last executing test programs: 10m24.746572305s ago: executing program 2 (id=629): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlockall$auto(0x7) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x400000, 0xfffffffffffefffd, 0x14) r0 = socket(0x10, 0x2, 0x4) keyctl$auto(0x11, 0xfffffffffffffffa, 0x0, 0x4, 0x3) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_setup$auto(0x6, 0x0) fallocate$auto(r0, 0x80, 0x2, 0x2) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0xf, 0x0, 0x6) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x9, 0xffffffffffffffff, [0x100, 0x9, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0xfc, 0x6, 0x0, 0x0, 0xf89, 0x9, 0x837, 0x8}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000007180)='/sys/devices/virtual/block/zram0/debug_stat\x00', 0x80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000071c0)=""/118, 0x76) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) faccessat2$auto(0x1, &(0x7f0000000040)='\x00', 0x3, 0x1000) r4 = dup$auto(0xffffffffffffffff) mmap$auto(0x8, 0x400003, 0xf, 0xffffffffffffffff, r4, 0x8000) 10m23.635471296s ago: executing program 2 (id=636): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd14/queue/max_sectors_kb\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, 0xfffffffffffffffe) getpid() r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x40841, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/17, 0x11) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000003680)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd700002dcdf25090000000400070008000300", @ANYRES32=r6, @ANYBLOB="270006"], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x890) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) 10m22.885423571s ago: executing program 2 (id=640): r0 = fsopen$auto(&(0x7f0000000040)='/proc/mtrr\x00', 0x7f) r1 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(0x3, 0x401070cd, 0x38) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x4040, 0x0) fadvise64$auto(r2, 0x8, 0x400000000000006, 0x0) ioctl$auto(r0, 0xfff, r1) mmap$auto(0x0, 0x400008, 0x2, 0x16, r0, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0x2, 0x0) seccomp$auto(0x1, 0x700, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x84) ioctl$auto(0x3, 0x8918, 0x91) ioctl$auto_evdev_fops_evdev(r3, 0x40084503, 0x0) 10m22.006615528s ago: executing program 2 (id=645): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x11, 0x3, 0x2) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyc6\x00', 0xc0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ppoll$auto(&(0x7f0000000080)={r1, 0x7980, 0x6}, 0x2, 0x0, 0x0, 0x8) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x4) unshare$auto(0x0) 10m20.697319699s ago: executing program 2 (id=650): mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0xa, 0x3, 0x100) pipe$auto(0x0) socket(0xa, 0x2, 0x88) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/lru_gen\x00', 0x12b902, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/reset_stats\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x1, 0x4, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) io_uring_register$auto(0x2, 0x1b, &(0x7f0000000100), 0x1) 10m17.859051613s ago: executing program 2 (id=662): mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) dup$auto(0xffffffffffffffff) open(&(0x7f0000000080)='./file0\x00', 0x614000, 0x8) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msgsnd$auto(0x5, 0x0, 0x3, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0xfbe8, 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000001640), 0x200840, 0x0) ppoll$auto(0x0, 0x1, 0x0, 0x0, 0x8) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r1, 0x0, 0x0) mlock$auto(0x8001, 0xb) mlock$auto(0x1ff, 0x5) futex_waitv$auto(0x0, 0x77, 0x100, 0x0, 0x62bd) mprotect$auto(0x20001000, 0xeb, 0x6) bpf$auto(0xb, 0x0, 0x3) fanotify_init$auto(0x5, 0x2) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000040), 0xffffffffffffffff) getpgid(0x0) syz_clone(0x0, &(0x7f0000000080)="43bf4adb87879cbd29688f", 0xb, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="ca16fa2ca7042de56825beca6e061e9615fa26c50042344d890bb95779662f91f0e083731bdc0e259a064ff3b853a13da17a6fc6020fd0cdc8c1e04a9e57ccde9e4e5391ffb8a34831bb10db1766116b09ce087d5f829e7e67c42e3767ed97fa1907d11b67d40bfeff071d51a6a73f2777842edec3fe9721cc4d472a3c62d00397041d3270244338f0b1ae6ec36750941a06070dba7bc614134d24e081288ca37cdb95f7ba87f8a2744c74fcc8bfde4a76050a671fb5aacb4f749cfb3b9984bd9f0085770fb639645c95d6a859e513592933f704200909e9d58156d2a4b3f29e11fedd90a33c53d02fa851aca7562045fb18c631a671") waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000240)={@siginfo_0_0={0xffff, 0x7, 0x7}}, 0x100, &(0x7f0000000380)={{0x101, 0x87b}, {0xd, 0x100000000}, 0x400, 0x4, 0x0, 0x3, 0x7f, 0x6, 0xfffffffffffffff9, 0xc103, 0x5, 0xa, 0x7, 0x5, 0x7, 0x5}) lstat$auto(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)={0x0, 0xb, 0x9bf, 0x1000, 0x0, 0xffffffffffffffff, 0x0, 0x42010f75, 0x4, 0x0, 0x1, 0xffffffffffffff00, 0x2, 0x3, 0x7fffffff, 0x5, 0x94ff}) geteuid() 10m17.611235926s ago: executing program 32 (id=662): mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) dup$auto(0xffffffffffffffff) open(&(0x7f0000000080)='./file0\x00', 0x614000, 0x8) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msgsnd$auto(0x5, 0x0, 0x3, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0xfbe8, 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000001640), 0x200840, 0x0) ppoll$auto(0x0, 0x1, 0x0, 0x0, 0x8) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r1, 0x0, 0x0) mlock$auto(0x8001, 0xb) mlock$auto(0x1ff, 0x5) futex_waitv$auto(0x0, 0x77, 0x100, 0x0, 0x62bd) mprotect$auto(0x20001000, 0xeb, 0x6) bpf$auto(0xb, 0x0, 0x3) fanotify_init$auto(0x5, 0x2) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000040), 0xffffffffffffffff) getpgid(0x0) syz_clone(0x0, &(0x7f0000000080)="43bf4adb87879cbd29688f", 0xb, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="ca16fa2ca7042de56825beca6e061e9615fa26c50042344d890bb95779662f91f0e083731bdc0e259a064ff3b853a13da17a6fc6020fd0cdc8c1e04a9e57ccde9e4e5391ffb8a34831bb10db1766116b09ce087d5f829e7e67c42e3767ed97fa1907d11b67d40bfeff071d51a6a73f2777842edec3fe9721cc4d472a3c62d00397041d3270244338f0b1ae6ec36750941a06070dba7bc614134d24e081288ca37cdb95f7ba87f8a2744c74fcc8bfde4a76050a671fb5aacb4f749cfb3b9984bd9f0085770fb639645c95d6a859e513592933f704200909e9d58156d2a4b3f29e11fedd90a33c53d02fa851aca7562045fb18c631a671") waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000240)={@siginfo_0_0={0xffff, 0x7, 0x7}}, 0x100, &(0x7f0000000380)={{0x101, 0x87b}, {0xd, 0x100000000}, 0x400, 0x4, 0x0, 0x3, 0x7f, 0x6, 0xfffffffffffffff9, 0xc103, 0x5, 0xa, 0x7, 0x5, 0x7, 0x5}) lstat$auto(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)={0x0, 0xb, 0x9bf, 0x1000, 0x0, 0xffffffffffffffff, 0x0, 0x42010f75, 0x4, 0x0, 0x1, 0xffffffffffffff00, 0x2, 0x3, 0x7fffffff, 0x5, 0x94ff}) geteuid() 16.362995874s ago: executing program 1 (id=3435): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x8802, 0x0) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x5452, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x575480, 0x0) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x81000000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x4, 0x0, 0x1, 0x5}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0xc) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x3, 0x3a) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) 14.825011861s ago: executing program 4 (id=3439): read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000ec0)=""/4096, 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) readv$auto(0x3, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioprio_get$auto(0x2, 0x1) r1 = clone$auto(0x8001, 0xfffffffffffffff7, 0x0, 0x0, 0xf) ptrace$auto(0x4, r1, 0x7, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kexec_load$auto(0x5, 0x2, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe985, 0xdf, 0xeb1, 0x2, 0x8000) socket(0xa, 0x2, 0x1) socket(0xa, 0x3, 0xff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) set_robust_list$auto(0xfffffffffffffffe, 0x18) select$auto(0xe724, 0x0, &(0x7f0000000100)={[0x1, 0x5, 0x800000000000008, 0x10c, 0x100, 0x3, 0x800000006, 0x1, 0x40009, 0x5e582972, 0x4000000000000000, 0x8000000000000000, 0x93, 0x3, 0xc, 0x8dca]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140), 0x51) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r2 = set_tid_address$auto(&(0x7f0000000000)=0x1) get_robust_list$auto(r2, &(0x7f0000000200)=&(0x7f00000001c0)={{}, 0x1, &(0x7f0000000180)}, &(0x7f0000000240)=0xb943) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000700), 0xffffffffffffffff) 12.939335153s ago: executing program 1 (id=3441): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) pipe2$auto(0x0, 0x80) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto_vsock_device_ops_af_vsock(r0, 0x7b9, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fanotify_init$auto(0x1, 0x3) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x400000000004, 0x7, 0x3, 0xeb1, 0x0, 0x8000) setuid$auto(0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bond_slave_1/disable_policy\x00', 0x202, 0x0) sendfile$auto(r2, r1, 0x0, 0x48) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r3, 0x40085112, 0x3) pread64$auto(r3, 0x0, 0x8, 0x4) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) socket(0xa, 0x1, 0x1) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) close_range$auto(0x2, 0x8000, 0x0) 11.307973117s ago: executing program 1 (id=3446): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x621f, 0x10004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2b, 0x801, 0x100) io_uring_setup$auto(0x6, 0x0) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) close_range$auto(r0, r0, 0x10001) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mkdir$auto(&(0x7f0000000000)='./file0/file1\x00', 0x2) mkdir$auto(&(0x7f0000000080)='./file0/file0\x00', 0x3) renameat2$auto(r1, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000240)='./file1\x00', 0x2) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0), 0x55) close_range$auto(0x2, 0x8, 0x0) setresuid$auto(0x2, 0x7, 0x8080) ioprio_get$auto(0x3, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x409b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) write$auto(r2, 0x0, 0x3ff) 10.822549026s ago: executing program 0 (id=3448): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x0) clone$auto(0x1, 0xfff, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x40, 0x7fffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) statx$auto(0x2, 0x0, 0x1000, 0xbdfa, 0x0) socket(0x2a, 0x2, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140), 0x55) 10.816303829s ago: executing program 4 (id=3449): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x800, 0x7, 0xdf, 0x12, 0x401, 0x1) r0 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) write$auto(r0, &(0x7f0000000800)='0\"\xfb]$|\xcb1j\xeb0B|d\x1e\x99\xb9\xfd\xd3\x89O\x9f\xac+\xf6\xd7/\xc9\xe9x\xd4\xf3\xc8\xf5\x7fW\xd3\xa6\x96\xd3^\xb8\xb4gq%H\xcc\x88r\xeaO\x8e\x10\t\xc7 P\xcf\xa7H\b\x04\x87\x98\x16`\xa3S\xd46\x10Wf\xc9<7\xcf\xc9\xf1\b\x9b\x8c\x9fu;\xc48(u\xf9Bx\n\xafW%/bBT\xa9\a\xed\xd2H4\x96\xa3U\xca\xf1\xef\x14dU\x15\x16\xa7\xdd\x01\x0e\xda\xc8\xd3\x00\xc5\b\x1a\xb0mN\x01\xb1\xc8B.U\xd1\x02\'\x9a\'\xf1;\xedJ\xf6@\xac\a\xf5\xf5 |\x1ex\xb7@=\xad\xe7\xff\xd6\xc1\xcf\x11\x0f\x99+v\x873\xc4\x17]\x17!]ct\xff\t\xb2A\x0f\x91\x02\xca&\x91n\xc1\x9e\xcb\x1b\xec\x972\xa9\x00', 0x4000002) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x4000008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x8000000000000001, 0x9}, 0x20000007}, 0x3, 0x0) prctl$auto(0x41555856, 0x4, 0x2008, 0x0, 0x0) socket(0x2, 0x3, 0x6) setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x28) open(0x0, 0x261c2, 0x84) close_range$auto(0x0, 0xfffff004, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x5, 0x8, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x75, 0x0, &(0x7f0000000000)=0x9000c) r3 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x2, 0x8) 9.946771171s ago: executing program 4 (id=3450): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x8802, 0x0) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x5452, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x575480, 0x0) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x81000000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x4, 0x0, 0x1, 0x5}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0xc) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x3, 0x3a) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) 9.738178683s ago: executing program 0 (id=3451): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, 0x0, 0x0) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) mmap$auto(0xc, 0x200006, 0x1, 0x11, 0x602, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) dup3$auto(0x8000000000000001, 0x5, 0x800000000) madvise$auto(0xffffffffffffffc3, 0x20000080400006, 0x200) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x42, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x1010001, 0x80, 0x100000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffbffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffa, 0x8, 0x4000000000, 0x7]}, 0x1fc, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000000006378ccbd8a55446d742a54aa4f4b0b7e94c5ae7b8ccf7793fa2d1e085e1219ff969aff", @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x801}, 0x7, 0x4008) madvise$auto(0x0, 0xffffffffffff0005, 0x19) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) mmap$auto(0x0, 0x200003, 0x4000000000df, 0x40eb2, r0, 0x2) 9.579424103s ago: executing program 1 (id=3452): mlockall$auto(0x7) r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0xd, 0x0, 0x4}, 0x800009}, 0x5, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1a000, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x31cd3c7c, 0xb1) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000100)=""/4096, 0x1000) memfd_create$auto(&(0x7f0000000040)=':@\x00', 0x4) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000580)={0xff8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEC_AUTO={0x5, 0x3, 0x26}, @ETHTOOL_A_FEC_AUTO={0x5, 0x3, 0x8}, @ETHTOOL_A_FEC_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEC_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10000}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_FEC_AUTO={0x5, 0x3, 0x6}, @ETHTOOL_A_FEC_MODES={0xf3d, 0x2, 0x0, 0x1, [@generic="5c4a1f6e322ce01f8974b8dedf9508b1f385fef7183b20b2d8249bc69613cd75e93b5e0857f6aa69537e0a9c41bba135addea62d63a4e924dc54d2237e9aec367bcf1396cff7db4fc1925ef3a8bfcb47431da132c1837c5396", @nested={0xee0, 0x138, 0x0, 0x1, [@generic="bcba8cab51aa3475308e319f94a0046feec353737e080138fab6a9dce3d82249f628082128a7982c9dbae16212b03c459b038b78511710b0acc8c4a2d9642331588c8d70eb2747e2589b870ed9258eaad75fca5725dd3b2f0f330ddd2f0f338830b4662d9408b13d3486ed6a9b6c296c79d76340d695459cbc900b601e14f71c2c0008a8559ce650211314c9f16cc63bebe94600d3ab9fe425a66bb87f3f4036d3e36a662c775b1a62735c503a2cb085ea1a19161a76f2ef8e42f5e85981edb73c0654f89125342d1e7e603405", @typed={0x8, 0x62, 0x0, 0x0, @ipv4=@local}, @generic="1d134c34e93d8f0053decfa24528c699e4a24b9d6ddfdee29539f98c334cc32b1f5df05af37a20043345edcdfa267bf0998313dd8dd74dc622869203fc000f623a4ec91100c34b9772e85f4a6f06", @generic="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"]}]}]}, 0xff8}, 0x1, 0x0, 0x0, 0x4005}, 0x44080) r5 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x76dd82, 0x0) mmap$auto(0x0, 0x400008, 0x4, 0x9b72, r5, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) 8.558083582s ago: executing program 4 (id=3455): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/ext4/sda1/journal_task\x00', 0xa100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/4096, 0x1000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4, @remote}, 0x6a) statmount$auto(0x0, 0x0, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000001100), r0) sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f0000001480)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001140)={0x2cc, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@OVS_FLOW_ATTR_KEY={0x2b5, 0x1, 0x0, 0x1, [@generic="366765d52da64bbdf7b6605572b0a430707f5803aac2500e35ea3127a40ee473f1ab52d52101eb5436b6eb46cfd2f52d93b6d09d3e336e2f6b18a3e8f1c5cbe2a9d57b07fd333a958151589f9a0832daf5fa9f0f7200a43bf982403c98e5dd49d59150cdc64d", @typed={0x8, 0xc0, 0x0, 0x0, @u32}, @typed={0x14, 0xa7, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x19b, 0x108, 0x0, 0x1, [@generic="aafb1e318ae7e7ee1bb4c5f6db2f5cd9232bf8f7bcc8e277b113ebd05adeedd4bb6f042bb25b2d482ba03961c58058443233562bf85137575a6b531628a4b23ec47a94497797507b881bcc6770d6db96dd7865e62693f3ce91b53f93709968b18da7424d9b67461340ff44472a085c0422bec2ecad248114051ed5c94a0fd661bf9196cb4de7b4681a00d197485ca545dc42da85726274d26c1ff8a8e1896cfcfd63ccfc71ad93ea52510c851a57202e67546d0d49ba0e2f429710c8cb40d15969f5efe8af3261eb", @typed={0x4, 0x3a}, @generic="d8af2e7e2e73bfbfc66b70fb97b9ccc55f73ad78d50676e2679df24b28a6918b022e853e98e13b6476c8645103594f2f93916632b5c079334eca63dee7ee9adeadd29ebd75315e7fadc7de95f8f1c6fbbdfa941f72d8e6d21c7030f8ab6edb12e9cffa9e6eb3ada54d62076824efa6c5e1620ffb455f337d120b3544954e962e812fce5d5b7164157816c2d4831e3a69e69a50a453ee7262ef203041c30df36357", @nested={0x4, 0x61}, @generic="8da072949ffad9120bbfc18b778b2c07c20114babddaef134bee073a34c4", @typed={0x8, 0xfd, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x21}}]}, @typed={0x8, 0xac, 0x0, 0x0, @ipv4=@multicast1}, @generic="649678e156868fac8cab78d0f85285cffdc8dd13f60e661ac5fe45b4ec5a214099d5ed3bf4ca8c5160c6cb41c410736e5326dacc20847fdede33e96e3f6bc204607559f36a8c14a66f4da5577d245bb4abad3b4fccb17488b1841a19fbf3c219765bb28f5d23a0ce99d2f9efa8387da02ec052baf264900ba45462e91cef6748d388feb6f485ced7a6417d"]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x8502, 0x0) read$auto(r3, &(0x7f0000000000)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2f6) socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_NEW(r4, 0x0, 0x0) fchown$auto(0xffffffffffffffff, 0x0, 0x0) memfd_secret$auto(0x7) gettid() r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r5, 0x1002, 0x0, 0x0, 0x0, 0x2) sendmsg$auto_IPVS_CMD_SET_DEST(r4, 0x0, 0x0) mprotect$auto(0x1, 0x101, 0x3) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x90, 0x0, 0xfffffffffffffffd) 7.292470988s ago: executing program 4 (id=3457): mmap$auto(0x20000000000000, 0x400008, 0x20000000000000df, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x5, 0x10002) socket(0x1, 0x80000, 0x3) write$auto(0x3, 