last executing test programs: 1m20.718664947s ago: executing program 3 (id=870): mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/wakeup/wakeup8/active_count\x00', 0x8080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/4096, 0x1000) open_tree$auto(0xffffffffffffffff, 0x0, 0x1001) pipe$auto(0x0) dup2$auto(0x5, 0x4) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000b80), 0x80181, 0x0) write$auto(0x3, 0x0, 0xfdef) splice$auto(0x4, 0x0, 0xffffffffffffffff, 0x0, 0x80008001, 0x9) write$auto(0x6, 0x0, 0x100000001) r1 = socket$nl_generic(0x10, 0x3, 0x10) clone3$auto(&(0x7f0000000000)={0x3ffffffff, 0x4, 0x63, 0x3, 0x6, 0x0, 0x7, 0x8, 0x8fa1, 0x1, 0x8000000003}, 0x294) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000004c0), r1) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd2500fddb000000000008000400010400"/30], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 1m20.530029288s ago: executing program 3 (id=872): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xc040, 0x0) ioctl$auto(0x3, 0x1, 0x90000800000402) r0 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000280)='/dev/etherd/discover\x00', 0x541, 0x0) write$auto_aoe_fops_aoechr(r0, 0x0, 0x0) semctl$auto(0x0, 0x10000, 0xffffffff, 0x4) r1 = bpf$auto(0x2, 0x0, 0x6) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) r2 = syz_clone3(0x0, 0x0) r3 = socket(0x10, 0x2, 0x14) setreuid$auto(0x4, 0x8) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20000045}, 0x24000044) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x11b, 0xf}, 0xc, 0x0, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r4 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0) pwrite64$auto(r4, 0x0, 0x2, 0x0) r5 = socket(0x10, 0x2, 0x0) mbind$auto(0xfffffffeffffffff, 0x9, 0x9000000, &(0x7f00000001c0)=0xfffffffffffffffe, 0x1900, 0x8) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) prctl$auto(0x39, 0x1, r2, 0x6, 0x0) socket(0xa, 0x4, 0x4073) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xffffffffffffffff, @new_map_fd=r0, 0x40001801}, 0xa3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_TIOCGICOUNT(r1, 0x545d, 0x0) mmap$auto(0x3, 0x4, 0x4000000000dc, 0x40eb2, 0xa1c, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x1000000000053, 0x9) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x0) 1m19.473691379s ago: executing program 3 (id=879): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/event2\x00', 0x2a482, 0x0) poll$auto(&(0x7f0000000000)={r0, 0x50c, 0x400}, 0x4, 0xffff0000) read$auto_qrtr_tun_ops_tun(r1, &(0x7f0000000100)=""/235, 0xeb) socket(0x6, 0x1, 0x4) writev$auto(r0, &(0x7f0000000040)={0x0, 0x18}, 0x8000000000000001) r2 = socket(0x2, 0x3, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0xff, 0x1, 0x0, 0x88) mmap$auto(0x0, 0xe983, 0xdf, 0x8011, 0x401, 0x8000) r3 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) socket(0x10, 0x2, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x9281f8c7d9295ca6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x29, 0x2, 0x0) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) r4 = open(0x0, 0x80842, 0x91) read$auto(r4, 0x0, 0x210000001) ioctl$auto_def_blk_fops_fs(0xffffffffffffffff, 0x1261, 0x0) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x101, 0x0, 0x1c) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x7fffffff) openat$auto_uprobe_profile_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x103200, 0x0) 1m18.538965277s ago: executing program 2 (id=887): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x309, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0xfffff000, 0x0, 0x4040844}, 0x0) 1m18.440264439s ago: executing program 2 (id=888): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xc040, 0x0) ioctl$auto(0x3, 0x1, 0x90000800000402) r0 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000280)='/dev/etherd/discover\x00', 0x541, 0x0) write$auto_aoe_fops_aoechr(r0, 0x0, 0x0) semctl$auto(0x0, 0x10000, 0xffffffff, 0x4) r1 = bpf$auto(0x2, 0x0, 0x6) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) r2 = syz_clone3(0x0, 0x0) r3 = socket(0x10, 0x2, 0x14) setreuid$auto(0x4, 0x8) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="10000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000045}, 0x24000044) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x11b, 0xf}, 0xc, 0x0, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r4 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0) pwrite64$auto(r4, 0x0, 0x2, 0x0) r5 = socket(0x10, 0x2, 0x0) mbind$auto(0xfffffffeffffffff, 0x9, 0x9000000, &(0x7f00000001c0)=0xfffffffffffffffe, 0x1900, 0x8) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) prctl$auto(0x39, 0x1, r2, 0x6, 0x0) socket(0xa, 0x4, 0x4073) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xffffffffffffffff, @new_map_fd=r0, 0x40001801}, 0xa3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_TIOCGICOUNT(r1, 0x545d, 0x0) mmap$auto(0x3, 0x4, 0x4000000000dc, 0x40eb2, 0xa1c, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x1000000000053, 0x9) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x0) 1m18.426241225s ago: executing program 3 (id=889): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000640)='/dev/loop6\x00', 0xc0542, 0x0) read$auto_def_blk_fops_fs(r0, &(0x7f0000000140)=""/194, 0xc2) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/partitions\x00', 0x200, 0x0) sendmsg$auto_L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x1) mremap$auto(0x0, 0x7, 0x80000000000001d4, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x100000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x530}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x9, 0x0, 0x5, 0x0, 0x400001, 0x7}, 0x4}, 0xb9ec, 0x300, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x309c02, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/10/smp_affinity_list\x00', 0x129542, 0x0) read$auto(0x3, 0x0, 0x7) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xc) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r3 = openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/tracing/README\x00', 0x20400, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) writev$auto(r3, &(0x7f00000001c0)={0x0, 0x3}, 0x1) io_uring_setup$auto(0x8e3e, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptys1\x00', 0x20400, 0x0) 1m17.854105438s ago: executing program 3 (id=892): mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003ec, 0x14) bind$auto(0x3, 0x0, 0x6a) futex$auto(0xfffffffffffffffc, 0xc, 0x7, 0xffffffffffffffff, 0xfffffffffffffffc, 0x8) finit_module$auto(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x9) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000080), r0) ppoll$auto(0x0, 0x3, 0x0, 0x0, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x88) socket(0x28, 0xa, 0x1) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) ioctl$auto(0x1, 0x890b, 0x8) 1m17.415333086s ago: executing program 2 (id=894): r0 = prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) socket(0x2b, 0x1, 0x1) socket(0xa, 0x3, 0x73) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x80002, 0x73) write$auto_proc_mem_operations_base(r0, &(0x7f00000002c0)="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", 0x800) timer_create$auto(0x9, &(0x7f00000001c0)={@sival_int=0x4, @inferred, 0x1, @_tid}, &(0x7f0000000040)=0x200) r1 = socket(0x2, 0x1, 0x84) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket(0x28, 0x801, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0xffffffff, 0x0, 0x0) futex$auto(0x0, 0x10d, 0x2, 0x0, 0x0, 0x8) r2 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r2, 0x3a, 0x1, 0x0, 0x0) r3 = bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_7={@btf_id, 0xd, 0x9}, 0x6) socket(0xa, 0x2, 0x88) lseek$auto(0x3, 0x7fffffffffffffff, 0x401) r4 = accept$auto(r1, &(0x7f0000000140)=@qipcrtr={0x2a, 0x2}, &(0x7f0000000180)=0x6) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r3, @new_map_fd=r4, 0x1802, @old_map_fd=0x3ff}, 0x20000a3) 1m17.224997128s ago: executing program 3 (id=895): openat$auto_dmaengine_summary_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x80100, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x4) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYRESHEX=0x0], 0x18}, 0x1, 0x0, 0x0, 0x8000800}, 0x20048048) shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x4000000028000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0xc8, 0x400454de, 0x5c8d) syz_clone(0x21242011, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020007, 0xdf, 0x10, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) clock_nanosleep$auto(0x8, 0x0, 0x0, 0x0) clock_gettime$auto(0x60000, &(0x7f0000000100)={0x8, 0x3}) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) listmount$auto(&(0x7f0000000080)={0x3, @inferred=r1, 0x8, 0x7, 0x4}, &(0x7f00000000c0)=0x5, 0x1, 0x4) r2 = socketpair$auto(0x1e, 0x2, 0x8000000000000000, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r2) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1afcff90ce94ae81aa25c47fff0edf0004000000", @ANYRES16=r3, @ANYBLOB="08002bbd7000ffdbdf251900000008001d00", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) ioctl$auto(r1, 0x4b41, r2) acct$auto(&(0x7f0000000040)='(\x00') 1m16.857070772s ago: executing program 2 (id=896): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo$auto(0x0, 0x0, 0x40, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0x7, @_sigchld={0x0, 0xffffffffffffffff, 0x4d, 0x8, 0x9}}}) munmap$auto(0x0, 0xffffffff) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x1f40) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyaf\x00', 0x40200, 0x0) r1 = fsmount$auto(r0, 0x7f, 0x8) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) 1m16.706557307s ago: executing program 2 (id=898): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) r1 = syz_clone3(0x0, 0x0) prctl$auto(0x39, 0x1, r1, 0x6, 0x2) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) tkill$auto(0x80000000000001, 0x7) madvise$auto(0x0, 0x1000000000053, 0x9) socket(0xa, 0x2, 0x0) unshare$auto(0x40000080) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_def_blk_fops_fs(0xffffffffffffffff, 0x2201, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) mq_open$auto(&(0x7f0000000080)='!\x00', 0x76d0, 0x101, &(0x7f0000000100)={0x7, 0x8, 0x7fffffffffffffff, 0x5b}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_BTRFS_IOC_DEVICES_READY(r2, 0x90009427, &(0x7f0000000200)={@raw=0x8, "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"}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) io_uring_setup$auto(0x81c5, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 1m16.179063963s ago: executing program 2 (id=901): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000640)='/dev/loop6\x00', 0xc0542, 0x0) read$auto_def_blk_fops_fs(r0, &(0x7f0000000140)=""/194, 0xc2) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/partitions\x00', 0x200, 0x0) sendmsg$auto_L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x1) mremap$auto(0x0, 0x7, 0x80000000000001d4, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x100000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x530}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x9, 0x0, 0x5, 0x0, 0x400001, 0x7}, 0x4}, 0xb9ec, 0x300, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x309c02, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/10/smp_affinity_list\x00', 0x129542, 0x0) read$auto(0x3, 0x0, 0x7) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xc) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r3 = openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/tracing/README\x00', 0x20400, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) writev$auto(r3, &(0x7f00000001c0)={0x0, 0x3}, 0x1) io_uring_setup$auto(0x8e3e, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptys1\x00', 0x20400, 0x0) 1m15.882142756s ago: executing program 32 (id=901): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000640)='/dev/loop6\x00', 0xc0542, 0x0) read$auto_def_blk_fops_fs(r0, &(0x7f0000000140)=""/194, 0xc2) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/partitions\x00', 0x200, 0x0) sendmsg$auto_L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x1) mremap$auto(0x0, 0x7, 0x80000000000001d4, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x100000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x530}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x9, 0x0, 0x5, 0x0, 0x400001, 0x7}, 0x4}, 0xb9ec, 0x300, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x309c02, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/10/smp_affinity_list\x00', 0x129542, 0x0) read$auto(0x3, 0x0, 0x7) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xc) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r3 = openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/tracing/README\x00', 0x20400, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) writev$auto(r3, &(0x7f00000001c0)={0x0, 0x3}, 0x1) io_uring_setup$auto(0x8e3e, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptys1\x00', 0x20400, 0x0) 1m1.44270177s ago: executing program 33 (id=895): openat$auto_dmaengine_summary_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x80100, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x4) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYRESHEX=0x0], 0x18}, 0x1, 0x0, 0x0, 0x8000800}, 0x20048048) shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x4000000028000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0xc8, 0x400454de, 0x5c8d) syz_clone(0x21242011, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020007, 0xdf, 0x10, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) clock_nanosleep$auto(0x8, 0x0, 0x0, 0x0) clock_gettime$auto(0x60000, &(0x7f0000000100)={0x8, 0x3}) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) listmount$auto(&(0x7f0000000080)={0x3, @inferred=r1, 0x8, 0x7, 0x4}, &(0x7f00000000c0)=0x5, 0x1, 0x4) r2 = socketpair$auto(0x1e, 0x2, 0x8000000000000000, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r2) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1afcff90ce94ae81aa25c47fff0edf0004000000", @ANYRES16=r3, @ANYBLOB="08002bbd7000ffdbdf251900000008001d00", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) ioctl$auto(r1, 0x4b41, r2) acct$auto(&(0x7f0000000040)='(\x00') 7.279823603s ago: executing program 5 (id=1120): close_range$auto(0x2, 0xa, 0x0) r0 = open(0x0, 0x44040, 0x1) openat$auto_userio_fops_userio(0xffffffffffffff9c, 0x0, 0x101000, 0x0) statmount$auto(0x0, 0x0, 0x202, 0xd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioperm$auto(0xde, 0x9, 0x100402) sendmsg$auto_NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000081) mmap$auto(0x3, 0x6, 0x100001000000004, 0xc113, r0, 0x10008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) execve$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mprotect$auto(0x1ffff000, 0x8000000080000001, 0xd) mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8c1, 0x80) move_mount$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r1, 0x0, 0x40) socket(0xa, 0x2, 0x0) socket(0xa, 0x3, 0x3a) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto(0x3, 0x0, 0xf34) write$auto(0x3, 0x0, 0xd) 7.048344855s ago: executing program 5 (id=1123): r0 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x108000, 0x800034, 0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x801, 0x106) r4 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sched_getparam$auto(r4, &(0x7f0000000000)={0x9}) r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0xc) socket(0x2000000000000021, 0x2, 0x10000000000002) io_uring_setup$auto(0x6, 0x0) r6 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd700001dcdf2503000000040006000c00018008001000040005"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NETDEV_CMD_BIND_RX(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250d00000008000300", @ANYRES32, @ANYBLOB="0400028008000100", @ANYRES64=r0], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x4) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) sendfile$auto(r7, r7, 0x0, 0x5) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 6.565613822s ago: executing program 5 (id=1127): setsockopt$auto(0x3, 0x10000000084, 0x72, 0x0, 0xc) 6.23475467s ago: executing program 5 (id=1132): read$auto(0x3, 0x0, 0x1f40) 5.901021162s ago: executing program 5 (id=1136): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xc040, 0x0) ioctl$auto(0x3, 0x1, 0x90000800000402) r0 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000280)='/dev/etherd/discover\x00', 0x541, 0x0) write$auto_aoe_fops_aoechr(r0, 0x0, 0x0) semctl$auto(0x0, 0x10000, 0xffffffff, 0x4) r1 = bpf$auto(0x2, 0x0, 0x6) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) r2 = syz_clone3(0x0, 0x0) r3 = socket(0x10, 0x2, 0x14) setreuid$auto(0x4, 0x8) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000214af"], 0x14}, 0x1, 0x0, 0x0, 0x20000045}, 0x24000044) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x11b, 0xf}, 0xc, 0x0, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r4 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0) pwrite64$auto(r4, 0x0, 0x2, 0x0) r5 = socket(0x10, 0x2, 0x0) mbind$auto(0xfffffffeffffffff, 0x9, 0x9000000, &(0x7f00000001c0)=0xfffffffffffffffe, 0x1900, 0x8) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) prctl$auto(0x39, 0x1, r2, 0x6, 0x0) socket(0xa, 0x4, 0x4073) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xffffffffffffffff, @new_map_fd=r0, 0x40001801}, 0xa3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_TIOCGICOUNT(r1, 0x545d, 0x0) mmap$auto(0x3, 0x4, 0x4000000000dc, 0x40eb2, 0xa1c, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x1000000000053, 0x9) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x0) 4.473072112s ago: executing program 1 (id=1142): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/rto_max\x00', 0x101201, 0x0) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) getgid() 3.74495015s ago: executing program 1 (id=1146): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DEV_UP(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10204000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00546cf5da025e17889f530000", @ANYRES16=r1, @ANYBLOB="00042dbd7000fcdbdf25020000000500100000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2001}, 0x45) (async) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) socket(0xa, 0x2, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) bind$auto(0x3, &(0x7f0000000040), 0x6a) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) (async) connect$auto(0x3, &(0x7f0000000140), 0x55) (async) bpf$auto(0x0, 0x0, 0xfbf) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) socket(0x2, 0x1, 0x84) (async) setsockopt$auto(0x3, 0x10000000084, 0x19, 0x0, 0x4b6) (async) shutdown$auto(0x200000003, 0x2) (async) write$auto(0x3, 0x0, 0x296) (async) sendmsg$auto_NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x20048800) (async) select$auto(0x100000b, 0x0, &(0x7f0000000100)={[0xa, 0x203, 0x80000000000000b, 0x2, 0xffffffffffff10e3, 0xf4, 0x6, 0x4, 0xc0009, 0x6, 0xf1, 0x2, 0x95, 0x200000000008, 0x6, 0xfffffffffffffff7]}, 0x0, 0x0) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) unshare$auto(0x40000080) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) settimeofday$auto(&(0x7f0000000080)={0x5, 0x9}, &(0x7f00000000c0)={0x3, 0x2}) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/psaux\x00', 0x40000, 0x0) (async) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000040), 0x200800, 0x0) (async) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20240, 0x0) preadv$auto(r2, &(0x7f0000000440)={0x0, 0x300e60}, 0x3, 0x19d, 