last executing test programs: 3m27.165061565s ago: executing program 1 (id=58): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000000c0), r0) 3m26.987402515s ago: executing program 1 (id=59): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000000c0), r0) (fail_nth: 1) 3m26.343147302s ago: executing program 1 (id=64): open(&(0x7f0000000100)='./file0\x00', 0x201c2, 0x10e) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x15, 0x5, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x9, 0x101, 0x100000001, 0x63, 0x0, 0x0, 0x0, 0x1000000006, 0x2, 0x8, 0x5, 0x7fffffff, 0x5, 0x7, 0x9, 0x61, 0x103}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x7a001, 0x0) prctl$auto(0x3a, 0x1, 0x0, 0x0, 0x0) socket(0x29, 0x5, 0xffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x3f, 0x7ffffffffffffffc, 0xc) ioperm$auto(0xde, 0x9, 0x100402) sendmsg$auto_SMC_NETLINK_ADD_UEID(0xffffffffffffffff, 0x0, 0x8092) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bridge_slave_1/base_reachable_time_ms\x00', 0x80001, 0x0) prctl$auto(0x23, 0x5, 0x2008, 0x0, 0x0) memfd_create$auto(&(0x7f0000000080)='^-.(\\&^\xd5\'@!],!\\\'!\x00', 0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/tls_stat\x00', 0x100, 0x0) socket(0x2, 0x1, 0x0) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto(0x0, 0xffffffffffff0001, 0x17) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendfile$auto(0x6, 0x3, 0x0, 0xfffffdef) 3m25.075105426s ago: executing program 1 (id=70): mmap$auto(0x1fffffff, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x28240, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) acct$auto(&(0x7f0000000000)='&].+(!\x00') 3m24.851189911s ago: executing program 1 (id=73): r0 = socket(0x2, 0x2, 0x88) splice$auto(r0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x1a1382, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x2, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video63\x00', 0x80800, 0x0) close_range$auto(0x2, 0x8, 0x0) 3m24.686195817s ago: executing program 1 (id=75): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) write$auto_mtd_fops_mtdchar(0xffffffffffffffff, &(0x7f0000000040)="05614c6bffffffffffffff7fd47677f90900dd7f8b34109102052a54545bde2b2b47235809467a16f7f9e88a64786c4597", 0x31) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000140), 0xffffffffffffffff) write$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x4, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212cbd8966efb91b2e4f1f000008000300", @ANYRES32=r2], 0x28}}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000000) mmap$auto(0x0, 0x18, 0xffb, 0x3ff, 0x3, 0x0) move_pages$auto(0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x2) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(r4, 0x0, 0x1, 0x4000008, 0x0, 0x9) fchownat$auto(0x2, &(0x7f0000000080)='\x00', 0x4, 0x8001, 0x1000) io_uring_enter$auto(0x3, 0x7, 0x2688, 0xe, 0x0, 0x7) socket(0x10, 0x4, 0x5) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket(0x2, 0x2, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x20b42, 0x0) write$auto_snd_pcm_oss_f_reg_pcm_oss(r5, &(0x7f0000000280)="c2", 0x1) ioctl$auto_SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000080)=0x10000) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$auto(0x0, 0x42020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0xff) 3m9.367346704s ago: executing program 32 (id=75): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) write$auto_mtd_fops_mtdchar(0xffffffffffffffff, &(0x7f0000000040)="05614c6bffffffffffffff7fd47677f90900dd7f8b34109102052a54545bde2b2b47235809467a16f7f9e88a64786c4597", 0x31) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000140), 0xffffffffffffffff) write$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x4, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212cbd8966efb91b2e4f1f000008000300", @ANYRES32=r2], 0x28}}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000000) mmap$auto(0x0, 0x18, 0xffb, 0x3ff, 0x3, 0x0) move_pages$auto(0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x2) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(r4, 0x0, 0x1, 0x4000008, 0x0, 0x9) fchownat$auto(0x2, &(0x7f0000000080)='\x00', 0x4, 0x8001, 0x1000) io_uring_enter$auto(0x3, 0x7, 0x2688, 0xe, 0x0, 0x7) socket(0x10, 0x4, 0x5) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket(0x2, 0x2, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x20b42, 0x0) write$auto_snd_pcm_oss_f_reg_pcm_oss(r5, &(0x7f0000000280)="c2", 0x1) ioctl$auto_SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000080)=0x10000) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$auto(0x0, 0x42020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0xff) 2m36.135158025s ago: executing program 4 (id=225): setgroups$auto(0xc00000000, 0xfffffffffffffffc) getgroups$auto(0xc5f1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x5, 0x8, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r0 = fsopen$auto(0x0, 0x3) r1 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/media16\x00', 0x480, 0x0) recvmsg$auto(r1, &(0x7f0000000340)={&(0x7f0000000200), 0x4, &(0x7f00000002c0)={&(0x7f0000000280), 0xf363}, 0x9, 0x0, 0x2, 0xd}, 0xe) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(r1, 0x4010e501, &(0x7f00000003c0)={r1}) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x2}}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}]}, 0x24}}, 0x20000000) readv$auto(0x0, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x7ff) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x2, 0x8) mmap$auto(0x0, 0x20006, 0x4000000000db, 0xeb1, 0x4, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) read$auto(0x4, 0x0, 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) 2m35.390765082s ago: executing program 4 (id=231): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4bfb, 0x3) 2m35.148408874s ago: executing program 4 (id=233): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000480), r0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/updelay\x00', 0x8242, 0x0) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000080), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000001640), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_ENABLE_HS_LIMITATION(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001680)={0x14, r4, 0x2a027614b719b9cb, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0xc4) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BLA_ADDRESS={0xa, 0x1f, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x8011) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/self/net/icmp6\x00', 0x8000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000e80)=""/215, 0xd7) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/125, 0x7d) 2m34.924515025s ago: executing program 4 (id=234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) r2 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pipe$auto(0x0) poll$auto(0x0, 0x80, 0x400400) setsockopt$auto(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x81) close_range$auto(0x2, 0x8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567) setsockopt$auto(0x400000000000003, 0x29, 0x40, 0x0, 0x40020000) poll$auto(&(0x7f0000000080)={r2, 0x7, 0x3}, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) close_range$auto(0x0, r3, 0x2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="000000000b02bc9e98aa4377a15070a02299953b5fb6d5fe39af0f23c6567a3731e35162e17aba504be869fa6057878628aaa37705c79caa893854c4ef79ef6e3dae3937dda77efbf51c1e91648ac7887625fe4ddf812459e5e27a395184ff19c6db71e15c0bb2eaab50ffe364", @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf250400000004001200"], 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x40000) 2m34.319135205s ago: executing program 4 (id=235): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000300), r0) (async) r2 = socket(0x10, 0x3, 0x6) close_range$auto(0x2, 0x8, 0x0) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), r0) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x28, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000940}, 0x4) (async) r4 = socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r4, 0x8000) (async) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) (async) socket(0x10, 0x2, 0x0) (async) socketpair$auto(0xf, 0x7, 0x8, 0x0) (async) r5 = socket(0x10, 0x3, 0xb) setsockopt$auto(r5, 0x104000000000010e, 0x1, 0x0, 0x16) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x15, &(0x7f0000000100)={{0x0, 0x6, &(0x7f00000000c0)={&(0x7f00000008c0), 0x9}, 0x7f, 0x0, 0x8000, 0x2}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002300)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@MACSEC_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8002}, 0x8010) 2m33.660895163s ago: executing program 4 (id=238): mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = socket(0x29, 0x2, 0x0) ioctl$auto(r1, 0x89e2, 0x38) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kallsyms\x00', 0x101000, 0x0) pread64$auto(r2, 0x0, 0x100000000008, 0x8) ioctl$auto(0x3, 0xc0105512, 0x1) ioctl$auto(r0, 0xc0306201, 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x40000, 0x0) r4 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x101, 0x0) write$auto(r4, &(0x7f0000000900)='netpci0\x00', 0x40) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x6000000) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x20081, 0x0) write$auto(r5, &(0x7f0000000000)='/dev/input/event0\x00', 0x7fe) socket(0x22, 0x2, 0x3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'geneve0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRESHEX=r6, @ANYBLOB="7d472d00fcdbdf2509000000080003000000", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4000044) r9 = socket(0xa, 0x5, 0x84) sendto$auto(r9, 0x0, 0x401, 0x101, &(0x7f0000000000)=@can={0x1d, r8}, 0x1c) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) pread64$auto(r3, &(0x7f00000001c0)='/proc/thrEad-self/\x9fwX\"\xbe\x91t\x9c\xcbX\"_\x9c\xca,\x12\xf6\xcd\xc1\x93\xa2\xd89\x9f0\xaenet/rpc/nfsa\x18\x9aq\xe2r\'Xn\"\xff\x05\xa5\xdew\x1c\xfa\xd5!\x9fT\xaf\x13b\xdd\xacj\x83\xac\xf0\xb5\xde\xe4\xe1\xbd\xd4\xf3L\x80W\xfb\xd3\x1a\'\xd8:N\x84\x1cm\xa9\xbe\xc52gT\x9c~\x1e;[O\x8a#\xc8Eq\x9d\x19\x96\xda\xb0$\xc8\xce\xc8\xc9\xe3\x8d\xd5t\x80\xd6\xdb\xc8,N\x13f\xb8S\xee\xba\xbdke\x05D\x8a\xb0\x8ap9\x03\xd8\x9a\xec\x06\xf3^\xad\xa47\xa8\xcd\x12G\xf8\x8f\xb8\xea\xec0<\x984gQ\xf5|A\xe0b.3G#\x8d\xef\a\x17\xd1\xba\x05\x05\xf4/\x9bV\x8f\xd3*8\xfb\x03\xc8\xd6\xb9\n\x85\x19B\x926\xd7\x03\xbb\x1aI=HE\x1e\xc7\xb1\x9f\xbe\x1f\xa9R\xee\a\xa7FA\xc9V!snz\x11\xfc\x1cT\xe7*\xab?\x87\xaeM\x98>\xab\x1aT\x10 1', 0xa8, 0x7) 2m18.469270754s ago: executing program 33 (id=238): mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = socket(0x29, 0x2, 0x0) ioctl$auto(r1, 0x89e2, 0x38) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kallsyms\x00', 0x101000, 0x0) pread64$auto(r2, 0x0, 0x100000000008, 0x8) ioctl$auto(0x3, 0xc0105512, 0x1) ioctl$auto(r0, 0xc0306201, 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x40000, 0x0) r4 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x101, 0x0) write$auto(r4, &(0x7f0000000900)='netpci0\x00', 0x40) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x6000000) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x20081, 0x0) write$auto(r5, &(0x7f0000000000)='/dev/input/event0\x00', 0x7fe) socket(0x22, 0x2, 0x3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'geneve0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRESHEX=r6, @ANYBLOB="7d472d00fcdbdf2509000000080003000000", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4000044) r9 = socket(0xa, 0x5, 0x84) sendto$auto(r9, 0x0, 0x401, 0x101, &(0x7f0000000000)=@can={0x1d, r8}, 0x1c) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) pread64$auto(r3, &(0x7f00000001c0)='/proc/thrEad-self/\x9fwX\"\xbe\x91t\x9c\xcbX\"_\x9c\xca,\x12\xf6\xcd\xc1\x93\xa2\xd89\x9f0\xaenet/rpc/nfsa\x18\x9aq\xe2r\'Xn\"\xff\x05\xa5\xdew\x1c\xfa\xd5!\x9fT\xaf\x13b\xdd\xacj\x83\xac\xf0\xb5\xde\xe4\xe1\xbd\xd4\xf3L\x80W\xfb\xd3\x1a\'\xd8:N\x84\x1cm\xa9\xbe\xc52gT\x9c~\x1e;[O\x8a#\xc8Eq\x9d\x19\x96\xda\xb0$\xc8\xce\xc8\xc9\xe3\x8d\xd5t\x80\xd6\xdb\xc8,N\x13f\xb8S\xee\xba\xbdke\x05D\x8a\xb0\x8ap9\x03\xd8\x9a\xec\x06\xf3^\xad\xa47\xa8\xcd\x12G\xf8\x8f\xb8\xea\xec0<\x984gQ\xf5|A\xe0b.3G#\x8d\xef\a\x17\xd1\xba\x05\x05\xf4/\x9bV\x8f\xd3*8\xfb\x03\xc8\xd6\xb9\n\x85\x19B\x926\xd7\x03\xbb\x1aI=HE\x1e\xc7\xb1\x9f\xbe\x1f\xa9R\xee\a\xa7FA\xc9V!snz\x11\xfc\x1cT\xe7*\xab?\x87\xaeM\x98>\xab\x1aT\x10 1', 0xa8, 0x7) 37.58321231s ago: executing program 0 (id=647): mmap$auto(0x0, 0x2000a, 0x400000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e23}, 0x67) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x2, 0xb}, 0x800009}, 0x5, 0x20000000) gettid() rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0xa, 0x801, 0x94) getsockopt$auto(r1, 0x84, 0x10, 0x0, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x85, 0x0, &(0x7f00000000c0)=0x1000c) open(0x0, 0x62240, 0x154) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0xa, 0x2, 0x0) select$auto(0x3, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x0, 0xc, 0x8, 0x3, 0x6, 0x2, 0x9, 0x5e582970, 0x4000000000000000, 0x2, 0x4, 0x5, 0x8, 0x6]}, 0x0, 0x0) write$auto(0x3, 0x0, 0x4) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) bpf$auto(0x0, 0x0, 0xfbf) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) listmount$auto(&(0x7f0000000040)={0x1c, @inferred, 0x80000024, 0x800000876e, 0x2}, 0x0, 0xf4240, 0x1) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) mbind$auto(0x0, 0x100000007, 0x100000000, 0x0, 0x6, 0x1000002) 34.854472265s ago: executing program 0 (id=655): open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) socket(0x15, 0xa, 0x1) socket$nl_generic(0x10, 0x3, 0x10) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) prctl$auto(0x22, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40026f33, 0x0) write$auto(0x3, 0x0, 0x5c8) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) read$auto(0x3, 0x0, 0x80) sendfile$auto(0x6, 0x3, 0x0, 0xc01) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) 34.179322529s ago: executing program 0 (id=660): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) mmap$auto(0x0, 0x6, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x2a, 0x0, 0x0) (fail_nth: 2) 33.547288243s ago: executing program 0 (id=663): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/vrf/strict_mode\x00', 0x2, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, &(0x7f00000002c0)="d6ff597e", 0x4) 33.264464007s ago: executing program 0 (id=665): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/151, 0x97) 32.58166511s ago: executing program 0 (id=668): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x7b8}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) sendmsg$auto_NFSD_CMD_POOL_MODE_GET(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x50000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000008}, 0x8084) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r3 = socket(0xa, 0x1, 0x84) connect$auto(r3, 0x0, 0x8) setresuid$auto(0x2, 0x5, 0x200) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) socket(0x18, 0x5, 0x0) r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000180), r4) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_HASH={0xc, 0xb, 0xffffffffffff0000}]}, 0x20}}, 0x40c0) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)={0x30, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_FEC_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_FEC_MODES={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4008084) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(0x3, 0x0, 0xfdef) kill$auto(0x0, 0x3f) 17.406178552s ago: executing program 34 (id=668): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x7b8}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) sendmsg$auto_NFSD_CMD_POOL_MODE_GET(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x50000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000008}, 0x8084) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r3 = socket(0xa, 0x1, 0x84) connect$auto(r3, 0x0, 0x8) setresuid$auto(0x2, 0x5, 0x200) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) socket(0x18, 0x5, 0x0) r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000180), r4) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_HASH={0xc, 0xb, 0xffffffffffff0000}]}, 0x20}}, 0x40c0) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)={0x30, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_FEC_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_FEC_MODES={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4008084) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(0x3, 0x0, 0xfdef) kill$auto(0x0, 0x3f) 8.158298191s ago: executing program 3 (id=738): unshare$auto(0x40000080) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) init_module$auto(&(0x7f0000000000)="5a2035cf39bf28f817f14fbb7e89b51314b3c69c6b640db2eed642731dc290f36d64501c63e3a56c6290213b0d9b47dc60cd4925b086c01155eabf9d1a4f3e35d61f606a96094efc0877258d0d833d6a", 0x3, &(0x7f0000000080)) (async) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = signalfd4$auto(r0, &(0x7f0000000080)={0xe}, 0xff, 0x8001) (async) r3 = gettid() tgkill$auto(r3, 0x7, 0x80) (async) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(r4, 0x0, 0x8, 0x0) syz_clone3(&(0x7f0000000300)={0x80200, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x38}, &(0x7f0000000180)=""/148, 0x94, &(0x7f0000000240)=""/116, &(0x7f00000002c0)=[r3, r4, 0x0], 0x3, {r2}}, 0x58) ioctl$auto_TCSBRK2(r2, 0x5409, 0x0) (async) clone$auto(0x81000005, 0x9, 0xfffffffffffffffd, 0xffffffffffffffff, 0xeb) (async) madvise$auto(0x0, 0xc60, 0x9) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="04000000", @ANYRES16=r1, @ANYBLOB="09032abd7000fedbdf2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 7.615287676s ago: executing program 3 (id=740): unshare$auto(0x40000080) unshare$auto(0x2) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) stat$auto(0x0, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8000, 0x0) ioctl$auto(0x3, 0xc0481273, 0x38) statmount$auto(0x0, 0x0, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) ioctl$auto(0x3, 0x1276, 0x7) 6.547338442s ago: executing program 2 (id=743): socket(0xa, 0x2, 0x88) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_4={0x1e, 0x4, 0xffff, r0}, 0x98) 5.974780024s ago: executing program 2 (id=744): openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r0 = socket(0x1, 0x1, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) r1 = socket(0x840000000002, 0x3, 0xff) mmap$auto(0x0, 0x2020009, 0xb, 0xeb1, 0xfffffffffffffff7, 0x8000) r2 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r2, 0x40186f40, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x401c800}, 0x24004141) connect$auto(0x3, &(0x7f00000000c0), 0x55) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r0) sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="64010000", @ANYRES16=r3, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x10}, 0x90) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x3f00) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/suspend_stats/failed_freeze\x00', 0x123000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/48, 0x30) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) get_robust_list$auto(0x0, 0x0, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$auto(r6, 0x540c, 0xffffffffffffffff) lsm_list_modules$auto(&(0x7f0000000400)=0xd, &(0x7f0000000440)=0x5, 0x9) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$auto_TIOCSTI2(r5, 0x5412, 0x0) 5.149017444s ago: executing program 6 (id=747): write$auto(0x3, 0x0, 0x100082) r0 = socket(0x2, 0x1, 0x0) getsockopt$auto(r0, 0x6, 0x1d, 0x0, &(0x7f0000000100)=0x14) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) unshare$auto(0x40000080) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80000, 0x0) read$auto_evdev_fops_evdev(r1, &(0x7f0000000000)=""/191, 0xbf) ioctl$auto_evdev_fops_evdev(r1, 0x40044591, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_pid\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) bpf$auto(0x5, 0x0, 0x7) get_robust_list$auto(0x0, 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video56\x00', 0x80000, 0x0) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) r3 = gettid() rt_sigqueueinfo$auto(r3, 0x3, &(0x7f0000000900)={@siginfo_0_0={0xfffffeff, 0x6, 0x1, @_sigchld={0xffffffffffffffff, 0x0, 0x3, 0x7fff, 0xef}}}) syz_open_procfs$namespace(r3, &(0x7f00000000c0)='ns/ipc\x00') lsm_list_modules$auto(0x0, 0x0, 0x0) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/cmdline\x00', 0x600001, 0x0) ioctl$auto(r2, 0x3b84, 0x38) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/set_event_pid\x00', 0x164c2, 0x0) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffff7ffffffffffa, 0x8000) r4 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$auto_TUNSETQUEUE(r4, 0x400454d9, 0x0) 4.865818705s ago: executing program 3 (id=749): setrlimit$auto(0x6, &(0x7f0000000000)={0x0, 0xe359}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu0/topology/cluster_id\x00', 0x400, 0x0) read$auto(r0, &(0x7f0000002440)='\x00', 0x9) r1 = socket(0x2, 0x6, 0x0) getsockopt$auto(r1, 0x10d, 0xb, 0x0, &(0x7f0000000000)=0xb) mmap$auto(0x4000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x7, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x3) 3.918690761s ago: executing program 5 (id=751): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) ioctl$auto(r0, 0xc0905512, r0) 3.343212693s ago: executing program 3 (id=752): sendmsg$auto_NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x440d1}, 0x4084) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) capset$auto(&(0x7f0000000080)={0x8000, 0xffffffffffffffff}, &(0x7f00000000c0)={0xf, 0x4}) capset$auto(&(0x7f0000000180)={0x10, r0}, &(0x7f0000000200)={0xfffffffe, 0x4, 0x5}) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x4d}) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) io_uring_setup$auto(0x6, 0x0) r2 = socket(0x2b, 0x1, 0x0) sendmsg$auto_NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x2404c040) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000040), 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 3.227200108s ago: executing program 5 (id=753): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x2, 0x0, 0x2, 0x0, 0x2000, 0x0, 0xe, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x4000, 0x0, 0x6, 0x0, 0xfffffffffffbfffd, 0x4, 0x1, 0x10000000000, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400000000005b8, 