0x0, 0x81) close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioctl$auto(0xc8, 0x400454cb, 0x5) tkill$auto(0x0, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0xfffffffd) socket(0x21, 0x2, 0x2) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x0) socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x40007f, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8810) sendmmsg$auto(0x3, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getrandom$auto(0x0, 0x6000000, 0x3) r1 = socket(0x9, 0x1, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fanotify_init$auto(0x5, 0x800) pipe2$auto(0x0, 0x80) socket(0xa, 0x2, 0x73) setsockopt$auto(0x400000000000003, 0x29, 0x23, 0x0, 0x568) write$auto(0x3, 0x0, 0x81) close_range$auto(0x0, 0xfffffffffffff000, 0x2) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), r1) 6.223092589s ago: executing program 0 (id=3458): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x0) clone$auto(0x1, 0xfff, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x40, 0x7fffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) statx$auto(0x2, 0x0, 0x1000, 0xbdfa, 0x0) socket(0x2a, 0x2, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r0, 0x5e1, 0xffffffffffffffff) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140), 0x55) 6.054408271s ago: executing program 4 (id=3459): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x0) clone$auto(0x1, 0xfff, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x40, 0x7fffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) statx$auto(0x2, 0x0, 0x1000, 0xbdfa, 0x0) socket(0x2a, 0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140), 0x55) 5.339024445s ago: executing program 33 (id=3459): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x0) clone$auto(0x1, 0xfff, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x40, 0x7fffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) statx$auto(0x2, 0x0, 0x1000, 0xbdfa, 0x0) socket(0x2a, 0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140), 0x55) 5.089467882s ago: executing program 0 (id=3461): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x7, 0x8) fcntl$auto(0x8000000000000001, 0x26, 0x8) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event\x00', 0x280, 0x0) 4.333354492s ago: executing program 1 (id=3463): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x8802, 0x0) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x5452, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x575480, 0x0) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x81000000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x4, 0x0, 0x1, 0x5}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0xc) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x3, 0x3a) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) 3.882197249s ago: executing program 0 (id=3464): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x80012, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000002) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r1, 0x901064b1, 0x2) write$auto(0x3, 0x0, 0xfffffdef) r2 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) setsockopt$auto(r2, 0x5, 0x3, &(0x7f00000000c0)='/dev/dri/card1\x00', 0xd74) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60740, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r3 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000040), 0x2881, 0x0) write$auto_ecryptfs_miscdev_fops_miscdev(r3, &(0x7f0000001640)="00000000ee", 0x5) close_range$auto(0x2, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socketpair$auto(0x2, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) sendmsg$auto_NETDEV_CMD_BIND_RX(r4, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c000000", @ANYRES16=0x0, @ANYBLOB="04082bbd7000fedbdf250d000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="1c00028008000300b67500000800030003000000080001000900000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="44000280080001000100000008000300ff01000008000100080000000800030002000000080003000700000008000100a00d00000800030010000000080003003200000008000100", @ANYRES32=0x0, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x48080}, 0x20000020) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8, &(0x7f0000000380)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x401}, 0x9, 0x2) statmount$auto(&(0x7f0000000f80)={0x10, @raw=0xd, 0x0, 0x2, 0xc}, &(0x7f0000000fc0)={0x22889f87, 0x7, 0x8000000000000001, 0x1, 0x0, 0x2, 0x801, 0x92, 0x5e87cb48, 0x8001, 0x8, 0x5, 0x7, 0xfffffffffffffa63, 0xfffffffffffffffa, 0x6, 0x1, 0x2, 0x2, 0x6, 0x80000001, 0x9, 0x2, 0x5, 0xb, 0x2, [0xffffffffffff0001, 0x6, 0x0, 0x2, 0xffffffffffffff81, 0x3, 0x7, 0x8, 0x3, 0x8, 0x10000, 0x4, 0x8, 0x7, 0x2357, 0x9, 0x5, 0x7f, 0xfffffffffffffff9, 0x1, 0x100, 0x5, 0x2bb2bb860, 0x74, 0x8, 0x6, 0xe6, 0xbde, 0x6, 0x8000000000000001, 0x9, 0xf2de, 0x80000000, 0x0, 0x81, 0x8, 0x2, 0x101, 0x40, 0x0, 0x4, 0xc, 0x7, 0x3, 0x3, 0x7], "f9fdd94aae674546b0887cae1b47603d3539ef9e929eec15a4c6919eeb3434b94b09f9fa4bf1327ffbec00d2f48753b196a91b5501ea02aea05fe5709d44afe054"}, 0x8, 0x7f) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r0) r6 = clone3$auto(&(0x7f0000000280)={0x1, 0x9, 0xffffffffffffffff, 0x7a, 0x9, 0x2, 0x40000000, 0x2, 0x6, 0x0, 0xff}, 0x198) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'caif0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000f40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f00)={&(0x7f0000002840)=ANY=[@ANYBLOB="b4110000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="1400b500fc010000000000000000000000000001d7e944d433cb3fc61a561d8617ae6d99414487838ca751b3015ec8711c01a87aefd6907274d8a7da8e98f4ae64a4b86ab4f59de3f4c9183b4213c6303232abfb13a61a95caaaebb9321446a409f32ae0b6d15b4c9afa547fffc139469d249b653ae91ffd830d9adc291f899a2f873babd6c6bee9c8d00abf41d3fc2dbde1ddb773d2685052d0c58707bae8c12502bc50443f5a9a7d77c2a94858370bbb6e19a7be346a8454ef94d0467dd0cd34674d9b32701aeee10a13e195134945b737972d9113036223e87b4e4f59b70b6b8d0c285d4ee0f09c1baefe576987480711190630cb3dd6d2e4825fdfd8aa9af5c631b64bbe43af3d1707cb582700b74a732b406e4c9f76b6d9705387aa7544cae6e90fda9aadc3060014010b00000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x11b4}}, 0x40) 2.248704745s ago: executing program 3 (id=3465): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0xfffffffe, 0x1, 0x4, 0x9, 0x79) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x21, 0xa, 0x0) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_hsr(0x0, 0xffffffffffffffff) prctl$auto(0x26, 0xfffffffffffffffe, 0x0, 0x0, 0x40) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a000000", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, 0x8}, @IEEE802154_ATTR_PHY_NAME={0xd, 0x1f, '/dev/fb0\x00'}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x812}, 0x1) ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0xaa403, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x4601, 0x0) madvise$auto(0x4, 0x6, 0x800) 2.188858291s ago: executing program 1 (id=3466): read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000ec0)=""/4096, 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) readv$auto(0x3, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioprio_get$auto(0x2, 0x1) r1 = clone$auto(0x8001, 0xfffffffffffffff7, 0x0, 0x0, 0xf) ptrace$auto(0x4, r1, 0x7, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kexec_load$auto(0x5, 0x2, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe985, 0xdf, 0xeb1, 0x2, 0x8000) socket(0xa, 0x2, 0x1) socket(0xa, 0x3, 0xff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) set_robust_list$auto(0xfffffffffffffffe, 0x18) select$auto(0xe724, 0x0, &(0x7f0000000100)={[0x1, 0x5, 0x800000000000008, 0x10c, 0x100, 0x3, 0x800000006, 0x1, 0x40009, 0x5e582972, 0x4000000000000000, 0x8000000000000000, 0x93, 0x3, 0xc, 0x8dca]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140), 0x51) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r2 = set_tid_address$auto(&(0x7f0000000000)=0x1) get_robust_list$auto(r2, &(0x7f0000000200)=&(0x7f00000001c0)={{}, 0x1, &(0x7f0000000180)}, &(0x7f0000000240)=0xb943) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000700), 0xffffffffffffffff) 1.367832094s ago: executing program 3 (id=3467): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8000, 0x0) ioctl$auto(0x3, 0x227a, 0x7) fcntl$auto(0x3, 0x4, 0xa553) 1.090268641s ago: executing program 3 (id=3468): personality$auto(0x40004010410ffc) io_setup$auto(0x5, &(0x7f0000000000)) io_setup$auto(0x3, &(0x7f0000000040)=0x10000) 903.295872ms ago: executing program 0 (id=3469): socket(0x10, 0x2, 0xf) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mlockall$auto(0x7) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000040), 0x200800, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000) pselect6$auto(0x4, 0x0, &(0x7f0000000180)={[0x2, 0x9, 0x2da0000, 0xff, 0x101, 0x1c00000, 0xa1, 0x4, 0xfffffffffffffffe, 0x8, 0x4, 0x9, 0x1, 0x0, 0x8, 0x80000001]}, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x2) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x8001, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x14) madvise$auto(0x0, 0x53, 0x9) io_uring_setup$auto(0x6, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000022c0)='ns/time_for_children\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f000000a500), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r1, &(0x7f000000a5c0)={0x0, 0x0, &(0x7f000000a580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c706d54aef809000000003618980d5e4982495da3cb279f7a5e8b7a12cb48e4ccba087d8a3ea71a3fd71ba634b1a6337cf03156952b326d17f1012462b27ee39b90ee080cc6d951f5d4b06d52cf38714e41ae0ccec5053d78c002094b6b1b004b00002000000000000000", @ANYRES16=r0, @ANYBLOB="01002abd7000fddbdf251b0000000800170102000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') 580.03002ms ago: executing program 3 (id=3470): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty43\x00', 0x101240, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x8}) ioctl$auto_TCFLSH2(r0, 0x4b40, 0xfdfd) 293.807511ms ago: executing program 3 (id=3471): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x48045, 0x0) write$auto(r0, 0x0, 0x6) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/admmidi2\x00', 0x32d2c1, 0x0) timer_getoverrun$auto(0x2) ioctl$auto_SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0xc20082, 0x0) 0s ago: executing program 3 (id=3472): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0xfffffffe, 0x1, 0x4, 0x9, 0x79) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x21, 0xa, 0x0) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_hsr(0x0, 0xffffffffffffffff) prctl$auto(0x26, 0xfffffffffffffffe, 0x0, 0x0, 0x40) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, 0x8}, @IEEE802154_ATTR_PHY_NAME={0xd, 0x1f, '/dev/fb0\x00'}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x812}, 0x1) ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0xaa403, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x4601, 0x0) madvise$auto(0x4, 0x6, 0x800) kernel console output (not intermixed with test programs): 6575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.529030][T16575] RSP: 002b:00007f152c97d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 596.537515][T16575] RAX: ffffffffffffffda RBX: 00007f152bd76080 RCX: 00007f152bb85d29 [ 596.545538][T16575] RDX: 0000000000000054 RSI: 0000000020000080 RDI: 0000000000000003 [ 596.553559][T16575] RBP: 00007f152c97d090 R08: 0000000000000000 R09: 0000000000000000 [ 596.561578][T16575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.569600][T16575] R13: 0000000000000000 R14: 00007f152bd76080 R15: 00007ffe8de73b38 [ 596.577641][T16575] [ 596.580810][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.663091][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.679267][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.731289][ T52] bond0 (unregistering): Released all slaves [ 597.864972][T16596] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 598.066824][T16603] size and base must be multiples of 4 kiB [ 598.078517][T16603] CPU: 0 UID: 0 PID: 16603 Comm: syz.4.2428 Not tainted 6.13.0-rc5-syzkaller #0 [ 598.087634][T16603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 598.097742][T16603] Call Trace: [ 598.101074][T16603] [ 598.104058][T16603] dump_stack_lvl+0x16c/0x1f0 [ 598.108807][T16603] mtrr_del+0xd1/0x110 [ 598.112955][T16603] mtrr_ioctl+0x900/0xcd0 [ 598.117363][T16603] ? __pfx_mtrr_ioctl+0x10/0x10 [ 598.122301][T16603] ? __pfx_lock_release+0x10/0x10 [ 598.127402][T16603] ? __fget_files+0x206/0x3a0 [ 598.132152][T16603] ? __pfx_mtrr_ioctl+0x10/0x10 [ 598.137081][T16603] proc_reg_unlocked_ioctl+0x226/0x320 [ 598.142611][T16603] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 598.148668][T16603] __x64_sys_ioctl+0x190/0x200 [ 598.153493][T16603] do_syscall_64+0xcd/0x250 [ 598.158071][T16603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.164036][T16603] RIP: 0033:0x7f152bb85d29 [ 598.168502][T16603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.188168][T16603] RSP: 002b:00007f152c99e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 598.196651][T16603] RAX: ffffffffffffffda RBX: 00007f152bd75fa0 RCX: 00007f152bb85d29 [ 598.204682][T16603] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000002 [ 598.212704][T16603] RBP: 00007f152bc01b08 R08: 0000000000000000 R09: 0000000000000000 [ 598.220724][T16603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.228743][T16603] R13: 0000000000000000 R14: 00007f152bd75fa0 R15: 00007ffe8de73b38 [ 598.236785][T16603] [ 598.239941][ C0] vkms_vblank_simulate: vblank timer overrun [ 598.372964][T16603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2428'. [ 598.443124][T14517] Bluetooth: hci1: command tx timeout [ 598.507873][T16597] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 598.877599][T16608] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 599.124468][T16509] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 599.206847][T16509] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 599.258095][T16509] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 599.428474][T16509] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 599.549718][T16509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.568445][T16509] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.586957][T10095] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.594177][T10095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.636298][T10095] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.643545][T10095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.837337][T16509] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 600.141420][T16509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.514238][T14517] Bluetooth: hci1: command tx timeout [ 600.597377][T16509] veth0_vlan: entered promiscuous mode [ 600.633012][T16509] veth1_vlan: entered promiscuous mode [ 600.704216][ T52] hsr_slave_0: left promiscuous mode [ 600.793870][ T52] hsr_slave_1: left promiscuous mode [ 600.813860][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.821369][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.854610][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.862115][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.023249][ T52] veth1_macvtap: left promiscuous mode [ 601.046674][ T52] veth0_macvtap: left promiscuous mode [ 601.061636][ T52] veth1_vlan: left promiscuous mode [ 601.075894][ T52] veth0_vlan: left promiscuous mode [ 601.479810][T16667] FAULT_INJECTION: forcing a failure. [ 601.479810][T16667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 601.535952][T16667] CPU: 1 UID: 0 PID: 16667 Comm: syz.1.2435 Not tainted 6.13.0-rc5-syzkaller #0 [ 601.545082][T16667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 601.555186][T16667] Call Trace: [ 601.558484][T16667] [ 601.561455][T16667] dump_stack_lvl+0x16c/0x1f0 [ 601.566190][T16667] should_fail_ex+0x497/0x5b0 [ 601.570924][T16667] _copy_to_user+0x32/0xd0 [ 601.575392][T16667] simple_read_from_buffer+0xd0/0x160 [ 601.580802][T16667] proc_fail_nth_read+0x198/0x270 [ 601.585887][T16667] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 601.591486][T16667] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 601.597082][T16667] vfs_read+0x1df/0xbe0 [ 601.601277][T16667] ? __fget_files+0x1fc/0x3a0 [ 601.605993][T16667] ? __pfx___mutex_lock+0x10/0x10 [ 601.611059][T16667] ? __pfx_vfs_read+0x10/0x10 [ 601.615802][T16667] ? __fget_files+0x206/0x3a0 [ 601.620545][T16667] ksys_read+0x12b/0x250 [ 601.624830][T16667] ? __pfx_ksys_read+0x10/0x10 [ 601.629680][T16667] do_syscall_64+0xcd/0x250 [ 601.634246][T16667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.640193][T16667] RIP: 0033:0x7f520b38473c [ 601.644643][T16667] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 601.664291][T16667] RSP: 002b:00007f520c12f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 601.672738][T16667] RAX: ffffffffffffffda RBX: 00007f520b575fa0 RCX: 00007f520b38473c [ 601.680731][T16667] RDX: 000000000000000f RSI: 00007f520c12f0a0 RDI: 000000000000000e [ 601.688729][T16667] RBP: 00007f520c12f090 R08: 0000000000000000 R09: 0000000000000000 [ 601.696733][T16667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.704726][T16667] R13: 0000000000000000 R14: 00007f520b575fa0 R15: 00007ffeb76e30a8 [ 601.712741][T16667] [ 602.581661][T16509] veth0_macvtap: entered promiscuous mode [ 602.654433][T16509] veth1_macvtap: entered promiscuous mode [ 602.740823][T16509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.769631][T16509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.794891][T16509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.803274][T16673] ima: policy update failed [ 602.805922][ T29] audit: type=1807 audit(18081.770:20): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 602.833130][T16509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.853827][ T29] audit: type=1802 audit(18081.770:21): pid=16673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.2437" res=0 errno=0 [ 602.865220][T16509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.872468][ T29] audit: type=1802 audit(18081.780:22): pid=16673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2437" res=0 errno=0 [ 