last executing test programs: 1m30.260362847s ago: executing program 3 (id=1177): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/vulnerabilities/tsx_async_abort\x00', 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/4096, 0x1000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/syz_tun/regen_min_advance\x00', 0x82, 0x0) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon0\x00', 0x100, 0x0) ioctl$auto_MON_IOCQ_URB_LEN(r2, 0x9201, 0x0) r3 = prctl$auto(0x23, 0x4, 0x7fffffffefff, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/raw6\x00', 0x0, 0x0) mremap$auto(0xc, 0x1, 0x8, 0x7, 0x5ec0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r5 = socket(0x15, 0x5, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d64688be86d547a05c861"}, 0x55) mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000001100), r3) r8 = semctl$auto(0xffffff01, 0x8, 0x9cc4, 0x6) newfstatat$auto(r4, &(0x7f0000001140)='./cgroup/../file0\x00', &(0x7f0000001180)={0x8, 0x3, 0x7fffffffffffffff, 0x8, 0x0, 0xee00, 0x0, 0x1, 0x8, 0x7ff, 0xd, 0x7f, 0xe, 0xffffffffffff2bd9, 0x0, 0x6, 0xa}, 0x5) r10 = clone3$auto(&(0x7f0000001240)={0x2, 0x1, 0x5, 0x3, 0x7, 0x7f, 0x7, 0x94, 0x8001, 0x4, 0x5}, 0xfdb1) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_RADIO(r6, &(0x7f00000017c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001780)={&(0x7f00000012c0)={0x498, r7, 0x9f45d6959c23136e, 0x70bd2c, 0x25dfdbfc, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGES={0x1f4, 0x3, 0x0, 0x1, [@generic="a3ab86fad2b6085729174a9251abcfec2f212f8a6adb3d06736fb20022688aa378911bf01a77a5e644c96a", @generic="87e422e0b0ce5f4a95ac66b65573f3b8d36553c7c7cc2592aff6be6f38e519f74ab4663d3b35d69e94284f52804a50ae2d728e42c50cce7883972f1229cea0b295df78c64a2288caaf9fa41618cc6e6b44df5acb44173f186bd313d065aa228a1bc416ee80cf2ec17725702f4d713947a145f2fb7bc0d01f82fccf3a05bbad88b1a15ebbd8e5783a4e0d05a8cc6baa19892f06e4d365a71872bd5f264049a446fbebb2f8bec69d9eb2c9113ea7fdb3a6f2101bf2e3710668732509d32d468a12e6d35303eee38919fd937255762ef6d4e23d3b49137c063bfde65c23146ddc517b8900578cd91a6a01a34c51fd3fb7d7050fb92d", @generic="922700320ba6fc75f58ebfb9a7a37e0ea6409be2a8338dc754b99754961a7447677736f8df05f3f30bb0c30f16b0ccc66165c06aab16a382a89762725e431b8bb0844697e4376dae7a1519eafe21965f85fb9968595a02ed22d3493ebfd08e85", @typed={0x8, 0x43, 0x0, 0x0, @u32=0x8}, @typed={0x8, 0xc6, 0x0, 0x0, @ipv4=@remote}, @typed={0x11, 0x13d, 0x0, 0x0, @str='/dev/usbmon0\x00'}, @generic="1145bcdf1923f4a324311662787229e5189847e6a5f41a7c80950665f00a117ba2bcc8876d352d66504c08e3a6243674f781e877a1ffdb528031216e63af0eb85f761c00c1508acc9398b9c562"]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x273, 0x3, 0x0, 0x1, [@generic="bbca5601735a527db9ed0852fec834173f252cd326580196bfb3a931f7ba055c2ada59538052a630c343929f1dee2a1b56331932e2acb8fc16ac5abd5debf9f69a5877d63d951704a8e2fdb3300d8a1e392d75f2b2f11236536e95118282cfb88fd8b53d684e5194c783a1e9ae", @typed={0x8, 0xa9, 0x0, 0x0, @pid=r8}, @generic="daae576b806506f08b0038cd4e99ac44616c489dbcca2c42d00a6b59dfbe3f7649351d71c4e3ac42f1387307a062f785490a3249ee004b444ad65692e1d5335a8005921172d623a8bc12b64325435f9c122e29c4ba79c3b455aa89792f959efd918b908841216a66c107a798c5568e0a726396c1ab8ce481839ec06efa173af276666676776c53ec49b87170ce956dce6e6881570726", @nested={0xf9, 0xef, 0x0, 0x1, [@typed={0x8, 0x45, 0x0, 0x0, @uid=r9}, @typed={0x8, 0x10d, 0x0, 0x0, @fd=r4}, @nested={0x4, 0xb}, @typed={0x8, 0x96, 0x0, 0x0, @pid=r10}, @generic="7e5a127822bdaff35845376caac1e9b3787589f4c504159d20a746b3daf2bdf9188258de5c0367b77e44e4a458bff142001f8f31424844f442ef834a96a830683cd09a2c4fe0dcf22a3149ae4d5e3456479b7017a4e0945e94745c74fd02353ff2124c7ba431f2ab71f7d8e9f7c6bed3f59a6d59ef5841757060b5897f84028d60b9395132123f198139fbcf56b6c42d493fbdc4ec04d3f34a22b514aa252bfd8b84546cf032be670fbdd1f83cb15da317d4", @generic="6f3f38d9a71f5aee263b05157763dc4fe3c5747a5d17cb21d173ec65d29e86", @typed={0x8, 0x126, 0x0, 0x0, @fd=r5}]}, @nested={0x66, 0x47, 0x0, 0x1, [@nested={0x4, 0x3f}, @typed={0x4, 0xcf}, @typed={0x8, 0xf6, 0x0, 0x0, @u32}, @typed={0x14, 0x66, 0x0, 0x0, @ipv6=@remote}, @generic="6a7aff1a83e919e6049b2d0d0d4f5608ef819ccfe5a112cf03b63f0b7de1fab0fc1ea7d48fbce3e4c051ab8897ffb817cfb53b7d8b53bccdcbe43be3f6c4"]}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x1c, 0x3, 0x0, 0x1, [@nested={0x18, 0x90, 0x0, 0x1, [@nested={0x4, 0x14d}, @nested={0x4, 0x53}, @typed={0xc, 0xb7, 0x0, 0x0, @u64=0xffffffffffffffff}]}]}]}, 0x498}, 0x1, 0x0, 0x0, 0x4871649e3c0ff462}, 0x20000012) rmdir$auto(&(0x7f0000000000)='./cgroup/../file0\x00') open(&(0x7f0000000080)='./cgroup/../file0\x00', 0x101040, 0x0) mremap$auto(0x8, 0x1, 0x6, 0x2, 0x2) read$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) 1m26.303882747s ago: executing program 3 (id=1184): mmap$auto(0x0, 0x61, 0x6, 0xfa31, 0x400, 0x20008000) r0 = socket(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000980), r0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) r5 = getpgrp(0x0) fcntl$auto(r4, 0x402, r5) fcntl$auto(r3, 0x402, r5) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a00)={'syzkaller1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'sit0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a80)={'macsec0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r0, &(0x7f0000000d80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d40)={&(0x7f00000000c0)={0x26c, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PLCA_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x2}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x80000001}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_PLCA_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x27027885}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x1}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_PLCA_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x5}]}, @ETHTOOL_A_PLCA_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x70f882f3}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7b0}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_PLCA_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7ff}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_PLCA_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_PLCA_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_PLCA_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x790}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_PLCA_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x5840}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x8, r1, 0x10}, 0x6a) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0xa, 0xfffffffc) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, 0x0, 0x82c00, 0x0) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x9) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$auto(0xc8, 0x401054d5, 0xe) pipe2$auto(0x0, 0x80) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000080), 0x6b) 1m21.520306716s ago: executing program 3 (id=1197): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x28242, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x1, 0x1, 0x0) mq_open$auto(0x0, 0xde8, 0xb, 0x0) close_range$auto(0x2, 0x8000, 0x0) mq_unlink$auto(0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000200)=0x1000) 1m17.05054547s ago: executing program 3 (id=1205): mmap$auto(0x0, 0x61, 0x6, 0xfa31, 0x400, 0x20008000) r0 = socket(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000980), r0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) r5 = getpgrp(0x0) fcntl$auto(r4, 0x402, r5) fcntl$auto(r3, 0x402, r5) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a00)={'syzkaller1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'sit0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a80)={'macsec0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r0, &(0x7f0000000d80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d40)={&(0x7f00000000c0)={0x26c, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PLCA_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x2}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x80000001}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_PLCA_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x27027885}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x1}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_PLCA_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x5}]}, @ETHTOOL_A_PLCA_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x70f882f3}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7b0}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_PLCA_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7ff}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_PLCA_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_PLCA_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_PLCA_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x790}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_PLCA_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x5840}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x8, r1, 0x10}, 0x6a) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0xa, 0xfffffffc) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, 0x0, 0x82c00, 0x0) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x9) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$auto(0xc8, 0x401054d5, 0xe) pipe2$auto(0x0, 0x80) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000080), 0x6b) 1m15.417642378s ago: executing program 3 (id=1210): r0 = socket(0x18, 0xa, 0x0) connect$auto(0x3, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/cgroup.procs\x00', 0x149081, 0x0) write$auto(r1, &(0x7f0000000000)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x1f\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe1u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06\x05\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xd6', 0x4) r2 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) write$auto_ftrace_set_event_fops_trace_events(r2, &(0x7f0000000040), 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(0x0, r0) statx$auto(r2, &(0x7f0000000180)='./file0\x00', 0x7730, 0x8, &(0x7f00000001c0)={0x670a, 0x6, 0x2, 0x6, 0xee00, 0xee01, 0x3ff, 0xc, 0x9, 0x9, 0x7, 0x3, {0xf0ed, 0x8}, {0x4}, {0x2, 0x80000000}, {0xffffffffffffff67, 0x75e4a6f4}, 0x4, 0x9, 0x2, 0x5, 0x6, 0x7, 0x7, 0x8, 0x0, 0x1ff, 0x5, 0x6, [0x10, 0x9, 0x8, 0x7, 0x700, 0x8000000000000000, 0x40, 0xff, 0x9]}) sendmsg$auto_NL80211_CMD_DEL_PMK(r0, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)={0x7c0, r3, 0x700, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_BSS_SELECT={0x5f9, 0xe3, 0x0, 0x1, [@nested={0x214, 0x10f, 0x0, 0x1, [@nested={0x12c, 0x14a, 0x0, 0x1, [@generic="14faadf29634ffa1982f19f4a21854ef1528434ff68daf62fd88502fa8c88aa470fe908bce694eb30ea377f55e780ae043879c1485d11446b046f03f4c883687065ed8f135c2d0a825076749b081c4acf3fcf6e569fc47049c71ad8e55d93c2eff687f7f887c80bb43b53bc4a607c5e27c621d437df5a9bc8fa08598b3075af46c55b82d014431b968a11f104d492f0a71a72f0533f9d7534739339a987533e5b98f8b2b202618661027507e8b406dc49f73bdfdda70e0add90c100edab5b10abc07a85b0b5199c7b5683bdece8f44fefabbdd46aaddadf9b051f035df0c3b56936317", @generic="c1d781f44e249a544ccd208c0a30d4eddc628a724c469b76c41007e6899de359d4356f047bae0b699b4a734824342fe80416be05f089a7cb5527dffb53", @typed={0x8, 0x105, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @nested={0x4, 0x5c}, @nested={0x4, 0x83}, @generic="6f9c3dce403e1ba4141f92ab91a37bb276fb179e4b715e908bcfb5552a6ff610e662c00800aa0160435587880fec51d7ceca6c095f3aefc4da9977aac968e3e32fa919ea987b139211de9b1b9f540503cb45b65d4b249b703dda5e56eecde6abf201582fa951a9f117eef6188910fe9eaca14208fd7f751ede3ba55d65eac8e35c66247a2411790258dacf2623cb66d4a9fdf6e7196305c173437e251ce35abaf253671fae3ebed4ad902bde4c1bb987f46148fab9b77d354e3482da0a3224eb97b6a54c050862cc3a13ac85", @nested={0x4, 0x11a}, @nested={0x4, 0x7}, @nested={0x4, 0x125}, @typed={0x4, 0xb2}]}, @generic="0edcd696a274978ee2eaa85f9ba22b372af09f85316b7bbb4fbeec118e6dd1194e5960ebaecf79cd09f86ce455fedec80a741772507af547728230f758a990688ffced8b6f014e56df024a9d7ac5bdfe02e3c43dff8a76f288f40398d0748b554686cd3336", @nested={0x1d, 0xc3, 0x0, 0x1, [@nested={0x4, 0x9f}, @typed={0x8, 0x41, 0x0, 0x0, @fd=r2}, @generic="248958ea9fa861b86e460f2dbd"]}, @nested={0x336, 0xed, 0x0, 0x1, [@generic="9961", @nested={0x6d, 0x2, 0x0, 0x1, [@typed={0x8, 0x8b, 0x0, 0x0, @fd=r0}, @generic="c7723c7e392fe563d114848766023c3493bcbe90fb88397d77adb2d41cba1e603917a8fef8007f4f091607a4b28ba349b40ac79594e1a5ccf9c8f3662fd98eddfcec4e0025045702fff6c94c361a364a92a381e35aa05840ce219252fbfd74ecf6"]}, @typed={0x14, 0xa4, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0xac, 0x10c, 0x0, 0x1, [@generic="bcb460a622191dd39ea0bd447f717cb8ec9108558bc2301ccd93aa065dcad13c23613ee732540f463fa78b341ecb510d07ccb89c95e937fe6043cc55b358336434bb017b68924a6e185a02638e754c7bae7add92806c3e7add4c6589e68611a632b379a1fe1fc339de516ec7bffb8a2fb98a87d65ab8727cae0031842a29acad2b791dd36a8caba411d5982415397e397223ef76d43906895e8e2c5cb9f486f68d0a9de170cd3473"]}, @typed={0x4, 0x6b}, @nested={0x1eb, 0xd4, 0x0, 0x1, [@generic="bd74e76225bef8d928439b9721a8486743f1ea7292addc3c24c9b4b68abfc6125fc5999565fe4793060eb41841f2e29f4e6904afe3d488c42a3e0200669851d13b38b94395e7c0a8e842d89faeefae38f96a4350c1b20f331d4610d445026c87e0623fb5b7602353ab4f3931a5fa114d1c9d84bbd71660195c7f", @typed={0x8, 0x78, 0x0, 0x0, @fd=r0}, @typed={0x98, 0xb9, 0x0, 0x0, @binary="0b601f54195c3c3edad2fa69121e51634b5272dc2fd31154ae1410aadf98af7518e43ba4f7673db921d9646619b79f6901608d9e77a1b15606131cd706a1560389920f807ac733d7c6e214cc9de35b0bcabcee2bb969cccf9d71d0e25a6221ea28919b2db9a1ed4cf534d19b3af5e927145c866bb9be9750d2c63a397d1cd8096f2d5fd5ff4a543830d2d6b8b5fc33e8c0ee3c9c"}, @typed={0x4, 0x42}, @typed={0x8, 0x130, 0x0, 0x0, @ipv4=@multicast1}, @generic="60c38acbf0ea2d7c84a35a4dd313ddacf96821c9d3787b0a8a9e466a4d1257dd04908760c20f1aa21866cf195f0f8eafb30e181c667caadcfc391f6eab536d2de03d6153365276b13905163c43c1697a6669c6fab27b308fab4bd2c07315e6fac5054c1369060994ee6987d0ece9550da441c457d1c50b85bbc992eb82db613ce6ae36dac6f56f6f42629a1e2e20497dfe7b2843377d15eed3aa13cfd1b70baee6fe29d4e9e08539784543c81d31f70e1d250202a68ce3d6cab43496a9f5301c2f"]}, @typed={0x5, 0xa6, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x8c, 0x0, 0x0, @uid=r4}]}, @nested={0x24, 0x37, 0x0, 0x1, [@nested={0x4, 0x11c}, @typed={0x14, 0x36, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0x123, 0x0, 0x0, @uid=r4}]}]}, @NL80211_ATTR_HE_OBSS_PD={0xa4, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xd}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x10}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x8}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0x6e, 0x5, "e1083f36349274b643bfaa4b3703d4b51334411040448442b307ab0f3a3ebb42f699b2553b71deca7163ff49bd1f4d9186088263db7804ace97aa9362567e6adf7b85429d2bd1dce645d54185160a7be66825bcbf49030ef4f9651e4365e002ef8b6694c90db06e58305"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0xcb}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x2a, 0xbd, "2589791dea4d00599bd844866c097d041c96560d124477adbbcc5a4498a806410620431ab83c"}, @NL80211_ATTR_WIPHY_NAME={0xda, 0x2, '0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x1f\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe1u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06\x05\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xd6'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x7c0}, 0x1, 0x0, 0x0, 0x900}, 0x4000000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nullb0/integrity/read_verify\x00', 0x102, 0x0) sendfile$auto(r5, r5, 0x0, 0x7) r6 = io_uring_setup$auto(0x6, 0x0) r7 = syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f00000000c0), r6) sendmsg$auto_NLBL_CALIPSO_C_LISTALL(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r7, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0xffffffff}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$auto_NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x853}, 0x4000940) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x7, &(0x7f0000000000)="f91a01439985c3d1a8e777e5dab050252e478c6caa1b5c7949cb1441542e1faf67fb3dc16634cfb135f7bcb2f049137f745c85897a2e64a39d5bc55e4bf3") 1m13.636885721s ago: executing program 3 (id=1214): r0 = socket(0x10, 0x2, 0x9) sendmsg$auto_NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x18, 0x0, 0x8, 0x170bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_RADAR_BACKGROUND]}, 0xa}, 0x1, 0x0, 0x0, 0x20004880}, 0x4800) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x20000, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r1, &(0x7f0000000080)=""/4096, 0x1000) read$auto(0x3, 0x0, 0x80) r2 = openat$auto_long_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy0/long_retry_limit\x00', 0x400, 0x0) read$auto_long_retry_limit_ops_(r2, 0x0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8000, 0x0) ioctl$auto(0x3, 0xc0481273, 0x38) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000e80), 0xffffffffffffffff) socket(0x2, 0x1, 0x0) connect$auto(0x3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000018c0)={0x14, r3, 0x72b, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x18094}, 0x80800) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r3, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PLCA_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xfff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @ETHTOOL_A_PLCA_ENABLED={0x5, 0x3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) io_setup$auto(0x5, &(0x7f0000000000)) 58.541900325s ago: executing program 32 (id=1214): r0 = socket(0x10, 0x2, 0x9) sendmsg$auto_NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x18, 0x0, 0x8, 0x170bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_RADAR_BACKGROUND]}, 0xa}, 0x1, 0x0, 0x0, 0x20004880}, 0x4800) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x20000, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r1, &(0x7f0000000080)=""/4096, 0x1000) read$auto(0x3, 0x0, 0x80) r2 = openat$auto_long_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy0/long_retry_limit\x00', 0x400, 0x0) read$auto_long_retry_limit_ops_(r2, 0x0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8000, 0x0) ioctl$auto(0x3, 0xc0481273, 0x38) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000e80), 0xffffffffffffffff) socket(0x2, 0x1, 0x0) connect$auto(0x3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000018c0)={0x14, r3, 0x72b, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x18094}, 0x80800) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r3, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PLCA_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xfff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @ETHTOOL_A_PLCA_ENABLED={0x5, 0x3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) io_setup$auto(0x5, &(0x7f0000000000)) 29.662726581s ago: executing program 1 (id=1343): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/oss/devices\x00', 0x2000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000200)=""/248, 0xf8) (fail_nth: 1) 28.474567029s ago: executing program 1 (id=1344): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x0, 0x80000001) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0001, 0x15) getitimer$auto(0x0, 0x0) madvise$auto(0x8, 0x6, 0x200) signalfd$auto(0xffffffff, 0x0, 0x8) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fcntl$auto(0x3, 0x400, 0x1) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, 0x8000, 0x7fffffffeffe, 0xfffffffffffffffe, 0x1, 0x9, 0x50b301a, 0x0, 0x2, 0x0, 0x1}) 25.494384046s ago: executing program 1 (id=1351): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000480), r0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8242, 0x0) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000080), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000001640), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_ENABLE_HS_LIMITATION(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001680)={0x14, r4, 0x2a027614b719b9cb, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0xc4) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BLA_ADDRESS={0xa, 0x1f, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x8011) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/self/net/icmp6\x00', 0x8000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000e80)=""/215, 0xd7) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/125, 0x7d) 25.029979654s ago: executing program 1 (id=1352): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/event2\x00', 0x2a482, 