0xffff, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0x4]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x10, 0x3, 0xa) flistxattr$auto(r0, 0x0, 0xfffffffffffffffe) write$auto(r0, 0x0, 0x37fa) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x15) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x41fa298f, &(0x7f0000000000)={&(0x7f0000000340)="b2711f72da78022d2a8b3f5b36060756e9da5728", 0x5}, 0x40, 0x0, 0x9}, 0x2}, 0x9, 0x0, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) r2 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x12, 0x0, 0x4) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x06\x00\x06\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r2, &(0x7f0000000000)='r\x02', 0x2fb) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000af"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.221933941s ago: executing program 2 (id=754): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000004c0), 0xffffffffffffffff) (rerun: 32) sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002440)={&(0x7f0000000500)={0x28, r0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_WPA_VERSIONS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004004}, 0x0) (async) r1 = socket(0x2, 0x80002, 0x73) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, r1, 0x7ff, 0x6, 0x0, 0x100000b, 0x5f, 0x2}, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 32) r3 = getuid() (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x9}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @remote}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_IF2_AGE={0x8, 0x4, 0x10}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR={0xa, 0x1, @random="a01d8645b361"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000280)='/dev/binderfs/binder1\x00', 0x4000, 0x0) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000006200)=ANY=[@ANYBLOB="81acdd96cedfcda109d257e2e7e89a88c9a16ee416f7c7b43094554790b7895b5ec4340e3d8534", @ANYRES16=r2, @ANYBLOB="000226bd7000fbdbdf254c0000003116a68004fda3932d4f4b1704d82624e6d4b302582e5d50922f78b04cd7f4d4ddb52f14aae84b7ee3df77a0257233b72448c10d43014c636977fa9177d052344656f28091e0de499787a48f8ee5324f35a07632b9ce0f66878c756e933a6b1e84881b7985c47ca6c1ea4b8d3cdf0da27ab1d8826e2f3f8fd6724358c44bf2003eb44793227edefa697ac7a45d2ccfb952193bde5298e3895ddbaefb28538db4b0bee13c61f8c997fee9a2aa5c481ae69f78bcdec3146306870800870008000000ca026f800400f1800c008e80080014800400348008004700", @ANYRES32=r3, @ANYBLOB="a00b8ae134d4482d10da85aa6e730c14f4d6e5165c9a2c6f127e258f52ecc3a83d30cdab24f84f53a1472d67b40dc3a3b8449096da25140fcb60205a4d054bef858c6e3f96fc4c67765280a1b2ce829639721885bdedae56fb29259eb6f7a7f4de3c5fafff86c2cee6ecf3982bf48e07e1a1ceb2152da19c3dce7b50ccef547128496a4054aaa46a5377e3c5c180962632339e2e47667a137e01ce12c1dfb501671e4d01426c8332e11b438f7a34201b042aefe4fc0f2940d81a594f650ea7f93f23554d78240249927609874b1af9b3e71091fe4b44e739e442e552e21c43a8c1d8092d2a3b04ce219327c7df9e4ad0a5d8901a32792d2bca27a1c6a7b7702c3d36897e93d66a8a5278a5a425bb9a0d8b7d56e64ec07d247b6d20d97001b721ba3177836e9edc377d222e838029591274832e6a874a564b2a0b6701c9803d146b1c54b184735faa3ee0874c574cc35b1b75a25f272a001c36da6394abd786cfcb8f714c2d567017d9a0bd55743c050b899ab09ad17b9a8cbe245590fcade525fa13ce9f30587988478111d04af62a10bdcb48bfd228e2eda457ea04675de8a85b50cf876a0f4316e9a355046d840f817b2e190b41baa42a289ac84752fc03edabddc109b93ddb80c9e021bb4148ea004e924ee2d90340a6e766cbf9861ae048b21a2b17d7fad460b6ee7a5a4dda4b71ff3eeadad099acf74d861773144639fbae74e0ee60b6ab20220d44e37a1bf2511a864b39b0d361fb2844b7f98614780ce46355373eceafc3b47683173be3948a52b1081ee7713afb423396d9680adda2367624a30be11eb18859045651189d176d6129d8777e28b14c6c215c85a4c2133c2ecb8dbc6e43d3f136f72912e9715336b14a52594f8248c65d5b69214db0114eeb5303362cb60d9c7c1bd827fa018df89f7c200f69a6ee6bd66ad178e01dbd0d0008001800018000000400c2800000c611d080b32f0233cd18c0667ed477758c16ac712fb4e46462411370884a603277e1e796dca4ab732f2d86ccfca74267428172bf707d3ceae02cec0070fd5251b52844a296e6591f8cb589ffa5b1c015ac0942d87d48d3e442fd38ee7cd9bba3b72a130ad04dcdd7060c596064425b0d0771edc455fc01f731770722ab4e48496c8f03ccd729af820a1ab1cb38fd27991fd21a9c831b10778327303dd3bef36f7c1d87ff5b69882dd9ad3f0bf92d08a9d86d251037ef301b33af7912607f96d29a4c59f40630ebe8ab15514c49fb775f33923fd785b3d4fd3b1949d06e7f6427fe4d60cb9ba820c293e9cfc1eb1790e03f3885f3170c1a7c98eadc1c346bdcf945a638f3f0f426e5e424753d99bf12aec29e50bc1cd82851876e60edce32e13a18445a3d070adaf9732ea233cad54fab21fc6d55d673a1f8daa57f066dae75c5fe7bf48b452e6aea40dc55119e26f4f9469464a351956d1bed72a27d98d1a64e1d8eaa108a9375748080ccb33f48c90f14e0747e4a24f8714259833d2625c2f2343aa48bf39d627c0aaf79d5356d2efe4ab6619d33f676b1c4769de4ad5341b61453f235a0ae0bf47392507015ed1843d58bc5813f7ebfd5a5feaf889e6f378ff4f367d9f847812e667796b3f6a364e8b4b79001b5df391913e7191f6edd233e3fd2dd0f7d5d44ee30b546749a96212aceb6be8c08d1319f5569535a1463bd3505fad2937e946200ca59670197a28bb66a475e59ae226ca9538200acbabbed962eecf86231a00792d8d2c5ac18d97a1c4c0714a3a6c409e6e335fb5b838273e7258a32459b0ade7afa71307c6f59df28270d558c17fda37ce058e6c23889415518350518d354c93b34aed920510f463265caffdac46ff7d8b693f054fd9f7b40f0fc765023f697279fc82580e4698d0574a6f91508308743a8f6afe9d387bee4278f58f7848c1503664e7643966d69eebf562b707d73924df2ac81cc49d091d06ee99595cf0c56c6e2ff5e14cbfa7d3e01e2b7bcd5f93fb2a56d9a41013fecd178b783672b65624434c5b2521d95764211596e602b8ed4c71660f219338d059d4856b619f690ff0b4c94754d871c0d96a22b0b0a82aeaf95af446bc7802e742603c43b64899a0b18bfa5cf4aa8321b21286dc47d16059d43ac21a2332b7c017969add2af4bc7869cd0b3f7e7721363b320ab7d4951b6867764d78e64e74c5325ce5f0046813de387a0569580824b3704f468f222f1fba550aa949ca852324a5f77bf0707e49f696b0658c7bb2a4d4b9d3d5e514cc4c4ee72cd1fcf932f5a2e8c8168323f43731ac820fe084e0fc88104788c33aa8df2a8037609cb0f143cbc877c6967b603f2e812cebf5fc01513e0a6b0e267dfb9c77e9820653c85398dedb179a66dab5a387649621e43cfaf2f3e3687da55b65da21627bbd2aa60a65e4b8a96048e0e0e3682485a66d008074cd0db280dd8f598b666a409fc1d13bcbeac01890905035204dd150d46f7626ae51728dd93c5f144c3b31effd9c43d28cb705af4057d41da5af4cdf8f3963cc94da7d02f283ada807d67db06230d0b4b304869adf33efbdeb4b651d0cbd925067302bd6c2cb9af68ede73709a102503c70e165f0eccb24c2f88e7e226f40b481cc4e97668b63aecbed854ca102b44a3e9e3470276fa3ed56a23ee9e4fd9c3fec0f825599d7f5493de6effb2107c140d7511d9a3a7ea406fe562dddb14f291c1f5b6f21517c432c25fbca9fa6be135d609053d1a227338ad551ef1d6046e521eec793615873bb76dce27b1e40110816576d1365c6e0d1da4373a57d75321540ce104d0be1c1740b82a08475f4db331ad8981c3ec4bea2a701ee7d48a46810e80e39fdade441c6dafd91b68283a888f8a257b68fdf60faf157a707e7e4b22ce2d29e0e81b36265a8cfaf220a2deb0dcacacfeaef26e541306b7f89b3707c70952859c6eb95b8fdc1aa8e4a66953c935a547a990581a89142497306a7dcd8ebab8257920ad3b569e1295f3b3a9fc5a26c318345b844393aae75518955ff98e9275ea251551ca4b9f5a3dd1aa3c17262838b3f3451b59a1d7686206d8f51b787438b0e5511022da09502a3a7d7724ef77c4f69bae7e0598327cb8e66d1f86e7a3dabab2d902ff374f74fc4c3bd3d30d9147c1c5314c98ab2feeaf6aa9c1c486018ded8728cf1f98a5fccec771b8640412a7d8a98ca74487878fe6bb35234549c492db93ecc202b9d5b6f7f869dade0ee4a76fbea765351ed201373da18a1c6773728e08e3e6a351758936ecec3b98e12d3411e29a485417174df52f87c71fef314169aaa13fcfedbdae7d12493b08d902d54d45b4ff49abc4fc587a457ad8c9ffe406ba37798479ad506fd920680a1151376f3b1860f51f7443c1e2d342e36016cb9d85375e07e14bb2cdc2d90790da43557a60bfe485aa097aa5a2eea6f9b9868f78dfda17e6e4986646e5776305407c3b46d7446fece51638e9021c946b30279489e00217244074f1550db08d3acb8b8dce01c5400d2e1ca9a8daea7bad96fc524ff72ecebbed3efe4d9f2cca3de893869fc72ad0b960088b5f9c9296bb05d6185ecabe946b8749e73c90a5a1148b1fcda808ae0f353b673ad5e9de7e39302dc11095c43e90ec8c9028f911b2aa9dccfa53c45541e3c0f5bcb38ec44f6cfcfe0e38e290a66fa4df41564c8ec58a418ccad32d96ed19ea6dcc86419c8fbc1769e6651813f91bb75b9e07c0a27ff36854156f6fb83d89338f27c0de476b8ad83e8b2847564e975fac7f45e285b1f3b01cb3ca4c77a5b22af7f3bb5909e0ceaa3cc8e1e91a1b7451c4a25f4c1c32702f5ece391937e490fb193f96a15334f1cff8a1b467747fb67b07bc3cacbc18fe91f34fd8e56455aadf27da19fa5dba0bdd3165a2d3538f9b9c885a8b4316f1a1c5dfa055850278708355a0f526944832b221547be0e75daac2c022c5cd13c77632cacca40d38c43cae03f2dda9a02c88b865ca80711b9d4674b0538711bda17bca87ef9651d26cd9b0db2bfad2bae648bc1bba818c9374ea89bdb474254738537f94d6b7b589e53de724b5fc8b6fd40f5ee4585ecfffa9a6ffa155c4f01c7a9e90bec9951c8d5907edc882cbb95acee776eae21e43565b8efebcb604bd19e05cb80c407dc29fba65aead91aecda9959124f1766e6b8c47936fc97515f48412c9c17f7a0e96e863b7395e2d2ca4c6f50c601355786082cc5e4e5b7908c7096d46530767ecccd8798f2abec99f0fefaf89056d90d510337c46f691f5ace2f1fe844f32bbd662b7d93995172e0d69fa00ab285548703f9cf95d08e99c866c999998beed682bb040c442b0fba934d2617ef7adc754acb6146d04a1af69008e26eae8143623cc55c128cb632e593e619d6b38682cc7e6b5209e5a18bf28cb27acf8cedc32bb71bc5d5cd4e3150d5116bbf23e2987f3916659f57c87de6146923c845f2f2c8c610ccf24d51e3a774f937e55bacc61df6f695b2e45947df17bed7c055ca4713ea673854a1c84ab7044d8fc76ed5ac645231e78ff5f34eff3ee2d8333e71defd4a3f5589621f12c4fb6a284402a23a7e492128ff42b12d755edcf14ca5d508572c5209e0bffed662c575032943584ee3fbf331b6fd92ba9f4ac24c1d35f95c927dd5cb5e5974efa4d4eb6c3c098c1181494f07e3c2b0e47666a19ac6a3009f68e51b8143de47638804dd9a18b69816091dfa02ff73f4a7d3845f0fb5010faeda03a110bcf4c3c8bb9536e3832b82989e8f71fd56cb553cda99c55633f310818825cf93d9111afb9a44f5f6fdfaae030ae9c5919f81fa515dada64de2224f8f63c00da3a86a3807aac1af6bec53cc4f9ad0d8c9a15a99571b1990d34ea1032bbf82141c624ef10b078d436d3b4b1786ef2bb49f87fc3ca392fa58c014ff682217dfabcf3a6e683faec8f4df19282cb764e94939f0f95d356f14fd32d12e0e8fd4d011f6b97d1e395931f488dfc41383293c62b7c2d0abc936ad961408f4c31c55bf24eed810e76cd48c255ba52f8511c37835994595560b40041d2c99d92183b16bb7d543565792b641b311ea8da436f6efed474727c3fef41575736e7de70f94d6ea819bf21fe040c48359074657e8bb2b06d8d42c5de2228ac555ccc81ead5604bbef91ef1cc71cb1396561e67865088b1f9e29a9a0b4c4010d8f8f88e98586c6edd1d5cb91b5e4abd3be3d5cffc5d92e215474f3842e97b3a41d1a6d972e8c5f2dea56588c7eeb02326687d524d0a92bd51d0203d9e397b90712f9290f423d0bf0896dd52e8d79a36518e3f798e75c2e454b2602eb4f5417ebbc250c1af57e74b63c8741dc05a9684be28d7ef42c86ca65c4db12c4fd511808b4deaa0b276e9174b6598a1a62cd833d5d82dea0286f86a6b4e4cb5fe6aab664589a160e825b02cebffc65a81b07ab2c622f3b14a0ccd393b618f484cdf09332ffb6bf95fc6249f9ce0645fd26c369189eb7c6cbca0a8708a07e2eacbf2a0210a08e01a3e96690f76532491b01b70df7015f59d9a0f6a50c9eb141d4932ebe4cff086185e14a240d627c700d29b9a19b2545289ef3a280c9ed45c972643a44ba89bf4c0bd9c87b3fde4838bb40c3ce9728499c0636befe5d83b6ab946718b05965599857acf578beae2f1dff74288db0040da82c1a2c039c900a67268b3a20f1483b3386fba769d2eeb55e0a95110383d710f15cb5c5563e58972098f81e393c9a8491a9b4af9ae6c812cc1ecb8b94854400f630fb522230fcb3962eac5c2644525dea00b8071b56e1224c0b0eaf9f967e81c7ce736ca53cbeb9599a172f04ddfe903ecbe870deca4d33362dddffe51b12c3ca43bf38c401bb9eb20f34d4597d21937be321892f76e0b1669b814b505eb5d0131266629c2a3cfb88545c05d53a90da80dc8a0bad7b4ff509d48ad4e1cf368dac977cd1386b548a406e013e2e150aa32d3833c98c0264e064aab229bd9dc2d01635c704cf53140aa51bddca882364f067495c3a7aedee73d273b0195115ba4bd2fd60371416e858d0d1c375351c408df62eb3e019d5715b9c1c0b360ede2ea53bf8602ac9be46e13a8ca248b6209d45a720e814f24195b0249f84fb50a0c470a86152e084b8e9ccecb0b68592a67f6d10396e0643ac9dd1e123a750c23f2749f5d25ce64d667de30d9c5f259a5cbc8b9bbc4ce822e2c4ff955f447f7ae76b7c856a51b2d6a2a560f8347ef60899fabccff1b150ad7b5a46b915ddb811b7ffff34a352a730e35aac114c4537b0a9f9ccde966e69305c26a1a3a45b07323769cbee21a95d9f64934379d6c51d07e086f622a9fac5ca07729a8866316b57ccccd06ef742bbd22c81938c24d5b5395d2cc373009c57fc34865d25a6d3ebc18a83bdca073f0147189f304766a16e66511e1bd0b448844477935866fa8a65105b62692ce9d034a9071b3bcd00574ff1989d7bb014c1db69a7067e9d7a5070e0de69394bdddfe77276f741448bb83454b6fa5cc75557cb9e33e806cb60d8433597b3289a2a6572a2d3b605f86c5ec7410b7a5bd0f17ac6b93b1bdceea3ad62a9726cade75082a3267a79e5988e7e7ebc156cfc25391aec999eb5717ec4bf127b4c9af0edca44d481a92ef174667204fc6315ea00ecab6dfd1105a7b71ffbe5ce2e2ac19a520214a5ef15803cbad360e530c8a897d7928827ec97c97157d6aa3919a4503ae1e1bfc786a524aabc3a8be9785f47b48f817131b2dde72e0e6f2514ee2d40d6da62388138300fb181aca825516503995413ed7c960ea804d23a83cbb34c8581ef9902d3c76839b97b1afe8fa15fb35c360ee77fe5802a14edb368b4b07719902f7eb2ab997b45d89344cfd183a81859d461eacab4f5a5094a0e01cc5a278d6ce1878bb9d88fd50e5f7524aa564e0b7f48142e532204a36ca670b0b554301b4384ff1d566990ec638346b714cecf6575e4bc2b9d841d89ce1e8085155e78199ea5826aa122344951b9fabaaa295cd187801f7b10141cb6344324ad0abc5cd3f8d47af51343164496418ab9c57ee73a25f66aefabdf813a4e4851ac4d13e889682bcc4c90fef04dde4333d67408000500e0000001ce0dbb0cd644439395a8dad3b30d89dee08f1d542543b2b2510fda887fc9f0930074ae124f8861348a3af9d3908548eb6d86e41a8589b8a174a4bb3563721976dbb54ccf15c5b5dbd7526c660662170199d9c2a960727491323056640b5b682ad280a3abd1e474dff1b363f5e66ac1de51932682b5866350fc547954940444eb60ca150c85eb8a7ebad1b900cc42ed8003f2adb7d7ecdcfd70293c51de8418dd4c6ab643b8d18d883602fb777fe96d2255d58ece745b3724737d73e4f83fbe807dfc37238c34ef56e3b7f179ed08ae38a116008a619f704f883a5dfff763b54ed2872de03eca54bd030000dc0022800400588014001c00200100000000000000000000000000000400d28004002e800a0014002d277b3a40000000a3003a00594cb51885514ef5c58d59fe158c58c71a9beeecb026f7811c96046bd9a2a83934dd1f05249a6be648a659ec1c7001695180b04783b9c46de3367d7e8d41476df99cd8e4a53b039d3618351692941011bf03ab0b078c38d6a6b265ce469cec86e53773f722243f5d4760c6d809d7f50e1779a3e10e1789898a467820e08b69ef73d4ae187ba78b5146c073a355fc34c0c306717b766f1dca0ed3a5c32c1d77000400a780040092800000000800a400070000007a089100c69b9f08be4c3e98fe4f5372560898c8d5b6bfbbf74b9db41ff6a7eb7ad73c2d34b75d327d56b914e4a8fba38dc065bdc1c8a582787aa635b9abd89656d444c833af570dac2f91f9ab1bf929c8789ae3ddf61c761b40dea09e0235d1099c5ff5ad3d663c3aa88b3255acfc9f71839f2d7da1b9edd6d864cbcc0d7165e187f1b2e1ff5abe48aee8a8fa6af1df7588859c1df5ab11ab98c6556b7a00ca08d708c9daa105165965da1fc906991f4efac4bbbe7399d35fab9f2696947ad986dfbfccb5e5cf55503ee9ba9d66320a0c1779747097eab4c4b5b42853624c1b3b3710f6a1b136543635628e5a9d082da8845b771df82ae63b5edbef856879f726f79b4375208d16db60c7f9dfc239069b2568a540cf49d7a9d54dc9f99ebfa2fa906697bf396c0d8e7f7873d726d7e5b6ce953ff6609581f6bcdd7ac81c110ee5526cf12e712279fbf9101b6a7c060bac64049ddc81a825640a09e9e22ec6224057ff0952ec9f542a47f7aa7b3deb0f1de9f2d31e09467b0a1cfef90b2bda827eb9f825e98787498cd4e0ba1704741036639ad2fc339fb40bfec66ef94860b66ccf879a2976bcc6ac9984767b62fb1d600d42e26c82da39f4786bfeb935ede2c6a8e7e02cc0dcea5410f223df5b015d10035d4d0efd52c8f129228ff5a1046822422d0b0980a9a9b86fc1bcb48b39f2cda00657938e381b8ca92c85b29afa508e6e5c654e1207415fdf3fea060ef2033d9f177bcede1000ea897842a06b147fc70fc9bda275900cde1a51c3381769cd769f5493b5372336bad92044ed7c985a46b66da4fcba461ece16cceabb9bcf8b3643cf4cc0c5cf8609d14c9f641a337482d8b7ca387b8a6772a2a2073936a01c2bd820d5c012a8969fc8fb16a1222965e65a16268b7c3bc3d2c331e3a107cf6742e376b9ed8f0900c433099965ef9bcae47a2bcd8154414be49cf77289f371292f07b3659046ecd8078b392379b13404b9c002ef1fd2be15e280aac1abb6d55e6566d56582e6adb3c2b8dbbf3050c1e3e401b63e4d69bb9a76d9d11cfae7807af1a7df4b00b59254417ec52c36b45541c9d66ae0f899a5918167c9f68b4cba494a522a1bd9e8e666edff06d67e80e879e2fd6bcd609d33613fd44316a9d3762096408339558c2a54c29343a4268432a4058796f644eb8c596b1d677be2f6aa40dfa22d8b9d26a0827caa0652533492f682d187446d4ddbabe6d0ca2c629d21cf9aeb7ef89a8253333cbf6b9ca5f8d89aad9170e00e2c1f3715183bd33d7908df347c990d8621fd317faf3ef9ffb315b4baaed5a52b0f0804f9d54f73156bfb482fe917084f2a7aa655ed86d9a04f15b1802e100551309a1720fe35b46164c052eeab9321f8664ec831e17ab6ed863853185d8bbfec092f3987a272f3c4a461f7467fd4b372ec1dc7993d47cb655a9eec4a794208c1bd7c3fedc6f5408f31d1b54e0cb8d663d3d2990aec65832b782e80f2323357dbb6d23a76e022e5317fdef97c404a7acab266258a616339b7ae3c9863c44c8db9fe35e2c4834ff72f5f7700440bde29847d06180398a21a15dd4639af3b087c9ea468ff62bc940c614638cf959a4c55237d4ec6345e136b98761ce8de63a8206d2a8e314e8d82a4b30ec64f3a022525173263da10365c2950d5d34f95a22195c7cd3fcb484c9afa94cf3e4bf789fb956afb9511d54574b38d49e07e20e7b45084d991ec48f8f4bf10416c418aa003d017fac63adf1b15d6d78acaa7ac05d21f9d342a218c63c41bbdbced7b378e17794ef509f36d913cd7e2606f4671724d5607b437016390afd1bed783cdf4fdded34ead9683ca27e96ef2c3368b7650fcd8a822e8b51ab4ae113900d794e7c798b53d886a95f352a05235f263c2fb337f97e3864dddfe5c7e5e2138282d40420f4c424c52766089b086ac85a041d6aeecd6c2290e887fcc8e2e66cf26918bd957e164850b55fe6893128d4abf1bcd0168acf357de8d9a7874bc3e0e97b328619cfeac977f51c49131a929e6b2ccd6d0f86910a38bcff877b13f1ffa15b2f1c32dbebb674fbc754e9fed2f26c5c11d7fcd69e346a67ce2a072d651ae187a699fdf4ed2d70dcdabb4959ab8e9dc1ad2fa8012fd3731dc531bef524fdf6aff23451258409a65aad0cb5dc3cfd270a82a0c33438957fa02c9bc045143dea89e2f897b9c80815a8deee96a4f20d48904fc04023003e9c4b68100dc4bd3b21525360971f53ff7eb1a96946a9b977254f0f2728684be6dc2f238654565f797eaaa42cfe6f184004de61a4627e4b8bf2472a7824ad10abe8b403d55ca3fb87e3bef4e8f8450aa95c31875e54fbaa7955018c4bf31329837bf8235214dc4926b433c5c177b325f5a7c69effeb22c6a7aa7fa7874ef56fce27a43d414886108a0e6f7d7b5f97ce717bc8e679a92c71c6633c4eef93fcb632467b179095a003368f65b5c69d4f1e6310cdbdaf50b0b4d6e96f6de12c04d7961085b5a2e5848a97f38161cf720984460114113b0443f28232effa144dbd9258066adf76bc6f2920d1e683126a29e3e1f69d0483d6f929b235cc985e3d9ff76116da385e3a97a918d1514a400d5192aca24a4d297d7b3d59d5ac12a08290f296918787e5ab0285785ed8b7e09ebd57ac8612f83743d28c566dd5b1c8f25eda6bb01b176c917e6bb3c8d19708656997ea042556726c4bc02ee09b1404a682d73934adecd23f688bb7e2937e05c746fbb02cdb3d4d57383b7f52e3e6fdbaf5fb9ac377ac56e5cd36493a8e83c88c131a24f58dacd849a35e7a9e2bda5c48cbca6f59f3b5af6c8f99743f7bf9e46dba4506f7966190c1ce84af384c35dc416c848c5bea6544fb24a19e421bf587a106ce5f8b2cded8cd7812f5b4b0fe61461303cd02f09b9c4ef643a3ed620c2cf039641753cdcfb9658f51958cf3be7ff8f85e4e59b4b70bb14c141b39dc5686532acd683de19571b7e61636da7e80e2512d2505ba777c0c1e927933f9c7d073c6169aa8e13e943db1e7ffbc82d1898b24d752c74cb2aeb88c680066d050ce5972ba56f0148f09be100000800a5000a0000004c00430072006fd4041d1e0e18133fbbb23fa7255eade17338be8efa0f6e1caa67e033dc7df405191a3b6a1aa19f700d55cc335f079251c1ed52149389065009070000f02e8f953098c352b305008a00060000001400a68008000900", @ANYRES32, @ANYBLOB='\b\x00C\x00', @ANYRES32=r4, @ANYBLOB], 0x1f3c}, 0x1, 0x0, 0x0, 0x84}, 0x2000c800) ioperm$auto(0x7, 0x6, 0x2) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000) (rerun: 32) lstat$auto(0x0, &(0x7f00000000c0)={0x6, 0x90000, 0xfffffffffffffffb, 0xffff, 0x0, 0xee00, 0x0, 0x5, 0x6, 0x6, 0x0, 0x7, 0xd0, 0x10001, 0x100, 0x8, 0xffffffff93ef807e}) r5 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @empty}, 0x67) (async, rerun: 32) sendmsg$auto(r5, &(0x7f0000000000)={&(0x7f00000000c0), 0x7fc, 0x0, 0x3, 0x0, 0x200, 0x4}, 0x0) (async, rerun: 32) r6 = socket(0x10, 0x3, 0x6) (async) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r7, @ANYBLOB="01002dbd70000ddcdf250500", @ANYRES16, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4100f7b4a8132d759892f424887b55fbcf38553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43341a1e670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100045800c00c50003000000000000001800368014006c800800150002020000050018005d0000000000d0cb580b273180"], 0xfc}, 0x1, 0x0, 0x0, 0x4044800}, 0x50) signalfd$auto(r6, &(0x7f0000000000)={0x3}, 0x7) (async) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01032cbd700000000000000010000015000002"], 0x1c}, 0x1, 0x0, 0x0, 0x4019}, 0x0) close_range$auto(0x2, 0xa, 0x0) 2.982777624s ago: executing program 6 (id=755): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) fcntl$auto(0x0, 0x9, 0x8001) socket(0x840000000002, 0x3, 0xff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) shutdown$auto(0x200000003, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x88) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty46\x00', 0x40000, 0x0) ioctl$auto(r0, 0x540a, r0) 2.743044512s ago: executing program 6 (id=756): r0 = socket(0x8, 0xa, 0xd55) (async) listen$auto(0x3, 0x81) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) mmap$auto(0x0, 0xe97f, 0xdf, 0xeb1, 0x402, 0x8000) r2 = socket(0xa, 0x3, 0x4) getsockopt$auto(r2, 0xff, 0x7, 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r3) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000003c0), r0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000001c0)=ANY=[@ANYBLOB="141000007eac8c38d7ee984c9fc055172b435cb501038c968741f672efa770170cc57b9243c9325d4b75fc77f104b8a61648", @ANYRES16=r5, @ANYBLOB="2b0725bd7000ffdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x18094}, 0x80800) (async) epoll_ctl$auto(r3, 0x2, r3, &(0x7f0000000080)={0x6, 0xb9a}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="110b27bd7004ffdbdf250900000008000300", @ANYRES32=r7, @ANYBLOB="6ca0a2210cd540bede39b8c124228db0ddc8b5bc67baeb76fb585dcd9ee6103bf4a957665c291f1e5907bd56e157e092acc3bdfb0736d027c63f7cef2ac387da99b7ad015c1003bd9200"/83], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1000) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000280), r1) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r8, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xbc82}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) (async) connect$auto(0x3, &(0x7f0000000000)=@can={0x1d, r7}, 0x2) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd10/queue/iosched/read_expire\x00', 0x1c2b02, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) sendmsg$auto_ETHTOOL_MSG_WOL_GET(r0, 0x0, 0x2004c011) (async) write$auto(0x3, 0x0, 0xfdf3) 2.211213487s ago: executing program 5 (id=757): mmap$auto(0x1, 0x4, 0x5, 0x13, 0xffffffffffffffff, 0x6) socket$nl_generic(0x10, 0x3, 0x10) epoll_pwait2$auto(0x1, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd, 0xffffffffffffffff, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000000), 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, 0x0, 0x55) 2.210887156s ago: executing program 2 (id=758): write$auto(0xca, &(0x7f0000000040)='\x04\x92K\xfa8j\xf0L3\x9b<\xe9\'\xa7H\xef\x9bOa\rVwx\xbfZp\xd55>h6~Dz\xe4\x00}\xf1\x1d\x00.R\xd5\x89|d\v', 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) r0 = open(0x0, 0x22040, 0x75) fcntl$auto(0x0, 0x9, 0x8001) socket(0x840000000002, 0x3, 0xff) r1 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), r0) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) r3 = signalfd$auto(r0, &(0x7f0000000000)={0x5}, 0x8000000000000001) epoll_pwait$auto(r3, &(0x7f0000000040)={0x8000, 0x9}, 0xd3, 0x40, &(0x7f0000000080)={0xfff}, 0x8) 2.079003696s ago: executing program 3 (id=759): madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x248681, 0x0) r0 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/queues/rx-8/rps_flow_cnt\x00', 0xa001, 0x0) write$auto(r0, &(0x7f00000001c0)='\x00', 