602.907403][T16509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.917660][T16509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.928423][T16509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.939708][T16509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.949850][T16509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.960586][T16509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.970800][T16509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.981368][T16509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.991471][T16509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.002128][T16509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.012255][T16509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.023009][T16509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.034259][T16509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.044577][T16509] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.053347][T16509] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.062178][T16509] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.071085][T16509] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.441484][T16441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.468653][T16441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.554419][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.574757][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.744549][T16732] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2447'. [ 606.518364][T16739] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 607.737074][T16774] ima: policy update failed [ 607.744161][ T29] audit: type=1807 audit(18086.710:23): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 607.761598][ T29] audit: type=1802 audit(18086.710:24): pid=16774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.2458" res=0 errno=0 [ 607.806378][ T29] audit: type=1802 audit(18086.710:25): pid=16774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2458" res=0 errno=0 [ 607.897521][T16776] netlink: 'syz.4.2459': attribute type 33 has an invalid length. [ 607.919353][T16776] netlink: 322 bytes leftover after parsing attributes in process `syz.4.2459'. [ 608.763803][T16787] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 609.170295][T16792] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 609.474276][T16797] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 610.248450][T16829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2470'. [ 611.164932][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 611.184280][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 611.193001][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 611.204440][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 611.219516][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 611.228506][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 611.527578][T16846] chnl_net:caif_netlink_parms(): no params data found [ 611.703192][T16846] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.711187][T16846] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.730801][T16846] bridge_slave_0: entered allmulticast mode [ 611.739947][T16846] bridge_slave_0: entered promiscuous mode [ 611.757085][T16846] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.769761][T16846] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.778569][T16846] bridge_slave_1: entered allmulticast mode [ 611.791510][T16846] bridge_slave_1: entered promiscuous mode [ 611.837200][T16846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.852548][T16846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.889686][T16846] team0: Port device team_slave_0 added [ 611.900375][T16846] team0: Port device team_slave_1 added [ 611.939067][T16846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.946155][T16846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.972185][ C0] vkms_vblank_simulate: vblank timer overrun [ 611.980130][T16846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.992831][T16846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.000123][T16846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.026082][ C0] vkms_vblank_simulate: vblank timer overrun [ 612.043925][T16846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.150882][T16846] hsr_slave_0: entered promiscuous mode [ 612.151529][T16864] FAULT_INJECTION: forcing a failure. [ 612.151529][T16864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.171215][T16864] CPU: 1 UID: 0 PID: 16864 Comm: syz.0.2480 Not tainted 6.13.0-rc5-syzkaller #0 [ 612.171564][T16846] hsr_slave_1: entered promiscuous mode [ 612.180272][T16864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 612.180295][T16864] Call Trace: [ 612.180306][T16864] [ 612.180320][T16864] dump_stack_lvl+0x16c/0x1f0 [ 612.180367][T16864] should_fail_ex+0x497/0x5b0 [ 612.180416][T16864] _copy_from_user+0x2e/0xd0 [ 612.180464][T16864] copy_msghdr_from_user+0x99/0x160 [ 612.180517][T16864] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 612.180586][T16864] ___sys_sendmsg+0xff/0x1e0 [ 612.180638][T16864] ? __pfx____sys_sendmsg+0x10/0x10 [ 612.237277][T16864] ? __pfx_lock_release+0x10/0x10 [ 612.242373][T16864] ? trace_lock_acquire+0x14e/0x1f0 [ 612.247647][T16864] ? __fget_files+0x206/0x3a0 [ 612.252392][T16864] __sys_sendmsg+0x16e/0x220 [ 612.257052][T16864] ? __pfx___sys_sendmsg+0x10/0x10 [ 612.262264][T16864] do_syscall_64+0xcd/0x250 [ 612.266839][T16864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.272798][T16864] RIP: 0033:0x7fdd25385d29 [ 612.277273][T16864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.296940][T16864] RSP: 002b:00007fdd261d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 612.305423][T16864] RAX: ffffffffffffffda RBX: 00007fdd25575fa0 RCX: 00007fdd25385d29 [ 612.313454][T16864] RDX: 0000000000008000 RSI: 0000000020007240 RDI: 0000000000000003 [ 612.321479][T16864] RBP: 00007fdd261d8090 R08: 0000000000000000 R09: 0000000000000000 [ 612.329495][T16864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.337497][T16864] R13: 0000000000000000 R14: 00007fdd25575fa0 R15: 00007ffc8a60e4f8 [ 612.345517][T16864] [ 612.357315][T16846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 612.373695][T16846] Cannot create hsr debugfs directory [ 612.772256][T16846] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.016180][T16846] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.181027][T16846] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.304100][T16846] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.313892][ T5837] Bluetooth: hci4: command tx timeout [ 613.625665][T16846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 613.648749][T16846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 613.698060][T16846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 613.751812][T16846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 614.015741][T16846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.077228][T16846] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.109133][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.116325][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.156228][T16441] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.163451][T16441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.475980][T16846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.544189][T16846] veth0_vlan: entered promiscuous mode [ 614.581135][T16846] veth1_vlan: entered promiscuous mode [ 614.625431][T16846] veth0_macvtap: entered promiscuous mode [ 614.637471][T16846] veth1_macvtap: entered promiscuous mode [ 614.663109][T16846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.677708][T16846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.695525][T16846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.713319][T16846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.733100][T16846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.751899][T16846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.780599][T16846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.802103][T16846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.815059][T16846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.826628][T16846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.838700][T16846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.857117][T16846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.879559][T16901] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 614.906071][T16846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.919896][T16846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.933052][T16846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.944484][T16846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.967855][T16846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.983696][T16846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.023976][T16846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.042644][T16846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.064647][T16846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.108081][T16846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.119178][T16846] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.130127][T16846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.139394][T16846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.161095][T16846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.202360][T16915] HfR: entered promiscuous mode [ 615.403847][ T5837] Bluetooth: hci4: command tx timeout [ 615.460694][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.461340][T16441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.473697][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.476878][T16441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.022394][T16929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2476'. [ 617.299639][T16956] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2504'. [ 617.475746][ T5837] Bluetooth: hci4: command tx timeout [ 617.646263][T16964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2507'. [ 618.795971][T16981] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 619.562463][ T5837] Bluetooth: hci4: command tx timeout [ 620.851264][T17004] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 621.835057][T17031] FAULT_INJECTION: forcing a failure. [ 621.835057][T17031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.883933][T17031] CPU: 1 UID: 0 PID: 17031 Comm: syz.1.2520 Not tainted 6.13.0-rc5-syzkaller #0 [ 621.893081][T17031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 621.903181][T17031] Call Trace: [ 621.906483][T17031] [ 621.909436][T17031] dump_stack_lvl+0x16c/0x1f0 [ 621.914155][T17031] should_fail_ex+0x497/0x5b0 [ 621.918874][T17031] _copy_from_user+0x2e/0xd0 [ 621.923509][T17031] copy_msghdr_from_user+0x99/0x160 [ 621.928756][T17031] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 621.934631][T17031] ___sys_sendmsg+0xff/0x1e0 [ 621.939265][T17031] ? __pfx____sys_sendmsg+0x10/0x10 [ 621.944520][T17031] ? __pfx_lock_release+0x10/0x10 [ 621.949597][T17031] ? trace_lock_acquire+0x14e/0x1f0 [ 621.954843][T17031] ? __fget_files+0x206/0x3a0 [ 621.959565][T17031] __sys_sendmsg+0x16e/0x220 [ 621.964204][T17031] ? __pfx___sys_sendmsg+0x10/0x10 [ 621.969383][T17031] do_syscall_64+0xcd/0x250 [ 621.973926][T17031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.979855][T17031] RIP: 0033:0x7f520b385d29 [ 621.984330][T17031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.003969][T17031] RSP: 002b:00007f520c12f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 622.012431][T17031] RAX: ffffffffffffffda RBX: 00007f520b575fa0 RCX: 00007f520b385d29 [ 622.020425][T17031] RDX: 0000000020040000 RSI: 0000000020000500 RDI: 0000000000000003 [ 622.028422][T17031] RBP: 00007f520c12f090 R08: 0000000000000000 R09: 0000000000000000 [ 622.036419][T17031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.044417][T17031] R13: 0000000000000000 R14: 00007f520b575fa0 R15: 00007ffeb76e30a8 [ 622.052426][T17031] [ 623.979095][T17056] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 624.616381][T17079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2534'. [ 625.281096][T17087] zram: Added device: zram1 [ 625.528806][T17098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2540'. [ 627.791384][T17130] FAULT_INJECTION: forcing a failure. [ 627.791384][T17130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.823498][T17130] CPU: 1 UID: 0 PID: 17130 Comm: syz.3.2551 Not tainted 6.13.0-rc5-syzkaller #0 [ 627.832617][T17130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 627.842735][T17130] Call Trace: [ 627.846063][T17130] [ 627.849044][T17130] dump_stack_lvl+0x16c/0x1f0 [ 627.853796][T17130] should_fail_ex+0x497/0x5b0 [ 627.858546][T17130] _copy_to_iter+0x29b/0x1400 [ 627.863306][T17130] ? trace_lock_acquire+0x14e/0x1f0 [ 627.868587][T17130] ? __pfx__copy_to_iter+0x10/0x10 [ 627.873772][T17130] ? __virt_addr_valid+0x1a4/0x590 [ 627.878958][T17130] ? __virt_addr_valid+0x5e/0x590 [ 627.884049][T17130] ? __phys_addr+0xc6/0x150 [ 627.888618][T17130] ? __phys_addr_symbol+0x30/0x80 [ 627.893714][T17130] ? __check_object_size+0x488/0x710 [ 627.899076][T17130] simple_copy_to_iter+0x4f/0x80 [ 627.904079][T17130] __skb_datagram_iter+0x5a6/0x8c0 [ 627.909252][T17130] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 627.914959][T17130] skb_copy_datagram_iter+0x40/0x50 [ 627.920227][T17130] tcp_recvmsg_locked+0x1aa3/0x2780 [ 627.925512][T17130] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 627.931130][T17130] ? __local_bh_enable_ip+0xa4/0x120 [ 627.936489][T17130] tcp_recvmsg+0x12e/0x680 [ 627.940969][T17130] ? __pfx_tcp_recvmsg+0x10/0x10 [ 627.945978][T17130] ? aa_sk_perm+0x2f5/0xb20 [ 627.950561][T17130] ? __pfx_tcp_recvmsg+0x10/0x10 [ 627.955557][T17130] inet_recvmsg+0x12b/0x6a0 [ 627.960117][T17130] ? __pfx_inet_recvmsg+0x10/0x10 [ 627.965216][T17130] sock_recvmsg+0x1b2/0x250 [ 627.969781][T17130] sock_read_iter+0x2bb/0x3b0 [ 627.974521][T17130] ? __pfx_sock_read_iter+0x10/0x10 [ 627.979807][T17130] do_iter_readv_writev+0x614/0x7f0 [ 627.985071][T17130] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 627.990869][T17130] ? bpf_lsm_file_permission+0x9/0x10 [ 627.996323][T17130] ? security_file_permission+0x71/0x210 [ 628.002039][T17130] vfs_readv+0x4cf/0x890 [ 628.006343][T17130] ? find_held_lock+0x2d/0x110 [ 628.011183][T17130] ? __pfx_vfs_readv+0x10/0x10 [ 628.016009][T17130] ? find_held_lock+0x2d/0x110 [ 628.020844][T17130] ? __pfx_lock_release+0x10/0x10 [ 628.025924][T17130] ? trace_lock_acquire+0x14e/0x1f0 [ 628.031204][T17130] ? __fget_files+0x206/0x3a0 [ 628.035958][T17130] ? do_readv+0x297/0x340 [ 628.040344][T17130] do_readv+0x297/0x340 [ 628.044557][T17130] ? __pfx_do_readv+0x10/0x10 [ 628.049299][T17130] do_syscall_64+0xcd/0x250 [ 628.053870][T17130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.059832][T17130] RIP: 0033:0x7f4975385d29 [ 628.064297][T17130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.083970][T17130] RSP: 002b:00007f49731f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 628.092452][T17130] RAX: ffffffffffffffda RBX: 00007f4975575fa0 RCX: 00007f4975385d29 [ 628.100483][T17130] RDX: 0000000000000001 RSI: 0000000020000a80 RDI: 0000000000000003 [ 628.108541][T17130] RBP: 00007f49731f6090 R08: 0000000000000000 R09: 0000000000000000 [ 628.116565][T17130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.124592][T17130] R13: 0000000000000000 R14: 00007f4975575fa0 R15: 00007fffa2f54988 [ 628.132638][T17130] [ 629.031677][T17148] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 629.881946][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.888438][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.349917][T17163] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 631.520868][T17199] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 631.772851][T17214] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2570'. [ 632.371458][T17223] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 633.349862][T17249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2580'. [ 633.369160][T17229] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 634.099154][T17269] Process accounting resumed [ 635.127496][T17287] netlink: 'syz.1.2592': attribute type 4 has an invalid length. [ 635.208993][T17287] netlink: 'syz.1.2592': attribute type 4 has an invalid length. [ 635.485141][T17294] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 635.877477][T17307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2596'. [ 636.802496][T17338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2602'. [ 638.464984][T17351] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 639.302416][ T29] audit: type=1326 audit(18118.270:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17368 comm="syz.1.2612" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f520b385d29 code=0x0 [ 639.323721][ C0] vkms_vblank_simulate: vblank timer overrun [ 639.900553][T17382] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 640.260661][T17394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2616'. [ 640.897363][T17398] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 641.138309][T17401] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 642.224174][T17433] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2627'. [ 642.257672][T17433] nbd: must specify at least one socket [ 642.968184][T17448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2631'. [ 643.964202][T17458] netlink: 206 bytes leftover after parsing attributes in process `syz.0.2635'. [ 644.036383][T17458] netlink: 'syz.0.2635': attribute type 2 has an invalid length. [ 644.418804][T17453] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 645.950150][T17480] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 646.793821][ T29] audit: type=1326 audit(18125.750:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17495 comm="syz.4.2641" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f152bb85d29 code=0x0 [ 647.083978][T17512] FAULT_INJECTION: forcing a failure. [ 647.083978][T17512] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 647.177506][T17512] CPU: 1 UID: 0 PID: 17512 Comm: syz.1.2648 Not tainted 6.13.0-rc5-syzkaller #0 [ 647.186637][T17512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 647.196747][T17512] Call Trace: [ 647.200069][T17512] [ 647.203041][T17512] dump_stack_lvl+0x16c/0x1f0 [ 647.207801][T17512] should_fail_ex+0x497/0x5b0 [ 647.212542][T17512] ? fs_reclaim_acquire+0xae/0x150 [ 647.217723][T17512] should_fail_alloc_page+0xe7/0x130 [ 647.223097][T17512] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 647.229325][T17512] __alloc_pages_noprof+0x190/0x25b0 [ 647.234694][T17512] ? hlock_class+0x4e/0x130 [ 647.241136][T17512] ? mark_lock+0xb5/0xc60 [ 647.245549][T17512] ? is_bpf_text_address+0x8a/0x1a0 [ 647.250804][T17512] ? __pfx_lock_release+0x10/0x10 [ 647.255869][T17512] ? trace_lock_acquire+0x14e/0x1f0 [ 647.261128][T17512] ? __pfx_mark_lock+0x10/0x10 [ 647.265945][T17512] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 647.271709][T17512] ? is_bpf_text_address+0x30/0x1a0 [ 647.276958][T17512] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 647.283161][T17512] ? hlock_class+0x4e/0x130 [ 647.287719][T17512] ? arch_stack_walk+0xa7/0x100 [ 647.292609][T17512] ? hlock_class+0x4e/0x130 [ 647.297148][T17512] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 647.303079][T17512] ? policy_nodemask+0xea/0x4e0 [ 647.307978][T17512] alloc_pages_mpol_noprof+0x2c9/0x610 [ 647.313507][T17512] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 647.319548][T17512] ? __pfx___lock_acquire+0x10/0x10 [ 647.324800][T17512] pte_alloc_one+0x20/0x390 [ 647.329356][T17512] do_pte_missing+0x1ae7/0x3e00 [ 647.334269][T17512] __handle_mm_fault+0x103c/0x2a40 [ 647.339435][T17512] ? __pfx___handle_mm_fault+0x10/0x10 [ 647.344971][T17512] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 647.350653][T17512] ? find_vma+0xc0/0x140 [ 647.354927][T17512] ? __pfx_find_vma+0x10/0x10 [ 647.359643][T17512] handle_mm_fault+0x3fa/0xaa0 [ 647.364485][T17512] do_user_addr_fault+0x7a3/0x13f0 [ 647.369636][T17512] exc_page_fault+0x5c/0xc0 [ 647.374177][T17512] asm_exc_page_fault+0x26/0x30 [ 647.379067][T17512] RIP: 0010:__get_user_4+0x1a/0x30 [ 647.384211][T17512] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 ba 00 f0 ff ff ff 7f 00 00 48 39 c2 48 19 d2 48 09 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 [ 647.406289][T17512] RSP: 0018:ffffc9000c45fde0 EFLAGS: 00050202 [ 647.412387][T17512] RAX: 0000000000000004 RBX: 0000000000000002 RCX: ffffc9000c45fd48 [ 647.420384][T17512] RDX: 0000000000000000 RSI: ffffffff88c6ffe0 RDI: ffffffff8bb17040 [ 647.428383][T17512] RBP: 1ffff9200188bfbe R08: 0000000000000000 R09: fffffbfff2039caa [ 647.436385][T17512] R10: ffffffff901ce557 R11: 0000000000000001 R12: 0000000000000004 [ 647.444407][T17512] R13: ffff88807b791000 R14: dffffc0000000000 R15: 0000000000000004 [ 647.452415][T17512] ? snd_seq_oss_ioctl+0x5f0/0xd90 [ 647.457574][T17512] snd_seq_oss_ioctl+0x5f8/0xd90 [ 647.462553][T17512] ? __pfx_snd_seq_oss_ioctl+0x10/0x10 [ 647.468060][T17512] ? __fget_files+0x206/0x3a0 [ 647.472781][T17512] odev_ioctl+0x94/0x120 [ 647.477056][T17512] ? __pfx_odev_ioctl+0x10/0x10 [ 647.481939][T17512] __x64_sys_ioctl+0x190/0x200 [ 647.486745][T17512] do_syscall_64+0xcd/0x250 [ 647.491293][T17512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.497232][T17512] RIP: 0033:0x7f520b385d29 [ 647.501672][T17512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.521308][T17512] RSP: 002b:00007f520c12f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 647.529753][T17512] RAX: ffffffffffffffda RBX: 00007f520b575fa0 RCX: 00007f520b385d29 [ 647.537773][T17512] RDX: 0000000000000004 RSI: 000000004004510d RDI: 0000000000000004 [ 647.545769][T17512] RBP: 00007f520c12f090 R08: 0000000000000000 R09: 0000000000000000 [ 647.553785][T17512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.561785][T17512] R13: 0000000000000000 R14: 00007f520b575fa0 R15: 00007ffeb76e30a8 [ 647.569822][T17512] [ 647.840192][T17519] openvswitch: HfR: Dropping previously announced user features [ 647.855850][T17519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2649'. [ 647.865274][T17519] HfR: left promiscuous mode [ 649.282598][T17560] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000010006 [ 649.350653][T17563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 649.439729][ T29] audit: type=1326 audit(18128.410:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17561 comm="syz.0.2659" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd25385d29 code=0x0 [ 651.393467][T17599] HfR: entered promiscuous mode [ 651.451662][T17599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2668'. [ 651.503980][T17599] HfR: left promiscuous mode [ 651.542587][T17602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2668'. [ 652.029607][T17611] openvswitch: netlink: Key type 29 is not supported [ 652.355609][T17613] netlink: 'syz.3.2672': attribute type 3 has an invalid length. [ 652.393988][T17613] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2672'. [ 653.185761][T17619] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 653.507055][T17624] Process accounting resumed [ 653.626186][T17630] Process accounting resumed [ 656.925691][T17673] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 660.185994][T17722] FAULT_INJECTION: forcing a failure. [ 660.185994][T17722] name failslab, interval 1, probability 0, space 0, times 0 [ 660.256000][T17722] CPU: 0 UID: 0 PID: 17722 Comm: syz.3.2698 Not tainted 6.13.0-rc5-syzkaller #0 [ 660.265124][T17722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 660.275240][T17722] Call Trace: [ 660.278562][T17722] [ 660.281538][T17722] dump_stack_lvl+0x16c/0x1f0 [ 660.286288][T17722] should_fail_ex+0x497/0x5b0 [ 660.291032][T17722] ? fs_reclaim_acquire+0xae/0x150 [ 660.296213][T17722] should_failslab+0xc2/0x120 [ 660.300990][T17722] __kmalloc_noprof+0xce/0x4f0 [ 660.305826][T17722] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 660.311524][T17722] ? tomoyo_realpath_from_path+0xbf/0x710 [ 660.317314][T17722] tomoyo_realpath_from_path+0xbf/0x710 [ 660.322926][T17722] ? tomoyo_path_number_perm+0x235/0x5b0 [ 660.328642][T17722] tomoyo_path_number_perm+0x248/0x5b0 [ 660.334179][T17722] ? tomoyo_path_number_perm+0x235/0x5b0 [ 660.339894][T17722] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 660.345986][T17722] ? __pfx_lock_release+0x10/0x10 [ 660.351067][T17722] ? trace_lock_acquire+0x14e/0x1f0 [ 660.356340][T17722] ? lock_acquire+0x2f/0xb0 [ 660.360901][T17722] ? __fget_files+0x40/0x3a0 [ 660.365561][T17722] ? __fget_files+0x206/0x3a0 [ 660.370302][T17722] security_file_ioctl+0x9b/0x240 [ 660.375389][T17722] __x64_sys_ioctl+0xb7/0x200 [ 660.380129][T17722] do_syscall_64+0xcd/0x250 [ 660.384701][T17722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.390658][T17722] RIP: 0033:0x7f4975385d29 [ 660.395123][T17722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.414792][T17722] RSP: 002b:00007f49731b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 660.423269][T17722] RAX: ffffffffffffffda RBX: 00007f4975576160 RCX: 00007f4975385d29 [ 660.431293][T17722] RDX: 0000000000000000 RSI: 0000000000005412 RDI: 0000000000000005 [ 660.439316][T17722] RBP: 00007f49731b4090 R08: 0000000000000000 R09: 0000000000000000 [ 660.447342][T17722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.455375][T17722] R13: 0000000000000001 R14: 00007f4975576160 R15: 00007fffa2f54988 [ 660.463433][T17722] [ 660.494177][T17722] ERROR: Out of memory at tomoyo_realpath_from_path. [ 660.589554][T17725] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2699'. [ 660.611077][T17725] IPv6: NLM_F_CREATE should be specified when creating new route [ 662.068326][T17738] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 662.826756][T17765] vivid-013: ================= START STATUS ================= [ 662.863736][T17765] vivid-013: Generate PTS: true [ 662.885603][T17765] vivid-013: Generate SCR: true [ 662.902166][T17765] tpg source WxH: 640x360 (Y'CbCr) [ 662.943870][T17765] tpg field: 1 [ 662.970350][T17765] tpg crop: 640x360@0x0 [ 663.007831][T17765] tpg compose: 640x360@0x0 [ 663.032798][T17765] tpg colorspace: 8 [ 663.051737][T17765] tpg transfer function: 0/0 [ 663.072295][T17765] tpg Y'CbCr encoding: 0/0 [ 663.094886][T17765] tpg quantization: 0/0 [ 663.116578][T17765] tpg RGB range: 0/2 [ 663.130127][T17765] vivid-013: ================== END STATUS ================== [ 663.294542][T17771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2711'. [ 664.436843][T17777] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 666.719737][T17826] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2725'. [ 666.732577][T17831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2733'. [ 666.751330][T17826] IPv6: NLM_F_CREATE should be specified when creating new route [ 666.948029][T17829] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 670.047705][T17878] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 670.485517][T17898] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 671.264012][T17913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2746'. [ 672.935314][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 673.338903][ T29] audit: type=1326 audit(4294985448.307:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.3.2752" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4975385d29 code=0x0 [ 673.360598][ C1] vkms_vblank_simulate: vblank timer overrun [ 674.812957][T17965] device-mapper: ioctl: Unable to rename non-existent device, to [ 674.859945][T17965] lo: entered allmulticast mode [ 674.929020][ T29] audit: type=1806 audit(4294985449.887:30): xattr="." res=0 [ 675.025208][T17970] lo: left allmulticast mode [ 675.072162][T17973] FAULT_INJECTION: forcing a failure. [ 675.072162][T17973] name failslab, interval 1, probability 0, space 0, times 0 [ 675.223822][T17973] CPU: 1 UID: 0 PID: 17973 Comm: syz.1.2757 Not tainted 6.13.0-rc5-syzkaller #0 [ 675.232935][T17973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 675.243019][T17973] Call Trace: [ 675.246322][T17973] [ 675.249272][T17973] dump_stack_lvl+0x16c/0x1f0 [ 675.253991][T17973] should_fail_ex+0x497/0x5b0 [ 675.258701][T17973] ? fs_reclaim_acquire+0xae/0x150 [ 675.263864][T17973] should_failslab+0xc2/0x120 [ 675.268605][T17973] __kmalloc_noprof+0xce/0x4f0 [ 675.273424][T17973] ? d_absolute_path+0x137/0x1b0 [ 675.278450][T17973] ? tomoyo_encode2+0x100/0x3e0 [ 675.283354][T17973] tomoyo_encode2+0x100/0x3e0 [ 675.288082][T17973] tomoyo_realpath_from_path+0x1a7/0x710 [ 675.293773][T17973] tomoyo_path_number_perm+0x248/0x5b0 [ 675.299282][T17973] ? tomoyo_path_number_perm+0x235/0x5b0 [ 675.304982][T17973] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 675.311055][T17973] ? __pfx_lock_release+0x10/0x10 [ 675.316119][T17973] ? trace_lock_acquire+0x14e/0x1f0 [ 675.321382][T17973] ? lock_acquire+0x2f/0xb0 [ 675.325922][T17973] ? __fget_files+0x40/0x3a0 [ 675.330558][T17973] ? __fget_files+0x206/0x3a0 [ 675.335281][T17973] security_file_ioctl+0x9b/0x240 [ 675.340379][T17973] __x64_sys_ioctl+0xb7/0x200 [ 675.345106][T17973] do_syscall_64+0xcd/0x250 [ 675.349664][T17973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.355600][T17973] RIP: 0033:0x7f520b385d29 [ 675.360049][T17973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.379705][T17973] RSP: 002b:00007f520c0ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 675.388157][T17973] RAX: ffffffffffffffda RBX: 00007f520b576160 RCX: 00007f520b385d29 [ 675.396155][T17973] RDX: 0000000000000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 675.404150][T17973] RBP: 00007f520c0ed090 R08: 0000000000000000 R09: 0000000000000000 [ 675.412144][T17973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.420143][T17973] R13: 0000000000000001 R14: 00007f520b576160 R15: 00007ffeb76e30a8 [ 675.428159][T17973] [ 675.431216][ C1] vkms_vblank_simulate: vblank timer overrun [ 675.464332][T17973] ERROR: Out of memory at tomoyo_realpath_from_path. [ 678.798063][T18014] FAULT_INJECTION: forcing a failure. [ 678.798063][T18014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 678.838524][T18014] CPU: 1 UID: 0 PID: 18014 Comm: syz.4.2773 Not tainted 6.13.0-rc5-syzkaller #0 [ 678.847654][T18014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 678.857780][T18014] Call Trace: [ 678.861105][T18014] [ 678.864077][T18014] dump_stack_lvl+0x16c/0x1f0 [ 678.868823][T18014] should_fail_ex+0x497/0x5b0 [ 678.873576][T18014] _copy_to_iter+0x29b/0x1400 [ 678.878323][T18014] ? trace_lock_acquire+0x14e/0x1f0 [ 678.883588][T18014] ? __pfx_lock_release+0x10/0x10 [ 678.888671][T18014] ? __pfx__copy_to_iter+0x10/0x10 [ 678.893849][T18014] ? __virt_addr_valid+0x1a4/0x590 [ 678.899035][T18014] ? __virt_addr_valid+0x5e/0x590 [ 678.904123][T18014] ? __phys_addr_symbol+0x30/0x80 [ 678.909211][T18014] ? __check_object_size+0x488/0x710 [ 678.914567][T18014] seq_read_iter+0xd00/0x12b0 [ 678.919326][T18014] kernfs_fop_read_iter+0x414/0x580 [ 678.924601][T18014] ? rw_verify_area+0xd0/0x700 [ 678.929428][T18014] vfs_read+0x87f/0xbe0 [ 678.933649][T18014] ? __pfx_vfs_read+0x10/0x10 [ 678.938480][T18014] ksys_read+0x12b/0x250 [ 678.942779][T18014] ? __pfx_ksys_read+0x10/0x10 [ 678.947619][T18014] do_syscall_64+0xcd/0x250 [ 678.952197][T18014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.958130][T18014] RIP: 0033:0x7f152bb85d29 [ 678.962571][T18014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 678.982221][T18014] RSP: 002b:00007f152c99e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 678.990668][T18014] RAX: ffffffffffffffda RBX: 00007f152bd75fa0 RCX: 00007f152bb85d29 [ 678.998678][T18014] RDX: 0000000000000011 RSI: 00000000200000c0 RDI: 0000000000000004 [ 679.006681][T18014] RBP: 00007f152c99e090 R08: 0000000000000000 R09: 0000000000000000 [ 679.014680][T18014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.022680][T18014] R13: 0000000000000000 R14: 00007f152bd75fa0 R15: 00007ffe8de73b38 [ 679.030705][T18014] [ 679.137011][T18014] netlink: 'syz.4.2773': attribute type 11 has an invalid length. [ 679.308869][T18018] netlink: 'syz.3.2774': attribute type 11 has an invalid length. [ 679.458932][T18026] netlink: 326 bytes leftover after parsing attributes in process `syz.0.2776'. [ 679.659879][T18030] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2777'. [ 680.666382][ T29] audit: type=1326 audit(4294985455.637:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18045 comm="syz.4.2783" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f152bb85d29 code=0x0 [ 680.926696][T18040] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 681.260230][T18056] Process accounting resumed [ 681.764060][T18067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2786'. [ 682.951020][T18069] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 684.104742][T18093] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 684.745455][T18111] Process accounting resumed [ 687.016992][T18143] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 688.573990][T18169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2816'. [ 689.249190][ T29] audit: type=1326 audit(4294985464.217:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18181 comm="syz.3.2820" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4975385d29 code=0x0 [ 689.270949][ C1] vkms_vblank_simulate: vblank timer overrun [ 690.767593][T18206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2826'. [ 690.838464][T18204] Process accounting resumed [ 691.317819][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.324289][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.513705][T18201] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 692.252165][ T29] audit: type=1326 audit(4294985467.217:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18223 comm="syz.1.2832" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f520b385d29 code=0x0 [ 692.273882][ C1] vkms_vblank_simulate: vblank timer overrun [ 693.066065][T18238] Process accounting resumed [ 693.283858][T18244] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 694.034741][T18241] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 694.325267][T18269] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 694.689419][T18278] Process accounting resumed [ 695.452361][T18281] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 696.293121][ T29] audit: type=1326 audit(4294985471.257:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18308 comm="syz.1.2852" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f520b385d29 code=0x0 [ 696.578555][T18301] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 697.338946][ T29] audit: type=1326 audit(4294985472.287:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18327 comm="syz.4.2859" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f152bb85d29 code=0x0 [ 698.939019][T18364] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 699.071878][T18353] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 699.523727][T18378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2871'. [ 699.691689][ T29] audit: type=1326 audit(4294985474.657:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18380 comm="syz.1.2873" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f520b385d29 code=0x0 [ 700.748685][T18406] FAULT_INJECTION: forcing a failure. [ 700.748685][T18406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 700.794309][T18406] CPU: 0 UID: 0 PID: 18406 Comm: syz.3.2880 Not tainted 6.13.0-rc5-syzkaller #0 [ 700.803432][T18406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 700.813544][T18406] Call Trace: [ 700.816867][T18406] [ 700.819845][T18406] dump_stack_lvl+0x16c/0x1f0 [ 700.824594][T18406] should_fail_ex+0x497/0x5b0 [ 700.829347][T18406] _copy_from_user+0x2e/0xd0 [ 700.834012][T18406] copy_msghdr_from_user+0x99/0x160 [ 700.839285][T18406] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 700.845172][T18406] ? __pfx___lock_acquire+0x10/0x10 [ 700.850430][T18406] ___sys_recvmsg+0xdc/0x1a0 [ 700.855094][T18406] ? __pfx____sys_recvmsg+0x10/0x10 [ 700.860367][T18406] ? find_held_lock+0x2d/0x110 [ 700.865219][T18406] ? __pfx___might_resched+0x10/0x10 [ 700.870560][T18406] ? __might_fault+0xe3/0x190 [ 700.875324][T18406] do_recvmmsg+0x2f8/0x740 [ 700.879814][T18406] ? __pfx_do_recvmmsg+0x10/0x10 [ 700.884818][T18406] ? vfs_write+0x306/0x1150 [ 700.889386][T18406] ? __mutex_unlock_slowpath+0x164/0x690 [ 700.895097][T18406] ? __fget_files+0x206/0x3a0 [ 700.899841][T18406] __x64_sys_recvmmsg+0x239/0x290 [ 700.904939][T18406] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 700.910575][T18406] do_syscall_64+0xcd/0x250 [ 700.915159][T18406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.921120][T18406] RIP: 0033:0x7f4975385d29 [ 700.925581][T18406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.945252][T18406] RSP: 002b:00007f49731f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 700.953726][T18406] RAX: ffffffffffffffda RBX: 00007f4975575fa0 RCX: 00007f4975385d29 [ 700.961747][T18406] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000004 [ 700.969773][T18406] RBP: 00007f49731f6090 R08: 0000000000000000 R09: 0000000000000000 [ 700.977797][T18406] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 700.978115][ T29] audit: type=1326 