0x0) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000000)="28ae24c28e9735510172a2784992993093714fa8b1120286d1216f225a86bb92d1ce7d829e70e5f6e01254996f98aff41bc880e3dabfeb81590c26c9cbc51e02d31027c3ddffcd5a491f7b722937d969", 0x8}, 0x7) move_pages$auto(0xffffffffffffffff, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0xf, 0x3, 0x12) getsockopt$auto(0x3, 0x0, 0xe, 0x0, 0x0) futex$auto(0x0, 0x0, 0x9, &(0x7f0000003000)={0x47, 0xfffffffffffffffd}, 0x0, 0x7ff) ioctl$auto_evdev_fops_evdev(r0, 0x80044501, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) io_submit$auto(0x9, 0x8000000000000000, &(0x7f0000000040)=&(0x7f0000000000)={0x6a8d, 0xf4, 0xf, 0x7, 0x3, 0xffffffffffffffff, 0x4, 0x45fb, 0x6, 0x0, 0x800, 0xffffffffffffffff}) r5 = socket(0x10, 0x2, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000240), r6) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r5, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x270, r7, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_TZ_CDEV_WEIGHT={0x8, 0xb, 0x8}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x17, 0x5}, @THERMAL_GENL_ATTR_TZ_TRIP={0xfb}, @THERMAL_GENL_ATTR_CDEV={0xbb}, @THERMAL_GENL_ATTR_TZ_GOV_NAME={0x6, 0xd, '+-'}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x17, 0x800}, @THERMAL_GENL_ATTR_CDEV={0x84}]}, 0x270}, 0x1, 0x0, 0x0, 0x20015}, 0x0) r8 = openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2540, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(r3, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000100)={0x420, r7, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_TZ_TRIP={0x40c, 0x5, 0x0, 0x1, [@generic="a12ea8b3272df949bf7bdf2411f04d6a9f37e7f8a69a50b17423cc0b32cc57f421d576db7b5163a9c316d7e6916657b492dd17115dea89b615ad1fa64eb21dea2fb006fc44534e40b67b35078e56cf9190dcda41b4101f81eb8db2f264de63226c0c97e405647d2f7deb1792dc42ce00477dee3c", @generic="bd1fc319faac1b5ebbd6752c", @nested={0x1c, 0x4d, 0x0, 0x1, [@typed={0x8, 0x26, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0x44}, @typed={0x8, 0xa9, 0x0, 0x0, @fd=r8}, @nested={0x4, 0xe}]}, @nested={0x141, 0x7f, 0x0, 0x1, [@generic="75ffb43c7f4c537808a1ba9514eeb9cb327cb3eba93ed5768f7ba1fe143b5d3e9992077c70035a6794b0d68de3407cde5c0e7303040d2f1b9880c293d5d59fc285f931bc083532b58c5a102645ebcfe623d6b50dda3dceb56522ea6440f81434a47d0b3f8275d81e8b78b9fe00f2568a8b260af39dcbf3bdcfce1c5c056b295af196ac49a517a3bf5499b33f517a21c773532abf44f850472760a9cfbc4ac3841d283628f1ef22c3e38467bccd0c252adad409a2896d8f62fb23618cb462a94edfb0caaf4c96c8df3d2c9fa69fb8ac055c1dfd4d201e6e93671857b83657d42e58ffd51460fa183b7c7037f495", @nested={0x4, 0x6d}, @generic="34b548a1a7cd9966ea9e21a0ba4a29ec04de01fe8386bacdf4d511f527cfc96b4a7dabecd44b328a3046c9c14f32601932b6ab33e1acf1b67c372c76", @nested={0x4, 0x121}, @nested={0x4, 0x43}, @nested={0x4, 0x13}, @nested={0x4, 0x125}]}, @generic="ca4d31589c8b9c95b43a629976d2da72bd5969225c36fd6279347250f3", @typed={0x7, 0x2, 0x0, 0x0, @str='-\xbf\x00'}, @nested={0x18e, 0xa8, 0x0, 0x1, [@generic="bd11bd0b7733b84eec705cd601dd6ed8bb01d717b5f13b40aeab22e657c2b33afb866cef1354559ba066f9fc39558c6ff740a09793af04e3aec2ab75ccc97618a9687ed94509930753dad8f6a4fbb9cd76c988ba1e9b37eaacef4ec628057665036f62f6f425313345dedf21a58a651810c07e2a30cacf595f1036e759da61a6faca05892cd270ad42ec447f96632590a201874fcb2639d69c7c43196a59d298117a7d1b438ab0b0b20fc5c1618b341559c6846dea369696342675743e0355259bea1c1922d9d4a09e7bcc28b028dcdd", @nested={0x4, 0xf3}, @generic="d29dd0396e2294e64c62d8145970ed38775d225870da4f2e4d88034552bbb643c7c95d494b9e001cd81b52d98dda296aabfbe07271991d1d8fe585907b7fe9ad5b31d9f5a22dab3a41a002ac717dcca7d8c77929bfe171b1a10b8f53edcf02d5150ee45fec2d62443429e473e920f3355ca2b9c601a6b263c39e9e5d14cc31e1bf65ec4c9ea202f4b8b91579a0fc0f19ee70fec5f21786bde8a8872e0056541465a7885e675c6a75f818bd3c4376d8aec7193899f044"]}, @generic="d8953939f09c1ac2cc3b5d2d6b9dea4422b3f055a94e71f6ed80be65f954b7925bc775d336f981cf96d63a759832a9fb2e0bf72b369112ebe28e23524c8a4f175a3b5923a6418a929f23cb21f77876a5bbeca4f3e3499e6ff4521321ef65aae4498510f11857ac068429dcfc4fd45007e73cd8"]}]}, 0x420}, 0x1, 0x0, 0x0, 0x80}, 0x40) r9 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/12t\x00', 0x11201, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001480)=""/17, 0x11) r10 = openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000080), 0x18100, 0x0) r11 = openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim0/ports/0/udp_ports_table1\x00', 0x40500, 0x0) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r2, &(0x7f0000001740)={&(0x7f0000000000), 0xc, &(0x7f0000001700)={&(0x7f0000000100)={0x1354, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_TZ_TRIP_TYPE={0x8, 0x7, 0x3ff}, @THERMAL_GENL_ATTR_TZ_MODE={0x8, 0xa, 0x7}, @THERMAL_GENL_ATTR_TZ_GOV={0x1321, 0xd, 0x0, 0x1, [@nested={0x10, 0x10b, 0x0, 0x1, [@typed={0x4, 0x13a}, @typed={0x8, 0x104, 0x0, 0x0, @u32=0x2}]}, @generic="c5f31e811123ce56477b45cc1ea1bb24980be2f9668d8e1e913c34682dc89740630c56b215fc550389bed6a037cba40ebce849b7d9a4a4144e84230c716eb2066727e8f6d53feabf57d64e53c0de73c44eb87c3ddc927f86e64eaed17ce0ba258536e873107ee07ae8f50d2091b3e86170d167ec34546b2a4dfab2d52b2a3659deea50920afd32b882725a9b7719bc42916f4de6dc26224c", @generic="81041dcd707f9a34c028b560ed201e074e310d2ac43e10dbbf94feca04867efc7da057ceb5c745d78028323992b4d38a68bae84ad6f19e5bd2ee", @typed={0x14, 0xf0, 0x0, 0x0, @ipv6=@remote}, @nested={0xc5, 0x6a, 0x0, 0x1, [@typed={0x4, 0xe2}, @nested={0x4, 0x111}, @typed={0x8, 0xee, 0x0, 0x0, @u32=0x7}, @typed={0x14, 0x78, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x6, 0xca, 0x0, 0x0, @str='&\x00'}, @generic="51302ae38610cdeb00624c88efe38c625f0320b275a45987dc96cfae5df1479dd34af65b0c16056169fd7c0c1cfa894d0ff09524bfe9b20ef0c55b993d5b94987b1addaadb80dc25b0cfd3f8f4b334f8aef9170cfe08165760636b4ed33fe7f48b222396daf47488bb6df6b0ede697e857ebc2b96b02fe5d81fbd267558f94244de81e5a82", @nested={0x4, 0x47}, @nested={0x4, 0x32}, @typed={0x8, 0x7b, 0x0, 0x0, @fd=r9}]}, @generic="90dcd5fc54e9d1c54ababd9952dedff66bff75d9138832b61809df558f20bf475961950c444b362a8595aa342f4e63661b70e07ca0ff631c5c270c0a53c7911449f73c", @nested={0x1112, 0x75, 0x0, 0x1, [@typed={0x8, 0x71, 0x0, 0x0, @fd=r10}, @typed={0x8, 0xe9, 0x0, 0x0, @uid=0xee01}, @generic="14fbcc6420289a932438b5c955e4217c17c0a56660007e34e6ffec974b22c3242193a7d3ffe6724e5731511b3bf4dcff9cb713c9121148f053760fdb6276ba5c62b026d8354a8e2be9df855cf55563f3ff604b73f0673d", @nested={0x4, 0xb}, @generic="05a02a3f79977e7507bfe10071ae2f223dae3f5de8e91e86deb19afb14c23ce8545f3a536c9c69fa1eed584447375ef12193a73b437f9e0c4c1be689a272993ddaf7b0e6b433841b5d31c69fd3d3192ccdbbb9bc3a5bb764bb8654973164d3f28c65a9f29a921b638496d81609f84e273f029524af8751123dc3fc0feaffddb49820683a6c4d21dd66ee41b9b9a3d7accab6a25d41eb4628a3844e3d1e0e2de335713d", @generic="2bcc6c02263e479a4dfc8e03afab6010381715ddd40408791fa8861375228d6edc8367f980b46bbe66f2c95af38954b99a4e974711d789e9c6045e36d032a26166d537fcb416f0fb2c40b5e0250f070e90552fed4a1727f80e458afc65463883b828da08488fe870d841c69b7b1eb30153ec6cb7adc7975a051ae5f619425c456a1a5845062a8f380f2506aee12da374259410173ae36590f16b50596f6cf6b3075bd9db3c98312cbbf7d6aa2261870318f8f3e369f2cad84257ec9170e3b20bd97ade9893c7a20d8e6deecff586c897e605354ae193d4a24a2c06366e959a889ad944f3db06ee408efd74e079c9d078926c149174d764edd2260f31d1133ebd8c468bbfe076492862f57449bb35879a286d4e0fb8199d2591deea42cd258753a45776fc83b6e9c1544f446bb90948f81986707f232472d1fdf56059c0e299c1a8926aa591623a40ff6d355768e5ce6a6cac9f1d54c812bc5f4c6950734a47bdd7e53a506962d7cd5e6f4508314c46251b034b9d2d6a228f43d72839ead24f051c8ee049b7497fab23172c2ee76cb86b21cd9013a169dab511456f94daca0d29d01bea740b3a43b003e1d28e7a9bc4ba22c2d028dbb8e551d0c09801e99bf9067920b7d4e3dba1f9fa80052cee58ccd092b82b7893a789def5e2cc28226122319204f28d8e29cb33946cc0ad72b1153995e7f52b7d7e78877d69f425c62efd5494f09eda3047aa7e1aa0e1c9ee0b6ef62248cce05611db1d1bee5b1e3c55c7a2fdac032726c111eb4cd0e080677cacd966e11b730b6db5c676ec6fada5255769d67f74b239dcc74a7dc8ab03b701cee0e94b16b9e2af71672434df73a27d16f936d8aec55b9b625fb9ee5018fbd35b80d5edc20e5572dcf775e482ba2bbeba22a882fdcc52982989810d321cc23e8cea53b4d6f120403246b0824efc6089ce1f4158c9442a916506f6c62595a4e2d99d7eff08358c333251f68dde37d5b31e7ce3fccb19b8c329be93975c131f9c9d4cf2e5d7649c7b35a614e0761f6e4b9e37eaebfd32a223e09903fc91ae56c6d648c6a31c2d70f3b9bd9ee4c52f1a68651d946fc232c3aeaa347f541317864e32164c87d307cdfb1fedd5063252aca017487100e060a7f81e698a09bd51a404ecada832f7e5bafb645c1753064e15010547b3abd5f67afaad43c4eacde976769ee9d6ea10e8899dca9a708dfa7d16f5bf5a26750af62f2cd8d35d987e9aa929173e6684e867dff8c0f33ea3301e3d832700d84cea46c43e333046ba503bc473b7d4a8190221f0c469277ee267f3ff5b00347dbd5967545a8131b3e5dab6e22ef33bcbe0751d0d3d4ec4535f1799e0eba0b182b8507297640090c13b960f841bd83a802e99f884db536d96bcd046e66fa1badbd22e8fae1b2659be400e5d8b27b6bf047bfe9f9b7dd9f1de73916b7963f0a663b1172867b4a4bc9e717240cade2387df65979eeaa8007af41756fcb38054ab36045cb6e26ef51a6ddb3220aa7971a9009d79740731d7144c5732e0b3c7367fb29abf850f862ef8c9d70179002a3b9b2fa8d65275f3812badb910931774cb32d975c54130331ce53b5157e88884ece2a2f35561080b49f4c1b8b7bbf070cc15eb6aac0f28f0e40dc41e23979aea5c8ee2f3c0f6b47905aa1db667f6611bdd8d531dcb3bfeb80ee7ef2ae51ef5cd3ce97f93773c17c5c2a56693597c34f9282a1479a5d1b8709c07b3a377126c3c6c759e45c7a6e5735c767543f6c1ce3e3d80bd7efaeb90ae64d57bc8d892857259f56eb2c44ecfe061d6dc0d3d6ee75a46f718cdc029310184cfb80309354d52016ea66ce6a45b9a069a4a7da947f3e95b0684aa7e506214669311512a759950cc46910e69f931181509fae4faa16b49b05c94fecf1c97e8cadb11de0588a78910fd22cfc83079c843cddd8f071be16647cf0af2da9a011f270180c0d097e24a8a18baad7c923d4f21f1eb6da40389a0cc5de28353fc592774d4fd7f0a5cbfdd1d7447e250660b8d4dfc60cb6d3999a0320f39b7ea3af062bdca94eaa0de6cff04b477640654d9c9527e74eaa7fb13b428635f8a8aa769f098203ee52d02a64c378faffde185ca7963dbaae3c1b496943c44c2888b8be419a4a331c67fba358512e699bfa0ebb0fad5e3b8e2bbd7ee86a6d6b3c81a18a9511215bcb6c3209ddb9511d88eeacd667fc5d72ecf9cea21ee038327f6df7d085c2ac7d6e08d2d63cc23db351da3032bb681fc4fe29810e53b0aa719bf9d17145872d44a084286c82209b4d8939d6b9970d9a84fa2497eec972f74ae3af72fe41d85e23e50cfd2f904ee2734a291c543019a1c18d6bd841736f5c11c17645f01326a8ecc1e8e4f7cfb49cdfa5cf75b2d313cc12b2f60bd24f65cd00f07685fec398616d461446e64d43c61b8100a5f2d728d6a83a47eb8533732de293da63687f5ae8dd0cbd23080ff96ca56b4ec93b2b2e45ad9f5a01d73726123f95b0c0a76ae8728f9ce7a5c9ff3221f38827e3f05eac3c15a99bde1d51212660464fa9ea3bee1c50d9d00b0a52a70266a2a0431de6cf679a81633f819c505aa8b7e5fa33d0387787ba6e209268d63a2c9ef9cc4f165d3a00bcda15b6ca14ce05a300934b18f8cfcc528741e833f307859de0e6df8762f4ee1887729e00f1a218298bcce6c1e4092ac58d897d1ed06d6e095de53caeab8d05fe897c3bb540a72d2b3f2f4d9a994ac6d434c56d4e37d86cf86109578173b6573c7bffa982d57decbc9788f44f80c4d9f31b8084634f37e9fd738e1282f0664a5db7d25d4aba4475492aa0b7f54730e2b543b6002dd4fec8ba5cfe386a9e79afa74cf5cd04d5d794daab146ba2687e2dae35260fa91e7a9054ac21797c3aae7f4670814fdd1025cd623bd6fa1c2b458acfa7729e0dac68acb0ab8d468f63c56afb4991365cd8dcfb1f5d16e22778c345ed619da455154b5a76c03291da1de325c3c5a799e63d2262a557b81dd950804678a87d6e17f87e6a0fa1bb92e867244de80ff62a42916e34173f7b8be0b8cec05a5a814047620f2b06c66234e32f66e614842fa86d5712eccbf13e7b0f4b28eb0ec15fb8fdf303f9075b61eaa5ba6e38e05543191df8b96466d9e25eeeaeb866db54d881ca1e22f71693512001da05bf0e9afa4a076a8a2b897071cffae1245b475ad772ac2d3d9e9e558ed0c19708ce4e8d85397f89e6c04ef05d116f037b4b889c34c57191a57d54506df77f6e8b2123ba076565761f6b16daaae511eda7e4938d56ce83932ba6ce082ebe12f2d37fd2ab2ca6112b9efc8724040c917830d2282e41913fc97e4839d88832106d1652afef48c4da7744e10b47679d8a4cad800d799fa6cc0820ba8a995806ba056629d246c5de9f4e58b4b9a99be78104b80e2de31a58d1450800d46a5d524b4843402399ec2d90a21ac700f10a326d5aa711444526988e9773a1e6984044c8395bd5b5248829cdcc08b6f99a968ad37576c0c0324d771c258e57454da979c1d39cc0ee5df2e9737c364c82e38a13140af4cb4c8818191a64c893896ebd107b77e712d4c3969cc3534a58cdcd93297a0c6ded0303eac36147f6ef315857de85255ab7b78835b7aaff8e6214ed54ad7844488e3ca43e7aa4ad501cee94fd3de5882805ac75ea9188d81864d17ec0240553d588c398bb5a8b1ff44959756c7e9b0b17e81f1deb4677076e58f34e443aaa8e9ac487c5fef1d34517a98d3cc0e3c828bbe3f08eb96cb6e1d592e661837431ff9035c154e4c38b07fb196046e02b4b566fb347cf297721ae30276dfb4c84cb1e9e20b1c13e3132ec0c81874392d45050707ae6fbdf0cd5a10a19099eb61995487fc48e328290123c360858b53d8ee207b36ec0b65c80187a599596b0d99a2280a3f72b6fae4a4b82973d12e5186d327af1195f7c2075602d519494b7e9bc6ba462f5e4347c849fc74c41b43fa838d3e8455e42462d08cc2abc5db923b7467d4d8c361c8019ffd5cdf69505660d66877df3472936ee35e53ed8e99d5064e82f09d36f6083e886ceb666a6ca604f81cb1e12240648c23ad471e04349b696cb821646907443e36ce82c84b2b95145b3a925afbe7e9f2b6467e2b02e743811d2c1701d5f71574d3d0fe29893ab151fa677057f62d0fe0b05ff1a04724d745381938c2887d199606930aff679ffe62d5ce1e1614e1ffa8618b887cd07c8fed11d10fdd08de476a29b15065b94b25195702f0b72520b441121ee7af0efa1f4acce83aa15e141eb0f2dd5108b3dffe40314e275d0c781079d3efc5649a83e1d2785c7e99c455e7614af1cd3df383cd4fca1e5b77a281a7c5e3a50988e45ec5aba8bbe4aa905808fbd392e4a71f1ab529d792a1a1e6a940f699d6c0c0a79888f7911717c494fdf314008aaadd252584a70d060162cb822f710abea091f24745d89c98e28fb1527f11c2372cb51119ba1852be0dcddfe28aa0b8e5c668e99a00dfebdf7e1b3ec52bd19d001c80f9eb36166075af975b9c55be8c60518577a026b3914fa4c8e32fb9c488615f3635df7a9e2ee8cab7447a5ccefd7709ef8e9c83420d7db8ca5f9040eec595dc0215a4489d2a935dce1c11c9de3598cea9941f635d5d77fbf3133a6f0179c29d9846136921ff814e36d5db07b5230dc0537e9393c78de2370a68288cf38c02af8e7d0fbc0e177d6485483412d82ea5016fce8c6f2fe91fa658bf86aad0c60668690d70b29d9ac9371b979cbed1fc5b387d008b274ecc009ce0139da3259b52003491d6ea0fcbb9c629598bc0fb6b0360c42770a31f6ec74c30c10ec9f7ba073365ac3641c965da1d3773d6b54f9d84e2f190a3542e802697d12ea8e32a9e14c530b840fbd64863bfb38dd2340e2ff1eeaa19cff185985113e68d63dade2a78c7bcf11da51ecf4231c70948bbdc71d080636ad148e756504d34bf88b8929c7f3f551a23b0df7c9fd8b3b24983f63444c1dee9582566ca419432c531869dae34c258e445715ec4cdcef221231b1f606a62e4bc1d58a23a3844d7b3ef710d492d0c28f37cf56895abf94beb67d1ed7e147e800a0cfccddf275a6c63909e3c8a7e0bbabaf4a6c632dad6cc7974c7bceeadb677642dba7e86d46a952fb54db0ae4e63ec5cffcc599cf35da9592316771461b69bb773a8626b49538b7e41ec0aed38415348f5c06d3ec93fefb268d4ac9dc48f17c472e1ea844a84ae907cd189e2812c020c46cd2bc022c77d7a6f9f7d015ed56dc841388ded602754b080e73499dace14d09d77ff8b9ab4de69bcd5e59dcb09b90336f641b7b1d2e31988597e149e85917c25e99aa5641d2d164929717863e829f01b039bbffbbb1678dd1a20f750c5bbc9206f86db7ad9f0cf1bf013fe00b93af90bf802ad6996b221dae7a481bfa098c337bc868a05ef885210bd6e84531d9bc477bf02e64d7559dc2c5596835b16932453aa27613df6777e2c6ed4d459289fda1e51033d2eceea07e875417e8c46fc8ace4eb900d50b4070376b70be6fa1e17ff0c6593bd4fec5d2e517a379c4ef34aa7381bfe0d0cf9bc0911a1bb0efa80fe0b725aa8ce522fe755c389ab3062d9d88760f7bb3bb651b4a4e4dcee41aff2c8d3394992c5d02db1b1e943acf02936743b2500346b48980df707c5238f99ef68573bde5c7d7ca75ed32b490ecd031b6ef45005b1cd5e946b9cfd8f703f6901635d1536ac13c354bd5fa74c8853e93a169ebf24bfe7eae48e8acec4912e6fbde8abba507d8ee606753aafa1b8bc5bcaa589f2ac745df309ffaddb7597401230b69"]}, @typed={0x8, 0x7d, 0x0, 0x0, @fd=r11}]}, @THERMAL_GENL_ATTR_TZ_TRIP_ID={0x8, 0x6, 0xffff}, @THERMAL_GENL_ATTR_CDEV={0x4}]}, 0x1354}, 0x1, 0x0, 0x0, 0x40000}, 0x20004100) r12 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/smaps_rollup\x00', 0x4000, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r1, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000180)={0x424, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@THERMAL_GENL_ATTR_THRESHOLD_TEMP={0x8, 0x1a, 0x3}, @THERMAL_GENL_ATTR_CPU_CAPABILITY={0x3ff, 0x15, 0x0, 0x1, [@generic="b2b40fd671d735a64f3bda93b7a2f7cb98e3db65a66d2ee9741c29980456641e1e78cbb3dda065e9a03ad2940f9743032d34d878160bbc2060bb455b3cb6daaf427c83279501f9748f360afda9e52a9b8ec9feaa43e2e0e1a1416ca5926cf3982cf92d8d4f069c8b888535976fce8ec03d84b394ce65a614cda7c628f1047aeca18ba7a6cc252e4034b2", @generic="124e58ed18fb146f2fadd72a04", @typed={0x8, 0x14a, 0x0, 0x0, @fd=r12}, @typed={0xdd, 0x0, 0x0, 0x0, @binary="3bc9c0371f178a019b592e2d94edd6545d04c7e44d66c4f4be61c6ee8826d7623d28c087ac65e58e0550d2418a31fdf6ba53b653bea76ecd5c70fdf35f9e1fdf656efab319f3d8e23c83949e290261b38d7652b52b77e809c1236ae9e357e05214759d72afe7d465d15ca296203337209f0fc448b350a40959033f835e993cda7cf052ad6d167f24d1dcd54bd2dc65ca598553ed8f0fdc4de03a2046bb3b6fd4eb9b5bbf268a4017256746af51c2be7913417b39d46fb923c0c61c01e5116aab4d5ba19be7e23270765939d4a5c60d36b7b7bc6ff4b1eb95ca"}, @typed={0x8, 0xa2, 0x0, 0x0, @fd=r0}, @typed={0xf8, 0x48, 0x0, 0x0, @binary="84cd7b985e60daff02b797968deb82c367391fbd4ea978ec741ab6a1498a1f543d52d8a88cb01ba8b358e85ab451561e863bd68709b2f4ac2a6bd442258984998a87a6bbb1f55a3acbedb65dfd25cc96e875b51007ad89145131c91a107d7a7166ad94bfe7a822f4b983e270df08f3eef58f8fbc0ac4e663c44dd17b58b8891aa0da4bdbb67d40538de313835711d17e736691fbd89672ce44d54ebdcd9f260cdffecfcef1821451d0d5849174a0ca5c8893df4ab7e097dc1811541e4b3a910989a89ba76ab029beabcd6f3a8a2cf1e2e02375aa8bb8d05e5f041346422363675dbc489e77cbb2101484e743905d4db8b6e484e8"}, @nested={0x17a, 0x11e, 0x0, 0x1, [@generic="213dcffd8066fb9a6355379d1483910f5500cef5cfa88dc3f41c4922b9e76a7b06c784779a7c6761bb4249f05744827d878a60ecbd2df60c460156c8c086cb5e66dabe4015a46c194425ea2a688f9cd22485c26e590e5dff271c3bd0a88e45099d9423c9d6804b694fa356d93db2", @nested={0x4, 0xde}, @nested={0x4, 0xaf}, @nested={0x4, 0x5e}, @generic="075081debfe0093dabc7243d1ad55e584993652ee2f52d233b99da26d2d6b10a7516b27ad337381eebf28088007be80cda4b80bf70f2a632c1d804b8717d0078c652bfdfde0490da99f03a9530c77e038ff754bcf941edc2337611d5743c6c6f54a1fee2f0e9b19c16b13a47c5c1d1c830b3ba10c522d9aef2a4187e14af396237432fb8be59dc6979184e5801c979c19512d08e9f2da069a5c355cf4cad773ddeb16f212e6ef1f900adc73934691c55cf4cd5a3f063e516cc714d06c7c1bec8b94818dbc82354ea671fed5c176a83e59d6d5cc6f595b507be940fc764c7ec3e", @typed={0xc, 0x60, 0x0, 0x0, @u64=0x3}, @typed={0xc, 0x14b, 0x0, 0x0, @u64=0x9}, @nested={0x4, 0x9c}]}]}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8}]}, 0x424}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 23.398563921s ago: executing program 1 (id=1355): openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') stat$auto(&(0x7f00000004c0)='./file0\x00', &(0x7f00000001c0)={0x7fffffff, 0x3, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x8, 0x0, 0xa8000000, 0x3, 0x0, 0x2, 0xfffffffffffffff6, 0xc, 0xf}) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x121002, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_CLEAR_HALT(r0, 0x4004550e, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x5, 0x0) r3 = syz_clone3(&(0x7f00000002c0)={0x80021000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), {0x2a}, &(0x7f0000000140)=""/55, 0x37, &(0x7f0000000180)=""/28, &(0x7f0000000280)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r1}}, 0x58) move_pages$auto(r3, 0x0, &(0x7f0000000400)=&(0x7f0000000340)="37d936577e3621692615845488e22a26ab93ded31b6bfb15d54717b8fb6ec6ebc89b322b01af47df95a7b6cae45d99151971421864fc81e9af20d9cedc531276dca3b7944fb68d3510b842e321139d14deb4eca9dd96f443c66c2e321bba9198125d4a9ba59047c73fca7a1b57e866b1363c05c1a560e89c51715e63ff99a24cefed67193fee3dbba5c4894a6db2caa44e956289cfdf06f29a32fc4f071bc5044a90e8911422cd175c152000ce9a8c29b2bdfbf930df03bded73c6", &(0x7f0000000440)=0x5, &(0x7f0000000480)=0x8, 0x6) getsockopt$auto(r2, 0x6, 0x843, 0xfffffffffffffffe, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 19.910757987s ago: executing program 1 (id=1364): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) r0 = open(0x0, 0xeee00, 0x31) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x5, 0x4, 0x100000000000eb1, 0xffffffffffffffff, 0x108000) write$auto(0x3, 0x0, 0x100082) r1 = prctl$auto(0x10000000024, 0x2, 0x2008, 0x4000000c, 0x80001) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000000008000) setns(0xffffffffffffffff, 0x0) r2 = clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) writev$auto(r1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x7fff) write$auto_msr_fops_msr(r0, 0x0, 0x0) getsockname$auto(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0xaea) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRES16=r4, @ANYBLOB="01002dbd7000f9dbdf250100000006000200000000000500070010000000080009009c781e2108000a000800000014001f0000000000000000000000ffff0000000014002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000) mmap$auto(0x1, 0x173d, 0x4200200000df, 0x44ebf, 0x6, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) clone3$auto(0x0, 0x40) write$auto(0x3, 0x0, 0xfffffdef) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) fcntl$auto(0x0, 0x407, r2) mmap$auto(0x0, 0xfae4, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x21, 0x2, 0x2) 8.670084676s ago: executing program 2 (id=1398): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x0, 0x80000001) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0001, 0x15) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fcntl$auto(0x3, 0x400, 0x1) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, 0x8000, 0x7fffffffeffe, 0xfffffffffffffffe, 0x1, 0x9, 0x50b301a, 0x0, 0x2, 0x0, 0x1}) 7.850721506s ago: executing program 0 (id=1400): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r0 = gettid() readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) kill$auto(r0, 0x11) socket(0x2a, 0x6, 0x6) 7.566971885s ago: executing program 0 (id=1401): r0 = socket(0x18, 0xa, 0x0) connect$auto(0x3, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/cgroup.procs\x00', 0x149081, 0x0) write$auto(r1, &(0x7f0000000000)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x1f\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe1u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06\x05\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xd6', 0x4) r2 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) write$auto_ftrace_set_event_fops_trace_events(r2, &(0x7f0000000040), 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(0x0, r0) statx$auto(r2, &(0x7f0000000180)='./file0\x00', 0x7730, 0x8, &(0x7f00000001c0)={0x670a, 0x6, 0x2, 0x6, 0xee00, 0xee01, 0x3ff, 0xc, 0x9, 0x9, 0x7, 0x3, {0xf0ed, 0x8}, {0x4}, {0x2, 0x80000000}, {0xffffffffffffff67, 0x75e4a6f4}, 0x4, 0x9, 0x2, 0x5, 0x6, 0x7, 0x7, 0x8, 0x0, 0x1ff, 0x5, 0x6, [0x10, 0x9, 0x8, 0x7, 0x700, 0x8000000000000000, 0x40, 0xff, 0x9]}) sendmsg$auto_NL80211_CMD_DEL_PMK(r0, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)={0x834, r3, 0x700, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_BSS_SELECT={0x66d, 0xe3, 0x0, 0x1, [@nested={0x214, 0x10f, 0x0, 0x1, [@nested={0x12c, 0x14a, 0x0, 0x1, [@generic="14faadf29634ffa1982f19f4a21854ef1528434ff68daf62fd88502fa8c88aa470fe908bce694eb30ea377f55e780ae043879c1485d11446b046f03f4c883687065ed8f135c2d0a825076749b081c4acf3fcf6e569fc47049c71ad8e55d93c2eff687f7f887c80bb43b53bc4a607c5e27c621d437df5a9bc8fa08598b3075af46c55b82d014431b968a11f104d492f0a71a72f0533f9d7534739339a987533e5b98f8b2b202618661027507e8b406dc49f73bdfdda70e0add90c100edab5b10abc07a85b0b5199c7b5683bdece8f44fefabbdd46aaddadf9b051f035df0c3b56936317", @generic="c1d781f44e249a544ccd208c0a30d4eddc628a724c469b76c41007e6899de359d4356f047bae0b699b4a734824342fe80416be05f089a7cb5527dffb53", @typed={0x8, 0x105, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @nested={0x4, 0x5c}, @nested={0x4, 0x83}, @generic="6f9c3dce403e1ba4141f92ab91a37bb276fb179e4b715e908bcfb5552a6ff610e662c00800aa0160435587880fec51d7ceca6c095f3aefc4da9977aac968e3e32fa919ea987b139211de9b1b9f540503cb45b65d4b249b703dda5e56eecde6abf201582fa951a9f117eef6188910fe9eaca14208fd7f751ede3ba55d65eac8e35c66247a2411790258dacf2623cb66d4a9fdf6e7196305c173437e251ce35abaf253671fae3ebed4ad902bde4c1bb987f46148fab9b77d354e3482da0a3224eb97b6a54c050862cc3a13ac85", @nested={0x4, 0x11a}, @nested={0x4, 0x7}, @nested={0x4, 0x125}, @typed={0x4, 0xb2}]}, @generic="0edcd696a274978ee2eaa85f9ba22b372af09f85316b7bbb4fbeec118e6dd1194e5960ebaecf79cd09f86ce455fedec80a741772507af547728230f758a990688ffced8b6f014e56df024a9d7ac5bdfe02e3c43dff8a76f288f40398d0748b554686cd3336", @nested={0x1d, 0xc3, 0x0, 0x1, [@nested={0x4, 0x9f}, @typed={0x8, 0x41, 0x0, 0x0, @fd=r2}, @generic="248958ea9fa861b86e460f2dbd"]}, @nested={0x3aa, 0xed, 0x0, 0x1, [@generic="9961", @nested={0x6d, 0x2, 0x0, 0x1, [@typed={0x8, 0x8b, 0x0, 0x0, @fd=r0}, @generic="c7723c7e392fe563d114848766023c3493bcbe90fb88397d77adb2d41cba1e603917a8fef8007f4f091607a4b28ba349b40ac79594e1a5ccf9c8f3662fd98eddfcec4e0025045702fff6c94c361a364a92a381e35aa05840ce219252fbfd74ecf6"]}, @typed={0x14, 0xa4, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0xac, 0x10c, 0x0, 0x1, [@generic="bcb460a622191dd39ea0bd447f717cb8ec9108558bc2301ccd93aa065dcad13c23613ee732540f463fa78b341ecb510d07ccb89c95e937fe6043cc55b358336434bb017b68924a6e185a02638e754c7bae7add92806c3e7add4c6589e68611a632b379a1fe1fc339de516ec7bffb8a2fb98a87d65ab8727cae0031842a29acad2b791dd36a8caba411d5982415397e397223ef76d43906895e8e2c5cb9f486f68d0a9de170cd3473"]}, @nested={0x264, 0xd4, 0x0, 0x1, [@generic="bd74e76225bef8d928439b9721a8486743f1ea7292addc3c24c9b4b68abfc6125fc5999565fe4793060eb41841f2e29f4e6904afe3d488c42a3e0200669851d13b38b94395e7c0a8e842d89faeefae38f96a4350c1b20f331d4610d445026c87e0623fb5b7602353ab4f3931a5fa114d1c9d84bbd71660195c7f37a3cab65e976ac19b934e73ddb129d18a19597884303c1b9f920ed2484032cf5e8ea4ffc560c96cb0f8000328651a8f6ddc7535431c739d2d6b4b72bf7fee0265a13ef257b6afe86e70419f4083257f66a7661639d43b294790ed4024176355000000000090c873e5903585e795411a90dc23025bcb0ff56b", @typed={0x8, 0x78, 0x0, 0x0, @fd=r0}, @typed={0x98, 0xb9, 0x0, 0x0, @binary="0b601f54195c3c3edad2fa69121e51634b5272dc2fd31154ae1410aadf98af7518e43ba4f7673db921d9646619b79f6901608d9e77a1b15606131cd706a1560389920f807ac733d7c6e214cc9de35b0bcabcee2bb969cccf9d71d0e25a6221ea28919b2db9a1ed4cf534d19b3af5e927145c866bb9be9750d2c63a397d1cd8096f2d5fd5ff4a543830d2d6b8b5fc33e8c0ee3c9c"}, @typed={0x4, 0x42}, @typed={0x8, 0x130, 0x0, 0x0, @ipv4=@multicast1}, @generic="60c38acbf0ea2d7c84a35a4dd313ddacf96821c9d3787b0a8a9e466a4d1257dd04908760c20f1aa21866cf195f0f8eafb30e181c667caadcfc391f6eab536d2de03d6153365276b13905163c43c1697a6669c6fab27b308fab4bd2c07315e6fac5054c1369060994ee6987d0ece9550da441c457d1c50b85bbc992eb82db613ce6ae36dac6f56f6f42629a1e2e20497dfe7b2843377d15eed3aa13cfd1b70baee6fe29d4e9e08539784543c81d31f70e1d250202a68ce3d6cab43496a9f5301c2f"]}, @typed={0x5, 0xa6, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x8c, 0x0, 0x0, @uid=r4}]}, @nested={0x24, 0x37, 0x0, 0x1, [@nested={0x4, 0x11c}, @typed={0x14, 0x36, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0x123, 0x0, 0x0, @uid=r4}]}]}, @NL80211_ATTR_HE_OBSS_PD={0xa4, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xd}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x10}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x8}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0x6e, 0x5, "e1083f36349274b643bfaa4b3703d4b51334411040448442b307ab0f3a3ebb42f699b2553b71deca7163ff49bd1f4d9186088263db7804ace97aa9362567e6adf7b85429d2bd1dce645d54185160a7be66825bcbf49030ef4f9651e4365e002ef8b6694c90db06e58305"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0xcb}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x2a, 0xbd, "2589791dea4d00599bd844866c097d041c96560d124477adbbcc5a4498a806410620431ab83c"}, @NL80211_ATTR_WIPHY_NAME={0xda, 0x2, '0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x1f\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe1u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06\x05\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xd6'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x834}, 0x1, 0x0, 0x0, 0x900}, 0x4000000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nullb0/integrity/read_verify\x00', 0x102, 0x0) sendfile$auto(r5, r5, 0x0, 0x7) r6 = io_uring_setup$auto(0x6, 0x0) r7 = syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f00000000c0), r6) sendmsg$auto_NLBL_CALIPSO_C_LISTALL(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r7, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0xffffffff}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$auto_NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x853}, 0x4000940) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x7, &(0x7f0000000000)="f91a01439985c3d1a8e777e5dab050252e478c6caa1b5c7949cb1441542e1faf67fb3dc16634cfb135f7bcb2f049137f745c85897a2e64a39d5bc55e4bf3") 6.56973519s ago: executing program 2 (id=1403): mmap$auto(0x0, 0x61, 0x6, 0xfa31, 0x400, 0x20008000) r0 = socket(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000980), r0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) r5 = getpgrp(0x0) fcntl$auto(r4, 0x402, r5) fcntl$auto(r3, 0x402, r5) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a00)={'syzkaller1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'sit0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a80)={'macsec0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r0, &(0x7f0000000d80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d40)={&(0x7f00000000c0)={0x26c, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PLCA_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x2}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x80000001}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_PLCA_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x27027885}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x1}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_PLCA_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x5}]}, @ETHTOOL_A_PLCA_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x70f882f3}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7b0}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_PLCA_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7ff}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_PLCA_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_PLCA_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_PLCA_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x790}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_PLCA_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x5840}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x8, r1, 0x10}, 0x6a) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0xa, 0xfffffffc) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, 0x0, 0x82c00, 0x0) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x9) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$auto(0xc8, 0x401054d5, 0xe) pipe2$auto(0x0, 0x80) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000080), 0x6b) 5.879882273s ago: executing program 2 (id=1404): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_freeze_timeout\x00', 0x40000, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) ioctl$auto(r0, 0xc0105512, 0x1) (fail_nth: 3) 5.392930229s ago: executing program 0 (id=1406): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000480), r0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/updelay\x00', 0x8242, 0x0) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000080), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000001640), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_ENABLE_HS_LIMITATION(r3, 0x0, 0xc4) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BLA_ADDRESS={0xa, 0x1f, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x8011) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/self/net/icmp6\x00', 0x8000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000e80)=""/215, 0xd7) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/125, 0x7d) 5.169868439s ago: executing program 2 (id=1407): openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r0 = socket(0x1, 0x1, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) r1 = socket(0x840000000002, 0x3, 0xff) mmap$auto(0x0, 0x2020009, 0xb, 0xeb1, 0xfffffffffffffff7, 0x8000) r2 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r2, 0x40186f40, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x401c800}, 0x24004141) connect$auto(0x3, &(0x7f00000000c0), 0x55) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r0) sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="64010000", @ANYRES16=r3, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x10}, 0x90) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x3f00) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/suspend_stats/failed_freeze\x00', 0x123000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/48, 0x30) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) get_robust_list$auto(0x0, 0x0, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty46\x00', 0x40000, 0x0) ioctl$auto(r6, 0x540c, 0xffffffffffffffff) lsm_list_modules$auto(&(0x7f0000000400)=0xd, &(0x7f0000000440)=0x5, 0x9) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$auto_TIOCSTI2(r5, 0x5412, 0x0) 5.114796106s ago: executing program 0 (id=1408): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, 0x8000, 0x7fffffffeffe, 0xfffffffffffffffe, 0x1, 0x9, 0x50b301a, 0x0, 0x2, 0x0, 0x1}) recvmsg$auto(r0, &(0x7f0000001180)={&(0x7f0000000180)="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", 0x5, &(0x7f0000000080)={&(0x7f0000000000)="6aba613197a9733ecf2ecbfd1c9745a5b076945d9d54fee7336246f78de93820d95fd3b5909f8d0b11bd75c5881067374714f47ac465b539d192f9d47b7ed8da196f6b9651086ce1a066", 0xffffffffffffffff}, 0x5, &(0x7f00000000c0)="e1530b31dc3393e22127ab1981", 0x6, 0x8}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(0x8000000000000001, 0x5, 0x8) 4.684237825s ago: executing program 33 (id=1364): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) r0 = open(0x0, 0xeee00, 0x31) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x5, 0x4, 0x100000000000eb1, 0xffffffffffffffff, 0x108000) write$auto(0x3, 0x0, 0x100082) r1 = prctl$auto(0x10000000024, 0x2, 0x2008, 0x4000000c, 0x80001) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000000008000) setns(0xffffffffffffffff, 0x0) r2 = clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) writev$auto(r1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x7fff) write$auto_msr_fops_msr(r0, 0x0, 0x0) getsockname$auto(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0xaea) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRES16=r4, @ANYBLOB="01002dbd7000f9dbdf250100000006000200000000000500070010000000080009009c781e2108000a000800000014001f0000000000000000000000ffff0000000014002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000) mmap$auto(0x1, 0x173d, 0x4200200000df, 0x44ebf, 0x6, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) clone3$auto(0x0, 0x40) write$auto(0x3, 0x0, 0xfffffdef) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) fcntl$auto(0x0, 0x407, r2) mmap$auto(0x0, 0xfae4, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x21, 0x2, 0x2) 4.300004514s ago: executing program 4 (id=1411): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = fanotify_init$auto(0x65, 0x2) close_range$auto(r1, r1, 0x9) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe$auto(0x0) open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x10) splice$auto(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x3fb, 0x9) write$auto(0x6, 0x0, 0x100000001) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) read$auto_tracing_saved_cmdlines_fops_trace(r0, &(0x7f0000000040)=""/204, 0xcc) 3.782567865s ago: executing program 0 (id=1412): mmap$auto(0x0, 0x61, 0x6, 0xfa31, 0x400, 0x20008000) r0 = socket(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000980), r0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) r5 = getpgrp(0x0) fcntl$auto(r4, 0x402, r5) fcntl$auto(r3, 0x402, r5) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a00)={'syzkaller1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'sit0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a80)={'macsec0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r0, &(0x7f0000000d80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d40)={&(0x7f00000000c0)={0x26c, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PLCA_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x2}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x80000001}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_PLCA_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x27027885}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x1}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_PLCA_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x5}]}, @ETHTOOL_A_PLCA_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x70f882f3}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7b0}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_PLCA_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7ff}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_PLCA_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_PLCA_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_PLCA_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x790}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_PLCA_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x5840}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x8, r1, 0x10}, 0x6a) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0xa, 0xfffffffc) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, 0x0, 0x82c00, 0x0) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x9) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$auto(0xc8, 0x401054d5, 0xe) pipe2$auto(0x0, 0x80) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000080), 0x6b) 3.721302021s ago: executing program 2 (id=1413): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:00.0/device\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000002980)=""/4075, 0xfeb) pipe$auto(&(0x7f0000000080)=r0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x16c) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x8fb8424ebbad435d, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x50a9, 0x85, 0x0, 0x14) write$auto(0x3, 0x0, 0xfdef) bind$auto(0x3, 0xfffffffffffffffd, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendto$auto(0x4, 0x0, 0xff, 0x6, 0x0, 0xe) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x1) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, 0x0, 0x2000, 0x0) socketpair$auto(0x3, 0x1, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r4 = open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8) write$auto(r4, 0x0, 0xeffd) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptye3\x00', 0x0, 0x0) 2.94288737s ago: executing program 4 (id=1414): r0 = socket(0x18, 0xa, 0x0) connect$auto(0x3, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/cgroup.procs\x00', 0x149081, 0x0) write$auto(r1, &(0x7f0000000000)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x1f\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe1u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06\x05\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xd6', 0x4) r2 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) write$auto_ftrace_set_event_fops_trace_events(r2, &(0x7f0000000040), 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(0x0, r0) statx$auto(r2, &(0x7f0000000180)='./file0\x00', 0x7730, 0x8, &(0x7f00000001c0)={0x670a, 0x6, 0x2, 0x6, 0xee00, 0xee01, 0x3ff, 0xc, 0x9, 0x9, 0x7, 0x3, {0xf0ed, 0x8}, {0x4}, {0x2, 0x80000000}, {0xffffffffffffff67, 0x75e4a6f4}, 0x4, 0x9, 0x2, 0x5, 0x6, 0x7, 0x7, 0x8, 0x0, 0x1ff, 0x5, 0x6, [0x10, 0x9, 0x8, 0x7, 0x700, 0x8000000000000000, 0x40, 0xff, 0x9]}) sendmsg$auto_NL80211_CMD_DEL_PMK(r0, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)={0x834, r3, 0x700, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_BSS_SELECT={0x66d, 0xe3, 0x0, 0x1, [@nested={0x214, 0x10f, 0x0, 0x1, [@nested={0x12c, 0x14a, 0x0, 0x1, [@generic="14faadf29634ffa1982f19f4a21854ef1528434ff68daf62fd88502fa8c88aa470fe908bce694eb30ea377f55e780ae043879c1485d11446b046f03f4c883687065ed8f135c2d0a825076749b081c4acf3fcf6e569fc47049c71ad8e55d93c2eff687f7f887c80bb43b53bc4a607c5e27c621d437df5a9bc8fa08598b3075af46c55b82d014431b968a11f104d492f0a71a72f0533f9d7534739339a987533e5b98f8b2b202618661027507e8b406dc49f73bdfdda70e0add90c100edab5b10abc07a85b0b5199c7b5683bdece8f44fefabbdd46aaddadf9b051f035df0c3b56936317", @generic="c1d781f44e249a544ccd208c0a30d4eddc628a724c469b76c41007e6899de359d4356f047bae0b699b4a734824342fe80416be05f089a7cb5527dffb53", @typed={0x8, 0x105, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @nested={0x4, 0x5c}, @nested={0x4, 0x83}, @generic="6f9c3dce403e1ba4141f92ab91a37bb276fb179e4b715e908bcfb5552a6ff610e662c00800aa0160435587880fec51d7ceca6c095f3aefc4da9977aac968e3e32fa919ea987b139211de9b1b9f540503cb45b65d4b249b703dda5e56eecde6abf201582fa951a9f117eef6188910fe9eaca14208fd7f751ede3ba55d65eac8e35c66247a2411790258dacf2623cb66d4a9fdf6e7196305c173437e251ce35abaf253671fae3ebed4ad902bde4c1bb987f46148fab9b77d354e3482da0a3224eb97b6a54c050862cc3a13ac85", @nested={0x4, 0x11a}, @nested={0x4, 0x7}, @nested={0x4, 0x125}, @typed={0x4, 0xb2}]}, @generic="0edcd696a274978ee2eaa85f9ba22b372af09f85316b7bbb4fbeec118e6dd1194e5960ebaecf79cd09f86ce455fedec80a741772507af547728230f758a990688ffced8b6f014e56df024a9d7ac5bdfe02e3c43dff8a76f288f40398d0748b554686cd3336", @nested={0x1d, 0xc3, 0x0, 0x1, [@nested={0x4, 0x9f}, @typed={0x8, 0x41, 0x0, 0x0, @fd=r2}, @generic="248958ea9fa861b86e460f2dbd"]}, @nested={0x3aa, 0xed, 0x0, 0x1, [@generic="9961", @nested={0x6d, 0x2, 0x0, 0x1, [@typed={0x8, 0x8b, 0x0, 