_clone(0x20000000, 0x0, 0xff0f0100, 0x0, 0x0, 0x0) 23:08:56 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000140)={0xffffffffe5fe2092, 0xffffffffffffffff}) write$ppp(r0, &(0x7f0000000200)="622defa317e31ea25997659be95a695d9dac6ac8d0e182651cdd6049efb5f6f717273df86e3ffb1a28577535e67303cdb832498958ef9e62d993771a59a8800e75bc81491a00e4cc12963606dd6a56cd2db0e6750bd64618356710c2863aef4c7baa1d8dcffdd884e35c4760aa92474dd70884f9c16b3f87330568542919bb2ae6ba36450ee8b2cb368b3e13061b03547fcd910f96e73755b963fdc2e29648537fae531672a8fab40e7c76c0129236a481e60b065d95b75840ce4193840de071994295195f0bf8", 0xc7) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x2, 0x4}}, 0x20) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000440)=0x5f14) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000480)={0xfff, r0, 0x2}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x29, 0x81, 0x1, 0x200, 0x1b, @mcast2, @private0, 0x40, 0x8000, 0x80, 0x101}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xd8, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r3}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000400)={0x1000, r0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x401, 0x3, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x8000}, {0x6, 0x6, 0xa7, 0x6}, {0x6, 0x1, 0x5e, 0x9a}, {0xfff8, 0x0, 0x0, 0x9541}, {0x8, 0x72, 0x8d, 0x7fffffff}, {0x2, 0x77, 0x2, 0x10001}]}) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000100)=0x9) write$ppp(r4, &(0x7f0000000300)="320daa48f9cc04f38b4bd999f35db896585ca6725755720b3b85f34e7af0c53ebf0d7e97f42fa5134158a72a25bbd33876fbf718456f95f65d41a199e7552bcc361149fbe230b540253876d5fee8a05de4b0dd76b3537c7f2eabf6b2bb8482ab4f8b39f4016a2283ca275468e3c8aa3c742c845b3feb263ad66bef08f0575f8177802d82e78b5ca7f2963c2f65ea7b21cf9712b5ab49b1ee32d40052b122b180a417e5b150dd6aa2f85a1a05177a20df28e2e34de9095900c3f6553c8a3451ee39236446ec5fe0e28f231c1819889997c528f3ef8891c5cb554bd36016e96920514d6efb0a36", 0xe6) 23:08:57 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000140)={0xffffffffe5fe2092, 0xffffffffffffffff}) write$ppp(r0, &(0x7f0000000200)="622defa317e31ea25997659be95a695d9dac6ac8d0e182651cdd6049efb5f6f717273df86e3ffb1a28577535e67303cdb832498958ef9e62d993771a59a8800e75bc81491a00e4cc12963606dd6a56cd2db0e6750bd64618356710c2863aef4c7baa1d8dcffdd884e35c4760aa92474dd70884f9c16b3f87330568542919bb2ae6ba36450ee8b2cb368b3e13061b03547fcd910f96e73755b963fdc2e29648537fae531672a8fab40e7c76c0129236a481e60b065d95b75840ce4193840de071994295195f0bf8", 0xc7) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x2, 0x4}}, 0x20) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000440)=0x5f14) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000480)={0xfff, r0, 0x2}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x29, 0x81, 0x1, 0x200, 0x1b, @mcast2, @private0, 0x40, 0x8000, 0x80, 0x101}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xd8, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r3}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000400)={0x1000, r0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x401, 0x3, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x8000}, {0x6, 0x6, 0xa7, 0x6}, {0x6, 0x1, 0x5e, 0x9a}, {0xfff8, 0x0, 0x0, 0x9541}, {0x8, 0x72, 0x8d, 0x7fffffff}, {0x2, 0x77, 0x2, 0x10001}]}) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000100)=0x9) write$ppp(r4, &(0x7f0000000300)="320daa48f9cc04f38b4bd999f35db896585ca6725755720b3b85f34e7af0c53ebf0d7e97f42fa5134158a72a25bbd33876fbf718456f95f65d41a199e7552bcc361149fbe230b540253876d5fee8a05de4b0dd76b3537c7f2eabf6b2bb8482ab4f8b39f4016a2283ca275468e3c8aa3c742c845b3feb263ad66bef08f0575f8177802d82e78b5ca7f2963c2f65ea7b21cf9712b5ab49b1ee32d40052b122b180a417e5b150dd6aa2f85a1a05177a20df28e2e34de9095900c3f6553c8a3451ee39236446ec5fe0e28f231c1819889997c528f3ef8891c5cb554bd36016e96920514d6efb0a36", 0xe6) 23:08:57 executing program 3: syz_clone(0x20000000, 0x0, 0xe1010000, 0x0, 0x0, 0x0) 23:08:57 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000140)={0xffffffffe5fe2092, 0xffffffffffffffff}) write$ppp(r0, &(0x7f0000000200)="622defa317e31ea25997659be95a695d9dac6ac8d0e182651cdd6049efb5f6f717273df86e3ffb1a28577535e67303cdb832498958ef9e62d993771a59a8800e75bc81491a00e4cc12963606dd6a56cd2db0e6750bd64618356710c2863aef4c7baa1d8dcffdd884e35c4760aa92474dd70884f9c16b3f87330568542919bb2ae6ba36450ee8b2cb368b3e13061b03547fcd910f96e73755b963fdc2e29648537fae531672a8fab40e7c76c0129236a481e60b065d95b75840ce4193840de071994295195f0bf8", 0xc7) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x2, 0x4}}, 0x20) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000440)=0x5f14) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000480)={0xfff, r0, 0x2}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x29, 0x81, 0x1, 0x200, 0x1b, @mcast2, @private0, 0x40, 0x8000, 0x80, 0x101}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xd8, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r3}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000400)={0x1000, r0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x401, 0x3, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x8000}, {0x6, 0x6, 0xa7, 0x6}, {0x6, 0x1, 0x5e, 0x9a}, {0xfff8, 0x0, 0x0, 0x9541}, {0x8, 0x72, 0x8d, 0x7fffffff}, {0x2, 0x77, 0x2, 0x10001}]}) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000100)=0x9) 23:08:57 executing program 2: r0 = syz_clone(0x1146400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="a20e13e4d75b419d37d91bbd7f8365e8ac7f47dd4156361156fe1dd7ce541d5fb5ea8631535f7449a8840d49a52778d7f959e84316993d5bb3d9973aa67f5a937ec460f075f535521a7d23e26503893e15a3b6e2a03679b795c5534b296fa26ece4b1c08ae906779a2250ab15bd7de3575d84053748045d510c93a431b5785956b5549fd748d897c4aadab965e790c303fba51c20f23436193405cd1e09329ea1e74038a4637fd1c82446a6857ec64f3c2948f12d7a74e418297f5da9df27179907f0a7e542f34d32c1cb054b285ed5b274388ddb1a8aa53361b253c") tkill(r0, 0x2c) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x10200, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) 23:08:57 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000140)={0xffffffffe5fe2092, 0xffffffffffffffff}) write$ppp(r0, &(0x7f0000000200)="622defa317e31ea25997659be95a695d9dac6ac8d0e182651cdd6049efb5f6f717273df86e3ffb1a28577535e67303cdb832498958ef9e62d993771a59a8800e75bc81491a00e4cc12963606dd6a56cd2db0e6750bd64618356710c2863aef4c7baa1d8dcffdd884e35c4760aa92474dd70884f9c16b3f87330568542919bb2ae6ba36450ee8b2cb368b3e13061b03547fcd910f96e73755b963fdc2e29648537fae531672a8fab40e7c76c0129236a481e60b065d95b75840ce4193840de071994295195f0bf8", 0xc7) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x2, 0x4}}, 0x20) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000440)=0x5f14) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000480)={0xfff, r0, 0x2}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x29, 0x81, 0x1, 0x200, 0x1b, @mcast2, @private0, 0x40, 0x8000, 0x80, 0x101}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xd8, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r3}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000400)={0x1000, r0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x401, 0x3, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x8000}, {0x6, 0x6, 0xa7, 0x6}, {0x6, 0x1, 0x5e, 0x9a}, {0xfff8, 0x0, 0x0, 0x9541}, {0x8, 0x72, 0x8d, 0x7fffffff}, {0x2, 0x77, 0x2, 0x10001}]}) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) 23:08:57 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000140)={0xffffffffe5fe2092, 0xffffffffffffffff}) write$ppp(r0, &(0x7f0000000200)="622defa317e31ea25997659be95a695d9dac6ac8d0e182651cdd6049efb5f6f717273df86e3ffb1a28577535e67303cdb832498958ef9e62d993771a59a8800e75bc81491a00e4cc12963606dd6a56cd2db0e6750bd64618356710c2863aef4c7baa1d8dcffdd884e35c4760aa92474dd70884f9c16b3f87330568542919bb2ae6ba36450ee8b2cb368b3e13061b03547fcd910f96e73755b963fdc2e29648537fae531672a8fab40e7c76c0129236a481e60b065d95b75840ce4193840de071994295195f0bf8", 0xc7) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x2, 0x4}}, 0x20) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000440)=0x5f14) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000480)={0xfff, r0, 0x2}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x29, 0x81, 0x1, 0x200, 0x1b, @mcast2, @private0, 0x40, 0x8000, 0x80, 0x101}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xd8, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r3}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000400)={0x1000, r0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x401, 0x3, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x8000}, {0x6, 0x6, 0xa7, 0x6}, {0x6, 0x1, 0x5e, 0x9a}, {0xfff8, 0x0, 0x0, 0x9541}, {0x8, 0x72, 0x8d, 0x7fffffff}, {0x2, 0x77, 0x2, 0x10001}]}) 23:08:57 executing program 1: syz_clone(0x20000000, 0x0, 0xffefff1f, 0x0, 0x0, 0x0) 23:08:57 executing program 3: syz_clone(0x20000000, 0x0, 0xe2010000, 0x0, 0x0, 0x0) 23:08:57 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000140)={0xffffffffe5fe2092, 0xffffffffffffffff}) write$ppp(r0, &(0x7f0000000200)="622defa317e31ea25997659be95a695d9dac6ac8d0e182651cdd6049efb5f6f717273df86e3ffb1a28577535e67303cdb832498958ef9e62d993771a59a8800e75bc81491a00e4cc12963606dd6a56cd2db0e6750bd64618356710c2863aef4c7baa1d8dcffdd884e35c4760aa92474dd70884f9c16b3f87330568542919bb2ae6ba36450ee8b2cb368b3e13061b03547fcd910f96e73755b963fdc2e29648537fae531672a8fab40e7c76c0129236a481e60b065d95b75840ce4193840de071994295195f0bf8", 0xc7) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x2, 0x4}}, 0x20) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000440)=0x5f14) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000480)={0xfff, r0, 0x2}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x29, 0x81, 0x1, 0x200, 0x1b, @mcast2, @private0, 0x40, 0x8000, 0x80, 0x101}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xd8, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r3}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x401, 0x3, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x8000}, {0x6, 0x6, 0xa7, 0x6}, {0x6, 0x1, 0x5e, 0x9a}, {0xfff8, 0x0, 0x0, 0x9541}, {0x8, 0x72, 0x8d, 0x7fffffff}, {0x2, 0x77, 0x2, 0x10001}]}) 23:08:57 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000140)={0xffffffffe5fe2092, 0xffffffffffffffff}) write$ppp(r0, &(0x7f0000000200)="622defa317e31ea25997659be95a695d9dac6ac8d0e182651cdd6049efb5f6f717273df86e3ffb1a28577535e67303cdb832498958ef9e62d993771a59a8800e75bc81491a00e4cc12963606dd6a56cd2db0e6750bd64618356710c2863aef4c7baa1d8dcffdd884e35c4760aa92474dd70884f9c16b3f87330568542919bb2ae6ba36450ee8b2cb368b3e13061b03547fcd910f96e73755b963fdc2e29648537fae531672a8fab40e7c76c0129236a481e60b065d95b75840ce4193840de071994295195f0bf8", 0xc7) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x2, 0x4}}, 0x20) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000440)=0x5f14) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000480)={0xfff, r0, 0x2}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x29, 0x81, 0x1, 0x200, 0x1b, @mcast2, @private0, 0x40, 0x8000, 0x80, 0x101}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x401, 0x3, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x8000}, {0x6, 0x6, 0xa7, 0x6}, {0x6, 0x1, 0x5e, 0x9a}, {0xfff8, 0x0, 0x0, 0x9541}, {0x8, 0x72, 0x8d, 0x7fffffff}, {0x2, 0x77, 0x2, 0x10001}]}) 23:08:57 executing program 1: syz_clone(0x20000000, 0x0, 0xfffffff0, 0x0, 0x0, 0x0) 23:08:57 executing program 2: r0 = syz_clone(0x1146400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="a20e13e4d75b419d37d91bbd7f8365e8ac7f47dd4156361156fe1dd7ce541d5fb5ea8631535f7449a8840d49a52778d7f959e84316993d5bb3d9973aa67f5a937ec460f075f535521a7d23e26503893e15a3b6e2a03679b795c5534b296fa26ece4b1c08ae906779a2250ab15bd7de3575d84053748045d510c93a431b5785956b5549fd748d897c4aadab965e790c303fba51c20f23436193405cd1e09329ea1e74038a4637fd1c82446a6857ec64f3c2948f12d7a74e418297f5da9df27179907f0a7e542f34d32c1cb054b285ed5b274388ddb1a8aa53361b253c") tkill(r0, 0x2c) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x10200, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) 23:08:57 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000140)={0xffffffffe5fe2092, 0xffffffffffffffff}) write$ppp(r0, &(0x7f0000000200)="622defa317e31ea25997659be95a695d9dac6ac8d0e182651cdd6049efb5f6f717273df86e3ffb1a28577535e67303cdb832498958ef9e62d993771a59a8800e75bc81491a00e4cc12963606dd6a56cd2db0e6750bd64618356710c2863aef4c7baa1d8dcffdd884e35c4760aa92474dd70884f9c16b3f87330568542919bb2ae6ba36450ee8b2cb368b3e13061b03547fcd910f96e73755b963fdc2e29648537fae531672a8fab40e7c76c0129236a481e60b065d95b75840ce4193840de071994295195f0bf8", 0xc7) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x2, 0x4}}, 0x20) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000440)=0x5f14) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000480)={0xfff, r0, 0x2}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x401, 0x3, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x8000}, {0x6, 0x6, 0xa7, 0x6}, {0x6, 0x1, 0x5e, 0x9a}, {0xfff8, 0x0, 0x0, 0x9541}, {0x8, 0x72, 0x8d, 0x7fffffff}, {0x2, 0x77, 0x2, 0x10001}]}) 23:08:57 executing program 3: syz_clone(0x20000000, 0x0, 0xe2020000, 0x0, 0x0, 0x0) 23:08:57 executing