audit(4294985475.917:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18412 comm="syz.0.2883" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd25385d29 code=0x0 [ 700.985794][T18406] R13: 0000000000000000 R14: 00007f4975575fa0 R15: 00007fffa2f54988 [ 700.985841][T18406] [ 701.007899][ C1] vkms_vblank_simulate: vblank timer overrun [ 701.223167][T18413] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 701.945219][T18420] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 702.017452][ T29] audit: type=1326 audit(4294985476.987:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18431 comm="syz.0.2888" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd25385d29 code=0x0 [ 702.039148][ C1] vkms_vblank_simulate: vblank timer overrun [ 702.702492][T18443] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2889'. [ 703.209686][ T29] audit: type=1326 audit(4294985478.177:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18450 comm="syz.0.2892" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd25385d29 code=0x0 [ 703.534171][T18454] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 703.834678][T18459] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 703.868115][T18457] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 705.775937][ T29] audit: type=1326 audit(4294985480.747:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18506 comm="syz.4.2907" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f152bb85d29 code=0x0 [ 706.840635][ T29] audit: type=1326 audit(4294985481.807:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18532 comm="syz.4.2915" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f152bb85d29 code=0x0 [ 708.247628][T18547] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 710.100409][T18587] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 711.243877][T18612] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 711.965289][T18624] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 712.221549][ T29] audit: type=1326 audit(4294985487.187:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18640 comm="syz.3.2941" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4975385d29 code=0x0 [ 714.364845][T18657] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 714.481107][T18685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2948'. [ 716.633890][T18708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2953'. [ 717.451975][ T29] audit: type=1800 audit(4294985492.417:43): pid=18732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2961" name="lu_gp_id" dev="configfs" ino=78351 res=0 errno=0 [ 717.472367][ C1] vkms_vblank_simulate: vblank timer overrun [ 717.898765][T18729] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 718.835639][T18753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2962'. [ 719.032310][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 719.329875][T18760] Line length is too long: Should be less than 4094 [ 719.680083][T18770] FAULT_INJECTION: forcing a failure. [ 719.680083][T18770] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 719.695243][T18770] CPU: 1 UID: 0 PID: 18770 Comm: syz.0.2968 Not tainted 6.13.0-rc5-syzkaller #0 [ 719.704346][T18770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 719.714443][T18770] Call Trace: [ 719.717753][T18770] [ 719.720717][T18770] dump_stack_lvl+0x16c/0x1f0 [ 719.725464][T18770] should_fail_ex+0x497/0x5b0 [ 719.730209][T18770] ? fs_reclaim_acquire+0xae/0x150 [ 719.735380][T18770] should_fail_alloc_page+0xe7/0x130 [ 719.740736][T18770] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 719.746958][T18770] __alloc_pages_noprof+0x190/0x25b0 [ 719.752320][T18770] ? find_held_lock+0x2d/0x110 [ 719.757170][T18770] ? __pfx_mark_lock+0x10/0x10 [ 719.762007][T18770] ? is_bpf_text_address+0x8a/0x1a0 [ 719.767268][T18770] ? __pfx_lock_release+0x10/0x10 [ 719.772323][T18770] ? trace_lock_acquire+0x14e/0x1f0 [ 719.777561][T18770] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 719.783318][T18770] ? hlock_class+0x4e/0x130 [ 719.787858][T18770] ? mark_lock+0xb5/0xc60 [ 719.792229][T18770] ? hlock_class+0x4e/0x130 [ 719.796771][T18770] ? __lock_acquire+0xcc5/0x3c40 [ 719.801744][T18770] ? hlock_class+0x4e/0x130 [ 719.806284][T18770] ? __lock_acquire+0xcc5/0x3c40 [ 719.811255][T18770] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 719.817190][T18770] ? policy_nodemask+0xea/0x4e0 [ 719.822088][T18770] alloc_pages_mpol_noprof+0x2c9/0x610 [ 719.827601][T18770] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 719.833636][T18770] ? find_held_lock+0x2d/0x110 [ 719.838455][T18770] folio_alloc_mpol_noprof+0x36/0xd0 [ 719.843771][T18770] shmem_alloc_folio+0x135/0x160 [ 719.848756][T18770] shmem_alloc_and_add_folio+0x48b/0xc00 [ 719.854426][T18770] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 719.860356][T18770] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 719.866544][T18770] ? shmem_huge_global_enabled+0x176/0x250 [ 719.872392][T18770] ? shmem_allowable_huge_orders+0xcd/0x3e0 [ 719.878327][T18770] shmem_get_folio_gfp+0x689/0x1530 [ 719.883564][T18770] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 719.889245][T18770] shmem_fault+0x200/0xae0 [ 719.893698][T18770] ? __pfx_shmem_fault+0x10/0x10 [ 719.898675][T18770] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 719.904340][T18770] ? rcu_is_watching+0x12/0xc0 [ 719.909143][T18770] ? __pfx_filemap_map_pages+0x10/0x10 [ 719.914642][T18770] __do_fault+0x10a/0x490 [ 719.919001][T18770] ? __pfx_filemap_map_pages+0x10/0x10 [ 719.924500][T18770] do_pte_missing+0x1a8/0x3e00 [ 719.929322][T18770] __handle_mm_fault+0x103c/0x2a40 [ 719.934488][T18770] ? __pfx___handle_mm_fault+0x10/0x10 [ 719.939987][T18770] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 719.945666][T18770] ? find_vma+0xc0/0x140 [ 719.949944][T18770] ? __pfx_find_vma+0x10/0x10 [ 719.954656][T18770] handle_mm_fault+0x3fa/0xaa0 [ 719.959492][T18770] do_user_addr_fault+0x7a3/0x13f0 [ 719.964643][T18770] exc_page_fault+0x5c/0xc0 [ 719.969184][T18770] asm_exc_page_fault+0x26/0x30 [ 719.974101][T18770] RIP: 0010:__put_user_4+0x11/0x20 [ 719.979253][T18770] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 719.998910][T18770] RSP: 0018:ffffc9000df97ce8 EFLAGS: 00050202 [ 720.005008][T18770] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000000fdfd [ 720.013001][T18770] RDX: ffff888027559e00 RSI: ffffffff850b0c2a RDI: ffffffff8bc1adb8 [ 720.021000][T18770] RBP: 000000000000fdfd R08: 0000000000000000 R09: fffffbfff2039caa [ 720.028998][T18770] R10: ffffffff901ce557 R11: 0000000000000001 R12: ffff8880652a7000 [ 720.036993][T18770] R13: 0000000000005411 R14: ffffffff850a4610 R15: ffffffffffffffea [ 720.044993][T18770] ? __pfx_n_tty_ioctl+0x10/0x10 [ 720.049986][T18770] ? tty_chars_in_buffer+0x6a/0x90 [ 720.055133][T18770] n_tty_ioctl+0xc1/0x370 [ 720.059509][T18770] ? __pfx_vt_ioctl+0x10/0x10 [ 720.064235][T18770] ? __pfx_n_tty_ioctl+0x10/0x10 [ 720.069218][T18770] tty_ioctl+0x6ee/0x1640 [ 720.073594][T18770] ? __pfx_tty_ioctl+0x10/0x10 [ 720.078408][T18770] ? __pfx_lock_release+0x10/0x10 [ 720.083461][T18770] ? trace_lock_acquire+0x14e/0x1f0 [ 720.088712][T18770] ? __fget_files+0x206/0x3a0 [ 720.093426][T18770] ? __pfx_tty_ioctl+0x10/0x10 [ 720.098232][T18770] __x64_sys_ioctl+0x190/0x200 [ 720.103027][T18770] do_syscall_64+0xcd/0x250 [ 720.107573][T18770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.113502][T18770] RIP: 0033:0x7fdd25385d29 [ 720.117964][T18770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 720.137626][T18770] RSP: 002b:00007fdd261d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 720.146082][T18770] RAX: ffffffffffffffda RBX: 00007fdd25575fa0 RCX: 00007fdd25385d29 [ 720.154095][T18770] RDX: 000000000000fdfd RSI: 0000000000005411 RDI: 0000000000000003 [ 720.162095][T18770] RBP: 00007fdd261d8090 R08: 0000000000000000 R09: 0000000000000000 [ 720.170097][T18770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.178099][T18770] R13: 0000000000000000 R14: 00007fdd25575fa0 R15: 00007ffc8a60e4f8 [ 720.186117][T18770] [ 720.189181][ C1] vkms_vblank_simulate: vblank timer overrun [ 720.469696][T18781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2969'. [ 720.615253][T18784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2970'. [ 721.883959][T18787] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 722.059732][T18806] Line length is too long: Should be less than 4094 [ 722.230376][ T29] audit: type=1800 audit(4294985497.187:44): pid=18811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2976" name="lu_gp_id" dev="configfs" ino=79501 res=0 errno=0 [ 723.667349][T18836] FAULT_INJECTION: forcing a failure. [ 723.667349][T18836] name failslab, interval 1, probability 0, space 0, times 0 [ 723.731569][T18836] CPU: 1 UID: 0 PID: 18836 Comm: syz.4.2981 Not tainted 6.13.0-rc5-syzkaller #0 [ 723.740692][T18836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 723.750812][T18836] Call Trace: [ 723.754133][T18836] [ 723.757107][T18836] dump_stack_lvl+0x16c/0x1f0 [ 723.761852][T18836] should_fail_ex+0x497/0x5b0 [ 723.766596][T18836] ? fs_reclaim_acquire+0xae/0x150 [ 723.771785][T18836] should_failslab+0xc2/0x120 [ 723.776541][T18836] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 723.782416][T18836] ? __alloc_skb+0x2b3/0x380 [ 723.787086][T18836] __alloc_skb+0x2b3/0x380 [ 723.791562][T18836] ? __pfx___alloc_skb+0x10/0x10 [ 723.796540][T18836] ? lock_acquire+0x2f/0xb0 [ 723.801080][T18836] netlink_alloc_large_skb+0x69/0x130 [ 723.806497][T18836] netlink_sendmsg+0x689/0xd70 [ 723.811307][T18836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 723.816637][T18836] ____sys_sendmsg+0x9ae/0xb40 [ 723.821436][T18836] ? copy_msghdr_from_user+0x10b/0x160 [ 723.826938][T18836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 723.832269][T18836] ___sys_sendmsg+0x135/0x1e0 [ 723.836990][T18836] ? __pfx____sys_sendmsg+0x10/0x10 [ 723.842241][T18836] ? __pfx_lock_release+0x10/0x10 [ 723.847297][T18836] ? trace_lock_acquire+0x14e/0x1f0 [ 723.852545][T18836] ? __fget_files+0x206/0x3a0 [ 723.857278][T18836] __sys_sendmsg+0x16e/0x220 [ 723.861918][T18836] ? __pfx___sys_sendmsg+0x10/0x10 [ 723.867095][T18836] do_syscall_64+0xcd/0x250 [ 723.871671][T18836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.877613][T18836] RIP: 0033:0x7f152bb85d29 [ 723.882059][T18836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 723.901705][T18836] RSP: 002b:00007f152c99e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 723.910160][T18836] RAX: ffffffffffffffda RBX: 00007f152bd75fa0 RCX: 00007f152bb85d29 [ 723.918154][T18836] RDX: 0000000000008000 RSI: 0000000020007240 RDI: 0000000000000003 [ 723.926153][T18836] RBP: 00007f152c99e090 R08: 0000000000000000 R09: 0000000000000000 [ 723.934154][T18836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.942152][T18836] R13: 0000000000000000 R14: 00007f152bd75fa0 R15: 00007ffe8de73b38 [ 723.950164][T18836] [ 723.953322][ C1] vkms_vblank_simulate: vblank timer overrun [ 725.343853][T18846] Process accounting paused [ 725.701253][T18875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2991'. [ 725.776078][T18850] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 725.792141][T18877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2992'. [ 726.252950][T18887] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2993'. [ 726.333727][ T29] audit: type=1800 audit(4294985501.307:45): pid=18891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2994" name="lu_gp_id" dev="configfs" ino=78625 res=0 errno=0 [ 726.354115][ C1] vkms_vblank_simulate: vblank timer overrun [ 726.739567][T18887] team0: Port device team_slave_0 removed [ 726.908297][T18888] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 728.385839][T18909] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 728.610052][T18922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3001'. [ 729.687439][T18950] Process accounting resumed [ 729.726296][T18950] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 731.299916][T18986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3014'. [ 731.769014][T18986] team0: Port device team_slave_0 removed [ 733.138947][T19009] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 733.969868][T19035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3027'. [ 734.358328][T14517] Bluetooth: hci4: command 0x0406 tx timeout [ 735.202644][T19049] Process accounting resumed [ 735.208534][T19049] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 736.193204][T19071] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 736.500210][T19081] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 736.901930][T19094] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 737.476650][T19100] bridge0: port 3(syz_tun) entered blocking state [ 737.483376][T19100] bridge0: port 3(syz_tun) entered disabled state [ 737.503922][T19100] syz_tun: entered allmulticast mode [ 737.525144][T19100] syz_tun: entered promiscuous mode [ 737.532011][T19100] bridge0: port 3(syz_tun) entered blocking state [ 737.538661][T19100] bridge0: port 3(syz_tun) entered forwarding state [ 737.631626][T19098] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 737.899339][T19103] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 738.672973][T19120] FAULT_INJECTION: forcing a failure. [ 738.672973][T19120] name failslab, interval 1, probability 0, space 0, times 0 [ 738.697893][T19120] CPU: 0 UID: 0 PID: 19120 Comm: syz.3.3054 Not tainted 6.13.0-rc5-syzkaller #0 [ 738.707015][T19120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 738.717119][T19120] Call Trace: [ 738.720433][T19120] [ 738.723432][T19120] dump_stack_lvl+0x16c/0x1f0 [ 738.728172][T19120] should_fail_ex+0x497/0x5b0 [ 738.732909][T19120] ? fs_reclaim_acquire+0xae/0x150 [ 738.738080][T19120] should_failslab+0xc2/0x120 [ 738.742827][T19120] __kmalloc_noprof+0xce/0x4f0 [ 738.747647][T19120] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 738.753312][T19120] ? tomoyo_realpath_from_path+0xbf/0x710 [ 738.759070][T19120] tomoyo_realpath_from_path+0xbf/0x710 [ 738.764653][T19120] ? tomoyo_path_number_perm+0x235/0x5b0 [ 738.770337][T19120] tomoyo_path_number_perm+0x248/0x5b0 [ 738.775849][T19120] ? tomoyo_path_number_perm+0x235/0x5b0 [ 738.781535][T19120] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 738.787590][T19120] ? __pfx_lock_release+0x10/0x10 [ 738.792644][T19120] ? trace_lock_acquire+0x14e/0x1f0 [ 738.797887][T19120] ? lock_acquire+0x2f/0xb0 [ 738.802421][T19120] ? __fget_files+0x40/0x3a0 [ 738.807052][T19120] ? __fget_files+0x206/0x3a0 [ 738.811769][T19120] security_file_ioctl+0x9b/0x240 [ 738.816825][T19120] __x64_sys_ioctl+0xb7/0x200 [ 738.821534][T19120] do_syscall_64+0xcd/0x250 [ 738.826080][T19120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.832010][T19120] RIP: 0033:0x7f4975385d29 [ 738.836449][T19120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 738.856089][T19120] RSP: 002b:00007f49731f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 738.864535][T19120] RAX: ffffffffffffffda RBX: 00007f4975575fa0 RCX: 00007f4975385d29 [ 738.872535][T19120] RDX: 0000000020002c00 RSI: 0000000040085507 RDI: 0000000000000003 [ 738.880532][T19120] RBP: 00007f49731f6090 R08: 0000000000000000 R09: 0000000000000000 [ 738.888538][T19120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.896531][T19120] R13: 0000000000000000 R14: 00007f4975575fa0 R15: 00007fffa2f54988 [ 738.904546][T19120] [ 738.928260][T19120] ERROR: Out of memory at tomoyo_realpath_from_path. [ 739.057298][T19106] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 739.682222][T19125] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 740.212850][T19129] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 740.626178][T19143] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 740.875152][T19137] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 740.890266][T19150] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 741.320215][T19156] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 741.403395][T19144] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 742.615263][T19166] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 743.007279][T19188] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 743.951574][T14517] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 743.974816][T14517] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 743.993727][T14517] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 744.021778][T14517] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 744.044844][T14517] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 744.056989][T14517] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 744.209256][T10095] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.386097][T10095] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.577277][T19192] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 744.589568][T10095] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.742544][T10095] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.889996][T19202] chnl_net:caif_netlink_parms(): no params data found [ 745.007687][T19220] ubi13: attaching mtd0 [ 745.013962][T19220] ubi13 error: ubi_attach_mtd_dev: bad VID header (131085) or data offsets (131149) [ 745.246027][T19202] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.262130][T19202] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.274604][T19202] bridge_slave_0: entered allmulticast mode [ 745.282612][T19202] bridge_slave_0: entered promiscuous mode [ 745.369874][T10095] bridge_slave_1: left allmulticast mode [ 745.384434][T10095] bridge_slave_1: left promiscuous mode [ 745.393630][T10095] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.589570][T19210] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 746.124098][T14517] Bluetooth: hci0: command tx timeout [ 746.302948][T10095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 746.317354][T10095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 746.334143][T10095] bond0 (unregistering): Released all slaves [ 746.352620][T19202] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.360505][T19202] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.380365][T19202] bridge_slave_1: entered allmulticast mode [ 746.392967][T19202] bridge_slave_1: entered promiscuous mode [ 746.489336][T19202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.592590][T19235] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 746.643182][T19202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.917907][T19202] team0: Port device team_slave_0 added [ 