0x0, @fd=r0}, @generic="c7723c7e392fe563d114848766023c3493bcbe90fb88397d77adb2d41cba1e603917a8fef8007f4f091607a4b28ba349b40ac79594e1a5ccf9c8f3662fd98eddfcec4e0025045702fff6c94c361a364a92a381e35aa05840ce219252fbfd74ecf6"]}, @typed={0x14, 0xa4, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0xac, 0x10c, 0x0, 0x1, [@generic="bcb460a622191dd39ea0bd447f717cb8ec9108558bc2301ccd93aa065dcad13c23613ee732540f463fa78b341ecb510d07ccb89c95e937fe6043cc55b358336434bb017b68924a6e185a02638e754c7bae7add92806c3e7add4c6589e68611a632b379a1fe1fc339de516ec7bffb8a2fb98a87d65ab8727cae0031842a29acad2b791dd36a8caba411d5982415397e397223ef76d43906895e8e2c5cb9f486f68d0a9de170cd3473"]}, @nested={0x264, 0xd4, 0x0, 0x1, [@generic="bd74e76225bef8d928439b9721a8486743f1ea7292addc3c24c9b4b68abfc6125fc5999565fe4793060eb41841f2e29f4e6904afe3d488c42a3e0200669851d13b38b94395e7c0a8e842d89faeefae38f96a4350c1b20f331d4610d445026c87e0623fb5b7602353ab4f3931a5fa114d1c9d84bbd71660195c7f37a3cab65e976ac19b934e73ddb129d18a19597884303c1b9f920ed2484032cf5e8ea4ffc560c96cb0f8000328651a8f6ddc7535431c739d2d6b4b72bf7fee0265a13ef257b6afe86e70419f4083257f66a7661639d43b294790ed4024176355000000000090c873e5903585e795411a90dc23025bcb0ff56b", @typed={0x8, 0x78, 0x0, 0x0, @fd=r0}, @typed={0x98, 0xb9, 0x0, 0x0, @binary="0b601f54195c3c3edad2fa69121e51634b5272dc2fd31154ae1410aadf98af7518e43ba4f7673db921d9646619b79f6901608d9e77a1b15606131cd706a1560389920f807ac733d7c6e214cc9de35b0bcabcee2bb969cccf9d71d0e25a6221ea28919b2db9a1ed4cf534d19b3af5e927145c866bb9be9750d2c63a397d1cd8096f2d5fd5ff4a543830d2d6b8b5fc33e8c0ee3c9c"}, @typed={0x4, 0x42}, @typed={0x8, 0x130, 0x0, 0x0, @ipv4=@multicast1}, @generic="60c38acbf0ea2d7c84a35a4dd313ddacf96821c9d3787b0a8a9e466a4d1257dd04908760c20f1aa21866cf195f0f8eafb30e181c667caadcfc391f6eab536d2de03d6153365276b13905163c43c1697a6669c6fab27b308fab4bd2c07315e6fac5054c1369060994ee6987d0ece9550da441c457d1c50b85bbc992eb82db613ce6ae36dac6f56f6f42629a1e2e20497dfe7b2843377d15eed3aa13cfd1b70baee6fe29d4e9e08539784543c81d31f70e1d250202a68ce3d6cab43496a9f5301c2f"]}, @typed={0x5, 0xa6, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x8c, 0x0, 0x0, @uid=r4}]}, @nested={0x24, 0x37, 0x0, 0x1, [@nested={0x4, 0x11c}, @typed={0x14, 0x36, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0x123, 0x0, 0x0, @uid=r4}]}]}, @NL80211_ATTR_HE_OBSS_PD={0xa4, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xd}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x10}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x8}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0x6e, 0x5, "e1083f36349274b643bfaa4b3703d4b51334411040448442b307ab0f3a3ebb42f699b2553b71deca7163ff49bd1f4d9186088263db7804ace97aa9362567e6adf7b85429d2bd1dce645d54185160a7be66825bcbf49030ef4f9651e4365e002ef8b6694c90db06e58305"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0xcb}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x2a, 0xbd, "2589791dea4d00599bd844866c097d041c96560d124477adbbcc5a4498a806410620431ab83c"}, @NL80211_ATTR_WIPHY_NAME={0xda, 0x2, '0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x1f\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe1u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06\x05\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xd6'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x834}, 0x1, 0x0, 0x0, 0x900}, 0x4000000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nullb0/integrity/read_verify\x00', 0x102, 0x0) sendfile$auto(r5, r5, 0x0, 0x7) r6 = io_uring_setup$auto(0x6, 0x0) r7 = syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f00000000c0), r6) sendmsg$auto_NLBL_CALIPSO_C_LISTALL(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r7, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0xffffffff}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$auto_NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x853}, 0x4000940) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x7, &(0x7f0000000000)="f91a01439985c3d1a8e777e5dab050252e478c6caa1b5c7949cb1441542e1faf67fb3dc16634cfb135f7bcb2f049137f745c85897a2e64a39d5bc55e4bf3") 2.528563027s ago: executing program 0 (id=1415): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setgroups$auto(0xe32, &(0x7f0000000040)=0x9) madvise$auto(0x0, 0x53, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) pselect6$auto(0x101, &(0x7f0000000080)={[0x6, 0x7, 0xffffffffffffffff, 0x3, 0x1, 0x6, 0x9, 0x7, 0x1, 0x4, 0x9, 0x4, 0x4, 0x7, 0xcb2a, 0x9]}, &(0x7f0000000100)={[0xffff, 0x3, 0xfffffffffffff31a, 0x7, 0x590, 0x8, 0x1d4, 0x4, 0x6, 0x7, 0x5, 0x7, 0x80, 0x8, 0x0, 0x1]}, &(0x7f0000000180)={[0xa9, 0x4, 0x4, 0x1, 0x3, 0x6, 0xcbd0, 0x200000001, 0x1f, 0xfffffffffffffffd, 0x7ff, 0x8000000000000001, 0x4, 0x7f, 0x91, 0x7]}, &(0x7f0000000000)={0x899, 0x5}, &(0x7f0000000200)) mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) ppoll$auto(&(0x7f0000000280)={0xffffffffffffffff, 0x6, 0x9}, 0x9, &(0x7f00000002c0)={0x8000000000000001, 0x8001}, &(0x7f0000000300)={0x7ff}, 0x8) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r1, 0x1002, 0x0, 0x0, 0x0, 0x2) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00T\x00'/40, 0x9) fallocate$auto(0x3, 0x0, 0xe, 0x8ec8) finit_module$auto(0x3, 0xfffffffffffffffe, 0x2) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040800}, 0x40850) mremap$auto(0x6, 0xad, 0x6, 0x7, 0x4) r2 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/id\x00', 0x20000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_udc.3/udc/dummy_udc.3/b_hnp_enable\x00', 0x400, 0x0) madvise$auto(0x1, 0x7fffffffffffffff, 0x20a) mmap$auto(0x5, 0x1020009, 0x54, 0x80eb1, r2, 0x8000) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) read$auto(r3, &(0x7f0000002440)='&\x00', 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x4000008000) read$auto_ftrace_event_id_fops_trace_events(r2, &(0x7f0000000040)=""/5, 0x5) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 2.202743988s ago: executing program 4 (id=1416): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000480), r0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/updelay\x00', 0x8242, 0x0) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000080), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000001640), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_ENABLE_HS_LIMITATION(r3, 0x0, 0xc4) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BLA_ADDRESS={0xa, 0x1f, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x8011) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/self/net/icmp6\x00', 0x8000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000e80)=""/215, 0xd7) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/125, 0x7d) 2.1869909s ago: executing program 2 (id=1417): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x3f, 0x100000001, 0xffffffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x400, 0xc53d, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x40002, 0x0) write$auto(0x3, 0x0, 0x81) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r1 = socket(0x0, 0x2, 0x1) setsockopt$auto(r1, 0x110, 0x4, 0x0, 0x4) close_range$auto(r1, r0, 0x99f7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) 1.854571185s ago: executing program 4 (id=1418): openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x342, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x18, 0xa, 0x1) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r0) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x20, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r2 = socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_VENDOR(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000080)={0x14, r4, 0x323, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x40480d4) socket(0xa, 0x3, 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$auto(0x0, 0x0, 0x92) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth1_to_team\x00', 0x0}) sendmsg$auto_NL80211_CMD_ADD_LINK(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MBSSID_CONFIG={0x48, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r6}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x7}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r7}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0xfc}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x844) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x2000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 667.903693ms ago: executing program 4 (id=1419): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x7) r2 = socket(0xa, 0x6, 0x0) r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/filesystems\x00', 0x8480, 0x0) sendfile$auto(r2, r3, &(0x7f0000000500)=0x8, 0x5) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)=0x40) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x2, 0x0) r4 = openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0xa0340, 0x0) io_cancel$auto(0x0, &(0x7f0000000240)={0x0, 0xfffffffc, 0x7, 0x8, 0x1, r4, 0x401, 0x6, 0xdf51, 0x0, 0x8476, r1}, &(0x7f0000000280)={0x1, 0xe4, 0x4, 0x6}) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x9, r0, r1, 0xffffffffffffff9d}) r5 = epoll_create$auto(0x45f) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)=""/8, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PEER_REMOVE(r6, &(0x7f00000110c0)={0x0, 0x0, &(0x7f0000011080)={&(0x7f0000001380)={0x2c, r7, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008105}, 0x40) r8 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_STEREO(r8, 0xc0045003, 0x0) mq_timedreceive$auto(r8, &(0x7f0000000140)='\x00', 0x3, &(0x7f0000000180), &(0x7f00000001c0)={0x0, 0x8}) 0s ago: executing program 4 (id=1420): r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) r1 = prctl$auto(0x10000000015, 0x400000000005, 0x9, 0x4000000008, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r2 = socket(0x1e, 0x5, 0x0) recvfrom$auto(0x3, 0x0, 0x110, 0x101, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/vm/dirtytime_expire_seconds\x00', 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000100), r2) sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r5, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x40001) r6 = setfsuid$auto(0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1b0025bd7000fddbdf250300000029ff08000c00038008004700", @ANYRES32=r6, @ANYBLOB="12000100ff030000c19f1579048590828847000004000800"], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) write$auto(0x3, 0x0, 0xffd8) getrandom$auto(0x0, 0x6000000, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_freeze_timeout\x00', 0x40000, 0x0) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa003, 0x0) ioctl$auto(r7, 0xc0105512, 0x1) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/set_event_pid\x00', 0x200040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): already present! [ 88.897892][ T5836] Cannot create hsr debugfs directory [ 88.940182][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.950731][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.978471][ T5846] Bluetooth: hci2: command tx timeout [ 88.978491][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.997226][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.004230][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.032610][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.045747][ T5143] Bluetooth: hci3: command tx timeout [ 89.051601][ T5143] Bluetooth: hci0: command tx timeout [ 89.057447][ T5846] Bluetooth: hci1: command tx timeout [ 89.160365][ T5833] hsr_slave_0: entered promiscuous mode [ 89.168295][ T5833] hsr_slave_1: entered promiscuous mode [ 89.175682][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.183325][ T5833] Cannot create hsr debugfs directory [ 89.195015][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.227087][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.239958][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.275602][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.372234][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.395867][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.421882][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.433339][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.547317][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.566541][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.601716][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.612172][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.651837][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.676066][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.691592][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.702557][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.726253][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.764178][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.801532][ T3566] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.808998][ T3566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.854410][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.861594][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.911885][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.992916][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.006126][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.041346][ T3566] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.048580][ T3566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.078521][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.093268][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.134216][ T3566] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.141469][ T3566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.154071][ T3566] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.161276][ T3566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.184429][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.220346][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.227556][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.254574][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.261800][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.276595][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.284409][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.368913][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.504583][ T5832] veth0_vlan: entered promiscuous mode [ 90.523674][ T5832] veth1_vlan: entered promiscuous mode [ 90.617281][ T5832] veth0_macvtap: entered promiscuous mode [ 90.656683][ T5832] veth1_macvtap: entered promiscuous mode [ 90.705686][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.749931][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.808964][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.819611][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.829404][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.841322][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.850223][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.873818][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.952650][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.000439][ T5836] veth0_vlan: entered promiscuous mode [ 91.045785][ T5143] Bluetooth: hci2: command tx timeout [ 91.079650][ T5834] veth0_vlan: entered promiscuous mode [ 91.087310][ T5833] veth0_vlan: entered promiscuous mode [ 91.098006][ T5836] veth1_vlan: entered promiscuous mode [ 91.108093][ T3566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.117906][ T3566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.136295][ T5143] Bluetooth: hci0: command tx timeout [ 91.136377][ T5846] Bluetooth: hci1: command tx timeout [ 91.141743][ T5143] Bluetooth: hci3: command tx timeout [ 91.167920][ T5834] veth1_vlan: entered promiscuous mode [ 91.189933][ T5833] veth1_vlan: entered promiscuous mode [ 91.220027][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.235903][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.284669][ T5836] veth0_macvtap: entered promiscuous mode [ 91.302952][ T5833] veth0_macvtap: entered promiscuous mode [ 91.312343][ T5836] veth1_macvtap: entered promiscuous mode [ 91.340096][ T5834] veth0_macvtap: entered promiscuous mode [ 91.347118][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.375391][ T5833] veth1_macvtap: entered promiscuous mode [ 91.392734][ T5834] veth1_macvtap: entered promiscuous mode [ 91.424605][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.460329][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.472610][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.484403][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.496426][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.506478][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.517141][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.543125][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.563835][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.575958][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.589973][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.612189][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.623117][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.633877][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.646105][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.658756][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.685028][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.706793][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.721295][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.730268][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.741500][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.752859][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.763379][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.774691][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.793813][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.812218][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.824919][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.873109][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.882646][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.892686][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.901697][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.913436][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.930031][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.941409][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.952092][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.962011][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.974451][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.986767][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.994353][ T5902] netlink: 222 bytes leftover after parsing attributes in process `syz.1.6'. [ 92.021741][ T5903] Zero length message leads to an empty skb [ 92.028581][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.028717][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.028765][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.028812][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.232557][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.273046][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.301102][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.321008][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.366997][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.374951][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.411536][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.437403][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.487731][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.525465][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.587016][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.601250][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.887303][ T5911] process 'syz.2.3' launched ':,' with NULL argv: empty string added [ 93.125788][ T5143] Bluetooth: hci2: command tx timeout [ 93.205354][ T5143] Bluetooth: hci1: command tx timeout [ 93.206459][ T5850] Bluetooth: hci0: command tx timeout [ 93.211689][ T5143] Bluetooth: hci3: command tx timeout [ 94.575060][ T5935] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11'. [ 95.206316][ T5143] Bluetooth: hci2: command tx timeout [ 95.286268][ T5143] Bluetooth: hci0: command tx timeout [ 95.291758][ T5143] Bluetooth: hci3: command tx timeout [ 95.297404][ T5846] Bluetooth: hci1: command tx timeout [ 95.545357][ T5947] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13'. [ 96.196817][ T5956] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16'. [ 