0x6) (async) write$auto(r1, &(0x7f0000000040)='+\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) read$auto_configfs_file_operations_configfs_internal(r0, &(0x7f00000000c0)=""/244, 0xf4) mprotect$auto(0x20001ffff000, 0x8000000000100001, 0x8000) (async) write$auto_configfs_file_operations_configfs_internal(r0, &(0x7f0000000000)="8e79ead6525bbb6605dfe52d1043dc724a8c", 0x12) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf2507000000080004000200000008000400000000000600010001000000080004000000008004000600040006000400060006000100dd0b0000080004000900000006000100150c0000"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) 1.908348956s ago: executing program 5 (id=760): socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000002c0), 0xffffffffffffffff) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff6, 0x8008000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1d, 0x2, 0x6) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x6, 0x0) socket(0x2, 0x6, 0x0) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x4000000000000, r0, 0x4000000000002) setsockopt$auto(0x400000000000003, 0x29, 0x4c, 0x0, 0x56b) mmap$auto(0x0, 0x402000b, 0xdf, 0x10000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = socket(0x11, 0x3, 0x300) setsockopt$auto(r1, 0x107, 0x1, 0x0, 0x8004) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/queue/zone_write_granularity\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000100)=""/16, 0x10) 1.599564037s ago: executing program 2 (id=761): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0002dbdf0000000005ae040000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0d0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="72010000", @ANYRES32=r1], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0x2}, 0x800002, 0x0, 0x0, 0x9}, 0x7}, 0x3fc, 0x8) r2 = socket(0xa, 0x4, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x0, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendto$auto(r3, &(0x7f0000000040)="d8db9addc7b99eee0b8cde636f65a7503e3a610d4c6984cc04cea436b095cb74e0b73de128cd0b735892d7c68a2d1f2a41b7890063efeb43e097f59d575ebf9cd1a60a36aebc9c088ce4739982320711cd46aaee46e24927f26981f3648871", 0x6, 0xffff, &(0x7f0000000100)=@can={0x1d, r4}, 0x1) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400008, 0xe1, 0x9b72, 0x2, 0x8000) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x183800, 0x0) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3ae90f7c", @ANYRES16=0x0, @ANYBLOB="01002bbd7000ffdbdf2502"], 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x4001090) r6 = open(&(0x7f00000004c0)='./cgroup\x00', 0x181080, 0x118) open_by_handle_at$auto(r6, &(0x7f0000000140)={0x8, 0x1, '\t\x00\x00\x00\x00\x00\x00\x00'}, 0x42) splice$auto(0x4, 0x0, 0x2, 0x0, 0x14000000000, 0xf) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) r7 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) r8 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$auto(r8, 0x0, 0x45c) uname$auto(0x0) statmount$auto(&(0x7f0000000140)={0x1, @inferred=r5, 0x4, 0x7, 0x4}, &(0x7f0000000300)={0x5, 0x80000003, 0x0, 0x8, 0x9, 0xffffffffffffffff, 0x100003, 0x7, 0x0, 0x5, 0xe655, 0x8, 0x5, 0x2, 0xf6, 0xb, 0xc, 0x5, 0x3ff, 0x1, 0x7, 0x1, 0x6, 0xffffff0a, 0x7, 0xffff8c43, [0x3ac1, 0x8000000000000000, 0x8, 0x80, 0x4, 0x0, 0x7, 0x8, 0x7b, 0xc5, 0x0, 0x80, 0xfe, 0x4, 0x0, 0x1, 0x2, 0xfb41, 0x9, 0x1b8e40cc, 0x7d, 0x7f, 0x5, 0x0, 0x3, 0x3, 0x7, 0x0, 0x7fff, 0x2, 0x1, 0xfb3, 0x2, 0x90f, 0x8, 0xd0b1, 0xb26, 0x6, 0x8, 0x5, 0x40, 0x1, 0xf6, 0x3, 0x101, 0x9], "f1ca61e34e75de9da561d49aad57816294f3cf73fa3249303a8d8546a278e125bbc84ff92139730ec4d9a7437fb4e4dedf4d0aa1e56c4357e529ae13d6a7075faaad9778dc39c20bf62484a67f66b6b095a4925fdfb7cad97c610134280c8791f2ca44531ec9897e88cef8b5ca6bb8fc9e0ee8e1f7"}, 0xbf9, 0x6) socket(0xa, 0x4, 0x3) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) 1.507244597s ago: executing program 6 (id=762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$auto_TASKSTATS_CMD_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@TASKSTATS_CMD_ATTR_PID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r4 = clone3$auto(&(0x7f00000000c0)={0x400, 0x0, 0x40, 0x8000000000000001, 0x4, 0x2, 0x60000000000, 0x8, 0x10, 0x5, 0xa}, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x14, r6, 0x701, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) sendmsg$auto_IPVS_CMD_GET_DEST(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x844}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffa35}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffd}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008045}, 0x4000000) r7 = set_tid_address$auto(&(0x7f0000000180)) r8 = waitid$auto(0x9, 0xffffffffffffffff, &(0x7f0000000240)={@siginfo_0_0={0xd, 0x5, 0x6, @_sigpoll={0x5, r0}}}, 0x8, &(0x7f00000002c0)={{0xfffffffffffffffa, 0x401}, {0x5}, 0xffff, 0x400000000000004, 0x3, 0xfffffffffffffffa, 0x0, 0x9, 0x7, 0xb6, 0x6, 0x5, 0xfffffffffffffffd, 0x80, 0xfd, 0x4}) sendmsg$auto_TASKSTATS_CMD_GET(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r3, 0x4, 0x70bd2b, 0x10, {}, [@TASKSTATS_CMD_ATTR_PID={0x8, 0x1, 0xffffffffffffffff}, @TASKSTATS_CMD_ATTR_TGID={0x8, 0x2, r4}, @TASKSTATS_CMD_ATTR_REGISTER_CPUMASK={0x9, 0x3, 'nfsd\x00'}, @TASKSTATS_CMD_ATTR_PID={0x8, 0x1, r7}, @TASKSTATS_CMD_ATTR_TGID={0x8, 0x2, r8}, @TASKSTATS_CMD_ATTR_DEREGISTER_CPUMASK={0x9, 0x4, 'nfsd\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x2081) sendmsg$auto_TASKSTATS_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a2bbd7000fbdbdf250100c2b5fc74d5e78d00000e000400462d4e4b53"], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), 0xffffffffffffffff) 1.356826144s ago: executing program 3 (id=763): openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r0 = socket(0x1, 0x1, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) r1 = socket(0x840000000002, 0x3, 0xff) mmap$auto(0x0, 0x2020009, 0xb, 0xeb1, 0xfffffffffffffff7, 0x8000) r2 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r2, 0x40186f40, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x401c800}, 0x24004141) connect$auto(0x3, &(0x7f00000000c0), 0x55) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r0) sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="64010000", @ANYRES16=r3, @ANYBLOB="000828bd7000fcdbdf25430000000400f90040011d800400008050000080050006000700000005000800810000000500090002000000050009000200000005000c00060000000c000200810000000000000005000800050000000c0003000500000000000000040004000c00008005000a00060000001c0000800500080003000000060005000500000005000800ff0000002800008005000800ff00000005000900090000000400040005000800080000000500080001000000400000800c000300ffff00000000000005000600030000000600050001000000050007000700000005000800040000000500070089000000050009000c0000003c0000800600050002000000050006000700000005000a000800000005000c000400000005000c0002000000050006000500000006000500030000000c0000800500060008000000100000800c00030005000000000000000800690002000000040087007381c4d3fb8dd07e6fd582609adb67a0f765563d13f5fe6d1773f7484d9591dcb75a6a8a1683fab0506352e4b57cc0996abacfbf211f2a8bec7f3dd679db3703f210cad0f47ce54b92e381bb4827f27c5c9625c8e0689d91"], 0x164}, 0x1, 0x0, 0x0, 0x10}, 0x90) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x3f00) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/suspend_stats/failed_freeze\x00', 0x123000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/48, 0x30) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) get_robust_list$auto(0x0, 0x0, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$auto(r6, 0x540c, 0xffffffffffffffff) lsm_list_modules$auto(&(0x7f0000000400)=0xd, &(0x7f0000000440)=0x5, 0x9) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$auto_TIOCSTI2(r5, 0x5412, 0x0) 1.139464281s ago: executing program 5 (id=764): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) fcntl$auto(0x0, 0x9, 0x8001) socket(0x840000000002, 0x3, 0xff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x88) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty46\x00', 0x40000, 0x0) ioctl$auto(r0, 0x540a, r0) 842.501791ms ago: executing program 6 (id=765): r0 = socket(0x18, 0xa, 0x0) connect$auto(0x3, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/cgroup.procs\x00', 0x149081, 0x0) write$auto(r1, &(0x7f0000000000)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x1f\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe1u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06\x05\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xd6', 0x4) r2 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) write$auto_ftrace_set_event_fops_trace_events(r2, &(0x7f0000000040), 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(0x0, r0) statx$auto(r2, &(0x7f0000000180)='./file0\x00', 0x7730, 0x8, &(0x7f00000001c0)={0x670a, 0x6, 0x2, 0x6, 0xee00, 0xee01, 0x3ff, 0xc, 0x9, 0x9, 0x7, 0x3, {0xf0ed, 0x8}, {0x4}, {0x2, 0x80000000}, {0xffffffffffffff67, 0x75e4a6f4}, 0x4, 0x9, 0x2, 0x5, 0x6, 0x7, 0x7, 0x8, 0x0, 0x1ff, 0x5, 0x6, [0x10, 0x9, 0x8, 0x7, 0x700, 0x8000000000000000, 0x40, 0xff, 0x9]}) sendmsg$auto_NL80211_CMD_DEL_PMK(r0, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)={0x624, r3, 0x700, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_BSS_SELECT={0x45d, 0xe3, 0x0, 0x1, [@generic="0edcd696a274978ee2eaa85f9ba22b372af09f85316b7bbb4fbeec118e6dd1194e5960ebaecf79cd09f86ce455fedec80a741772507af547728230f758a990688ffced8b6f014e56df024a9d7ac5bdfe02e3c43dff8a76f288f40398d0748b554686cd3336", @nested={0x1d, 0xc3, 0x0, 0x1, [@nested={0x4, 0x9f}, @typed={0x8, 0x41, 0x0, 0x0, @fd=r2}, @generic="248958ea9fa861b86e460f2dbd"]}, @nested={0x3ae, 0xed, 0x0, 0x1, [@generic="9961", @nested={0x6d, 0x2, 0x0, 0x1, [@typed={0x8, 0x8b, 0x0, 0x0, @fd=r0}, @generic="c7723c7e392fe563d114848766023c3493bcbe90fb88397d77adb2d41cba1e603917a8fef8007f4f091607a4b28ba349b40ac79594e1a5ccf9c8f3662fd98eddfcec4e0025045702fff6c94c361a364a92a381e35aa05840ce219252fbfd74ecf6"]}, @typed={0x14, 0xa4, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0xac, 0x10c, 0x0, 0x1, [@generic="bcb460a622191dd39ea0bd447f717cb8ec9108558bc2301ccd93aa065dcad13c23613ee732540f463fa78b341ecb510d07ccb89c95e937fe6043cc55b358336434bb017b68924a6e185a02638e754c7bae7add92806c3e7add4c6589e68611a632b379a1fe1fc339de516ec7bffb8a2fb98a87d65ab8727cae0031842a29acad2b791dd36a8caba411d5982415397e397223ef76d43906895e8e2c5cb9f486f68d0a9de170cd3473"]}, @typed={0x4, 0x6b}, @nested={0x264, 0xd4, 0x0, 0x1, [@generic="bd74e76225bef8d928439b9721a8486743f1ea7292addc3c24c9b4b68abfc6125fc5999565fe4793060eb41841f2e29f4e6904afe3d488c42a3e0200669851d13b38b94395e7c0a8e842d89faeefae38f96a4350c1b20f331d4610d445026c87e0623fb5b7602353ab4f3931a5fa114d1c9d84bbd71660195c7f37a3cab65e976ac19b934e73ddb129d18a19597884303c1b9f920ed2484032cf5e8ea4ffc560c96cb0f8000328651a8f6ddc7535431c739d2d6b4b72bf7fee0265a13ef257b6afe86e70419f4083257f66a7661639d43b294790ed4024176355000000000090c873e5903585e795411a90dc23025bcb0ff56b", @typed={0x8, 0x78, 0x0, 0x0, @fd=r0}, @typed={0x98, 0xb9, 0x0, 0x0, @binary="0b601f54195c3c3edad2fa69121e51634b5272dc2fd31154ae1410aadf98af7518e43ba4f7673db921d9646619b79f6901608d9e77a1b15606131cd706a1560389920f807ac733d7c6e214cc9de35b0bcabcee2bb969cccf9d71d0e25a6221ea28919b2db9a1ed4cf534d19b3af5e927145c866bb9be9750d2c63a397d1cd8096f2d5fd5ff4a543830d2d6b8b5fc33e8c0ee3c9c"}, @typed={0x4, 0x42}, @typed={0x8, 0x130, 0x0, 0x0, @ipv4=@multicast1}, @generic="60c38acbf0ea2d7c84a35a4dd313ddacf96821c9d3787b0a8a9e466a4d1257dd04908760c20f1aa21866cf195f0f8eafb30e181c667caadcfc391f6eab536d2de03d6153365276b13905163c43c1697a6669c6fab27b308fab4bd2c07315e6fac5054c1369060994ee6987d0ece9550da441c457d1c50b85bbc992eb82db613ce6ae36dac6f56f6f42629a1e2e20497dfe7b2843377d15eed3aa13cfd1b70baee6fe29d4e9e08539784543c81d31f70e1d250202a68ce3d6cab43496a9f5301c2f"]}, @typed={0x5, 0xa6, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x8c, 0x0, 0x0, @uid=r4}]}, @nested={0x24, 0x37, 0x0, 0x1, [@nested={0x4, 0x11c}, @typed={0x14, 0x36, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0x123, 0x0, 0x0, @uid=r4}]}]}, @NL80211_ATTR_HE_OBSS_PD={0xa4, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xd}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x10}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x8}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0x6e, 0x5, "e1083f36349274b643bfaa4b3703d4b51334411040448442b307ab0f3a3ebb42f699b2553b71deca7163ff49bd1f4d9186088263db7804ace97aa9362567e6adf7b85429d2bd1dce645d54185160a7be66825bcbf49030ef4f9651e4365e002ef8b6694c90db06e58305"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0xcb}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x2a, 0xbd, "2589791dea4d00599bd844866c097d041c96560d124477adbbcc5a4498a806410620431ab83c"}, @NL80211_ATTR_WIPHY_NAME={0xda, 0x2, '0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x1f\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe1u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06\x05\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xd6'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x624}, 0x1, 0x0, 0x0, 0x900}, 0x4000000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nullb0/integrity/read_verify\x00', 0x102, 0x0) sendfile$auto(r5, r5, 0x0, 0x7) r6 = io_uring_setup$auto(0x6, 0x0) r7 = syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f00000000c0), r6) sendmsg$auto_NLBL_CALIPSO_C_LISTALL(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r7, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0xffffffff}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$auto_NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x853}, 0x4000940) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x7, &(0x7f0000000000)="f91a01439985c3d1a8e777e5dab050252e478c6caa1b5c7949cb1441542e1faf67fb3dc16634cfb135f7bcb2f049137f745c85897a2e64a39d5bc55e4bf3") 328.759789ms ago: executing program 5 (id=766): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) r2 = getpgrp(0x0) r3 = fcntl$auto(r1, 0x402, r2) ioctl$auto_TIOCSSERIAL2(r3, 0x541e, 0x0) fcntl$auto(r0, 0x402, r2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 285.175135ms ago: executing program 2 (id=767): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x80800, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) sendfile$auto(0x6, 0x3, 0x0, 0x7) mmap$auto(0x4000000000000, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munmap$auto(0x20001000, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x21, 0x2, 0x2) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0xfffffffffffffffe, 0x8, 0x8003, 0xeb3, 0xfffffffffffffff9, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x0, 0x800}}, 0x0) mmap$auto(0xfffffffffffffff1, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffa, 0x38) madvise$auto(0x8c3a, 0x2, 0x36b) socket(0x2, 0x3, 0xa) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) ioctl$auto(0x1, 0x89a0, 0x8) read$auto(0x3, 0x0, 0x400000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14f602, 0x0) syz_genetlink_get_family_id$auto_ila(&(0x7f00000000c0), r0) 0s ago: executing program 6 (id=768): sendmsg$auto_NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x440d1}, 0x4084) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) capset$auto(&(0x7f0000000080)={0x8000, 0xffffffffffffffff}, &(0x7f00000000c0)={0xf, 0x4}) capset$auto(&(0x7f0000000180)={0x10, r0}, &(0x7f0000000200)={0xfffffffe, 0x4, 0x5}) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x4d}) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) io_uring_setup$auto(0x6, 0x0) r2 = socket(0x2b, 0x1, 0x0) sendmsg$auto_NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x2404c040) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000040), 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) kernel console output (not intermixed with test programs): _read+0x12b/0x250 [ 99.012738][ T6021] ? __pfx_ksys_read+0x10/0x10 [ 99.017579][ T6021] do_syscall_64+0xcd/0x250 [ 99.022133][ T6021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.028069][ T6021] RIP: 0033:0x7ff9c0b85d29 [ 99.032516][ T6021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.052175][ T6021] RSP: 002b:00007ff9c1969038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.060629][ T6021] RAX: ffffffffffffffda RBX: 00007ff9c0d75fa0 RCX: 00007ff9c0b85d29 [ 99.068626][ T6021] RDX: 0000000000000010 RSI: 0000000020000100 RDI: 0000000000000003 [ 99.076624][ T6021] RBP: 00007ff9c1969090 R08: 0000000000000000 R09: 0000000000000000 [ 99.084625][ T6021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.092644][ T6021] R13: 0000000000000000 R14: 00007ff9c0d75fa0 R15: 00007ffe8be98458 [ 99.100663][ T6021] [ 99.103857][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.146773][ T6024] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.668896][ T6044] FAULT_INJECTION: forcing a failure. [ 99.668896][ T6044] name failslab, interval 1, probability 0, space 0, times 0 [ 99.684182][ T6044] CPU: 1 UID: 0 PID: 6044 Comm: syz.2.45 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 99.694762][ T6044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 99.704866][ T6044] Call Trace: [ 99.708171][ T6044] [ 99.711130][ T6044] dump_stack_lvl+0x16c/0x1f0 [ 99.715857][ T6044] should_fail_ex+0x497/0x5b0 [ 99.720579][ T6044] ? fs_reclaim_acquire+0xae/0x150 [ 99.725730][ T6044] should_failslab+0xc2/0x120 [ 99.730651][ T6044] __kmalloc_node_noprof+0xd1/0x520 [ 99.735907][ T6044] ? alloc_slab_obj_exts+0x41/0xa0 [ 99.741079][ T6044] alloc_slab_obj_exts+0x41/0xa0 [ 99.746062][ T6044] __memcg_slab_post_alloc_hook+0x2a7/0x9b0 [ 99.752015][ T6044] __kmalloc_node_noprof+0x409/0x520 [ 99.757349][ T6044] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 99.762854][ T6044] ? __pfx_lock_release+0x10/0x10 [ 99.767917][ T6044] __kvmalloc_node_noprof+0xad/0x1a0 [ 99.773244][ T6044] seq_read_iter+0x82a/0x12b0 [ 99.777970][ T6044] seq_read+0x39f/0x4e0 [ 99.782158][ T6044] ? __pfx_seq_read+0x10/0x10 [ 99.786885][ T6044] ? __pfx_seq_read+0x10/0x10 [ 99.791610][ T6044] proc_reg_read+0x23d/0x330 [ 99.796239][ T6044] ? __pfx_proc_reg_read+0x10/0x10 [ 99.801389][ T6044] vfs_read+0x1df/0xbe0 [ 99.805583][ T6044] ? __fget_files+0x1fc/0x3a0 [ 99.810313][ T6044] ? __pfx___mutex_lock+0x10/0x10 [ 99.815376][ T6044] ? __pfx_vfs_read+0x10/0x10 [ 99.820097][ T6044] ? __fget_files+0x206/0x3a0 [ 99.824834][ T6044] ksys_read+0x12b/0x250 [ 99.829115][ T6044] ? __pfx_ksys_read+0x10/0x10 [ 99.833925][ T6044] do_syscall_64+0xcd/0x250 [ 99.838470][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.844407][ T6044] RIP: 0033:0x7f5553985d29 [ 99.848848][ T6044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.868510][ T6044] RSP: 002b:00007f55546cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.876966][ T6044] RAX: ffffffffffffffda RBX: 00007f5553b75fa0 RCX: 00007f5553985d29 [ 99.884967][ T6044] RDX: 00000000000000f8 RSI: 0000000020000200 RDI: 0000000000000003 [ 99.892967][ T6044] RBP: 00007f55546cf090 R08: 0000000000000000 R09: 0000000000000000 [ 99.900968][ T6044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.908966][ T6044] R13: 0000000000000000 R14: 00007f5553b75fa0 R15: 00007fff0a32a898 [ 99.917074][ T6044] [ 100.053858][ T6046] openvswitch: netlink: Message has 148 unknown bytes. [ 100.137653][ T6048] syz.2.46 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 100.330627][ T6051] netlink: ct family unspecified [ 100.682483][ T6065] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.992787][ T6074] netlink: 'syz.0.54': attribute type 5 has an invalid length. [ 101.035430][ T6074] netlink: 314 bytes leftover after parsing attributes in process `syz.0.54'. [ 101.314872][ T6080] sp0: Synchronizing with TNC [ 101.397544][ T6080] Zero length message leads to an empty skb [ 101.614194][ T6093] FAULT_INJECTION: forcing a failure. [ 101.614194][ T6093] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 101.628359][ T6093] CPU: 1 UID: 0 PID: 6093 Comm: syz.1.59 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 101.638937][ T6093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 101.649046][ T6093] Call Trace: [ 101.652373][ T6093] [ 101.655358][ T6093] dump_stack_lvl+0x16c/0x1f0 [ 101.660103][ T6093] should_fail_ex+0x497/0x5b0 [ 101.664852][ T6093] ? fs_reclaim_acquire+0xae/0x150 [ 101.670035][ T6093] should_fail_alloc_page+0xe7/0x130 [ 101.675395][ T6093] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 101.681625][ T6093] __alloc_pages_noprof+0x190/0x25b0 [ 101.686993][ T6093] ? hlock_class+0x4e/0x130 [ 101.691564][ T6093] ? mark_lock+0xb5/0xc60 [ 101.695965][ T6093] ? hlock_class+0x4e/0x130 [ 101.700531][ T6093] ? __pfx_mark_lock+0x10/0x10 [ 101.705378][ T6093] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 101.711179][ T6093] ? __lock_acquire+0x15a9/0x3c40 [ 101.716392][ T6093] ? mark_lock+0xb5/0xc60 [ 101.720808][ T6093] ? hlock_class+0x4e/0x130 [ 101.725372][ T6093] ? __lock_acquire+0xcc5/0x3c40 [ 101.730365][ T6093] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 101.736335][ T6093] ? policy_nodemask+0xea/0x4e0 [ 101.741271][ T6093] alloc_pages_mpol_noprof+0x2c9/0x610 [ 101.746827][ T6093] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 101.752936][ T6093] ? __lock_acquire+0xcc5/0x3c40 [ 101.757955][ T6093] folio_alloc_mpol_noprof+0x36/0xd0 [ 101.763330][ T6093] vma_alloc_folio_noprof+0xee/0x1b0 [ 101.768683][ T6093] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 101.774796][ T6093] ? find_held_lock+0x2d/0x110 [ 101.779658][ T6093] do_pte_missing+0x2017/0x3e00 [ 101.784612][ T6093] __handle_mm_fault+0x103c/0x2a40 [ 101.789813][ T6093] ? lock_vma_under_rcu+0x6b9/0x980 [ 101.795087][ T6093] ? __pfx___handle_mm_fault+0x10/0x10 [ 101.800666][ T6093] handle_mm_fault+0x3fa/0xaa0 [ 101.805516][ T6093] do_user_addr_fault+0x60d/0x13f0 [ 101.810701][ T6093] exc_page_fault+0x5c/0xc0 [ 101.815272][ T6093] asm_exc_page_fault+0x26/0x30 [ 101.820186][ T6093] RIP: 0033:0x7f2f85a51b1b [ 101.824663][ T6093] Code: 00 00 00 48 8d 3d fd 33 19 00 48 89 c1 31 c0 e8 6b 44 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 31 34 19 00 48 89 34 24 48 8b 14 24 48 8b [ 101.844341][ T6093] RSP: 002b:00007f2f869fefb0 EFLAGS: 00010202 [ 101.850468][ T6093] RAX: 0000000000000000 RBX: 00007f2f85d75fa0 RCX: 0000000000000000 [ 101.858500][ T6093] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000200000c0 [ 101.866533][ T6093] RBP: 00007f2f86a00090 R08: 0000000000000000 R09: 0000000000000000 [ 101.874575][ T6093] R10: 00000000200000c0 R11: 0000000000000000 R12: 0000000000000001 [ 101.882615][ T6093] R13: 0000000000000000 R14: 00007f2f85d75fa0 R15: 00007ffde12dde18 [ 101.890675][ T6093] [ 101.951646][ T6093] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 