746.946567][T19202] team0: Port device team_slave_1 added [ 746.981505][T19244] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 747.125178][T19247] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 747.153342][T19202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.163469][T19202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.210168][T19202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.418279][T19202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.425366][T19202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.451453][T19202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.472793][T19262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3088'. [ 747.895431][T19202] hsr_slave_0: entered promiscuous mode [ 747.923430][T19202] hsr_slave_1: entered promiscuous mode [ 747.945610][T19202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 747.973889][T19202] Cannot create hsr debugfs directory [ 748.195133][T14517] Bluetooth: hci0: command tx timeout [ 748.607729][T19249] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 750.148566][T19202] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 750.231518][T19202] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 750.259636][T19282] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 750.344393][T14517] Bluetooth: hci0: command tx timeout [ 750.574574][T10095] hsr_slave_0: left promiscuous mode [ 750.613828][T10095] hsr_slave_1: left promiscuous mode [ 750.620996][T10095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.621080][T10095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.662101][T10095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 750.662144][T10095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 750.710006][T10095] veth1_macvtap: left promiscuous mode [ 750.710128][T10095] veth0_macvtap: left promiscuous mode [ 751.526021][T10095] team0 (unregistering): Port device team_slave_1 removed [ 751.631063][T10095] team0 (unregistering): Port device team_slave_0 removed [ 752.188297][T19202] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 752.209731][T19202] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 752.318438][T19303] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 752.357568][T14517] Bluetooth: hci0: command tx timeout [ 752.626940][T19202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.648297][T19315] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 752.726073][T19202] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.757677][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.764754][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.780669][T10096] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.787860][T10096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.835730][ T3482] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.842979][ T3482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.297420][T19322] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 753.804098][T19202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.832529][T19329] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 753.934560][T19328] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 753.942363][T19328] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 754.034632][T19328] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 754.041611][T19328] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 754.075521][T19328] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 754.094509][T19328] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 754.117317][T19345] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 754.167175][T19342] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 754.194872][T19328] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 754.200923][T19328] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 754.284304][T19328] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 754.532213][T19202] veth0_vlan: entered promiscuous mode [ 754.627623][T19202] veth1_vlan: entered promiscuous mode [ 754.831274][T19202] veth0_macvtap: entered promiscuous mode [ 754.915465][T19202] veth1_macvtap: entered promiscuous mode [ 754.979892][T19202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 755.068601][T19202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.104517][T19202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 755.152182][T19202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.193692][T19202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 755.216755][T19202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.226948][T19202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 755.237786][T19202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.247719][T19202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 755.258452][T19202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.269699][T19202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 755.311348][T19202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.322103][T14517] Bluetooth: hci2: command 0x0406 tx timeout [ 755.343643][T19202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.353522][T19202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.383652][T19202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.399449][T19202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.410111][T19202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.420050][T19202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.430603][T19202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.440563][T19202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.451264][T19202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.462502][T19202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.473453][T19202] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.482494][T19202] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.491602][T19202] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.500629][T19202] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.555702][T19358] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 755.647840][ T29] audit: type=1800 audit(4294985530.617:46): pid=19385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3107" name="discovery_nqn" dev="configfs" ino=82188 res=0 errno=0 [ 755.741081][T19384] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 755.955386][T19370] Process accounting resumed [ 756.003905][T16440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.011804][T16440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.124200][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 756.130549][T14517] Bluetooth: hci4: command 0x0406 tx timeout [ 756.141027][T19390] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 756.145037][T16441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.163787][T16441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.274213][T14517] Bluetooth: hci0: command 0x0c1a tx timeout [ 757.179954][T19405] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 757.393885][T14517] Bluetooth: hci2: command 0x0406 tx timeout [ 757.875964][T19422] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 758.201392][T14517] Bluetooth: hci4: command 0x0406 tx timeout [ 758.207599][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 758.356901][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 758.687620][T19438] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 758.951521][T19458] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 760.277869][T19466] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 760.453831][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 760.503884][T19493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3126'. [ 761.239525][T19493] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 761.930374][T19504] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 761.937161][T19504] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 761.975736][T19504] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 761.981867][T19504] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 762.335803][T19521] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3133'. [ 762.345098][T19521] macvlan1: entered promiscuous mode [ 762.506927][T19508] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 763.545296][T19541] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 763.564877][T14517] Bluetooth: hci2: command 0x0406 tx timeout [ 763.599441][T19536] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 763.956211][T14517] Bluetooth: hci1: command 0x0406 tx timeout [ 764.033992][T14517] Bluetooth: hci0: command 0x0c1a tx timeout [ 764.036768][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 765.309467][T19556] Process accounting paused [ 765.605295][T19563] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 767.151406][T19603] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 769.159643][T19646] HfR: entered promiscuous mode [ 769.193164][T19646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3161'. [ 769.282713][T19648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3161'. [ 769.346832][T19646] HfR: left promiscuous mode [ 769.922461][T19665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3164'. [ 772.789507][T19722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3178'. [ 773.568546][T19727] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 774.056222][T19746] FAULT_INJECTION: forcing a failure. [ 774.056222][T19746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 774.069868][T19746] CPU: 1 UID: 0 PID: 19746 Comm: syz.0.3183 Not tainted 6.13.0-rc5-syzkaller #0 [ 774.078960][T19746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 774.089070][T19746] Call Trace: [ 774.094138][T19746] [ 774.097118][T19746] dump_stack_lvl+0x16c/0x1f0 [ 774.101892][T19746] should_fail_ex+0x497/0x5b0 [ 774.106640][T19746] _copy_from_user+0x2e/0xd0 [ 774.111301][T19746] copy_msghdr_from_user+0x99/0x160 [ 774.116573][T19746] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 774.122472][T19746] ___sys_sendmsg+0xff/0x1e0 [ 774.127143][T19746] ? __pfx____sys_sendmsg+0x10/0x10 [ 774.132426][T19746] ? __pfx_lock_release+0x10/0x10 [ 774.137493][T19746] ? trace_lock_acquire+0x14e/0x1f0 [ 774.142832][T19746] ? __fget_files+0x206/0x3a0 [ 774.147562][T19746] __sys_sendmsg+0x16e/0x220 [ 774.152212][T19746] ? __pfx___sys_sendmsg+0x10/0x10 [ 774.157395][T19746] do_syscall_64+0xcd/0x250 [ 774.161953][T19746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.167895][T19746] RIP: 0033:0x7fdd25385d29 [ 774.172346][T19746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.191997][T19746] RSP: 002b:00007fdd261d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 774.200447][T19746] RAX: ffffffffffffffda RBX: 00007fdd25575fa0 RCX: 00007fdd25385d29 [ 774.208444][T19746] RDX: 0000000000040000 RSI: 0000000020000240 RDI: 0000000000000008 [ 774.216459][T19746] RBP: 00007fdd261d8090 R08: 0000000000000000 R09: 0000000000000000 [ 774.224471][T19746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.232482][T19746] R13: 0000000000000000 R14: 00007fdd25575fa0 R15: 00007ffc8a60e4f8 [ 774.240505][T19746] [ 774.379309][T19748] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3184'. [ 774.527666][T19743] Process accounting resumed [ 775.957215][T19760] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 776.123064][T19786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3191'. [ 777.064085][T19800] openvswitch: netlink: Key type 29 is not supported [ 777.073511][T19802] FAULT_INJECTION: forcing a failure. [ 777.073511][T19802] name failslab, interval 1, probability 0, space 0, times 0 [ 777.123227][T19802] CPU: 1 UID: 0 PID: 19802 Comm: syz.3.3197 Not tainted 6.13.0-rc5-syzkaller #0 [ 777.132371][T19802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 777.142485][T19802] Call Trace: [ 777.145810][T19802] [ 777.148794][T19802] dump_stack_lvl+0x16c/0x1f0 [ 777.153539][T19802] should_fail_ex+0x497/0x5b0 [ 777.158500][T19802] ? fs_reclaim_acquire+0xae/0x150 [ 777.163688][T19802] should_failslab+0xc2/0x120 [ 777.168444][T19802] __kmalloc_noprof+0xce/0x4f0 [ 777.173281][T19802] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 777.178968][T19802] ? tomoyo_realpath_from_path+0xbf/0x710 [ 777.184737][T19802] tomoyo_realpath_from_path+0xbf/0x710 [ 777.190338][T19802] ? tomoyo_path_number_perm+0x235/0x5b0 [ 777.196035][T19802] tomoyo_path_number_perm+0x248/0x5b0 [ 777.201550][T19802] ? tomoyo_path_number_perm+0x235/0x5b0 [ 777.207243][T19802] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 777.213302][T19802] ? __pfx_lock_release+0x10/0x10 [ 777.218357][T19802] ? trace_lock_acquire+0x14e/0x1f0 [ 777.223611][T19802] ? lock_acquire+0x2f/0xb0 [ 777.228150][T19802] ? __fget_files+0x40/0x3a0 [ 777.232784][T19802] ? __fget_files+0x206/0x3a0 [ 777.237509][T19802] security_file_ioctl+0x9b/0x240 [ 777.242570][T19802] __x64_sys_ioctl+0xb7/0x200 [ 777.247281][T19802] do_syscall_64+0xcd/0x250 [ 777.251832][T19802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.257770][T19802] RIP: 0033:0x7f4975385d29 [ 777.262222][T19802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 777.281889][T19802] RSP: 002b:00007f49731f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 777.290357][T19802] RAX: ffffffffffffffda RBX: 00007f4975575fa0 RCX: 00007f4975385d29 [ 777.298365][T19802] RDX: 0000000020000280 RSI: 0000000040045201 RDI: 0000000000000003 [ 777.306376][T19802] RBP: 00007f49731f6090 R08: 0000000000000000 R09: 0000000000000000 [ 777.314382][T19802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.322381][T19802] R13: 0000000000000000 R14: 00007f4975575fa0 R15: 00007fffa2f54988 [ 777.330395][T19802] [ 777.385669][T19802] ERROR: Out of memory at tomoyo_realpath_from_path. [ 777.917841][T19818] HfR: entered promiscuous mode [ 777.957710][T19818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3201'. [ 777.957783][T19818] HfR: left promiscuous mode [ 778.009975][T19821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3201'. [ 779.148021][T19839] [U] fȏ9H߰O(BhLg*)J%6 [ 779.163751][T19839] [U] L [ 779.837146][T19845] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 780.510561][T19866] ICMPv6: process `syz.0.3213' is using deprecated sysctl (syscall) net.ipv6.neigh.virt_wifi0.retrans_time - use net.ipv6.neigh.virt_wifi0.retrans_time_ms instead [ 780.998088][T19870] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 782.445371][T19893] [U] fȏ9H߰O(BhLg*)J%6 [ 782.480479][T19893] [U] L [ 784.489089][T19956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3234'. [ 786.722543][T19979] Process accounting paused [ 786.927655][T19993] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3247'. [ 787.025790][T19988] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 788.032676][T20029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3249'. [ 788.816074][T20045] FAULT_INJECTION: forcing a failure. [ 788.816074][T20045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.875872][T20045] CPU: 0 UID: 0 PID: 20045 Comm: syz.1.3257 Not tainted 6.13.0-rc5-syzkaller #0 [ 788.884996][T20045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 788.895110][T20045] Call Trace: [ 788.898441][T20045] [ 788.901421][T20045] dump_stack_lvl+0x16c/0x1f0 [ 788.906180][T20045] should_fail_ex+0x497/0x5b0 [ 788.910987][T20045] _copy_from_user+0x2e/0xd0 [ 788.915681][T20045] ppp_ioctl+0x1eb/0x2590 [ 788.920202][T20045] ? __pfx_lock_release+0x10/0x10 [ 788.925306][T20045] ? trace_lock_acquire+0x14e/0x1f0 [ 788.930601][T20045] ? __pfx_ppp_ioctl+0x10/0x10 [ 788.935560][T20045] ? __fget_files+0x206/0x3a0 [ 788.940357][T20045] ? __pfx_ppp_ioctl+0x10/0x10 [ 788.945239][T20045] __x64_sys_ioctl+0x190/0x200 [ 788.950192][T20045] do_syscall_64+0xcd/0x250 [ 788.954789][T20045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.960880][T20045] RIP: 0033:0x7f520b385d29 [ 788.965378][T20045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 788.985127][T20045] RSP: 002b:00007f520c12f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 788.994850][T20045] RAX: ffffffffffffffda RBX: 00007f520b575fa0 RCX: 00007f520b385d29 [ 789.003000][T20045] RDX: 0000000020000240 RSI: 0000000040107447 RDI: 0000000000000003 [ 789.011743][T20045] RBP: 00007f520c12f090 R08: 0000000000000000 R09: 0000000000000000 [ 789.019787][T20045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.027820][T20045] R13: 0000000000000000 R14: 00007f520b575fa0 R15: 00007ffeb76e30a8 [ 789.035885][T20045] [ 789.039043][ C0] vkms_vblank_simulate: vblank timer overrun [ 791.485292][T20081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3268'. [ 791.935992][T20077] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 792.393718][T20102] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 792.732358][T20123] FAULT_INJECTION: forcing a failure. [ 792.732358][T20123] name failslab, interval 1, probability 0, space 0, times 0 [ 792.766411][T20123] CPU: 1 UID: 0 PID: 20123 Comm: syz.1.3277 Not tainted 6.13.0-rc5-syzkaller #0 [ 792.775536][T20123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 792.785649][T20123] Call Trace: [ 792.788979][T20123] [ 792.792217][T20123] dump_stack_lvl+0x16c/0x1f0 [ 792.796978][T20123] should_fail_ex+0x497/0x5b0 [ 792.801728][T20123] ? fs_reclaim_acquire+0xae/0x150 [ 792.806914][T20123] should_failslab+0xc2/0x120 [ 792.811675][T20123] __kmalloc_noprof+0xce/0x4f0 [ 792.816518][T20123] ? d_absolute_path+0x137/0x1b0 [ 792.821620][T20123] ? tomoyo_encode2+0x100/0x3e0 [ 792.826828][T20123] tomoyo_encode2+0x100/0x3e0 [ 792.831593][T20123] tomoyo_realpath_from_path+0x1a7/0x710 [ 792.837320][T20123] tomoyo_path_number_perm+0x248/0x5b0 [ 792.842949][T20123] ? tomoyo_path_number_perm+0x235/0x5b0 [ 792.848694][T20123] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 792.854808][T20123] ? __pfx_lock_release+0x10/0x10 [ 792.859925][T20123] ? trace_lock_acquire+0x14e/0x1f0 [ 792.865216][T20123] ? lock_acquire+0x2f/0xb0 [ 792.869787][T20123] ? __fget_files+0x40/0x3a0 [ 792.874454][T20123] ? __fget_files+0x206/0x3a0 [ 792.879219][T20123] security_file_ioctl+0x9b/0x240 [ 792.884361][T20123] __x64_sys_ioctl+0xb7/0x200 [ 792.889111][T20123] do_syscall_64+0xcd/0x250 [ 792.893817][T20123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.899782][T20123] RIP: 0033:0x7f520b385d29 [ 792.904239][T20123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 792.923906][T20123] RSP: 002b:00007f520c0ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 792.932389][T20123] RAX: ffffffffffffffda RBX: 00007f520b576160 RCX: 00007f520b385d29 [ 792.940568][T20123] RDX: 0000000000000000 RSI: 