program 1: syz_clone(0x20000000, 0x0, 0xfffffff5, 0x0, 0x0, 0x0) 23:08:57 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000140)={0xffffffffe5fe2092, 0xffffffffffffffff}) write$ppp(r0, &(0x7f0000000200)="622defa317e31ea25997659be95a695d9dac6ac8d0e182651cdd6049efb5f6f717273df86e3ffb1a28577535e67303cdb832498958ef9e62d993771a59a8800e75bc81491a00e4cc12963606dd6a56cd2db0e6750bd64618356710c2863aef4c7baa1d8dcffdd884e35c4760aa92474dd70884f9c16b3f87330568542919bb2ae6ba36450ee8b2cb368b3e13061b03547fcd910f96e73755b963fdc2e29648537fae531672a8fab40e7c76c0129236a481e60b065d95b75840ce4193840de071994295195f0bf8", 0xc7) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x2, 0x4}}, 0x20) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000440)=0x5f14) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000480)={0xfff, r0, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x401, 0x3, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x8000}, {0x6, 0x6, 0xa7, 0x6}, {0x6, 0x1, 0x5e, 0x9a}, {0xfff8, 0x0, 0x0, 0x9541}, {0x8, 0x72, 0x8d, 0x7fffffff}, {0x2, 0x77, 0x2, 0x10001}]}) 23:08:57 executing program 1: syz_clone(0x20000000, 0x0, 0xfffffffb, 0x0, 0x0, 0x0) 23:08:57 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000140)={0xffffffffe5fe2092, 0xffffffffffffffff}) write$ppp(r0, &(0x7f0000000200)="622defa317e31ea25997659be95a695d9dac6ac8d0e182651cdd6049efb5f6f717273df86e3ffb1a28577535e67303cdb832498958ef9e62d993771a59a8800e75bc81491a00e4cc12963606dd6a56cd2db0e6750bd64618356710c2863aef4c7baa1d8dcffdd884e35c4760aa92474dd70884f9c16b3f87330568542919bb2ae6ba36450ee8b2cb368b3e13061b03547fcd910f96e73755b963fdc2e29648537fae531672a8fab40e7c76c0129236a481e60b065d95b75840ce4193840de071994295195f0bf8", 0xc7) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x2, 0x4}}, 0x20) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000440)=0x5f14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x401, 0x3, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x8000}, {0x6, 0x6, 0xa7, 0x6}, {0x6, 0x1, 0x5e, 0x9a}, {0xfff8, 0x0, 0x0, 0x9541}, {0x8, 0x72, 0x8d, 0x7fffffff}, {0x2, 0x77, 0x2, 0x10001}]}) 23:08:57 executing program 3: syz_clone(0x20000000, 0x0, 0xe3010000, 0x0, 0x0, 0x0) 23:08:57 executing program 2: r0 = syz_clone(0x1146400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="a20e13e4d75b419d37d91bbd7f8365e8ac7f47dd4156361156fe1dd7ce541d5fb5ea8631535f7449a8840d49a52778d7f959e84316993d5bb3d9973aa67f5a937ec460f075f535521a7d23e26503893e15a3b6e2a03679b795c5534b296fa26ece4b1c08ae906779a2250ab15bd7de3575d84053748045d510c93a431b5785956b5549fd748d897c4aadab965e790c303fba51c20f23436193405cd1e09329ea1e74038a4637fd1c82446a6857ec64f3c2948f12d7a74e418297f5da9df27179907f0a7e542f34d32c1cb054b285ed5b274388ddb1a8aa53361b253c") tkill(r0, 0x2c) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x10200, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) 23:08:57 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000140)={0xffffffffe5fe2092, 0xffffffffffffffff}) write$ppp(r0, &(0x7f0000000200)="622defa317e31ea25997659be95a695d9dac6ac8d0e182651cdd6049efb5f6f717273df86e3ffb1a28577535e67303cdb832498958ef9e62d993771a59a8800e75bc81491a00e4cc12963606dd6a56cd2db0e6750bd64618356710c2863aef4c7baa1d8dcffdd884e35c4760aa92474dd70884f9c16b3f87330568542919bb2ae6ba36450ee8b2cb368b3e13061b03547fcd910f96e73755b963fdc2e29648537fae531672a8fab40e7c76c0129236a481e60b065d95b75840ce4193840de071994295195f0bf8", 0xc7) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x2, 0x4}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x401, 0x3, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x8000}, {0x6, 0x6, 0xa7, 0x6}, {0x6, 0x1, 0x5e, 0x9a}, {0xfff8, 0x0, 0x0, 0x9541}, {0x8, 0x72, 0x8d, 0x7fffffff}, {0x2, 0x77, 0x2, 0x10001}]}) 23:08:57 executing program 3: syz_clone(0x20000000, 0x0, 0xe4010000, 0x0, 0x0, 0x0) 23:08:57 executing program 1: syz_clone(0x20000000, 0x0, 0x10000000000, 0x0, 0x0, 0x0) 23:08:57 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000140)={0xffffffffe5fe2092, 0xffffffffffffffff}) write$ppp(r0, &(0x7f0000000200)="622defa317e31ea25997659be95a695d9dac6ac8d0e182651cdd6049efb5f6f717273df86e3ffb1a28577535e67303cdb832498958ef9e62d993771a59a8800e75bc81491a00e4cc12963606dd6a56cd2db0e6750bd64618356710c2863aef4c7baa1d8dcffdd884e35c4760aa92474dd70884f9c16b3f87330568542919bb2ae6ba36450ee8b2cb368b3e13061b03547fcd910f96e73755b963fdc2e29648537fae531672a8fab40e7c76c0129236a481e60b065d95b75840ce4193840de071994295195f0bf8", 0xc7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x401, 0x3, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x8000}, {0x6, 0x6, 0xa7, 0x6}, {0x6, 0x1, 0x5e, 0x9a}, {0xfff8, 0x0, 0x0, 0x9541}, {0x8, 0x72, 0x8d, 0x7fffffff}, {0x2, 0x77, 0x2, 0x10001}]}) 23:08:57 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000140)={0xffffffffe5fe2092}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x401, 0x3, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x8000}, {0x6, 0x6, 0xa7, 0x6}, {0x6, 0x1, 0x5e, 0x9a}, {0xfff8, 0x0, 0x0, 0x9541}, {0x8, 0x72, 0x8d, 0x7fffffff}, {0x2, 0x77, 0x2, 0x10001}]}) 23:08:57 executing program 1: syz_clone(0x20000000, 0x0, 0x7f469b5fffff, 0x0, 0x0, 0x0) 23:08:57 executing program 3: syz_clone(0x20000000, 0x0, 0xe5010000, 0x0, 0x0, 0x0) 23:08:57 executing program 2: r0 = syz_clone(0x1146400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="a20e13e4d75b419d37d91bbd7f8365e8ac7f47dd4156361156fe1dd7ce541d5fb5ea8631535f7449a8840d49a52778d7f959e84316993d5bb3d9973aa67f5a937ec460f075f535521a7d23e26503893e15a3b6e2a03679b795c5534b296fa26ece4b1c08ae906779a2250ab15bd7de3575d84053748045d510c93a431b5785956b5549fd748d897c4aadab965e790c303fba51c20f23436193405cd1e09329ea1e74038a4637fd1c82446a6857ec64f3c2948f12d7a74e418297f5da9df27179907f0a7e542f34d32c1cb054b285ed5b274388ddb1a8aa53361b253c") tkill(r0, 0x2c) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x10200, 0x0) 23:08:57 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x401, 0x3, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x8000}, {0x6, 0x6, 0xa7, 0x6}, {0x6, 0x1, 0x5e, 0x9a}, {0xfff8, 0x0, 0x0, 0x9541}, {0x8, 0x72, 0x8d, 0x7fffffff}, {0x2, 0x77, 0x2, 0x10001}]}) 23:08:57 executing program 1: syz_clone(0x20000000, 0x0, 0x1000000000000, 0x0, 0x0, 0x0) 23:08:57 executing program 3: syz_clone(0x20000000, 0x0, 0xe5030000, 0x0, 0x0, 0x0) 23:08:57 executing program 1: syz_clone(0x20000000, 0x0, 0x2001000000000, 0x0, 0x0, 0x0) 23:08:57 executing program 3: syz_clone(0x20000000, 0x0, 0xe6010000, 0x0, 0x0, 0x0) 23:08:57 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x401, 0x3, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x8000}, {0x6, 0x6, 0xa7, 0x6}, {0x6, 0x1, 0x5e, 0x9a}, {0xfff8, 0x0, 0x0, 0x9541}, {0x8, 0x72, 0x8d, 0x7fffffff}, {0x2, 0x77, 0x2, 0x10001}]}) 23:08:57 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 23:08:57 executing program 2: r0 = syz_clone(0x1146400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="a20e13e4d75b419d37d91bbd7f8365e8ac7f47dd4156361156fe1dd7ce541d5fb5ea8631535f7449a8840d49a52778d7f959e84316993d5bb3d9973aa67f5a937ec460f075f535521a7d23e26503893e15a3b6e2a03679b795c5534b296fa26ece4b1c08ae906779a2250ab15bd7de3575d84053748045d510c93a431b5785956b5549fd748d897c4aadab965e790c303fba51c20f23436193405cd1e09329ea1e74038a4637fd1c82446a6857ec64f3c2948f12d7a74e418297f5da9df27179907f0a7e542f34d32c1cb054b285ed5b274388ddb1a8aa53361b253c") tkill(r0, 0x2c) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) 23:08:57 executing program 1: syz_clone(0x20000000, 0x0, 0x2020000000000, 0x0, 0x0, 0x0) 23:08:57 executing program 3: syz_clone(0x20000000, 0x0, 0xe7010000, 0x0, 0x0, 0x0) 23:08:57 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 23:08:57 executing program 1: syz_clone(0x20000000, 0x0, 0x8000000000000, 0x0, 0x0, 0x0) 23:08:58 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 23:08:58 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) 23:08:58 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) 23:08:58 executing program 2: r0 = syz_clone(0x1146400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="a20e13e4d75b419d37d91bbd7f8365e8ac7f47dd4156361156fe1dd7ce541d5fb5ea8631535f7449a8840d49a52778d7f959e84316993d5bb3d9973aa67f5a937ec460f075f535521a7d23e26503893e15a3b6e2a03679b795c5534b296fa26ece4b1c08ae906779a2250ab15bd7de3575d84053748045d510c93a431b5785956b5549fd748d897c4aadab965e790c303fba51c20f23436193405cd1e09329ea1e74038a4637fd1c82446a6857ec64f3c2948f12d7a74e418297f5da9df27179907f0a7e542f34d32c1cb054b285ed5b274388ddb1a8aa53361b253c") tkill(r0, 0x2c) 23:08:58 executing program 3: syz_clone(0x20000000, 0x0, 0xe8010000, 0x0, 0x0, 0x0) 23:08:58 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) 23:08:58 executing program 2: syz_clone(0x1146400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="a20e13e4d75b419d37d91bbd7f8365e8ac7f47dd4156361156fe1dd7ce541d5fb5ea8631535f7449a8840d49a52778d7f959e84316993d5bb3d9973aa67f5a937ec460f075f535521a7d23e26503893e15a3b6e2a03679b795c5534b296fa26ece4b1c08ae906779a2250ab15bd7de3575d84053748045d510c93a431b5785956b5549fd748d897c4aadab965e790c303fba51c20f23436193405cd1e09329ea1e74038a4637fd1c82446a6857ec64f3c2948f12d7a74e418297f5da9df27179907f0a7e542f34d32c1cb054b285ed5b274388ddb1a8aa53361b253c") 23:08:58 executing program 1: syz_clone(0x20000000, 0x0, 0x10000000000000, 0x0, 0x0, 0x0) 23:08:58 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x401, 0x3, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x8000}, {0x6, 0x6, 0xa7, 0x6}, {0x6, 0x1, 0x5e, 0x9a}, {0xfff8, 0x0, 0x0, 0x9541}, {0x8, 0x72, 0x8d, 0x7fffffff}]}) 23:08:58 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x8, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x401, 0x3, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x8000}, {0x6, 0x6, 0xa7, 0x6}, {0x6, 0x1, 0x5e, 0x9a}, {0xfff8, 0x0, 0x0, 0x9541}]}) 23:08:58 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="a20e13e4d75b419d37d91bbd7f8365e8ac7f47dd4156361156fe1dd7ce541d5fb5ea8631535f7449a8840d49a52778d7f959e84316993d5bb3d9973aa67f5a937ec460f075f535521a7d23e26503893e15a3b6e2a03679b795c5534b296fa26ece4b1c08ae906779a2250ab15bd7de3575d84053748045d510c93a431b5785956b5549fd748d897c4aadab965e790c303fba51c20f23436193405cd1e09329ea1e74038a4637fd1c82446a6857ec64f3c2948f12d7a74e418297f5da9df27179907f0a7e542f34d32c1cb054b285ed5b274388ddb1a8aa53361b253c") 23:08:58 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x7, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x401, 0x3, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x8000}, {0x6, 0x6, 0xa7, 0x6}, {0x6, 0x1, 0x5e, 0x9a}]}) 23:08:58 executing program 3: syz_clone(0x20000000, 0x0, 0xe9010000, 0x0, 0x0, 0x0) 23:08:58 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x401, 0x3, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x8000}, {0x6, 0x6, 0xa7, 0x6}]}) 23:08:58 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="a20e13e4d75b419d37d91bbd7f8365e8ac7f47dd4156361156fe1dd7ce541d5fb5ea8631535f7449a8840d49a52778d7f959e84316993d5bb3d9973aa67f5a937ec460f075f535521a7d23e26503893e15a3b6e2a03679b795c5534b296fa26ece4b1c08ae906779a2250ab15bd7de3575d84053748045d510c93a431b5785956b5549fd748d897c4aadab965e790c303fba51c20f23436193405cd1e09329ea1e74038a4637fd1c82446a6857ec64f3c2948f12d7a74e418297f5da9df27179907f0a7e542f34d32c1cb054b285ed5b274388ddb1a8aa53361b253c") 23:08:58 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x401, 0x3, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x8000}]}) 23:08:58 executing program 1: syz_clone(0x20000000, 0x0, 0x10100000000000, 0x0, 0x0, 0x0) 23:08:58 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="a20e13e4d75b419d37d91bbd7f8365e8ac7f47dd4156361156fe1dd7ce541d5fb5ea8631535f7449a8840d49a52778d7f959e84316993d5bb3d9973aa67f5a937ec460f075f535521a7d23e26503893e15a3b6e2a03679b795c5534b296fa26ece4b1c08ae906779a2250ab15bd7de3575d84053748045d510c93a431b5785956b5549fd748d897c4aadab965e790c303fba51c20f23436193405cd1e09329ea1e74038a4637fd1c82446a6857ec64f3c2948f12d7a74e418297f5da9df27179907f0a7e542f34d32c1cb054b285ed5b274388ddb1a8aa53361b253c") 23:08:59 executing program 2: syz_clone(0x1146400, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:59 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x401, 0x3, 0x1, 0x1}]}) 23:08:59 executing program 3: syz_clone(0x20000000, 0x0, 0xea010000, 0x0, 0x0, 0x0) 23:08:59 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}]}) 23:08:59 executing program 1: syz_clone(0x20000000, 0x0, 0x100000000000000, 0x0, 0x0, 0x0) 23:08:59 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}]}) 23:08:59 executing program 3: syz_clone(0x20000000, 0x0, 0xeb010000, 0x0, 0x0, 0x0) 23:08:59 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}]}) 23:08:59 executing program 1: syz_clone(0x20000000, 0x0, 0x101000000000000, 0x0, 0x0, 0x0) 23:08:59 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x0, 0x3, 0x1, 0x1}]}) 23:08:59 executing program 3: syz_clone(0x20000000, 0x0, 0xf0ffffff, 0x0, 0x0, 0x0) 23:08:59 executing program 2: syz_clone(0x20000000, 0x0, 0x10100000000000, 0x0, 0x0, 0x0) 23:08:59 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x0, 0x3, 0x1, 0x1}]}) 23:08:59 executing program 1: syz_clone(0x20000000, 0x0, 0x200000000000000, 0x0, 0x0, 0x0) 23:08:59 