102.057459][ T6068] futex_wake_op: syz.3.53 tries to shift op by 64; fix this program [ 102.715216][ T6118] FAULT_INJECTION: forcing a failure. [ 102.715216][ T6118] name failslab, interval 1, probability 0, space 0, times 0 [ 102.727990][ T6118] CPU: 1 UID: 0 PID: 6118 Comm: syz.3.67 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 102.738641][ T6118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 102.748753][ T6118] Call Trace: [ 102.752080][ T6118] [ 102.755048][ T6118] dump_stack_lvl+0x16c/0x1f0 [ 102.759794][ T6118] should_fail_ex+0x497/0x5b0 [ 102.764540][ T6118] ? fs_reclaim_acquire+0xae/0x150 [ 102.769716][ T6118] should_failslab+0xc2/0x120 [ 102.774464][ T6118] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 102.779905][ T6118] ? alloc_empty_file+0x73/0x1e0 [ 102.784926][ T6118] alloc_empty_file+0x73/0x1e0 [ 102.789768][ T6118] path_openat+0xe1/0x2d60 [ 102.794244][ T6118] ? hlock_class+0x4e/0x130 [ 102.798820][ T6118] ? __lock_acquire+0x15a9/0x3c40 [ 102.803915][ T6118] ? __pfx_path_openat+0x10/0x10 [ 102.808918][ T6118] ? __pfx___lock_acquire+0x10/0x10 [ 102.814169][ T6118] ? lock_acquire.part.0+0x11b/0x380 [ 102.819517][ T6118] ? find_held_lock+0x2d/0x110 [ 102.824376][ T6118] do_filp_open+0x20c/0x470 [ 102.828948][ T6118] ? __pfx_do_filp_open+0x10/0x10 [ 102.834031][ T6118] ? find_held_lock+0x2d/0x110 [ 102.838887][ T6118] ? alloc_fd+0x41f/0x760 [ 102.843330][ T6118] do_sys_openat2+0x17a/0x1e0 [ 102.848102][ T6118] ? __pfx_do_sys_openat2+0x10/0x10 [ 102.853389][ T6118] ? __fget_files+0x206/0x3a0 [ 102.858143][ T6118] __x64_sys_openat+0x175/0x210 [ 102.863077][ T6118] ? __pfx___x64_sys_openat+0x10/0x10 [ 102.868535][ T6118] ? ksys_write+0x1ba/0x250 [ 102.873144][ T6118] do_syscall_64+0xcd/0x250 [ 102.877734][ T6118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.883711][ T6118] RIP: 0033:0x7f2343985d29 [ 102.888185][ T6118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.907861][ T6118] RSP: 002b:00007f2344834038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 102.916359][ T6118] RAX: ffffffffffffffda RBX: 00007f2343b75fa0 RCX: 00007f2343985d29 [ 102.924402][ T6118] RDX: 0000000000020201 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 102.932438][ T6118] RBP: 00007f2344834090 R08: 0000000000000000 R09: 0000000000000000 [ 102.940493][ T6118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.948563][ T6118] R13: 0000000000000000 R14: 00007f2343b75fa0 R15: 00007ffd801495c8 [ 102.956624][ T6118] [ 103.906009][ T6143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.75'. [ 103.922947][ T6143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.75'. [ 104.613374][ T6160] FAULT_INJECTION: forcing a failure. [ 104.613374][ T6160] name failslab, interval 1, probability 0, space 0, times 0 [ 104.637529][ T6160] CPU: 1 UID: 0 PID: 6160 Comm: syz.2.79 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 104.648174][ T6160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 104.658278][ T6160] Call Trace: [ 104.661602][ T6160] [ 104.664576][ T6160] dump_stack_lvl+0x16c/0x1f0 [ 104.669322][ T6160] should_fail_ex+0x497/0x5b0 [ 104.674068][ T6160] ? fs_reclaim_acquire+0xae/0x150 [ 104.679276][ T6160] should_failslab+0xc2/0x120 [ 104.684034][ T6160] __kmalloc_noprof+0xce/0x4f0 [ 104.688875][ T6160] ? lock_acquire+0x2f/0xb0 [ 104.693437][ T6160] ? proc_ioctl+0x175/0x6a0 [ 104.698011][ T6160] proc_ioctl+0x175/0x6a0 [ 104.702399][ T6160] usbdev_ioctl+0x177d/0x3f90 [ 104.707119][ T6160] ? __pfx_usbdev_ioctl+0x10/0x10 [ 104.712186][ T6160] ? do_vfs_ioctl+0x513/0x1950 [ 104.716980][ T6160] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 104.722067][ T6160] ? __pfx_lock_release+0x10/0x10 [ 104.727133][ T6160] ? trace_lock_acquire+0x14e/0x1f0 [ 104.732398][ T6160] ? __fget_files+0x206/0x3a0 [ 104.737124][ T6160] ? __pfx_usbdev_ioctl+0x10/0x10 [ 104.742196][ T6160] __x64_sys_ioctl+0x190/0x200 [ 104.746997][ T6160] do_syscall_64+0xcd/0x250 [ 104.751545][ T6160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.757476][ T6160] RIP: 0033:0x7f5553985d29 [ 104.761916][ T6160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.781592][ T6160] RSP: 002b:00007f55546cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.790037][ T6160] RAX: ffffffffffffffda RBX: 00007f5553b75fa0 RCX: 00007f5553985d29 [ 104.798034][ T6160] RDX: 0000000000000001 RSI: 00000000c0105512 RDI: 0000000000000003 [ 104.806056][ T6160] RBP: 00007f55546cf090 R08: 0000000000000000 R09: 0000000000000000 [ 104.814057][ T6160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.822054][ T6160] R13: 0000000000000000 R14: 00007f5553b75fa0 R15: 00007fff0a32a898 [ 104.830066][ T6160] [ 106.295615][ T6165] kexec: Could not allocate control_code_buffer [ 109.458047][ T6214] mmap: syz.2.94 (6214) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 110.191504][ T6227] mkiss: ax0: crc mode is auto. [ 110.258690][ T6231] [U] [ 110.261709][ T6231] [U] [ 110.264483][ T6231] [U] [ 110.267249][ T6231] [U] [ 110.343249][ T6236] [U] [ 110.919517][ T6239] [U] [ 110.922318][ T6239] [U] [ 110.925122][ T6239] [U] [ 110.927890][ T6239] [U] [ 110.957036][ T6239] [U] [ 110.959839][ T6239] [U] [ 110.962593][ T6239] [U] [ 110.965345][ T6239] [U] [ 110.997265][ T6239] FAULT_INJECTION: forcing a failure. [ 110.997265][ T6239] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 111.041121][ T6239] CPU: 1 UID: 0 PID: 6239 Comm: syz.0.107 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 111.051884][ T6239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 111.061985][ T6239] Call Trace: [ 111.065300][ T6239] [ 111.068269][ T6239] dump_stack_lvl+0x16c/0x1f0 [ 111.073006][ T6239] should_fail_ex+0x497/0x5b0 [ 111.077741][ T6239] ? fs_reclaim_acquire+0xae/0x150 [ 111.082907][ T6239] should_fail_alloc_page+0xe7/0x130 [ 111.088279][ T6239] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 111.094586][ T6239] ? check_irq_usage+0x170/0x1290 [ 111.099707][ T6239] __alloc_pages_noprof+0x190/0x25b0 [ 111.105065][ T6239] ? __pfx_mark_lock+0x10/0x10 [ 111.109896][ T6239] ? hlock_conflict+0x58/0x200 [ 111.114733][ T6239] ? __bfs+0x2fa/0x670 [ 111.118861][ T6239] ? __pfx_hlock_conflict+0x10/0x10 [ 111.124133][ T6239] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 111.129945][ T6239] ? hlock_class+0x4e/0x130 [ 111.134512][ T6239] ? __lock_acquire+0xcc5/0x3c40 [ 111.139514][ T6239] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 111.145468][ T6239] ? policy_nodemask+0xea/0x4e0 [ 111.150387][ T6239] alloc_pages_mpol_noprof+0x2c9/0x610 [ 111.155936][ T6239] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 111.161992][ T6239] ? find_held_lock+0x2d/0x110 [ 111.166827][ T6239] folio_alloc_mpol_noprof+0x36/0xd0 [ 111.172164][ T6239] shmem_alloc_folio+0x135/0x160 [ 111.177436][ T6239] shmem_alloc_and_add_folio+0x48b/0xc00 [ 111.183137][ T6239] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 111.189106][ T6239] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 111.195313][ T6239] ? shmem_huge_global_enabled+0x176/0x250 [ 111.201192][ T6239] ? shmem_allowable_huge_orders+0xcd/0x3e0 [ 111.207152][ T6239] shmem_get_folio_gfp+0x689/0x1530 [ 111.212416][ T6239] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 111.218111][ T6239] ? filemap_map_pages+0xf92/0x16b0 [ 111.223378][ T6239] shmem_fault+0x200/0xae0 [ 111.227872][ T6239] ? __pfx_shmem_fault+0x10/0x10 [ 111.232883][ T6239] ? do_pte_missing+0xdd7/0x3e00 [ 111.237888][ T6239] ? __pfx_lock_release+0x10/0x10 [ 111.242983][ T6239] __do_fault+0x10a/0x490 [ 111.247378][ T6239] do_pte_missing+0xebd/0x3e00 [ 111.252221][ T6239] __handle_mm_fault+0x103c/0x2a40 [ 111.257412][ T6239] ? __pfx___handle_mm_fault+0x10/0x10 [ 111.262936][ T6239] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 111.268648][ T6239] ? find_vma+0xc0/0x140 [ 111.272949][ T6239] ? __pfx_find_vma+0x10/0x10 [ 111.277683][ T6239] handle_mm_fault+0x3fa/0xaa0 [ 111.282518][ T6239] do_user_addr_fault+0x7a3/0x13f0 [ 111.287686][ T6239] exc_page_fault+0x5c/0xc0 [ 111.292252][ T6239] asm_exc_page_fault+0x26/0x30 [ 111.297167][ T6239] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 111.303046][ T6239] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 111.322713][ T6239] RSP: 0018:ffffc9000b17fb80 EFLAGS: 00050206 [ 111.328834][ T6239] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000000800 [ 111.336846][ T6239] RDX: 0000000000000000 RSI: 0000000000001000 RDI: ffff888077e4f000 [ 111.344953][ T6239] RBP: ffffc9000b17fda0 R08: 0000000000000001 R09: ffffed100efc9eff [ 111.352974][ T6239] R10: ffff888077e4f7ff R11: 0000000000000000 R12: 0000000000001800 [ 111.360994][ T6239] R13: 00007ffffffff000 R14: ffff888077e4f000 R15: 0000000000000800 [ 111.369029][ T6239] _copy_from_iter+0x384/0x1400 [ 111.373960][ T6239] ? trace_lock_acquire+0x14e/0x1f0 [ 111.379313][ T6239] ? __pfx__copy_from_iter+0x10/0x10 [ 111.384662][ T6239] ? __virt_addr_valid+0x1a4/0x590 [ 111.389844][ T6239] ? __virt_addr_valid+0x5e/0x590 [ 111.394942][ T6239] ? __phys_addr_symbol+0x30/0x80 [ 111.400032][ T6239] ? __check_object_size+0x488/0x710 [ 111.405395][ T6239] file_tty_write.constprop.0+0x48d/0x9a0 [ 111.411198][ T6239] vfs_write+0x5ae/0x1150 [ 111.415595][ T6239] ? __pfx_tty_write+0x10/0x10 [ 111.420428][ T6239] ? __pfx_vfs_write+0x10/0x10 [ 111.425341][ T6239] ? __fget_files+0x40/0x3a0 [ 111.430010][ T6239] ksys_write+0x12b/0x250 [ 111.434398][ T6239] ? __pfx_ksys_write+0x10/0x10 [ 111.439319][ T6239] do_syscall_64+0xcd/0x250 [ 111.443888][ T6239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.449848][ T6239] RIP: 0033:0x7ff9c0b85d29 [ 111.454314][ T6239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.473976][ T6239] RSP: 002b:00007ff9c1969038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 111.482443][ T6239] RAX: ffffffffffffffda RBX: 00007ff9c0d75fa0 RCX: 00007ff9c0b85d29 [ 111.490461][ T6239] RDX: 000000000000effd RSI: 0000000000000000 RDI: 000000000000000b [ 111.498479][ T6239] RBP: 00007ff9c1969090 R08: 0000000000000000 R09: 0000000000000000 [ 111.506498][ T6239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.514513][ T6239] R13: 0000000000000000 R14: 00007ff9c0d75fa0 R15: 00007ffe8be98458 [ 111.522550][ T6239] [ 112.157583][ T6241] [U] [ 115.990401][ T6271] process 'syz.3.115' launched ':,' with NULL argv: empty string added [ 117.472191][ T6294] netlink: 222 bytes leftover after parsing attributes in process `syz.2.120'. [ 117.527076][ T6294] FAULT_INJECTION: forcing a failure. [ 117.527076][ T6294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.600522][ T6294] CPU: 1 UID: 0 PID: 6294 Comm: syz.2.120 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 117.611211][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 117.621310][ T6294] Call Trace: [ 117.624627][ T6294] [ 117.627597][ T6294] dump_stack_lvl+0x16c/0x1f0 [ 117.632336][ T6294] should_fail_ex+0x497/0x5b0 [ 117.637083][ T6294] _copy_from_user+0x2e/0xd0 [ 117.641749][ T6294] memdup_user+0x71/0xd0 [ 117.646052][ T6294] strndup_user+0x78/0xe0 [ 117.650439][ T6294] vt_do_kdgkb_ioctl+0xd7/0x3d0 [ 117.655375][ T6294] vt_ioctl+0x349/0x2fd0 [ 117.659683][ T6294] ? __pfx_vt_ioctl+0x10/0x10 [ 117.664416][ T6294] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 117.670128][ T6294] ? tomoyo_path_number_perm+0x190/0x5b0 [ 117.675841][ T6294] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 117.681895][ T6294] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 117.687846][ T6294] ? do_vfs_ioctl+0x513/0x1950 [ 117.692658][ T6294] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 117.698605][ T6294] ? tty_jobctrl_ioctl+0x152/0xe00 [ 117.703859][ T6294] ? __pfx_vt_ioctl+0x10/0x10 [ 117.708594][ T6294] tty_ioctl+0x651/0x1640 [ 117.713006][ T6294] ? __pfx_tty_ioctl+0x10/0x10 [ 117.717854][ T6294] ? __pfx_lock_release+0x10/0x10 [ 117.722958][ T6294] ? trace_lock_acquire+0x14e/0x1f0 [ 117.728254][ T6294] ? __fget_files+0x206/0x3a0 [ 117.733003][ T6294] ? __pfx_tty_ioctl+0x10/0x10 [ 117.737833][ T6294] __x64_sys_ioctl+0x190/0x200 [ 117.742659][ T6294] do_syscall_64+0xcd/0x250 [ 117.747236][ T6294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.753192][ T6294] RIP: 0033:0x7f5553985d29 [ 117.757653][ T6294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.777321][ T6294] RSP: 002b:00007f55546cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.785795][ T6294] RAX: ffffffffffffffda RBX: 00007f5553b75fa0 RCX: 00007f5553985d29 [ 117.793811][ T6294] RDX: 0000000000000009 RSI: 0000000000004b49 RDI: 0000000000000006 [ 117.801827][ T6294] RBP: 00007f55546cf090 R08: 0000000000000000 R09: 0000000000000000 [ 117.809841][ T6294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.817861][ T6294] R13: 0000000000000000 R14: 00007f5553b75fa0 R15: 00007fff0a32a898 [ 117.825898][ T6294] [ 117.829066][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.898427][ T6297] Process accounting resumed [ 117.904039][ T6297] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 6297 comm: syz.3.121) [ 118.280789][ T6303] netlink: 'syz.3.123': attribute type 2 has an invalid length. [ 118.325133][ T6303] netlink: 674 bytes leftover after parsing attributes in process `syz.3.123'. [ 118.472134][ T6303] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 6303 comm: syz.3.123) [ 118.964206][ T6307] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 6307 comm: syz.3.125) [ 119.271844][ T6316] netlink: 28 bytes leftover after parsing attributes in process `syz.3.128'. [ 119.302311][ T6316] veth1_macvtap: left promiscuous mode [ 119.332593][ T6316] macsec0: entered allmulticast mode [ 119.664319][ T6317] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 6317 comm: syz.3.128) [ 119.992938][ T6323] FAULT_INJECTION: forcing a failure. [ 119.992938][ T6323] name failslab, interval 1, probability 0, space 0, times 0 [ 120.041387][ T6323] CPU: 1 UID: 0 PID: 6323 Comm: syz.3.130 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 120.052070][ T6323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 120.062168][ T6323] Call Trace: [ 120.065482][ T6323] [ 120.068449][ T6323] dump_stack_lvl+0x16c/0x1f0 [ 120.073191][ T6323] should_fail_ex+0x497/0x5b0 [ 120.077931][ T6323] ? fs_reclaim_acquire+0xae/0x150 [ 120.083108][ T6323] should_failslab+0xc2/0x120 [ 120.087850][ T6323] __kmalloc_cache_noprof+0x68/0x420 [ 120.093194][ T6323] ? __pfx_aa_file_perm+0x10/0x10 [ 120.098285][ T6323] ? hlock_class+0x4e/0x130 [ 120.102855][ T6323] ? __pfx_uinput_write+0x10/0x10 [ 120.107948][ T6323] input_allocate_device+0x44/0x350 [ 120.113211][ T6323] uinput_write+0x992/0x12b0 [ 120.117876][ T6323] ? __pfx_uinput_write+0x10/0x10 [ 120.122981][ T6323] ? apparmor_file_permission+0x251/0x400 [ 120.128776][ T6323] ? bpf_lsm_file_permission+0x9/0x10 [ 120.134219][ T6323] ? security_file_permission+0x71/0x210 [ 120.139969][ T6323] ? __pfx_uinput_write+0x10/0x10 [ 120.145063][ T6323] vfs_write+0x24c/0x1150 [ 120.149451][ T6323] ? __fget_files+0x1fc/0x3a0 [ 120.154192][ T6323] ? __pfx_lock_release+0x10/0x10 [ 120.159275][ T6323] ? __pfx_vfs_write+0x10/0x10 [ 120.164191][ T6323] ? lock_acquire+0x2f/0xb0 [ 120.168740][ T6323] ? __fget_files+0x40/0x3a0 [ 120.173394][ T6323] ? __fget_files+0x206/0x3a0 [ 120.178143][ T6323] ksys_write+0x207/0x250 [ 120.182534][ T6323] ? __pfx_ksys_write+0x10/0x10 [ 120.187453][ T6323] do_syscall_64+0xcd/0x250 [ 120.192024][ T6323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.197987][ T6323] RIP: 0033:0x7f2343985d29 [ 120.202468][ T6323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.222127][ T6323] RSP: 002b:00007f2344834038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 120.230595][ T6323] RAX: ffffffffffffffda RBX: 00007f2343b75fa0 RCX: 00007f2343985d29 [ 120.238610][ T6323] RDX: 000000000000045c RSI: 0000000000000000 RDI: 0000000000000005 [ 120.246628][ T6323] RBP: 00007f2344834090 R08: 0000000000000000 R09: 0000000000000000 [ 120.254646][ T6323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.262664][ T6323] R13: 0000000000000000 R14: 00007f2343b75fa0 R15: 00007ffd801495c8 [ 120.270706][ T6323] [ 120.273838][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.452307][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 120.469945][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 120.479307][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 120.488200][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 120.497124][ T5845] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 120.505745][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 120.679093][ T6333] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 6333 comm: syz.3.130) [ 121.167146][ T6327] chnl_net:caif_netlink_parms(): no params data found [ 121.382040][ T6336] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 6336 comm: syz.3.132) [ 121.694684][ T6354] netlink: 326 bytes leftover after parsing attributes in process `syz.2.135'. [ 121.797638][ T6352] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 6352 comm: syz.3.136) [ 121.817888][ T6354] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.827277][ T6354] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.232105][ T6363] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 6363 comm: syz.3.138) [ 122.570556][ T5845] Bluetooth: hci4: command tx timeout [ 122.906882][ T6327] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.924591][ T6327] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.958915][ T6327] bridge_slave_0: entered allmulticast mode [ 122.975800][ T6327] bridge_slave_0: entered promiscuous mode [ 123.010710][ T6327] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.034333][ T6327] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.043715][ T6327] bridge_slave_1: entered allmulticast mode [ 123.051508][ T6327] bridge_slave_1: entered promiscuous mode [ 123.159937][ T6327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.218630][ T6327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.360368][ T6327] team0: Port device team_slave_0 added [ 123.387780][ T6327] team0: Port device team_slave_1 added [ 123.490760][ T6327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.497776][ T6327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.608355][ T6327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.691467][ T6327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.720242][ T6327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.868654][ T6327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.092765][ T6327] hsr_slave_0: entered promiscuous mode [ 124.123574][ T6367] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 6367 comm: syz.3.140) [ 124.135484][ T6327] hsr_slave_1: entered promiscuous mode [ 124.180345][ T6327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.217392][ T6327] Cannot create hsr debugfs directory [ 124.650922][ T5845] Bluetooth: hci4: command tx timeout [ 125.011152][ T6327] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 125.084904][ T6327] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 125.144877][ T6327] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 125.182902][ T6327] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 125.479221][ T6380] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 6380 comm: syz.3.143) [ 125.593355][ T6327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.725652][ T6327] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.801749][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.808990][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.881717][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.888949][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.165939][ T6388] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 6388 comm: syz.3.145) [ 126.625585][ T6398] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 6398 comm: syz.3.147) [ 126.740209][ T5845] Bluetooth: hci4: command tx timeout [ 126.830050][ T6327] 8021q: adding VLAN 0 to HW filter on device batadv0 s `syz.3.148'. [ 127.858068][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.405876][ T6404] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 6404 comm: syz.3.148) [ 128.498844][ T6327] veth0_vlan: entered promiscuous mode [ 128.558238][ T6327] veth1_vlan: entered promiscuous mode [ 128.569702][ T6415] netlink: 32 bytes leftover after parsing attributes in process `syz.0.150'. [ 128.684904][ T6327] veth0_macvtap: entered promiscuous mode [ 128.754299][ T6327] veth1_macvtap: entered promiscuous mode [ 128.812259][ T5845] Bluetooth: hci4: command tx timeout [ 128.862921][ T6327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.940485][ T6327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.982425][ T6327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.060293][ T6327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.120266][ T6327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.168667][ T6327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.204626][ T6327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.252234][ T6327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.294214][ T6327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.443987][ T6327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.503472][ T6327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.542774][ T6327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.611215][ T6327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.653199][ T6327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.700420][ T6327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.744218][ T6327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.777117][ T6434] netlink: 'syz.2.154': attribute type 64 has an invalid length. [ 129.800614][ T6327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.817005][ T6434] netlink: 74 bytes leftover after parsing attributes in process `syz.2.154'. [ 129.832196][ T6327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.927820][ T6327] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.954347][ T6327] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.996398][ T6327] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.074909][ T6327] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.773407][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.835921][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.973917][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.027127][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.826566][ T6449] netlink: 28 bytes leftover after parsing attributes in process `syz.2.156'. [ 131.846368][ T6422] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 6422 comm: syz.3.152) [ 131.954791][ T6449] lo: entered allmulticast mode [ 132.432949][ T6452] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 6452 comm: syz.3.158) [ 132.605814][ T6456] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 6456 comm: syz.3.159) [ 132.965282][ T6463] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 6463 comm: syz.3.162) [ 133.236941][ T6468] [U]  [ 133.239838][ T6468] [U] [ 133.242606][ T6468] [U] [ 133.245373][ T6468] [U] [ 133.378749][ T6468] [U] [ 133.381560][ T6468] [U] [ 133.384324][ T6468] [U] [ 133.387085][ T6468] [U] [ 133.491594][ T6468] [U] [ 133.494403][ T6468] [U] [ 133.497169][ T6468] [U] [ 133.499931][ T6468] [U] [ 133.577320][ T6468] [U] [ 133.692562][ T6478] usb usb6: check_ctrlrecip: process 6478 (syz.4.166) requesting ep 01 but needs 81 [ 133.755230][ T6478] usb usb6: usbfs: process 6478 (syz.4.166) did not claim interface 0 before use [ 133.841865][ T6480] : Can't lookup blockdev [ 136.446742][ T6486] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 6486 comm: syz.3.165) [ 138.335501][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.348594][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.669915][ T6503] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 6503 comm: syz.3.172) [ 138.888340][ T6524] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 6524 comm: syz.3.177) [ 139.028721][ T6527] QAT: failed to copy from user. [ 139.359423][ T6529] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 6529 comm: syz.3.179) [ 139.891736][ T6537] ubi0: attaching mtd0 [ 139.898613][ T6537] ubi0: scanning is finished [ 139.931154][ T6537] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 140.113877][ T6537] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 140.238858][ T6543] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 6543 comm: syz.3.181) [ 140.431346][ T6552] netlink: 28 bytes leftover after parsing attributes in process `syz.4.185'. [ 140.444432][ T6553] random: crng reseeded on system resumption [ 140.471115][ T6552] lo: entered allmulticast mode [ 142.416852][ T6553] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 6553 comm: syz.3.187) [ 143.079380][ T6585] ubi0: attaching mtd0 [ 143.102441][ T6585] ubi0: scanning is finished [ 143.107162][ T6585] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 143.352012][ T6585] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 143.522303][ T6588] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 6588 comm: syz.3.197) [ 144.230318][ T29] audit: type=1800 audit(1734840535.244:2): pid=6601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.202" name="features" dev="configfs" ino=10807 res=0 errno=0 [ 144.282617][ T29] audit: type=1800 audit(1734840535.274:3): pid=6603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.202" name="dbroot" dev="configfs" ino=10810 res=0 errno=0 [ 144.453263][ T6601] db_root: not a directory: /proc/mtrr [ 144.561347][ T6598] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 6598 comm: syz.3.201) [ 145.222956][ T6610] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 6610 comm: syz.3.205) [ 145.687190][ T6622] ubi0: attaching mtd0 [ 145.710273][ T6624] netlink: 330 bytes leftover after parsing attributes in process `syz.0.209'. [ 145.733660][ T6622] ubi0: scanning is finished [ 145.766927][ T6622] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 147.011762][ T6622] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 147.240939][ T6622] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 6622 comm: syz.3.210) [ 147.469690][ T6642] netlink: 40 bytes leftover after parsing attributes in process `syz.4.213'. [ 151.239777][ T6647] kexec: Could not allocate control_code_buffer [ 151.501793][ T6647] Process accounting paused [ 152.188702][ T6684] netlink: 330 bytes leftover after parsing attributes in process `syz.3.223'. [ 153.186128][ T6700] Process accounting resumed [ 153.698238][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.084137][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.916197][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.183901][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.756456][ T6751] futex_wake_op: syz.0.246 tries to shift op by 64; fix this program [ 157.710920][ T6753] Process accounting resumed [ 159.131091][ T6770] Process accounting resumed [ 159.373823][ T6774] zswap: compressor not available [ 159.879920][ T6776] zswap: compressor not available [ 161.381650][ T6808] FAULT_INJECTION: forcing a failure. [ 161.381650][ T6808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.412071][ T6808] CPU: 1 UID: 0 PID: 6808 Comm: syz.2.265 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 161.422754][ T6808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 161.432859][ T6808] Call Trace: [ 161.436181][ T6808] [ 161.439160][ T6808] dump_stack_lvl+0x16c/0x1f0 [ 161.443910][ T6808] should_fail_ex+0x497/0x5b0 [ 161.448671][ T6808] _copy_to_user+0x32/0xd0 [ 161.453167][ T6808] simple_read_from_buffer+0xd0/0x160 [ 161.458606][ T6808] proc_fail_nth_read+0x198/0x270 [ 161.463746][ T6808] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.469375][ T6808] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.474997][ T6808] vfs_read+0x1df/0xbe0 [ 161.479225][ T6808] ? __fget_files+0x1fc/0x3a0 [ 161.483971][ T6808] ? __pfx___mutex_lock+0x10/0x10 [ 161.489062][ T6808] ? __pfx_vfs_read+0x10/0x10 [ 161.493833][ T6808] ? __fget_files+0x206/0x3a0 [ 161.498588][ T6808] ksys_read+0x12b/0x250 [ 161.502892][ T6808] ? __pfx_ksys_read+0x10/0x10 [ 161.507742][ T6808] do_syscall_64+0xcd/0x250 [ 161.512315][ T6808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.518290][ T6808] RIP: 0033:0x7f555398473c [ 161.522758][ T6808] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 161.542518][ T6808] RSP: 002b:00007f55546cf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 161.551002][ T6808] RAX: ffffffffffffffda RBX: 00007f5553b75fa0 RCX: 00007f555398473c [ 161.559040][ T6808] RDX: 000000000000000f RSI: 00007f55546cf0a0 RDI: 0000000000000004 [ 161.567075][ T6808] RBP: 00007f55546cf090 R08: 0000000000000000 R09: 0000000000000000 [ 161.575101][ T6808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.583128][ T6808] R13: 0000000000000000 R14: 00007f5553b75fa0 R15: 00007fff0a32a898 [ 161.591177][ T6808] [ 161.762095][ T6815] Process accounting resumed [ 162.166260][ T6824] Process accounting resumed [ 162.390753][ T6795] GUP no longer grows the stack in syz.2.258 (6795): 1000-401000 (0) [ 162.415894][ T6795] CPU: 0 UID: 0 PID: 6795 Comm: syz.2.258 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 162.426579][ T6795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 162.436777][ T6795] Call Trace: [ 162.440099][ T6795] [ 162.443067][ T6795] dump_stack_lvl+0x16c/0x1f0 [ 162.447807][ T6795] gup_vma_lookup+0x1d2/0x220 [ 162.452553][ T6795] __get_user_pages+0x236/0x3b50 [ 162.457558][ T6795] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 162.463170][ T6795] ? get_dump_page+0xb6/0x230 [ 162.467921][ T6795] ? get_dump_page+0xb6/0x230 [ 162.472680][ T6795] ? __pfx___get_user_pages+0x10/0x10 [ 162.478122][ T6795] ? down_read_killable+0xcc/0x380 [ 162.483309][ T6795] ? __pfx_down_read_killable+0x10/0x10 [ 162.488938][ T6795] ? policy_nodemask+0xea/0x4e0 [ 162.493885][ T6795] get_dump_page+0xff/0x230 [ 162.498465][ T6795] ? __pfx_get_dump_page+0x10/0x10 [ 162.503649][ T6795] ? do_raw_spin_unlock+0x172/0x230 [ 162.508922][ T6795] ? free_unref_page+0x6f5/0x1080 [ 162.514029][ T6795] dump_user_range+0x135/0x8c0 [ 162.518888][ T6795] ? __pfx_dump_user_range+0x10/0x10 [ 162.524254][ T6795] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 162.530476][ T6795] ? __pfx_writenote+0x10/0x10 [ 162.535303][ T6795] elf_core_dump+0x2787/0x3880 [ 162.540141][ T6795] ? __pfx_elf_core_dump+0x10/0x10 [ 162.545308][ T6795] ? kasan_save_stack+0x42/0x60 [ 162.550223][ T6795] ? kasan_save_stack+0x33/0x60 [ 162.555193][ T6795] ? kasan_save_track+0x14/0x30 [ 162.560124][ T6795] ? __kasan_kmalloc+0xaa/0xb0 [ 162.564954][ T6795] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 162.570487][ T6795] ? do_coredump+0x1665/0x43e0 [ 162.575324][ T6795] ? get_signal+0x23f3/0x2610 [ 162.580125][ T6795] ? rcu_is_watching+0x12/0xc0 [ 162.584963][ T6795] ? trace_lock_acquire+0x14e/0x1f0 [ 162.590233][ T6795] ? __pfx_sort+0x10/0x10 [ 162.594635][ T6795] ? get_signal+0x23f3/0x2610 [ 162.599381][ T6795] ? do_coredump+0x2dd5/0x43e0 [ 162.604236][ T6795] do_coredump+0x2dd5/0x43e0 [ 162.608914][ T6795] ? __pfx_do_coredump+0x10/0x10 [ 162.613921][ T6795] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 162.619958][ T6795] get_signal+0x23f3/0x2610 [ 162.624538][ T6795] ? force_sig_fault+0xad/0xf0 [ 162.629357][ T6795] ? __pfx_get_signal+0x10/0x10 [ 162.634277][ T6795] arch_do_signal_or_restart+0x90/0x7e0 [ 162.639896][ T6795] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 162.646118][ T6795] ? __bad_area_nosemaphore+0x334/0x6a0 [ 162.651760][ T6795] ? do_user_addr_fault+0x920/0x13f0 [ 162.657143][ T6795] irqentry_exit_to_user_mode+0x13f/0x280 [ 162.662937][ T6795] asm_exc_page_fault+0x26/0x30 [ 162.667866][ T6795] RIP: 0033:0x4003d0000 [ 162.672100][ T6795] Code: Unable to access opcode bytes at 0x4003cffd6. [ 162.678904][ T6795] RSP: 002b:000000000000000a EFLAGS: 00010217 [ 162.685028][ T6795] RAX: 0000000000000000 RBX: 00007f5553b75fa0 RCX: 00007f5553985d29 [ 162.693056][ T6795] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000002020003b46 [ 162.701083][ T6795] RBP: 00007f5553a01aa8 R08: 8000000000000001 R09: 0000000000000000 [ 162.709115][ T6795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.717151][ T6795] R13: 0000000000000000 R14: 00007f5553b75fa0 R15: 00007fff0a32a898 [ 162.725207][ T6795] [ 162.765306][ T6832] FAULT_INJECTION: forcing a failure. [ 162.765306][ T6832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.778748][ T6832] CPU: 0 UID: 0 PID: 6832 Comm: syz.3.271 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 162.789407][ T6832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 162.799525][ T6832] Call Trace: [ 162.802842][ T6832] [ 162.805825][ T6832] dump_stack_lvl+0x16c/0x1f0 [ 162.810586][ T6832] should_fail_ex+0x497/0x5b0 [ 162.815347][ T6832] _copy_from_user+0x2e/0xd0 [ 162.820014][ T6832] move_addr_to_kernel+0x68/0x160 [ 162.825107][ T6832] __sys_sendto+0x1ba/0x4f0 [ 162.829695][ T6832] ? __pfx___sys_sendto+0x10/0x10 [ 162.834785][ T6832] ? reacquire_held_locks+0x20b/0x4c0 [ 162.840217][ T6832] ? do_user_addr_fault+0xdc7/0x13f0 [ 162.845605][ T6832] __x64_sys_sendto+0xe0/0x1c0 [ 162.850429][ T6832] ? do_syscall_64+0x91/0x250 [ 162.855146][ T6832] ? lockdep_hardirqs_on+0x7c/0x110 [ 162.860381][ T6832] do_syscall_64+0xcd/0x250 [ 162.864929][ T6832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.870867][ T6832] RIP: 0033:0x7f2343987bbc [ 162.875305][ T6832] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 162.894959][ T6832] RSP: 002b:00007f2344832ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 162.903414][ T6832] RAX: ffffffffffffffda RBX: 00007f2344832fc0 RCX: 00007f2343987bbc [ 162.911418][ T6832] RDX: 0000000000000024 RSI: 00007f2344833010 RDI: 0000000000000003 [ 162.919436][ T6832] RBP: 0000000000000000 R08: 00007f2344832f14 R09: 000000000000000c [ 162.927438][ T6832] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 162.935433][ T6832] R13: 00007f2344832f68 R14: 00007f2344833010 R15: 0000000000000000 [ 162.943459][ T6832] [ 164.232269][ T6859] FAULT_INJECTION: forcing a failure. [ 164.232269][ T6859] name failslab, interval 1, probability 0, space 0, times 0 [ 164.256000][ T6859] CPU: 0 UID: 0 PID: 6859 Comm: syz.3.280 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 164.266682][ T6859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 164.276803][ T6859] Call Trace: [ 164.280130][ T6859] [ 164.283107][ T6859] dump_stack_lvl+0x16c/0x1f0 [ 164.287870][ T6859] should_fail_ex+0x497/0x5b0 [ 164.292632][ T6859] ? fs_reclaim_acquire+0xae/0x150 [ 164.297822][ T6859] should_failslab+0xc2/0x120 [ 164.302581][ T6859] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 164.308029][ T6859] ? security_file_alloc+0x34/0x2b0 [ 164.313299][ T6859] security_file_alloc+0x34/0x2b0 [ 164.318399][ T6859] init_file+0x93/0x480 [ 164.322642][ T6859] alloc_empty_file+0x91/0x1e0 [ 164.327481][ T6859] path_openat+0xe1/0x2d60 [ 164.331965][ T6859] ? hlock_class+0x4e/0x130 [ 164.336546][ T6859] ? __lock_acquire+0x15a9/0x3c40 [ 164.341642][ T6859] ? __pfx_path_openat+0x10/0x10 [ 164.346636][ T6859] ? __pfx___lock_acquire+0x10/0x10 [ 164.351867][ T6859] ? lock_acquire.part.0+0x11b/0x380 [ 164.357176][ T6859] ? find_held_lock+0x2d/0x110 [ 164.361983][ T6859] do_filp_open+0x20c/0x470 [ 164.366553][ T6859] ? __pfx_do_filp_open+0x10/0x10 [ 164.371610][ T6859] ? find_held_lock+0x2d/0x110 [ 164.376428][ T6859] ? alloc_fd+0x41f/0x760 [ 164.380799][ T6859] do_sys_openat2+0x17a/0x1e0 [ 164.385525][ T6859] ? __pfx_do_sys_openat2+0x10/0x10 [ 164.390779][ T6859] ? __fget_files+0x206/0x3a0 [ 164.395497][ T6859] __x64_sys_openat+0x175/0x210 [ 164.400397][ T6859] ? __pfx___x64_sys_openat+0x10/0x10 [ 164.405810][ T6859] ? ksys_write+0x1ba/0x250 [ 164.410359][ T6859] do_syscall_64+0xcd/0x250 [ 164.414902][ T6859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.420831][ T6859] RIP: 0033:0x7f2343985d29 [ 164.425268][ T6859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.444912][ T6859] RSP: 002b:00007f2344834038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 164.453359][ T6859] RAX: ffffffffffffffda RBX: 00007f2343b75fa0 RCX: 00007f2343985d29 [ 164.461357][ T6859] RDX: 0000000000020201 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 164.469351][ T6859] RBP: 00007f2344834090 R08: 0000000000000000 R09: 0000000000000000 [ 164.477345][ T6859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.485339][ T6859] R13: 0000000000000000 R14: 00007f2343b75fa0 R15: 00007ffd801495c8 [ 164.493374][ T6859] [ 166.190200][ T6886] FAULT_INJECTION: forcing a failure. [ 166.190200][ T6886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.220410][ T6886] CPU: 0 UID: 0 PID: 6886 Comm: syz.2.288 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 166.231092][ T6886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 166.241200][ T6886] Call Trace: [ 166.244518][ T6886] [ 166.247497][ T6886] dump_stack_lvl+0x16c/0x1f0 [ 166.252238][ T6886] should_fail_ex+0x497/0x5b0 [ 166.256964][ T6886] _copy_from_user+0x2e/0xd0 [ 166.261599][ T6886] proc_ioctl+0x214/0x6a0 [ 166.265964][ T6886] usbdev_ioctl+0x177d/0x3f90 [ 166.270684][ T6886] ? __pfx_usbdev_ioctl+0x10/0x10 [ 166.275744][ T6886] ? do_vfs_ioctl+0x513/0x1950 [ 166.280549][ T6886] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 166.285630][ T6886] ? __pfx_lock_release+0x10/0x10 [ 166.290684][ T6886] ? trace_lock_acquire+0x14e/0x1f0 [ 166.295937][ T6886] ? __fget_files+0x206/0x3a0 [ 166.300657][ T6886] ? __pfx_usbdev_ioctl+0x10/0x10 [ 166.305717][ T6886] __x64_sys_ioctl+0x190/0x200 [ 166.310514][ T6886] do_syscall_64+0xcd/0x250 [ 166.315063][ T6886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.320995][ T6886] RIP: 0033:0x7f5553985d29 [ 166.325438][ T6886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.345079][ T6886] RSP: 002b:00007f55546cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.353530][ T6886] RAX: ffffffffffffffda RBX: 00007f5553b75fa0 RCX: 00007f5553985d29 [ 166.361531][ T6886] RDX: 0000000000000001 RSI: 00000000c0105512 RDI: 0000000000000003 [ 166.369528][ T6886] RBP: 00007f55546cf090 R08: 0000000000000000 R09: 0000000000000000 [ 166.377528][ T6886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.385530][ T6886] R13: 0000000000000000 R14: 00007f5553b75fa0 R15: 00007fff0a32a898 [ 166.393551][ T6886] [ 166.854147][ T6897] RDS: rds_bind could not find a transport for 86a4:131b:e300:1000::, load rds_tcp or rds_rdma? [ 167.001591][ T6894] RDS: rds_bind could not find a transport for 86a4:131b:e300:1000::, load rds_tcp or rds_rdma? [ 170.841005][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.851674][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.860045][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.869959][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.878799][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 171.097601][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.594316][ T6955] chnl_net:caif_netlink_parms(): no params data found [ 172.776634][ T6967] ubi0: attaching mtd0 [ 172.797863][ T6967] ubi0: scanning is finished [ 172.836476][ T6967] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 172.973770][ T6955] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.992030][ T6955] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.014121][ T6955] bridge_slave_0: entered allmulticast mode [ 173.034619][ T6955] bridge_slave_0: entered promiscuous mode [ 173.059318][ T6955] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.086271][ T6955] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.109804][ T6955] bridge_slave_1: entered allmulticast mode [ 173.129997][ T6955] bridge_slave_1: entered promiscuous mode [ 173.132059][ T6967] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 173.314375][ T5845] Bluetooth: hci0: command tx timeout [ 173.493001][ T6955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.538184][ T6955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.734228][ T6955] team0: Port device team_slave_0 added [ 173.754068][ T6955] team0: Port device team_slave_1 added [ 173.818207][ T6955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.847931][ T6955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.920165][ T6955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.942492][ T6955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.949510][ T6955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.997238][ T6955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.111394][ T6955] hsr_slave_0: entered promiscuous mode [ 174.129776][ T6955] hsr_slave_1: entered promiscuous mode [ 174.190220][ T6955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.238148][ T6955] Cannot create hsr debugfs directory [ 174.781291][ T7003] FAULT_INJECTION: forcing a failure. [ 174.781291][ T7003] name failslab, interval 1, probability 0, space 0, times 0 [ 174.830261][ T7003] CPU: 0 UID: 0 PID: 7003 Comm: syz.3.326 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 174.840942][ T7003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 174.851052][ T7003] Call Trace: [ 174.854385][ T7003] [ 174.857364][ T7003] dump_stack_lvl+0x16c/0x1f0 [ 174.862111][ T7003] should_fail_ex+0x497/0x5b0 [ 174.866858][ T7003] ? fs_reclaim_acquire+0xae/0x150 [ 174.872045][ T7003] should_failslab+0xc2/0x120 [ 174.876796][ T7003] __kmalloc_node_noprof+0xd1/0x520 [ 174.882080][ T7003] ? __vmalloc_node_range_noprof+0x3d8/0x1530 [ 174.886761][ T6955] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 174.888196][ T7003] __vmalloc_node_range_noprof+0x3d8/0x1530 [ 174.900821][ T7003] ? local_lock_acquire+0x10/0x150 [ 174.906032][ T7003] ? kernel_clone+0xfd/0x960 [ 174.910709][ T7003] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 174.917116][ T7003] ? rcu_is_watching+0x12/0xc0 [ 174.922063][ T7003] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 174.927495][ T7003] ? kmem_cache_alloc_node_noprof+0x219/0x3b0 [ 174.933622][ T7003] ? copy_process+0x49c/0x6f20 [ 174.938436][ T7003] ? kernel_clone+0xfd/0x960 [ 174.943090][ T7003] copy_process+0x29b3/0x6f20 [ 174.947813][ T7003] ? kernel_clone+0xfd/0x960 [ 174.952447][ T7003] ? get_pid_task+0xfc/0x250 [ 174.957081][ T7003] ? __pfx_lock_release+0x10/0x10 [ 174.962142][ T7003] ? trace_lock_acquire+0x14e/0x1f0 [ 174.967412][ T7003] ? __pfx_copy_process+0x10/0x10 [ 174.972484][ T7003] ? find_held_lock+0x2d/0x110 [ 174.977294][ T7003] kernel_clone+0xfd/0x960 [ 174.981754][ T7003] ? __pfx_kernel_clone+0x10/0x10 [ 174.986831][ T7003] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 174.992857][ T7003] __do_sys_clone+0xba/0x100 [ 174.997489][ T7003] ? __pfx___do_sys_clone+0x10/0x10 [ 175.002770][ T7003] do_syscall_64+0xcd/0x250 [ 175.007413][ T7003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.013346][ T7003] RIP: 0033:0x7f2343985d29 [ 175.017814][ T7003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.037457][ T7003] RSP: 002b:00007f2344834038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 175.045908][ T7003] RAX: ffffffffffffffda RBX: 00007f2343b75fa0 RCX: 00007f2343985d29 [ 175.053910][ T7003] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000fffe [ 175.061910][ T7003] RBP: 00007f2344834090 R08: 0000000000000001 R09: 0000000000000000 [ 175.069914][ T7003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.077944][ T7003] R13: 0000000000000000 R14: 00007f2343b75fa0 R15: 00007ffd801495c8 [ 175.085965][ T7003] [ 175.133436][ T6955] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 175.145928][ T6955] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 175.181695][ T6955] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 175.211381][ T7003] syz.3.326: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 175.263633][ T7003] CPU: 0 UID: 0 PID: 7003 Comm: syz.3.326 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 175.274314][ T7003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 175.284422][ T7003] Call Trace: [ 175.287834][ T7003] [ 175.290812][ T7003] dump_stack_lvl+0x16c/0x1f0 [ 175.295559][ T7003] warn_alloc+0x24d/0x3a0 [ 175.299968][ T7003] ? __pfx_warn_alloc+0x10/0x10 [ 175.304886][ T7003] ? dump_stack_lvl+0x1a1/0x1f0 [ 175.309859][ T7003] ? rcu_is_watching+0x12/0xc0 [ 175.314690][ T7003] ? trace_kmalloc+0x2d/0xd0 [ 175.319333][ T7003] ? __kmalloc_node_noprof+0x23d/0x520 [ 175.324877][ T7003] __vmalloc_node_range_noprof+0x1105/0x1530 [ 175.330933][ T7003] ? local_lock_acquire+0x10/0x150 [ 175.336144][ T7003] ? kernel_clone+0xfd/0x960 [ 175.340809][ T7003] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 175.347217][ T7003] ? rcu_is_watching+0x12/0xc0 [ 175.352028][ T7003] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 175.357434][ T7003] ? kmem_cache_alloc_node_noprof+0x219/0x3b0 [ 175.363547][ T7003] ? copy_process+0x49c/0x6f20 [ 175.368349][ T7003] ? kernel_clone+0xfd/0x960 [ 175.372988][ T7003] copy_process+0x29b3/0x6f20 [ 175.377711][ T7003] ? kernel_clone+0xfd/0x960 [ 175.382342][ T7003] ? get_pid_task+0xfc/0x250 [ 