0xa) (async) pwrite64$auto(0xc8, &(0x7f0000000280)='\vX\xb5n\x91p\xe6\x1eRN8\x99\b\x06e\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9', 0xe, 0xffef) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) 3.293926102s ago: executing program 0 (id=1148): mmap$auto(0x0, 0x4020009, 0xdf, 0x13, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async, rerun: 32) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x1354}}, 0x40001) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000002180)='/proc/self/setgroups\x00', 0x98880, 0x0) write$auto_proc_setgroups_operations_base(r0, &(0x7f00000021c0)="4c642cbd04c28a17", 0x8) (async, rerun: 64) socket(0x2b, 0x1, 0x1) (async, rerun: 64) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r1) sendmsg$auto_TIPC_NL_NET_SET(r1, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000009cb4e4a0072402b6773ea2d2158cb1bb070b0522a92967", @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf250f0000000c00078008000200ffffffff"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2) (async, rerun: 64) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) (rerun: 64) ioctl$auto(0x3, 0x8008551c, 0x38) io_uring_setup$auto(0x81, 0x0) (async) getsockopt$auto(0xffffffffffffffff, 0x6b, 0x2, 0xfffffffffffffffe, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) 3.034362283s ago: executing program 4 (id=1149): accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) 2.844858443s ago: executing program 4 (id=1150): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r0 = signalfd4$auto(0xffffffff, &(0x7f0000000080)={0x8000}, 0x8, 0x0) readv$auto(r0, 0x0, 0x1) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) timer_create$auto(0x9, 0x0, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x4, 0x10007}, {0x9}}, 0x0) (async, rerun: 32) timer_delete$auto(0x0) (async, rerun: 32) r1 = io_uring_setup$auto(0x6, 0x0) sendmsg$auto_IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002cbd7000ffdbdf25280000fd6d4aa600040000000c000c0000000080000000b06f168f903f649700"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10044000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg1\x00'}) (async, rerun: 32) sendmsg$auto_IEEE802154_START_REQ(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) (async, rerun: 64) getsockopt$auto(0x100000006, 0x11, 0x68, 0xfffffffffffffffc, 0x0) (async, rerun: 64) socket(0x29, 0x4, 0x4) (async) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) munmap$auto(0x1ffff000, 0x2000000c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x29, 0x2, 0x0) (async) io_uring_register$auto(0x2, 0x17, 0x0, 0x1) (async) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x1) msgrcv$auto(0x0, 0x0, 0xffc, 0x1, 0xb1) (async, rerun: 32) msgctl$auto(0x0, 0x0, 0x0) (rerun: 32) 2.72632351s ago: executing program 0 (id=1151): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x8d00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0x4020ae76, 0xffffffffffffffff) 2.714347525s ago: executing program 1 (id=1152): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x161802, 0x0) ioctl$auto(r0, 0xc0046209, 0x9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mlockall$auto(0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='~\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000826bd7000fddbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004041}, 0xc800) munlock$auto(0x1, 0x29b5) statx$auto(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x3, 0x4, &(0x7f00000000c0)={0x9, 0xffffff01, 0x1000000, 0x4, 0xffffffffffffffff, 0x0, 0x5214, 0x8, 0x6998, 0x0, 0x6f9f572d, 0x100, {0x5, 0x2}, {0x80000000, 0xe}, {0x2, 0x7}, {0x6, 0x1}, 0x4, 0x6, 0x1, 0x3, 0x200, 0x0, 0xb, 0x6, 0x8, 0xfffffffe, 0xfffffe00, 0x5, [0x2, 0x5, 0x2009, 0x4, 0x979, 0x4, 0x5, 0x0, 0x8]}) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x7) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000061c0), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000006240)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRES16=r5, @ANYBLOB="e0ff25bd70403d7636b2b3000000000000000008000100fadeef499e4ca3377b8a52050000000000a100ab24b9feb2ca571acf8d0f0451a494a52d791f85fafdd8ebde688d645619847773e48f0000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004008}, 0x50881) madvise$auto(0x0, 0x9b, 0xe) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) move_pages$auto(0x1, 0x2000000000003, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) getdents$auto(0x600000000, 0xfffffffffffffffd, 0xd00) setsockopt$auto(0x3, 0x29, 0x39, 0xffffffffffffffff, 0x1) mmap$auto(0x0, 0x800020000a, 0xff, 0xfffffffffffffff7, 0x602, 0x301000000000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r6 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r6, 0x0, 0x1) 2.44160615s ago: executing program 5 (id=1153): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e23}, 0x67) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x2, 0xb}, 0x800009}, 0x5, 0x20000000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) geteuid() openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/dynamic_events\x00', 0x2080, 0x0) read$auto(0x3, 0x0, 0x7) open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0xa, 0x2, 0x0) select$auto(0x3, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x0, 0xc, 0x8, 0x3, 0x6, 0x2, 0x9, 0x5e582970, 0x4000000000000000, 0x2, 0x4, 0x5, 0x8, 0x6]}, 0x0, 0x0) write$auto(0x3, 0x0, 0xfdef) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1b7573919a8c4e4}, 0x810) bpf$auto(0x0, 0x0, 0xfbf) shutdown$auto(0x200000003, 0x2) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) futex_waitv$auto(0x0, 0xffffffff, 0x1, 0x0, 0x623d) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x7f, 0x0, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) 2.242232698s ago: executing program 0 (id=1154): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x4, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) socketpair$auto(0x4, 0x1, 0x20000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x600000000000000) 1.973364145s ago: executing program 1 (id=1155): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) socket(0xa, 0x2, 0x0) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) ioctl$auto(0x3, 0x89f0, 0x38) 1.903794774s ago: executing program 0 (id=1156): openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = userfaultfd$auto(0x1) statx$auto(r0, 0x0, 0x1000, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x8, 0x1, r1, @relative_id=0x13, 0xe600}, 0xf) r4 = open(0x0, 0x261c2, 0x84) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r4, 0x7000000, 0x3}, 0xc) mq_open$auto(&(0x7f0000000000)='/#&/[&\x00', 0x2, 0x2, &(0x7f0000000040)={0xffffffffffff49ac, 0x5, 0x200, 0x7ff}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/set\x00', 0x103a00, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/ip6gre0/proto_down\x00', 0x1c2b02, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) close_range$auto(0x2, 0x8, 0x0) 1.829014356s ago: executing program 4 (id=1157): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_GET(r0, &(0x7f0000000c00)={0x0, 0xfff0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x14, r1, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfdbfb, {0x1, 0x0, 0xa6}}, 0x14}, 0x1, 0xa6ff}, 0x0) 1.61804349s ago: executing program 1 (id=1158): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x81) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/tracing/README\x00', 0x20400, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) writev$auto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x5}, 0xf) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptys1\x00', 0x20400, 0x0) ioctl$auto_TIOCSWINSZ2(r1, 0x5414, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r2 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x149001, 0x91, 0x2f}, 0x18) mmap$auto(0x0, 0x4020009, 0xe1, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000000c0), r0) r4 = setfsuid$auto(0xee00) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) mmap$auto(0x8000000, 0x8, 0x1000000016, 0x13, 0x3, 0x180000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r5) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000700)={0x680, r3, 0x2, 0x70bd26, 0x25dfdbff, {}, [@OVS_METER_ATTR_BANDS={0x3cd, 0x4, 0x0, 0x1, [@typed={0xc, 0xdd, 0x0, 0x0, @u64=0xd6}, @nested={0xc, 0xbe, 0x0, 0x1, [@nested={0x4, 0xcf}, @nested={0x4, 0x8b}]}, @typed={0x8, 0x27, 0x0, 0x0, @ipv4=@local}, @generic="80e7419cd74c446b81c1d23f66fcdffef49268638d7a22f5a1c875d996993604366b290a775e381478855e123b4aea75aac1ac8f51c771fb8e504cece9e4a67ee569827d308c6e211264be6bbfa605ad65b4289241f00fbf028aa8c0584be282f7d254d5877389a7613342dcdde912d2257396150372d5056d1aa786145530e000a257b42a760996b81411b1a19cf58e5bf489def04ce2e7a44980873c227cca608902b92f5bf3f39e2c36ee1fa831848772bfd0bcf3a570111ac03a3a6c828cb232a1b944ce23da425e4157f507d7cb2fc6c8c32093", @generic="f4c9b5076880ad67443d19139133ea4978885df905e9806010f60f6cd7b8354d959b3116d1688e8ba4de2b11d6bad398ce3b97e0713fd58d2fbb8fb48b267dd15014085a5a7c7a6655d086090f288e6109fcc8d1365fb109e651551d99d36d92377b21baf346abf68cebe2fee51c30f01923a9024221d1837afe5653439fcdb05f317d3f410f45f59a93b5c587e69db9ee2fb3", @typed={0x8, 0xe4, 0x0, 0x0, @fd=r2}, @nested={0x21a, 0x28, 0x0, 0x1, [@generic="39ac9794fcea343f4d1428fc1e7873570ab1d95b09266eeb3536d4946abbaa58578e292935a024d96efb3d77e97afce60609360198dcb44b61f1d38686db7176b878cf4c6627287620ea1ca001d0f93c51478c2328862faa23333388fe69914090e530a016816ea57bad132605d1a31dc606e374df225a864acaf1adcda383f51289540c8521923f0f75b6f238882d0b0307cd079c8e30b8ef9dfe578661997a30458786b9dde9b7a3de355e9b46dc68a3aeeb4b1ad4de2e0357d520f7", @generic="4e37a91092ff81c79b0169be5aaf016e365aa90b8ca72c830418a1b8c416d6a398af208e839e98791e3f04d75efd212fe77c87652fc7c54d308f840a1200cc334909dd45dca2aa1b8b3dcdbad8cb0e4d2f343ae7e1e8d318", @generic="917f9ba8ffc62cc33d1a74e515f0e39c88bcfdfc9a681790b4d2f5f86fbbf0f210ccbf016f70ad6a694475ba9d5d3417471d9cdee44cbee6e9f3ed3c7ea600eabff8b5fb6f45e800a034d927cc9fb28e2711dc59dd23788a79209dbd9021450d9d29bf00ff10baa410abce4102b8cf52646c9e5f779a839b6ecdbf5cfec29b27e894f1cdfb2fdd4a2b48f4843790bbccc4204a822c8795d97c506fe451375045799cb5596d9b8df764d377cde31784b8e516066bc71184853facc41552302a8c0e9c86c1d72909f3784623889dc3daa5d17354cb61c9158071a38cf9f2f699a659a7e407305875de9162f899fcade1986b5c681d6607b69c15", @typed={0x8, 0x5d, 0x0, 0x0, @str='+#:\x00'}]}, @nested={0x10, 0xb8, 0x0, 0x1, [@nested={0x4, 0x3a}, @typed={0x8, 0x5e, 0x0, 0x0, @uid=r4}]}, @typed={0xc, 0xb8, 0x0, 0x0, @u64=0x28}]}, @OVS_METER_ATTR_CLEAR={0x4}, @OVS_METER_ATTR_CLEAR={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x24}, @OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x9841}, @OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0x6}, @OVS_METER_ATTR_BANDS={0x278, 0x4, 0x0, 0x1, [@nested={0xf0, 0x12f, 0x0, 0x1, [@nested={0x4, 0x8a}, @generic="774b4b40d220737f02d6872efe18ae093186889afb7e5165910b603e0424c8e61cc596c991c5dff7108f0777dc773ac1322c320ccefca7519c3a4e8c439cd12bf7429f834caadf44c0f966", @generic="5482028f6b4cc16c9eb0c72e1442c5f89fccf48d09a729004d136bb1fb370eef2fdb6f138a6679879bc02160c10711d166290d37343ca1a901086b0146aad320124265ece832d51a00b376089e8231a0bf8d10381f12f0894ccbcb33cba74013548c607da5e06bd332e45c5d7eacb8b53fa0fd03f6df569ec9fd0173b512b5321c7f708ab6199516b473afffb2a6fd77d80cd473741ec261d5d653c2ef"]}, @generic="34deb5fd7306435b364cda443e5bf9ea55a78890ae8b9c31568dbb4f36a60ce9a00a4c3fe3da1790aea5c831b6e8016d9e24e7119501ecd35ecbbc3dc6c0f0cfb0b763c5c0a2292359848bae6c3206865276b439569180cdeca933dd7bed17a594f7f9f1e838d6a8947134243e210c671895d613d2f023ef73f22a95f6222bda9113cb7f5209408bb1d583d5d1c9d5ace36756c7439d1b31c5ecbbfa076a", @typed={0xa, 0x6f, 0x0, 0x0, @str=']@[[,\x00'}, @typed={0x4, 0x5f}, @generic="a300f15394cc0a661007cbf531d3ddeb18d61975b864d6a49a7ce5f9a596728cf567d62b87106a47e16f8815c728bdcd385fd916ce36524528b927ea1c5b06ab7addd6a0ecbc1e924a4d22d9113748b3a2f2cd11dc39fcfb2c5c4b9c04e7db96630401c6b053482996547c0dbe6c26433edaad7d3aff01ffd0ee6955013826a5fc19893ee582097ca49cd5d12333192f76d1b40501c74b0dc76fcbaabe93dcc66563f1d4c91965683bad2fc26f4dd2475392efb291556538822f50b2f64e5ddc3ff0715ba5905e491ad0", @typed={0xc, 0xe8, 0x0, 0x0, @str='nl80211\x00'}]}]}, 0x680}, 0x1, 0x0, 0x0, 0x855}, 0xc000) 1.577925636s ago: executing program 4 (id=1159): r0 = prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) socket(0x2b, 0x1, 0x1) socket(0xa, 0x3, 0x73) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x80002, 0x73) write$auto_proc_mem_operations_base(r0, &(0x7f00000002c0)="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", 0xffc) timer_create$auto(0x9, &(0x7f00000001c0)={@sival_int=0x4, @inferred, 0x1, @_tid}, &(0x7f0000000040)=0x200) r1 = socket(0x2, 0x1, 0x84) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket(0x28, 0x801, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0xffffffff, 0x0, 0x0) futex$auto(0x0, 0x10d, 0x2, 0x0, 0x0, 0x8) r2 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r2, 0x3a, 0x1, 0x0, 0x0) r3 = bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_7={@btf_id, 0xd, 0x9}, 0x6) socket(0xa, 0x2, 0x88) lseek$auto(0x3, 0x7fffffffffffffff, 0x401) r4 = accept$auto(r1, &(0x7f0000000140)=@qipcrtr={0x2a, 0x2}, &(0x7f0000000180)=0x6) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r3, @new_map_fd=r4, 0x1802, @old_map_fd=0x3ff}, 0x20000a3) 927.161705ms ago: executing program 4 (id=1160): close_range$auto(0x0, 0xfffffffffffff000, 0x2) inotify_init1$auto(0x3000000000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x100) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e21, @multicast1}, 0x55) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) 792.249064ms ago: executing program 0 (id=1161): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x220a00, 0x0) memfd_secret$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) socket(0x23, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x4, 0x89f2, 0xfffffffffffff4e0) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) eventfd$auto(0x34b) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) close_range$auto(0x2, 0xffffffffffffffff, 0x3f00) 480.559268ms ago: executing program 1 (id=1162): socket(0x2, 0x5, 0x0) socket(0xa, 0x2, 0x0) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0x8, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x1e, 0x5, 0x3103) socketpair$auto(0x1, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x40, r3, 0x1b, 0x70bd26, 0x25dfdbfb, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @fd}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r4 = socketpair$auto(0x4, 0x1, 0x20000, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r6 = syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000040), r0) sendmsg$auto_NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x40) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) r7 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r7, 0xc0686611, &(0x7f0000000340)={0x18, 0x0, 0x4, 0x1, 0x8, 0x1, 0x0, 0x6, 0x5, 0x200, 0xffff7ffe, 0x80000000, 0x7ff, 0x7, 0x9}) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) 165.14861ms ago: executing program 0 (id=1163): openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x220040, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = userfaultfd$auto(0x7) statx$auto(r0, 0x0, 0x1000, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ram0\x00', 0x40a40, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x100000) socket(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_3={0x5, 0x3, 0x6, 0x2, 0x4, 0x9, 0x81, 0x5, 0x7fff, "aa7796dcb83b6b02ccf8c8de88605612", r3, 0x8, r2, 0x3, 0x5, 0xf, 0x540e, 0x1ff, 0x6, 0x1, @attach_prog_fd=r0, 0xfffffffa, 0x6, 0x8, 0x4, 0x0, r1}, 0xf) r4 = open(0x0, 0x663c2, 0xc6) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r4, 0x0, 0x3}, 0xc) r5 = mq_open$auto(&(0x7f0000000000)='/#&/[&\x00', 0x2, 0x2, &(0x7f0000000040)={0xffffffffffff49ac, 0x5, 0x200, 0x7ff}) mmap$auto(0x5, 0x10400008, 0xdf, 0x9b70, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfs\x00', 0x2000, 0x0) fcntl$getown(r5, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto(0xffffffffffffffff, 0xffffffff, 0x3) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/ram12/queue/atomic_write_unit_min_bytes\x00', 0x2c6840, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) write$auto(0x800000000000c8, 0x0, 0x1a) mmap$auto(0x6, 0x9, 0x6, 0x32d4, 0x10000, 0x80000001) ioctl$auto(0xc8, 0xffffffff800454dd, 0x4000000000008) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd0\x00', 0x103bc3, 0x0) shutdown$auto(0x200000003, 0x2) 0s ago: executing program 4 (id=1164): r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x600, 0x0) readv$auto(r0, &(0x7f0000000000)={0x0, 0x7ffffffffffffff9}, 0x100000006) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.72' (ED25519) to the list of known hosts. syzkaller login: [ 64.979308][ T5819] cgroup: Unknown subsys name 'net' [ 65.120574][ T5819] cgroup: Unknown subsys name 'cpuset' [ 65.128623][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.490979][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.346090][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.355122][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.364318][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.373287][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.381561][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.390981][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.398916][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.408107][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.408526][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.423242][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.423584][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.434094][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.438779][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.445955][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.452218][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.460620][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.466042][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.474904][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.480419][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.487391][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.496853][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.501301][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.518032][ T5838] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.526465][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.870684][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 68.944835][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 68.960963][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 69.021983][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 69.103597][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.111998][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.119726][ T5828] bridge_slave_0: entered allmulticast mode [ 69.126419][ T5828] bridge_slave_0: entered promiscuous mode [ 69.162332][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.169569][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.177015][ T5828] bridge_slave_1: entered allmulticast mode [ 69.184103][ T5828] bridge_slave_1: entered promiscuous mode [ 69.227988][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.237368][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.244559][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.252491][ T5830] bridge_slave_0: entered allmulticast mode [ 69.259267][ T5830] bridge_slave_0: entered promiscuous mode [ 