executing program 3: syz_clone(0x20000000, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0) 23:08:59 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x0, 0x3, 0x1, 0x1}]}) 23:08:59 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x401, 0x0, 0x1, 0x1}]}) 23:08:59 executing program 2: syz_clone(0x20000000, 0x0, 0x10000000000000, 0x0, 0x0, 0x0) 23:08:59 executing program 1: syz_clone(0x20000000, 0x0, 0x201000000000000, 0x0, 0x0, 0x0) 23:08:59 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x401, 0x0, 0x0, 0x1}]}) 23:08:59 executing program 3: syz_clone(0x20000000, 0x0, 0xfbffffff, 0x0, 0x0, 0x0) 23:08:59 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x401}]}) 23:08:59 executing program 1: syz_clone(0x20000000, 0x0, 0x301000000000000, 0x0, 0x0, 0x0) 23:08:59 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x401}]}) 23:08:59 executing program 3: syz_clone(0x20000000, 0x0, 0xffefff1f, 0x0, 0x0, 0x0) [ 347.640396][ T8739] syz-executor.1 (8739) used greatest stack depth: 22144 bytes left 23:08:59 executing program 2: syz_clone(0x20000000, 0x0, 0x201000000000000, 0x0, 0x0, 0x0) 23:08:59 executing program 1: syz_clone(0x20000000, 0x0, 0x400000000000000, 0x0, 0x0, 0x0) 23:08:59 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {}]}) 23:08:59 executing program 3: syz_clone(0x20000000, 0x0, 0xfffffff0, 0x0, 0x0, 0x0) 23:08:59 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {}]}) 23:08:59 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {}]}) 23:08:59 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x401}]}) 23:09:00 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {}]}) 23:09:00 executing program 2: syz_clone(0x1146400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="a20e13e4d75b419d37d91bbd7f8365e8ac7f47dd4156361156fe1dd7ce541d5fb5ea8631535f7449a8840d49a52778d7f959e84316993d5bb3d9973aa67f5a937ec460f075f535521a7d23e26503893e15a3b6e2a03679b795c5534b296fa26ece4b1c08ae906779a2250ab15bd7de3575d84053748045d510c93a431b5785956b5549fd748d897c4aadab965e790c303fba51c20f23436193405cd1e09329ea1e74038a4637fd1c82446a6857ec64f3c2948f12d7a74e418297f5da9df27179907f0a7e542f34d32c1cb054b285ed5b274388ddb1a8aa53361b253c") 23:09:00 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {}]}) 23:09:00 executing program 1: syz_clone(0x20000000, 0x0, 0x401000000000000, 0x0, 0x0, 0x0) 23:09:00 executing program 3: syz_clone(0x20000000, 0x0, 0xfffffff5, 0x0, 0x0, 0x0) 23:09:00 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {}]}) 23:09:00 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x401}]}) 23:09:00 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{}]}) 23:09:00 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {}]}) 23:09:00 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{}]}) 23:09:00 executing program 2: r0 = syz_clone(0x1146400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="a20e13e4d75b419d37d91bbd7f8365e8ac7f47dd4156361156fe1dd7ce541d5fb5ea8631535f7449a8840d49a52778d7f959e84316993d5bb3d9973aa67f5a937ec460f075f535521a7d23e26503893e15a3b6e2a03679b795c5534b296fa26ece4b1c08ae906779a2250ab15bd7de3575d84053748045d510c93a431b5785956b5549fd748d897c4aadab965e790c303fba51c20f23436193405cd1e09329ea1e74038a4637fd1c82446a6857ec64f3c2948f12d7a74e418297f5da9df27179907f0a7e542f34d32c1cb054b285ed5b274388ddb1a8aa53361b253c") tkill(r0, 0x2c) [ 348.591839][ T8899] syz-executor.1 (8899) used greatest stack depth: 21984 bytes left 23:09:00 executing program 1: syz_clone(0x20000000, 0x0, 0x500000000000000, 0x0, 0x0, 0x0) 23:09:00 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{}]}) 23:09:00 executing program 3: syz_clone(0x20000000, 0x0, 0xfffffffb, 0x0, 0x0, 0x0) 23:09:00 executing program 2: syz_clone(0x20000000, 0x0, 0xe5010000, 0x0, 0x0, 0x0) 23:09:00 executing program 0: syz_clone(0x20000000, 0x0, 0xfffffffb, 0x0, 0x0, 0x0) 23:09:01 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000140)={0xffffffffe5fe2092, 0xffffffffffffffff}) write$ppp(r0, &(0x7f0000000200)="622defa317e31ea25997659be95a695d9dac6ac8d0e182651cdd6049efb5f6f717273df86e3ffb1a28577535e67303cdb832498958ef9e62d993771a59a8800e75bc81491a00e4cc12963606dd6a56cd2db0e6750bd64618356710c2863aef4c7baa1d8dcffdd884e35c4760aa92474dd70884f9c16b3f87330568542919bb2ae6ba36450ee8b2cb368b3e13061b03547fcd910f96e73755b963fdc2e29648537fae531672a8fab40e7c76c0129236a481e60b065d95b75840ce4193840de071994295195f0bf8", 0xc7) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x2, 0x4}}, 0x20) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000440)=0x5f14) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000480)={0xfff, r0, 0x2}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x29, 0x81, 0x1, 0x200, 0x1b, @mcast2, @private0, 0x40, 0x8000, 0x80, 0x101}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x4, 0x4, 0x1f}, {0x3, 0x7f, 0x2, 0x7}, {0x3, 0x80, 0x31, 0x9}, {0x401, 0x3, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x8000}, {0x6, 0x6, 0xa7, 0x6}, {0x6, 0x1, 0x5e, 0x9a}, {0xfff8, 0x0, 0x0, 0x9541}, {0x8, 0x72, 0x8d, 0x7fffffff}, {0x2, 0x77, 0x2, 0x10001}]}) 23:09:01 executing program 2: getpgid(0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0xd7d18508f3d2c6da) 23:09:01 executing program 3: syz_clone(0x20000000, 0x0, 0x10000000000, 0x0, 0x0, 0x0) 23:09:01 executing program 1: syz_clone(0x20000000, 0x0, 0x501000000000000, 0x0, 0x0, 0x0) 23:09:01 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}}, 0x24) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000100)={"9cb41414c6569a7c29362aaad78b35a1f531495737835ee5ca64d59f2c72ce74", r3}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r4, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(r4, 0x3, &(0x7f0000000180)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f00000001c0)) 23:09:01 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}}, 0x24) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000100)={"9cb41414c6569a7c29362aaad78b35a1f531495737835ee5ca64d59f2c72ce74", r3}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r4, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(r4, 0x3, &(0x7f0000000180)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f00000001c0)) 23:09:01 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}}, 0x24) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000100)={"9cb41414c6569a7c29362aaad78b35a1f531495737835ee5ca64d59f2c72ce74", r3}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r4, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(r4, 0x3, &(0x7f0000000180)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f00000001c0)) 23:09:01 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}}, 0x24) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000100)={"9cb41414c6569a7c29362aaad78b35a1f531495737835ee5ca64d59f2c72ce74", r3}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r4, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) timerfd_settime(r4, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:01 executing program 1: syz_clone(0x20000000, 0x0, 0x700000000000000, 0x0, 0x0, 0x0) 23:09:01 executing program 2: getpgid(0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0xd7d18508f3d2c6da) 23:09:01 executing program 2: getpgid(0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0xd7d18508f3d2c6da) 23:09:01 executing program 3: syz_clone(0x20000000, 0x0, 0x7f81ce3fffff, 0x0, 0x0, 0x0) 23:09:01 executing program 1: syz_clone(0x20000000, 0x0, 0x701000000000000, 0x0, 0x0, 0x0) 23:09:01 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}}, 0x24) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000100)={"9cb41414c6569a7c29362aaad78b35a1f531495737835ee5ca64d59f2c72ce74", r3}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:01 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}}, 0x24) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000100)={"9cb41414c6569a7c29362aaad78b35a1f531495737835ee5ca64d59f2c72ce74", r3}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:01 executing program 2: getpgid(0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) 23:09:01 executing program 1: syz_clone(0x20000000, 0x0, 0x800000000000000, 0x0, 0x0, 0x0) 23:09:01 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}}, 0x24) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000100)={"9cb41414c6569a7c29362aaad78b35a1f531495737835ee5ca64d59f2c72ce74", r3}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:01 executing program 2: getpgid(0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 23:09:01 executing program 1: syz_clone(0x20000000, 0x0, 0x801000000000000, 0x0, 0x0, 0x0) 23:09:01 executing program 3: syz_clone(0x20000000, 0x0, 0x2001000000000, 0x0, 0x0, 0x0) 23:09:01 executing program 2: getpgid(0xffffffffffffffff) 23:09:01 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}}, 0x24) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000100)={"9cb41414c6569a7c29362aaad78b35a1f531495737835ee5ca64d59f2c72ce74", r3}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:01 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}}, 0x24) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:01 executing program 2: syz_clone(0x20000000, 0x0, 0x800000000000000, 0x0, 0x0, 0x0) [ 349.383138][ C2] [ 349.384268][ C2] ================================ 23:09:01 executing program 3: syz_clone(0x20000000, 0x0, 0x2020000000000, 0x0, 0x0, 0x0) [ 349.386504][ C2] WARNING: inconsistent lock state 23:09:01 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) [ 349.388921][ C2] 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 Not tainted [ 349.392283][ C2] -------------------------------- [ 349.394628][ C2] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 349.398977][ C2] syz-executor.3/10266 [HC0[0]:SC1[1]:HE0:SE0] takes: [ 349.401621][ C2] ffff88807ffdc728 (&pgdat->memcg_lru.lock){+.?.}-{2:2}, at: lru_gen_rotate_memcg+0x64/0xab0 [ 349.405748][ C2] {SOFTIRQ-ON-W} state was registered at: [ 349.407791][ C2] lock_acquire+0x1b1/0x520 [ 349.409464][ C2] _raw_spin_lock+0x2e/0x40 [ 349.411563][ C2] lru_gen_online_memcg+0x16b/0x5a0 [ 349.413556][ C2] mem_cgroup_css_online+0x227/0x3b0 [ 349.415473][ C2] online_css+0xaf/0x2a0 [ 349.417049][ C2] cgroup_init_subsys+0x46b/0x900 [ 349.418911][ C2] cgroup_init+0xb83/0x1090 [ 349.420775][ C2] start_kernel+0x398/0x490 [ 349.422873][ C2] x86_64_start_reservations+0x18/0x30 [ 349.425110][ C2] x86_64_start_kernel+0xb3/0xc0 [ 349.427180][ C2] secondary_startup_64_no_verify+0xf4/0xfb [ 349.430458][ C2] irq event stamp: 525 [ 349.432709][ C2] hardirqs last enabled at (524): [] memcg_account_kmem+0x4f/0x80 [ 349.436333][ C2] hardirqs last disabled at (525): [] uncharge_batch+0x1c7/0x560 [ 349.440223][ C2] softirqs last enabled at (294): [] fpu_sync_fpstate+0x160/0x3d0 [ 349.443728][ C2] softirqs last disabled at (431): [] __irq_exit_rcu+0x114/0x190 [ 349.447676][ C2] [ 349.447676][ C2] other info that might help us debug this: [ 349.451274][ C2] Possible unsafe locking scenario: [ 349.451274][ C2] [ 349.454513][ C2] CPU0 [ 349.455903][ C2] ---- [ 349.457430][ C2] lock(&pgdat->memcg_lru.lock); [ 349.459758][ C2] [ 349.461450][ C2] lock(&pgdat->memcg_lru.lock); [ 349.463951][ C2] [ 349.463951][ C2] *** DEADLOCK *** [ 349.463951][ C2] [ 349.467530][ C2] 5 locks held by syz-executor.3/10266: [ 349.469961][ C2] #0: ffff888024184460 (sb_writers#5){.+.+}-{0:0}, at: get_signal+0x1c02/0x25b0 [ 349.474253][ C2] #1: ffff88805d111480 (&sb->s_type->i_mutex_key#7){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 [ 349.479307][ C2] #2: ffff88802401c990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfb4/0x14e0 [ 349.483507][ C2] #3: ffff88805d1117e0 (&ei->i_raw_lock){+.+.}-{2:2}, at: ext4_mark_iloc_dirty+0x1a7/0x1b70 [ 349.487910][ C2] #4: ffffffff8c795fe0 (rcu_callback){....