175.386975][ T7003] ? __pfx_lock_release+0x10/0x10 [ 175.392031][ T7003] ? trace_lock_acquire+0x14e/0x1f0 [ 175.397275][ T7003] ? __pfx_copy_process+0x10/0x10 [ 175.402341][ T7003] ? find_held_lock+0x2d/0x110 [ 175.407149][ T7003] kernel_clone+0xfd/0x960 [ 175.411603][ T7003] ? __pfx_kernel_clone+0x10/0x10 [ 175.416673][ T7003] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 175.422696][ T7003] __do_sys_clone+0xba/0x100 [ 175.427322][ T7003] ? __pfx___do_sys_clone+0x10/0x10 [ 175.432585][ T7003] do_syscall_64+0xcd/0x250 [ 175.437131][ T7003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.443063][ T7003] RIP: 0033:0x7f2343985d29 [ 175.447507][ T7003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.467157][ T7003] RSP: 002b:00007f2344834038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 175.475607][ T7003] RAX: ffffffffffffffda RBX: 00007f2343b75fa0 RCX: 00007f2343985d29 [ 175.483603][ T7003] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000fffe [ 175.491596][ T7003] RBP: 00007f2344834090 R08: 0000000000000001 R09: 0000000000000000 [ 175.499593][ T7003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.507602][ T7003] R13: 0000000000000000 R14: 00007f2343b75fa0 R15: 00007ffd801495c8 [ 175.515619][ T7003] [ 175.540425][ T5845] Bluetooth: hci0: command tx timeout [ 175.554767][ T7003] Mem-Info: [ 175.576488][ T7003] active_anon:54491 inactive_anon:0 isolated_anon:0 [ 175.576488][ T7003] active_file:14913 inactive_file:46590 isolated_file:0 [ 175.576488][ T7003] unevictable:768 dirty:420 writeback:0 [ 175.576488][ T7003] slab_reclaimable:10410 slab_unreclaimable:99525 [ 175.576488][ T7003] mapped:50586 shmem:48956 pagetables:817 [ 175.576488][ T7003] sec_pagetables:0 bounce:0 [ 175.576488][ T7003] kernel_misc_reclaimable:0 [ 175.576488][ T7003] free:1275349 free_pcp:464 free_cma:0 [ 175.715621][ T6955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.768422][ T6955] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.780316][ T7003] Node 0 active_anon:228264kB inactive_anon:0kB active_file:59652kB inactive_file:186284kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:210044kB dirty:1676kB writeback:0kB shmem:203288kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11156kB pagetables:3268kB sec_pagetables:0kB all_unreclaimable? no [ 175.831134][ T2976] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.838289][ T2976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.845923][ T7003] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 175.893590][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.900824][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.914305][ T7003] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 175.963282][ T7003] lowmem_reserve[]: 0 2465 2466 0 0 [ 175.968643][ T7003] Node 0 DMA32 free:1164300kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:232124kB inactive_anon:0kB active_file:59652kB inactive_file:185456kB unevictable:1536kB writepending:1672kB present:3129332kB managed:2551336kB mlocked:0kB bounce:0kB free_pcp:2616kB local_pcp:608kB free_cma:0kB [ 176.010774][ T7003] lowmem_reserve[]: 0 0 0 0 0 [ 176.015621][ T7003] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 176.073557][ T6955] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.100270][ T7003] lowmem_reserve[]: 0 0 0 0 0 [ 176.105300][ T7003] Node 1 Normal free:3906612kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 176.107556][ T6955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.191740][ T7003] lowmem_reserve[]: 0 0 0 0 0 [ 176.196588][ T7003] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 176.264336][ T7003] Node 0 DMA32: 3*4kB (UME) 0*8kB 3*16kB (UME) 5*32kB (UE) 4*64kB (E) 3*128kB (UE) 2*256kB (ME) 36*512kB (UME) 38*1024kB (UE) 11*2048kB (UM) 262*4096kB (UM) = 1154396kB [ 176.327098][ T7003] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 176.349239][ T7003] Node 1 Normal: 233*4kB (UME) 62*8kB (UME) 46*16kB (UME) 216*32kB (UME) 107*64kB (UME) 26*128kB (UM) 11*256kB (UME) 7*512kB (UME) 6*1024kB (UME) 4*2048kB (UME) 944*4096kB (UM) = 3906612kB [ 176.409335][ T7003] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 176.413382][ T6955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.430513][ T7003] Node 0 hugepages_total=3 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 176.520281][ T7003] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 176.529908][ T7003] Node 1 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 176.574136][ T7003] 111854 total pagecache pages [ 176.579015][ T7003] 0 pages in swap cache [ 176.591556][ T7003] Free swap = 124500kB [ 176.595788][ T7003] Total swap = 124996kB [ 176.599976][ T7003] 2097051 pages RAM [ 176.623134][ T7003] 0 pages HighMem/MovableOnly [ 176.640720][ T7003] 427367 pages reserved [ 176.644946][ T7003] 0 pages cma reserved [ 176.820687][ T7012] ubi0: attaching mtd0 [ 176.827041][ T7012] ubi0: scanning is finished [ 176.850346][ T7012] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 177.032688][ T6955] veth0_vlan: entered promiscuous mode [ 177.072631][ T6955] veth1_vlan: entered promiscuous mode [ 177.091303][ T7012] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 177.157710][ T6955] veth0_macvtap: entered promiscuous mode [ 177.170999][ T6955] veth1_macvtap: entered promiscuous mode [ 177.188030][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.198576][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.208617][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.219718][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.229621][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.240809][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.251379][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.261975][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.272105][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.282669][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.294122][ T6955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.307467][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.317994][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.328199][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.339553][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.352733][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.363378][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.373774][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.384389][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.394328][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.404892][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.416005][ T6955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.426594][ T6955] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.435453][ T6955] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.444922][ T6955] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.454471][ T6955] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.553028][ T7036] [U] [ 177.555829][ T7036] [U] [ 177.558574][ T7036] [U] [ 177.561304][ T7036] [U] [ 177.599882][ T7036] [U] [ 177.602678][ T7036] [U] [ 177.605436][ T7036] [U] [ 177.608192][ T7036] [U] [ 177.650222][ T5845] Bluetooth: hci0: command tx timeout [ 177.700500][ T7041] [U] [ 177.787557][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.826126][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.893919][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.930521][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.398915][ T7050] netlink: 322 bytes leftover after parsing attributes in process `syz.5.311'. [ 178.434301][ T7050] netlink: 322 bytes leftover after parsing attributes in process `syz.5.311'. [ 178.721964][ T7033] openvswitch: netlink: Multiple metadata blocks provided [ 179.700194][ T5845] Bluetooth: hci0: command tx timeout [ 181.980587][ T7093] netlink: 206 bytes leftover after parsing attributes in process `syz.5.345'. [ 182.837830][ T7097] ubi0: attaching mtd0 [ 182.881485][ T7097] ubi0: scanning is finished [ 182.950340][ T7097] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 183.441112][ T7097] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 183.556782][ T8] smpboot: CPU 1 is now offline [ 184.916298][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.355'. [ 188.097509][ T7180] __vm_enough_memory: pid: 7180, comm: syz.5.367, bytes: 4503599627366400 not enough memory for the allocation [ 188.507100][ T7186] netlink: 'syz.5.369': attribute type 2 has an invalid length. [ 188.550445][ T7186] netlink: 674 bytes leftover after parsing attributes in process `syz.5.369'. [ 188.637129][ T7186] Process accounting resumed [ 188.828347][ T7168] ubi0: attaching mtd0 [ 189.037529][ T7168] ubi0: scanning is finished [ 189.321926][ T7168] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 189.949506][ T7209] netlink: 338 bytes leftover after parsing attributes in process `syz.5.377'. [ 190.157620][ T7214] netlink: 338 bytes leftover after parsing attributes in process `syz.5.377'. [ 190.361941][ T7168] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 192.735257][ T7216] futex_wake_op: syz.0.378 tries to shift op by 64; fix this program [ 193.861712][ T7250] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 197.297694][ T29] audit: type=1800 audit(1734840588.374:4): pid=7285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.400" name="dbroot" dev="configfs" ino=15773 res=0 errno=0 [ 197.333087][ T7285] db_root: cannot open: › [ 197.600304][ T7287] syz.2.400 uses obsolete (PF_INET,SOCK_PACKET) [ 198.341219][ T7297] FAULT_INJECTION: forcing a failure. [ 198.341219][ T7297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.420353][ T7297] CPU: 0 UID: 0 PID: 7297 Comm: syz.0.405 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 198.431008][ T7297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 198.441109][ T7297] Call Trace: [ 198.444418][ T7297] [ 198.447376][ T7297] dump_stack_lvl+0x16c/0x1f0 [ 198.452101][ T7297] should_fail_ex+0x497/0x5b0 [ 198.456815][ T7297] _copy_from_user+0x2e/0xd0 [ 198.461441][ T7297] do_sys_poll+0x1d6/0xde0 [ 198.465901][ T7297] ? __pfx_mark_lock+0x10/0x10 [ 198.470733][ T7297] ? __pfx_do_sys_poll+0x10/0x10 [ 198.475775][ T7297] ? __pfx___lock_acquire+0x10/0x10 [ 198.481064][ T7297] ? __pfx_timespec64_add_safe+0x10/0x10 [ 198.486723][ T7297] ? ktime_get_ts64+0x2d4/0x400 [ 198.491618][ T7297] ? read_tsc+0x9/0x20 [ 198.495715][ T7297] ? ktime_get_ts64+0x256/0x400 [ 198.500601][ T7297] __x64_sys_poll+0x1a8/0x450 [ 198.505317][ T7297] ? __pfx___x64_sys_poll+0x10/0x10 [ 198.510546][ T7297] do_syscall_64+0xcd/0x250 [ 198.515079][ T7297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.520997][ T7297] RIP: 0033:0x7ff9c0b85d29 [ 198.525426][ T7297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.545068][ T7297] RSP: 002b:00007ff9c1969038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 198.553604][ T7297] RAX: ffffffffffffffda RBX: 00007ff9c0d75fa0 RCX: 00007ff9c0b85d29 [ 198.561592][ T7297] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000020000480 [ 198.569595][ T7297] RBP: 00007ff9c1969090 R08: 0000000000000000 R09: 0000000000000000 [ 198.577584][ T7297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.585574][ T7297] R13: 0000000000000000 R14: 00007ff9c0d75fa0 R15: 00007ffe8be98458 [ 198.593573][ T7297] [ 198.698766][ T7299] futex_wake_op: syz.5.395 tries to shift op by 64; fix this program [ 198.710508][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.716810][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.690772][ T7313] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 199.786951][ T7313] FAULT_INJECTION: forcing a failure. [ 199.786951][ T7313] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 199.951391][ T7313] CPU: 0 UID: 0 PID: 7313 Comm: syz.0.409 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 199.962075][ T7313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 199.972148][ T7313] Call Trace: [ 199.975440][ T7313] [ 199.978386][ T7313] dump_stack_lvl+0x16c/0x1f0 [ 199.983097][ T7313] should_fail_ex+0x497/0x5b0 [ 199.987815][ T7313] ? fs_reclaim_acquire+0xae/0x150 [ 199.992955][ T7313] should_fail_alloc_page+0xe7/0x130 [ 199.998281][ T7313] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 200.004467][ T7313] __alloc_pages_noprof+0x190/0x25b0 [ 200.009804][ T7313] ? mark_lock+0xb5/0xc60 [ 200.014183][ T7313] ? hlock_class+0x4e/0x130 [ 200.018714][ T7313] ? mark_lock+0xb5/0xc60 [ 200.023084][ T7313] ? __pfx_mark_lock+0x10/0x10 [ 200.028495][ T7313] ? __pfx_mark_lock+0x10/0x10 [ 200.033312][ T7313] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 200.039091][ T7313] ? hlock_class+0x4e/0x130 [ 200.043631][ T7313] ? __lock_acquire+0x15a9/0x3c40 [ 200.048739][ T7313] ? hlock_class+0x4e/0x130 [ 200.053286][ T7313] ? mark_lock+0xb5/0xc60 [ 200.057660][ T7313] ? __pfx_mark_lock+0x10/0x10 [ 200.062730][ T7313] ? hlock_class+0x4e/0x130 [ 200.067293][ T7313] ? __lock_acquire+0xcc5/0x3c40 [ 200.072268][ T7313] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 200.078205][ T7313] ? policy_nodemask+0xea/0x4e0 [ 200.083093][ T7313] alloc_pages_mpol_noprof+0x2c9/0x610 [ 200.088589][ T7313] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 200.094599][ T7313] ? __lock_acquire+0xcc5/0x3c40 [ 200.099565][ T7313] folio_alloc_mpol_noprof+0x36/0xd0 [ 200.104869][ T7313] vma_alloc_folio_noprof+0xee/0x1b0 [ 200.110631][ T7313] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 200.116570][ T7313] ? find_held_lock+0x2d/0x110 [ 200.121388][ T7313] do_pte_missing+0x2017/0x3e00 [ 200.126285][ T7313] __handle_mm_fault+0x103c/0x2a40 [ 200.131522][ T7313] ? __pfx___handle_mm_fault+0x10/0x10 [ 200.137022][ T7313] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 200.142708][ T7313] ? find_vma+0xc0/0x140 [ 200.146998][ T7313] ? __pfx_find_vma+0x10/0x10 [ 200.151703][ T7313] handle_mm_fault+0x3fa/0xaa0 [ 200.156504][ T7313] do_user_addr_fault+0x7a3/0x13f0 [ 200.161656][ T7313] exc_page_fault+0x5c/0xc0 [ 200.166186][ T7313] asm_exc_page_fault+0x26/0x30 [ 200.171071][ T7313] RIP: 0010:rep_movs_alternative+0x15/0x70 [ 200.176915][ T7313] Code: cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 [ 200.196555][ T7313] RSP: 0018:ffffc90003c57af8 EFLAGS: 00050202 [ 200.202643][ T7313] RAX: 0000000000000030 RBX: 0000000020001100 RCX: 0000000000000002 [ 200.210649][ T7313] RDX: ffffed100bb81c01 RSI: ffff88805dc0e000 RDI: 0000000020001100 [ 200.218641][ T7313] RBP: ffffc90003c57da0 R08: 0000000000000000 R09: ffffed100bb81c00 [ 200.226635][ T7313] R10: ffff88805dc0e001 R11: 0000000000000002 R12: 0000000020001102 [ 200.234625][ T7313] R13: 00007ffffffff000 R14: ffff88805dc0e000 R15: 0000000000000002 [ 200.242633][ T7313] _copy_to_iter+0x384/0x1400 [ 200.247364][ T7313] ? trace_lock_acquire+0x14e/0x1f0 [ 200.252594][ T7313] ? __pfx_lock_release+0x10/0x10 [ 200.257664][ T7313] ? __pfx__copy_to_iter+0x10/0x10 [ 200.262846][ T7313] ? __virt_addr_valid+0x1a4/0x590 [ 200.268020][ T7313] ? __virt_addr_valid+0x5e/0x590 [ 200.273090][ T7313] ? __phys_addr_symbol+0x30/0x80 [ 200.278142][ T7313] ? __check_object_size+0x488/0x710 [ 200.283480][ T7313] seq_read_iter+0xd00/0x12b0 [ 200.288207][ T7313] kernfs_fop_read_iter+0x414/0x580 [ 200.293445][ T7313] ? rw_verify_area+0xd0/0x700 [ 200.298238][ T7313] vfs_read+0x87f/0xbe0 [ 200.302443][ T7313] ? __pfx_vfs_read+0x10/0x10 [ 200.307175][ T7313] ksys_read+0x12b/0x250 [ 200.311441][ T7313] ? __pfx_ksys_read+0x10/0x10 [ 200.316249][ T7313] do_syscall_64+0xcd/0x250 [ 200.320788][ T7313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.326719][ T7313] RIP: 0033:0x7ff9c0b85d29 [ 200.331152][ T7313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.350803][ T7313] RSP: 002b:00007ff9c1948038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 200.359238][ T7313] RAX: ffffffffffffffda RBX: 00007ff9c0d76080 RCX: 00007ff9c0b85d29 [ 200.367227][ T7313] RDX: 0000000000001009 RSI: 0000000020001100 RDI: 0000000000000003 [ 200.375228][ T7313] RBP: 00007ff9c1948090 R08: 0000000000000000 R09: 0000000000000000 [ 200.383238][ T7313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.391227][ T7313] R13: 0000000000000000 R14: 00007ff9c0d76080 R15: 00007ffe8be98458 [ 200.400199][ T7313] [ 204.234375][ T7346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.413'. [ 204.665307][ T7311] kexec: Could not allocate control_code_buffer [ 204.728918][ T7346] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 209.063522][ T7415] delete_channel: no stack [ 209.647861][ T7425] Process accounting resumed [ 210.100784][ T7428] __vm_enough_memory: pid: 7428, comm: syz.2.433, bytes: 4503599627366400 not enough memory for the allocation [ 210.172481][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 212.102019][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 212.108146][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 212.477392][ T7446] ubi0: attaching mtd0 [ 212.544974][ T7446] ubi0: scanning is finished [ 212.549630][ T7446] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 213.400959][ T7446] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 214.955985][ T7465] FAULT_INJECTION: forcing a failure. [ 214.955985][ T7465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.157446][ T7465] CPU: 0 UID: 0 PID: 7465 Comm: syz.2.444 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 215.168099][ T7465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 215.178171][ T7465] Call Trace: [ 215.181464][ T7465] [ 215.184429][ T7465] dump_stack_lvl+0x16c/0x1f0 [ 215.189135][ T7465] should_fail_ex+0x497/0x5b0 [ 215.193849][ T7465] _copy_from_user+0x2e/0xd0 [ 215.198474][ T7465] restore_altstack+0x94/0x170 [ 215.203288][ T7465] ? __pfx_restore_altstack+0x10/0x10 [ 215.208697][ T7465] ? _raw_spin_unlock_irq+0x23/0x50 [ 215.213943][ T7465] ? lockdep_hardirqs_on+0x7c/0x110 [ 215.219184][ T7465] ? _raw_spin_unlock_irq+0x2e/0x50 [ 215.224426][ T7465] ? set_current_blocked+0xdd/0x120 [ 215.229671][ T7465] __do_sys_rt_sigreturn+0x13d/0x240 [ 215.234989][ T7465] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 215.240837][ T7465] do_syscall_64+0xcd/0x250 [ 215.245391][ T7465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.251332][ T7465] RIP: 0033:0x7f5553921f29 [ 215.255768][ T7465] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 215.275472][ T7465] RSP: 002b:00007f55546cea80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 215.283933][ T7465] RAX: ffffffffffffffda RBX: 00007f5553b75fa0 RCX: 00007f5553921f29 [ 215.291922][ T7465] RDX: 00007f55546cea80 RSI: 00007f55546cebb0 RDI: 0000000000000011 [ 215.299911][ T7465] RBP: 00007f55546cf090 R08: 0000000000000000 R09: 0000000000000000 [ 215.307898][ T7465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.315884][ T7465] R13: 0000000000000000 R14: 00007f5553b75fa0 R15: 00007fff0a32a898 [ 215.323886][ T7465] [ 217.026926][ T7479] QAT: Invalid ioctl 21531 [ 217.288990][ T7479] QAT: failed to copy from user. [ 218.339966][ T7495] ubi0: attaching mtd0 [ 218.411794][ T7495] ubi0: scanning is finished [ 218.416458][ T7495] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 220.687087][ T7495] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 221.059300][ T7503] FAULT_INJECTION: forcing a failure. [ 221.059300][ T7503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.179320][ T7503] CPU: 0 UID: 0 PID: 7503 Comm: syz.0.456 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 221.190020][ T7503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 221.200111][ T7503] Call Trace: [ 221.203413][ T7503] [ 221.206358][ T7503] dump_stack_lvl+0x16c/0x1f0 [ 221.211075][ T7503] should_fail_ex+0x497/0x5b0 [ 221.215785][ T7503] _copy_to_user+0x32/0xd0 [ 221.220269][ T7503] simple_read_from_buffer+0xd0/0x160 [ 221.225671][ T7503] proc_fail_nth_read+0x198/0x270 [ 221.230755][ T7503] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 221.236339][ T7503] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 221.241924][ T7503] vfs_read+0x1df/0xbe0 [ 221.246142][ T7503] ? __fget_files+0x1fc/0x3a0 [ 221.250874][ T7503] ? __pfx___mutex_lock+0x10/0x10 [ 221.255942][ T7503] ? __pfx_vfs_read+0x10/0x10 [ 221.260659][ T7503] ? __fget_files+0x206/0x3a0 [ 221.265379][ T7503] ksys_read+0x12b/0x250 [ 221.269653][ T7503] ? __pfx_ksys_read+0x10/0x10 [ 221.274474][ T7503] do_syscall_64+0xcd/0x250 [ 221.279014][ T7503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.284942][ T7503] RIP: 0033:0x7ff9c0b8473c [ 221.289381][ T7503] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 221.309036][ T7503] RSP: 002b:00007ff9c1969030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 221.317484][ T7503] RAX: ffffffffffffffda RBX: 00007ff9c0d75fa0 RCX: 00007ff9c0b8473c [ 221.325494][ T7503] RDX: 000000000000000f RSI: 00007ff9c19690a0 RDI: 0000000000000004 [ 221.333486][ T7503] RBP: 00007ff9c1969090 R08: 0000000000000000 R09: 0000000000000000 [ 221.341613][ T7503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.349607][ T7503] R13: 0000000000000000 R14: 00007ff9c0d75fa0 R15: 00007ffe8be98458 [ 221.357632][ T7503] [ 222.211862][ T7508] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 222.573376][ T7508] netlink: 40 bytes leftover after parsing attributes in process `syz.2.459'. [ 224.447181][ T7529] ubi0: attaching mtd0 [ 224.477759][ T7529] ubi0: scanning is finished [ 224.551969][ T7534] sp0: Synchronizing with TNC [ 224.594974][ T7529] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 224.876135][ T7529] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 226.485802][ T7555] ubi0: attaching mtd0 [ 226.513921][ T7555] ubi0: scanning is finished [ 226.518640][ T7555] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 226.731420][ T7555] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 227.114976][ T7523] syz.3.462 (7523) used greatest stack depth: 21184 bytes left [ 228.112029][ T7569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.474'. [ 228.425137][ T7580] FAULT_INJECTION: forcing a failure. [ 228.425137][ T7580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.459605][ T7580] CPU: 0 UID: 0 PID: 7580 Comm: syz.5.477 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 228.470307][ T7580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 228.480424][ T7580] Call Trace: [ 228.483766][ T7580] [ 228.486758][ T7580] dump_stack_lvl+0x16c/0x1f0 [ 228.491528][ T7580] should_fail_ex+0x497/0x5b0 [ 228.496283][ T7580] _copy_to_user+0x32/0xd0 [ 228.500789][ T7580] simple_read_from_buffer+0xd0/0x160 [ 228.506235][ T7580] proc_fail_nth_read+0x198/0x270 [ 228.511349][ T7580] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 228.516983][ T7580] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 228.522614][ T7580] vfs_read+0x1df/0xbe0 [ 228.526834][ T7580] ? __fget_files+0x1fc/0x3a0 [ 228.531582][ T7580] ? __pfx___mutex_lock+0x10/0x10 [ 228.536684][ T7580] ? __pfx_vfs_read+0x10/0x10 [ 228.541451][ T7580] ? __fget_files+0x206/0x3a0 [ 228.546205][ T7580] ksys_read+0x12b/0x250 [ 228.550522][ T7580] ? __pfx_ksys_read+0x10/0x10 [ 228.555370][ T7580] do_syscall_64+0xcd/0x250 [ 228.559959][ T7580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.565933][ T7580] RIP: 0033:0x7ff36dd8473c [ 228.570401][ T7580] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 228.590073][ T7580] RSP: 002b:00007ff36bbf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 228.598619][ T7580] RAX: ffffffffffffffda RBX: 00007ff36df75fa0 RCX: 00007ff36dd8473c [ 228.606663][ T7580] RDX: 000000000000000f RSI: 00007ff36bbf60a0 RDI: 0000000000000007 [ 228.614699][ T7580] RBP: 00007ff36bbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 228.622827][ T7580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 228.631007][ T7580] R13: 0000000000000000 R14: 00007ff36df75fa0 R15: 00007ffd40357208 [ 228.639067][ T7580] [ 231.080674][ T7615] sp0: Synchronizing with TNC [ 232.283365][ T7633] raw_sendmsg: syz.3.485 forgot to set AF_INET. Fix it! [ 237.863403][ T7688] __vm_enough_memory: pid: 7688, comm: syz.5.510, bytes: 4503599627366400 not enough memory for the allocation [ 240.839378][ T7669] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 241.571874][ T7669] syz.0.503 (7669) used greatest stack depth: 18880 bytes left [ 242.163768][ T7721] ubi0: attaching mtd0 [ 242.169241][ T7721] ubi0: scanning is finished [ 242.188085][ T7721] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 242.533423][ T7721] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 243.543294][ T7736] program syz.5.525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.575276][ T7736] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 245.466595][ T7761] netlink: 222 bytes leftover after parsing attributes in process `syz.0.532'. [ 246.003149][ T7755] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 246.047709][ T7767] could not allocate digest TFM handle binfmt_misc [ 246.618521][ T7777] netlink: 'syz.0.537': attribute type 8 has an invalid length. [ 249.452909][ T7835] FAULT_INJECTION: forcing a failure. [ 249.452909][ T7835] name failslab, interval 1, probability 0, space 0, times 0 [ 249.488815][ T7835] CPU: 1 UID: 0 PID: 7835 Comm: syz.2.551 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 249.499502][ T7835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 249.509622][ T7835] Call Trace: [ 249.512944][ T7835] [ 249.515917][ T7835] dump_stack_lvl+0x16c/0x1f0 [ 249.520674][ T7835] should_fail_ex+0x497/0x5b0 [ 249.525419][ T7835] ? fs_reclaim_acquire+0xae/0x150 [ 249.530600][ T7835] should_failslab+0xc2/0x120 [ 249.535353][ T7835] __kmalloc_node_track_caller_noprof+0xcf/0x520 [ 249.541759][ T7835] ? __debug_object_init+0x2dd/0x3e0 [ 249.547122][ T7835] ? kvasprintf_const+0x66/0x1a0 [ 249.552146][ T7835] kvasprintf+0xbd/0x160 [ 249.556461][ T7835] ? __pfx_kvasprintf+0x10/0x10 [ 249.561386][ T7835] ? lockdep_hardirqs_on+0x7c/0x110 [ 249.566646][ T7835] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 249.572514][ T7835] ? __debug_object_init+0x2dd/0x3e0 [ 249.577878][ T7835] ? __pfx_uinput_write+0x10/0x10 [ 249.582964][ T7835] kvasprintf_const+0x66/0x1a0 [ 249.587799][ T7835] kobject_set_name_vargs+0x5a/0x140 [ 249.593155][ T7835] dev_set_name+0xc8/0x100 [ 249.597630][ T7835] ? __pfx_dev_set_name+0x10/0x10 [ 249.602737][ T7835] ? __init_waitqueue_head+0xca/0x150 [ 249.608181][ T7835] ? input_allocate_device+0x271/0x350 [ 249.613704][ T7835] input_allocate_device+0x293/0x350 [ 249.619049][ T7835] uinput_write+0x992/0x12b0 [ 249.623729][ T7835] ? __pfx_uinput_write+0x10/0x10 [ 249.628828][ T7835] ? apparmor_file_permission+0x251/0x400 [ 249.634631][ T7835] ? bpf_lsm_file_permission+0x9/0x10 [ 249.640071][ T7835] ? security_file_permission+0x71/0x210 [ 249.645784][ T7835] ? __pfx_uinput_write+0x10/0x10 [ 249.650882][ T7835] vfs_write+0x24c/0x1150 [ 249.655277][ T7835] ? __fget_files+0x1fc/0x3a0 [ 249.660010][ T7835] ? __pfx_lock_release+0x10/0x10 [ 249.665090][ T7835] ? __pfx_vfs_write+0x10/0x10 [ 249.669942][ T7835] ? lock_acquire+0x2f/0xb0 [ 249.674506][ T7835] ? __fget_files+0x40/0x3a0 [ 249.679173][ T7835] ? __fget_files+0x206/0x3a0 [ 249.683932][ T7835] ksys_write+0x207/0x250 [ 249.688418][ T7835] ? __pfx_ksys_write+0x10/0x10 [ 249.693345][ T7835] do_syscall_64+0xcd/0x250 [ 249.697923][ T7835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.703908][ T7835] RIP: 0033:0x7f5553985d29 [ 249.708370][ T7835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.728035][ T7835] RSP: 002b:00007f55546cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 249.736524][ T7835] RAX: ffffffffffffffda RBX: 00007f5553b75fa0 RCX: 00007f5553985d29 [ 249.744565][ T7835] RDX: 000000000000045c RSI: 0000000000000000 RDI: 0000000000000005 [ 249.752600][ T7835] RBP: 00007f55546cf090 R08: 0000000000000000 R09: 0000000000000000 [ 249.760660][ T7835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.768697][ T7835] R13: 0000000000000000 R14: 00007f5553b75fa0 R15: 00007fff0a32a898 [ 249.776756][ T7835] [ 251.311642][ T7863] FAULT_INJECTION: forcing a failure. [ 251.311642][ T7863] name failslab, interval 1, probability 0, space 0, times 0 [ 251.350619][ T7863] CPU: 1 UID: 0 PID: 7863 Comm: syz.0.560 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 251.361306][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 251.371415][ T7863] Call Trace: [ 251.374828][ T7863] [ 251.377812][ T7863] dump_stack_lvl+0x16c/0x1f0 [ 251.382566][ T7863] should_fail_ex+0x497/0x5b0 [ 251.387401][ T7863] ? fs_reclaim_acquire+0xae/0x150 [ 251.392602][ T7863] should_failslab+0xc2/0x120 [ 251.397362][ T7863] __kmalloc_noprof+0xce/0x4f0 [ 251.402196][ T7863] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 251.407892][ T7863] ? tomoyo_realpath_from_path+0xbf/0x710 [ 251.413696][ T7863] ? rcu_is_watching+0x12/0xc0 [ 251.418623][ T7863] tomoyo_realpath_from_path+0xbf/0x710 [ 251.424236][ T7863] tomoyo_check_open_permission+0x2ad/0x3c0 [ 251.430197][ T7863] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 251.436685][ T7863] ? __pfx___lock_acquire+0x10/0x10 [ 251.441938][ T7863] ? __pfx_hook_file_open+0x10/0x10 [ 251.447188][ T7863] ? lock_acquire+0x2f/0xb0 [ 251.451761][ T7863] tomoyo_file_open+0x6b/0x90 [ 251.456574][ T7863] security_file_open+0x84/0x1e0 [ 251.461545][ T7863] do_dentry_open+0x57e/0x1ea0 [ 251.466350][ T7863] ? inode_permission+0xdd/0x5f0 [ 251.471339][ T7863] vfs_open+0x82/0x3f0 [ 251.475454][ T7863] ? may_open+0x1f2/0x400 [ 251.479836][ T7863] path_openat+0x1e6a/0x2d60 [ 251.484491][ T7863] ? __pfx_path_openat+0x10/0x10 [ 251.489474][ T7863] ? stack_trace_save+0x95/0xd0 [ 251.494373][ T7863] ? __pfx_stack_trace_save+0x10/0x10 [ 251.499798][ T7863] do_filp_open+0x20c/0x470 [ 251.504366][ T7863] ? __pfx_do_filp_open+0x10/0x10 [ 251.509431][ T7863] ? kasan_save_stack+0x42/0x60 [ 251.514317][ T7863] ? kasan_save_stack+0x33/0x60 [ 251.519246][ T7863] file_open_name+0x2a4/0x450 [ 251.523972][ T7863] ? __pfx_file_open_name+0x10/0x10 [ 251.529225][ T7863] acct_on+0x77/0x790 [ 251.533261][ T7863] __x64_sys_acct+0xad/0x220 [ 251.537880][ T7863] ? lockdep_hardirqs_on+0x7c/0x110 [ 251.543114][ T7863] do_syscall_64+0xcd/0x250 [ 251.547659][ T7863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.553593][ T7863] RIP: 0033:0x7ff9c0b85d29 [ 251.558036][ T7863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.577699][ T7863] RSP: 002b:00007ff9c1969038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 251.586177][ T7863] RAX: ffffffffffffffda RBX: 00007ff9c0d75fa0 RCX: 00007ff9c0b85d29 [ 251.594189][ T7863] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 251.602214][ T7863] RBP: 00007ff9c1969090 R08: 0000000000000000 R09: 0000000000000000 [ 251.610214][ T7863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.618219][ T7863] R13: 0000000000000000 R14: 00007ff9c0d75fa0 R15: 00007ffe8be98458 [ 251.626235][ T7863] [ 251.700671][ T7863] ERROR: Out of memory at tomoyo_realpath_from_path. [ 253.953686][ T29] audit: type=1800 audit(1734840645.024:5): pid=7898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm=FFFFF2FFFFFFF2FFFFFFF2FFFFFFF2 name="features" dev="configfs" ino=15272 res=0 errno=0 [ 257.125572][ T7944] ubi0: attaching mtd0 [ 257.155356][ T7944] ubi0: scanning is finished [ 257.198375][ T7944] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 257.613286][ T7944] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 257.991807][ T7967] binder: 7966:7967 ioctl c00c6211 9 returned -14 [ 258.666806][ T29] audit: type=1800 audit(1734840649.744:6): pid=7971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm=FFFFF2FFFFFFF2FFFFFFF2FFFFFFF2 name="features" dev="configfs" ino=17696 res=0 errno=0 [ 258.850418][ T7983] sd 0:0:1:0: PR command failed: 1026 [ 258.855912][ T7983] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 258.970525][ T7983] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 259.611471][ T7055] syz.3.331 (7055) used greatest stack depth: 17408 bytes left [ 260.223465][ T8003] delete_channel: no stack [ 260.499667][ T8008] zswap: compressor not available [ 260.961004][ T8014] zswap: compressor not available [ 261.008659][ T8016] zswap: compressor not available [ 261.244718][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.251574][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.467672][ T7995] HfR: entered promiscuous mode [ 261.508186][ T7997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.600'. [ 261.581391][ T7997] HfR: left promiscuous mode [ 264.093680][ T8078] random: crng reseeded on system resumption [ 264.230239][ T8079] could not allocate digest TFM handle [ 266.791054][ T8132] FAULT_INJECTION: forcing a failure. [ 266.791054][ T8132] name failslab, interval 1, probability 0, space 0, times 0 [ 266.835071][ T8132] CPU: 1 UID: 0 PID: 8132 Comm: syz.2.631 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 266.845771][ T8132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 266.856061][ T8132] Call Trace: [ 266.859378][ T8132] [ 266.862348][ T8132] dump_stack_lvl+0x16c/0x1f0 [ 266.867094][ T8132] should_fail_ex+0x497/0x5b0 [ 266.871841][ T8132] should_failslab+0xc2/0x120 [ 266.876585][ T8132] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 266.882030][ T8132] ? skb_clone+0x190/0x3f0 [ 266.886527][ T8132] skb_clone+0x190/0x3f0 [ 266.890855][ T8132] netlink_deliver_tap+0xafd/0xca0 [ 266.896033][ T8132] netlink_unicast+0x5e1/0x7f0 [ 266.900871][ T8132] ? __pfx_netlink_unicast+0x10/0x10 [ 266.906217][ T8132] ? __phys_addr_symbol+0x30/0x80 [ 266.911305][ T8132] ? __check_object_size+0x488/0x710 [ 266.916686][ T8132] netlink_sendmsg+0x8b8/0xd70 [ 266.921513][ T8132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.926861][ T8132] ____sys_sendmsg+0x9ae/0xb40 [ 266.931662][ T8132] ? copy_msghdr_from_user+0x10b/0x160 [ 266.937166][ T8132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.942512][ T8132] ___sys_sendmsg+0x135/0x1e0 [ 266.947238][ T8132] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.952492][ T8132] ? __pfx_lock_release+0x10/0x10 [ 266.957633][ T8132] ? trace_lock_acquire+0x14e/0x1f0 [ 266.962879][ T8132] ? __fget_files+0x206/0x3a0 [ 266.967599][ T8132] __sys_sendmsg+0x16e/0x220 [ 266.972235][ T8132] ? __pfx___sys_sendmsg+0x10/0x10 [ 266.977411][ T8132] do_syscall_64+0xcd/0x250 [ 266.981955][ T8132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.987884][ T8132] RIP: 0033:0x7f5553985d29 [ 266.992327][ T8132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.011967][ T8132] RSP: 002b:00007f55546cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.020411][ T8132] RAX: ffffffffffffffda RBX: 00007f5553b75fa0 RCX: 00007f5553985d29 [ 267.028408][ T8132] RDX: 0000000000040000 RSI: 0000000020000240 RDI: 0000000000000003 [ 267.036429][ T8132] RBP: 00007f55546cf090 R08: 0000000000000000 R09: 0000000000000000 [ 267.044431][ T8132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.052432][ T8132] R13: 0000000000000000 R14: 00007f5553b75fa0 R15: 00007fff0a32a898 [ 267.060444][ T8132] [ 270.028634][ T8182] ubi0: attaching mtd0 [ 270.030264][ T8187] sd 0:0:1:0: PR command failed: 1026 [ 270.048450][ T8187] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 270.051432][ T8182] ubi0: scanning is finished [ 270.070763][ T8187] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 270.122677][ T8182] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 270.131796][ T8189] netlink: 40 bytes leftover after parsing attributes in process `syz.3.642'. [ 270.391013][ T8182] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 272.202935][ T8215] FAULT_INJECTION: forcing a failure. [ 272.202935][ T8215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.286767][ T8215] CPU: 0 UID: 0 PID: 8215 Comm: syz.5.658 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 272.297454][ T8215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 272.307559][ T8215] Call Trace: [ 272.310884][ T8215] [ 272.313884][ T8215] dump_stack_lvl+0x16c/0x1f0 [ 272.318624][ T8215] should_fail_ex+0x497/0x5b0 [ 272.323371][ T8215] _copy_to_user+0x32/0xd0 [ 272.327878][ T8215] simple_read_from_buffer+0xd0/0x160 [ 272.333319][ T8215] proc_fail_nth_read+0x198/0x270 [ 272.338423][ T8215] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 272.344060][ T8215] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 272.349695][ T8215] vfs_read+0x1df/0xbe0 [ 272.354011][ T8215] ? __fget_files+0x1fc/0x3a0 [ 272.358761][ T8215] ? __pfx___mutex_lock+0x10/0x10 [ 272.363867][ T8215] ? __pfx_vfs_read+0x10/0x10 [ 272.368590][ T8215] ? __fget_files+0x206/0x3a0 [ 272.373310][ T8215] ksys_read+0x12b/0x250 [ 272.377589][ T8215] ? __pfx_ksys_read+0x10/0x10 [ 272.382392][ T8215] do_syscall_64+0xcd/0x250 [ 272.386936][ T8215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.392892][ T8215] RIP: 0033:0x7ff36dd8473c [ 272.397337][ T8215] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 272.416979][ T8215] RSP: 002b:00007ff36bbf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 272.425422][ T8215] RAX: ffffffffffffffda RBX: 00007ff36df75fa0 RCX: 00007ff36dd8473c [ 272.433416][ T8215] RDX: 000000000000000f RSI: 00007ff36bbf60a0 RDI: 0000000000000004 [ 272.441408][ T8215] RBP: 00007ff36bbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 272.449407][ T8215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.457401][ T8215] R13: 0000000000000000 R14: 00007ff36df75fa0 R15: 00007ffd40357208 [ 272.465416][ T8215] [ 274.352488][ T8244] FAULT_INJECTION: forcing a failure. [ 274.352488][ T8244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.410407][ T8244] CPU: 1 UID: 0 PID: 8244 Comm: syz.0.660 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 274.421086][ T8244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 274.431201][ T8244] Call Trace: [ 274.434530][ T8244] [ 274.437512][ T8244] dump_stack_lvl+0x16c/0x1f0 [ 274.442265][ T8244] should_fail_ex+0x497/0x5b0 [ 274.447101][ T8244] _copy_from_user+0x2e/0xd0 [ 274.451769][ T8244] sk_getsockopt+0x1c9/0x3330 [ 274.456498][ T8244] ? hlock_class+0x4e/0x130 [ 274.461081][ T8244] ? __pfx_sk_getsockopt+0x10/0x10 [ 274.466304][ T8244] ? __pfx___lock_acquire+0x10/0x10 [ 274.471583][ T8244] ? find_held_lock+0x2d/0x110 [ 274.476426][ T8244] ? __might_fault+0x13b/0x190 [ 274.481269][ T8244] ? __pfx_lock_release+0x10/0x10 [ 274.486349][ T8244] ? trace_lock_acquire+0x14e/0x1f0 [ 274.491625][ T8244] ? lock_acquire+0x2f/0xb0 [ 274.496179][ T8244] ? __might_fault+0xe3/0x190 [ 274.500941][ T8244] ? __might_fault+0xe3/0x190 [ 274.505708][ T8244] do_sock_getsockopt+0x699/0x870 [ 274.510819][ T8244] ? trace_lock_acquire+0x110/0x1f0 [ 274.516101][ T8244] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 274.521706][ T8244] ? lock_acquire+0x2f/0xb0 [ 274.526270][ T8244] ? __fget_files+0x40/0x3a0 [ 274.530929][ T8244] ? __fget_files+0x206/0x3a0 [ 274.535678][ T8244] __sys_getsockopt+0x12f/0x260 [ 274.540607][ T8244] __x64_sys_getsockopt+0xbd/0x160 [ 274.545796][ T8244] ? do_syscall_64+0x91/0x250 [ 274.550543][ T8244] ? lockdep_hardirqs_on+0x7c/0x110 [ 274.555810][ T8244] do_syscall_64+0xcd/0x250 [ 274.560397][ T8244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.566363][ T8244] RIP: 0033:0x7ff9c0b85d29 [ 274.570842][ T8244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.590513][ T8244] RSP: 002b:00007ff9c1969038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 274.599049][ T8244] RAX: ffffffffffffffda RBX: 00007ff9c0d75fa0 RCX: 00007ff9c0b85d29 [ 274.607090][ T8244] RDX: 000000000000002a RSI: 0000200000000001 RDI: 0000000000000003 [ 274.615134][ T8244] RBP: 00007ff9c1969090 R08: 0000000000000000 R09: 0000000000000000 [ 274.623162][ T8244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.631188][ T8244] R13: 0000000000000000 R14: 00007ff9c0d75fa0 R15: 00007ffe8be98458 [ 274.639233][ T8244] [ 275.318461][ T8258] FAULT_INJECTION: forcing a failure. [ 275.318461][ T8258] name failslab, interval 1, probability 0, space 0, times 0 [ 275.332665][ T8258] CPU: 1 UID: 0 PID: 8258 Comm: syz.2.666 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 275.343333][ T8258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 275.353443][ T8258] Call Trace: [ 275.356761][ T8258] [ 275.359733][ T8258] dump_stack_lvl+0x16c/0x1f0 [ 275.364483][ T8258] should_fail_ex+0x497/0x5b0 [ 275.369248][ T8258] ? fs_reclaim_acquire+0xae/0x150 [ 275.374433][ T8258] should_failslab+0xc2/0x120 [ 275.379190][ T8258] __kmalloc_node_noprof+0xd1/0x520 [ 275.384469][ T8258] ? security_capable+0x7e/0x260 [ 275.389490][ T8258] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 275.395030][ T8258] ? ns_capable_noaudit+0xda/0x110 [ 275.400223][ T8258] __kvmalloc_node_noprof+0xad/0x1a0 [ 275.405583][ T8258] proc_sys_call_handler+0x2f6/0x5d0 [ 275.410958][ T8258] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 275.416852][ T8258] vfs_write+0x5ae/0x1150 [ 275.421252][ T8258] ? __pfx_proc_sys_write+0x10/0x10 [ 275.426507][ T8258] ? __pfx___mutex_lock+0x10/0x10 [ 275.431576][ T8258] ? __pfx_vfs_write+0x10/0x10 [ 275.436404][ T8258] ksys_write+0x12b/0x250 [ 275.440786][ T8258] ? __pfx_ksys_write+0x10/0x10 [ 275.445700][ T8258] do_syscall_64+0xcd/0x250 [ 275.450255][ T8258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.456282][ T8258] RIP: 0033:0x7f5553985d29 [ 275.460726][ T8258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.480376][ T8258] RSP: 002b:00007f55546cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 275.488853][ T8258] RAX: ffffffffffffffda RBX: 00007f5553b75fa0 RCX: 00007f5553985d29 [ 275.496858][ T8258] RDX: 0000000000000004 RSI: 00000000200002c0 RDI: 0000000000000003 [ 275.504859][ T8258] RBP: 00007f55546cf090 R08: 0000000000000000 R09: 0000000000000000 [ 275.512854][ T8258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.520855][ T8258] R13: 0000000000000000 R14: 00007f5553b75fa0 R15: 00007fff0a32a898 [ 275.528956][ T8258] [ 275.829795][ T8266] netlink: 40 bytes leftover after parsing attributes in process `syz.2.667'. [ 278.909512][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.5.673'. [ 281.562426][ T8326] HfR: entered promiscuous mode [ 281.610795][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.685'. [ 281.647894][ T8327] HfR: left promiscuous mode [ 282.111637][ T8333] netlink: 40 bytes leftover after parsing attributes in process `syz.5.687'. [ 282.490551][ T8338] futex_wake_op: syz.3.688 tries to shift op by 64; fix this program [ 286.158662][ T8361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.696'. [ 286.285093][ T8363] size and base must be multiples of 4 kiB [ 286.330158][ T8363] CPU: 0 UID: 0 PID: 8363 Comm: syz.5.697 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 286.340851][ T8363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 286.350966][ T8363] Call Trace: [ 286.354305][ T8363] [ 286.357300][ T8363] dump_stack_lvl+0x16c/0x1f0 [ 286.362061][ T8363] mtrr_add+0xdf/0x110 [ 286.366226][ T8363] mtrr_ioctl+0x7cd/0xcd0 [ 286.370661][ T8363] ? __pfx_mtrr_ioctl+0x10/0x10 [ 286.375616][ T8363] ? __pfx_lock_release+0x10/0x10 [ 286.380737][ T8363] ? __fget_files+0x206/0x3a0 [ 286.385494][ T8363] ? __pfx_mtrr_ioctl+0x10/0x10 [ 286.390432][ T8363] proc_reg_unlocked_ioctl+0x226/0x320 [ 286.395962][ T8363] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 286.402015][ T8363] __x64_sys_ioctl+0x190/0x200 [ 286.406823][ T8363] do_syscall_64+0xcd/0x250 [ 286.411376][ T8363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.417310][ T8363] RIP: 0033:0x7ff36dd85d29 [ 286.421751][ T8363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.441392][ T8363] RSP: 002b:00007ff36bbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.449859][ T8363] RAX: ffffffffffffffda RBX: 00007ff36df75fa0 RCX: 00007ff36dd85d29 [ 286.457864][ T8363] RDX: 0000000000000003 RSI: 00000000400c4d01 RDI: 0000000000000003 [ 286.465868][ T8363] RBP: 00007ff36de01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 286.473870][ T8363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.481872][ T8363] R13: 0000000000000000 R14: 00007ff36df75fa0 R15: 00007ffd40357208 [ 286.489913][ T8363] [ 288.437633][ T8382] FAULT_INJECTION: forcing a failure. [ 288.437633][ T8382] name failslab, interval 1, probability 0, space 0, times 0 [ 288.460139][ T8382] CPU: 0 UID: 0 PID: 8382 Comm: syz.2.704 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 288.470821][ T8382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 288.480931][ T8382] Call Trace: [ 288.484258][ T8382] [ 288.487261][ T8382] dump_stack_lvl+0x16c/0x1f0 [ 288.492007][ T8382] should_fail_ex+0x497/0x5b0 [ 288.496754][ T8382] ? fs_reclaim_acquire+0xae/0x150 [ 288.501936][ T8382] should_failslab+0xc2/0x120 [ 288.506688][ T8382] __kmalloc_noprof+0xce/0x4f0 [ 288.511519][ T8382] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 288.517216][ T8382] ? tomoyo_realpath_from_path+0xbf/0x710 [ 288.523011][ T8382] tomoyo_realpath_from_path+0xbf/0x710 [ 288.528629][ T8382] ? tomoyo_path_number_perm+0x235/0x5b0 [ 288.534346][ T8382] tomoyo_path_number_perm+0x248/0x5b0 [ 288.539887][ T8382] ? tomoyo_path_number_perm+0x235/0x5b0 [ 288.545599][ T8382] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 