69.279409][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.286490][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.293774][ T5831] bridge_slave_0: entered allmulticast mode [ 69.300779][ T5831] bridge_slave_0: entered promiscuous mode [ 69.324228][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.335488][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.342791][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.350029][ T5830] bridge_slave_1: entered allmulticast mode [ 69.356745][ T5830] bridge_slave_1: entered promiscuous mode [ 69.363160][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.372596][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.381945][ T5831] bridge_slave_1: entered allmulticast mode [ 69.390052][ T5831] bridge_slave_1: entered promiscuous mode [ 69.396609][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.403717][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.411055][ T5829] bridge_slave_0: entered allmulticast mode [ 69.418227][ T5829] bridge_slave_0: entered promiscuous mode [ 69.455392][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.462586][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.470181][ T5829] bridge_slave_1: entered allmulticast mode [ 69.477484][ T5829] bridge_slave_1: entered promiscuous mode [ 69.487773][ T5828] team0: Port device team_slave_0 added [ 69.516695][ T5828] team0: Port device team_slave_1 added [ 69.534132][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.545261][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.572072][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.583597][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.594868][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.604811][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.611803][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.637745][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.651155][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.658193][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.684737][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.698290][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.757600][ T5831] team0: Port device team_slave_0 added [ 69.768361][ T5829] team0: Port device team_slave_0 added [ 69.777774][ T5830] team0: Port device team_slave_0 added [ 69.791730][ T5831] team0: Port device team_slave_1 added [ 69.805717][ T5829] team0: Port device team_slave_1 added [ 69.813608][ T5830] team0: Port device team_slave_1 added [ 69.872777][ T5828] hsr_slave_0: entered promiscuous mode [ 69.879666][ T5828] hsr_slave_1: entered promiscuous mode [ 69.887565][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.894537][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.920925][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.941965][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.948971][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.974984][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.995603][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.002927][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.029243][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.041121][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.048176][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.074154][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.085995][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.093313][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.119611][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.141589][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.148877][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.175399][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.274849][ T5830] hsr_slave_0: entered promiscuous mode [ 70.281127][ T5830] hsr_slave_1: entered promiscuous mode [ 70.288666][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.296478][ T5830] Cannot create hsr debugfs directory [ 70.321584][ T5829] hsr_slave_0: entered promiscuous mode [ 70.330024][ T5829] hsr_slave_1: entered promiscuous mode [ 70.336039][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.343667][ T5829] Cannot create hsr debugfs directory [ 70.353685][ T5831] hsr_slave_0: entered promiscuous mode [ 70.360847][ T5831] hsr_slave_1: entered promiscuous mode [ 70.370712][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.378364][ T5831] Cannot create hsr debugfs directory [ 70.547611][ T5838] Bluetooth: hci2: command tx timeout [ 70.553553][ T5838] Bluetooth: hci3: command tx timeout [ 70.590509][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.603625][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.626760][ T5838] Bluetooth: hci1: command tx timeout [ 70.627004][ T5833] Bluetooth: hci0: command tx timeout [ 70.646307][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.660760][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.742650][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.763934][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.773543][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.797189][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.839427][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.851457][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.860899][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.883092][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.943935][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.965048][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.979404][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.998241][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.017928][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.037665][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.081866][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.089364][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.101912][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.109124][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.212822][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.270818][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.284421][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.323848][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.331023][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.362823][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.370173][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.382562][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.395827][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.426096][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.433268][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.453296][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.460477][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.472043][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.505695][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.525265][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.532400][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.557640][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.564788][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.671295][ T5828] veth0_vlan: entered promiscuous mode [ 71.695121][ T5828] veth1_vlan: entered promiscuous mode [ 71.780261][ T5828] veth0_macvtap: entered promiscuous mode [ 71.801348][ T5828] veth1_macvtap: entered promiscuous mode [ 71.831529][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.844020][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.863620][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.875100][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.905926][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.928995][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.947264][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.956014][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.024176][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.042464][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.140245][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.146163][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.167627][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.211845][ T5831] veth0_vlan: entered promiscuous mode [ 72.240425][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.251285][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.252050][ T5831] veth1_vlan: entered promiscuous mode [ 72.301995][ T5830] veth0_vlan: entered promiscuous mode [ 72.310704][ T5829] veth0_vlan: entered promiscuous mode [ 72.330252][ T5829] veth1_vlan: entered promiscuous mode [ 72.344509][ T5830] veth1_vlan: entered promiscuous mode [ 72.354476][ T5831] veth0_macvtap: entered promiscuous mode [ 72.355966][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.382781][ T5831] veth1_macvtap: entered promiscuous mode [ 72.408494][ T5830] veth0_macvtap: entered promiscuous mode [ 72.423778][ T5830] veth1_macvtap: entered promiscuous mode [ 72.432966][ T5829] veth0_macvtap: entered promiscuous mode [ 72.451696][ T5829] veth1_macvtap: entered promiscuous mode [ 72.469059][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.491371][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.503985][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.527096][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.542395][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.554759][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.566837][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.578539][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.588562][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.599738][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.611047][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.629649][ T5833] Bluetooth: hci2: command tx timeout [ 72.629663][ T5838] Bluetooth: hci3: command tx timeout [ 72.639868][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.653332][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.663843][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.674608][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.685289][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.695999][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.707699][ T5838] Bluetooth: hci1: command tx timeout [ 72.707710][ T5833] Bluetooth: hci0: command tx timeout [ 72.711145][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.760892][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.769831][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.779090][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.788357][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.802167][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.813215][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.823283][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.834912][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.845701][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.889036][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.898128][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.907760][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.920400][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.937660][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.949684][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.959688][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.970353][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.980233][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.990837][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.001492][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.025397][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.036101][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.044925][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.054892][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.355506][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.368935][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.385373][ T3504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.401772][ T3504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.460959][ T3504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.474199][ T3504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.558030][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.578068][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.651025][ T3535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.663300][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.690629][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.701098][ T3535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.829690][ T5901] Zero length message leads to an empty skb [ 74.253274][ T5905] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.253948][ T5907] netlink: zone id is out of range [ 74.617203][ T5916] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.707062][ T5838] Bluetooth: hci3: command tx timeout [ 74.707105][ T5838] Bluetooth: hci2: command tx timeout [ 74.786917][ T5833] Bluetooth: hci0: command tx timeout [ 74.796761][ T5833] Bluetooth: hci1: command tx timeout [ 75.048387][ T5932] process 'syz.2.9' launched './file0' with NULL argv: empty string added [ 76.790028][ T5833] Bluetooth: hci2: command tx timeout [ 76.795523][ T5833] Bluetooth: hci3: command tx timeout [ 76.889701][ T5838] Bluetooth: hci1: command tx timeout [ 76.889982][ T5833] Bluetooth: hci0: command tx timeout [ 78.122179][ T5977] sp0: Synchronizing with TNC [ 78.217411][ T5965] [U] «·þ=í&qø”u6yc[Ü\{é/ÿ ˆvnâë¤Ê‘=@ª¬‚ƒÜ‰2ƒ¤¾Î»¢j?žq¿fÇ[ýá”"xµêÛ+T™1øS'rr~dx®òÏúvÕíÁ6o‹™z¾5T9yÕÈtj(¨ÕÜ<º+·ôNø¬’)RhÒpGn½rA"`“cJ{˜›o/)e [ 78.255830][ T5965] [U] j¹Kb9,Òµzâ [ 78.259832][ T5965] [U] ûÖcW–›c;Fj½²ä€6¶ËÒèшj™3`?Ñ?2·ˆ)ìÛègÖŽ~jÊFÖPVXÏHÜü·ô/ÕˆT^ Î/í¬Ö¿/ñ_C³·å©± ÉUNÀoï(÷‘qFÆÆ<) ôâP~Ì y²§×¤[XË0’Áj”KÁú6‚¾<ìo"ç1ñ›‡ñ [ 78.287944][ T5965] [U] FZ<ôA$‘ËG%ý^¼^æi#˜³ƒ…à [ 78.292701][ T5965] [U] ’KØ}ëÁÖA#Æmßðs–="ÊHKó5ÅR«@G;u¢Gí3t¹ä-(ÐSâ¤.—$T¿IÌÓ1Ò‹^iÆÇËãyotï忸D0†›÷üy‹Oû]Fíá[l—)d„_@ò]òÿ:Ù˜aà©­÷Tžä ÏAgZØ”ð„?õÕƒ¿À(&àõÉlÍ(?K7uákñí*1{ñõäÂ’ž|q«6N9Üï£×c/¾…AlÇåø v’À€0µr©‚ç®1O/§*@œ[z–>œ`×Gª¡šÉ °‚Ðe]؈ªµq´‡­ñ2K•×,S: Nçj~e¢÷3`)çäa;gÐ’;õa<{é§e»õ9}9·(ß±]ʰ÷Œ5'ä)Èñ[S³ÛÃç¹yF.AìE9¨ZruÛÂ9‚ýàhÇ`Yó–‹¿¤ÝIO (+_icèDw* A ª5dÅ‹ø‚ˆô`˜¥6áØºBm& [ 78.328073][ C0] vkms_vblank_simulate: vblank timer overrun [ 78.436693][ T5965] [U] 8~ØÕ%gžÃ øSë Ñ›gùZ [ 78.495332][ T5965] [U] –ípÿ€BçƒDäÀøåŽÝœñÕÞËipcëeâ“0 [ 78.535939][ T5965] [U] É♸‘£ñ¾I‹>æ¾›;Ê&vŽ€‚±üS¦k€èS?Ø!Ô©mÀUó;úæ.¡Ñ¡èÿ6[½…á’w¬3Â`$¬–ʼÑ[Í3=Á [ 78.545647][ T5965] [U] ¢#dÖ^He‹´Aðt} [ 78.636641][ T5965] [U] ºÇàÔ‚*¸“ÄGÂû6aá ü•‰`Wi1®›·Bn^åóA²Ýè¨"õ0DD~”mΟ/¥üñ*»<ŽmŒb¬h µdÍ'…í>‚òÏt¸Øø8TªiPÕ:]÷¾‡êèƒX®{~Ò™xÚŠÜ)BPaÄœÓ?€œG€þ@m´¦¸®´_Ï“yÆÇSb|LÊ(¬ i9ì‘U³¨2.\˜²Ôi¢˜i*A]"ZÔ†÷¾ST¢Íªëé}Д¬$¡ö^ïy§1¤á×¥¤Kys©xK—ëávë°>ÖÚFá}ÜÝF(UÆà½ýŠ1„T†~eç¨×ü‹ƒÂp”zZ£g [ 78.756679][ T5965] [U] ÎÒè? ›7Æ' ¹ZMÂAPà·ÚIùC vfJ‚Ž“T©®h°º¤ÙQý–ǧÀý¬³–-5ìÙ© [ 78.782110][ T5965] [U] on¯%feg07%ÞÆ*ݹ¾ g/NŸ;7ËV;ÛŽˆÂÜ&„ð·È_Þèà0¯Ú©ÂrJÄ H²¢EêFIÛî,„_ ·>ÛŽVtbÚ½=9Ì‹9›ÖÿÕèbËœ+€V€NWÙgäÕ [ 78.821545][ T5965] [U] Ú˜¬“G,}“¡µ¹¯póšä‘7 ÏÕé½Â~å*eË#cÄ(BA·${NG"F [ 78.846737][ T5965] [U] 6Pn8H‰s,.–tnBZ%Ãû!o¿c£ªh¶=¾´TsíÓŠ]›©÷;zóÃhõ¦ûHÅ<”ø4rHw, o›xÞáÖ7oþ.ä/ª‰/³ü»€áΔ­Ý"¸yiäåêÞž ÖJúQ?@O–ɺ¿–ò6ïZ¹e~7ÍãHƒON$‹á±Þ{.>ÎÌJëÁv@8ì˜e¤6ŠQ0iÉÎ¥{¾HŠ·TúÀ“×KÑsVR°†DF+@}Ú5à\£ªß`] [ 79.018737][ T5965] [U] FüjÞ±ÓÚ­/ùñ[jîå/^ [ 79.023347][ T5965] [U] [ 79.026090][ T5965] [U] [ 79.028823][ T5965] [U] [ 79.091598][ T5965] [U] [ 79.094378][ T5965] [U] [ 79.097118][ T5965] [U] [ 79.099844][ T5965] [U] [ 79.236918][ T5965] [U] [ 79.239692][ T5965] [U] [ 79.242412][ T5965] [U] [ 79.245148][ T5965] [U] [ 79.336693][ T5965] [U] [ 80.879621][ T29] audit: type=1326 audit(1737124371.062:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.3.26" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5912185d29 code=0x0 [ 80.947607][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 80.953963][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 syzkaller syzkaller login: [ 81.068208][ T6013] Process accounting resumed [ 81.183377][ T5994] kexec: Could not allocate control_code_buffer [ 86.422535][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 86.429962][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 87.210263][ T1204] cfg80211: failed to load regulatory.db [ 90.135362][ T6114] sp0: Synchronizing with TNC [ 91.129946][ T6129] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 91.152984][ T6130] could not allocate digest TFM handle [ 91.164614][ T6129] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 91.232350][ T6129] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 91.260663][ T6129] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 91.282984][ T6129] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 91.312429][ T6129] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 91.344332][ T6129] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 91.396829][ T6129] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 91.422080][ T6129] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 91.477551][ T6129] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 91.483673][ T6129] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 91.554923][ T6129] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 91.602906][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.51'. [ 91.623126][ T6142] FAULT_INJECTION: forcing a failure. [ 91.623126][ T6142] name failslab, interval 1, probability 0, space 0, times 1 [ 91.651692][ T6142] CPU: 1 UID: 0 PID: 6142 Comm: syz.2.51 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 91.662355][ T6142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 91.672552][ T6142] Call Trace: [ 91.675867][ T6142] [ 91.678829][ T6142] dump_stack_lvl+0x16c/0x1f0 [ 91.683651][ T6142] should_fail_ex+0x497/0x5b0 [ 91.688391][ T6142] should_failslab+0xc2/0x120 [ 91.693119][ T6142] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 91.698544][ T6142] ? skb_clone+0x190/0x3f0 [ 91.703023][ T6142] skb_clone+0x190/0x3f0 [ 91.707349][ T6142] netlink_deliver_tap+0xafd/0xca0 [ 91.712516][ T6142] netlink_unicast+0x5e1/0x7f0 [ 91.717334][ T6142] ? __pfx_netlink_unicast+0x10/0x10 [ 91.722665][ T6142] ? __phys_addr_symbol+0x30/0x80 [ 91.727737][ T6142] ? __check_object_size+0x488/0x710 [ 91.733079][ T6142] netlink_sendmsg+0x8b8/0xd70 [ 91.737887][ T6142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.743226][ T6142] ____sys_sendmsg+0x9ae/0xb40 [ 91.748040][ T6142] ? copy_msghdr_from_user+0x10b/0x160 [ 91.753547][ T6142] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.758913][ T6142] ? get_pid_task+0xfc/0x250 [ 91.763604][ T6142] ___sys_sendmsg+0x135/0x1e0 [ 91.768416][ T6142] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.773694][ T6142] ? __pfx_vfs_write+0x10/0x10 [ 91.778503][ T6142] ? do_sys_openat2+0xb1/0x1e0 [ 91.783318][ T6142] __sys_sendmsg+0x16e/0x220 [ 91.787955][ T6142] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.793132][ T6142] do_syscall_64+0xcd/0x250 [ 91.797684][ T6142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.803723][ T6142] RIP: 0033:0x7f072ab85d29 [ 91.808185][ T6142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.827918][ T6142] RSP: 002b:00007f072b96e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.836374][ T6142] RAX: ffffffffffffffda RBX: 00007f072ad75fa0 RCX: 00007f072ab85d29 [ 91.844381][ T6142] RDX: 0000000010048884 RSI: 0000000020000180 RDI: 0000000000000001 [ 91.852399][ T6142] RBP: 00007f072b96e090 R08: 0000000000000000 R09: 0000000000000000 [ 91.860415][ T6142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.868428][ T6142] R13: 