}-{0:0}, at: rcu_core+0x791/0x1ad0 [ 349.491799][ C2] [ 349.491799][ C2] stack backtrace: [ 349.494523][ C2] CPU: 2 PID: 10266 Comm: syz-executor.3 Not tainted 6.4.0-rc6-syzkaller-00279-g8c1f0c38b310 #0 [ 349.499327][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 349.503253][ C2] Call Trace: [ 349.504739][ C2] [ 349.506020][ C2] dump_stack_lvl+0xd9/0x150 [ 349.508083][ C2] mark_lock.part.0+0x1110/0x1970 [ 349.510289][ C2] ? print_usage_bug.part.0+0x660/0x660 [ 349.512711][ C2] ? print_usage_bug.part.0+0x660/0x660 [ 349.515141][ C2] ? lockdep_unlock+0x11b/0x290 [ 349.517350][ C2] ? __lock_acquire+0x28bf/0x5f30 [ 349.519705][ C2] __lock_acquire+0x1227/0x5f30 [ 349.521997][ C2] ? __lock_acquire+0xc17/0x5f30 [ 349.524468][ C2] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 349.527201][ C2] ? find_held_lock+0x2d/0x110 [ 349.529341][ C2] ? get_random_u8+0x3b8/0x7d0 [ 349.531475][ C2] lock_acquire+0x1b1/0x520 [ 349.533526][ C2] ? lru_gen_rotate_memcg+0x64/0xab0 [ 349.535856][ C2] ? lock_sync+0x190/0x190 [ 349.537915][ C2] ? get_random_u8+0x432/0x7d0 [ 349.540222][ C2] ? get_random_u16+0x7d0/0x7d0 [ 349.542502][ C2] _raw_spin_lock+0x2e/0x40 [ 349.544531][ C2] ? lru_gen_rotate_memcg+0x64/0xab0 [ 349.546853][ C2] lru_gen_rotate_memcg+0x64/0xab0 [ 349.549143][ C2] ? memcg_check_events+0x1b7/0x5f0 [ 349.551453][ C2] lru_gen_soft_reclaim+0x62/0x70 [ 349.553670][ C2] uncharge_batch+0x2be/0x560 [ 349.555739][ C2] __mem_cgroup_uncharge+0x11f/0x290 [ 349.558054][ C2] ? mem_cgroup_swapin_charge_folio+0x300/0x300 [ 349.560931][ C2] ? __drain_all_pages+0x450/0x450 [ 349.563257][ C2] ? _raw_spin_unlock+0x28/0x40 [ 349.565415][ C2] ? free_unref_page+0x1a3/0x370 [ 349.567492][ C2] __folio_put+0xb6/0x140 [ 349.569382][ C2] free_page_and_swap_cache+0x257/0x2c0 [ 349.571831][ C2] tlb_remove_table_rcu+0x89/0xe0 [ 349.574032][ C2] rcu_core+0x806/0x1ad0 [ 349.575885][ C2] ? rcu_report_dead+0x610/0x610 [ 349.578051][ C2] __do_softirq+0x1d4/0x905 [ 349.580098][ C2] __irq_exit_rcu+0x114/0x190 [ 349.582187][ C2] irq_exit_rcu+0x9/0x20 [ 349.584069][ C2] sysvec_apic_timer_interrupt+0x97/0xc0 [ 349.586503][ C2] [ 349.587820][ C2] [ 349.589150][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 349.591844][ C2] RIP: 0010:crc32c_pcl_intel_update+0x77/0x320 [ 349.594415][ C2] Code: 00 00 fc ff df 48 89 ca 48 89 4c 24 08 48 c1 ea 03 0f b6 14 02 48 89 c8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 80 02 00 00 <48> 8b 04 24 49 c1 ec 03 83 e5 07 31 ff 44 89 e6 89 6c 24 14 8b 58 [ 349.601482][ C2] RSP: 0000:ffffc90022e06c50 EFLAGS: 00000246 [ 349.603660][ C2] RAX: 0000000000000003 RBX: ffffffff8c633728 RCX: ffffc90022e06d48 [ 349.606809][ C2] RDX: 0000000000000000 RSI: ffffffff81481c9d RDI: 0000000000000005 [ 349.610200][ C2] RBP: 0000000000000002 R08: 0000000000000005 R09: 00000000000001ff [ 349.613550][ C2] R10: 0000000000000002 R11: 0000000000000001 R12: 0000000000000002 [ 349.616978][ C2] R13: ffffc90022e06d30 R14: 0000000000000000 R15: ffffc90022e06d40 [ 349.620619][ C2] ? crc32c_pcl_intel_update+0x3d/0x320 [ 349.623120][ C2] crypto_shash_update+0xc8/0x120 [ 349.625484][ C2] ext4_inode_csum+0x247/0x8d0 [ 349.627313][ C2] ? mpage_release_unused_pages+0x870/0x870 [ 349.629486][ C2] ? from_kprojid+0x8e/0xd0 [ 349.631213][ C2] ext4_inode_csum_set+0x16d/0x360 [ 349.633115][ C2] ext4_fill_raw_inode+0x118a/0x1e90 [ 349.635073][ C2] ext4_mark_iloc_dirty+0x52c/0x1b70 [ 349.637023][ C2] ? ext4_reserve_inode_write+0x11c/0x270 [ 349.639133][ C2] __ext4_mark_inode_dirty+0x21f/0x800 [ 349.641149][ C2] ? ext4_expand_extra_isize+0x5e0/0x5e0 [ 349.643231][ C2] ? kmem_cache_alloc+0x34b/0x3f0 [ 349.645123][ C2] ? rcu_is_watching+0x12/0xb0 [ 349.646878][ C2] ? jbd2__journal_start+0xf7/0x850 [ 349.648842][ C2] ? __ext4_journal_start_sb+0x411/0x5d0 [ 349.650958][ C2] ? __ext4_journal_start_sb+0x1fc/0x5d0 [ 349.653379][ C2] ? ext4_dirty_inode+0xa5/0x130 [ 349.655463][ C2] ? ext4_setattr+0x2880/0x2880 [ 349.657235][ C2] ext4_dirty_inode+0xdd/0x130 [ 349.658920][ C2] ? rcu_is_watching+0x12/0xb0 [ 349.660664][ C2] __mark_inode_dirty+0x1e0/0xd60 [ 349.662543][ C2] ? folio_flags.constprop.0+0x53/0x150 [ 349.664567][ C2] generic_write_end+0x354/0x440 [ 349.666370][ C2] ext4_da_write_end+0x19b/0xad0 [ 349.668170][ C2] generic_perform_write+0x316/0x570 [ 349.670136][ C2] ? generic_file_readonly_mmap+0x180/0x180 [ 349.672500][ C2] ? iunique+0x370/0x370 [ 349.674433][ C2] ext4_buffered_write_iter+0x15b/0x460 [ 349.676545][ C2] ext4_file_write_iter+0xbe0/0x1740 [ 349.678415][ C2] ? __kernel_text_address+0xd/0x30 [ 349.680273][ C2] ? __fsnotify_parent+0x49c/0xa60 [ 349.682156][ C2] ? fsnotify+0x16e0/0x16e0 [ 349.683763][ C2] ? ext4_file_mmap+0x6c0/0x6c0 [ 349.685485][ C2] ? stack_trace_save+0x90/0xc0 [ 349.687071][ C2] __kernel_write_iter+0x262/0x7a0 [ 349.688647][ C2] ? vfs_read+0x8a0/0x8a0 [ 349.690213][ C2] ? kasan_save_stack+0x32/0x40 [ 349.691954][ C2] ? arch_do_signal_or_restart+0x79/0x5c0 [ 349.694501][ C2] ? exit_to_user_mode_prepare+0x11f/0x240 [ 349.696564][ C2] ? irqentry_exit_to_user_mode+0x9/0x40 [ 349.698559][ C2] ? asm_exc_stack_segment+0x26/0x30 [ 349.700484][ C2] ? print_usage_bug.part.0+0x660/0x660 [ 349.702768][ C2] __kernel_write+0xcb/0x110 [ 349.704441][ C2] ? __kernel_write_iter+0x7a0/0x7a0 [ 349.706508][ C2] ? find_held_lock+0x2d/0x110 [ 349.708434][ C2] dump_emit+0x21d/0x340 [ 349.709950][ C2] ? __dump_skip+0x5c0/0x5c0 [ 349.711665][ C2] ? __kmem_cache_alloc_node+0x170/0x3f0 [ 349.714151][ C2] elf_core_dump+0x2289/0x36e0 [ 349.715865][ C2] ? load_elf_phdrs+0x210/0x210 [ 349.717591][ C2] ? kvmalloc_node+0xa2/0x1a0 [ 349.719272][ C2] ? kasan_save_stack+0x32/0x40 [ 349.721047][ C2] ? kasan_set_track+0x25/0x30 [ 349.722749][ C2] ? __kasan_kmalloc+0xa3/0xb0 [ 349.724459][ C2] ? __lock_acquire+0x1987/0x5f30 [ 349.726240][ C2] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 349.728361][ C2] do_coredump+0x2f2b/0x4020 [ 349.730002][ C2] ? dump_emit+0x340/0x340 [ 349.731628][ C2] ? irqentry_exit_to_user_mode+0x9/0x40 [ 349.733619][ C2] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 349.735742][ C2] ? find_held_lock+0x2d/0x110 [ 349.737459][ C2] ? intel_hdmi_read_gcp_infoframe+0x310/0x440 [ 349.739725][ C2] ? _raw_spin_unlock_irq+0x23/0x50 [ 349.741673][ C2] get_signal+0x1c02/0x25b0 [ 349.743713][ C2] ? lockdep_hardirqs_on+0x7d/0x100 [ 349.746305][ C2] ? exit_signals+0x910/0x910 [ 349.748144][ C2] arch_do_signal_or_restart+0x79/0x5c0 [ 349.750081][ C2] ? get_sigframe_size+0x10/0x10 [ 349.751862][ C2] exit_to_user_mode_prepare+0x11f/0x240 [ 349.753826][ C2] irqentry_exit_to_user_mode+0x9/0x40 [ 349.755744][ C2] asm_exc_stack_segment+0x26/0x30 [ 349.757544][ C2] RIP: 0033:0x7f81ce88c391 [ 349.759128][ C2] Code: c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 349.765864][ C2] RSP: 002b:0002001000000000 EFLAGS: 00010217 [ 349.768012][ C2] RAX: 0000000000000000 RBX: 00007f81ce9abf80 RCX: 00007f81ce88c389 [ 349.770790][ C2] RDX: 0000000000000000 RSI: 0002001000000000 RDI: 0000000020000000 [ 349.773573][ C2] RBP: 00007f81ce8d7493 R08: 0000000000000000 R09: 0000000000000000 [ 349.776366][ C2] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 349.779165][ C2] R13: 00007ffebd7777ef R14: 00007f81cf568300 R15: 0000000000022000 [ 349.782457][ C2] 23:09:01 executing program 1: syz_clone(0x20000000, 0x0, 0x901000000000000, 0x0, 0x0, 0x0) 23:09:01 executing program 2: syz_clone(0x20000000, 0x0, 0x701000000000000, 0x0, 0x0, 0x0) 23:09:01 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:01 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:01 executing program 1: syz_clone(0x20000000, 0x0, 0xa01000000000000, 0x0, 0x0, 0x0) 23:09:01 executing program 2: syz_clone(0x20000000, 0x0, 0x801000000000000, 0x0, 0x0, 0x0) 23:09:02 executing program 3: syz_clone(0x20000000, 0x0, 0x8000000000000, 0x0, 0x0, 0x0) 23:09:02 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:02 executing program 2: syz_clone(0x20000000, 0x0, 0x801000000000000, 0x0, 0x0, 0x0) 23:09:02 executing program 1: syz_clone(0x20000000, 0x0, 0xb01000000000000, 0x0, 0x0, 0x0) 23:09:02 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:02 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:02 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r0, &(0x7f00000000c0), 0x3) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:02 executing program 2: syz_clone(0x20000000, 0x0, 0x801000000000000, 0x0, 0x0, 0x0) 23:09:03 executing program 3: syz_clone(0x20000000, 0x0, 0x10100000000000, 0x0, 0x0, 0x0) 23:09:03 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) socket$rxrpc(0x21, 0x2, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:03 executing program 2: syz_clone(0x0, 0x0, 0x801000000000000, 0x0, 0x0, 0x0) 23:09:03 executing program 1: syz_clone(0x20000000, 0x0, 0xc01000000000000, 0x0, 0x0, 0x0) 23:09:03 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:03 executing program 2: syz_clone(0x0, 0x0, 0x801000000000000, 0x0, 0x0, 0x0) 23:09:03 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:03 executing program 1: syz_clone(0x20000000, 0x0, 0xd01000000000000, 0x0, 0x0, 0x0) 23:09:03 executing program 3: syz_clone(0x20000000, 0x0, 0x100000000000000, 0x0, 0x0, 0x0) 23:09:03 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:03 executing program 1: syz_clone(0x20000000, 0x0, 0xe01000000000000, 0x0, 0x0, 0x0) 23:09:03 executing program 2: syz_clone(0x0, 0x0, 0x801000000000000, 0x0, 0x0, 0x0) 23:09:03 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:03 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:03 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:03 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:03 executing program 3: syz_clone(0x20000000, 0x0, 0x200000000000000, 0x0, 0x0, 0x0) 23:09:03 executing program 0: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:03 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:03 executing program 1: syz_clone(0x20000000, 0x0, 0xf01000000000000, 0x0, 0x0, 0x0) 23:09:03 executing program 0: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:03 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:03 executing program 0: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:03 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:03 executing program 3: syz_clone(0x20000000, 0x0, 0x400000000000000, 0x0, 0x0, 0x0) 23:09:03 executing program 2: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) 23:09:03 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(r0, 0x0, 0x0, &(0x7f00000001c0)) 23:09:04 executing program 1: syz_clone(0x20000000, 0x0, 0x1001000000000000, 0x0, 0x0, 0x0) 23:09:04 executing program 2: syz_clone(0x20000000, 0x0, 0xe01000000000000, 0x0, 0x0, 0x0) 23:09:04 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(r0, 0x0, 0x0, &(0x7f00000001c0)) 23:09:04 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(r0, 0x0, 0x0, &(0x7f00000001c0)) 23:09:04 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}}, 0x0) 23:09:04 executing program 3: syz_clone(0x20000000, 0x0, 0x500000000000000, 0x0, 0x0, 0x0) 23:09:04 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:04 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:04 executing program 1: syz_clone(0x20000000, 0x0, 0x1100000000000000, 0x0, 0x0, 0x0) 23:09:04 executing program 3: syz_clone(0x20000000, 0x0, 0x60f000000000000, 0x0, 0x0, 0x0) 23:09:04 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:04 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:04 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:04 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) 23:09:04 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:04 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) 23:09:04 executing program 1: syz_clone(0x20000000, 0x0, 0x1101000000000000, 0x0, 0x0, 0x0) 23:09:04 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) 23:09:04 executing program 3: syz_clone(0x20000000, 0x0, 0x700000000000000, 0x0, 0x0, 0x0) 23:09:04 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 23:09:04 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) 23:09:04 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) 23:09:04 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) 23:09:04 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 23:09:04 executing program 1: syz_clone(0x20000000, 0x0, 0x1201000000000000, 0x0, 0x0, 0x0) 23:09:04 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) 23:09:04 executing program 3: syz_clone(0x20000000, 0x0, 0x800000000000000, 0x0, 0x0, 0x0) 23:09:04 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) socket$inet_udplite(0x2, 0x2, 0x88) 23:09:04 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) 23:09:04 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 23:09:04 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r0, &(0x7f00000000c0), 0x3) 23:09:04 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) socket$inet_udplite(0x2, 0x2, 0x88) 23:09:04 executing program 1: syz_clone(0x20000000, 0x0, 0x1301000000000000, 0x0, 0x0, 0x0) 23:09:04 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) socket$rxrpc(0x21, 0x2, 0x2) write$damon_monitor_on(0xffffffffffffffff, &(0x7f00000000c0), 0x3) 23:09:04 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r0, &(0x7f00000000c0), 0x3) socket$inet_udplite(0x2, 0x2, 0x88) 23:09:04 executing program 3: syz_clone(0x20000000, 0x0, 0x1100000000000000, 0x0, 0x0, 0x0) 23:09:04 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) write$damon_monitor_on(0xffffffffffffffff, &(0x7f00000000c0), 0x3) 23:09:04 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) socket$rxrpc(0x21, 0x2, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 23:09:04 executing program 0: write$damon_monitor_on(0xffffffffffffffff, &(0x7f00000000c0), 0x3) 23:09:04 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) socket$rxrpc(0x21, 0x2, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) 23:09:04 executing program 1: syz_clone(0x20000000, 0x0, 0x150e000000000000, 0x0, 0x0, 0x0) 23:09:04 executing program 0: write$damon_monitor_on(0xffffffffffffffff, 0x0, 0x0) 23:09:04 executing program 3: syz_clone(0x20000000, 0x0, 0x1f00000000000000, 0x0, 0x0, 0x0) 23:09:04 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 23:09:04 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) 23:09:04 executing program 0: syz_clone(0x20000000, 0x0, 0x1100000000000000, 0x0, 0x0, 0x0) 23:09:04 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:04 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:05 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:05 executing program 1: syz_clone(0x20000000, 0x0, 0x1f00000000000000, 0x0, 0x0, 0x0) 23:09:05 executing program 3: syz_clone(0x20000000, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0) 