0000000000005412 RDI: 0000000000000005 [ 792.948575][T20123] RBP: 00007f520c0ed090 R08: 0000000000000000 R09: 0000000000000000 [ 792.956572][T20123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.964571][T20123] R13: 0000000000000000 R14: 00007f520b576160 R15: 00007ffeb76e30a8 [ 792.972593][T20123] [ 792.992008][T20123] ERROR: Out of memory at tomoyo_realpath_from_path. [ 793.096833][T20114] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 793.273364][T20135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3278'. [ 793.788589][T20150] netlink: 'syz.0.3284': attribute type 2 has an invalid length. [ 793.810040][T20150] netlink: 674 bytes leftover after parsing attributes in process `syz.0.3284'. [ 794.208345][T20163] FAULT_INJECTION: forcing a failure. [ 794.208345][T20163] name failslab, interval 1, probability 0, space 0, times 0 [ 794.224151][T20163] CPU: 1 UID: 8 PID: 20163 Comm: syz.3.3289 Not tainted 6.13.0-rc5-syzkaller #0 [ 794.234329][T20163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 794.247346][T20163] Call Trace: [ 794.250869][T20163] [ 794.254384][T20163] dump_stack_lvl+0x16c/0x1f0 [ 794.260054][T20163] should_fail_ex+0x497/0x5b0 [ 794.267513][T20163] ? fs_reclaim_acquire+0xae/0x150 [ 794.272809][T20163] should_failslab+0xc2/0x120 [ 794.277596][T20163] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 794.283071][T20163] ? __pfx___might_resched+0x10/0x10 [ 794.288445][T20163] ? __anon_vma_prepare+0xae/0x5e0 [ 794.293650][T20163] __anon_vma_prepare+0xae/0x5e0 [ 794.298679][T20163] ? __pfx___pte_alloc+0x10/0x10 [ 794.303701][T20163] __vmf_anon_prepare+0x11c/0x240 [ 794.308856][T20163] do_pte_missing+0x1020/0x3e00 [ 794.313799][T20163] ? mt_find+0x82d/0xa20 [ 794.318142][T20163] ? __pfx_lock_release+0x10/0x10 [ 794.323251][T20163] __handle_mm_fault+0x103c/0x2a40 [ 794.328478][T20163] ? __pfx___handle_mm_fault+0x10/0x10 [ 794.334097][T20163] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 794.339842][T20163] ? find_vma+0xc0/0x140 [ 794.344210][T20163] ? __pfx_find_vma+0x10/0x10 [ 794.349400][T20163] handle_mm_fault+0x3fa/0xaa0 [ 794.354773][T20163] do_user_addr_fault+0x7a3/0x13f0 [ 794.360497][T20163] exc_page_fault+0x5c/0xc0 [ 794.366232][T20163] asm_exc_page_fault+0x26/0x30 [ 794.371137][T20163] RIP: 0010:__put_user_1+0x11/0x20 [ 794.376301][T20163] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <88> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 794.396041][T20163] RSP: 0018:ffffc9000398fb58 EFLAGS: 00050206 [ 794.402151][T20163] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000009 [ 794.410162][T20163] RDX: ffff88802691da00 RSI: ffffffff850f1ca5 RDI: ffffffff8bb17040 [ 794.418173][T20163] RBP: 0000000000000009 R08: 0000000000000000 R09: fffffbfff2039caa [ 794.426204][T20163] R10: ffffffff901ce557 R11: 0000000000000000 R12: 0000000000000000 [ 794.434208][T20163] R13: 0000000000000000 R14: 000000000000000b R15: 0000000000004b31 [ 794.442919][T20163] ? vt_do_kdskled+0x205/0x320 [ 794.447788][T20163] vt_do_kdskled+0x20f/0x320 [ 794.452630][T20163] vt_ioctl+0xb97/0x2fd0 [ 794.457117][T20163] ? __pfx_vt_ioctl+0x10/0x10 [ 794.467236][T20163] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 794.473047][T20163] ? tomoyo_path_number_perm+0x190/0x5b0 [ 794.480056][T20163] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 794.486269][T20163] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 794.492235][T20163] ? do_vfs_ioctl+0x513/0x1950 [ 794.497054][T20163] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 794.503000][T20163] ? tty_jobctrl_ioctl+0x152/0xe00 [ 794.508794][T20163] ? __pfx_vt_ioctl+0x10/0x10 [ 794.513724][T20163] tty_ioctl+0x651/0x1640 [ 794.518211][T20163] ? __pfx_tty_ioctl+0x10/0x10 [ 794.523499][T20163] ? __pfx_lock_release+0x10/0x10 [ 794.529331][T20163] ? trace_lock_acquire+0x14e/0x1f0 [ 794.534614][T20163] ? __fget_files+0x206/0x3a0 [ 794.539348][T20163] ? __pfx_tty_ioctl+0x10/0x10 [ 794.545412][T20163] __x64_sys_ioctl+0x190/0x200 [ 794.550784][T20163] do_syscall_64+0xcd/0x250 [ 794.555361][T20163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.563130][T20163] RIP: 0033:0x7f4975385d29 [ 794.568917][T20163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.591567][T20163] RSP: 002b:00007f49731f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 794.600851][T20163] RAX: ffffffffffffffda RBX: 00007f4975575fa0 RCX: 00007f4975385d29 [ 794.608892][T20163] RDX: 0000000000000009 RSI: 0000000000004b31 RDI: 0000000000000003 [ 794.617185][T20163] RBP: 00007f49731f6090 R08: 0000000000000000 R09: 0000000000000000 [ 794.625307][T20163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.633423][T20163] R13: 0000000000000000 R14: 00007f4975575fa0 R15: 00007fffa2f54988 [ 794.641489][T20163] [ 794.953680][T20157] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 795.767449][T20191] FAULT_INJECTION: forcing a failure. [ 795.767449][T20191] name failslab, interval 1, probability 0, space 0, times 0 [ 795.796525][T20191] CPU: 1 UID: 0 PID: 20191 Comm: syz.4.3297 Not tainted 6.13.0-rc5-syzkaller #0 [ 795.805769][T20191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 795.816341][T20191] Call Trace: [ 795.819669][T20191] [ 795.822736][T20191] dump_stack_lvl+0x16c/0x1f0 [ 795.827496][T20191] should_fail_ex+0x497/0x5b0 [ 795.832257][T20191] should_failslab+0xc2/0x120 [ 795.837024][T20191] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 795.842482][T20191] ? skb_clone+0x190/0x3f0 [ 795.847007][T20191] skb_clone+0x190/0x3f0 [ 795.851340][T20191] netlink_deliver_tap+0xafd/0xca0 [ 795.856538][T20191] netlink_dump+0xb60/0xd00 [ 795.861128][T20191] ? __pfx_netlink_dump+0x10/0x10 [ 795.866242][T20191] ? kasan_save_track+0x14/0x30 [ 795.871173][T20191] ? __kasan_kmalloc+0xaa/0xb0 [ 795.876110][T20191] ? genl_start+0x67d/0x960 [ 795.880707][T20191] __netlink_dump_start+0x6d9/0x980 [ 795.885980][T20191] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 795.891785][T20191] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 795.898135][T20191] ? __pfx_genl_get_cmd+0x10/0x10 [ 795.903279][T20191] ? __pfx_genl_start+0x10/0x10 [ 795.908200][T20191] ? __pfx_genl_dumpit+0x10/0x10 [ 795.913212][T20191] ? __pfx_genl_done+0x10/0x10 [ 795.918232][T20191] ? __radix_tree_lookup+0x21f/0x2c0 [ 795.923603][T20191] genl_rcv_msg+0x470/0x800 [ 795.928199][T20191] ? __pfx_genl_rcv_msg+0x10/0x10 [ 795.933298][T20191] ? __pfx_netdev_nl_queue_get_dumpit+0x10/0x10 [ 795.939723][T20191] netlink_rcv_skb+0x165/0x410 [ 795.945168][T20191] ? __pfx_genl_rcv_msg+0x10/0x10 [ 795.950267][T20191] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 795.955637][T20191] ? down_read+0xc9/0x330 [ 795.960045][T20191] ? __pfx_down_read+0x10/0x10 [ 795.964901][T20191] ? netlink_deliver_tap+0x1ae/0xca0 [ 795.970267][T20191] genl_rcv+0x28/0x40 [ 795.974326][T20191] netlink_unicast+0x53c/0x7f0 [ 795.979177][T20191] ? __pfx_netlink_unicast+0x10/0x10 [ 795.984537][T20191] ? __phys_addr_symbol+0x30/0x80 [ 795.989647][T20191] ? __check_object_size+0x488/0x710 [ 795.995117][T20191] netlink_sendmsg+0x8b8/0xd70 [ 796.002533][T20191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 796.002613][T20191] ____sys_sendmsg+0x9ae/0xb40 [ 796.002653][T20191] ? copy_msghdr_from_user+0x10b/0x160 [ 796.002702][T20191] ? __pfx_____sys_sendmsg+0x10/0x10 [ 796.002759][T20191] ___sys_sendmsg+0x135/0x1e0 [ 796.002824][T20191] ? __pfx____sys_sendmsg+0x10/0x10 [ 796.002891][T20191] ? __pfx_lock_release+0x10/0x10 [ 796.002922][T20191] ? trace_lock_acquire+0x14e/0x1f0 [ 796.002983][T20191] ? __fget_files+0x206/0x3a0 [ 796.003037][T20191] __sys_sendmsg+0x16e/0x220 [ 796.003090][T20191] ? __pfx___sys_sendmsg+0x10/0x10 [ 796.003171][T20191] do_syscall_64+0xcd/0x250 [ 796.003221][T20191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.003267][T20191] RIP: 0033:0x7f94b9d85d29 [ 796.003295][T20191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 796.077038][T20195] Invalid ELF header magic: != ELF [ 796.095313][T20191] RSP: 002b:00007f94babdd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 796.095357][T20191] RAX: ffffffffffffffda RBX: 00007f94b9f75fa0 RCX: 00007f94b9d85d29 [ 796.095379][T20191] RDX: 00000000000000c4 RSI: 00000000200039c0 RDI: 0000000000000003 [ 796.095400][T20191] RBP: 00007f94babdd090 R08: 0000000000000000 R09: 0000000000000000 [ 796.095431][T20191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 796.095453][T20191] R13: 0000000000000000 R14: 00007f94b9f75fa0 R15: 00007ffd3155ca78 [ 796.095497][T20191] [ 796.225151][T20190] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 796.645235][T20209] FAULT_INJECTION: forcing a failure. [ 796.645235][T20209] name failslab, interval 1, probability 0, space 0, times 0 [ 796.691126][T20209] CPU: 0 UID: 0 PID: 20209 Comm: syz.0.3302 Not tainted 6.13.0-rc5-syzkaller #0 [ 796.700740][T20209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 796.710991][T20209] Call Trace: [ 796.714322][T20209] [ 796.717339][T20209] dump_stack_lvl+0x16c/0x1f0 [ 796.722104][T20209] should_fail_ex+0x497/0x5b0 [ 796.726968][T20209] ? fs_reclaim_acquire+0xae/0x150 [ 796.732268][T20209] should_failslab+0xc2/0x120 [ 796.737056][T20209] __kmalloc_noprof+0xce/0x4f0 [ 796.741963][T20209] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 796.747640][T20209] ? tomoyo_realpath_from_path+0xbf/0x710 [ 796.753458][T20209] tomoyo_realpath_from_path+0xbf/0x710 [ 796.759112][T20209] ? tomoyo_path_number_perm+0x235/0x5b0 [ 796.764827][T20209] tomoyo_path_number_perm+0x248/0x5b0 [ 796.770365][T20209] ? tomoyo_path_number_perm+0x235/0x5b0 [ 796.776074][T20209] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 796.782142][T20209] ? __pfx_lock_release+0x10/0x10 [ 796.787259][T20209] ? trace_lock_acquire+0x14e/0x1f0 [ 796.792510][T20209] ? lock_acquire+0x2f/0xb0 [ 796.797239][T20209] ? __fget_files+0x40/0x3a0 [ 796.801943][T20209] ? __fget_files+0x206/0x3a0 [ 796.806666][T20209] security_file_ioctl+0x9b/0x240 [ 796.811738][T20209] __x64_sys_ioctl+0xb7/0x200 [ 796.816462][T20209] do_syscall_64+0xcd/0x250 [ 796.821018][T20209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.826958][T20209] RIP: 0033:0x7fdd25385d29 [ 796.831432][T20209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 796.851116][T20209] RSP: 002b:00007fdd261d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 796.859590][T20209] RAX: ffffffffffffffda RBX: 00007fdd25575fa0 RCX: 00007fdd25385d29 [ 796.868034][T20209] RDX: 0000000000000081 RSI: 00000000406855c9 RDI: 0000000000000003 [ 796.876073][T20209] RBP: 00007fdd261d8090 R08: 0000000000000000 R09: 0000000000000000 [ 796.884086][T20209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.892113][T20209] R13: 0000000000000000 R14: 00007fdd25575fa0 R15: 00007ffc8a60e4f8 [ 796.900165][T20209] [ 796.903402][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.023671][T20209] ERROR: Out of memory at tomoyo_realpath_from_path. [ 797.674154][T20220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3307'. [ 798.555959][T20244] FAULT_INJECTION: forcing a failure. [ 798.555959][T20244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.616574][T20244] CPU: 0 UID: 0 PID: 20244 Comm: syz.0.3311 Not tainted 6.13.0-rc5-syzkaller #0 [ 798.626333][T20244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 798.636909][T20244] Call Trace: [ 798.640412][T20244] [ 798.643751][T20244] dump_stack_lvl+0x16c/0x1f0 [ 798.651089][T20244] should_fail_ex+0x497/0x5b0 [ 798.657893][T20244] _copy_from_user+0x2e/0xd0 [ 798.662878][T20244] copy_msghdr_from_user+0x99/0x160 [ 798.669377][T20244] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 798.676249][T20244] ? __pfx___lock_acquire+0x10/0x10 [ 798.682618][T20244] ___sys_recvmsg+0xdc/0x1a0 [ 798.687583][T20244] ? __pfx____sys_recvmsg+0x10/0x10 [ 798.693405][T20244] ? find_held_lock+0x2d/0x110 [ 798.698682][T20244] ? __pfx___might_resched+0x10/0x10 [ 798.704199][T20244] ? __might_fault+0xe3/0x190 [ 798.708975][T20244] do_recvmmsg+0x2f8/0x740 [ 798.713461][T20244] ? __pfx_do_recvmmsg+0x10/0x10 [ 798.718628][T20244] ? vfs_write+0x306/0x1150 [ 798.723488][T20244] ? __mutex_unlock_slowpath+0x164/0x690 [ 798.729781][T20244] ? __fget_files+0x206/0x3a0 [ 798.735260][T20244] __x64_sys_recvmmsg+0x239/0x290 [ 798.740480][T20244] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 798.748036][T20244] do_syscall_64+0xcd/0x250 [ 798.753305][T20244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.759817][T20244] RIP: 0033:0x7fdd25385d29 [ 798.765223][T20244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 798.788352][T20244] RSP: 002b:00007fdd261d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 798.800582][T20244] RAX: ffffffffffffffda RBX: 00007fdd25575fa0 RCX: 00007fdd25385d29 [ 798.810631][T20244] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000004 [ 798.821928][T20244] RBP: 00007fdd261d8090 R08: 0000000000000000 R09: 0000000000000000 [ 798.833709][T20244] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 798.842555][T20244] R13: 0000000000000000 R14: 00007fdd25575fa0 R15: 00007ffc8a60e4f8 [ 798.851220][T20244] [ 798.854421][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.475323][T20255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3315'. [ 800.138045][T20261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3316'. [ 802.402451][ T29] audit: type=1800 audit(4294985577.367:47): pid=20315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3334" name="dbroot" dev="configfs" ino=86295 res=0 errno=0 [ 804.098921][T20320] Invalid ELF header magic: != ELF [ 804.187993][T20322] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3336'. [ 804.328197][T20322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 804.433771][T20322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 804.503459][T20322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 804.536336][T20322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 804.783476][T20351] FAULT_INJECTION: forcing a failure. [ 804.783476][T20351] name failslab, interval 1, probability 0, space 0, times 0 [ 804.841655][T20351] CPU: 1 UID: 0 PID: 20351 Comm: syz.1.3342 Not tainted 6.13.0-rc5-syzkaller #0 [ 804.854379][T20351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 804.869323][T20351] Call Trace: [ 804.874283][T20351] [ 804.878332][T20351] dump_stack_lvl+0x16c/0x1f0 [ 804.885370][T20351] should_fail_ex+0x497/0x5b0 [ 804.892720][T20351] ? fs_reclaim_acquire+0xae/0x150 [ 804.902009][T20351] should_failslab+0xc2/0x120 [ 804.907778][T20351] __kmalloc_node_track_caller_noprof+0xcf/0x520 [ 804.916276][T20351] ? quirks_param_set+0xa0/0x750 [ 804.921847][T20351] kstrdup+0x42/0xb0 [ 804.927039][T20351] quirks_param_set+0xa0/0x750 [ 804.934124][T20351] ? __pfx_quirks_param_set+0x10/0x10 [ 804.941498][T20351] param_attr_store+0x18f/0x300 [ 804.948236][T20351] ? __pfx_param_attr_store+0x10/0x10 [ 804.954340][T20351] module_attr_store+0x55/0x80 [ 804.960332][T20351] ? __pfx_module_attr_store+0x10/0x10 [ 804.966308][T20351] sysfs_kf_write+0x117/0x170 [ 804.973284][T20351] kernfs_fop_write_iter+0x33d/0x500 [ 804.981737][T20351] ? __pfx_sysfs_kf_write+0x10/0x10 [ 804.989476][T20351] vfs_write+0x5ae/0x1150 [ 804.995888][T20351] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 805.003680][T20351] ? __pfx___mutex_lock+0x10/0x10 [ 805.008884][T20351] ? __pfx_vfs_write+0x10/0x10 [ 805.015906][T20351] ksys_write+0x12b/0x250 [ 805.020883][T20351] ? __pfx_ksys_write+0x10/0x10 [ 805.026015][T20351] do_syscall_64+0xcd/0x250 [ 805.031564][T20351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.040755][T20351] RIP: 0033:0x7f520b385d29 [ 805.045845][T20351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 805.073365][T20351] RSP: 002b:00007f520c12f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 805.083159][T20351] RAX: ffffffffffffffda RBX: 00007f520b575fa0 RCX: 00007f520b385d29 [ 805.092509][T20351] RDX: 0000000000000008 RSI: 0000000020000000 RDI: 0000000000000003 [ 805.103163][T20351] RBP: 00007f520c12f090 R08: 0000000000000000 R09: 0000000000000000 [ 805.112487][T20351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 805.123046][T20351] R13: 0000000000000000 R14: 00007f520b575fa0 R15: 00007ffeb76e30a8 [ 805.132657][T20351] [ 809.624133][T20423] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 809.642987][T20423] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 809.736597][T20423] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 809.773964][T20423] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 809.833846][T20417] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 810.637574][T20428] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 811.599414][T20447] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 811.653841][T14517] Bluetooth: hci2: command 0x0406 tx timeout [ 811.723834][T20451] Bluetooth: hci1: command 0x0406 tx timeout [ 811.796064][T20451] Bluetooth: hci0: command 0x0c1a tx timeout [ 811.796155][T20451] Bluetooth: hci4: command 0x0406 tx timeout [ 813.860820][T20482] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 814.104523][T20489] netlink: 'syz.3.3375': attribute type 11 has an invalid length. [ 814.199249][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.207791][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.840913][T20488] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 815.551891][T20523] HfR: entered promiscuous mode [ 815.634304][T20518] udc dummy_udc.0: soft-connect without a gadget driver [ 815.679368][T20523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3382'. [ 815.744284][T20523] HfR: left promiscuous mode [ 815.764441][T20525] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 815.770965][T20525] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 815.784090][T20525] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 815.816328][T20525] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 815.895061][T20532] FAULT_INJECTION: forcing a failure. [ 815.895061][T20532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 815.912906][T20532] CPU: 1 UID: 0 PID: 20532 Comm: syz.0.3384 Not tainted 6.13.0-rc5-syzkaller #0 [ 815.923236][T20532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 815.933418][T20532] Call Trace: [ 815.936874][T20532] [ 815.940501][T20532] dump_stack_lvl+0x16c/0x1f0 [ 815.945889][T20532] should_fail_ex+0x497/0x5b0 [ 815.950865][T20532] _copy_from_user+0x2e/0xd0 [ 815.955682][T20532] memdup_user+0x71/0xd0 [ 815.960091][T20532] ptp_ioctl+0xa6b/0x1d10 [ 815.964506][T20532] ? __pfx_ptp_ioctl+0x10/0x10 [ 815.969355][T20532] ? __lock_acquire+0x15a9/0x3c40 [ 815.974829][T20532] ? __pfx___lock_acquire+0x10/0x10 [ 815.980343][T20532] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 815.987063][T20532] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 815.993310][T20532] ? lock_acquire+0x2f/0xb0 [ 815.998007][T20532] ? posix_clock_ioctl+0x6b/0x170 [ 816.003665][T20532] ? __fget_files+0x206/0x3a0 [ 816.008991][T20532] ? __pfx_ptp_ioctl+0x10/0x10 [ 816.014439][T20532] posix_clock_ioctl+0xf6/0x170 [ 816.020099][T20532] ? __pfx_posix_clock_ioctl+0x10/0x10 [ 816.026221][T20532] __x64_sys_ioctl+0x190/0x200 [ 816.031568][T20532] do_syscall_64+0xcd/0x250 [ 816.036871][T20532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.043343][T20532] RIP: 0033:0x7fdd25385d29 [ 816.047930][T20532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 816.068460][T20532] RSP: 002b:00007fdd261d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 816.077176][T20532] RAX: ffffffffffffffda RBX: 00007fdd25575fa0 RCX: 00007fdd25385d29 [ 816.087612][T20532] RDX: 0000000000000000 RSI: 0000000043403d05 RDI: 0000000000000004 [ 816.096752][T20532] RBP: 00007fdd261d8090 R08: 0000000000000000 R09: 0000000000000000 [ 816.105597][T20532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.113818][T20532] R13: 0000000000000000 R14: 00007fdd25575fa0 R15: 00007ffc8a60e4f8 [ 816.122150][T20532] [ 817.173864][T20550] netlink: 'syz.1.3389': attribute type 11 has an invalid length. [ 817.183848][T20539] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 817.833922][T20451] Bluetooth: hci4: command 0x0406 tx timeout [ 817.840971][T20451] Bluetooth: hci1: command 0x0406 tx timeout [ 817.847686][T20451] Bluetooth: hci2: command 0x0406 tx timeout [ 817.873887][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 818.746888][T20576] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3394'. [ 819.303863][T20585] FAULT_INJECTION: forcing a failure. [ 819.303863][T20585] name failslab, interval 1, probability 0, space 0, times 0 [ 819.330476][T20585] CPU: 1 UID: 0 PID: 20585 Comm: syz.0.3397 Not tainted 6.13.0-rc5-syzkaller #0 [ 819.340679][T20585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 819.352801][T20585] Call Trace: [ 819.356359][T20585] [ 819.360675][T20585] dump_stack_lvl+0x16c/0x1f0 [ 819.366628][T20585] should_fail_ex+0x497/0x5b0 [ 819.372214][T20585] ? fs_reclaim_acquire+0xae/0x150 [ 819.378205][T20585] should_failslab+0xc2/0x120 [ 819.383101][T20585] __kmalloc_cache_noprof+0x68/0x420 [ 819.389966][T20585] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 819.395910][T20585] percpu_ref_init+0xd9/0x400 [ 819.401745][T20585] ? __init_waitqueue_head+0xca/0x150 [ 819.408191][T20585] ioctx_alloc+0x3b3/0x1f70 [ 819.413171][T20585] ? __might_fault+0x13b/0x190 [ 819.419531][T20585] ? __pfx_lock_release+0x10/0x10 [ 819.425353][T20585] ? trace_lock_acquire+0x14e/0x1f0 [ 819.431106][T20585] ? __pfx_ioctx_alloc+0x10/0x10 [ 819.437146][T20585] ? lock_acquire+0x2f/0xb0 [ 819.442327][T20585] ? __might_fault+0xe3/0x190 [ 819.447463][T20585] ? __might_fault+0xe3/0x190 [ 819.452373][T20585] __x64_sys_io_setup+0xc9/0x210 [ 819.457751][T20585] do_syscall_64+0xcd/0x250 [ 819.463602][T20585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.470800][T20585] RIP: 0033:0x7fdd25385d29 [ 819.477330][T20585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.500561][T20585] RSP: 002b:00007fdd261d8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 819.510385][T20585] RAX: ffffffffffffffda RBX: 00007fdd25575fa0 RCX: 00007fdd25385d29 [ 819.518885][T20585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000054d5 [ 819.528245][T20585] RBP: 00007fdd261d8090 R08: 0000000000000000 R09: 0000000000000000 [ 819.537075][T20585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.545941][T20585] R13: 0000000000000000 R14: 00007fdd25575fa0 R15: 00007ffc8a60e4f8 [ 819.555334][T20585] [ 821.651181][T20624] FAULT_INJECTION: forcing a failure. [ 821.651181][T20624] name failslab, interval 1, probability 0, space 0, times 0 [ 821.671167][T20624] CPU: 1 UID: 8 PID: 20624 Comm: syz.0.3405 Not tainted 6.13.0-rc5-syzkaller #0 [ 821.681095][T20624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 821.692323][T20624] Call Trace: [ 821.695750][T20624] [ 821.698831][T20624] dump_stack_lvl+0x16c/0x1f0 [ 821.704634][T20624] should_fail_ex+0x497/0x5b0 [ 821.709926][T20624] ? fs_reclaim_acquire+0xae/0x150 [ 821.716083][T20624] should_failslab+0xc2/0x120 [ 821.721642][T20624] __kmalloc_noprof+0xce/0x4f0 [ 821.726602][T20624] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 821.733286][T20624] ? tomoyo_realpath_from_path+0xbf/0x710 [ 821.740499][T20624] tomoyo_realpath_from_path+0xbf/0x710 [ 821.746678][T20624] ? tomoyo_path_number_perm+0x235/0x5b0 [ 821.752742][T20624] tomoyo_path_number_perm+0x248/0x5b0 [ 821.759582][T20624] ? tomoyo_path_number_perm+0x235/0x5b0 [ 821.766038][T20624] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 821.772535][T20624] ? __pfx_lock_release+0x10/0x10 [ 821.778874][T20624] ? trace_lock_acquire+0x14e/0x1f0 [ 821.785586][T20624] ? lock_acquire+0x2f/0xb0 [ 821.791586][T20624] ? __fget_files+0x40/0x3a0 [ 821.797995][T20624] ? __fget_files+0x206/0x3a0 [ 821.804667][T20624] security_file_ioctl+0x9b/0x240 [ 821.810729][T20624] __x64_sys_ioctl+0xb7/0x200 [ 821.815693][T20624] do_syscall_64+0xcd/0x250 [ 821.820974][T20624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.827948][T20624] RIP: 0033:0x7fdd25385d29 [ 821.833671][T20624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.861420][T20624] RSP: 002b:00007fdd261d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 821.872520][T20624] RAX: ffffffffffffffda RBX: 00007fdd25575fa0 RCX: 00007fdd25385d29 [ 821.882170][T20624] RDX: 0000000000000009 RSI: 0000000000004b32 RDI: 0000000000000003 [ 821.891776][T20624] RBP: 00007fdd261d8090 R08: 0000000000000000 R09: 0000000000000000 [ 821.900856][T20624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.911036][T20624] R13: 0000000000000000 R14: 00007fdd25575fa0 R15: 00007ffc8a60e4f8 [ 821.920774][T20624] [ 822.004188][T20624] ERROR: Out of memory at tomoyo_realpath_from_path. [ 822.662367][T20642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3409'. [ 824.033804][T20665] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 824.703472][T20678] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 825.187931][T20685] netlink: 334 bytes leftover after parsing attributes in process `syz.1.3420'. [ 825.246415][T20685] FAULT_INJECTION: forcing a failure. [ 825.246415][T20685] name failslab, interval 1, probability 0, space 0, times 0 [ 825.338684][T20685] CPU: 1 UID: 0 PID: 20685 Comm: syz.1.3420 Not tainted 6.13.0-rc5-syzkaller #0 [ 825.351087][T20685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 825.363244][T20685] Call Trace: [ 825.367649][T20685] [ 825.371506][T20685] dump_stack_lvl+0x16c/0x1f0 [ 825.377343][T20685] should_fail_ex+0x497/0x5b0 [ 825.383602][T20685] should_failslab+0xc2/0x120 [ 825.388650][T20685] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 825.394660][T20685] ? skb_clone+0x190/0x3f0 [ 825.399754][T20685] skb_clone+0x190/0x3f0 [ 825.405010][T20685] netlink_deliver_tap+0xafd/0xca0 [ 825.412421][T20685] netlink_dump+0xb60/0xd00 [ 825.417404][T20685] ? __pfx_netlink_dump+0x10/0x10 [ 825.423698][T20685] ? lock_acquire+0x2f/0xb0 [ 825.428927][T20685] ? netlink_lookup+0x3d/0x270 [ 825.435956][T20685] __netlink_dump_start+0x6d9/0x980 [ 825.442611][T20685] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 825.449482][T20685] rtnetlink_rcv_msg+0xb44/0xea0 [ 825.455226][T20685] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 825.462545][T20685] ? __pfx_rtnl_dumpit+0x10/0x10 [ 825.468059][T20685] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 825.473565][T20685] netlink_rcv_skb+0x165/0x410 [ 825.478868][T20685] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 825.484706][T20685] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 825.490625][T20685] ? netlink_deliver_tap+0x1ae/0xca0 [ 825.497717][T20685] netlink_unicast+0x53c/0x7f0 [ 825.503782][T20685] ? __pfx_netlink_unicast+0x10/0x10 [ 825.510059][T20685] ? __phys_addr_symbol+0x30/0x80 [ 825.515356][T20685] ? __check_object_size+0x488/0x710 [ 825.523123][T20685] netlink_sendmsg+0x8b8/0xd70 [ 825.529997][T20685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.537798][T20685] ____sys_sendmsg+0x9ae/0xb40 [ 825.544251][T20685] ? copy_msghdr_from_user+0x10b/0x160 [ 825.552945][T20685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 825.559151][T20685] ___sys_sendmsg+0x135/0x1e0 [ 825.566947][T20685] ? __pfx____sys_sendmsg+0x10/0x10 [ 825.572787][T20685] ? __pfx_lock_release+0x10/0x10 [ 825.579238][T20685] ? trace_lock_acquire+0x14e/0x1f0 [ 825.586496][T20685] ? __fget_files+0x206/0x3a0 [ 825.595265][T20685] __sys_sendmsg+0x16e/0x220 [ 825.600141][T20685] ? __pfx___sys_sendmsg+0x10/0x10 [ 825.607308][T20685] do_syscall_64+0xcd/0x250 [ 825.614602][T20685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.622493][T20685] RIP: 0033:0x7f520b385d29 [ 825.627955][T20685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 825.655845][T20685] RSP: 002b:00007f520c12f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 825.668156][T20685] RAX: ffffffffffffffda RBX: 00007f520b575fa0 RCX: 00007f520b385d29 [ 825.678000][T20685] RDX: 0000000000040000 RSI: 0000000020000240 RDI: 0000000000000004 [ 825.688621][T20685] RBP: 00007f520c12f090 R08: 0000000000000000 R09: 0000000000000000 [ 825.701203][T20685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 825.712786][T20685] R13: 0000000000000000 R14: 00007f520b575fa0 R15: 00007ffeb76e30a8 [ 825.726164][T20685] [ 826.334097][T20689] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 827.238733][T20705] netlink: 'syz.3.3424': attribute type 17 has an invalid length. [ 827.248021][T20705] netlink: 326 bytes leftover after parsing attributes in process `syz.3.3424'. [ 828.830390][T20731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3432'. [ 834.917191][T20772] kexec: Could not allocate control_code_buffer [ 835.754975][ T29] audit: type=1807 audit(4294985610.727:48): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 835.783674][ T29] audit: type=1802 audit(4294985610.737:49): pid=20822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.3449" res=0 errno=0 [ 835.806685][T20822] ima: policy update failed [ 835.863914][ T29] audit: type=1802 audit(4294985610.777:50): pid=20822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.3449" res=0 errno=0 [ 836.826050][T20834] Invalid ELF header magic: != ELF [ 840.725567][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.835863][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.902477][T14517] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 841.921245][T14517] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 841.931338][T14517] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 841.941761][T14517] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 841.952606][T14517] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 841.961795][T14517] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 842.500109][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.040220][T20877] Invalid ELF header magic: != ELF [ 843.166814][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.372287][T20877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3462'. [ 843.648771][T20877] geneve1: entered allmulticast mode [ 843.946933][T20866] chnl_net:caif_netlink_parms(): no params data found [ 844.040261][T20451] Bluetooth: hci0: command tx timeout [ 844.337762][ T52] bridge_slave_1: left allmulticast mode [ 844.346796][ T52] bridge_slave_1: left promiscuous mode [ 844.355880][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.566767][ T52] bridge_slave_0: left allmulticast mode [ 844.573519][ T52] bridge_slave_0: left promiscuous mode [ 844.599951][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.633864][T20874] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 846.123662][T20451] Bluetooth: hci0: command tx timeout [ 846.327850][T20911] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] PREEMPT SMP KASAN PTI [ 846.342006][T20911] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 846.352403][T20911] CPU: 1 UID: 0 PID: 20911 Comm: getty Not tainted 6.13.0-rc5-syzkaller #0 [ 846.362576][T20911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 846.374732][T20911] RIP: 0010:tomoyo_get_name+0xed/0x490 [ 846.381242][T20911] Code: 48 8b 98 40 af 51 9a 48 39 dd 0f 84 53 01 00 00 49 bd 00 00 00 00 00 fc ff df e8 de 2c 47 fd 48 8d 7b 20 48 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 74 08 3c 03 0f 8e 00 03 00 00 44 8b 7b 20 44 [ 846.405571][T20911] RSP: 0018:ffffc9000c44f2d0 EFLAGS: 00010202 [ 846.413013][T20911] RAX: 0000000000000004 RBX: 0000000000000000 RCX: ffffffff8452230d [ 846.421960][T20911] RDX: ffff888064da9e00 RSI: ffffffff845222e2 RDI: 0000000000000020 [ 846.431062][T20911] RBP: ffffffff9a51afa0 R08: 0000000000000004 R09: 0000000000000000 [ 846.439917][T20911] R10: 000000008332dfba R11: 0000000000000001 R12: 000000008332dfba [ 846.448400][T20911] R13: dffffc0000000000 R14: ffff888029ad8d0a R15: 0000000000000000 [ 846.456802][T20911] FS: 00007f89fe493380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 846.466550][T20911] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 846.473468][T20911] CR2: 0000561fe8218cc8 CR3: 0000000030f66000 CR4: 00000000003526f0 [ 846.482208][T20911] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 846.491577][T20911] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 846.499819][T20911] Call Trace: [ 846.503657][T20911] [ 846.506922][T20911] ? die_addr+0x3b/0xa0 [ 846.511240][T20911] ? exc_general_protection+0x155/0x230 [ 846.517241][T20911] ? asm_exc_general_protection+0x26/0x30 [ 846.523237][T20911] ? tomoyo_get_name+0x10d/0x490 [ 846.528335][T20911] ? tomoyo_get_name+0xe2/0x490 [ 846.533777][T20911] ? tomoyo_get_name+0xed/0x490 [ 846.539317][T20911] ? __pfx_widen_string+0x10/0x10 [ 846.544629][T20911] tomoyo_parse_name_union+0x121/0x1f0 [ 846.550360][T20911] tomoyo_write_file+0x4d3/0x7f0 [ 846.556200][T20911] ? __pfx_tomoyo_write_file+0x10/0x10 [ 846.565783][T20911] ? vsnprintf+0x40f/0x1870 [ 846.570540][T20911] ? __pfx_vsnprintf+0x10/0x10 [ 846.575624][T20911] tomoyo_write_domain2+0x129/0x1f0 [ 846.581697][T20911] ? __pfx_tomoyo_write_domain2+0x10/0x10 [ 846.588640][T20911] ? rcu_is_watching+0x12/0xc0 [ 846.593786][T20911] ? __kmalloc_noprof+0x23b/0x4f0 [ 846.599342][T20911] ? tomoyo_profile+0x47/0x60 [ 846.604614][T20911] ? tomoyo_supervisor+0xf35/0x1180 [ 846.611337][T20911] tomoyo_supervisor+0x4ad/0x1180 [ 846.616750][T20911] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 846.622487][T20911] ? mark_held_locks+0x9f/0xe0 [ 846.628056][T20911] ? lockdep_hardirqs_on+0x7c/0x110 [ 846.633853][T20911] ? tomoyo_check_path_acl+0xad/0x210 [ 846.639774][T20911] ? tomoyo_check_acl+0x1f7/0x410 [ 846.645714][T20911] tomoyo_path_permission+0x270/0x3b0 [ 846.651803][T20911] tomoyo_check_open_permission+0x37d/0x3c0 [ 846.658415][T20911] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 846.665251][T20911] ? __pfx___lock_acquire+0x10/0x10 [ 846.671404][T20911] ? nd_jump_root+0x3d5/0x580 [ 846.676408][T20911] ? __pfx_hook_file_open+0x10/0x10 [ 846.682888][T20911] ? lock_acquire+0x2f/0xb0 [ 846.687997][T20911] tomoyo_file_open+0x6b/0x90 [ 846.693484][T20911] security_file_open+0x84/0x1e0 [ 846.698844][T20911] do_dentry_open+0x57e/0x1ea0 [ 846.704044][T20911] ? inode_permission+0xdd/0x5f0 [ 846.710029][T20911] vfs_open+0x82/0x3f0 [ 846.714364][T20911] ? may_open+0x1f2/0x400 [ 846.718887][T20911] path_openat+0x1e6a/0x2d60 [ 846.723710][T20911] ? __pfx_path_openat+0x10/0x10 [ 846.728920][T20911] ? __pfx___lock_acquire+0x10/0x10 [ 846.734850][T20911] ? lock_acquire.part.0+0x11b/0x380 [ 846.740523][T20911] ? find_held_lock+0x2d/0x110 [ 846.746037][T20911] do_filp_open+0x20c/0x470 [ 846.751333][T20911] ? __pfx_do_filp_open+0x10/0x10 [ 846.756900][T20911] ? find_held_lock+0x2d/0x110 [ 846.763457][T20911] ? alloc_fd+0x41f/0x760 [ 846.768427][T20911] do_sys_openat2+0x17a/0x1e0 [ 846.775299][T20911] ? __pfx_do_sys_openat2+0x10/0x10 [ 846.781449][T20911] ? __pfx_lock_release+0x10/0x10 [ 846.788530][T20911] __x64_sys_openat+0x175/0x210 [ 846.794438][T20911] ? __pfx___x64_sys_openat+0x10/0x10 [ 846.800798][T20911] ? ksys_write+0x1ba/0x250 [ 846.806370][T20911] do_syscall_64+0xcd/0x250 [ 846.812637][T20911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.819773][T20911] RIP: 0033:0x7f89fe5e79a4 [ 846.824956][T20911] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 846.849776][T20911] RSP: 002b:00007fff57111b40 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 846.858801][T20911] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f89fe5e79a4 [ 846.869502][T20911] RDX: 0000000000000000 RSI: 00007f89fe77bf2c RDI: 00000000ffffff9c [ 846.883667][T20911] RBP: 00007f89fe77bf2c R08: 0000000000000008 R09: 0000000000000001 [ 846.894678][T20911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 846.904282][T20911] R13: 00007f89fe78d513 R14: 0000000000000001 R15: 0000000000000002 [ 846.914465][T20911] [ 846.918006][T20911] Modules linked in: [ 846.923641][T20911] ---[ end trace 0000000000000000 ]--- [ 847.097119][T20911] RIP: 0010:tomoyo_get_name+0xed/0x490 [ 847.123751][T20911] Code: 48 8b 98 40 af 51 9a 48 39 dd 0f 84 53 01 00 00 49 bd 00 00 00 00 00 fc ff df e8 de 2c 47 fd 48 8d 7b 20 48 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 74 08 3c 03 0f 8e 00 03 00 00 44 8b 7b 20 44 [ 847.253619][T20911] RSP: 0018:ffffc9000c44f2d0 EFLAGS: 00010202 [ 847.260236][T20911] RAX: 0000000000000004 RBX: 0000000000000000 RCX: ffffffff8452230d [ 847.283843][T20911] RDX: ffff888064da9e00 RSI: ffffffff845222e2 RDI: 0000000000000020 [ 847.292899][T20911] RBP: ffffffff9a51afa0 R08: 0000000000000004 R09: 0000000000000000 [ 847.302824][T20911] R10: 000000008332dfba R11: 0000000000000001 R12: 000000008332dfba [ 847.313251][T20911] R13: dffffc0000000000 R14: ffff888029ad8d0a R15: 0000000000000000 [ 847.324108][T20911] FS: 00007f89fe493380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 847.335857][T20911] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 847.346560][T20911] CR2: 0000001b30d0dff8 CR3: 0000000030f66000 CR4: 00000000003526f0 [ 847.356232][T20911] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 847.365818][T20911] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 847.383611][T20911] Kernel panic - not syncing: Fatal exception [ 847.390895][T20911] Kernel Offset: disabled [ 847.396938][T20911] Rebooting in 86400 seconds..