0000000000000000 R14: 00007f072ad75fa0 R15: 00007ffe2d3996f8 [ 91.876433][ T6142] [ 91.907220][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.51'. [ 92.706617][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.798964][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 92.805982][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 93.266872][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 93.346609][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 93.506670][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 94.565140][ T6188] bridge0: port 3(team0) entered blocking state [ 94.701988][ T6188] bridge0: port 3(team0) entered disabled state [ 94.853176][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 94.880360][ T6188] team0: entered allmulticast mode [ 94.885606][ T6188] team_slave_0: entered allmulticast mode [ 94.891504][ T6188] team_slave_1: entered allmulticast mode [ 94.899307][ T6188] team0: entered promiscuous mode [ 94.904396][ T6188] team_slave_0: entered promiscuous mode [ 94.913770][ T6188] team_slave_1: entered promiscuous mode [ 94.920352][ T6188] bridge0: port 3(team0) entered blocking state [ 94.927018][ T6188] bridge0: port 3(team0) entered forwarding state [ 95.347106][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 95.426716][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 95.596698][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 95.906119][ T6210] netlink: 108 bytes leftover after parsing attributes in process `syz.1.70'. [ 95.925184][ T6210] Process accounting resumed [ 96.138686][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 96.145254][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 96.868017][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.285727][ T6237] vivid-003: ================= START STATUS ================= [ 97.293897][ T6237] vivid-003: Radio HW Seek Mode: Bounded [ 97.321221][ T6237] vivid-003: Radio Programmable HW Seek: false [ 97.340587][ T6237] vivid-003: RDS Rx I/O Mode: Block I/O [ 97.350017][ T6237] vivid-003: Generate RBDS Instead of RDS: false [ 97.356456][ T6237] vivid-003: RDS Reception: true [ 97.391629][ T6237] vivid-003: RDS Program Type: 0 inactive [ 97.427864][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 97.434713][ T6237] vivid-003: RDS PS Name: inactive [ 97.446671][ T6237] vivid-003: RDS Radio Text: inactive [ 97.478968][ T6237] vivid-003: RDS Traffic Announcement: false inactive [ 97.509079][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.511832][ T6237] vivid-003: RDS Traffic Program: false inactive [ 97.576725][ T6237] vivid-003: RDS Music: false inactive [ 97.582300][ T6237] vivid-003: ================== END STATUS ================== [ 97.666662][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 97.836850][ T6251] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 97.843642][ T6251] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 97.901288][ T6256] FAULT_INJECTION: forcing a failure. [ 97.901288][ T6256] name failslab, interval 1, probability 0, space 0, times 0 [ 97.930314][ T6256] CPU: 0 UID: 0 PID: 6256 Comm: syz.2.87 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 97.940901][ T6256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 97.950996][ T6256] Call Trace: [ 97.954305][ T6256] [ 97.954389][ T6251] netlink: 'syz.3.84': attribute type 11 has an invalid length. [ 97.957242][ T6256] dump_stack_lvl+0x16c/0x1f0 [ 97.957292][ T6256] should_fail_ex+0x497/0x5b0 [ 97.957322][ T6256] ? fs_reclaim_acquire+0xae/0x150 [ 97.979445][ T6256] should_failslab+0xc2/0x120 [ 97.984432][ T6256] __kmalloc_noprof+0xce/0x4f0 [ 97.989245][ T6256] ? d_absolute_path+0x137/0x1b0 [ 97.994224][ T6256] ? tomoyo_encode2+0x100/0x3e0 [ 97.999128][ T6256] tomoyo_encode2+0x100/0x3e0 [ 98.003894][ T6256] tomoyo_realpath_from_path+0x1a7/0x710 [ 98.009581][ T6256] tomoyo_path_number_perm+0x248/0x5b0 [ 98.015090][ T6256] ? tomoyo_path_number_perm+0x235/0x5b0 [ 98.020769][ T6256] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 98.026827][ T6256] ? __pfx_lock_release+0x10/0x10 [ 98.031891][ T6256] ? trace_lock_acquire+0x14e/0x1f0 [ 98.037259][ T6256] ? lock_acquire+0x2f/0xb0 [ 98.041798][ T6256] ? __fget_files+0x40/0x3a0 [ 98.046450][ T6256] ? __fget_files+0x206/0x3a0 [ 98.051180][ T6256] security_file_ioctl+0x9b/0x240 [ 98.056257][ T6256] __x64_sys_ioctl+0xb7/0x200 [ 98.060976][ T6256] do_syscall_64+0xcd/0x250 [ 98.065542][ T6256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.071489][ T6256] RIP: 0033:0x7f072ab85d29 [ 98.075938][ T6256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.095581][ T6256] RSP: 002b:00007f072b96e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.104034][ T6256] RAX: ffffffffffffffda RBX: 00007f072ad75fa0 RCX: 00007f072ab85d29 [ 98.112080][ T6256] RDX: 0000000000000003 RSI: 0000000000005646 RDI: 0000000000000003 [ 98.120172][ T6256] RBP: 00007f072b96e090 R08: 0000000000000000 R09: 0000000000000000 [ 98.128178][ T6256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.136182][ T6256] R13: 0000000000000000 R14: 00007f072ad75fa0 R15: 00007ffe2d3996f8 [ 98.144200][ T6256] [ 98.231477][ T6256] ERROR: Out of memory at tomoyo_realpath_from_path. [ 98.241622][ T6256] vivid-003: ================= START STATUS ================= [ 98.250219][ T6256] vivid-003: Radio HW Seek Mode: Bounded [ 98.256044][ T6256] vivid-003: Radio Programmable HW Seek: false [ 98.296583][ T6256] vivid-003: RDS Rx I/O Mode: Block I/O [ 98.329078][ T6256] vivid-003: Generate RBDS Instead of RDS: false [ 98.336316][ T6256] vivid-003: RDS Reception: true [ 98.350779][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.360003][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 98.382126][ T6256] vivid-003: RDS Program Type: 0 inactive [ 98.435535][ T6256] vivid-003: RDS PS Name: inactive [ 98.442607][ T6256] vivid-003: RDS Radio Text: inactive [ 98.449473][ T6256] vivid-003: RDS Traffic Announcement: false inactive [ 98.466741][ T6256] vivid-003: RDS Traffic Program: false inactive [ 98.493638][ T6256] vivid-003: RDS Music: false inactive [ 98.573339][ T6256] vivid-003: ================== END STATUS ================== [ 100.657870][ T6301] FAULT_INJECTION: forcing a failure. [ 100.657870][ T6301] name failslab, interval 1, probability 0, space 0, times 0 [ 100.706807][ T6301] CPU: 1 UID: 0 PID: 6301 Comm: syz.2.101 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 100.717550][ T6301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 100.727626][ T6301] Call Trace: [ 100.730913][ T6301] [ 100.733843][ T6301] dump_stack_lvl+0x16c/0x1f0 [ 100.738537][ T6301] should_fail_ex+0x497/0x5b0 [ 100.743226][ T6301] ? fs_reclaim_acquire+0xae/0x150 [ 100.748344][ T6301] should_failslab+0xc2/0x120 [ 100.753031][ T6301] __kmalloc_noprof+0xce/0x4f0 [ 100.757814][ T6301] ? tomoyo_encode2+0x100/0x3e0 [ 100.762769][ T6301] tomoyo_encode2+0x100/0x3e0 [ 100.767456][ T6301] tomoyo_realpath_from_path+0x1a7/0x710 [ 100.773103][ T6301] ? tomoyo_path_number_perm+0x235/0x5b0 [ 100.778751][ T6301] tomoyo_path_number_perm+0x248/0x5b0 [ 100.784222][ T6301] ? tomoyo_path_number_perm+0x235/0x5b0 [ 100.789965][ T6301] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 100.795986][ T6301] ? __pfx_lock_release+0x10/0x10 [ 100.801013][ T6301] ? trace_lock_acquire+0x14e/0x1f0 [ 100.806225][ T6301] ? lock_acquire+0x2f/0xb0 [ 100.810727][ T6301] ? __fget_files+0x40/0x3a0 [ 100.815327][ T6301] ? __fget_files+0x206/0x3a0 [ 100.820013][ T6301] security_file_ioctl+0x9b/0x240 [ 100.825065][ T6301] __x64_sys_ioctl+0xb7/0x200 [ 100.829750][ T6301] do_syscall_64+0xcd/0x250 [ 100.834265][ T6301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.840198][ T6301] RIP: 0033:0x7f072ab85d29 [ 100.844616][ T6301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.864228][ T6301] RSP: 002b:00007f072b96e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.872650][ T6301] RAX: ffffffffffffffda RBX: 00007f072ad75fa0 RCX: 00007f072ab85d29 [ 100.880709][ T6301] RDX: 0000000000000004 RSI: 00000000c0303e03 RDI: 0000000000000003 [ 100.888790][ T6301] RBP: 00007f072b96e090 R08: 0000000000000000 R09: 0000000000000000 [ 100.896818][ T6301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.904881][ T6301] R13: 0000000000000000 R14: 00007f072ad75fa0 R15: 00007ffe2d3996f8 [ 100.912871][ T6301] [ 100.916015][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.954132][ T6301] ERROR: Out of memory at tomoyo_realpath_from_path. [ 101.615816][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 101.622259][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 104.775160][ T6366] sp0: Synchronizing with TNC [ 104.861002][ T6380] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 106.864787][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 106.876683][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 107.786151][ T6418] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 108.398761][ T6446] sp0: Synchronizing with TNC [ 110.040628][ T6484] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 110.264116][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 110.273347][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 110.795979][ T6502] sp0: Synchronizing with TNC [ 112.309380][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 112.315744][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 112.748066][ T6548] sp0: Synchronizing with TNC [ 114.128319][ T6574] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.367693][ T6579] netlink: 28 bytes leftover after parsing attributes in process `syz.0.169'. [ 114.451054][ T6579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.517867][ T6579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.588248][ T6579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.622656][ T6579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.360560][ T6603] sp0: Synchronizing with TNC [ 115.389130][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 115.395487][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 116.621518][ T6627] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 116.883743][ T6630] netlink: 'syz.1.180': attribute type 9 has an invalid length. [ 117.794605][ T6648] sp0: Synchronizing with TNC [ 119.137100][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 119.143579][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 120.497319][ T6690] sp0: Synchronizing with TNC [ 122.704621][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 122.711314][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 123.322793][ T6746] sp0: Synchronizing with TNC [ 125.408924][ T6789] sp0: Synchronizing with TNC [ 126.373517][ T6812] ovs_: entered promiscuous mode [ 127.110531][ T6833] sp0: Synchronizing with TNC [ 127.170122][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.176492][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.911198][ T6883] sp0: Synchronizing with TNC [ 129.786873][ T6912] ======================================================= [ 129.786873][ T6912] WARNING: The mand mount option has been deprecated and [ 129.786873][ T6912] and is ignored by this kernel. Remove the mand [ 129.786873][ T6912] option from the mount to silence this warning. [ 129.786873][ T6912] ======================================================= [ 130.283328][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.289843][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 130.932883][ T6934] sp0: Synchronizing with TNC [ 132.013487][ T6964] netlink: 342 bytes leftover after parsing attributes in process `syz.0.268'. [ 132.472268][ T6977] sp0: Synchronizing with TNC [ 132.662296][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.672579][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.299272][ T7007] FAULT_INJECTION: forcing a failure. [ 133.299272][ T7007] name failslab, interval 1, probability 0, space 0, times 0 [ 133.319146][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.326729][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.326724][ T7007] CPU: 0 UID: 0 PID: 7007 Comm: syz.1.280 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 133.326775][ T7007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 133.326790][ T7007] Call Trace: [ 133.326798][ T7007] [ 133.326808][ T7007] dump_stack_lvl+0x16c/0x1f0 [ 133.326844][ T7007] should_fail_ex+0x497/0x5b0 [ 133.326875][ T7007] ? fs_reclaim_acquire+0xae/0x150 [ 133.326906][ T7007] should_failslab+0xc2/0x120 [ 133.326940][ T7007] __kmalloc_node_noprof+0xd1/0x520 [ 133.326984][ T7007] ? __pfx___mutex_lock+0x10/0x10 [ 133.327015][ T7007] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 133.327051][ T7007] __kvmalloc_node_noprof+0xad/0x1a0 [ 133.327085][ T7007] traverse.part.0.constprop.0+0x392/0x640 [ 133.327113][ T7007] ? __pfx_lock_release+0x10/0x10 [ 133.327145][ T7007] seq_read_iter+0x934/0x12b0 [ 133.327184][ T7007] seq_read+0x39f/0x4e0 [ 133.327210][ T7007] ? __pfx_seq_read+0x10/0x10 [ 133.327244][ T7007] ? __debugfs_file_get+0x43d/0x5d0 [ 133.327288][ T7007] full_proxy_read+0xfd/0x1b0 [ 133.327319][ T7007] ? __pfx_full_proxy_read+0x10/0x10 [ 133.327351][ T7007] vfs_read+0x1df/0xbe0 [ 133.327381][ T7007] ? __fget_files+0x1fc/0x3a0 [ 133.327410][ T7007] ? __pfx_lock_release+0x10/0x10 [ 133.327434][ T7007] ? __pfx_vfs_read+0x10/0x10 [ 133.327464][ T7007] ? lock_acquire+0x2f/0xb0 [ 133.327485][ T7007] ? __fget_files+0x40/0x3a0 [ 133.327519][ T7007] ? __fget_files+0x206/0x3a0 [ 133.327556][ T7007] __x64_sys_pread64+0x1f6/0x250 [ 133.327586][ T7007] ? __pfx___x64_sys_pread64+0x10/0x10 [ 133.327626][ T7007] do_syscall_64+0xcd/0x250 [ 133.327660][ T7007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.327693][ T7007] RIP: 0033:0x7f0856985d29 [ 133.327714][ T7007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.327737][ T7007] RSP: 002b:00007f08576eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 133.327763][ T7007] RAX: ffffffffffffffda RBX: 00007f0856b75fa0 RCX: 00007f0856985d29 [ 133.327780][ T7007] RDX: 00000000000000a8 RSI: 0000000000000000 RDI: 0000000000000003 [ 133.327796][ T7007] RBP: 00007f08576eb090 R08: 0000000000000000 R09: 0000000000000000 [ 133.327812][ T7007] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 133.327828][ T7007] R13: 0000000000000000 R14: 00007f0856b75fa0 R15: 00007ffc34fa1df8 [ 133.327862][ T7007] [ 134.019387][ T7026] sp0: Synchronizing with TNC [ 134.790791][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.802987][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.123465][ T7070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'. [ 135.166117][ T7070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'. [ 135.197071][ T7070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'. [ 136.667787][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.674158][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.955528][ T7155] netlink: 342 bytes leftover after parsing attributes in process `syz.2.318'. [ 138.515869][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.523189][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.698791][ T7204] sp0: Synchronizing with TNC [ 139.750991][ T7209] cifs: Unknown parameter 'T.ŸÜÛæ¨Å¼c[ŸÐê€$âæµÈ)ü±UóÑnEó-Ê™¾l®öÚ-ºŒ -¾_€™¯Ôåáª5Z äoåé¢mžÐfwYÍhº*/ÿxDlÝ©Š×ígÕkÇAí³ùÏ7ÍØØ9’ôXöa/fê_ÿAR£ˆ™‘ÈxM ‚v¬—pÿ±$^;ôØq‡3±«£n졵-6©+e„k„¾ñÇ<°kœcÔ)n.üeMÍ÷Na¨t®ÐSMÎÆ1,' [ 139.917331][ T7213] netlink: del zone limit has 4 unknown bytes [ 140.603886][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.611171][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.165747][ T7261] netlink: del zone limit has 4 unknown bytes [ 142.436861][ T7300] netlink: del zone limit has 4 unknown bytes [ 142.440108][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.450008][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 145.761361][ T7383] sp0: Synchronizing with TNC [ 147.916696][ T7439] FAULT_INJECTION: forcing a failure. [ 147.916696][ T7439] name failslab, interval 1, probability 0, space 0, times 0 [ 147.962951][ T7439] CPU: 1 UID: 0 PID: 7439 Comm: syz.3.401 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 147.973610][ T7439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 147.983702][ T7439] Call Trace: [ 147.986987][ T7439] [ 147.989916][ T7439] dump_stack_lvl+0x16c/0x1f0 [ 147.994613][ T7439] should_fail_ex+0x497/0x5b0 [ 147.999323][ T7439] ? fs_reclaim_acquire+0xae/0x150 [ 148.004446][ T7439] should_failslab+0xc2/0x120 [ 148.009145][ T7439] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 148.014527][ T7439] ? __rds_conn_create+0x7be/0x2310 [ 148.019753][ T7439] __rds_conn_create+0x7be/0x2310 [ 148.024882][ T7439] ? __pfx___rds_conn_create+0x10/0x10 [ 148.030348][ T7439] ? lockdep_init_map_type+0x16d/0x7d0 [ 148.035811][ T7439] ? rcu_is_watching+0x12/0xc0 [ 148.040588][ T7439] rds_conn_create_outgoing+0x44/0x60 [ 148.046155][ T7439] rds_sendmsg+0x136c/0x33b0 [ 148.050919][ T7439] ? __pfx_rds_sendmsg+0x10/0x10 [ 148.055973][ T7439] ? aa_sk_perm+0x2f5/0xb20 [ 148.060532][ T7439] ? __pfx_aa_sk_perm+0x10/0x10 [ 148.065407][ T7439] ? ____sys_sendmsg+0x9ae/0xb40 [ 148.070354][ T7439] ____sys_sendmsg+0x9ae/0xb40 [ 148.075130][ T7439] ? copy_msghdr_from_user+0x10b/0x160 [ 148.080603][ T7439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.085913][ T7439] ___sys_sendmsg+0x135/0x1e0 [ 148.090605][ T7439] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.095835][ T7439] ? __pfx_lock_release+0x10/0x10 [ 148.100874][ T7439] ? trace_lock_acquire+0x14e/0x1f0 [ 148.106096][ T7439] ? __fget_files+0x206/0x3a0 [ 148.110797][ T7439] __sys_sendmsg+0x16e/0x220 [ 148.115415][ T7439] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.120555][ T7439] do_syscall_64+0xcd/0x250 [ 148.125072][ T7439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.130979][ T7439] RIP: 0033:0x7f5912185d29 [ 148.135400][ T7439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.155014][ T7439] RSP: 002b:00007f5912f59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.163436][ T7439] RAX: ffffffffffffffda RBX: 00007f5912375fa0 RCX: 00007f5912185d29 [ 148.171412][ T7439] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 148.179471][ T7439] RBP: 00007f5912f59090 R08: 0000000000000000 R09: 0000000000000000 [ 148.187461][ T7439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.195432][ T7439] R13: 0000000000000000 R14: 00007f5912375fa0 R15: 00007ffd966e3f08 [ 148.203597][ T7439] [ 148.230258][ T7437] openvswitch: netlink: Flow actions attr not present in new flow. [ 149.477541][ T7484] FAULT_INJECTION: forcing a failure. [ 149.477541][ T7484] name failslab, interval 1, probability 0, space 0, times 0 [ 149.579976][ T7484] CPU: 1 UID: 0 PID: 7484 Comm: syz.1.409 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 149.590636][ T7484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 149.600714][ T7484] Call Trace: [ 149.603997][ T7484] [ 149.606928][ T7484] dump_stack_lvl+0x16c/0x1f0 [ 149.611622][ T7484] should_fail_ex+0x497/0x5b0 [ 149.616311][ T7484] ? fs_reclaim_acquire+0xae/0x150 [ 149.621429][ T7484] should_failslab+0xc2/0x120 [ 149.626117][ T7484] __kmalloc_noprof+0xce/0x4f0 [ 149.630892][ T7484] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 149.636563][ T7484] ? tomoyo_realpath_from_path+0xbf/0x710 [ 149.642310][ T7484] tomoyo_realpath_from_path+0xbf/0x710 [ 149.647878][ T7484] ? tomoyo_path_number_perm+0x235/0x5b0 [ 149.653540][ T7484] tomoyo_path_number_perm+0x248/0x5b0 [ 149.659010][ T7484] ? tomoyo_path_number_perm+0x235/0x5b0 [ 149.664655][ T7484] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 149.670684][ T7484] ? __pfx_lock_release+0x10/0x10 [ 149.675711][ T7484] ? trace_lock_acquire+0x14e/0x1f0 [ 149.680920][ T7484] ? lock_acquire+0x2f/0xb0 [ 149.685422][ T7484] ? __fget_files+0x40/0x3a0 [ 149.690021][ T7484] ? __fget_files+0x206/0x3a0 [ 149.694707][ T7484] security_file_ioctl+0x9b/0x240 [ 149.699752][ T7484] __x64_sys_ioctl+0xb7/0x200 [ 149.704437][ T7484] do_syscall_64+0xcd/0x250 [ 149.708953][ T7484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.714876][ T7484] RIP: 0033:0x7f0856985d29 [ 149.719308][ T7484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.738933][ T7484] RSP: 002b:00007f08547f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.747535][ T7484] RAX: ffffffffffffffda RBX: 00007f0856b76080 RCX: 00007f0856985d29 [ 149.755522][ T7484] RDX: 0000000000000000 RSI: 0000000000005608 RDI: 0000000000000006 [ 149.763499][ T7484] RBP: 00007f08547f6090 R08: 0000000000000000 R09: 0000000000000000 [ 149.771471][ T7484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.779441][ T7484] R13: 0000000000000000 R14: 00007f0856b76080 R15: 00007ffc34fa1df8 [ 149.787426][ T7484] [ 149.856689][ T7484] ERROR: Out of memory at tomoyo_realpath_from_path. [ 152.598884][ T7552] netlink: Unknown conntrack attr (type=146, max=9) [ 153.123677][ T7557] FAULT_INJECTION: forcing a failure. [ 153.123677][ T7557] name failslab, interval 1, probability 0, space 0, times 0 [ 153.176812][ T7557] CPU: 1 UID: 0 PID: 7557 Comm: syz.3.426 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 153.187474][ T7557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 153.197550][ T7557] Call Trace: [ 153.200832][ T7557] [ 153.203778][ T7557] dump_stack_lvl+0x16c/0x1f0 [ 153.208560][ T7557] should_fail_ex+0x497/0x5b0 [ 153.213253][ T7557] ? fs_reclaim_acquire+0xae/0x150 [ 153.218414][ T7557] should_failslab+0xc2/0x120 [ 153.223134][ T7557] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 153.228541][ T7557] ? ptlock_alloc+0x1f/0x70 [ 153.233077][ T7557] ptlock_alloc+0x1f/0x70 [ 153.237422][ T7557] pte_alloc_one+0x74/0x390 [ 153.241941][ T7557] __pte_alloc+0x6e/0x3b0 [ 153.246279][ T7557] ? __pfx___pte_alloc+0x10/0x10 [ 153.251231][ T7557] ? __pfx___might_resched+0x10/0x10 [ 153.256545][ T7557] copy_page_range+0x371f/0x5650 [ 153.261531][ T7557] ? __pfx_copy_page_range+0x10/0x10 [ 153.266832][ T7557] ? find_held_lock+0x2d/0x110 [ 153.271634][ T7557] ? __pfx_lock_release+0x10/0x10 [ 153.276662][ T7557] ? lock_acquire+0x2f/0xb0 [ 153.281176][ T7557] ? copy_mm+0x118f/0x25b0 [ 153.285611][ T7557] ? down_write+0x14e/0x200 [ 153.290138][ T7557] ? up_write+0x1b2/0x520 [ 153.294492][ T7557] copy_mm+0x1237/0x25b0 [ 153.298754][ T7557] ? __pfx_copy_mm+0x10/0x10 [ 153.303356][ T7557] ? copy_process+0x3ca7/0x6f20 [ 153.308229][ T7557] ? __raw_spin_lock_init+0x3a/0x110 [ 153.313536][ T7557] copy_process+0x3e6d/0x6f20 [ 153.318240][ T7557] ? __pfx_copy_process+0x10/0x10 [ 153.323282][ T7557] ? futex_wake+0x18e/0x4e0 [ 153.327811][ T7557] kernel_clone+0xfd/0x960 [ 153.332294][ T7557] ? __pfx_kernel_clone+0x10/0x10 [ 153.337335][ T7557] ? do_futex+0x123/0x350 [ 153.341677][ T7557] ? __pfx_do_futex+0x10/0x10 [ 153.346420][ T7557] ? 0xffffffff81000000 [ 153.350630][ T7557] __do_sys_clone+0xba/0x100 [ 153.355232][ T7557] ? __pfx___do_sys_clone+0x10/0x10 [ 153.360448][ T7557] ? 0xffffffff81000000 [ 153.364619][ T7557] do_syscall_64+0xcd/0x250 [ 153.369144][ T7557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.375050][ T7557] RIP: 0033:0x7f5912185d29 [ 153.379466][ T7557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.399081][ T7557] RSP: 002b:00007f5912f59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 153.407505][ T7557] RAX: ffffffffffffffda RBX: 00007f5912375fa0 RCX: 00007f5912185d29 [ 153.415489][ T7557] RDX: 9999999999999999 RSI: 0000000000000009 RDI: 0000000000000021 [ 153.423472][ T7557] RBP: 00007f5912201b08 R08: 0000000000000006 R09: 0000000000000000 [ 153.431454][ T7557] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.439519][ T7557] R13: 0000000000000000 R14: 00007f5912375fa0 R15: 00007ffd966e3f08 [ 153.447509][ T7557] ? 0xffffffff81000000 [ 153.451675][ T7557] [ 154.526896][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 154.533258][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 155.245903][ T7594] sp0: Synchronizing with TNC [ 155.846594][ T29] audit: type=1326 audit(1737124458.080:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.3.433" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5912185d29 code=0x0 [ 157.212011][ T7616] netlink: 346 bytes leftover after parsing attributes in process `syz.0.437'. [ 158.881401][ T7643] sp0: Synchronizing with TNC [ 158.948868][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 158.955980][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 160.046854][ T7664] can: request_module (can-proto-0) failed. [ 160.335302][ T7676] FAULT_INJECTION: forcing a failure. [ 160.335302][ T7676] name failslab, interval 1, probability 0, space 0, times 0 [ 160.391975][ T7676] CPU: 0 UID: 0 PID: 7676 Comm: syz.2.452 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 160.402629][ T7676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 160.412717][ T7676] Call Trace: [ 160.416016][ T7676] [ 160.418971][ T7676] dump_stack_lvl+0x16c/0x1f0 [ 160.423688][ T7676] should_fail_ex+0x497/0x5b0 [ 160.428397][ T7676] ? fs_reclaim_acquire+0xae/0x150 [ 160.433553][ T7676] should_failslab+0xc2/0x120 [ 160.438268][ T7676] __kmalloc_noprof+0xce/0x4f0 [ 160.443062][ T7676] ? d_absolute_path+0x137/0x1b0 [ 160.448013][ T7676] ? tomoyo_encode2+0x100/0x3e0 [ 160.452884][ T7676] tomoyo_encode2+0x100/0x3e0 [ 160.457569][ T7676] tomoyo_realpath_from_path+0x1a7/0x710 [ 160.463211][ T7676] ? tomoyo_path_number_perm+0x235/0x5b0 [ 160.468857][ T7676] tomoyo_path_number_perm+0x248/0x5b0 [ 160.474327][ T7676] ? tomoyo_path_number_perm+0x235/0x5b0 [ 160.479977][ T7676] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 160.485993][ T7676] ? __pfx_lock_release+0x10/0x10 [ 160.491025][ T7676] ? trace_lock_acquire+0x14e/0x1f0 [ 160.496239][ T7676] ? lock_acquire+0x2f/0xb0 [ 160.500757][ T7676] ? __fget_files+0x40/0x3a0 [ 160.505446][ T7676] ? __fget_files+0x206/0x3a0 [ 160.510137][ T7676] security_file_ioctl+0x9b/0x240 [ 160.515180][ T7676] __x64_sys_ioctl+0xb7/0x200 [ 160.519862][ T7676] do_syscall_64+0xcd/0x250 [ 160.524380][ T7676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.530284][ T7676] RIP: 0033:0x7f072ab85d29 [ 160.534730][ T7676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.554648][ T7676] RSP: 002b:00007f072b96e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.563168][ T7676] RAX: ffffffffffffffda RBX: 00007f072ad75fa0 RCX: 00007f072ab85d29 [ 160.571149][ T7676] RDX: 0000000000000005 RSI: 00000000400454cb RDI: 00000000000000c8 [ 160.579161][ T7676] RBP: 00007f072b96e090 R08: 0000000000000000 R09: 0000000000000000 [ 160.587173][ T7676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.595162][ T7676] R13: 0000000000000001 R14: 00007f072ad75fa0 R15: 00007ffe2d3996f8 [ 160.603158][ T7676] [ 160.606322][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.723280][ T7676] ERROR: Out of memory at tomoyo_realpath_from_path. [ 162.601799][ T29] audit: type=1804 audit(1737124464.840:4): pid=7719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.464" name="/newroot/sys/kernel/debug/tracing/trace_marker_raw" dev="tracefs" ino=1191 res=1 errno=0 [ 162.720247][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 162.726829][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 163.290477][ T7722] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 163.300679][ T7722] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 163.319007][ T7722] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 163.327524][ T7722] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 164.675947][ T29] audit: type=1800 audit(1737124466.910:5): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.476" name="version" dev="configfs" ino=14528 res=0 errno=0 [ 164.717693][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.357688][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 165.363822][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 165.367767][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 165.536300][ T7790] FAULT_INJECTION: forcing a failure. [ 165.536300][ T7790] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 165.550183][ T7790] CPU: 0 UID: 0 PID: 7790 Comm: syz.3.481 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 165.560814][ T7790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 165.571006][ T7790] Call Trace: [ 165.574340][ T7790] [ 165.577306][ T7790] dump_stack_lvl+0x16c/0x1f0 [ 165.582058][ T7790] should_fail_ex+0x497/0x5b0 [ 165.586792][ T7790] _copy_to_user+0x32/0xd0 [ 165.591259][ T7790] simple_read_from_buffer+0xd0/0x160 [ 165.596670][ T7790] proc_fail_nth_read+0x198/0x270 [ 165.601756][ T7790] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 165.607364][ T7790] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 165.613049][ T7790] vfs_read+0x1df/0xbe0 [ 165.617250][ T7790] ? __fget_files+0x1fc/0x3a0 [ 165.621975][ T7790] ? __pfx___mutex_lock+0x10/0x10 [ 165.627045][ T7790] ? __pfx_vfs_read+0x10/0x10 [ 165.631772][ T7790] ? __fget_files+0x206/0x3a0 [ 165.636497][ T7790] ksys_read+0x12b/0x250 [ 165.640774][ T7790] ? __pfx_ksys_read+0x10/0x10 [ 165.645581][ T7790] do_syscall_64+0xcd/0x250 [ 165.650131][ T7790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.656150][ T7790] RIP: 0033:0x7f591218473c [ 165.660618][ T7790] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 165.680277][ T7790] RSP: 002b:00007f5912f59030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 165.688732][ T7790] RAX: ffffffffffffffda RBX: 00007f5912375fa0 RCX: 00007f591218473c [ 165.696744][ T7790] RDX: 000000000000000f RSI: 00007f5912f590a0 RDI: 0000000000000004 [ 165.704753][ T7790] RBP: 00007f5912f59090 R08: 0000000000000000 R09: 0000000000000000 [ 165.712760][ T7790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.720747][ T7790] R13: 0000000000000000 R14: 00007f5912375fa0 R15: 00007ffd966e3f08 [ 165.728742][ T7790] [ 166.046657][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 166.053788][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.810686][ T7839] syz.3.495 uses obsolete (PF_INET,SOCK_PACKET) [ 168.972645][ T7494] syz.0.411 (7494) used greatest stack depth: 18560 bytes left [ 169.588325][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 169.594736][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 171.430132][ T7928] FAULT_INJECTION: forcing a failure. [ 171.430132][ T7928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.476645][ T7928] CPU: 0 UID: 0 PID: 7928 Comm: syz.3.511 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 171.487301][ T7928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 171.497359][ T7928] Call Trace: [ 171.500640][ T7928] [ 171.503572][ T7928] dump_stack_lvl+0x16c/0x1f0 [ 171.508262][ T7928] should_fail_ex+0x497/0x5b0 [ 171.512950][ T7928] _copy_from_user+0x2e/0xd0 [ 171.517552][ T7928] copy_msghdr_from_user+0x99/0x160 [ 171.522764][ T7928] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 171.528595][ T7928] ___sys_sendmsg+0xff/0x1e0 [ 171.533196][ T7928] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.538413][ T7928] ? __pfx_lock_release+0x10/0x10 [ 171.543441][ T7928] ? trace_lock_acquire+0x14e/0x1f0 [ 171.548658][ T7928] ? __fget_files+0x206/0x3a0 [ 171.553350][ T7928] __sys_sendmsg+0x16e/0x220 [ 171.557956][ T7928] ? __pfx___sys_sendmsg+0x10/0x10 [ 171.563098][ T7928] do_syscall_64+0xcd/0x250 [ 171.567615][ T7928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.573529][ T7928] RIP: 0033:0x7f5912185d29 [ 171.577945][ T7928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.597562][ T7928] RSP: 002b:00007f5912f38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.605999][ T7928] RAX: ffffffffffffffda RBX: 00007f5912376080 RCX: 00007f5912185d29 [ 171.613980][ T7928] RDX: 000000000001c054 RSI: 0000000020000200 RDI: 0000000000000004 [ 171.621952][ T7928] RBP: 00007f5912f38090 R08: 0000000000000000 R09: 0000000000000000 [ 171.629930][ T7928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.637900][ T7928] R13: 0000000000000000 R14: 00007f5912376080 R15: 00007ffd966e3f08 [ 171.645884][ T7928] [ 172.200374][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 172.214013][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 173.208243][ T7970] netlink: 146 bytes leftover after parsing attributes in process `syz.1.521'. [ 173.425455][ T7974] delete_channel: no stack [ 173.777584][ T7986] binder: 7985:7986 ioctl c018620b 9 returned -14 [ 174.296973][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 174.303442][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 174.337271][ T8010] Invalid ELF header magic: != ELF [ 176.076277][ T8061] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 177.923755][ T8112] Invalid ELF header magic: != ELF [ 178.234413][ T8118] mmap: syz.1.557 (8118) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 180.098449][ T8161] mkiss: ax0: crc mode is auto. [ 181.448379][ T8191] delete_channel: no stack [ 184.812501][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 184.821825][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 186.279013][ T8310] FAULT_INJECTION: forcing a failure. [ 186.279013][ T8310] name failslab, interval 1, probability 0, space 0, times 0 [ 186.317280][ T8310] CPU: 0 UID: 0 PID: 8310 Comm: syz.3.605 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 186.327949][ T8310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 186.338053][ T8310] Call Trace: [ 186.341368][ T8310] [ 186.344333][ T8310] dump_stack_lvl+0x16c/0x1f0 [ 186.349170][ T8310] should_fail_ex+0x497/0x5b0 [ 186.353899][ T8310] ? fs_reclaim_acquire+0xae/0x150 [ 186.359057][ T8310] should_failslab+0xc2/0x120 [ 186.363785][ T8310] __kmalloc_noprof+0xce/0x4f0 [ 186.368597][ T8310] ? lsm_blob_alloc+0x68/0x90 [ 186.373345][ T8310] lsm_blob_alloc+0x68/0x90 [ 186.377903][ T8310] security_prepare_creds+0x30/0x270 [ 186.383253][ T8310] prepare_creds+0x53e/0x750 [ 186.387895][ T8310] ? __pfx_get_random_u64+0x10/0x10 [ 186.393140][ T8310] copy_creds+0xa7/0xa50 [ 186.397464][ T8310] copy_process+0xeff/0x6f20 [ 186.402115][ T8310] ? get_pid_task+0xfc/0x250 [ 186.406752][ T8310] ? __pfx_lock_release+0x10/0x10 [ 186.411818][ T8310] ? __pfx_copy_process+0x10/0x10 [ 186.417328][ T8310] ? find_held_lock+0x2d/0x110 [ 186.422152][ T8310] kernel_clone+0xfd/0x960 [ 186.426627][ T8310] ? __pfx_kernel_clone+0x10/0x10 [ 186.431706][ T8310] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 186.437735][ T8310] __do_sys_clone+0xba/0x100 [ 186.442455][ T8310] ? __pfx___do_sys_clone+0x10/0x10 [ 186.447727][ T8310] do_syscall_64+0xcd/0x250 [ 186.452276][ T8310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.458223][ T8310] RIP: 0033:0x7f5912185d29 [ 186.462668][ T8310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.482760][ T8310] RSP: 002b:00007f5912f58fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 186.491481][ T8310] RAX: ffffffffffffffda RBX: 00007f5912375fa0 RCX: 00007f5912185d29 [ 186.499498][ T8310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 186.507507][ T8310] RBP: 00007f5912f59090 R08: 0000000000000000 R09: 0000000000000000 [ 186.515515][ T8310] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 186.523524][ T8310] R13: 0000000000000000 R14: 00007f5912375fa0 R15: 00007ffd966e3f08 [ 186.531552][ T8310] [ 187.966067][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.975325][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.102150][ T8383] openvswitch: netlink: Key type 8964 is out of range max 32 [ 191.022132][ T8414] Process accounting resumed [ 192.732361][ T8470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.639'. [ 192.965322][ T8470] hsr_slave_0: entered allmulticast mode [ 193.502786][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.510254][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.713246][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.729797][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.600254][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.607036][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.008213][ T8576] snd_aloop snd_aloop.0: control 0:1:8:1Õ…:-4095 is already present [ 197.671171][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.669'. [ 197.683325][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.669'. [ 197.976021][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.999458][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.691286][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.706899][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.757515][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.763952][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.308154][ T8776] netlink: 32 bytes leftover after parsing attributes in process `syz.0.708'. [ 207.089607][ T8809] Invalid ELF header magic: != ELF [ 207.263681][ T8780] [U] [ 207.266460][ T8780] [U] [ 207.269206][ T8780] [U] [ 207.271935][ T8780] [U] [ 207.340128][ T8780] [U] [ 207.342891][ T8780] [U] [ 207.345626][ T8780] [U] [ 207.348360][ T8780] [U] [ 207.401297][ T8780] [U] [ 207.404078][ T8780] [U] [ 207.406807][ T8780] [U] [ 207.409546][ T8780] [U] [ 207.439135][ T8780] [U] [ 207.441907][ T8780] [U] [ 207.444638][ T8780] [U] [ 207.447370][ T8780] [U] [ 207.501564][ T8780] [U] [ 210.366730][ T29] audit: type=1326 audit(4294967311.390:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="syz.0.730" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7febcc985d29 code=0x0 [ 211.464869][ T8894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.738'. [ 211.675808][ T8894] macvlan1: entered promiscuous mode [ 211.953698][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.961044][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 216.227724][ T8984] netlink: 'syz.0.751': attribute type 2 has an invalid length. [ 217.723909][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 217.730828][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 218.905855][ T29] audit: type=1800 audit(4294967319.940:7): pid=9041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.765" name="dbroot" dev="configfs" ino=18483 res=0 errno=0 [ 218.944183][ T9041] db_root: cannot open: › [ 220.599528][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 220.605900][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 220.683699][ T9085] FAULT_INJECTION: forcing a failure. [ 220.683699][ T9085] name failslab, interval 1, probability 0, space 0, times 0 [ 220.705374][ T9085] CPU: 0 UID: 0 PID: 9085 Comm: syz.0.778 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 220.716048][ T9085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 220.726140][ T9085] Call Trace: [ 220.729449][ T9085] [ 220.732398][ T9085] dump_stack_lvl+0x16c/0x1f0 [ 220.737120][ T9085] should_fail_ex+0x497/0x5b0 [ 220.741836][ T9085] ? fs_reclaim_acquire+0xae/0x150 [ 220.746992][ T9085] should_failslab+0xc2/0x120 [ 220.751734][ T9085] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 220.757155][ T9085] ? alloc_empty_file+0x73/0x1e0 [ 220.762144][ T9085] alloc_empty_file+0x73/0x1e0 [ 220.766957][ T9085] path_openat+0xe1/0x2d60 [ 220.771408][ T9085] ? hlock_class+0x4e/0x130 [ 220.775951][ T9085] ? __lock_acquire+0x15a9/0x3c40 [ 220.781112][ T9085] ? __pfx_path_openat+0x10/0x10 [ 220.786097][ T9085] ? __pfx___lock_acquire+0x10/0x10 [ 220.791340][ T9085] ? lock_acquire.part.0+0x11b/0x380 [ 220.796660][ T9085] ? find_held_lock+0x2d/0x110 [ 220.801469][ T9085] do_filp_open+0x20c/0x470 [ 220.806033][ T9085] ? __pfx_do_filp_open+0x10/0x10 [ 220.811098][ T9085] ? find_held_lock+0x2d/0x110 [ 220.815929][ T9085] ? alloc_fd+0x41f/0x760 [ 220.820316][ T9085] do_sys_openat2+0x17a/0x1e0 [ 220.825041][ T9085] ? __pfx_do_sys_openat2+0x10/0x10 [ 220.830308][ T9085] __x64_sys_openat+0x175/0x210 [ 220.835206][ T9085] ? __pfx___x64_sys_openat+0x10/0x10 [ 220.840628][ T9085] ? ksys_write+0x1ba/0x250 [ 220.845184][ T9085] do_syscall_64+0xcd/0x250 [ 220.849823][ T9085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.855762][ T9085] RIP: 0033:0x7febcc985d29 [ 220.860214][ T9085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.879864][ T9085] RSP: 002b:00007febcd7de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 220.888326][ T9085] RAX: ffffffffffffffda RBX: 00007febccb75fa0 RCX: 00007febcc985d29 [ 220.896368][ T9085] RDX: 0000000000020201 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 220.904380][ T9085] RBP: 00007febcd7de090 R08: 0000000000000000 R09: 0000000000000000 [ 220.912405][ T9085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.920413][ T9085] R13: 0000000000000000 R14: 00007febccb75fa0 R15: 00007ffe5968d4e8 [ 220.928436][ T9085] [ 221.237237][ T9090] Process accounting paused [ 226.163572][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.804'. [ 226.220560][ T9201] FAULT_INJECTION: forcing a failure. [ 226.220560][ T9201] name failslab, interval 1, probability 0, space 0, times 0 [ 226.342039][ T9201] CPU: 0 UID: 0 PID: 9201 Comm: syz.3.806 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 226.352701][ T9201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 226.362791][ T9201] Call Trace: [ 226.366132][ T9201] [ 226.369084][ T9201] dump_stack_lvl+0x16c/0x1f0 [ 226.373807][ T9201] should_fail_ex+0x497/0x5b0 [ 226.378523][ T9201] ? fs_reclaim_acquire+0xae/0x150 [ 226.383675][ T9201] should_failslab+0xc2/0x120 [ 226.388398][ T9201] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 226.394252][ T9201] ? __alloc_skb+0x2b3/0x380 [ 226.398887][ T9201] __alloc_skb+0x2b3/0x380 [ 226.403342][ T9201] ? __pfx___alloc_skb+0x10/0x10 [ 226.408319][ T9201] ? lock_acquire+0x2f/0xb0 [ 226.412866][ T9201] netlink_alloc_large_skb+0x69/0x130 [ 226.418277][ T9201] netlink_sendmsg+0x689/0xd70 [ 226.423080][ T9201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.428415][ T9201] ____sys_sendmsg+0x9ae/0xb40 [ 226.433214][ T9201] ? copy_msghdr_from_user+0x10b/0x160 [ 226.438719][ T9201] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.444048][ T9201] ? get_pid_task+0xfc/0x250 [ 226.448696][ T9201] ___sys_sendmsg+0x135/0x1e0 [ 226.453419][ T9201] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.458685][ T9201] ? __pfx_vfs_write+0x10/0x10 [ 226.463479][ T9201] ? do_sys_openat2+0xb1/0x1e0 [ 226.468287][ T9201] __sys_sendmsg+0x16e/0x220 [ 226.472913][ T9201] ? __pfx___sys_sendmsg+0x10/0x10 [ 226.478087][ T9201] do_syscall_64+0xcd/0x250 [ 226.482626][ T9201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.488557][ T9201] RIP: 0033:0x7f5912185d29 [ 226.493017][ T9201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.512668][ T9201] RSP: 002b:00007f5912f59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.521209][ T9201] RAX: ffffffffffffffda RBX: 00007f5912375fa0 RCX: 00007f5912185d29 [ 226.529218][ T9201] RDX: 0000000000000080 RSI: 0000000020000180 RDI: 0000000000000000 [ 226.537221][ T9201] RBP: 00007f5912f59090 R08: 0000000000000000 R09: 0000000000000000 [ 226.545245][ T9201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.553253][ T9201] R13: 0000000000000000 R14: 00007f5912375fa0 R15: 00007ffd966e3f08 [ 226.561277][ T9201] [ 226.587794][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 226.594175][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 227.077928][ T9218] capability: warning: `syz.1.811' uses 32-bit capabilities (legacy support in use) [ 227.229599][ T9221] ubi13: attaching mtd0 [ 227.234094][ T9221] ubi13 error: ubi_attach_mtd_dev: bad VID header (13) or data offsets (77) [ 229.326395][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.342306][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 syzkaller syzkaller login: [ 229.823960][ T9266] Invalid ELF header magic: != ELF [ 231.343096][ T29] audit: type=1326 audit(4294967344.383:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9302 comm="syz.1.834" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0856985d29 code=0x0 [ 233.070180][ T9337] FAULT_INJECTION: forcing a failure. [ 233.070180][ T9337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.137395][ T9337] CPU: 1 UID: 0 PID: 9337 Comm: syz.0.844 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 233.148078][ T9337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 233.158169][ T9337] Call Trace: [ 233.161468][ T9337] [ 233.164421][ T9337] dump_stack_lvl+0x16c/0x1f0 [ 233.169134][ T9337] should_fail_ex+0x497/0x5b0 [ 233.173827][ T9337] _copy_to_user+0x32/0xd0 [ 233.178301][ T9337] simple_read_from_buffer+0xd0/0x160 [ 233.183677][ T9337] proc_fail_nth_read+0x198/0x270 [ 233.188717][ T9337] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 233.194286][ T9337] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 233.199847][ T9337] vfs_read+0x1df/0xbe0 [ 233.204014][ T9337] ? __fget_files+0x1fc/0x3a0 [ 233.208786][ T9337] ? __pfx___mutex_lock+0x10/0x10 [ 233.213818][ T9337] ? __pfx_vfs_read+0x10/0x10 [ 233.218516][ T9337] ? __fget_files+0x206/0x3a0 [ 233.223206][ T9337] ksys_read+0x12b/0x250 [ 233.227465][ T9337] ? __pfx_ksys_read+0x10/0x10 [ 233.232240][ T9337] do_syscall_64+0xcd/0x250 [ 233.236754][ T9337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.242653][ T9337] RIP: 0033:0x7febcc98473c [ 233.247072][ T9337] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 233.267030][ T9337] RSP: 002b:00007febcd7de030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 233.275450][ T9337] RAX: ffffffffffffffda RBX: 00007febccb75fa0 RCX: 00007febcc98473c [ 233.283430][ T9337] RDX: 000000000000000f RSI: 00007febcd7de0a0 RDI: 0000000000000004 [ 233.291504][ T9337] RBP: 00007febcd7de090 R08: 0000000000000000 R09: 0000000000000000 [ 233.299485][ T9337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.307461][ T9337] R13: 0000000000000000 R14: 00007febccb75fa0 R15: 00007ffe5968d4e8 [ 233.315448][ T9337] [ 233.318602][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.489915][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 235.496277][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 236.805777][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.862'. [ 237.650200][ T9439] openvswitch: netlink: Message has 4 unknown bytes. [ 238.053443][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 238.066679][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 239.703822][ T9492] FAULT_INJECTION: forcing a failure. [ 239.703822][ T9492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.724470][ T9492] CPU: 0 UID: 0 PID: 9492 Comm: syz.0.883 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 239.735131][ T9492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 239.745223][ T9492] Call Trace: [ 239.748537][ T9492] [ 239.751493][ T9492] dump_stack_lvl+0x16c/0x1f0 [ 239.756219][ T9492] should_fail_ex+0x497/0x5b0 [ 239.760937][ T9492] _copy_from_user+0x2e/0xd0 [ 239.765569][ T9492] kstrtouint_from_user+0xd7/0x1c0 [ 239.770715][ T9492] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 239.776493][ T9492] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 239.782166][ T9492] proc_fail_nth_write+0x84/0x250 [ 239.787242][ T9492] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 239.792915][ T9492] ? ksys_write+0x12b/0x250 [ 239.797467][ T9492] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 239.803144][ T9492] vfs_write+0x24c/0x1150 [ 239.807527][ T9492] ? __fget_files+0x1fc/0x3a0 [ 239.812253][ T9492] ? __pfx___mutex_lock+0x10/0x10 [ 239.817686][ T9492] ? __pfx_vfs_write+0x10/0x10 [ 239.822680][ T9492] ? __fget_files+0x206/0x3a0 [ 239.827420][ T9492] ksys_write+0x12b/0x250 [ 239.831791][ T9492] ? __pfx_ksys_write+0x10/0x10 [ 239.836695][ T9492] do_syscall_64+0xcd/0x250 [ 239.841248][ T9492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.847185][ T9492] RIP: 0033:0x7febcc9847df [ 239.851636][ T9492] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 239.871277][ T9492] RSP: 002b:00007febcd7de030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 239.879732][ T9492] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007febcc9847df [ 239.887713][ T9492] RDX: 0000000000000001 RSI: 00007febcd7de0a0 RDI: 0000000000000004 [ 239.895690][ T9492] RBP: 00007febcd7de090 R08: 0000000000000000 R09: 0000000000000000 [ 239.903750][ T9492] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 239.911721][ T9492] R13: 0000000000000000 R14: 00007febccb75fa0 R15: 00007ffe5968d4e8 [ 239.919721][ T9492] [ 239.922865][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.118992][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 240.125660][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 240.479730][ T9514] nbd: must specify a device to reconfigure [ 242.436418][ T3504] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.652999][ T3504] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.828935][ T3504] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.004154][ T3504] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.090157][ T9559] FAULT_INJECTION: forcing a failure. [ 243.090157][ T9559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.124699][ T9559] CPU: 1 UID: 0 PID: 9559 Comm: syz.0.904 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 243.135367][ T9559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 243.145542][ T9559] Call Trace: [ 243.148841][ T9559] [ 243.151789][ T9559] dump_stack_lvl+0x16c/0x1f0 [ 243.156508][ T9559] should_fail_ex+0x497/0x5b0 [ 243.161228][ T9559] _copy_to_user+0x32/0xd0 [ 243.165687][ T9559] simple_read_from_buffer+0xd0/0x160 [ 243.171093][ T9559] proc_fail_nth_read+0x198/0x270 [ 243.176154][ T9559] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.181747][ T9559] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.187337][ T9559] vfs_read+0x1df/0xbe0 [ 243.191533][ T9559] ? __fget_files+0x1fc/0x3a0 [ 243.196248][ T9559] ? __pfx___mutex_lock+0x10/0x10 [ 243.201318][ T9559] ? __pfx_vfs_read+0x10/0x10 [ 243.206059][ T9559] ? __fget_files+0x206/0x3a0 [ 243.210789][ T9559] ksys_read+0x12b/0x250 [ 243.215072][ T9559] ? __pfx_ksys_read+0x10/0x10 [ 243.219876][ T9559] do_syscall_64+0xcd/0x250 [ 243.224416][ T9559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.230359][ T9559] RIP: 0033:0x7febcc98473c [ 243.234803][ T9559] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 243.254623][ T9559] RSP: 002b:00007febcd7bd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 243.263154][ T9559] RAX: ffffffffffffffda RBX: 00007febccb76080 RCX: 00007febcc98473c [ 243.271156][ T9559] RDX: 000000000000000f RSI: 00007febcd7bd0a0 RDI: 0000000000000004 [ 243.279153][ T9559] RBP: 00007febcd7bd090 R08: 0000000000000000 R09: 0000000000000000 [ 243.287159][ T9559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.292217][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 243.295136][ T9559] R13: 0000000000000000 R14: 00007febccb76080 R15: 00007ffe5968d4e8 [ 243.305917][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.310378][ T9559] [ 243.349644][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 243.358655][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 243.368840][ T5833] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 243.377680][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 243.536484][ T3504] bridge_slave_1: left allmulticast mode [ 243.552938][ T3504] bridge_slave_1: left promiscuous mode [ 243.569037][ T3504] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.601810][ T3504] bridge_slave_0: left allmulticast mode [ 243.616599][ T3504] bridge_slave_0: left promiscuous mode [ 243.622379][ T3504] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.728861][ T9566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.906'. [ 244.446429][ T3504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.471560][ T3504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.518036][ T3504] bond0 (unregistering): Released all slaves [ 244.600391][ T9566] hsr_slave_0: entered allmulticast mode [ 245.420188][ T3504] hsr_slave_0: left promiscuous mode [ 245.440750][ T3504] hsr_slave_1: left promiscuous mode [ 245.467971][ T5841] Bluetooth: hci2: command tx timeout [ 245.767574][ T3504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.956778][ T3504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.008656][ T3504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.030122][ T3504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.169722][ T3504] veth1_macvtap: left promiscuous mode [ 246.175723][ T3504] veth0_macvtap: left promiscuous mode [ 246.206816][ T3504] veth1_vlan: left promiscuous mode [ 246.213658][ T3504] veth0_vlan: left promiscuous mode [ 246.608786][ T9608] delete_channel: no stack [ 247.513825][ T5841] Bluetooth: hci2: command tx timeout [ 247.575494][ T9623] netlink: 28 bytes leftover after parsing attributes in process `syz.0.916'. [ 248.528304][ T3504] team0 (unregistering): Port device team_slave_1 removed [ 248.700220][ T3504] team0 (unregistering): Port device team_slave_0 removed [ 249.587492][ T5841] Bluetooth: hci2: command tx timeout [ 250.055892][ T3504] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 250.122807][ T9560] chnl_net:caif_netlink_parms(): no params data found [ 250.149012][ T9623] ipvlan0: entered promiscuous mode [ 250.154770][ T9623] ipvlan0: entered allmulticast mode [ 250.182031][ T9623] veth0_vlan: entered allmulticast mode [ 250.814983][ T9560] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.850673][ T9560] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.926889][ T9560] bridge_slave_0: entered allmulticast mode [ 250.973749][ T9560] bridge_slave_0: entered promiscuous mode [ 251.028083][ T9560] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.052264][ T9560] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.094433][ T9560] bridge_slave_1: entered allmulticast mode [ 251.127863][ T9560] bridge_slave_1: entered promiscuous mode [ 251.439478][ T9560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.667557][ T5841] Bluetooth: hci2: command tx timeout [ 251.778676][ T9560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.952937][ T9638] Process accounting resumed [ 252.062975][ T9560] team0: Port device team_slave_0 added [ 252.117415][ T9560] team0: Port device team_slave_1 added [ 252.208055][ T9656] FAULT_INJECTION: forcing a failure. [ 252.208055][ T9656] name failslab, interval 1, probability 0, space 0, times 0 [ 252.253891][ T9656] CPU: 1 UID: 0 PID: 9656 Comm: syz.0.921 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 252.264556][ T9656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 252.274635][ T9656] Call Trace: [ 252.277931][ T9656] [ 252.280878][ T9656] dump_stack_lvl+0x16c/0x1f0 [ 252.285591][ T9656] should_fail_ex+0x497/0x5b0 [ 252.290307][ T9656] ? fs_reclaim_acquire+0xae/0x150 [ 252.295462][ T9656] should_failslab+0xc2/0x120 [ 252.300175][ T9656] __kmalloc_node_noprof+0xd1/0x520 [ 252.305416][ T9656] ? security_capable+0x7e/0x260 [ 252.310390][ T9656] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 252.315884][ T9656] ? ns_capable_noaudit+0xda/0x110 [ 252.321030][ T9656] __kvmalloc_node_noprof+0xad/0x1a0 [ 252.326349][ T9656] proc_sys_call_handler+0x2f6/0x5d0 [ 252.331669][ T9656] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 252.337519][ T9656] vfs_write+0x5ae/0x1150 [ 252.341884][ T9656] ? __pfx_proc_sys_write+0x10/0x10 [ 252.347116][ T9656] ? __pfx___mutex_lock+0x10/0x10 [ 252.352172][ T9656] ? __pfx_vfs_write+0x10/0x10 [ 252.357428][ T9656] ksys_write+0x12b/0x250 [ 252.362081][ T9656] ? __pfx_ksys_write+0x10/0x10 [ 252.366975][ T9656] do_syscall_64+0xcd/0x250 [ 252.371776][ T9656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.377702][ T9656] RIP: 0033:0x7febcc985d29 [ 252.382142][ T9656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.401780][ T9656] RSP: 002b:00007febcd7de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 252.410430][ T9656] RAX: ffffffffffffffda RBX: 00007febccb75fa0 RCX: 00007febcc985d29 [ 252.418431][ T9656] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 252.426863][ T9656] RBP: 00007febcd7de090 R08: 0000000000000000 R09: 0000000000000000 [ 252.435291][ T9656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.443304][ T9656] R13: 0000000000000000 R14: 00007febccb75fa0 R15: 00007ffe5968d4e8 [ 252.451324][ T9656] [ 252.783061][ T9560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.797159][ T9560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.859034][ T9560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.952006][ T9560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.962207][ T9560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.052117][ T9560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.352285][ T9560] hsr_slave_0: entered promiscuous mode [ 253.387281][ T9560] hsr_slave_1: entered promiscuous mode [ 253.413829][ T9560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.443659][ T9560] Cannot create hsr debugfs directory [ 254.182199][ T9560] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 254.214912][ T9560] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 254.296478][ T9560] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 254.332363][ T9560] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 254.683772][ T9560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.789359][ T9560] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.850118][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.858363][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.192812][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.200071][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.910930][ T9560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.177049][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.183840][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.830874][ T9560] veth0_vlan: entered promiscuous mode [ 256.908582][ T9560] veth1_vlan: entered promiscuous mode [ 257.028796][ T9560] veth0_macvtap: entered promiscuous mode [ 257.089445][ T9560] veth1_macvtap: entered promiscuous mode [ 257.153605][ T9560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.201319][ T9560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.236855][ T9560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.271192][ T9560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.302876][ T9560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.342693][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 257.352797][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 257.372039][ T9560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.384649][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 257.387593][ T9560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.411346][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 257.432048][ T9560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.444436][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 257.451940][ T9560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.452126][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 257.565140][ T9560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.694207][ T9740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.749835][ T9560] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.759484][ T9560] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.796598][ T9560] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.805364][ T9560] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.776920][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.784796][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.863890][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.907205][ T9731] chnl_net:caif_netlink_parms(): no params data found [ 258.917160][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.487252][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.493706][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.622132][ T5841] Bluetooth: hci4: command tx timeout [ 259.868297][ T9731] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.899683][ T9731] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.908191][ T9731] bridge_slave_0: entered allmulticast mode [ 259.926680][ T9731] bridge_slave_0: entered promiscuous mode [ 260.022177][ T9532] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 260.080202][ T9731] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.116898][ T9731] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.131716][ T9731] bridge_slave_1: entered allmulticast mode [ 260.145638][ T9731] bridge_slave_1: entered promiscuous mode [ 260.284247][ T1142] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.546239][ T1142] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.605834][ T9731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.657112][ T9731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.978170][ T1142] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.023863][ T9731] team0: Port device team_slave_0 added [ 261.123025][ T1142] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.207525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 261.216077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 261.309154][ T9731] team0: Port device team_slave_1 added [ 261.620090][ T9731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.630928][ T9731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.667623][ T5841] Bluetooth: hci4: command tx timeout [ 261.731368][ T9731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.761031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 261.928447][ T9731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.947650][ T9731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.059779][ T9731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.328793][ T9731] hsr_slave_0: entered promiscuous mode [ 262.348700][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 262.369396][ T9731] hsr_slave_1: entered promiscuous mode [ 262.386817][ T9731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.394913][ T9731] Cannot create hsr debugfs directory [ 262.713866][ T1142] bridge_slave_1: left allmulticast mode [ 262.723888][ T1142] bridge_slave_1: left promiscuous mode [ 262.742050][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.759726][ T1142] bridge_slave_0: left allmulticast mode [ 262.765482][ T1142] bridge_slave_0: left promiscuous mode [ 262.796219][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.621375][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.632830][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.649568][ T1142] bond0 (unregistering): Released all slaves [ 263.679794][ T29] audit: type=1326 audit(4294967376.723:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9835 comm="syz.4.943" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f68b9585d29 code=0x0 [ 263.730954][ T9837] Process accounting resumed [ 263.747280][ T5841] Bluetooth: hci4: command tx timeout [ 263.757810][ T1142] ovs_: left promiscuous mode [ 264.217659][ T9731] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 264.416431][ T9731] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 264.453960][ T9731] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 264.549807][ T9847] Invalid ELF header magic: != ELF [ 264.583799][ T1142] hsr_slave_0: left promiscuous mode [ 264.593030][ T1142] hsr_slave_1: left promiscuous mode [ 264.648280][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.655769][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.672769][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.680902][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.704776][ T1142] veth1_macvtap: left promiscuous mode [ 264.715389][ T1142] veth0_macvtap: left promiscuous mode [ 264.721755][ T1142] veth1_vlan: left promiscuous mode [ 264.733574][ T1142] veth0_vlan: left promiscuous mode [ 265.818227][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 265.828181][ T5841] Bluetooth: hci4: command tx timeout [ 265.919002][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 266.195327][ T9871] nbd: must specify a size in bytes for the device [ 266.862761][ T9731] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 267.252953][ T9877] FAULT_INJECTION: forcing a failure. [ 267.252953][ T9877] name failslab, interval 1, probability 0, space 0, times 0 [ 267.299906][ T9877] CPU: 1 UID: 0 PID: 9877 Comm: syz.4.950 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 267.310573][ T9877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 267.320664][ T9877] Call Trace: [ 267.323972][ T9877] [ 267.326930][ T9877] dump_stack_lvl+0x16c/0x1f0 [ 267.331649][ T9877] should_fail_ex+0x497/0x5b0 [ 267.336805][ T9877] ? fs_reclaim_acquire+0xae/0x150 [ 267.341963][ T9877] should_failslab+0xc2/0x120 [ 267.346693][ T9877] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 267.352110][ T9877] ? __pfx_mark_lock+0x10/0x10 [ 267.356915][ T9877] ? process_measurement+0x39c/0x2370 [ 267.362324][ T9877] ? vm_area_dup+0x21/0x300 [ 267.366865][ T9877] vm_area_dup+0x21/0x300 [ 267.371313][ T9877] __split_vma+0x181/0x1210 [ 267.375905][ T9877] ? hlock_class+0x4e/0x130 [ 267.380446][ T9877] ? __lock_acquire+0xcc5/0x3c40 [ 267.385483][ T9877] ? __pfx___split_vma+0x10/0x10 [ 267.390448][ T9877] vms_gather_munmap_vmas+0x1c3/0x1730 [ 267.395930][ T9877] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 267.401854][ T9877] ? mas_walk+0x6a6/0x910 [ 267.406207][ T9877] __mmap_region+0x32c/0x2760 [ 267.411084][ T9877] ? __pfx___mmap_region+0x10/0x10 [ 267.416221][ T9877] ? hlock_class+0x4e/0x130 [ 267.420823][ T9877] ? mark_lock+0xb5/0xc60 [ 267.425198][ T9877] ? hlock_class+0x4e/0x130 [ 267.429729][ T9877] ? __pfx___lock_acquire+0x10/0x10 [ 267.434995][ T9877] mmap_region+0x127/0x320 [ 267.439457][ T9877] do_mmap+0xa09/0x1050 [ 267.443641][ T9877] vm_mmap_pgoff+0x1ba/0x360 [ 267.448266][ T9877] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 267.453403][ T9877] ? __fget_files+0x206/0x3a0 [ 267.458105][ T9877] ksys_mmap_pgoff+0x32c/0x5c0 [ 267.462898][ T9877] ? __pfx_ksys_write+0x10/0x10 [ 267.467777][ T9877] __x64_sys_mmap+0x125/0x190 [ 267.472478][ T9877] do_syscall_64+0xcd/0x250 [ 267.477009][ T9877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.482956][ T9877] RIP: 0033:0x7f68b9585d29 [ 267.487417][ T9877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.507058][ T9877] RSP: 002b:00007f68ba3a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 267.515582][ T9877] RAX: ffffffffffffffda RBX: 00007f68b9775fa0 RCX: 00007f68b9585d29 [ 267.523562][ T9877] RDX: 0000000000000001 RSI: 000000000000401f RDI: 0000000020ffc000 [ 267.531551][ T9877] RBP: 00007f68ba3a3090 R08: 0000000000000003 R09: 0000000000000000 [ 267.539529][ T9877] R10: 000000000008e051 R11: 0000000000000246 R12: 0000000000000001 [ 267.547699][ T9877] R13: 0000000000000000 R14: 00007f68b9775fa0 R15: 00007fff83ee5448 [ 267.555729][ T9877] [ 267.923496][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.930048][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.013630][ T9731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.076282][ T9731] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.111585][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.118930][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.210322][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.217526][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.766874][ T9731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.368524][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 269.375123][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.603286][ T9731] veth0_vlan: entered promiscuous mode [ 269.630101][ T9731] veth1_vlan: entered promiscuous mode [ 269.707521][ T9731] veth0_macvtap: entered promiscuous mode [ 269.731338][ T9731] veth1_macvtap: entered promiscuous mode [ 269.759638][ T9731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.793159][ T9931] smc: net device syz_tun erased user defined pnetid ETHTOOL [ 269.800702][ T9731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.819348][ T9931] netlink: 28 bytes leftover after parsing attributes in process `syz.1.954'. [ 269.831405][ T9731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.856596][ T9731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.887867][ T9731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.932209][ T9731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.976572][ T9731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.986464][ T9731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.022705][ T9731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.054197][ T9731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.093625][ T9731] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.116175][ T9731] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.149775][ T9731] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.172498][ T9731] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.369042][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.396373][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.493613][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.530230][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.749764][ T9956] netlink: 8 bytes leftover after parsing attributes in process `syz.5.930'. [ 271.212197][ T9969] Invalid ELF header magic: != ELF [ 273.053505][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 273.060491][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 274.551242][T10068] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 275.168416][T10085] ucma_write: process 29 (syz.5.978) changed security contexts after opening file descriptor, this is not allowed. [ 276.122347][T10109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.983'. [ 276.252067][T10109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.259882][T10109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.290928][T10109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.299114][T10109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.517588][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 279.612772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 280.350014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 280.784206][T10217] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 281.007526][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 281.016394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 281.107372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 282.254112][T10242] Process accounting paused [ 283.142824][T10272] FAULT_INJECTION: forcing a failure. [ 283.142824][T10272] name failslab, interval 1, probability 0, space 0, times 0 [ 283.241905][T10272] CPU: 1 UID: 0 PID: 10272 Comm: syz.4.1015 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 283.252968][T10272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 283.263187][T10272] Call Trace: [ 283.266479][T10272] [ 283.269456][T10272] dump_stack_lvl+0x16c/0x1f0 [ 283.274171][T10272] should_fail_ex+0x497/0x5b0 [ 283.278861][T10272] ? fs_reclaim_acquire+0xae/0x150 [ 283.283984][T10272] should_failslab+0xc2/0x120 [ 283.288691][T10272] __kmalloc_noprof+0xce/0x4f0 [ 283.293485][T10272] ? __pfx_d_absolute_path+0x10/0x10 [ 283.298799][T10272] ? tomoyo_encode2+0x100/0x3e0 [ 283.303673][T10272] tomoyo_encode2+0x100/0x3e0 [ 283.308369][T10272] tomoyo_realpath_from_path+0x1a7/0x710 [ 283.314024][T10272] tomoyo_mount_acl+0x1af/0x880 [ 283.318886][T10272] ? hlock_class+0x4e/0x130 [ 283.323402][T10272] ? __lock_acquire+0x15a9/0x3c40 [ 283.328435][T10272] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 283.333818][T10272] ? __pfx___lock_acquire+0x10/0x10 [ 283.339019][T10272] ? stack_trace_save+0x95/0xd0 [ 283.343885][T10272] ? __pfx_lock_release+0x10/0x10 [ 283.348938][T10272] ? trace_lock_acquire+0x14e/0x1f0 [ 283.354156][T10272] ? tomoyo_mount_permission+0x149/0x420 [ 283.359811][T10272] ? lock_acquire+0x2f/0xb0 [ 283.364319][T10272] ? tomoyo_mount_permission+0x149/0x420 [ 283.369971][T10272] tomoyo_mount_permission+0x16e/0x420 [ 283.375439][T10272] ? tomoyo_mount_permission+0x149/0x420 [ 283.381082][T10272] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 283.387085][T10272] ? get_current_fs_domain+0x184/0x1f0 [ 283.392563][T10272] security_sb_mount+0x9b/0x260 [ 283.397439][T10272] path_mount+0x129/0x1f00 [ 283.401867][T10272] ? kmem_cache_free+0x152/0x4c0 [ 283.406841][T10272] ? __pfx_path_mount+0x10/0x10 [ 283.411711][T10272] ? putname+0x13c/0x180 [ 283.415972][T10272] __x64_sys_mount+0x294/0x320 [ 283.420748][T10272] ? __pfx___x64_sys_mount+0x10/0x10 [ 283.426051][T10272] do_syscall_64+0xcd/0x250 [ 283.430568][T10272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.436479][T10272] RIP: 0033:0x7f68b9585d29 [ 283.440928][T10272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.460553][T10272] RSP: 002b:00007f68ba3a3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 283.468981][T10272] RAX: ffffffffffffffda RBX: 00007f68b9775fa0 RCX: 00007f68b9585d29 [ 283.476978][T10272] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000000000000 [ 283.484953][T10272] RBP: 00007f68ba3a3090 R08: 0000000000000000 R09: 0000000000000000 [ 283.492927][T10272] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000001 [ 283.500908][T10272] R13: 0000000000000000 R14: 00007f68b9775fa0 R15: 00007fff83ee5448 [ 283.508900][T10272] [ 283.530057][T10261] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 283.549895][T10261] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 283.586681][T10272] ERROR: Out of memory at tomoyo_realpath_from_path. [ 284.060809][T10288] i2c i2c-0: delete_device: Can't parse I2C address [ 285.715547][T10314] FAULT_INJECTION: forcing a failure. [ 285.715547][T10314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.792032][T10314] CPU: 1 UID: 0 PID: 10314 Comm: syz.4.1022 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 285.802868][T10314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 285.813047][T10314] Call Trace: [ 285.816339][T10314] [ 285.819267][T10314] dump_stack_lvl+0x16c/0x1f0 [ 285.824081][T10314] should_fail_ex+0x497/0x5b0 [ 285.828803][T10314] _copy_from_iter+0x29b/0x1400 [ 285.833828][T10314] ? trace_lock_acquire+0x14e/0x1f0 [ 285.839058][T10314] ? __pfx__copy_from_iter+0x10/0x10 [ 285.844375][T10314] ? __virt_addr_valid+0x1a4/0x590 [ 285.849495][T10314] ? __virt_addr_valid+0x5e/0x590 [ 285.854523][T10314] ? __phys_addr_symbol+0x30/0x80 [ 285.859596][T10314] ? __check_object_size+0x488/0x710 [ 285.864888][T10314] file_tty_write.constprop.0+0x48d/0x9a0 [ 285.870653][T10314] vfs_write+0x5ae/0x1150 [ 285.875021][T10314] ? __pfx_tty_write+0x10/0x10 [ 285.879827][T10314] ? __pfx_vfs_write+0x10/0x10 [ 285.884635][T10314] ? __fget_files+0x40/0x3a0 [ 285.889802][T10314] ksys_write+0x12b/0x250 [ 285.894309][T10314] ? __pfx_ksys_write+0x10/0x10 [ 285.899217][T10314] do_syscall_64+0xcd/0x250 [ 285.903786][T10314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.909734][T10314] RIP: 0033:0x7f68b9585d29 [ 285.914269][T10314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.933922][T10314] RSP: 002b:00007f68ba3a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 285.942466][T10314] RAX: ffffffffffffffda RBX: 00007f68b9775fa0 RCX: 00007f68b9585d29 [ 285.950470][T10314] RDX: 000000000000a3d9 RSI: 0000000020000400 RDI: 0000000000000004 [ 285.958477][T10314] RBP: 00007f68ba3a3090 R08: 0000000000000000 R09: 0000000000000000 [ 285.966486][T10314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.974493][T10314] R13: 0000000000000000 R14: 00007f68b9775fa0 R15: 00007fff83ee5448 [ 285.982530][T10314] [ 286.230499][ T29] audit: type=1800 audit(4294967411.272:10): pid=10321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1023" name="dbroot" dev="configfs" ino=23102 res=0 errno=0 [ 286.368657][T10321] db_root: cannot open: › [ 287.782592][T10359] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 287.886665][T10354] Process accounting resumed [ 291.085111][T10430] FAULT_INJECTION: forcing a failure. [ 291.085111][T10430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.169543][T10430] CPU: 0 UID: 0 PID: 10430 Comm: syz.0.1040 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 291.180551][T10430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 291.190668][T10430] Call Trace: [ 291.193977][T10430] [ 291.196938][T10430] dump_stack_lvl+0x16c/0x1f0 [ 291.201739][T10430] should_fail_ex+0x497/0x5b0 [ 291.206478][T10430] _copy_to_user+0x32/0xd0 [ 291.210941][T10430] simple_read_from_buffer+0xd0/0x160 [ 291.216397][T10430] proc_fail_nth_read+0x198/0x270 [ 291.221480][T10430] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 291.227171][T10430] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 291.232773][T10430] vfs_read+0x1df/0xbe0 [ 291.236984][T10430] ? __fget_files+0x1fc/0x3a0 [ 291.241707][T10430] ? __pfx___mutex_lock+0x10/0x10 [ 291.246778][T10430] ? __pfx_vfs_read+0x10/0x10 [ 291.251511][T10430] ? __fget_files+0x206/0x3a0 [ 291.256274][T10430] ksys_read+0x12b/0x250 [ 291.260562][T10430] ? __pfx_ksys_read+0x10/0x10 [ 291.265379][T10430] do_syscall_64+0xcd/0x250 [ 291.270017][T10430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.275956][T10430] RIP: 0033:0x7febcc98473c [ 291.280406][T10430] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 291.300487][T10430] RSP: 002b:00007febcd7bd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 291.308995][T10430] RAX: ffffffffffffffda RBX: 00007febccb76080 RCX: 00007febcc98473c [ 291.317007][T10430] RDX: 000000000000000f RSI: 00007febcd7bd0a0 RDI: 0000000000000004 [ 291.325014][T10430] RBP: 00007febcd7bd090 R08: 0000000000000000 R09: 0000000000000000 [ 291.333110][T10430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.341125][T10430] R13: 0000000000000000 R14: 00007febccb76080 R15: 00007ffe5968d4e8 [ 291.349253][T10430] [ 293.043602][T10481] openvswitch: netlink: Key type 261 is out of range max 32 [ 295.319859][T10547] sp0: Synchronizing with TNC [ 297.340649][T10592] ima: policy update failed [ 297.345376][ T29] audit: type=1802 audit(4294967422.382:11): pid=10592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1059" res=0 errno=0 [ 297.791115][T10603] ICMPv6: process `syz.0.1057' is using deprecated sysctl (syscall) net.ipv6.neigh.erspan0.retrans_time - use net.ipv6.neigh.erspan0.retrans_time_ms instead [ 297.977445][T10597] FAULT_INJECTION: forcing a failure. [ 297.977445][T10597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.055196][T10597] CPU: 1 UID: 0 PID: 10597 Comm: syz.5.1060 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 298.066033][T10597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 298.076120][T10597] Call Trace: [ 298.079427][T10597] [ 298.082389][T10597] dump_stack_lvl+0x16c/0x1f0 [ 298.087111][T10597] should_fail_ex+0x497/0x5b0 [ 298.091837][T10597] _copy_to_user+0x32/0xd0 [ 298.096300][T10597] simple_read_from_buffer+0xd0/0x160 [ 298.101712][T10597] proc_fail_nth_read+0x198/0x270 [ 298.106790][T10597] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.112389][T10597] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.117996][T10597] vfs_read+0x1df/0xbe0 [ 298.122216][T10597] ? __fget_files+0x1fc/0x3a0 [ 298.126944][T10597] ? __pfx___mutex_lock+0x10/0x10 [ 298.132027][T10597] ? __pfx_vfs_read+0x10/0x10 [ 298.136770][T10597] ? __fget_files+0x206/0x3a0 [ 298.141500][T10597] ksys_read+0x12b/0x250 [ 298.145800][T10597] ? __pfx_ksys_read+0x10/0x10 [ 298.150708][T10597] do_syscall_64+0xcd/0x250 [ 298.155259][T10597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.161195][T10597] RIP: 0033:0x7f3f6d78473c [ 298.165640][T10597] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 298.185281][T10597] RSP: 002b:00007f3f6e51b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 298.193777][T10597] RAX: ffffffffffffffda RBX: 00007f3f6d975fa0 RCX: 00007f3f6d78473c [ 298.201800][T10597] RDX: 000000000000000f RSI: 00007f3f6e51b0a0 RDI: 000000000000000a [ 298.209803][T10597] RBP: 00007f3f6e51b090 R08: 0000000000000000 R09: 0000000000000000 [ 298.217816][T10597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.225828][T10597] R13: 0000000000000000 R14: 00007f3f6d975fa0 R15: 00007ffdcf0759b8 [ 298.233846][T10597] [ 299.098662][T10648] block nbd12: NBD_DISCONNECT [ 301.988668][ T5841] Bluetooth: hci4: Malformed Event: 0x02 [ 302.346200][T10739] FAULT_INJECTION: forcing a failure. [ 302.346200][T10739] name failslab, interval 1, probability 0, space 0, times 0 [ 302.359074][T10739] CPU: 0 UID: 0 PID: 10739 Comm: syz.4.1075 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 302.370001][T10739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 302.380093][T10739] Call Trace: [ 302.383376][T10739] [ 302.386317][T10739] dump_stack_lvl+0x16c/0x1f0 [ 302.391054][T10739] should_fail_ex+0x497/0x5b0 [ 302.395805][T10739] ? fs_reclaim_acquire+0xae/0x150 [ 302.400929][T10739] should_failslab+0xc2/0x120 [ 302.405622][T10739] __kmalloc_noprof+0xce/0x4f0 [ 302.410399][T10739] ? d_absolute_path+0x137/0x1b0 [ 302.415371][T10739] ? tomoyo_encode2+0x100/0x3e0 [ 302.420245][T10739] tomoyo_encode2+0x100/0x3e0 [ 302.424937][T10739] tomoyo_realpath_from_path+0x1a7/0x710 [ 302.430596][T10739] tomoyo_path_number_perm+0x248/0x5b0 [ 302.436096][T10739] ? tomoyo_path_number_perm+0x235/0x5b0 [ 302.441762][T10739] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 302.447797][T10739] ? __pfx_lock_release+0x10/0x10 [ 302.452837][T10739] ? trace_lock_acquire+0x14e/0x1f0 [ 302.458071][T10739] ? lock_acquire+0x2f/0xb0 [ 302.462585][T10739] ? __fget_files+0x40/0x3a0 [ 302.467212][T10739] ? __fget_files+0x206/0x3a0 [ 302.471901][T10739] security_file_ioctl+0x9b/0x240 [ 302.476943][T10739] __x64_sys_ioctl+0xb7/0x200 [ 302.481645][T10739] do_syscall_64+0xcd/0x250 [ 302.486166][T10739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.492069][T10739] RIP: 0033:0x7f68b9585d29 [ 302.496500][T10739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.516671][T10739] RSP: 002b:00007f68ba3a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.525117][T10739] RAX: ffffffffffffffda RBX: 00007f68b9775fa0 RCX: 00007f68b9585d29 [ 302.533093][T10739] RDX: 0000000000000004 RSI: 0000000040085618 RDI: 0000000000000003 [ 302.541169][T10739] RBP: 00007f68ba3a3090 R08: 0000000000000000 R09: 0000000000000000 [ 302.549258][T10739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.557335][T10739] R13: 0000000000000000 R14: 00007f68b9775fa0 R15: 00007fff83ee5448 [ 302.565411][T10739] [ 302.569810][T10739] ERROR: Out of memory at tomoyo_realpath_from_path. [ 302.627472][T10743] mkiss: ax0: crc mode is auto. [ 303.073974][T10752] sp0: Synchronizing with TNC [ 303.507679][T10763] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1079'. [ 304.315941][T10790] FAULT_INJECTION: forcing a failure. [ 304.315941][T10790] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 304.367491][T10790] CPU: 0 UID: 0 PID: 10790 Comm: syz.4.1083 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 304.378315][T10790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 304.388377][T10790] Call Trace: [ 304.391653][T10790] [ 304.394584][T10790] dump_stack_lvl+0x16c/0x1f0 [ 304.399280][T10790] should_fail_ex+0x497/0x5b0 [ 304.403969][T10790] ? fs_reclaim_acquire+0xae/0x150 [ 304.409092][T10790] should_fail_alloc_page+0xe7/0x130 [ 304.414393][T10790] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 304.420611][T10790] ? __pfx___lock_acquire+0x10/0x10 [ 304.425826][T10790] __alloc_pages_noprof+0x190/0x25b0 [ 304.431135][T10790] ? hlock_class+0x4e/0x130 [ 304.435648][T10790] ? mark_lock+0xb5/0xc60 [ 304.440003][T10790] ? mark_lock+0xb5/0xc60 [ 304.444435][T10790] ? __pfx_mark_lock+0x10/0x10 [ 304.449221][T10790] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 304.454955][T10790] ? __pfx_mark_lock+0x10/0x10 [ 304.459736][T10790] ? process_measurement+0x39c/0x2370 [ 304.465126][T10790] ? hlock_class+0x4e/0x130 [ 304.469658][T10790] ? hlock_class+0x4e/0x130 [ 304.474177][T10790] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 304.480176][T10790] ? policy_nodemask+0xea/0x4e0 [ 304.485053][T10790] alloc_pages_mpol_noprof+0x2c8/0x620 [ 304.490524][T10790] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 304.496951][T10790] ? __pfx___lock_acquire+0x10/0x10 [ 304.502158][T10790] ? mark_lock+0xb5/0xc60 [ 304.506513][T10790] pte_alloc_one+0x20/0x390 [ 304.511028][T10790] do_pte_missing+0x1ae7/0x3e00 [ 304.515900][T10790] __handle_mm_fault+0x103c/0x2a40 [ 304.521041][T10790] ? __pfx___handle_mm_fault+0x10/0x10 [ 304.526514][T10790] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 304.532170][T10790] ? find_vma+0xc0/0x140 [ 304.536418][T10790] ? __pfx_find_vma+0x10/0x10 [ 304.541110][T10790] handle_mm_fault+0x3fa/0xaa0 [ 304.545897][T10790] do_user_addr_fault+0x7a3/0x13f0 [ 304.551022][T10790] exc_page_fault+0x5c/0xc0 [ 304.555535][T10790] asm_exc_page_fault+0x26/0x30 [ 304.560409][T10790] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 304.566273][T10790] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 304.585894][T10790] RSP: 0018:ffffc90003597c58 EFLAGS: 00050246 [ 304.591980][T10790] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 304.599955][T10790] RDX: fffff520006b2f97 RSI: 0000000000000000 RDI: ffffc90003597cb0 [ 304.607931][T10790] RBP: 0000000000000008 R08: 0000000000000001 R09: fffff520006b2f96 [ 304.615933][T10790] R10: ffffc90003597cb7 R11: 0000000000000000 R12: 0000000000000000 [ 304.623928][T10790] R13: ffffc90003597cb0 R14: dffffc0000000000 R15: ffff888034e31800 [ 304.632178][T10790] _copy_from_user+0x9a/0xd0 [ 304.636929][T10790] ucma_write+0x129/0x330 [ 304.641285][T10790] ? __pfx_ucma_write+0x10/0x10 [ 304.646162][T10790] ? bpf_lsm_file_permission+0x9/0x10 [ 304.651548][T10790] ? security_file_permission+0x71/0x210 [ 304.657191][T10790] ? __pfx_ucma_write+0x10/0x10 [ 304.662054][T10790] vfs_write+0x24c/0x1150 [ 304.666397][T10790] ? __fget_files+0x1fc/0x3a0 [ 304.671097][T10790] ? __pfx_lock_release+0x10/0x10 [ 304.676135][T10790] ? __pfx_vfs_write+0x10/0x10 [ 304.680909][T10790] ? lock_acquire+0x2f/0xb0 [ 304.685501][T10790] ? __fget_files+0x40/0x3a0 [ 304.690104][T10790] ? __fget_files+0x206/0x3a0 [ 304.694796][T10790] ksys_write+0x207/0x250 [ 304.699133][T10790] ? __pfx_ksys_write+0x10/0x10 [ 304.704009][T10790] do_syscall_64+0xcd/0x250 [ 304.708546][T10790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.714466][T10790] RIP: 0033:0x7f68b9585d29 [ 304.718889][T10790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.738593][T10790] RSP: 002b:00007f68ba3a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 304.747013][T10790] RAX: ffffffffffffffda RBX: 00007f68b9775fa0 RCX: 00007f68b9585d29 [ 304.755074][T10790] RDX: 00000000000000c3 RSI: 0000000000000000 RDI: 0000000000000007 [ 304.763045][T10790] RBP: 00007f68ba3a3090 R08: 0000000000000000 R09: 0000000000000000 [ 304.771019][T10790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.779011][T10790] R13: 0000000000000000 R14: 00007f68b9775fa0 R15: 00007fff83ee5448 [ 304.787007][T10790] [ 305.858664][T10813] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1087'. [ 305.945645][T10813] lo: entered promiscuous mode [ 305.975842][T10813] lo: entered allmulticast mode [ 310.396815][T10897] ubi0: attaching mtd0 [ 311.159155][T10920] netlink: 'syz.4.1117': attribute type 10 has an invalid length. [ 311.184961][T10920] netlink: 230 bytes leftover after parsing attributes in process `syz.4.1117'. [ 311.219366][T10922] i2c i2c-0: delete_device: Can't parse I2C address [ 311.247491][T10920] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 311.553543][T10934] block nbd0: Unsupported socket: shutdown callout must be supported. [ 311.812168][T10934] openvswitch: netlink: IP tunnel dst address not specified [ 312.780530][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 312.786989][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 313.612398][T10980] Process accounting resumed [ 313.692955][T11002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'. [ 313.735314][T11002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'. [ 313.980049][T11005] erspan0: entered allmulticast mode [ 314.459980][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 314.466459][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.589308][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.595728][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.426403][T11095] [ 318.428799][T11095] ====================================================== [ 318.435837][T11095] WARNING: possible circular locking dependency detected [ 318.443003][T11095] 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 Not tainted [ 318.450161][T11095] ------------------------------------------------------ [ 318.457206][T11095] syz.0.1163/11095 is trying to acquire lock: [ 318.463301][T11095] ffff8880254700a8 (&q->q_usage_counter(io)){++++}-{0:0}, at: submit_bio_noacct_nocheck+0x892/0xd70 [ 318.474181][T11095] [ 318.474181][T11095] but task is already holding lock: [ 318.481573][T11095] ffff888148c814c0 (mapping.invalidate_lock#2){.+.+}-{4:4}, at: page_cache_ra_unbounded+0x173/0x750 [ 318.492489][T11095] [ 318.492489][T11095] which lock already depends on the new lock. [ 318.492489][T11095] [ 318.502893][T11095] [ 318.502893][T11095] the existing dependency chain (in reverse order) is: [ 318.512087][T11095] [ 318.512087][T11095] -> #4 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 318.520633][T11095] down_read+0x9a/0x330 [ 318.525335][T11095] page_cache_ra_unbounded+0x173/0x750 [ 318.531344][T11095] page_cache_ra_order+0x8f2/0xc80 [ 318.537046][T11095] page_cache_async_ra+0x5cb/0x8a0 [ 318.542712][T11095] filemap_fault+0xd69/0x2820 [ 318.547926][T11095] __do_fault+0x10a/0x490 [ 318.552785][T11095] do_pte_missing+0xebd/0x3e00 [ 318.558076][T11095] __handle_mm_fault+0x103c/0x2a40 [ 318.563728][T11095] handle_mm_fault+0x3fa/0xaa0 [ 318.569022][T11095] __get_user_pages+0x8d9/0x3b50 [ 318.574486][T11095] get_dump_page+0xff/0x230 [ 318.579523][T11095] dump_user_range+0x135/0x8c0 [ 318.584821][T11095] elf_core_dump+0x2787/0x3880 [ 318.590110][T11095] do_coredump+0x2dd5/0x43e0 [ 318.595236][T11095] get_signal+0x23f3/0x2610 [ 318.600268][T11095] arch_do_signal_or_restart+0x90/0x7e0 [ 318.606361][T11095] irqentry_exit_to_user_mode+0x13f/0x280 [ 318.612710][T11095] asm_exc_page_fault+0x26/0x30 [ 318.618270][T11095] [ 318.618270][T11095] -> #3 (&mm->mmap_lock){++++}-{4:4}: [ 318.625836][T11095] __might_fault+0x11b/0x190 [ 318.630993][T11095] _copy_from_user+0x29/0xd0 [ 318.636149][T11095] __blk_trace_setup+0xa8/0x180 [ 318.641596][T11095] blk_trace_ioctl+0x163/0x290 [ 318.646890][T11095] blkdev_ioctl+0x106/0x670 [ 318.651921][T11095] __x64_sys_ioctl+0x190/0x200 [ 318.657218][T11095] do_syscall_64+0xcd/0x250 [ 318.662245][T11095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.668669][T11095] [ 318.668669][T11095] -> #2 (&q->debugfs_mutex){+.+.}-{4:4}: [ 318.676606][T11095] __mutex_lock+0x19b/0xa60 [ 318.681670][T11095] blk_register_queue+0x13c/0x4f0 [ 318.687227][T11095] add_disk_fwnode+0x785/0x1300 [ 318.692620][T11095] brd_alloc.isra.0+0x50a/0x7c0 [ 318.698004][T11095] brd_init+0x12b/0x1d0 [ 318.702681][T11095] do_one_initcall+0x128/0x630 [ 318.707980][T11095] kernel_init_freeable+0x58f/0x8b0 [ 318.713705][T11095] kernel_init+0x1c/0x2b0 [ 318.718562][T11095] ret_from_fork+0x45/0x80 [ 318.723495][T11095] ret_from_fork_asm+0x1a/0x30 [ 318.728791][T11095] [ 318.728791][T11095] -> #1 (&q->sysfs_lock){+.+.}-{4:4}: [ 318.736350][T11095] __mutex_lock+0x19b/0xa60 [ 318.741395][T11095] queue_attr_store+0xe2/0x170 [ 318.746768][T11095] sysfs_kf_write+0x117/0x170 [ 318.751970][T11095] kernfs_fop_write_iter+0x33d/0x500 [ 318.757776][T11095] vfs_write+0x5ae/0x1150 [ 318.762628][T11095] ksys_write+0x12b/0x250 [ 318.767486][T11095] do_syscall_64+0xcd/0x250 [ 318.772515][T11095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.778933][T11095] [ 318.778933][T11095] -> #0 (&q->q_usage_counter(io)){++++}-{0:0}: [ 318.787273][T11095] __lock_acquire+0x249e/0x3c40 [ 318.792640][T11095] lock_acquire.part.0+0x11b/0x380 [ 318.798268][T11095] __submit_bio+0x49c/0x540 [ 318.803299][T11095] submit_bio_noacct_nocheck+0x892/0xd70 [ 318.809456][T11095] submit_bio_noacct+0x93a/0x1e20 [ 318.815007][T11095] mpage_readahead+0x41d/0x590 [ 318.820298][T11095] read_pages+0x1a8/0xdc0 [ 318.825154][T11095] page_cache_ra_unbounded+0x3dc/0x750 [ 318.831140][T11095] page_cache_ra_order+0x8f2/0xc80 [ 318.836774][T11095] page_cache_sync_ra+0x4b4/0x9c0 [ 318.842321][T11095] filemap_get_pages+0xd7b/0x1be0 [ 318.848616][T11095] filemap_splice_read+0x5cc/0xd00 [ 318.854295][T11095] do_splice_read+0x282/0x370 [ 318.859511][T11095] splice_file_to_pipe+0x109/0x120 [ 318.865163][T11095] do_sendfile+0x3fd/0xe30 [ 318.870212][T11095] __x64_sys_sendfile64+0x1da/0x220 [ 318.876040][T11095] do_syscall_64+0xcd/0x250 [ 318.881085][T11095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.887516][T11095] [ 318.887516][T11095] other info that might help us debug this: [ 318.887516][T11095] [ 318.897740][T11095] Chain exists of: [ 318.897740][T11095] &q->q_usage_counter(io) --> &mm->mmap_lock --> mapping.invalidate_lock#2 [ 318.897740][T11095] [ 318.913347][T11095] Possible unsafe locking scenario: [ 318.913347][T11095] [ 318.920897][T11095] CPU0 CPU1 [ 318.926250][T11095] ---- ---- [ 318.931614][T11095] rlock(mapping.invalidate_lock#2); [ 318.937000][T11095] lock(&mm->mmap_lock); [ 318.944133][T11095] lock(mapping.invalidate_lock#2); [ 318.951945][T11095] rlock(&q->q_usage_counter(io)); [ 318.957145][T11095] [ 318.957145][T11095] *** DEADLOCK *** [ 318.957145][T11095] [ 318.965280][T11095] 2 locks held by syz.0.1163/11095: [ 318.970471][T11095] #0: ffff888031580468 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 318.979193][T11095] #1: ffff888148c814c0 (mapping.invalidate_lock#2){.+.+}-{4:4}, at: page_cache_ra_unbounded+0x173/0x750 [ 318.990520][T11095] [ 318.990520][T11095] stack backtrace: [ 318.996403][T11095] CPU: 0 UID: 0 PID: 11095 Comm: syz.0.1163 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 319.007181][T11095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 319.017237][T11095] Call Trace: [ 319.020524][T11095] [ 319.023538][T11095] dump_stack_lvl+0x116/0x1f0 [ 319.028224][T11095] print_circular_bug+0x41c/0x610 [ 319.033258][T11095] check_noncircular+0x31a/0x400 [ 319.038202][T11095] ? __pfx_check_noncircular+0x10/0x10 [ 319.043761][T11095] ? __bfs+0x2fa/0x670 [ 319.047842][T11095] ? __pfx_hlock_conflict+0x10/0x10 [ 319.053046][T11095] ? lockdep_lock+0xc6/0x200 [ 319.057637][T11095] ? __pfx_lockdep_lock+0x10/0x10 [ 319.062667][T11095] __lock_acquire+0x249e/0x3c40 [ 319.067521][T11095] ? __pfx___lock_acquire+0x10/0x10 [ 319.072730][T11095] lock_acquire.part.0+0x11b/0x380 [ 319.077843][T11095] ? submit_bio_noacct_nocheck+0x892/0xd70 [ 319.083657][T11095] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 319.089292][T11095] ? rcu_is_watching+0x12/0xc0 [ 319.094058][T11095] ? trace_lock_acquire+0x14e/0x1f0 [ 319.099262][T11095] ? submit_bio_noacct_nocheck+0x892/0xd70 [ 319.105086][T11095] ? lock_acquire+0x2f/0xb0 [ 319.109592][T11095] ? submit_bio_noacct_nocheck+0x892/0xd70 [ 319.115505][T11095] __submit_bio+0x49c/0x540 [ 319.120016][T11095] ? submit_bio_noacct_nocheck+0x892/0xd70 [ 319.125833][T11095] ? __pfx___submit_bio+0x10/0x10 [ 319.130894][T11095] ? trace_lock_acquire+0x14e/0x1f0 [ 319.136131][T11095] ? submit_bio_noacct_nocheck+0x892/0xd70 [ 319.141965][T11095] submit_bio_noacct_nocheck+0x892/0xd70 [ 319.147630][T11095] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 319.153882][T11095] ? __pfx___might_resched+0x10/0x10 [ 319.159204][T11095] ? __pfx_xa_load+0x10/0x10 [ 319.163802][T11095] submit_bio_noacct+0x93a/0x1e20 [ 319.168843][T11095] mpage_readahead+0x41d/0x590 [ 319.173621][T11095] ? __pfx_mpage_readahead+0x10/0x10 [ 319.178925][T11095] ? __pfx_blkdev_get_block+0x10/0x10 [ 319.184302][T11095] ? __folio_batch_add_and_move+0x5f3/0xc60 [ 319.190385][T11095] ? __pfx_lock_release+0x10/0x10 [ 319.195637][T11095] ? __pfx_blkdev_readahead+0x10/0x10 [ 319.201023][T11095] read_pages+0x1a8/0xdc0 [ 319.205410][T11095] ? __folio_batch_add_and_move+0x689/0xc60 [ 319.211341][T11095] ? __folio_batch_add_and_move+0x612/0xc60 [ 319.217244][T11095] ? __pfx_read_pages+0x10/0x10 [ 319.222100][T11095] ? find_held_lock+0x2d/0x110 [ 319.226871][T11095] page_cache_ra_unbounded+0x3dc/0x750 [ 319.232379][T11095] page_cache_ra_order+0x8f2/0xc80 [ 319.237500][T11095] page_cache_sync_ra+0x4b4/0x9c0 [ 319.242532][T11095] filemap_get_pages+0xd7b/0x1be0 [ 319.247589][T11095] ? hlock_class+0x4e/0x130 [ 319.252127][T11095] ? __pfx_filemap_get_pages+0x10/0x10 [ 319.257623][T11095] ? __pfx___might_resched+0x10/0x10 [ 319.262972][T11095] filemap_splice_read+0x5cc/0xd00 [ 319.268115][T11095] ? find_held_lock+0x2d/0x110 [ 319.272905][T11095] ? __pfx_filemap_splice_read+0x10/0x10 [ 319.278646][T11095] ? __pfx___mutex_trylock_common+0x10/0x10 [ 319.284562][T11095] ? pipe_lock+0x64/0x80 [ 319.288831][T11095] ? trace_lock_acquire+0x14e/0x1f0 [ 319.294082][T11095] ? lock_acquire+0x2f/0xb0 [ 319.298584][T11095] ? __fget_files+0x40/0x3a0 [ 319.303179][T11095] ? __pfx_filemap_splice_read+0x10/0x10 [ 319.308815][T11095] do_splice_read+0x282/0x370 [ 319.313580][T11095] splice_file_to_pipe+0x109/0x120 [ 319.318696][T11095] do_sendfile+0x3fd/0xe30 [ 319.323117][T11095] ? __pfx_do_sendfile+0x10/0x10 [ 319.328050][T11095] ? __x64_sys_futex+0x1e1/0x4c0 [ 319.332998][T11095] ? __x64_sys_futex+0x1ea/0x4c0 [ 319.337937][T11095] __x64_sys_sendfile64+0x1da/0x220 [ 319.343139][T11095] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 319.348869][T11095] do_syscall_64+0xcd/0x250 [ 319.353379][T11095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.359278][T11095] RIP: 0033:0x7febcc985d29 [ 319.363693][T11095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.383318][T11095] RSP: 002b:00007febcd7de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 319.391731][T11095] RAX: ffffffffffffffda RBX: 00007febccb75fa0 RCX: 00007febcc985d29 [ 319.399718][T11095] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 319.407687][T11095] RBP: 00007febcca01b08 R08: 0000000000000000 R09: 0000000000000000 [ 319.415747][T11095] R10: 0000000000100000 R11: 0000000000000246 R12: 0000000000000000 [ 319.423728][T11095] R13: 0000000000000000 R14: 00007febccb75fa0 R15: 00007ffe5968d4e8 [ 319.431712][T11095]