23:09:05 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:05 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) 23:09:05 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) 23:09:05 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:05 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 23:09:05 executing program 3: syz_clone(0x20000000, 0x0, 0x540f000000000000, 0x0, 0x0, 0x0) 23:09:05 executing program 1: syz_clone(0x20000000, 0x0, 0x3702000000000000, 0x0, 0x0, 0x0) 23:09:05 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) 23:09:05 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 23:09:05 executing program 3: syz_clone(0x20000000, 0x0, 0x5700000000000000, 0x0, 0x0, 0x0) 23:09:05 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) 23:09:05 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) 23:09:05 executing program 3: syz_clone(0x20000000, 0x0, 0xa803000000000000, 0x0, 0x0, 0x0) 23:09:05 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) 23:09:05 executing program 1: syz_clone(0x20000000, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0) 23:09:05 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) 23:09:05 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) 23:09:05 executing program 3: syz_clone(0x20000000, 0x0, 0xd501000000000000, 0x0, 0x0, 0x0) 23:09:05 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r0, &(0x7f00000000c0), 0x3) 23:09:05 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 23:09:05 executing program 3: syz_clone(0x20000000, 0x0, 0xd601000000000000, 0x0, 0x0, 0x0) 23:09:05 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) socket$rxrpc(0x21, 0x2, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) 23:09:05 executing program 1: syz_clone(0x20000000, 0x0, 0x520e000000000000, 0x0, 0x0, 0x0) 23:09:05 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) 23:09:05 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) socket$rxrpc(0x21, 0x2, 0x2) 23:09:05 executing program 3: syz_clone(0x20000000, 0x0, 0xd701000000000000, 0x0, 0x0, 0x0) 23:09:05 executing program 2: socket$rxrpc(0x21, 0x2, 0x2) 23:09:05 executing program 3: syz_clone(0x20000000, 0x0, 0xd801000000000000, 0x0, 0x0, 0x0) 23:09:05 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000001940)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) 23:09:05 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) 23:09:05 executing program 1: syz_clone(0x20000000, 0x0, 0x550e000000000000, 0x0, 0x0, 0x0) 23:09:05 executing program 2: socket$rxrpc(0x21, 0x2, 0x0) 23:09:05 executing program 3: syz_clone(0x20000000, 0x0, 0xd901000000000000, 0x0, 0x0, 0x0) 23:09:05 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r1, &(0x7f00000000c0), 0x3) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x4], 0x2) 23:09:05 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r0, &(0x7f00000000c0), 0x3) 23:09:06 executing program 2: socket$rxrpc(0x21, 0x2, 0x0) 23:09:06 executing program 3: syz_clone(0x20000000, 0x0, 0xda01000000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 2: socket$rxrpc(0x21, 0x2, 0x0) 23:09:06 executing program 1: syz_clone(0x20000000, 0x0, 0x8601000000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) socket$rxrpc(0x21, 0x2, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) 23:09:06 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r0, &(0x7f00000000c0), 0x3) 23:09:06 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r0, &(0x7f00000000c0), 0x3) 23:09:06 executing program 3: syz_clone(0x20000000, 0x0, 0xdb01000000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) 23:09:06 executing program 1: syz_clone(0x20000000, 0x0, 0xf0ffffff00000000, 0x0, 0x0, 0x0) 23:09:06 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$damon_monitor_on(r0, &(0x7f00000000c0), 0x3) 23:09:06 executing program 0: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) 23:09:06 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) socket$rxrpc(0x21, 0x2, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) 23:09:06 executing program 3: syz_clone(0x20000000, 0x0, 0xdc01000000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) 23:09:06 executing program 0: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x200, 0x0) 23:09:06 executing program 3: syz_clone(0x20000000, 0x0, 0xdd01000000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 1: syz_clone(0x20000000, 0x0, 0xf400000000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 2: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) 23:09:06 executing program 0: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x200, 0x0) 23:09:06 executing program 3: syz_clone(0x20000000, 0x0, 0xdf01000000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 2: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x200, 0x0) 23:09:06 executing program 0: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x200, 0x0) 23:09:06 executing program 2: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x200, 0x0) 23:09:06 executing program 1: syz_clone(0x20000000, 0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0) 23:09:06 executing program 3: syz_clone(0x20000000, 0x0, 0xe001000000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 2: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x200, 0x0) 23:09:06 executing program 0: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 23:09:06 executing program 3: syz_clone(0x20000000, 0x0, 0xe101000000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 2: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 23:09:06 executing program 0: socket$rxrpc(0x21, 0x2, 0x0) 23:09:06 executing program 1: syz_clone(0x20000000, 0x0, 0xfb0e000000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 2: syz_clone(0x20000000, 0x0, 0xd801000000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 0: socket$rxrpc(0x21, 0x2, 0x0) 23:09:06 executing program 3: syz_clone(0x20000000, 0x0, 0xe201000000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 0: socket$rxrpc(0x21, 0x2, 0x0) 23:09:06 executing program 3: syz_clone(0x20000000, 0x0, 0xe202000000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) socket$rxrpc(0x21, 0x2, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) 23:09:06 executing program 1: syz_clone(0x20000000, 0x0, 0xfbffffff00000000, 0x0, 0x0, 0x0) 23:09:06 executing program 0: syz_clone(0x20000000, 0x0, 0x5700000000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 3: syz_clone(0x20000000, 0x0, 0xe301000000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 1: syz_clone(0x20000000, 0x0, 0xfc0e000000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 0: syz_clone(0x20000000, 0x0, 0xe202000000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 3: syz_clone(0x20000000, 0x0, 0xe401000000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 1: syz_clone(0x20000000, 0x0, 0xfd00000000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) socket$rxrpc(0x21, 0x2, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) 23:09:06 executing program 3: syz_clone(0x20000000, 0x0, 0xe501000000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 1: syz_clone(0x20000000, 0x0, 0xfe00000000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) socket$rxrpc(0x21, 0x2, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) 23:09:06 executing program 3: syz_clone(0x20000000, 0x0, 0xe503000000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 1: syz_clone(0x20000000, 0x0, 0xff00000000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) socket$rxrpc(0x21, 0x2, 0x2) 23:09:06 executing program 3: syz_clone(0x20000000, 0x0, 0xe601000000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 0: syz_clone(0x20000000, 0x0, 0xe301000000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) 23:09:06 executing program 3: syz_clone(0x20000000, 0x0, 0xe701000000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 1: syz_clone(0x20000000, 0x0, 0xff0f010000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 2: openat$damon_schemes(0xffffffffffffff9c, 0x0, 0x140, 0x0) 23:09:06 executing program 2: openat$damon_schemes(0xffffffffffffff9c, 0x0, 0x140, 0x0) 23:09:06 executing program 1: syz_clone(0x20000000, 0x0, 0xffefff1f00000000, 0x0, 0x0, 0x0) 23:09:06 executing program 3: syz_clone(0x20000000, 0x0, 0xe801000000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 0: syz_clone(0x20000000, 0x0, 0x540f000000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 1: syz_clone(0x20000000, 0x0, 0xffff5f9b467f0000, 0x0, 0x0, 0x0) 23:09:06 executing program 3: syz_clone(0x20000000, 0x0, 0xe901000000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 2: openat$damon_schemes(0xffffffffffffff9c, 0x0, 0x140, 0x0) 23:09:06 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:09:06 executing program 1: syz_clone(0x20000000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 23:09:06 executing program 3: syz_clone(0x20000000, 0x0, 0xea01000000000000, 0x0, 0x0, 0x0) 23:09:06 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:09:07 executing program 0: syz_clone(0x20000000, 0x0, 0xea01000000000000, 0x0, 0x0, 0x0) 23:09:07 executing program 2: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:09:07 executing program 1: r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x1, 0x4002) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x0, 0x4002) 23:09:07 executing program 3: syz_clone(0x20000000, 0x0, 0xeb01000000000000, 0x0, 0x0, 0x0) 23:09:07 executing program 2: syz_clone(0x20000000, 0x0, 0xe901000000000000, 0x0, 0x0, 0x0) 23:09:07 executing program 3: syz_clone(0x20000000, 0x0, 0xf0ffffff00000000, 0x0, 0x0, 0x0) 23:09:07 executing program 1: r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x1, 0x4002) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x0, 0x4002) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) gettid() (async) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x1, 0x4002) (async) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x0, 0x4002) (async) 23:09:07 executing program 3: syz_clone(0x20000000, 0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0) 23:09:07 executing program 0: syz_clone(0x20000000, 0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0) 23:09:07 executing program 2: r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x1, 0x4002) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x0, 0x4002) 23:09:07 executing program 3: syz_clone(0x20000000, 0x0, 0xfbffffff00000000, 0x0, 0x0, 0x0) 23:09:07 executing program 1: r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = gettid() ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x1, 0x4002) (async) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x0, 0x4002) 23:09:07 executing program 3: syz_clone(0x20000000, 0x0, 0xffefff1f00000000, 0x0, 0x0, 0x0) 23:09:07 executing program 0: r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x1, 0x4002) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x0, 0x4002) 23:09:07 executing program 3: syz_clone(0x20000000, 0x0, 0xffff3fce817f0000, 0x0, 0x0, 0x0) 23:09:07 executing program 2: r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x1, 0x4002) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x0, 0x4002) 23:09:07 executing program 3: syz_clone(0x20000000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 23:09:07 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000000)={0x6}) syz_clone(0x10019280, 0x0, 0x0, 0x0, 0x0, 0x0) 23:09:07 executing program 3: socket(0x28, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@broadcast, @loopback, 0x0}, &(0x7f0000000080)=0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000c00)={'syztnl1\x00', 0x0, 0x8000, 0x8000, 0xffffffff, 0x118b0000, {{0x31, 0x4, 0x3, 0x9, 0xc4, 0x67, 0x0, 0xac, 0x29, 0x0, @empty, @private=0xa010100, {[@lsrr={0x83, 0xb, 0xe5, [@empty, @multicast1]}, @noop, @cipso={0x86, 0x43, 0x0, [{0x3, 0x10, "b2fb1a89bcda1aec7f937930ee7c"}, {0x5, 0x11, "21414b73a13471e5b478540d74b985"}, {0x0, 0xf, "b8814e9c8bb8a6886b3baf1cf5"}, {0x7, 0xd, "3f20444679babecfa32793"}]}, @lsrr={0x83, 0xf, 0x98, [@multicast1, @empty, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x13, 0x99, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x3c, 0xfe, 0x1, 0x8, [{@multicast2, 0x7fff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@rand_addr=0x64010100, 0x4}, {@remote, 0x81}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x5}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}]}, @noop]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0030000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400fcffffff08000100", @ANYRES32=0x0, @ANYBLOB="2002028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000100008040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c00040001000802ff0700003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="f80002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000010400000000000000050003000e000000080004000018000008000600", @ANYRES32=r2, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400980d0000"], 