288.551690][ T8382] ? __pfx_lock_release+0x10/0x10 [ 288.556765][ T8382] ? trace_lock_acquire+0x14e/0x1f0 [ 288.562072][ T8382] ? lock_acquire+0x2f/0xb0 [ 288.566636][ T8382] ? __fget_files+0x40/0x3a0 [ 288.571291][ T8382] ? __fget_files+0x206/0x3a0 [ 288.576051][ T8382] security_file_ioctl+0x9b/0x240 [ 288.581229][ T8382] __x64_sys_ioctl+0xb7/0x200 [ 288.585987][ T8382] do_syscall_64+0xcd/0x250 [ 288.590559][ T8382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.596519][ T8382] RIP: 0033:0x7f5553985d29 [ 288.600982][ T8382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.620655][ T8382] RSP: 002b:00007f55546cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.629142][ T8382] RAX: ffffffffffffffda RBX: 00007f5553b75fa0 RCX: 00007f5553985d29 [ 288.637166][ T8382] RDX: 0000000000000000 RSI: 000000004008ae61 RDI: 0000000000000004 [ 288.645189][ T8382] RBP: 00007f55546cf090 R08: 0000000000000000 R09: 0000000000000000 [ 288.653216][ T8382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.661244][ T8382] R13: 0000000000000000 R14: 00007f5553b75fa0 R15: 00007fff0a32a898 [ 288.669296][ T8382] [ 288.714653][ T8382] ERROR: Out of memory at tomoyo_realpath_from_path. [ 291.764590][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 291.776566][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 291.790683][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 291.823251][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 291.839309][ T5845] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 291.848543][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 292.522508][ T8414] chnl_net:caif_netlink_parms(): no params data found [ 292.953476][ T8414] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.000398][ T8414] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.017981][ T8414] bridge_slave_0: entered allmulticast mode [ 293.050014][ T8414] bridge_slave_0: entered promiscuous mode [ 293.069947][ T8414] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.110436][ T8414] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.117908][ T8414] bridge_slave_1: entered allmulticast mode [ 293.160337][ T8414] bridge_slave_1: entered promiscuous mode [ 293.432422][ T8414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.524120][ T8414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.931630][ T5845] Bluetooth: hci4: command tx timeout [ 293.944718][ T8414] team0: Port device team_slave_0 added [ 293.963892][ T8414] team0: Port device team_slave_1 added [ 294.010304][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 294.340386][ T8439] __vm_enough_memory: pid: 8439, comm: syz.2.719, bytes: 4503599627366400 not enough memory for the allocation [ 294.542522][ T8414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.549576][ T8414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.580589][ T8414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.833744][ T8414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.841927][ T8414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.930235][ T8414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.345722][ T8441] ubi0: attaching mtd0 [ 295.371396][ T8441] ubi0: scanning is finished [ 295.386351][ T8441] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 295.389240][ T8414] hsr_slave_0: entered promiscuous mode [ 295.420936][ T8414] hsr_slave_1: entered promiscuous mode [ 295.445578][ T8414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.460160][ T8414] Cannot create hsr debugfs directory [ 295.472677][ T8449] netlink: 16 bytes leftover after parsing attributes in process `syz.3.722'. [ 295.734567][ T8441] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 296.010567][ T5849] Bluetooth: hci4: command tx timeout [ 296.163720][ T8414] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 296.234353][ T8414] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 296.365081][ T8414] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 296.441950][ T8414] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 296.879395][ T8414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.930630][ T8414] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.974524][ T8174] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.981716][ T8174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.036086][ T8174] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.043343][ T8174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.644024][ T8414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.091611][ T5849] Bluetooth: hci4: command tx timeout [ 298.316773][ T8414] veth0_vlan: entered promiscuous mode [ 298.376794][ T8414] veth1_vlan: entered promiscuous mode [ 298.466115][ T8414] veth0_macvtap: entered promiscuous mode [ 298.495821][ T8414] veth1_macvtap: entered promiscuous mode [ 298.573729][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.610203][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.640480][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.670225][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.694584][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.730173][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.747232][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.780767][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.820146][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.850359][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.873657][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.902875][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.933732][ T8414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.963391][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.000112][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.010009][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.020745][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.031285][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.042034][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.052468][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.063210][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.073593][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.084426][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.094721][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.110965][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.130670][ T8491] ubi0: attaching mtd0 [ 299.136024][ T8491] ubi0: scanning is finished [ 299.142294][ T8414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.163919][ T8414] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.190241][ T8414] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.199041][ T8414] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.207940][ T8491] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 299.230171][ T8414] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.562846][ T8491] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 299.640165][ T8178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.670151][ T8178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.751812][ T3447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.759702][ T3447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.170980][ T5849] Bluetooth: hci4: command tx timeout [ 302.812707][ T8523] blktrace: Concurrent blktraces are not allowed on sg0 [ 303.740820][ T8548] ubi0: attaching mtd0 [ 303.747530][ T8548] ubi0: scanning is finished [ 303.840287][ T8548] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 304.891242][ T8548] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 306.783325][ T29] audit: type=1800 audit(8277292037.361:7): pid=8604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.759" name="dbroot" dev="configfs" ino=20057 res=0 errno=0 [ 306.851080][ T8608] db_root: cannot open: ŽyêÖR[»fßå-CÜrJŒ [ 307.232938][ T8614] netlink: 16 bytes leftover after parsing attributes in process `syz.6.762'. [ 307.600550][ T8613] netlink: 350 bytes leftover after parsing attributes in process `syz.2.761'. [ 308.300640][ T8617] ubi0: attaching mtd0 [ 308.308238][ T8617] ubi0: scanning is finished [ 308.413839][ T8617] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 308.570643][ T30] INFO: task kworker/u8:3:52 blocked for more than 143 seconds. [ 308.590283][ T30] Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 308.598080][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 308.620003][ T30] task:kworker/u8:3 state:D stack:24080 pid:52 tgid:52 ppid:2 flags:0x00004000 [ 308.631227][ T30] Workqueue: netns cleanup_net [ 308.636090][ T30] Call Trace: [ 308.639409][ T30] [ 308.642993][ T30] __schedule+0xe58/0x5ad0 [ 308.647482][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 308.659664][ T30] ? add_lock_to_list+0x17d/0x390 [ 308.664924][ T30] ? __pfx___schedule+0x10/0x10 [ 308.669842][ T30] ? schedule+0x298/0x350 [ 308.674553][ T30] ? __pfx_lock_release+0x10/0x10 [ 308.679649][ T30] ? lock_acquire+0x2f/0xb0 [ 308.685842][ T30] ? schedule+0x1fd/0x350 [ 308.685898][ T30] schedule+0xe7/0x350 [ 308.685938][ T30] schedule_timeout+0x244/0x280 [ 308.685995][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 308.686062][ T30] ? mark_held_locks+0x9f/0xe0 [ 308.686122][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 308.686166][ T30] __wait_for_common+0x3e1/0x600 [ 308.686210][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 308.686271][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 308.686332][ T30] remove_one+0x30f/0x420 [ 308.686396][ T30] ? __pfx_remove_one+0x10/0x10 [ 308.686447][ T30] simple_recursive_removal+0x4e2/0x8e0 [ 308.686489][ T30] ? __pfx_remove_one+0x10/0x10 [ 308.686559][ T30] debugfs_remove+0x5d/0x80 [ 308.686612][ T30] nsim_dev_health_exit+0x3b/0xe0 [ 308.686659][ T30] nsim_dev_reload_destroy+0x143/0x4d0 [ 308.686719][ T30] nsim_dev_reload_down+0x6e/0xd0 [ 308.686772][ T30] devlink_reload+0x17f/0x760 [ 308.686824][ T30] ? __pfx_devlink_reload+0x10/0x10 [ 308.686873][ T30] ? devlinks_xa_find_get+0x39/0x260 [ 308.686923][ T30] devlink_pernet_pre_exit+0x1a1/0x2b0 [ 308.686965][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 308.687024][ T30] ? up_write+0x1b2/0x520 [ 308.687067][ T30] ? kobject_put+0xab/0x5a0 [ 308.687118][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 308.687161][ T30] cleanup_net+0x488/0xbd0 [ 308.687222][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 308.687281][ T30] ? lock_acquire+0x2f/0xb0 [ 308.687313][ T30] ? process_one_work+0x8bb/0x1b30 [ 308.687354][ T30] process_one_work+0x958/0x1b30 [ 308.687412][ T30] ? __pfx_batadv_nc_worker+0x10/0x10 [ 308.687466][ T30] ? __pfx_process_one_work+0x10/0x10 [ 308.687506][ T30] ? rcu_is_watching+0x12/0xc0 [ 308.687561][ T30] ? assign_work+0x1a0/0x250 [ 308.687619][ T30] worker_thread+0x6c8/0xf00 [ 308.687667][ T30] ? __kthread_parkme+0x148/0x220 [ 308.687716][ T30] ? __pfx_worker_thread+0x10/0x10 [ 308.687751][ T30] kthread+0x2c1/0x3a0 [ 308.687791][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 308.687830][ T30] ? __pfx_kthread+0x10/0x10 [ 308.687876][ T30] ret_from_fork+0x45/0x80 [ 308.687911][ T30] ? __pfx_kthread+0x10/0x10 [ 308.687956][ T30] ret_from_fork_asm+0x1a/0x30 [ 308.688028][ T30] [ 308.688176][ T30] INFO: task syz.4.238:6728 blocked for more than 143 seconds. [ 308.688202][ T30] Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 308.688225][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 308.688240][ T30] task:syz.4.238 state:D stack:27248 pid:6728 tgid:6726 ppid:6327 flags:0x00000004 [ 308.688351][ T30] Call Trace: [ 308.688364][ T30] [ 308.688383][ T30] __schedule+0xe58/0x5ad0 [ 308.688424][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 308.688462][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 308.688518][ T30] ? __pfx___schedule+0x10/0x10 [ 308.688560][ T30] ? schedule+0x298/0x350 [ 308.688598][ T30] ? __pfx_lock_release+0x10/0x10 [ 308.688634][ T30] ? __mutex_trylock_common+0x78/0x250 [ 308.688673][ T30] ? lock_acquire+0x2f/0xb0 [ 308.688707][ T30] ? schedule+0x1fd/0x350 [ 308.688749][ T30] schedule+0xe7/0x350 [ 308.688790][ T30] schedule_preempt_disabled+0x13/0x30 [ 308.688833][ T30] __mutex_lock+0x62b/0xa60 [ 308.688880][ T30] ? devlink_health_report+0x3c5/0x9d0 [ 308.688940][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 308.688988][ T30] ? find_held_lock+0x2d/0x110 [ 308.689040][ T30] ? __might_fault+0x13b/0x190 [ 308.689095][ T30] ? __pfx_lock_release+0x10/0x10 [ 308.689142][ T30] ? devlink_health_report+0x3c5/0x9d0 [ 308.689197][ T30] devlink_health_report+0x3c5/0x9d0 [ 308.689260][ T30] ? __pfx_devlink_health_report+0x10/0x10 [ 308.689321][ T30] ? _copy_from_user+0x59/0xd0 [ 308.689377][ T30] nsim_dev_health_break_write+0x167/0x210 [ 308.689423][ T30] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 308.689471][ T30] ? rcu_is_watching+0x12/0xc0 [ 308.689619][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 308.689678][ T30] full_proxy_write+0xfb/0x1b0 [ 308.689728][ T30] ? __pfx_full_proxy_write+0x10/0x10 [ 308.689773][ T30] vfs_write+0x24c/0x1150 [ 308.689819][ T30] ? __fget_files+0x1fc/0x3a0 [ 308.689863][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 308.689908][ T30] ? __pfx_vfs_write+0x10/0x10 [ 308.689962][ T30] ? __fget_files+0x206/0x3a0 [ 308.690018][ T30] ksys_write+0x12b/0x250 [ 308.690179][ T30] ? __pfx_ksys_write+0x10/0x10 [ 308.690234][ T30] do_syscall_64+0xcd/0x250 [ 308.690284][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.690332][ T30] RIP: 0033:0x7f6736385d29 [ 308.690361][ T30] RSP: 002b:00007f67371e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 308.690397][ T30] RAX: ffffffffffffffda RBX: 00007f6736575fa0 RCX: 00007f6736385d29 [ 308.690422][ T30] RDX: 0000000000000040 RSI: 0000000020000900 RDI: 0000000000000003 [ 308.690446][ T30] RBP: 00007f6736401aa8 R08: 0000000000000000 R09: 0000000000000000 [ 308.690470][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.690495][ T30] R13: 0000000000000000 R14: 00007f6736575fa0 R15: 00007ffe3cf818d8 [ 308.690541][ T30] [ 308.690597][ T30] [ 308.690597][ T30] Showing all locks held in the system: [ 308.690616][ T30] 1 lock held by khungtaskd/30: [ 308.690638][ T30] #0: ffffffff8ddbad40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 308.690735][ T30] 6 locks held by kworker/u8:3/52: [ 308.690756][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12cd/0x1b30 [ 308.690846][ T30] #1: ffffc90000bd7d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 308.690934][ T30] #2: ffffffff8faa9d50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xbb/0xbd0 [ 308.691044][ T30] #3: ffff88805f6750e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x12d/0x2b0 [ 308.691138][ T30] #4: ffff88805fa33250 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x137/0x2b0 [ 308.691232][ T30] #5: ffff88807ddb1a70 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: simple_recursive_removal+0x2f5/0x8e0 [ 308.691376][ T30] 2 locks held by getty/5594: [ 308.691397][ T30] #0: ffff88823bf648a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 308.691495][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 308.691595][ T30] 2 locks held by syz-executor/5824: [ 308.691626][ T30] 3 locks held by syz.4.238/6728: [ 308.691647][ T30] #0: ffff88803310e2b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x267/0x390 [ 308.691744][ T30] #1: ffff888141ac6420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 308.691844][ T30] #2: ffff88805fa33250 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_health_report+0x3c5/0x9d0 [ 308.691958][ T30] 4 locks held by kworker/u8:12/8172: [ 308.691982][ T30] 2 locks held by syz.0.668/8269: [ 308.692004][ T30] #0: ffffffff8fb5e5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 308.692097][ T30] #1: ffffffff8e1bb108 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x694/0xbe0 [ 308.692190][ T30] 1 lock held by syz.5.700/8376: [ 308.692212][ T30] 4 locks held by syz-executor/8414: [ 308.692234][ T30] 3 locks held by syz.3.728/8471: [ 308.692256][ T30] 1 lock held by syz.3.737/8510: [ 308.692278][ T30] 2 locks held by syz.5.741/8529: [ 308.692301][ T30] 2 locks held by syz.6.746/8555: [ 308.692322][ T30] 2 locks held by syz.6.755/8586: [ 308.692344][ T30] 2 locks held by syz.5.757/8600: [ 308.692366][ T30] 5 locks held by syz.2.758/8603: [ 308.692387][ T30] 1 lock held by syz.3.763/8616: [ 308.692409][ T30] 2 locks held by syz.3.763/8617: [ 308.692429][ T30] #0: ffffffff8ee3eb08 (ubi_devices_mutex){+.+.}-{4:4}, at: ctrl_cdev_ioctl+0x2ef/0x3d0 [ 308.692523][ T30] #1: ffffffff8ddc6540 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x700 [ 308.692623][ T30] 3 locks held by syz.5.764/8627: [ 308.692646][ T30] 2 locks held by syz.2.767/8632: [ 308.692666][ T30] #0: ffffffff8de3fa68 (trace_types_lock){+.+.}-{4:4}, at: tracing_open+0x403/0xfa0 [ 308.692767][ T30] #1: ffffffff8ddc6678 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x282/0x3b0 [ 308.692878][ T30] 2 locks held by syz.2.767/8634: [ 308.692901][ T30] [ 308.692910][ T30] ============================================= [ 308.692910][ T30] [ 308.692937][ T30] NMI backtrace for cpu 0 [ 308.692954][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 308.692993][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 308.693014][ T30] Call Trace: [ 308.693025][ T30] [ 308.693039][ T30] dump_stack_lvl+0x116/0x1f0 [ 308.693084][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 308.693141][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 308.693199][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 308.693260][ T30] watchdog+0xf14/0x1240 [ 308.693303][ T30] ? __pfx_watchdog+0x10/0x10 [ 308.693338][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 308.693383][ T30] ? __kthread_parkme+0x148/0x220 [ 308.693429][ T30] ? __pfx_watchdog+0x10/0x10 [ 308.693466][ T30] kthread+0x2c1/0x3a0 [ 308.693506][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 308.693543][ T30] ? __pfx_kthread+0x10/0x10 [ 308.693595][ T30] ret_from_fork+0x45/0x80 [ 308.693628][ T30] ? __pfx_kthread+0x10/0x10 [ 308.693672][ T30] ret_from_fork_asm+0x1a/0x30 [ 308.693739][ T30] [ 308.693750][ T30] Sending NMI from CPU 0 to CPUs 1: [ 308.693784][ C1] NMI backtrace for cpu 1 [ 308.693804][ C1] CPU: 1 UID: 0 PID: 8172 Comm: kworker/u8:12 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 308.693838][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 308.693855][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 308.693895][ C1] RIP: 0010:trace_hardirqs_on+0x3a/0x40 [ 308.693924][ C1] Code: fc 13 d5 ff 48 8b 3c 24 e9 f3 36 79 09 48 8b 3c 24 e8 8a fe ff ff 65 c7 05 83 6b 62 7e 00 00 00 00 e8 da 13 d5 ff 48 8b 3c 24 d1 36 79 09 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 308.693950][ C1] RSP: 0018:ffffc9001ae2fa78 EFLAGS: 00000046 [ 308.693970][ C1] RAX: 0000000000000001 RBX: ffff8880b873b108 RCX: 1ffffffff2d42e8a [ 308.693988][ C1] RDX: 0000000000000001 RSI: ffffffff8b4cd480 RDI: ffffffff85182a5e [ 308.694006][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff2d36db6 [ 308.694023][ C1] R10: ffffffff969b6db7 R11: 4b772f37f37ed935 R12: ffff8880b873b130 [ 308.694041][ C1] R13: 0000000000000200 R14: 0000000000000006 R15: 0000000000000011 [ 308.694059][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 308.694085][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 308.694104][ C1] CR2: 0000001b3081aff8 CR3: 000000001df5c000 CR4: 00000000003526f0 [ 308.694122][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 308.694138][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 308.694155][ C1] Call Trace: [ 308.694162][ C1] [ 308.694171][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 308.694215][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 308.694257][ C1] ? nmi_handle+0x1ac/0x5d0 [ 308.694285][ C1] ? trace_hardirqs_on+0x3a/0x40 [ 308.694318][ C1] ? default_do_nmi+0x6a/0x160 [ 308.694359][ C1] ? exc_nmi+0x170/0x1e0 [ 308.694397][ C1] ? end_repeat_nmi+0xf/0x53 [ 308.694438][ C1] ? crng_make_state+0x46e/0x6d0 [ 308.694478][ C1] ? trace_hardirqs_on+0x3a/0x40 [ 308.694504][ C1] ? trace_hardirqs_on+0x3a/0x40 [ 308.694532][ C1] ? trace_hardirqs_on+0x3a/0x40 [ 308.694558][ C1] [ 308.694567][ C1] [ 308.694575][ C1] crng_make_state+0x46e/0x6d0 [ 308.694618][ C1] _get_random_bytes+0x124/0x1e0 [ 308.694659][ C1] ? __pfx__get_random_bytes+0x10/0x10 [ 308.694704][ C1] ? __alloc_skb+0x200/0x380 [ 308.694743][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 308.694775][ C1] nsim_dev_trap_report_work+0x3af/0xd20 [ 308.694821][ C1] process_one_work+0x958/0x1b30 [ 308.694850][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 308.694890][ C1] ? __pfx_process_one_work+0x10/0x10 [ 308.694913][ C1] ? rcu_is_watching+0x12/0xc0 [ 308.694950][ C1] ? assign_work+0x1a0/0x250 [ 308.694990][ C1] worker_thread+0x6c8/0xf00 [ 308.695021][ C1] ? __pfx_worker_thread+0x10/0x10 [ 308.695046][ C1] kthread+0x2c1/0x3a0 [ 308.695075][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 308.695102][ C1] ? __pfx_kthread+0x10/0x10 [ 308.695134][ C1] ret_from_fork+0x45/0x80 [ 308.695158][ C1] ? __pfx_kthread+0x10/0x10 [ 308.695189][ C1] ret_from_fork_asm+0x1a/0x30 [ 308.695233][ C1] [ 308.695783][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 308.695801][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 308.695840][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 308.695859][ T30] Call Trace: [ 308.695869][ T30] [ 308.695882][ T30] dump_stack_lvl+0x3d/0x1f0 [ 308.695925][ T30] panic+0x71d/0x800 [ 308.695972][ T30] ? __pfx_panic+0x10/0x10 [ 308.696018][ T30] ? __pfx__printk+0x10/0x10 [ 308.696048][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 308.696103][ T30] ? __irq_work_queue_local+0xdd/0x460 [ 308.696140][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 308.696195][ T30] ? irq_work_queue+0x2a/0x80 [ 308.696230][ T30] ? watchdog+0xd7e/0x1240 [ 308.696265][ T30] ? watchdog+0xd71/0x1240 [ 308.696306][ T30] watchdog+0xd8f/0x1240 [ 308.696350][ T30] ? __pfx_watchdog+0x10/0x10 [ 308.696385][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 308.696428][ T30] ? __kthread_parkme+0x148/0x220 [ 308.696474][ T30] ? __pfx_watchdog+0x10/0x10 [ 308.696511][ T30] kthread+0x2c1/0x3a0 [ 308.696550][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 308.696594][ T30] ? __pfx_kthread+0x10/0x10 [ 308.696638][ T30] ret_from_fork+0x45/0x80 [ 308.696668][ T30] ? __pfx_kthread+0x10/0x10 [ 308.696711][ T30] ret_from_fork_asm+0x1a/0x30 [ 308.696777][ T30] [ 308.697097][ T30] Kernel Offset: disabled