0x3c0}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r9) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r10, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x24, r11, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) sendmsg$IEEE802154_START_REQ(r8, &(0x7f0000000bc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x5b14b66ff4bccdf2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000b40)={0x4c, r11, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x20}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x2}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xc0}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1b}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x13}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000840) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r5) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r6) sendmsg$NLBL_MGMT_C_VERSION(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r12, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r12, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r12, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r12, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r12, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x10}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x804) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000045}, 0x80) 23:09:07 executing program 2: r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x1, 0x4002) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x0, 0x4002) 23:09:07 executing program 2: r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x1, 0x4002) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x0, 0x4002) 23:09:07 executing program 0: r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x1, 0x4002) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x0, 0x4002) 23:09:07 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000000)={0x6}) syz_clone(0x10019280, 0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000000)={0x6}) (async) syz_clone(0x10019280, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 23:09:07 executing program 3: socket(0x28, 0x0, 0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@broadcast, @loopback, 0x0}, &(0x7f0000000080)=0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000c00)={'syztnl1\x00', 0x0, 0x8000, 0x8000, 0xffffffff, 0x118b0000, {{0x31, 0x4, 0x3, 0x9, 0xc4, 0x67, 0x0, 0xac, 0x29, 0x0, @empty, @private=0xa010100, {[@lsrr={0x83, 0xb, 0xe5, [@empty, @multicast1]}, @noop, @cipso={0x86, 0x43, 0x0, [{0x3, 0x10, "b2fb1a89bcda1aec7f937930ee7c"}, {0x5, 0x11, "21414b73a13471e5b478540d74b985"}, {0x0, 0xf, "b8814e9c8bb8a6886b3baf1cf5"}, {0x7, 0xd, "3f20444679babecfa32793"}]}, @lsrr={0x83, 0xf, 0x98, [@multicast1, @empty, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x13, 0x99, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x3c, 0xfe, 0x1, 0x8, [{@multicast2, 0x7fff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@rand_addr=0x64010100, 0x4}, {@remote, 0x81}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x5}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}]}, @noop]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0030000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400fcffffff08000100", @ANYRES32=0x0, @ANYBLOB="2002028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000100008040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c00040001000802ff0700003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="f80002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000010400000000000000050003000e000000080004000018000008000600", @ANYRES32=r2, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400980d0000"], 0x3c0}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r3) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r8) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r9) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r10, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x24, r11, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) sendmsg$IEEE802154_START_REQ(r8, &(0x7f0000000bc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x5b14b66ff4bccdf2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000b40)={0x4c, r11, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x20}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x2}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xc0}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1b}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x13}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000840) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r5) (async) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r6) sendmsg$NLBL_MGMT_C_VERSION(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r12, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) (async, rerun: 64) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r12, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) (async, rerun: 64) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r12, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r12, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) (async) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r12, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x10}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x804) (async) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000045}, 0x80) 23:09:07 executing program 2: r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x1, 0x4002) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x0, 0x4002) 23:09:07 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000000)={0x6}) syz_clone(0x10019280, 0x0, 0x0, 0x0, 0x0, 0x0) 23:09:07 executing program 2: r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x1, 0x4002) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x0, 0x4002) 23:09:07 executing program 1: syz_clone(0xa509e800, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x404c800, &(0x7f0000000000)="4bcc3eea62b1675b13658bf460d7bd8685e5c8afdf97c959e6b38a02", 0x1c, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="558f6f903a1e6739a558121967fdd45606d9a3ca0345bc077e9103599f9470030aaac2b0fb40128dd5da7245b7d6ee2f767c6b0660ad34abdb3cc566fd954cc389d3ba2eec949595c148812125fb7304b67c04a375110b5e33d1607008102eed5bfc1a72f15758d3d6104078a358ce67a73d65a9c349036ec447aeb8464fa5a76e993d66e1491d4b005366ef3431a1d662814886c1b43a94efac5733e44e21b02016cb4f1612a54372a8746537f00a63cb9b391929a07190e80cc048d9") capset(&(0x7f0000000180)={0x20080522, r0}, &(0x7f00000001c0)={0x3, 0x6, 0xffffffff, 0x7fffffff, 0x6, 0x40c}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000280)={r1, 0xe4c, 0x10000}) 23:09:07 executing program 0: r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x1, 0x4002) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x0, 0x4002) 23:09:07 executing program 2: r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x1, 0x4002) 23:09:07 executing program 1: syz_clone(0xa509e800, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_clone(0x404c800, &(0x7f0000000000)="4bcc3eea62b1675b13658bf460d7bd8685e5c8afdf97c959e6b38a02", 0x1c, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="558f6f903a1e6739a558121967fdd45606d9a3ca0345bc077e9103599f9470030aaac2b0fb40128dd5da7245b7d6ee2f767c6b0660ad34abdb3cc566fd954cc389d3ba2eec949595c148812125fb7304b67c04a375110b5e33d1607008102eed5bfc1a72f15758d3d6104078a358ce67a73d65a9c349036ec447aeb8464fa5a76e993d66e1491d4b005366ef3431a1d662814886c1b43a94efac5733e44e21b02016cb4f1612a54372a8746537f00a63cb9b391929a07190e80cc048d9") capset(&(0x7f0000000180)={0x20080522, r0}, &(0x7f00000001c0)={0x3, 0x6, 0xffffffff, 0x7fffffff, 0x6, 0x40c}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000280)={r1, 0xe4c, 0x10000}) 23:09:08 executing program 3: socket(0x28, 0x0, 0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@broadcast, @loopback, 0x0}, &(0x7f0000000080)=0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000c00)={'syztnl1\x00', 0x0, 0x8000, 0x8000, 0xffffffff, 0x118b0000, {{0x31, 0x4, 0x3, 0x9, 0xc4, 0x67, 0x0, 0xac, 0x29, 0x0, @empty, @private=0xa010100, {[@lsrr={0x83, 0xb, 0xe5, [@empty, @multicast1]}, @noop, @cipso={0x86, 0x43, 0x0, [{0x3, 0x10, "b2fb1a89bcda1aec7f937930ee7c"}, {0x5, 0x11, "21414b73a13471e5b478540d74b985"}, {0x0, 0xf, "b8814e9c8bb8a6886b3baf1cf5"}, {0x7, 0xd, "3f20444679babecfa32793"}]}, @lsrr={0x83, 0xf, 0x98, [@multicast1, @empty, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x13, 0x99, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x3c, 0xfe, 0x1, 0x8, [{@multicast2, 0x7fff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@rand_addr=0x64010100, 0x4}, {@remote, 0x81}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x5}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}]}, @noop]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0030000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400fcffffff08000100", @ANYRES32=0x0, @ANYBLOB="2002028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000100008040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c00040001000802ff0700003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="f80002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000010400000000000000050003000e000000080004000018000008000600", @ANYRES32=r2, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400980d0000"], 0x3c0}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async, rerun: 64) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r4) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}}, 0x8000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r8) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r9) (rerun: 64) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r10, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x24, r11, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) (async) sendmsg$IEEE802154_START_REQ(r8, &(0x7f0000000bc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x5b14b66ff4bccdf2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000b40)={0x4c, r11, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x20}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x2}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xc0}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1b}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x13}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000840) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r5) (async) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r6) sendmsg$NLBL_MGMT_C_VERSION(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r12, 0x8, 0x0, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r12, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x4810) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r12, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4004090) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r12, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) (async) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r12, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x10}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x804) (async) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000045}, 0x80) 23:09:08 executing program 1: syz_clone(0xa509e800, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x404c800, &(0x7f0000000000)="4bcc3eea62b1675b13658bf460d7bd8685e5c8afdf97c959e6b38a02", 0x1c, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="558f6f903a1e6739a558121967fdd45606d9a3ca0345bc077e9103599f9470030aaac2b0fb40128dd5da7245b7d6ee2f767c6b0660ad34abdb3cc566fd954cc389d3ba2eec949595c148812125fb7304b67c04a375110b5e33d1607008102eed5bfc1a72f15758d3d6104078a358ce67a73d65a9c349036ec447aeb8464fa5a76e993d66e1491d4b005366ef3431a1d662814886c1b43a94efac5733e44e21b02016cb4f1612a54372a8746537f00a63cb9b391929a07190e80cc048d9") capset(&(0x7f0000000180)={0x20080522, r0}, &(0x7f00000001c0)={0x3, 0x6, 0xffffffff, 0x7fffffff, 0x6, 0x40c}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000280)={r1, 0xe4c, 0x10000}) 23:09:08 executing program 0: r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x1, 0x4002) 23:09:08 executing program 2: syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() 23:09:08 executing program 0: r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x1, 0x4002) 23:09:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001100)={&(0x7f0000000100)={0x24, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}}, 0x20004000) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:09:08 executing program 2: gettid() 23:09:08 executing program 0: ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x1, 0x4002) 23:09:08 executing program 3: syz_clone(0x73222400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r1 = getpid() tkill(r1, 0x27) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@getsa={0x130, 0x12, 0x100, 0x70bd29, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x43}, 0x4d2, 0xa, 0x3c}, [@policy={0xac, 0x7, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0x4e20, 0x0, 0x4e20, 0x40, 0xa, 0x20, 0x10, 0x0, 0x0, 0xee01}, {0x7fffffffffffffff, 0x5, 0x0, 0xffff, 0x1f, 0x0, 0x7, 0x10001}, {0x200, 0x6, 0x1, 0x101}, 0x10000, 0x6e6bbf, 0x2, 0x0, 0x3, 0x1}}, @policy_type={0xa}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e22, 0x4e24, @in6=@remote}}, @lifetime_val={0x24, 0x9, {0x62, 0x8, 0x4, 0x3}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd25, 0x7}}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) 23:09:08 executing program 0: ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x0, 0x4002) 23:09:08 executing program 2: r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x1, 0x4002) 23:09:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001100)={&(0x7f0000000100)={0x24, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}}, 0x20004000) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r1) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001100)={&(0x7f0000000100)={0x24, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}}, 0x20004000) (async) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 23:09:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001100)={&(0x7f0000000100)={0x24, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}}, 0x20004000) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:09:08 executing program 2: syz_clone(0xa509e800, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x404c800, &(0x7f0000000000)="4bcc3eea62b1675b13658bf460d7bd8685e5c8afdf97c959e6b38a02", 0x1c, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="558f6f903a1e6739a558121967fdd45606d9a3ca0345bc077e9103599f9470030aaac2b0fb40128dd5da7245b7d6ee2f767c6b0660ad34abdb3cc566fd954cc389d3ba2eec949595c148812125fb7304b67c04a375110b5e33d1607008102eed5bfc1a72f15758d3d6104078a358ce67a73d65a9c349036ec447aeb8464fa5a76e993d66e1491d4b005366ef3431a1d662814886c1b43a94efac5733e44e21b02016cb4f1612a54372a8746537f00a63cb9b391929a07190e80cc048d9") capset(&(0x7f0000000180)={0x20080522, r0}, &(0x7f00000001c0)={0x3, 0x6, 0xffffffff, 0x7fffffff, 0x6, 0x40c}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000280)={r1, 0xe4c, 0x10000}) 23:09:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001100)={&(0x7f0000000100)={0x24, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}}, 0x20004000) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:09:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001100)={&(0x7f0000000100)={0x24, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}}, 0x20004000) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:09:08 executing program 3: syz_clone(0x73222400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x73222400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r1 = getpid() tkill(r1, 0x27) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@getsa={0x130, 0x12, 0x100, 0x70bd29, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x43}, 0x4d2, 0xa, 0x3c}, [@policy={0xac, 0x7, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0x4e20, 0x0, 0x4e20, 0x40, 0xa, 0x20, 0x10, 0x0, 0x0, 0xee01}, {0x7fffffffffffffff, 0x5, 0x0, 0xffff, 0x1f, 0x0, 0x7, 0x10001}, {0x200, 0x6, 0x1, 0x101}, 0x10000, 0x6e6bbf, 0x2, 0x0, 0x3, 0x1}}, @policy_type={0xa}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e22, 0x4e24, @in6=@remote}}, @lifetime_val={0x24, 0x9, {0x62, 0x8, 0x4, 0x3}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd25, 0x7}}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) (async) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@getsa={0x130, 0x12, 0x100, 0x70bd29, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x43}, 0x4d2, 0xa, 0x3c}, [@policy={0xac, 0x7, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0x4e20, 0x0, 0x4e20, 0x40, 0xa, 0x20, 0x10, 0x0, 0x0, 0xee01}, {0x7fffffffffffffff, 0x5, 0x0, 0xffff, 0x1f, 0x0, 0x7, 0x10001}, {0x200, 0x6, 0x1, 0x101}, 0x10000, 0x6e6bbf, 0x2, 0x0, 0x3, 0x1}}, @policy_type={0xa}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e22, 0x4e24, @in6=@remote}}, @lifetime_val={0x24, 0x9, {0x62, 0x8, 0x4, 0x3}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd25, 0x7}}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) 23:09:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001100)={&(0x7f0000000100)={0x24, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}}, 0x20004000) 23:09:08 executing program 2: syz_clone(0xa509e800, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x404c800, &(0x7f0000000000)="4bcc3eea62b1675b13658bf460d7bd8685e5c8afdf97c959e6b38a02", 0x1c, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="558f6f903a1e6739a558121967fdd45606d9a3ca0345bc077e9103599f9470030aaac2b0fb40128dd5da7245b7d6ee2f767c6b0660ad34abdb3cc566fd954cc389d3ba2eec949595c148812125fb7304b67c04a375110b5e33d1607008102eed5bfc1a72f15758d3d6104078a358ce67a73d65a9c349036ec447aeb8464fa5a76e993d66e1491d4b005366ef3431a1d662814886c1b43a94efac5733e44e21b02016cb4f1612a54372a8746537f00a63cb9b391929a07190e80cc048d9") capset(&(0x7f0000000180)={0x20080522, r0}, &(0x7f00000001c0)={0x3, 0x6, 0xffffffff, 0x7fffffff, 0x6, 0x40c}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000280)={r1, 0xe4c, 0x10000}) 23:09:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r1) (rerun: 32) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001100)={&(0x7f0000000100)={0x24, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}}, 0x20004000) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:09:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001100)={&(0x7f0000000100)={0x24, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) 23:09:09 executing program 2: syz_clone(0xa509e800, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x404c800, &(0x7f0000000000)="4bcc3eea62b1675b13658bf460d7bd8685e5c8afdf97c959e6b38a02", 0x1c, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="558f6f903a1e6739a558121967fdd45606d9a3ca0345bc077e9103599f9470030aaac2b0fb40128dd5da7245b7d6ee2f767c6b0660ad34abdb3cc566fd954cc389d3ba2eec949595c148812125fb7304b67c04a375110b5e33d1607008102eed5bfc1a72f15758d3d6104078a358ce67a73d65a9c349036ec447aeb8464fa5a76e993d66e1491d4b005366ef3431a1d662814886c1b43a94efac5733e44e21b02016cb4f1612a54372a8746537f00a63cb9b391929a07190e80cc048d9") capset(&(0x7f0000000180)={0x20080522, r0}, &(0x7f00000001c0)={0x3, 0x6, 0xffffffff, 0x7fffffff, 0x6, 0x40c}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000280)={r1, 0xe4c, 0x10000}) 23:09:09 executing program 2: syz_clone(0xa509e800, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x404c800, &(0x7f0000000000)="4bcc3eea62b1675b13658bf460d7bd8685e5c8afdf97c959e6b38a02", 0x1c, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="558f6f903a1e6739a558121967fdd45606d9a3ca0345bc077e9103599f9470030aaac2b0fb40128dd5da7245b7d6ee2f767c6b0660ad34abdb3cc566fd954cc389d3ba2eec949595c148812125fb7304b67c04a375110b5e33d1607008102eed5bfc1a72f15758d3d6104078a358ce67a73d65a9c349036ec447aeb8464fa5a76e993d66e1491d4b005366ef3431a1d662814886c1b43a94efac5733e44e21b02016cb4f1612a54372a8746537f00a63cb9b391929a07190e80cc048d9") capset(&(0x7f0000000180)={0x20080522, r0}, &(0x7f00000001c0)={0x3, 0x6, 0xffffffff, 0x7fffffff, 0x6, 0x40c}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)) 23:09:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r1) 23:09:09 executing program 3: syz_clone(0x73222400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) r1 = getpid() tkill(r1, 0x27) (async) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@getsa={0x130, 0x12, 0x100, 0x70bd29, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x43}, 0x4d2, 0xa, 0x3c}, [@policy={0xac, 0x7, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0x4e20, 0x0, 0x4e20, 0x40, 0xa, 0x20, 0x10, 0x0, 0x0, 0xee01}, {0x7fffffffffffffff, 0x5, 0x0, 0xffff, 0x1f, 0x0, 0x7, 0x10001}, {0x200, 0x6, 0x1, 0x101}, 0x10000, 0x6e6bbf, 0x2, 0x0, 0x3, 0x1}}, @policy_type={0xa}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e22, 0x4e24, @in6=@remote}}, @lifetime_val={0x24, 0x9, {0x62, 0x8, 0x4, 0x3}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd25, 0x7}}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) 23:09:09 executing program 2: syz_clone(0xa509e800, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x404c800, &(0x7f0000000000)="4bcc3eea62b1675b13658bf460d7bd8685e5c8afdf97c959e6b38a02", 0x1c, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="558f6f903a1e6739a558121967fdd45606d9a3ca0345bc077e9103599f9470030aaac2b0fb40128dd5da7245b7d6ee2f767c6b0660ad34abdb3cc566fd954cc389d3ba2eec949595c148812125fb7304b67c04a375110b5e33d1607008102eed5bfc1a72f15758d3d6104078a358ce67a73d65a9c349036ec447aeb8464fa5a76e993d66e1491d4b005366ef3431a1d662814886c1b43a94efac5733e44e21b02016cb4f1612a54372a8746537f00a63cb9b391929a07190e80cc048d9") capset(&(0x7f0000000180)={0x20080522, r0}, &(0x7f00000001c0)={0x3, 0x6, 0xffffffff, 0x7fffffff, 0x6, 0x40c}) 23:09:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 23:09:09 executing program 2: syz_clone(0xa509e800, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)={0x3, 0x6, 0xffffffff, 0x7fffffff, 0x6, 0x40c}) 23:09:09 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000000)) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:09:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 23:09:09 executing program 2: capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)={0x3, 0x6, 0xffffffff, 0x7fffffff, 0x6, 0x40c}) 23:09:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) 23:09:10 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r0, 0xb, &(0x7f0000000000)={0xffffffffffffffff, 0x101}, &(0x7f0000000040)) 23:09:10 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000000)) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000000)) (async) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 23:09:10 executing program 2: capset(0x0, &(0x7f00000001c0)={0x3, 0x6, 0xffffffff, 0x7fffffff, 0x6, 0x40c}) 23:09:10 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 23:09:10 executing program 2: capset(0x0, &(0x7f00000001c0)={0x3, 0x6, 0xffffffff, 0x7fffffff, 0x6, 0x40c}) 23:09:10 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000000)) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:09:10 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r0, 0xb, &(0x7f0000000000)={0xffffffffffffffff, 0x101}, &(0x7f0000000040)) 23:09:10 executing program 2: capset(0x0, &(0x7f00000001c0)={0x3, 0x6, 0xffffffff, 0x7fffffff, 0x6, 0x40c}) 23:09:10 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r0, 0xb, &(0x7f0000000000)={0xffffffffffffffff, 0x101}, &(0x7f0000000040)) 23:09:10 executing program 2: capset(&(0x7f0000000180), &(0x7f00000001c0)={0x3, 0x6, 0xffffffff, 0x7fffffff, 0x6, 0x40c}) 23:09:10 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000000)) (async) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000000)) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:09:10 executing program 2: capset(&(0x7f0000000180), &(0x7f00000001c0)={0x3, 0x6, 0xffffffff, 0x7fffffff, 0x6, 0x40c}) 23:09:10 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r0, 0xb, &(0x7f0000000000)={0xffffffffffffffff, 0x101}, &(0x7f0000000040)) 23:09:10 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r0, 0xb, &(0x7f0000000000)={0xffffffffffffffff, 0x101}, &(0x7f0000000040)) 23:09:10 executing program 2: capset(&(0x7f0000000180), &(0x7f00000001c0)={0x3, 0x6, 0xffffffff, 0x7fffffff, 0x6, 0x40c}) 23:09:10 executing program 3: r0 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8, 0x7, 0x1, 0x7fff, {{0xf, 0x4, 0x1, 0x5, 0x3c, 0x65, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @remote, {[@ssrr={0x89, 0xf, 0x41, [@local, @remote, @multicast2]}, @lsrr={0x83, 0xf, 0xda, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty]}, @generic={0x88, 0x5, "a7c341"}, @ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) write$damon_schemes(r4, &(0x7f00000004c0)={0x3, 0x3, 0x20, 0x20, 0x0, 0xfffffffffffffc01, 0x6}, 0x66) connect$rxrpc(r4, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000400)={'syztnl1\x00', r2, 0x8000, 0x10, 0x100, 0xffffffff, {{0x24, 0x4, 0x3, 0x3, 0x90, 0x65, 0x0, 0x20, 0x2b, 0x0, @broadcast, @empty, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0xe, 0x0, 0x8, [0x6, 0x7, 0x3, 0xffffffff]}, @end, @noop, @end, @end, @rr={0x7, 0x17, 0x93, [@dev={0xac, 0x14, 0x14, 0x2f}, @multicast2, @empty, @loopback, @multicast2]}, @timestamp_prespec={0x44, 0x34, 0xf7, 0x3, 0x7, [{@multicast2, 0x2}, {@loopback, 0xb21}, {@remote, 0x7}, {@broadcast, 0x1}, {@multicast1}, {@private=0xa010101, 0x4}]}, @timestamp={0x44, 0x14, 0x44, 0x0, 0x9, [0x7f, 0x5, 0x7, 0x8001]}]}}}}}) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r5, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000300)={0x1, 0x4, 0x7, 0x3, @vifc_lcl_addr=@local, @private=0xa010101}, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) connect$rxrpc(r3, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) syz_genetlink_get_family_id$team(&(0x7f0000000040), r3) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000829bd7000fddbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="500002804c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004000400200908000000050084047d000000050008030800000008000100", @ANYRES32=0x0, @ANYBLOB="b80002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000600", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="ac00028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000000030003000000080004008866000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ff00000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040001000000"], 0x1e0}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:09:10 executing program 1: r0 = syz_clone(0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000040)={0x0, 0x3, 0x3ff, 0x101, 0x152, 0x8}) 23:09:10 executing program 2: capset(&(0x7f0000000180)={0x20080522}, 0x0) 23:09:10 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r0, 0xb, &(0x7f0000000000)={0xffffffffffffffff, 0x101}, &(0x7f0000000040)) 23:09:10 executing program 1: r0 = syz_clone(0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) (async) capset(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000040)={0x0, 0x3, 0x3ff, 0x101, 0x152, 0x8}) 23:09:10 executing program 2: capset(&(0x7f0000000180)={0x20080522}, 0x0) 23:09:10 executing program 3: r0 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8, 0x7, 0x1, 0x7fff, {{0xf, 0x4, 0x1, 0x5, 0x3c, 0x65, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @remote, {[@ssrr={0x89, 0xf, 0x41, [@local, @remote, @multicast2]}, @lsrr={0x83, 0xf, 0xda, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty]}, @generic={0x88, 0x5, "a7c341"}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8, 0x7, 0x1, 0x7fff, {{0xf, 0x4, 0x1, 0x5, 0x3c, 0x65, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @remote, {[@ssrr={0x89, 0xf, 0x41, [@local, @remote, @multicast2]}, @lsrr={0x83, 0xf, 0xda, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty]}, @generic={0x88, 0x5, "a7c341"}, @ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) write$damon_schemes(r4, &(0x7f00000004c0)={0x3, 0x3, 0x20, 0x20, 0x0, 0xfffffffffffffc01, 0x6}, 0x66) connect$rxrpc(r4, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) connect$rxrpc(r4, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000400)={'syztnl1\x00', r2, 0x8000, 0x10, 0x100, 0xffffffff, {{0x24, 0x4, 0x3, 0x3, 0x90, 0x65, 0x0, 0x20, 0x2b, 0x0, @broadcast, @empty, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0xe, 0x0, 0x8, [0x6, 0x7, 0x3, 0xffffffff]}, @end, @noop, @end, @end, @rr={0x7, 0x17, 0x93, [@dev={0xac, 0x14, 0x14, 0x2f}, @multicast2, @empty, @loopback, @multicast2]}, @timestamp_prespec={0x44, 0x34, 0xf7, 0x3, 0x7, [{@multicast2, 0x2}, {@loopback, 0xb21}, {@remote, 0x7}, {@broadcast, 0x1}, {@multicast1}, {@private=0xa010101, 0x4}]}, @timestamp={0x44, 0x14, 0x44, 0x0, 0x9, [0x7f, 0x5, 0x7, 0x8001]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000400)={'syztnl1\x00', r2, 0x8000, 0x10, 0x100, 0xffffffff, {{0x24, 0x4, 0x3, 0x3, 0x90, 0x65, 0x0, 0x20, 0x2b, 0x0, @broadcast, @empty, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0xe, 0x0, 0x8, [0x6, 0x7, 0x3, 0xffffffff]}, @end, @noop, @end, @end, @rr={0x7, 0x17, 0x93, [@dev={0xac, 0x14, 0x14, 0x2f}, @multicast2, @empty, @loopback, @multicast2]}, @timestamp_prespec={0x44, 0x34, 0xf7, 0x3, 0x7, [{@multicast2, 0x2}, {@loopback, 0xb21}, {@remote, 0x7}, {@broadcast, 0x1}, {@multicast1}, {@private=0xa010101, 0x4}]}, @timestamp={0x44, 0x14, 0x44, 0x0, 0x9, [0x7f, 0x5, 0x7, 0x8001]}]}}}}}) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r5, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000300)={0x1, 0x4, 0x7, 0x3, @vifc_lcl_addr=@local, @private=0xa010101}, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) connect$rxrpc(r3, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) syz_genetlink_get_family_id$team(&(0x7f0000000040), r3) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000829bd7000fddbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="500002804c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004000400200908000000050084047d000000050008030800000008000100", @ANYRES32=0x0, @ANYBLOB="b80002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000600", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="ac00028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000000030003000000080004008866000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ff00000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040001000000"], 0x1e0}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000829bd7000fddbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="500002804c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004000400200908000000050084047d000000050008030800000008000100", @ANYRES32=0x0, @ANYBLOB="b80002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000600", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="ac00028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000000030003000000080004008866000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ff00000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040001000000"], 0x1e0}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:09:10 executing program 2: capset(&(0x7f0000000180)={0x20080522}, 0x0) 23:09:10 executing program 1: r0 = syz_clone(0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) (async) capset(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000040)={0x0, 0x3, 0x3ff, 0x101, 0x152, 0x8}) 23:09:10 executing program 0: prlimit64(0x0, 0xb, &(0x7f0000000000)={0xffffffffffffffff, 0x101}, &(0x7f0000000040)) 23:09:10 executing program 2: capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)={0x0, 0x6, 0xffffffff, 0x7fffffff, 0x6, 0x40c}) 23:09:10 executing program 1: getuid() 23:09:10 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0x101}, &(0x7f0000000040)) 23:09:10 executing program 2: capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)={0x0, 0x0, 0xffffffff, 0x7fffffff, 0x6, 0x40c}) 23:09:10 executing program 3: r0 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8, 0x7, 0x1, 0x7fff, {{0xf, 0x4, 0x1, 0x5, 0x3c, 0x65, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @remote, {[@ssrr={0x89, 0xf, 0x41, [@local, @remote, @multicast2]}, @lsrr={0x83, 0xf, 0xda, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty]}, @generic={0x88, 0x5, "a7c341"}, @ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) write$damon_schemes(r4, &(0x7f00000004c0)={0x3, 0x3, 0x20, 0x20, 0x0, 0xfffffffffffffc01, 0x6}, 0x66) connect$rxrpc(r4, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000400)={'syztnl1\x00', r2, 0x8000, 0x10, 0x100, 0xffffffff, {{0x24, 0x4, 0x3, 0x3, 0x90, 0x65, 0x0, 0x20, 0x2b, 0x0, @broadcast, @empty, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0xe, 0x0, 0x8, [0x6, 0x7, 0x3, 0xffffffff]}, @end, @noop, @end, @end, @rr={0x7, 0x17, 0x93, [@dev={0xac, 0x14, 0x14, 0x2f}, @multicast2, @empty, @loopback, @multicast2]}, @timestamp_prespec={0x44, 0x34, 0xf7, 0x3, 0x7, [{@multicast2, 0x2}, {@loopback, 0xb21}, {@remote, 0x7}, {@broadcast, 0x1}, {@multicast1}, {@private=0xa010101, 0x4}]}, @timestamp={0x44, 0x14, 0x44, 0x0, 0x9, [0x7f, 0x5, 0x7, 0x8001]}]}}}}}) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) connect$rxrpc(r5, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000300)={0x1, 0x4, 0x7, 0x3, @vifc_lcl_addr=@local, @private=0xa010101}, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) connect$rxrpc(r3, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) syz_genetlink_get_family_id$team(&(0x7f0000000040), r3) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000829bd7000fddbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="500002804c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004000400200908000000050084047d000000050008030800000008000100", @ANYRES32=0x0, @ANYBLOB="b80002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000600", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="ac00028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000000030003000000080004008866000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ff00000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040001000000"], 0x1e0}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8, 0x7, 0x1, 0x7fff, {{0xf, 0x4, 0x1, 0x5, 0x3c, 0x65, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @remote, {[@ssrr={0x89, 0xf, 0x41, [@local, @remote, @multicast2]}, @lsrr={0x83, 0xf, 0xda, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty]}, @generic={0x88, 0x5, "a7c341"}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) write$damon_schemes(r4, &(0x7f00000004c0)={0x3, 0x3, 0x20, 0x20, 0x0, 0xfffffffffffffc01, 0x6}, 0x66) (async) connect$rxrpc(r4, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000400)={'syztnl1\x00', r2, 0x8000, 0x10, 0x100, 0xffffffff, {{0x24, 0x4, 0x3, 0x3, 0x90, 0x65, 0x0, 0x20, 0x2b, 0x0, @broadcast, @empty, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0xe, 0x0, 0x8, [0x6, 0x7, 0x3, 0xffffffff]}, @end, @noop, @end, @end, @rr={0x7, 0x17, 0x93, [@dev={0xac, 0x14, 0x14, 0x2f}, @multicast2, @empty, @loopback, @multicast2]}, @timestamp_prespec={0x44, 0x34, 0xf7, 0x3, 0x7, [{@multicast2, 0x2}, {@loopback, 0xb21}, {@remote, 0x7}, {@broadcast, 0x1}, {@multicast1}, {@private=0xa010101, 0x4}]}, @timestamp={0x44, 0x14, 0x44, 0x0, 0x9, [0x7f, 0x5, 0x7, 0x8001]}]}}}}}) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) (async) connect$rxrpc(r5, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000300)={0x1, 0x4, 0x7, 0x3, @vifc_lcl_addr=@local, @private=0xa010101}, 0x10) (async) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async) connect$rxrpc(r3, &(0x7f0000001940)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) syz_genetlink_get_family_id$team(&(0x7f0000000040), r3) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000829bd7000fddbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="500002804c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004000400200908000000050084047d000000050008030800000008000100", @ANYRES32=0x0, @ANYBLOB="b80002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000600", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="ac00028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000000030003000000080004008866000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ff00000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000 VM DIAGNOSIS: 23:08:58 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88806b636ce8 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000001 RDI=ffffffff8c130a00 RBP=0000000000000000 RSP=ffffc90007467118 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000094001 R12=0000000000001000 R13=0000000000001000 R14=ffffea00049b5080 R15=ffffc900074675a8 RIP=ffffffff816c97ac RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f469c721700 ffffffff 00c00000 GS =0000 ffff88806b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5675b831b8 CR3=00000000174ce000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000040ce000000000000 XMM03=32322035312e322e302e303120323532 XMM04=00000000000000050000000000a4fb49 XMM05=00000000000000000000000001f06210 XMM06=00000000000000050000000000a4fb4e XMM07=00000000000000000000000001f0620e XMM08=00000000000000060000000000a52559 XMM09=00000000000000000000000001f0620b XMM10=00000000000000030000000000a4c7d9 XMM11=00000000000000000000000001f0620c XMM12=00000000000000060000000000a523e5 XMM13=00000000000000000000000001f0620a XMM14=00000000000000040000000000a4db3f XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00007feebfa53498 RBX=00007feebfa48a50 RCX=ffffffff81c04e12 RDX=ffffffff81c04e72 RSI=00007feebfa48a58 RDI=ffffffff81c04e72 RBP=00007feebfa378e8 RSP=00007ffc9dfc37f0 R8 =00007feebfa591d0 R9 =00000000816fa932 R10=00007ffc9dfc3af0 R11=0000000000000246 R12=00007feebfa378e0 R13=00007feebfa48a50 R14=00007feebfa378d8 R15=000000000000001a RIP=00007feec0039348 RFL=00000206 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555557303400 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d523000 CR3=000000001d5a5000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007feec018a7c000007feec018a7c8 XMM02=00007feec018a7e000007feec018a7c0 XMM03=00007feec018a7c800007feec018a7c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=000000000000007d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff848733e5 RDI=ffffffff920c64e0 RBP=ffffffff920c64a0 RSP=ffffc90000aa83f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=7369736e6f636e69 R12=0000000000000000 R13=000000000000007d R14=ffffffff84873380 R15=0000000000000000 RIP=ffffffff8487340f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f81cf568700 ffffffff 00c00000 GS =0000 ffff88806b800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f81ce88c389 CR3=000000004e419000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=0000000000000000004c4ae1fa01908e XMM02=000000000000000021f2ea38aee0e0a8 XMM03=035fb1176b10594b433216ec22649c29 XMM04=49053dc6426cb6539fbd9b7221fefcf0 XMM05=09db2c01b1c1cb72d1d7a2d458f0086e XMM06=50ab2163c35e7b5cd8c4303eb7eba439 XMM07=5be40f7fc8c6f6349f8f3bd52109ca2f XMM08=0c0d0e0f08090a0b0405060700010203 XMM09=ee1c5a6f73019b88b69e0d0494afd832 XMM10=6add7f591e63ab88f3bc128088642f9f XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff89ff2517 RDX=ffff8880152bdac0 RSI=0000000000000000 RDI=0000000000000000 RBP=ffff8880176e2850 RSP=ffffc90004d07b20 R8 =0000000000000000 R9 =0000000000000009 R10=0000000000000001 R11=0000000000000000 R12=ffff8880176e2800 R13=0000000000000009 R14=0000000000000000 R15=ffffc90004d07cd8 RIP=ffffffff89ff2517 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555565d4400 ffffffff 00c00000 GS =0000 ffff88806b900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5675b0e8c0 CR3=0000000017d23000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000