97.392116][ T46] cfg80211: failed to load regulatory.db [ 98.445992][ T5982] netlink: 222 bytes leftover after parsing attributes in process `syz.3.22'. [ 99.303595][ T5989] netlink: 40 bytes leftover after parsing attributes in process `syz.2.25'. [ 105.603705][ T6072] netlink: 40 bytes leftover after parsing attributes in process `syz.0.45'. [ 106.399775][ T6081] netlink: 40 bytes leftover after parsing attributes in process `syz.2.46'. [ 106.509594][ T6079] netlink: 40 bytes leftover after parsing attributes in process `syz.3.47'. [ 108.763168][ T6108] netlink: 40 bytes leftover after parsing attributes in process `syz.2.53'. [ 113.809886][ T6188] netlink: 40 bytes leftover after parsing attributes in process `syz.0.78'. [ 114.303258][ T6194] netlink: 40 bytes leftover after parsing attributes in process `syz.2.79'. [ 114.542699][ T6201] netlink: 40 bytes leftover after parsing attributes in process `syz.1.81'. [ 117.089194][ T6238] netlink: 222 bytes leftover after parsing attributes in process `syz.0.91'. [ 117.118022][ T6235] netlink: 40 bytes leftover after parsing attributes in process `syz.2.90'. [ 124.153926][ T6371] netlink: 40 bytes leftover after parsing attributes in process `syz.0.135'. [ 125.648031][ T6397] netlink: 40 bytes leftover after parsing attributes in process `syz.1.141'. [ 127.049820][ T6407] netlink: 40 bytes leftover after parsing attributes in process `syz.2.144'. [ 128.720679][ T6428] netlink: 40 bytes leftover after parsing attributes in process `syz.3.150'. [ 130.863551][ T6462] netlink: 40 bytes leftover after parsing attributes in process `syz.2.160'. [ 132.165427][ T6470] netlink: 40 bytes leftover after parsing attributes in process `syz.1.162'. [ 132.804113][ T6491] netlink: 40 bytes leftover after parsing attributes in process `syz.2.168'. [ 133.193262][ T6495] FAULT_INJECTION: forcing a failure. [ 133.193262][ T6495] name failslab, interval 1, probability 0, space 0, times 1 [ 133.277401][ T6495] CPU: 1 UID: 0 PID: 6495 Comm: syz.0.170 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 133.288092][ T6495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 133.298218][ T6495] Call Trace: [ 133.301552][ T6495] [ 133.304537][ T6495] dump_stack_lvl+0x16c/0x1f0 [ 133.309316][ T6495] should_fail_ex+0x497/0x5b0 [ 133.314066][ T6495] ? fs_reclaim_acquire+0xae/0x150 [ 133.319250][ T6495] should_failslab+0xc2/0x120 [ 133.324014][ T6495] __kmalloc_cache_noprof+0x68/0x420 [ 133.329386][ T6495] ? __pfx_free_ioctx_users+0x10/0x10 [ 133.334855][ T6495] percpu_ref_init+0xd9/0x400 [ 133.339605][ T6495] ? __init_waitqueue_head+0xca/0x150 [ 133.345060][ T6495] ioctx_alloc+0x2d2/0x1f70 [ 133.349649][ T6495] ? __might_fault+0x13b/0x190 [ 133.354497][ T6495] ? __pfx_lock_release+0x10/0x10 [ 133.359596][ T6495] ? trace_lock_acquire+0x14e/0x1f0 [ 133.364892][ T6495] ? __pfx_ioctx_alloc+0x10/0x10 [ 133.370030][ T6495] ? lock_acquire+0x2f/0xb0 [ 133.374588][ T6495] ? __might_fault+0xe3/0x190 [ 133.379356][ T6495] ? __might_fault+0xe3/0x190 [ 133.384135][ T6495] __x64_sys_io_setup+0xc9/0x210 [ 133.389232][ T6495] do_syscall_64+0xcd/0x250 [ 133.393813][ T6495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.399792][ T6495] RIP: 0033:0x7fb06df85d29 [ 133.404282][ T6495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.423963][ T6495] RSP: 002b:00007fb06ee01038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 133.432422][ T6495] RAX: ffffffffffffffda RBX: 00007fb06e175fa0 RCX: 00007fb06df85d29 [ 133.440424][ T6495] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000007ffe [ 133.448430][ T6495] RBP: 00007fb06ee01090 R08: 0000000000000000 R09: 0000000000000000 [ 133.456430][ T6495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.464430][ T6495] R13: 0000000000000000 R14: 00007fb06e175fa0 R15: 00007ffe1f88f098 [ 133.472629][ T6495] [ 136.693278][ T6529] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 137.590191][ T6536] netlink: 40 bytes leftover after parsing attributes in process `syz.0.181'. [ 138.329523][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.336264][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.691129][ T6547] Process accounting resumed [ 138.713685][ T6547] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6547 comm: syz.2.185) [ 139.266416][ T6556] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6556 comm: syz.2.186) [ 139.394524][ T6552] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6552 comm: syz.2.186) [ 139.630376][ T6558] netlink: 306 bytes leftover after parsing attributes in process `syz.2.187'. [ 140.012729][ T6562] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6562 comm: syz.2.187) [ 140.096820][ T6557] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6557 comm: syz.2.187) [ 140.150996][ T29] audit: type=1800 audit(1734839942.200:2): pid=6565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.188" name="dummy_udc" dev="gadgetfs" ino=6589 res=0 errno=0 [ 141.805939][ T6572] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6572 comm: syz.2.189) [ 142.066413][ T6595] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6595 comm: syz.2.196) [ 142.304220][ T6598] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6598 comm: syz.2.198) [ 142.535665][ T6604] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6604 comm: syz.2.199) [ 143.093066][ T6608] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6608 comm: syz.2.200) [ 143.612427][ T6614] zram: Added device: zram1 [ 144.188724][ T6614] zram: Added device: zram2 [ 144.447613][ T6621] warn_unsupported: 1 callbacks suppressed [ 144.447637][ T6621] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6621 comm: syz.2.204) [ 145.003893][ T6638] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6638 comm: syz.2.209) [ 146.014382][ T6645] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6645 comm: syz.2.211) [ 146.876080][ T6664] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6664 comm: syz.2.216) [ 148.228670][ T6666] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6666 comm: syz.2.219) [ 149.175403][ T6678] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6678 comm: syz.2.220) [ 150.020085][ T6688] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6688 comm: syz.2.221) [ 150.483304][ T6689] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6689 comm: syz.2.222) [ 151.010370][ T6696] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6696 comm: syz.2.224) [ 152.015596][ T6702] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6702 comm: syz.2.226) [ 153.113399][ T6717] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6717 comm: syz.2.230) [ 153.448948][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.235'. [ 153.859353][ T6727] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6727 comm: syz.2.234) [ 155.713158][ T6742] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6742 comm: syz.2.238) [ 156.527545][ T6753] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6753 comm: syz.2.242) [ 156.864278][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.245'. [ 157.463396][ T6757] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6757 comm: syz.2.244) [ 157.808666][ T6444] syz.1.153 (6444) used greatest stack depth: 20112 bytes left [ 157.998533][ T6779] Process accounting resumed [ 159.462334][ T6642] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6642 comm: syz.2.209) [ 160.016592][ T6777] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6777 comm: syz.2.249) [ 160.093672][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.254'. [ 160.287917][ T6800] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6800 comm: syz.2.254) [ 163.074199][ T6805] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6805 comm: syz.2.255) [ 163.148937][ T6828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'. [ 163.277733][ T6829] GUP no longer grows the stack in syz.1.259 (6829): 1000-41000 (0) [ 163.419268][ T6829] CPU: 0 UID: 0 PID: 6829 Comm: syz.1.259 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 163.430059][ T6829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 163.440269][ T6829] Call Trace: [ 163.443161][ T6832] kAFS: bad VL server IP address [ 163.443569][ T6829] [ 163.443613][ T6829] dump_stack_lvl+0x16c/0x1f0 [ 163.456535][ T6829] gup_vma_lookup+0x1d2/0x220 [ 163.461297][ T6829] __get_user_pages+0x236/0x3b50 [ 163.466496][ T6829] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 163.472298][ T6829] ? get_dump_page+0xb6/0x230 [ 163.477054][ T6829] ? get_dump_page+0xb6/0x230 [ 163.481818][ T6829] ? __pfx___get_user_pages+0x10/0x10 [ 163.487263][ T6829] ? down_read_killable+0xcc/0x380 [ 163.492587][ T6829] ? __pfx_down_read_killable+0x10/0x10 [ 163.498212][ T6829] ? policy_nodemask+0xea/0x4e0 [ 163.503146][ T6829] get_dump_page+0xff/0x230 [ 163.507737][ T6829] ? __pfx_get_dump_page+0x10/0x10 [ 163.513020][ T6829] ? do_raw_spin_unlock+0x172/0x230 [ 163.518418][ T6829] ? free_unref_page+0x6f5/0x1080 [ 163.523527][ T6829] dump_user_range+0x135/0x8c0 [ 163.528381][ T6829] ? __pfx_dump_user_range+0x10/0x10 [ 163.533757][ T6829] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 163.540330][ T6829] ? __pfx_writenote+0x10/0x10 [ 163.545171][ T6829] elf_core_dump+0x2787/0x3880 [ 163.550245][ T6829] ? __pfx_elf_core_dump+0x10/0x10 [ 163.555450][ T6829] ? kasan_save_stack+0x42/0x60 [ 163.560546][ T6829] ? kasan_save_stack+0x33/0x60 [ 163.565468][ T6829] ? kasan_save_track+0x14/0x30 [ 163.570565][ T6829] ? __kasan_kmalloc+0xaa/0xb0 [ 163.575491][ T6829] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 163.581018][ T6829] ? do_coredump+0x1665/0x43e0 [ 163.586030][ T6829] ? get_signal+0x23f3/0x2610 [ 163.590844][ T6829] ? rcu_is_watching+0x12/0xc0 [ 163.595777][ T6829] ? trace_lock_acquire+0x14e/0x1f0 [ 163.601060][ T6829] ? __pfx_sort+0x10/0x10 [ 163.605462][ T6829] ? get_signal+0x23f3/0x2610 [ 163.610298][ T6829] ? do_coredump+0x2dd5/0x43e0 [ 163.615159][ T6829] do_coredump+0x2dd5/0x43e0 [ 163.619929][ T6829] ? __pfx_do_coredump+0x10/0x10 [ 163.624954][ T6829] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 163.631425][ T6829] get_signal+0x23f3/0x2610 [ 163.636015][ T6829] ? __pfx_get_signal+0x10/0x10 [ 163.641359][ T6829] ? rcu_is_watching+0x12/0xc0 [ 163.646199][ T6829] ? trace_irq_disable.constprop.0+0xea/0x140 [ 163.652347][ T6829] arch_do_signal_or_restart+0x90/0x7e0 [ 163.658063][ T6829] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 163.664341][ T6829] ? do_user_addr_fault+0xa4b/0x13f0 [ 163.669702][ T6829] irqentry_exit_to_user_mode+0x13f/0x280 [ 163.675515][ T6829] asm_exc_page_fault+0x26/0x30 [ 163.680439][ T6829] RIP: 0033:0x41000 [ 163.684291][ T6829] Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 163.704401][ T6829] RSP: 002b:000000000000000a EFLAGS: 00010202 [ 163.710570][ T6829] RAX: 0000000000000000 RBX: 00007faf14175fa0 RCX: 00007faf13f85d29 [ 163.719221][ T6829] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000002020003b46 [ 163.727349][ T6829] RBP: 00007faf14001aa8 R08: 8000000000000001 R09: 0000000000000000 [ 163.736168][ T6829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.744464][ T6829] R13: 0000000000000000 R14: 00007faf14175fa0 R15: 00007fff803ba7d8 [ 163.752525][ T6829] [ 164.039939][ T6833] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6833 comm: syz.2.264) [ 164.953267][ T6460] syz.1.156 (6460) used greatest stack depth: 18160 bytes left [ 165.120189][ T6842] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6842 comm: syz.2.269) [ 166.067594][ T6860] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6860 comm: syz.2.271) [ 166.685874][ T6879] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6879 comm: syz.2.276) s out of range [ 168.299734][ T6887] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 6887 comm: syz.2.279) [ 168.852338][ T6893] Process accounting paused [ 173.139812][ T6952] netlink: 178 bytes leftover after parsing attributes in process `syz.3.296'. [ 173.546880][ T6963] ptrace attach of "./syz-executor exec"[5833] was attempted by "./syz-executor exec"[6963] [ 174.747566][ T6975] FAULT_INJECTION: forcing a failure. [ 174.747566][ T6975] name failslab, interval 1, probability 0, space 0, times 0 [ 174.802422][ T6975] CPU: 0 UID: 0 PID: 6975 Comm: syz.2.301 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 174.813218][ T6975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 174.823962][ T6975] Call Trace: [ 174.827292][ T6975] [ 174.830278][ T6975] dump_stack_lvl+0x16c/0x1f0 [ 174.835031][ T6975] should_fail_ex+0x497/0x5b0 [ 174.839787][ T6975] ? fs_reclaim_acquire+0xae/0x150 [ 174.844977][ T6975] should_failslab+0xc2/0x120 [ 174.849733][ T6975] __kmalloc_node_noprof+0xd1/0x520 [ 174.855014][ T6975] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 174.860541][ T6975] ? dev_addr_mod+0x2c9/0x390 [ 174.865264][ T6975] __kvmalloc_node_noprof+0xad/0x1a0 [ 174.870597][ T6975] alloc_netdev_mqs+0xab1/0x1320 [ 174.875575][ T6975] ? __pfx_ax_setup+0x10/0x10 [ 174.880288][ T6975] mkiss_open+0xb4/0x9a0 [ 174.884568][ T6975] ? __pfx_mkiss_open+0x10/0x10 [ 174.889457][ T6975] tty_ldisc_open+0x9c/0x120 [ 174.894181][ T6975] tty_set_ldisc+0x318/0x720 [ 174.898846][ T6975] tty_ioctl+0xc22/0x1640 [ 174.903238][ T6975] ? __pfx_tty_ioctl+0x10/0x10 [ 174.908069][ T6975] ? __pfx_lock_release+0x10/0x10 [ 174.913485][ T6975] ? trace_lock_acquire+0x14e/0x1f0 [ 174.918764][ T6975] ? __fget_files+0x206/0x3a0 [ 174.923490][ T6975] ? __pfx_tty_ioctl+0x10/0x10 [ 174.928337][ T6975] __x64_sys_ioctl+0x190/0x200 [ 174.933168][ T6975] do_syscall_64+0xcd/0x250 [ 174.937720][ T6975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.943714][ T6975] RIP: 0033:0x7f857bf85d29 [ 174.948188][ T6975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.967863][ T6975] RSP: 002b:00007f857cce4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.976344][ T6975] RAX: ffffffffffffffda RBX: 00007f857c175fa0 RCX: 00007f857bf85d29 [ 174.984348][ T6975] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000007 [ 174.992467][ T6975] RBP: 00007f857cce4090 R08: 0000000000000000 R09: 0000000000000000 [ 175.000671][ T6975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.008675][ T6975] R13: 0000000000000000 R14: 00007f857c175fa0 R15: 00007fffc805fcf8 [ 175.016708][ T6975] [ 178.040664][ T7010] could not allocate digest TFM handle [ 180.250683][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 181.901859][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 182.324819][ T7064] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 182.448115][ T7066] netlink: 330 bytes leftover after parsing attributes in process `syz.0.329'. [ 183.011686][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.336'. [ 184.338615][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.347'. [ 184.401784][ T7115] futex_wake_op: syz.3.348 tries to shift op by 64; fix this program [ 185.665677][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.358'. [ 185.906696][ T7154] netlink: 'syz.3.359': attribute type 1 has an invalid length. [ 188.102461][ T7189] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.120883][ T7189] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 188.188490][ T7189] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 188.227847][ T7189] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 188.255249][ T7189] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 188.318344][ T7189] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 188.526520][ T7189] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 188.554123][ T7189] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 188.672663][ T7189] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 188.852358][ T7189] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 188.863788][ T7189] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 189.122817][ T7189] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 189.526399][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout [ 190.250609][ T5143] Bluetooth: hci0: command 0x0c1a tx timeout [ 190.565369][ T5143] Bluetooth: hci2: command 0x0c1a tx timeout [ 190.699991][ T7225] FAULT_INJECTION: forcing a failure. [ 190.699991][ T7225] name failslab, interval 1, probability 0, space 0, times 0 [ 190.875195][ T7225] CPU: 1 UID: 0 PID: 7225 Comm: syz.2.379 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 190.885358][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 190.885850][ T7225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 190.902364][ T7225] Call Trace: [ 190.905693][ T7225] [ 190.908736][ T7225] dump_stack_lvl+0x16c/0x1f0 [ 190.913489][ T7225] should_fail_ex+0x497/0x5b0 [ 190.918253][ T7225] should_failslab+0xc2/0x120 [ 190.923030][ T7225] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 190.928917][ T7225] ? __alloc_skb+0x2b3/0x380 [ 190.933595][ T7225] __alloc_skb+0x2b3/0x380 [ 190.938144][ T7225] ? __pfx___alloc_skb+0x10/0x10 [ 190.943174][ T7225] ? __pfx___nla_validate_parse+0x10/0x10 [ 190.948994][ T7225] ovs_meter_cmd_reply_start+0x55/0x1f0 [ 190.954717][ T7225] ovs_meter_cmd_get+0x124/0x480 [ 190.959822][ T7225] ? __pfx_ovs_meter_cmd_get+0x10/0x10 [ 190.965390][ T7225] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 190.972944][ T7225] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 190.980429][ T7225] genl_family_rcv_msg_doit+0x202/0x2f0 [ 190.986152][ T7225] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 190.992290][ T7225] ? genl_get_cmd+0x195/0x580 [ 190.997120][ T7225] ? __radix_tree_lookup+0x21f/0x2c0 [ 191.002489][ T7225] genl_rcv_msg+0x565/0x800 [ 191.007202][ T7225] ? __pfx_genl_rcv_msg+0x10/0x10 [ 191.012294][ T7225] ? __pfx_ovs_meter_cmd_get+0x10/0x10 [ 191.017838][ T7225] netlink_rcv_skb+0x165/0x410 [ 191.022681][ T7225] ? __pfx_genl_rcv_msg+0x10/0x10 [ 191.027792][ T7225] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 191.033163][ T7225] ? down_read+0xc9/0x330 [ 191.037571][ T7225] ? __pfx_down_read+0x10/0x10 [ 191.042408][ T7225] ? netlink_deliver_tap+0x1ae/0xca0 [ 191.047878][ T7225] genl_rcv+0x28/0x40 [ 191.051928][ T7225] netlink_unicast+0x53c/0x7f0 [ 191.056776][ T7225] ? __pfx_netlink_unicast+0x10/0x10 [ 191.062131][ T7225] ? __phys_addr_symbol+0x30/0x80 [ 191.067230][ T7225] ? __check_object_size+0x488/0x710 [ 191.072595][ T7225] netlink_sendmsg+0x8b8/0xd70 [ 191.077521][ T7225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.082995][ T7225] ____sys_sendmsg+0x9ae/0xb40 [ 191.087854][ T7225] ? copy_msghdr_from_user+0x10b/0x160 [ 191.093405][ T7225] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.098803][ T7225] ___sys_sendmsg+0x135/0x1e0 [ 191.103581][ T7225] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.108871][ T7225] ? __pfx_lock_release+0x10/0x10 [ 191.113954][ T7225] ? trace_lock_acquire+0x14e/0x1f0 [ 191.119332][ T7225] ? __fget_files+0x206/0x3a0 [ 191.124126][ T7225] __sys_sendmsg+0x16e/0x220 [ 191.129060][ T7225] ? __pfx___sys_sendmsg+0x10/0x10 [ 191.134359][ T7225] do_syscall_64+0xcd/0x250 [ 191.138949][ T7225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.144920][ T7225] RIP: 0033:0x7f857bf85d29 [ 191.149485][ T7225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.169343][ T7225] RSP: 002b:00007f857cce4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.177922][ T7225] RAX: ffffffffffffffda RBX: 00007f857c175fa0 RCX: 00007f857bf85d29 [ 191.186039][ T7225] RDX: 0000000000044800 RSI: 0000000020000540 RDI: 0000000000000006 [ 191.194502][ T7225] RBP: 00007f857cce4090 R08: 0000000000000000 R09: 0000000000000000 [ 191.202715][ T7225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.210762][ T7225] R13: 0000000000000000 R14: 00007f857c175fa0 R15: 00007fffc805fcf8 [ 191.218902][ T7225] [ 191.625633][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout [ 192.340181][ T5143] Bluetooth: hci0: command 0x0c1a tx timeout [ 192.648053][ T5143] Bluetooth: hci2: command 0x0c1a tx timeout [ 192.967223][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 193.685736][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout [ 194.405546][ T5143] Bluetooth: hci0: command 0x0c1a tx timeout [ 194.725221][ T5143] Bluetooth: hci2: command 0x0c1a tx timeout [ 195.052744][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 195.192411][ T7294] netlink: 28 bytes leftover after parsing attributes in process `syz.3.401'. [ 195.479605][ T7294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.509062][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.620394][ T7294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.725533][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.206605][ T7362] nbd0: detected capacity change from 0 to 68719476736 [ 199.232962][ T5835] block nbd0: Send control failed (result -22) [ 199.245039][ T5835] block nbd0: Request send failed, requeueing [ 199.282786][ T5143] block nbd0: Receive control failed (result -32) [ 199.292367][ T58] block nbd0: Dead connection, failed to find a fallback [ 199.299931][ T58] block nbd0: shutting down sockets [ 199.305829][ T58] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.315871][ T58] Buffer I/O error on dev nbd0, logical block 0, async page read [ 199.324991][ T5835] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.361626][ T5835] Buffer I/O error on dev nbd0, logical block 0, async page read [ 199.404315][ T5835] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.466178][ T5835] Buffer I/O error on dev nbd0, logical block 0, async page read [ 199.505393][ T5835] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.514535][ T5835] Buffer I/O error on dev nbd0, logical block 0, async page read [ 199.559968][ T5835] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.570387][ T5835] Buffer I/O error on dev nbd0, logical block 0, async page read [ 199.582220][ T5835] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.601918][ T5835] Buffer I/O error on dev nbd0, logical block 0, async page read [ 199.624273][ T7368] Process accounting resumed [ 199.630643][ T5835] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.647655][ T5835] Buffer I/O error on dev nbd0, logical block 0, async page read [ 199.657084][ T5835] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.671835][ T5835] Buffer I/O error on dev nbd0, logical block 0, async page read [ 199.681151][ T5835] ldm_validate_partition_table(): Disk read failed. [ 199.702848][ T5835] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.722791][ T5835] Buffer I/O error on dev nbd0, logical block 0, async page read [ 199.738170][ T5835] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.771010][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.772501][ T5835] Buffer I/O error on dev nbd0, logical block 0, async page read [ 199.778846][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.819355][ T5835] Dev nbd0: unable to read RDB block 0 [ 199.866582][ T5835] nbd0: unable to read partition table [ 199.890396][ T5835] ldm_validate_partition_table(): Disk read failed. [ 199.910289][ T5835] Dev nbd0: unable to read RDB block 0 [ 199.930054][ T5835] nbd0: unable to read partition table [ 200.748908][ T7392] program syz.0.428 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.775491][ T7392] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 201.909675][ T7416] FAULT_INJECTION: forcing a failure. [ 201.909675][ T7416] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 201.958977][ T7416] CPU: 0 UID: 0 PID: 7416 Comm: syz.0.438 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 201.969855][ T7416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 201.979948][ T7416] Call Trace: [ 201.983252][ T7416] [ 201.986240][ T7416] dump_stack_lvl+0x16c/0x1f0 [ 201.990965][ T7416] should_fail_ex+0x497/0x5b0 [ 201.995689][ T7416] _copy_to_user+0x32/0xd0 [ 202.000156][ T7416] simple_read_from_buffer+0xd0/0x160 [ 202.005570][ T7416] proc_fail_nth_read+0x198/0x270 [ 202.010664][ T7416] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.016391][ T7416] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.022007][ T7416] vfs_read+0x1df/0xbe0 [ 202.026215][ T7416] ? __fget_files+0x1fc/0x3a0 [ 202.030940][ T7416] ? __pfx___mutex_lock+0x10/0x10 [ 202.036008][ T7416] ? __pfx_vfs_read+0x10/0x10 [ 202.040730][ T7416] ? __fget_files+0x206/0x3a0 [ 202.045454][ T7416] ksys_read+0x12b/0x250 [ 202.049732][ T7416] ? __pfx_ksys_read+0x10/0x10 [ 202.054542][ T7416] do_syscall_64+0xcd/0x250 [ 202.059104][ T7416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.065045][ T7416] RIP: 0033:0x7fb06df8473c [ 202.069490][ T7416] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 202.089134][ T7416] RSP: 002b:00007fb06ee01030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 202.097586][ T7416] RAX: ffffffffffffffda RBX: 00007fb06e175fa0 RCX: 00007fb06df8473c [ 202.105587][ T7416] RDX: 000000000000000f RSI: 00007fb06ee010a0 RDI: 0000000000000004 [ 202.113588][ T7416] RBP: 00007fb06ee01090 R08: 0000000000000000 R09: 0000000000000000 [ 202.121593][ T7416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.129597][ T7416] R13: 0000000000000000 R14: 00007fb06e175fa0 R15: 00007ffe1f88f098 [ 202.137892][ T7416] [ 202.415868][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 203.536283][ T7451] mkiss: ax0: crc mode is auto. [ 203.551214][ T7454] [U] [ 203.554296][ T7454] [U] [ 203.557082][ T7454] [U] [ 203.559862][ T7454] [U] [ 203.570483][ T7400] Process accounting resumed [ 203.580188][ T7454] [U] [ 203.583002][ T7454] [U] [ 203.585795][ T7454] [U] [ 203.588569][ T7454] [U] [ 203.594410][ T7454] [U] [ 203.597299][ T7454] [U] [ 203.600076][ T7454] [U] [ 203.602852][ T7454] [U] [ 203.608447][ T7454] [U] [ 203.611247][ T7454] [U] [ 203.614025][ T7454] [U] [ 203.615424][ T7400] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7400 comm: syz.2.432) [ 203.616773][ T7454] [U] [ 203.644596][ T7454] [U] [ 203.647409][ T7454] [U] [ 203.650180][ T7454] [U] [ 203.652949][ T7454] [U] [ 203.668045][ T7457] [U] [ 203.707588][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'. [ 203.917127][ T7460] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7460 comm: syz.2.452) [ 204.154309][ T7468] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7468 comm: syz.2.455) [ 204.450470][ T7473] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7473 comm: syz.2.457) [ 204.640976][ T7484] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7484 comm: syz.2.460) [ 204.722807][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.461'. [ 205.342341][ T7490] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7490 comm: syz.2.462) [ 205.564248][ T7504] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7504 comm: syz.2.466) [ 206.567848][ T7513] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7513 comm: syz.2.470) [ 207.040476][ T7545] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7545 comm: syz.2.477) [ 207.759385][ T7559] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7559 comm: syz.2.481) [ 208.715665][ T7553] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7553 comm: syz.2.481) [ 208.900532][ T7576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.484'. [ 208.974925][ T7576] macsec0: entered allmulticast mode [ 208.995622][ T7576] veth1_macvtap: entered allmulticast mode [ 209.112524][ T7583] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7583 comm: syz.2.489) [ 209.355797][ T7598] random: crng reseeded on system resumption [ 209.440458][ T7601] netlink: 342 bytes leftover after parsing attributes in process `syz.0.495'. [ 209.627905][ T7595] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7595 comm: syz.2.493) [ 209.685764][ T7523] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7523 comm: syz.2.470) [ 210.642972][ T7622] netlink: 222 bytes leftover after parsing attributes in process `syz.1.499'. [ 210.709120][ T7622] FAULT_INJECTION: forcing a failure. [ 210.709120][ T7622] name failslab, interval 1, probability 0, space 0, times 0 [ 210.778016][ T7622] CPU: 1 UID: 0 PID: 7622 Comm: syz.1.499 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 210.788861][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 210.798960][ T7622] Call Trace: [ 210.802309][ T7622] [ 210.805293][ T7622] dump_stack_lvl+0x16c/0x1f0 [ 210.810036][ T7622] should_fail_ex+0x497/0x5b0 [ 210.814777][ T7622] ? fs_reclaim_acquire+0xae/0x150 [ 210.820037][ T7622] should_failslab+0xc2/0x120 [ 210.824797][ T7622] __kmalloc_noprof+0xce/0x4f0 [ 210.829632][ T7622] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 210.835325][ T7622] ? tomoyo_realpath_from_path+0xbf/0x710 [ 210.841111][ T7622] tomoyo_realpath_from_path+0xbf/0x710 [ 210.846725][ T7622] ? tomoyo_path_number_perm+0x235/0x5b0 [ 210.852437][ T7622] tomoyo_path_number_perm+0x248/0x5b0 [ 210.857995][ T7622] ? tomoyo_path_number_perm+0x235/0x5b0 [ 210.863802][ T7622] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 210.869930][ T7622] ? __pfx_lock_release+0x10/0x10 [ 210.875003][ T7622] ? trace_lock_acquire+0x14e/0x1f0 [ 210.880282][ T7622] ? lock_acquire+0x2f/0xb0 [ 210.884841][ T7622] ? __fget_files+0x40/0x3a0 [ 210.889500][ T7622] ? __fget_files+0x206/0x3a0 [ 210.894243][ T7622] security_file_ioctl+0x9b/0x240 [ 210.899330][ T7622] __x64_sys_ioctl+0xb7/0x200 [ 210.904127][ T7622] do_syscall_64+0xcd/0x250 [ 210.908817][ T7622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.914947][ T7622] RIP: 0033:0x7faf13f85d29 [ 210.919408][ T7622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.939086][ T7622] RSP: 002b:00007faf14e60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.947557][ T7622] RAX: ffffffffffffffda RBX: 00007faf14175fa0 RCX: 00007faf13f85d29 [ 210.955575][ T7622] RDX: 0000000000000009 RSI: 0000000000004b49 RDI: 0000000000000006 [ 210.963593][ T7622] RBP: 00007faf14e60090 R08: 0000000000000000 R09: 0000000000000000 [ 210.971606][ T7622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.979623][ T7622] R13: 0000000000000000 R14: 00007faf14175fa0 R15: 00007fff803ba7d8 [ 210.987746][ T7622] [ 211.238595][ T7622] ERROR: Out of memory at tomoyo_realpath_from_path. [ 211.483289][ T7627] openvswitch: netlink: IPv4 tunnel dst address is zero [ 211.492508][ T7629] netlink: 222 bytes leftover after parsing attributes in process `syz.1.502'. [ 211.550024][ T7610] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7610 comm: syz.2.497) [ 212.097712][ T7634] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7634 comm: syz.2.504) [ 212.433048][ T7641] Process accounting resumed [ 212.459252][ T7641] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 7641 comm: syz.1.508) [ 212.684862][ T7647] netlink: 'syz.1.509': attribute type 2 has an invalid length. [ 212.725450][ T7647] netlink: 674 bytes leftover after parsing attributes in process `syz.1.509'. [ 212.831471][ T7644] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7644 comm: syz.2.507) [ 212.836880][ T7647] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 7647 comm: syz.1.509) [ 213.010690][ T7656] FAULT_INJECTION: forcing a failure. [ 213.010690][ T7656] name failslab, interval 1, probability 0, space 0, times 0 [ 213.051829][ T7656] CPU: 1 UID: 0 PID: 7656 Comm: syz.2.513 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 213.062527][ T7656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 213.072818][ T7656] Call Trace: [ 213.076178][ T7656] [ 213.079156][ T7656] dump_stack_lvl+0x16c/0x1f0 [ 213.083989][ T7656] should_fail_ex+0x497/0x5b0 [ 213.088872][ T7656] ? fs_reclaim_acquire+0xae/0x150 [ 213.094052][ T7656] should_failslab+0xc2/0x120 [ 213.099076][ T7656] __kmalloc_node_noprof+0xd1/0x520 [ 213.104367][ T7656] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 213.110098][ T7656] __kvmalloc_node_noprof+0xad/0x1a0 [ 213.115457][ T7656] seq_read_iter+0x82a/0x12b0 [ 213.120221][ T7656] ? __mutex_trylock_common+0xea/0x250 [ 213.125761][ T7656] kernfs_fop_read_iter+0x414/0x580 [ 213.131041][ T7656] ? rw_verify_area+0xd0/0x700 [ 213.135930][ T7656] vfs_read+0x87f/0xbe0 [ 213.140163][ T7656] ? __pfx_vfs_read+0x10/0x10 [ 213.144927][ T7656] ksys_read+0x12b/0x250 [ 213.149239][ T7656] ? __pfx_ksys_read+0x10/0x10 [ 213.154091][ T7656] do_syscall_64+0xcd/0x250 [ 213.158687][ T7656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.164694][ T7656] RIP: 0033:0x7f857bf85d29 [ 213.169204][ T7656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.189056][ T7656] RSP: 002b:00007f857cce4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 213.197900][ T7656] RAX: ffffffffffffffda RBX: 00007f857c175fa0 RCX: 00007f857bf85d29 [ 213.206022][ T7656] RDX: 0000000000000009 RSI: 0000000020002440 RDI: 0000000000000006 [ 213.214062][ T7656] RBP: 00007f857cce4090 R08: 0000000000000000 R09: 0000000000000000 [ 213.223763][ T7656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.223805][ T7656] R13: 0000000000000000 R14: 00007f857c175fa0 R15: 00007fffc805fcf8 [ 213.223848][ T7656] mm: syz.1.512) [ 214.256107][ T7656] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7656 comm: syz.2.513) [ 214.660116][ T7671] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 7671 comm: syz.1.517) [ 214.959748][ T7683] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 7683 comm: syz.1.522) [ 215.148928][ T7678] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7678 comm: syz.2.519) [ 215.747899][ T7690] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 7690 comm: syz.1.525) [ 216.061610][ T7701] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 7701 comm: syz.1.528) [ 216.415322][ T7699] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7699 comm: syz.2.527) [ 216.496444][ T7706] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 7706 comm: syz.1.530) [ 217.083976][ T7716] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7716 comm: syz.2.532) [ 217.195354][ T7714] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 7714 comm: syz.1.533) [ 219.388751][ T7739] warn_unsupported: 1 callbacks suppressed [ 219.388778][ T7739] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7739 comm: syz.2.539) [ 220.354444][ T7749] ubi0: attaching mtd0 [ 220.397731][ T7749] ubi0: scanning is finished [ 220.450495][ T7749] ubi0: empty MTD device detected [ 221.149860][ T7749] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 221.265209][ T7749] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 221.366283][ T7749] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 221.455233][ T7749] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 221.462719][ T7749] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 221.492416][ T7757] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7757 comm: syz.2.542) [ 221.495257][ T7762] Process accounting resumed [ 221.511900][ T7731] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 7731 comm: syz.1.536) [ 221.575233][ T7749] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 221.647156][ T7749] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3018351392 [ 221.676664][ T7762] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7762 comm: syz.0.543) [ 221.787606][ T7749] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 221.909030][ T7764] ubi0: background thread "ubi_bgt0d" started, PID 7764 [ 222.116662][ T7766] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7766 comm: syz.2.544) [ 222.236091][ T7676] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7676 comm: syz.0.520) [ 222.389327][ T7773] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 7773 comm: syz.1.545) [ 222.509034][ T7775] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7775 comm: syz.2.547) [ 222.998259][ T7768] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7768 comm: syz.0.546) [ 223.082774][ T7785] netlink: 40 bytes leftover after parsing attributes in process `syz.2.550'. [ 223.496399][ T7789] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 7789 comm: syz.1.549) [ 224.514119][ T7799] warn_unsupported: 1 callbacks suppressed [ 224.514150][ T7799] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7799 comm: syz.0.554) [ 224.862963][ T7797] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 7797 comm: syz.1.553) [ 225.318929][ T7782] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7782 comm: syz.2.550) [ 225.655706][ T7806] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7806 comm: syz.0.555) [ 225.669853][ T7624] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7624 comm: syz.2.497) [ 225.767040][ T7812] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7812 comm: syz.2.557) [ 225.799302][ T7724] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7724 comm: syz.0.531) [ 225.951332][ T7810] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 7810 comm: syz.1.556) [ 226.041988][ T7817] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7817 comm: syz.0.558) [ 226.120511][ T7719] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 7719 comm: syz.1.533) [ 226.824974][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.559'. [ 228.093014][ T7853] Process accounting resumed [ 229.754528][ T7857] warn_unsupported: 9 callbacks suppressed [ 229.754554][ T7857] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7857 comm: syz.2.568) [ 230.264194][ T7872] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7872 comm: syz.2.572) [ 230.425365][ T7865] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 7865 comm: syz.1.570) [ 230.901189][ T7882] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7882 comm: syz.2.574) [ 231.014189][ T7887] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 7887 comm: syz.1.575) [ 231.092290][ T7890] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7890 comm: syz.2.576) [ 231.446036][ T7896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.578'. [ 231.700795][ T7897] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 7897 comm: syz.1.578) [ 231.824215][ T7892] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7892 comm: syz.2.577) [ 232.133106][ T7901] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 7901 comm: syz.2.580) [ 232.667893][ T7904] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 7904 comm: syz.1.579) [ 232.890564][ T7911] ptrace attach of "./syz-executor exec"[5833] was attempted by "./syz-executor exec"[7911] [ 232.967016][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.582'. [ 233.656290][ T7920] ubi: mtd0 is already attached to ubi0 [ 234.212664][ T7926] ubi: mtd0 is already attached to ubi0 [ 234.364034][ T7926] Process accounting paused [ 235.023758][ T7936] warn_unsupported: 4 callbacks suppressed [ 235.023783][ T7936] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 7936 comm: syz.1.590) [ 235.527964][ T7708] Process accounting paused [ 236.529692][ T7944] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 7944 comm: syz.1.591) [ 236.698190][ T7712] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 7712 comm: syz.1.530) [ 236.864456][ T7960] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 7960 comm: syz.1.599) [ 237.160356][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'. [ 237.593479][ T7971] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 7971 comm: syz.1.600) [ 238.113300][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 238.838147][ T7994] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 7994 comm: syz.1.603) [ 240.034801][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'. [ 240.431258][ T8004] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 8004 comm: syz.1.607) [ 243.162186][ T8047] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 243.751325][ T7790] Process accounting paused [ 244.766668][ T8046] kexec: Could not allocate control_code_buffer [ 245.538622][ T8049] netlink: 40 bytes leftover after parsing attributes in process `syz.3.624'. [ 246.342849][ T8053] netlink: 40 bytes leftover after parsing attributes in process `syz.2.626'. [ 247.737908][ T8073] ubi: mtd0 is already attached to ubi0 [ 248.655242][ T8098] netlink: 306 bytes leftover after parsing attributes in process `syz.0.637'. [ 248.951273][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'. [ 249.675764][ T8114] netlink: 28 bytes leftover after parsing attributes in process `syz.3.641'. [ 250.210302][ T8110] delete_channel: no stack [ 250.534753][ T8127] netlink: 40 bytes leftover after parsing attributes in process `syz.1.644'. [ 250.744942][ T8114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.797872][ T8114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.838062][ T8114] bond0 (unregistering): Released all slaves [ 251.085046][ T8141] netlink: 306 bytes leftover after parsing attributes in process `syz.3.647'. [ 251.327361][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.650'. [ 252.335702][ T8165] netlink: 306 bytes leftover after parsing attributes in process `syz.2.655'. [ 252.373959][ T8168] netlink: 28 bytes leftover after parsing attributes in process `syz.0.656'. [ 253.141718][ T8177] netlink: 306 bytes leftover after parsing attributes in process `syz.3.659'. [ 253.200281][ T8166] delete_channel: no stack [ 253.245526][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'. [ 253.756974][ T8168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.985990][ T8168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.016111][ T8168] bond0 (unregistering): Released all slaves [ 255.729447][ T8212] netlink: 40 bytes leftover after parsing attributes in process `syz.1.666'. [ 256.416500][ T8215] ubi: mtd0 is already attached to ubi0 [ 256.845725][ T8226] netlink: 306 bytes leftover after parsing attributes in process `syz.0.671'. [ 257.036826][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.672'. [ 259.777219][ T8266] ubi: mtd0 is already attached to ubi0 [ 260.687797][ T8282] netlink: 306 bytes leftover after parsing attributes in process `syz.3.686'. [ 261.209702][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.216337][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 ol_code_buffer [ 262.982199][ T8292] CPU: 0 UID: 0 PID: 8292 Comm: syz.2.689 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 262.992911][ T8292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 263.003035][ T8292] Call Trace: [ 263.006366][ T8292] [ 263.009340][ T8292] dump_stack_lvl+0x16c/0x1f0 [ 263.014102][ T8292] should_fail_ex+0x497/0x5b0 [ 263.018928][ T8292] _copy_to_iter+0x4a5/0x1400 [ 263.023700][ T8292] ? __pfx__copy_to_iter+0x10/0x10 [ 263.028890][ T8292] ? __virt_addr_valid+0x1a4/0x590 [ 263.034082][ T8292] ? __virt_addr_valid+0x5e/0x590 [ 263.039173][ T8292] ? __phys_addr_symbol+0x30/0x80 [ 263.044272][ T8292] ? __check_object_size+0x488/0x710 [ 263.049620][ T8292] seq_read_iter+0xd00/0x12b0 [ 263.054385][ T8292] seq_read+0x39f/0x4e0 [ 263.058578][ T8292] ? __pfx_seq_read+0x10/0x10 [ 263.063310][ T8292] ? __pfx_seq_read+0x10/0x10 [ 263.068037][ T8292] proc_reg_read+0x23d/0x330 [ 263.072666][ T8292] ? __pfx_proc_reg_read+0x10/0x10 [ 263.077822][ T8292] vfs_read+0x1df/0xbe0 [ 263.082026][ T8292] ? __fget_files+0x1fc/0x3a0 [ 263.086747][ T8292] ? __pfx___mutex_lock+0x10/0x10 [ 263.091818][ T8292] ? __pfx_vfs_read+0x10/0x10 [ 263.096544][ T8292] ? __fget_files+0x206/0x3a0 [ 263.101274][ T8292] ksys_read+0x12b/0x250 [ 263.105564][ T8292] ? __pfx_ksys_read+0x10/0x10 [ 263.110375][ T8292] do_syscall_64+0xcd/0x250 [ 263.114922][ T8292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.120873][ T8292] RIP: 0033:0x7f857bf85d29 [ 263.125319][ T8292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.144966][ T8292] RSP: 002b:00007f857cce4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 263.153422][ T8292] RAX: ffffffffffffffda RBX: 00007f857c175fa0 RCX: 00007f857bf85d29 [ 263.161456][ T8292] RDX: 00000000000000f8 RSI: 0000000020000080 RDI: 0000000000000003 [ 263.169463][ T8292] RBP: 00007f857cce4090 R08: 0000000000000000 R09: 0000000000000000 [ 263.177464][ T8292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.185464][ T8292] R13: 0000000000000000 R14: 00007f857c175fa0 R15: 00007fffc805fcf8 [ 263.193487][ T8292] [ 264.911317][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.695'. [ 265.068953][ T8298] Process accounting resumed [ 265.073663][ T8298] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 8298 comm: syz.2.692) [ 265.300042][ T8321] netlink: 306 bytes leftover after parsing attributes in process `syz.2.696'. [ 265.591012][ T8328] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 8328 comm: syz.2.696) [ 265.738921][ T8320] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 8320 comm: syz.2.696) [ 266.022893][ T8313] Process accounting resumed [ 266.321607][ T8342] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 8342 comm: syz.2.701) [ 267.046882][ T8350] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 8350 comm: syz.2.703) [ 267.075520][ T8340] syz.3.700 uses obsolete (PF_INET,SOCK_PACKET) [ 267.281121][ T8360] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 8360 comm: syz.2.706) [ 267.748754][ T8371] netlink: 306 bytes leftover after parsing attributes in process `syz.1.709'. [ 268.002787][ T8375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.708'. [ 269.121093][ T8389] netlink: 330 bytes leftover after parsing attributes in process `syz.3.711'. [ 270.487028][ T8398] ubi: mtd0 is already attached to ubi0 [ 270.997356][ T8367] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 8367 comm: syz.2.707) [ 271.219641][ T8378] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 8378 comm: syz.2.707) [ 271.447612][ T8416] netlink: 330 bytes leftover after parsing attributes in process `syz.1.722'. [ 272.224036][ T8424] kernel write not supported for file net/rpc/nfs4.nametoid/content (pid: 8424 comm: syz.2.721) [ 272.243413][ T8424] Process accounting resumed [ 272.655922][ T8428] netlink: 40 bytes leftover after parsing attributes in process `syz.0.731'. [ 273.074972][ T8439] ubi: mtd0 is already attached to ubi0 [ 273.361735][ T8448] ubi: mtd0 is already attached to ubi0 [ 273.599405][ T8458] netlink: 306 bytes leftover after parsing attributes in process `syz.2.732'. [ 273.796790][ T8454] Process accounting resumed [ 273.818396][ T8454] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 8454 comm: syz.1.733) [ 274.365550][ T8463] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 8463 comm: syz.1.736) [ 275.546764][ T8499] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 275.898466][ T8494] ubi: mtd0 is already attached to ubi0 [ 276.054903][ T8483] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 8483 comm: syz.1.739) [ 276.351570][ T8515] netlink: 306 bytes leftover after parsing attributes in process `syz.3.751'. [ 276.693691][ T8511] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 8511 comm: syz.1.749) [ 276.766255][ T8496] kexec: Could not allocate control_code_buffer [ 277.869761][ T8530] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 8530 comm: syz.1.754) [ 278.263116][ T8542] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 8542 comm: syz.1.756) [ 278.662549][ T8554] netlink: 306 bytes leftover after parsing attributes in process `syz.0.760'. [ 278.785681][ T8559] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 278.938007][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.763'. [ 278.947887][ T8550] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 8550 comm: syz.1.758) [ 279.583828][ T8574] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 8574 comm: syz.1.765) [ 279.671757][ T8576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.760373][ T8587] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 8587 comm: syz.1.765) [ 279.946779][ T8566] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 8566 comm: syz.1.765) [ 280.102349][ T8558] kexec: Could not allocate control_code_buffer [ 280.110502][ T8595] netlink: 306 bytes leftover after parsing attributes in process `syz.1.772'. [ 280.273631][ T8598] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 8598 comm: syz.1.772) [ 280.288826][ T8593] ubi: mtd0 is already attached to ubi0 [ 280.320632][ T8595] kernel write not supported for file net/rpc/nfs4.idtoname/channel (pid: 8595 comm: syz.1.772) [ 280.570413][ T8603] Process accounting resumed [ 280.738207][ T29] audit: type=1800 audit(1734841105.807:3): pid=8611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.777" name="lu_gp_id" dev="configfs" ino=18949 res=0 errno=0 [ 281.233522][ T8625] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 281.294145][ T8627] netlink: 306 bytes leftover after parsing attributes in process `syz.3.783'. [ 281.375194][ T8617] erspan0: entered allmulticast mode [ 281.919112][ T8640] FAULT_INJECTION: forcing a failure. [ 281.919112][ T8640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.932684][ T8640] CPU: 1 UID: 0 PID: 8640 Comm: syz.3.786 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 281.943432][ T8640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 281.953615][ T8640] Call Trace: [ 281.956956][ T8640] [ 281.959935][ T8640] dump_stack_lvl+0x16c/0x1f0 [ 281.964689][ T8640] should_fail_ex+0x497/0x5b0 [ 281.969468][ T8640] _copy_to_iter+0x4a5/0x1400 [ 281.974226][ T8640] ? __pfx_lock_release+0x10/0x10 [ 281.979307][ T8640] ? __pfx__copy_to_iter+0x10/0x10 [ 281.984520][ T8640] ? __virt_addr_valid+0x1a4/0x590 [ 281.989709][ T8640] ? __virt_addr_valid+0x5e/0x590 [ 281.994803][ T8640] ? __phys_addr_symbol+0x30/0x80 [ 281.999895][ T8640] ? __check_object_size+0x488/0x710 [ 282.005253][ T8640] seq_read_iter+0xd00/0x12b0 [ 282.010003][ T8640] kernfs_fop_read_iter+0x414/0x580 [ 282.015274][ T8640] ? copy_iovec_from_user+0x138/0x170 [ 282.020719][ T8640] do_iter_readv_writev+0x614/0x7f0 [ 282.026001][ T8640] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 282.031804][ T8640] vfs_readv+0x4cf/0x890 [ 282.036118][ T8640] ? fdget_pos+0x267/0x390 [ 282.040624][ T8640] ? __pfx_vfs_readv+0x10/0x10 [ 282.045455][ T8640] ? __mutex_lock+0x1cc/0xa60 [ 282.050198][ T8640] ? find_held_lock+0x2d/0x110 [ 282.055044][ T8640] ? __pfx___mutex_lock+0x10/0x10 [ 282.060168][ T8640] ? trace_lock_acquire+0x14e/0x1f0 [ 282.065457][ T8640] ? __fget_files+0x206/0x3a0 [ 282.070205][ T8640] ? do_readv+0x133/0x340 [ 282.074591][ T8640] do_readv+0x133/0x340 [ 282.078795][ T8640] ? __pfx_do_readv+0x10/0x10 [ 282.083541][ T8640] do_syscall_64+0xcd/0x250 [ 282.088116][ T8640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.094094][ T8640] RIP: 0033:0x7fdb56d85d29 [ 282.098560][ T8640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.118235][ T8640] RSP: 002b:00007fdb54bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 282.126723][ T8640] RAX: ffffffffffffffda RBX: 00007fdb56f75fa0 RCX: 00007fdb56d85d29 [ 282.134749][ T8640] RDX: 0000000000000400 RSI: 00000000200000c0 RDI: 0000000000000003 [ 282.142777][ T8640] RBP: 00007fdb54bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 282.150804][ T8640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.158831][ T8640] R13: 0000000000000000 R14: 00007fdb56f75fa0 R15: 00007ffd62c8f988 [ 282.166879][ T8640] [ 282.358386][ T8622] kexec: Could not allocate control_code_buffer [ 282.611399][ T8636] ubi: mtd0 is already attached to ubi0 [ 283.035848][ T8663] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 283.532860][ T8674] netlink: 306 bytes leftover after parsing attributes in process `syz.1.800'. [ 284.122193][ T8661] kexec: Could not allocate control_code_buffer [ 284.747651][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.809'. [ 285.288992][ T8722] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 285.600095][ T8726] Process accounting resumed [ 285.725856][ T8728] can: request_module (can-proto-0) failed. [ 286.616372][ T8721] kexec: Could not allocate control_code_buffer [ 286.707056][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.819'. [ 290.178403][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.839'. [ 291.337434][ T8842] netlink: 306 bytes leftover after parsing attributes in process `syz.2.847'. [ 291.594578][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.850'. [ 293.308584][ T8879] netlink: 306 bytes leftover after parsing attributes in process `syz.1.858'. [ 294.067589][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.862'. [ 295.361714][ T8902] ubi: mtd0 is already attached to ubi0 [ 295.707218][ T8913] netlink: 306 bytes leftover after parsing attributes in process `syz.1.870'. [ 296.182689][ T8888] Process accounting paused [ 296.434770][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.875'. [ 297.216219][ T8944] ubi: mtd0 is already attached to ubi0 [ 297.553312][ T8950] netlink: 306 bytes leftover after parsing attributes in process `syz.1.882'. [ 298.526909][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.888'. [ 299.126971][ T8984] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 299.568078][ T8979] ubi: mtd0 is already attached to ubi0 [ 300.761276][ T8983] kexec: Could not allocate control_code_buffer [ 301.199459][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.900'. [ 301.816057][ T9027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.903'. [ 302.813551][ T9044] IPVS: length: 1593846842 != 8 [ 303.148678][ T9058] FAULT_INJECTION: forcing a failure. [ 303.148678][ T9058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.168359][ T9058] CPU: 1 UID: 0 PID: 9058 Comm: syz.2.913 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 303.179045][ T9058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 303.189154][ T9058] Call Trace: [ 303.192512][ T9058] [ 303.195489][ T9058] dump_stack_lvl+0x16c/0x1f0 [ 303.200233][ T9058] should_fail_ex+0x497/0x5b0 [ 303.204982][ T9058] _copy_from_user+0x2e/0xd0 [ 303.209643][ T9058] copy_msghdr_from_user+0x99/0x160 [ 303.214943][ T9058] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 303.220827][ T9058] ? __pfx___lock_acquire+0x10/0x10 [ 303.226100][ T9058] ___sys_recvmsg+0xdc/0x1a0 [ 303.230769][ T9058] ? __pfx____sys_recvmsg+0x10/0x10 [ 303.236051][ T9058] ? __pfx_lock_release+0x10/0x10 [ 303.241134][ T9058] ? trace_lock_acquire+0x14e/0x1f0 [ 303.246435][ T9058] do_recvmmsg+0x2f8/0x740 [ 303.250929][ T9058] ? __pfx_do_recvmmsg+0x10/0x10 [ 303.255933][ T9058] ? vfs_write+0x306/0x1150 [ 303.260502][ T9058] ? __mutex_unlock_slowpath+0x164/0x690 [ 303.266216][ T9058] ? __fget_files+0x206/0x3a0 [ 303.270975][ T9058] __x64_sys_recvmmsg+0x239/0x290 [ 303.276081][ T9058] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 303.281728][ T9058] do_syscall_64+0xcd/0x250 [ 303.286310][ T9058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.292274][ T9058] RIP: 0033:0x7f857bf85d29 [ 303.296745][ T9058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.316448][ T9058] RSP: 002b:00007f857cce4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 303.324930][ T9058] RAX: ffffffffffffffda RBX: 00007f857c175fa0 RCX: 00007f857bf85d29 [ 303.332962][ T9058] RDX: 000000000000010a RSI: 0000000020000140 RDI: 0000000000000003 [ 303.340992][ T9058] RBP: 00007f857cce4090 R08: 0000000000000000 R09: 0000000000000000 [ 303.349020][ T9058] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 303.357047][ T9058] R13: 0000000000000000 R14: 00007f857c175fa0 R15: 00007fffc805fcf8 [ 303.365094][ T9058] [ 305.715704][ T9100] ubi: mtd0 is already attached to ubi0 [ 306.361815][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.931'. [ 306.660294][ T9126] binder: 9124:9126 ioctl c0105512 1 returned -22 [ 307.726999][ T9142] FAULT_INJECTION: forcing a failure. [ 307.726999][ T9142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.839291][ T9142] CPU: 1 UID: 0 PID: 9142 Comm: syz.1.937 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 307.850099][ T9142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 307.860215][ T9142] Call Trace: [ 307.863538][ T9142] [ 307.866517][ T9142] dump_stack_lvl+0x16c/0x1f0 [ 307.871266][ T9142] should_fail_ex+0x497/0x5b0 [ 307.876022][ T9142] _copy_to_user+0x32/0xd0 [ 307.880516][ T9142] simple_read_from_buffer+0xd0/0x160 [ 307.885991][ T9142] proc_fail_nth_read+0x198/0x270 [ 307.891109][ T9142] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 307.896744][ T9142] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 307.902392][ T9142] vfs_read+0x1df/0xbe0 [ 307.906613][ T9142] ? __fget_files+0x1fc/0x3a0 [ 307.911362][ T9142] ? __pfx___mutex_lock+0x10/0x10 [ 307.916460][ T9142] ? __pfx_vfs_read+0x10/0x10 [ 307.921247][ T9142] ? __fget_files+0x206/0x3a0 [ 307.926011][ T9142] ksys_read+0x12b/0x250 [ 307.930316][ T9142] ? __pfx_ksys_read+0x10/0x10 [ 307.935163][ T9142] do_syscall_64+0xcd/0x250 [ 307.939732][ T9142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.945673][ T9142] RIP: 0033:0x7faf13f8473c [ 307.950119][ T9142] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 307.969762][ T9142] RSP: 002b:00007faf14e60030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 307.978210][ T9142] RAX: ffffffffffffffda RBX: 00007faf14175fa0 RCX: 00007faf13f8473c [ 307.986235][ T9142] RDX: 000000000000000f RSI: 00007faf14e600a0 RDI: 0000000000000004 [ 307.994231][ T9142] RBP: 00007faf14e60090 R08: 0000000000000000 R09: 0000000000000000 [ 308.002236][ T9142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.010247][ T9142] R13: 0000000000000000 R14: 00007faf14175fa0 R15: 00007fff803ba7d8 [ 308.018309][ T9142] [ 308.288786][ T9145] ubi: mtd0 is already attached to ubi0 [ 308.826440][ T9154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.941'. [ 310.207341][ T9178] netlink: 306 bytes leftover after parsing attributes in process `syz.2.949'. [ 311.678077][ T9192] IPVS: length: 1593846842 != 8 [ 312.993677][ T9209] netlink: 306 bytes leftover after parsing attributes in process `syz.1.958'. [ 319.977149][ T9278] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 322.576450][ T9220] syz.3.959 (9220) used greatest stack depth: 17680 bytes left [ 322.649809][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.656622][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.817186][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.985'. [ 326.607000][ T9338] FAULT_INJECTION: forcing a failure. [ 326.607000][ T9338] name failslab, interval 1, probability 0, space 0, times 0 [ 326.831135][ T9338] CPU: 1 UID: 0 PID: 9338 Comm: syz.0.995 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 326.841829][ T9338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 326.851925][ T9338] Call Trace: [ 326.855273][ T9338] [ 326.858244][ T9338] dump_stack_lvl+0x16c/0x1f0 [ 326.862969][ T9338] should_fail_ex+0x497/0x5b0 [ 326.867688][ T9338] ? fs_reclaim_acquire+0xae/0x150 [ 326.872839][ T9338] should_failslab+0xc2/0x120 [ 326.877595][ T9338] __kmalloc_noprof+0xce/0x4f0 [ 326.882754][ T9338] ? d_absolute_path+0x137/0x1b0 [ 326.887739][ T9338] ? tomoyo_encode2+0x100/0x3e0 [ 326.893081][ T9338] tomoyo_encode2+0x100/0x3e0 [ 326.897818][ T9338] tomoyo_realpath_from_path+0x1a7/0x710 [ 326.903535][ T9338] tomoyo_path_number_perm+0x248/0x5b0 [ 326.909050][ T9338] ? tomoyo_path_number_perm+0x235/0x5b0 [ 326.914740][ T9338] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 326.920800][ T9338] ? __pfx_lock_release+0x10/0x10 [ 326.925884][ T9338] ? trace_lock_acquire+0x14e/0x1f0 [ 326.931133][ T9338] ? lock_acquire+0x2f/0xb0 [ 326.935666][ T9338] ? __fget_files+0x40/0x3a0 [ 326.940304][ T9338] ? __fget_files+0x206/0x3a0 [ 326.945024][ T9338] security_file_ioctl+0x9b/0x240 [ 326.950096][ T9338] __x64_sys_ioctl+0xb7/0x200 [ 326.954813][ T9338] do_syscall_64+0xcd/0x250 [ 326.959363][ T9338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.965302][ T9338] RIP: 0033:0x7fb06df85d29 [ 326.969748][ T9338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.989397][ T9338] RSP: 002b:00007fb06ee01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 326.997935][ T9338] RAX: ffffffffffffffda RBX: 00007fb06e175fa0 RCX: 00007fb06df85d29 [ 327.006458][ T9338] RDX: 0000000000000001 RSI: 00000000c0105512 RDI: 0000000000000003 [ 327.014459][ T9338] RBP: 00007fb06ee01090 R08: 0000000000000000 R09: 0000000000000000 [ 327.022574][ T9338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.030594][ T9338] R13: 0000000000000000 R14: 00007fb06e175fa0 R15: 00007ffe1f88f098 [ 327.038648][ T9338] [ 327.205396][ T9338] ERROR: Out of memory at tomoyo_realpath_from_path. [ 327.627232][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'. [ 329.269342][ T9322] Process accounting resumed [ 331.270191][ T9363] UHID_CREATE from different security context by process 805 (syz.1.1003), this is not allowed. [ 332.785351][ T9376] ubi: mtd0 is already attached to ubi0 [ 335.071889][ T9406] netlink: 'syz.2.1013': attribute type 19 has an invalid length. [ 335.095386][ T9406] netlink: 310 bytes leftover after parsing attributes in process `syz.2.1013'. [ 336.694434][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1022'. [ 338.329375][ T9441] FAULT_INJECTION: forcing a failure. [ 338.329375][ T9441] name failslab, interval 1, probability 0, space 0, times 0 [ 338.427993][ T9441] CPU: 0 UID: 0 PID: 9441 Comm: syz.1.1025 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 338.438784][ T9441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 338.448895][ T9441] Call Trace: [ 338.452213][ T9441] [ 338.455182][ T9441] dump_stack_lvl+0x16c/0x1f0 [ 338.459941][ T9441] should_fail_ex+0x497/0x5b0 [ 338.464685][ T9441] ? fs_reclaim_acquire+0xae/0x150 [ 338.469952][ T9441] should_failslab+0xc2/0x120 [ 338.474704][ T9441] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 338.480159][ T9441] ? __mutex_unlock_slowpath+0x164/0x690 [ 338.485862][ T9441] ? dup_fd+0x50/0xca0 [ 338.490003][ T9441] dup_fd+0x50/0xca0 [ 338.493968][ T9441] ? __fget_files+0x206/0x3a0 [ 338.499179][ T9441] __do_sys_close_range+0x4b7/0x700 [ 338.504454][ T9441] ? __pfx___do_sys_close_range+0x10/0x10 [ 338.510262][ T9441] do_syscall_64+0xcd/0x250 [ 338.514836][ T9441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.520814][ T9441] RIP: 0033:0x7faf13f85d29 [ 338.525283][ T9441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.545046][ T9441] RSP: 002b:00007faf14e60038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 338.553560][ T9441] RAX: ffffffffffffffda RBX: 00007faf14175fa0 RCX: 00007faf13f85d29 [ 338.561680][ T9441] RDX: 0000000000000002 RSI: fffffffffffff000 RDI: 0000000000000000 [ 338.569686][ T9441] RBP: 00007faf14e60090 R08: 0000000000000000 R09: 0000000000000000 [ 338.577703][ T9441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.585721][ T9441] R13: 0000000000000000 R14: 00007faf14175fa0 R15: 00007fff803ba7d8 [ 338.593752][ T9441] [ 340.395152][ T9443] netlink: 'syz.0.1026': attribute type 19 has an invalid length. [ 340.476528][ T9443] netlink: 310 bytes leftover after parsing attributes in process `syz.0.1026'. [ 341.997125][ T9462] FAULT_INJECTION: forcing a failure. [ 341.997125][ T9462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.070608][ T9462] CPU: 0 UID: 0 PID: 9462 Comm: syz.1.1035 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 342.081410][ T9462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 342.091528][ T9462] Call Trace: [ 342.094852][ T9462] [ 342.097832][ T9462] dump_stack_lvl+0x16c/0x1f0 [ 342.102578][ T9462] should_fail_ex+0x497/0x5b0 [ 342.107334][ T9462] _copy_from_user+0x2e/0xd0 [ 342.112001][ T9462] ucma_resolve_addr+0x9f/0x270 [ 342.117054][ T9462] ? __pfx_ucma_resolve_addr+0x10/0x10 [ 342.122626][ T9462] ? __might_fault+0xe3/0x190 [ 342.127393][ T9462] ? __pfx_ucma_resolve_addr+0x10/0x10 [ 342.132966][ T9462] ucma_write+0x1f9/0x330 [ 342.137459][ T9462] ? __pfx_ucma_write+0x10/0x10 [ 342.142393][ T9462] ? bpf_lsm_file_permission+0x9/0x10 [ 342.147845][ T9462] ? security_file_permission+0x71/0x210 [ 342.153639][ T9462] ? __pfx_ucma_write+0x10/0x10 [ 342.158568][ T9462] vfs_write+0x24c/0x1150 [ 342.162965][ T9462] ? __fget_files+0x1fc/0x3a0 [ 342.167709][ T9462] ? __pfx_lock_release+0x10/0x10 [ 342.172793][ T9462] ? __pfx_vfs_write+0x10/0x10 [ 342.177654][ T9462] ? lock_acquire+0x2f/0xb0 [ 342.182297][ T9462] ? __fget_files+0x40/0x3a0 [ 342.186959][ T9462] ? __fget_files+0x206/0x3a0 [ 342.191711][ T9462] ksys_write+0x207/0x250 [ 342.196114][ T9462] ? __pfx_ksys_write+0x10/0x10 [ 342.201040][ T9462] do_syscall_64+0xcd/0x250 [ 342.205617][ T9462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.211593][ T9462] RIP: 0033:0x7faf13f85d29 [ 342.216070][ T9462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.235836][ T9462] RSP: 002b:00007faf14e60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 342.244311][ T9462] RAX: ffffffffffffffda RBX: 00007faf14175fa0 RCX: 00007faf13f85d29 [ 342.252385][ T9462] RDX: 00000000000000c3 RSI: 0000000000000000 RDI: 0000000000000017 [ 342.260412][ T9462] RBP: 00007faf14e60090 R08: 0000000000000000 R09: 0000000000000000 [ 342.268449][ T9462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.276489][ T9462] R13: 0000000000000000 R14: 00007faf14175fa0 R15: 00007fff803ba7d8 [ 342.284551][ T9462] [ 342.406348][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1036'. [ 343.775184][ T9478] netlink: 222 bytes leftover after parsing attributes in process `syz.0.1038'. [ 344.646756][ T9491] FAULT_INJECTION: forcing a failure. [ 344.646756][ T9491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.715686][ T9491] CPU: 1 UID: 0 PID: 9491 Comm: syz.1.1042 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 344.726466][ T9491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 344.736599][ T9491] Call Trace: [ 344.739932][ T9491] [ 344.742911][ T9491] dump_stack_lvl+0x16c/0x1f0 [ 344.747671][ T9491] should_fail_ex+0x497/0x5b0 [ 344.752447][ T9491] strncpy_from_user+0x3b/0x2d0 [ 344.757379][ T9491] getname_flags.part.0+0x8f/0x550 [ 344.762582][ T9491] getname+0x8d/0xe0 [ 344.766546][ T9491] do_sys_openat2+0x104/0x1e0 [ 344.771279][ T9491] ? __pfx_do_sys_openat2+0x10/0x10 [ 344.776714][ T9491] ? __fget_files+0x206/0x3a0 [ 344.781439][ T9491] __x64_sys_openat+0x175/0x210 [ 344.786341][ T9491] ? __pfx___x64_sys_openat+0x10/0x10 [ 344.791764][ T9491] ? ksys_write+0x1ba/0x250 [ 344.796317][ T9491] do_syscall_64+0xcd/0x250 [ 344.800866][ T9491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.806805][ T9491] RIP: 0033:0x7faf13f85d29 [ 344.811351][ T9491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.831005][ T9491] RSP: 002b:00007faf14e60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 344.839456][ T9491] RAX: ffffffffffffffda RBX: 00007faf14175fa0 RCX: 00007faf13f85d29 [ 344.847463][ T9491] RDX: 0000000000000002 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 344.855464][ T9491] RBP: 00007faf14e60090 R08: 0000000000000000 R09: 0000000000000000 [ 344.863467][ T9491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.871510][ T9491] R13: 0000000000000000 R14: 00007faf14175fa0 R15: 00007fff803ba7d8 [ 344.879731][ T9491] [ 356.195370][ T9590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1076'. [ 356.383617][ T9590] veth1_macvtap: left promiscuous mode [ 356.946989][ T9595] ubi: mtd0 is already attached to ubi0 [ 357.303411][ T9602] Invalid ELF header magic: != ELF [ 357.463748][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1082'. [ 358.828467][ T9618] zswap: compressor not available [ 359.184883][ T9624] zswap: compressor not available [ 361.209308][ T9642] ubi: mtd0 is already attached to ubi0 [ 361.504584][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1093'. [ 361.771121][ T9649] Process accounting paused [ 362.555636][ T9662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1098'. [ 363.556566][ T9678] warning: `syz.1.1104' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 363.621741][ T9677] netlink: 3091 bytes leftover after parsing attributes in process `syz.1.1104'. [ 363.659355][ T9673] ubi: mtd0 is already attached to ubi0 [ 364.236529][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1108'. [ 365.494125][ T9709] ubi: mtd0 is already attached to ubi0 [ 365.963756][ T9700] kexec: Could not allocate control_code_buffer [ 366.314438][ T9721] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1117'. [ 366.386182][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1119'. [ 366.446549][ T9721] veth1_macvtap: left promiscuous mode [ 370.015847][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1130'. [ 371.781309][ T9807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'. [ 374.068202][ T9831] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1148'. [ 374.618532][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1149'. [ 376.076481][ T9850] ubi: mtd0 is already attached to ubi0 [ 378.711786][ T9873] [U] [ 378.714599][ T9873] [U] [ 378.717457][ T9873] [U] [ 378.720214][ T9873] [U] [ 378.789871][ T9874] [U] [ 381.249388][ T9912] FAULT_INJECTION: forcing a failure. [ 381.249388][ T9912] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 381.371520][ T9912] CPU: 1 UID: 0 PID: 9912 Comm: syz.1.1166 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 381.382302][ T9912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 381.392427][ T9912] Call Trace: [ 381.395845][ T9912] [ 381.398821][ T9912] dump_stack_lvl+0x16c/0x1f0 [ 381.403570][ T9912] should_fail_ex+0x497/0x5b0 [ 381.408315][ T9912] ? fs_reclaim_acquire+0xae/0x150 [ 381.413503][ T9912] should_fail_alloc_page+0xe7/0x130 [ 381.418867][ T9912] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 381.425103][ T9912] __alloc_pages_noprof+0x190/0x25b0 [ 381.430460][ T9912] ? hlock_class+0x4e/0x130 [ 381.435031][ T9912] ? __lock_acquire+0x15a9/0x3c40 [ 381.440132][ T9912] ? hlock_class+0x4e/0x130 [ 381.444707][ T9912] ? mark_lock+0xb5/0xc60 [ 381.449119][ T9912] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 381.454928][ T9912] ? __pfx_mark_lock+0x10/0x10 [ 381.460243][ T9912] ? hlock_class+0x4e/0x130 [ 381.464817][ T9912] ? mark_lock+0xb5/0xc60 [ 381.469232][ T9912] ? __pfx_mark_lock+0x10/0x10 [ 381.474080][ T9912] ? find_held_lock+0x2d/0x110 [ 381.478915][ T9912] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 381.484883][ T9912] ? policy_nodemask+0xea/0x4e0 [ 381.489821][ T9912] alloc_pages_mpol_noprof+0x2c9/0x610 [ 381.495378][ T9912] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 381.501795][ T9912] ? __pfx___lock_acquire+0x10/0x10 [ 381.507064][ T9912] folio_alloc_mpol_noprof+0x36/0xd0 [ 381.512415][ T9912] alloc_migration_target_by_mpol+0x247/0x490 [ 381.518640][ T9912] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 381.525383][ T9912] ? __pfx___might_resched+0x10/0x10 [ 381.530729][ T9912] ? __pfx_lock_release+0x10/0x10 [ 381.535817][ T9912] migrate_pages_batch+0x3c0/0x3150 [ 381.541099][ T9912] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 381.547766][ T9912] ? __pfx_migrate_pages_batch+0x10/0x10 [ 381.553507][ T9912] ? __pfx_walk_pgd_range+0x10/0x10 [ 381.558788][ T9912] migrate_pages_sync+0x109/0x8f0 [ 381.563893][ T9912] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 381.570561][ T9912] ? queue_pages_test_walk+0x279/0x410 [ 381.576107][ T9912] ? __pfx_migrate_pages_sync+0x10/0x10 [ 381.581735][ T9912] ? walk_page_test+0x9b/0x180 [ 381.586581][ T9912] ? walk_page_range_mm+0x274/0x940 [ 381.591872][ T9912] migrate_pages+0x1a46/0x21f0 [ 381.596711][ T9912] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 381.603371][ T9912] ? __pfx_migrate_pages+0x10/0x10 [ 381.608546][ T9912] ? do_mbind+0x4dd/0xe90 [ 381.612942][ T9912] ? __pfx_lock_release+0x10/0x10 [ 381.618032][ T9912] ? mas_walk+0x6a6/0x910 [ 381.622429][ T9912] ? up_write+0x1b2/0x520 [ 381.626824][ T9912] do_mbind+0x6d2/0xe90 [ 381.631052][ T9912] ? __pfx_do_mbind+0x10/0x10 [ 381.635786][ T9912] ? vfs_write+0x306/0x1150 [ 381.640384][ T9912] ? __mutex_unlock_slowpath+0x164/0x690 [ 381.646090][ T9912] ? __pfx_get_nodes+0x10/0x10 [ 381.650927][ T9912] ? __fget_files+0x206/0x3a0 [ 381.655684][ T9912] kernel_mbind+0x1e8/0x200 [ 381.660248][ T9912] ? __pfx_kernel_mbind+0x10/0x10 [ 381.665347][ T9912] do_syscall_64+0xcd/0x250 [ 381.669925][ T9912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.675887][ T9912] RIP: 0033:0x7faf13f85d29 [ 381.680360][ T9912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.700033][ T9912] RSP: 002b:00007faf14e3f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 381.708508][ T9912] RAX: ffffffffffffffda RBX: 00007faf14176080 RCX: 00007faf13f85d29 [ 381.716524][ T9912] RDX: 0000000100000000 RSI: 0000000100000004 RDI: 0000000000000000 [ 381.724543][ T9912] RBP: 00007faf14e3f090 R08: 0000000000000006 R09: 0000000000000002 [ 381.732568][ T9912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.740601][ T9912] R13: 0000000000000000 R14: 00007faf14176080 R15: 00007fff803ba7d8 [ 381.748645][ T9912] [ 384.091964][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.098756][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.410061][ T9972] delete_channel: no stack [ 392.174257][ T9993] Process accounting resumed [ 393.087150][ T9148] syz.3.936 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 393.099773][ T9148] CPU: 0 UID: 0 PID: 9148 Comm: syz.3.936 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 393.110445][ T9148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 393.120560][ T9148] Call Trace: [ 393.123889][ T9148] [ 393.126907][ T9148] dump_stack_lvl+0x16c/0x1f0 [ 393.131653][ T9148] dump_header+0x101/0x900 [ 393.136142][ T9148] oom_kill_process+0x270/0xa60 [ 393.141072][ T9148] out_of_memory+0x351/0x1700 [ 393.145827][ T9148] ? __pfx_out_of_memory+0x10/0x10 [ 393.151004][ T9148] ? rcu_read_unlock+0x17/0x60 [ 393.155841][ T9148] ? find_held_lock+0x2d/0x110 [ 393.160677][ T9148] mem_cgroup_out_of_memory+0x207/0x270 [ 393.166294][ T9148] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 393.172435][ T9148] ? do_raw_spin_unlock+0x172/0x230 [ 393.177708][ T9148] try_charge_memcg+0x54c/0xaf0 [ 393.182647][ T9148] ? __pfx_try_charge_memcg+0x10/0x10 [ 393.188093][ T9148] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 393.193610][ T9148] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 393.199136][ T9148] ? get_mem_cgroup_from_mm+0x131/0x5f0 [ 393.204758][ T9148] __mem_cgroup_charge+0x9b/0x280 [ 393.209857][ T9148] shmem_alloc_and_add_folio+0x507/0xc00 [ 393.215531][ T9148] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 393.221459][ T9148] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 393.227647][ T9148] ? shmem_huge_global_enabled+0x176/0x250 [ 393.233499][ T9148] ? shmem_allowable_huge_orders+0xcd/0x3e0 [ 393.239433][ T9148] shmem_get_folio_gfp+0x689/0x1530 [ 393.244673][ T9148] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 393.250347][ T9148] ? filemap_map_pages+0xf92/0x16b0 [ 393.255585][ T9148] shmem_fault+0x200/0xae0 [ 393.260087][ T9148] ? __pfx_shmem_fault+0x10/0x10 [ 393.265068][ T9148] ? do_pte_missing+0xdd7/0x3e00 [ 393.270049][ T9148] ? __pfx_lock_release+0x10/0x10 [ 393.275114][ T9148] __do_fault+0x10a/0x490 [ 393.279503][ T9148] do_pte_missing+0xebd/0x3e00 [ 393.284323][ T9148] __handle_mm_fault+0x103c/0x2a40 [ 393.289484][ T9148] ? find_held_lock+0x2d/0x110 [ 393.294288][ T9148] ? __pfx___handle_mm_fault+0x10/0x10 [ 393.299790][ T9148] ? follow_page_pte+0x3c3/0x1b20 [ 393.304861][ T9148] ? __pfx_lock_release+0x10/0x10 [ 393.309937][ T9148] ? follow_page_pte+0x3f7/0x1b20 [ 393.315015][ T9148] handle_mm_fault+0x3fa/0xaa0 [ 393.319834][ T9148] __get_user_pages+0x8d9/0x3b50 [ 393.324827][ T9148] ? __pfx___get_user_pages+0x10/0x10 [ 393.330243][ T9148] ? down_read_killable+0xcc/0x380 [ 393.335402][ T9148] ? __pfx_down_read_killable+0x10/0x10 [ 393.341022][ T9148] ? shmem_file_write_iter+0xcf/0x140 [ 393.346461][ T9148] ? __kernel_write_iter+0x59f/0xa80 [ 393.351800][ T9148] get_dump_page+0xff/0x230 [ 393.356347][ T9148] ? __pfx_get_dump_page+0x10/0x10 [ 393.361503][ T9148] ? __pfx___might_resched+0x10/0x10 [ 393.366826][ T9148] ? dump_user_range+0x246/0x8c0 [ 393.371818][ T9148] dump_user_range+0x135/0x8c0 [ 393.376640][ T9148] ? __pfx_dump_user_range+0x10/0x10 [ 393.382006][ T9148] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 393.388204][ T9148] ? __pfx_writenote+0x10/0x10 [ 393.393026][ T9148] elf_core_dump+0x2787/0x3880 [ 393.397844][ T9148] ? __pfx_elf_core_dump+0x10/0x10 [ 393.403002][ T9148] ? kasan_save_stack+0x42/0x60 [ 393.407918][ T9148] ? kasan_save_stack+0x33/0x60 [ 393.412815][ T9148] ? kasan_save_track+0x14/0x30 [ 393.417702][ T9148] ? __kasan_kmalloc+0xaa/0xb0 [ 393.422508][ T9148] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 393.428011][ T9148] ? do_coredump+0x1665/0x43e0 [ 393.432817][ T9148] ? get_signal+0x23f3/0x2610 [ 393.437581][ T9148] ? rcu_is_watching+0x12/0xc0 [ 393.442387][ T9148] ? trace_lock_acquire+0x14e/0x1f0 [ 393.447653][ T9148] ? __pfx_sort+0x10/0x10 [ 393.452025][ T9148] ? get_signal+0x23f3/0x2610 [ 393.456750][ T9148] ? do_coredump+0x2dd5/0x43e0 [ 393.461562][ T9148] do_coredump+0x2dd5/0x43e0 [ 393.466232][ T9148] ? __pfx_do_coredump+0x10/0x10 [ 393.471215][ T9148] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 393.477214][ T9148] get_signal+0x23f3/0x2610 [ 393.481766][ T9148] ? __pfx_get_signal+0x10/0x10 [ 393.486653][ T9148] ? rcu_is_watching+0x12/0xc0 [ 393.491480][ T9148] ? trace_irq_disable.constprop.0+0xea/0x140 [ 393.497588][ T9148] arch_do_signal_or_restart+0x90/0x7e0 [ 393.503184][ T9148] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 393.509398][ T9148] ? do_user_addr_fault+0xa4b/0x13f0 [ 393.514734][ T9148] irqentry_exit_to_user_mode+0x13f/0x280 [ 393.520499][ T9148] asm_exc_page_fault+0x26/0x30 [ 393.525391][ T9148] RIP: 0033:0x41000 [ 393.529231][ T9148] Code: Unable to access opcode bytes at 0x40fd6. [ 393.535661][ T9148] RSP: 002b:000000000000000a EFLAGS: 00010202 [ 393.541766][ T9148] RAX: 0000000000000000 RBX: 00007fdb56f75fa0 RCX: 00007fdb56d85d29 [ 393.549765][ T9148] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000002020003b46 [ 393.557763][ T9148] RBP: 00007fdb56e01aa8 R08: 8000000000000001 R09: 0000000000000000 [ 393.565788][ T9148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.573791][ T9148] R13: 0000000000000000 R14: 00007fdb56f75fa0 R15: 00007ffd62c8f988 [ 393.581817][ T9148] [ 393.769476][ T9148] memory: usage 307200kB, limit 307200kB, failcnt 18619 [ 393.825136][ T9148] memory+swap: usage 429828kB, limit 9007199254740988kB, failcnt 0 [ 393.833122][ T9148] kmem: usage 3456kB, limit 9007199254740988kB, failcnt 0 [ 393.905457][ T9148] Memory cgroup stats for /syz3: [ 393.906065][ T9148] cache 309313536 [ 393.914734][ T9148] rss 1388544 [ 393.926928][ T9148] rss_huge 0 [ 393.930202][ T9148] shmem 309313536 [ 393.933873][ T9148] mapped_file 58548224 [ 393.967099][ T9148] dirty 0 [ 393.970112][ T9148] writeback 0 [ 393.973443][ T9148] workingset_refault_anon 4708 [ 393.985116][ T9148] workingset_refault_file 525 [ 393.989869][ T9148] swap 125571072 [ 393.993450][ T9148] swapcached 323584 [ 393.997362][ T9148] pgpgin 660519 [ 394.000953][ T9148] pgpgout 585607 [ 394.004540][ T9148] pgfault 276185 [ 394.046287][ T9148] pgmajfault 489 [ 394.049961][ T9148] inactive_anon 110006272 [ 394.054336][ T9148] active_anon 201015296 [ 394.058641][ T9148] inactive_file 0 [ 394.062321][ T9148] active_file 0 [ 394.126433][ T9148] unevictable 0 [ 394.129974][ T9148] hierarchical_memory_limit 314572800 [ 394.155095][ T9148] hierarchical_memsw_limit 9223372036854771712 [ 394.161340][ T9148] total_cache 309313536 [ 394.175097][ T9148] total_rss 1388544 [ 394.178985][ T9148] total_rss_huge 0 [ 394.182838][ T9148] total_shmem 309313536 [ 394.187151][ T9148] total_mapped_file 58548224 [ 394.191788][ T9148] total_dirty 0 [ 394.225132][ T9148] total_writeback 0 [ 394.229023][ T9148] total_workingset_refault_anon 4708 [ 394.234353][ T9148] total_workingset_refault_file 525 [ 394.239668][ T9148] total_swap 125571072 [ 394.244184][ T9148] total_swapcached 323584 [ 394.287665][ T9148] total_pgpgin 660519 [ 394.291830][ T9148] total_pgpgout 585607 [ 394.296010][ T9148] total_pgfault 276185 [ 394.300119][ T9148] total_pgmajfault 489 [ 394.304231][ T9148] total_inactive_anon 110006272 [ 394.309229][ T9148] total_active_anon 201015296 [ 394.313952][ T9148] total_inactive_file 0 [ 394.318220][ T9148] total_active_file 0 [ 394.322247][ T9148] total_unevictable 0 [ 394.335414][ T9148] anon_cost 0 [ 394.340386][ T9148] file_cost 0 [ 394.343727][ T9148] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.936,pid=9148,uid=0 [ 394.405907][ T9148] Memory cgroup out of memory: Killed process 9148 (syz.3.936) total-vm:134608kB, anon-rss:1132kB, file-rss:24544kB, shmem-rss:21632kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 400.472316][T10086] FAULT_INJECTION: forcing a failure. [ 400.472316][T10086] name failslab, interval 1, probability 0, space 0, times 0 [ 400.615092][T10086] CPU: 1 UID: 0 PID: 10086 Comm: syz.0.1213 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 400.625957][T10086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 400.636068][T10086] Call Trace: [ 400.639396][T10086] [ 400.642374][T10086] dump_stack_lvl+0x16c/0x1f0 [ 400.647130][T10086] should_fail_ex+0x497/0x5b0 [ 400.651878][T10086] ? fs_reclaim_acquire+0xae/0x150 [ 400.657054][T10086] should_failslab+0xc2/0x120 [ 400.661817][T10086] __kmalloc_noprof+0xce/0x4f0 [ 400.666650][T10086] ? iovec_from_user.part.0+0xf3/0x130 [ 400.672184][T10086] iovec_from_user.part.0+0xf3/0x130 [ 400.677558][T10086] __import_iovec+0xd6/0x6d0 [ 400.682248][T10086] import_iovec+0x108/0x140 [ 400.686839][T10086] vfs_writev+0x198/0xdd0 [ 400.691229][T10086] ? fdget_pos+0x267/0x390 [ 400.695717][T10086] ? rcu_is_watching+0x12/0xc0 [ 400.700556][T10086] ? __pfx_vfs_writev+0x10/0x10 [ 400.705477][T10086] ? __mutex_lock+0x1cc/0xa60 [ 400.710221][T10086] ? find_held_lock+0x2d/0x110 [ 400.715064][T10086] ? __pfx___mutex_lock+0x10/0x10 [ 400.720161][T10086] ? trace_lock_acquire+0x14e/0x1f0 [ 400.725445][T10086] ? __fget_files+0x206/0x3a0 [ 400.730210][T10086] ? do_writev+0x133/0x340 [ 400.734683][T10086] do_writev+0x133/0x340 [ 400.738989][T10086] ? __pfx_do_writev+0x10/0x10 [ 400.743830][T10086] do_syscall_64+0xcd/0x250 [ 400.748505][T10086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.754494][T10086] RIP: 0033:0x7fb06df85d29 [ 400.759013][T10086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.778691][T10086] RSP: 002b:00007fb06ee01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 400.787245][T10086] RAX: ffffffffffffffda RBX: 00007fb06e175fa0 RCX: 00007fb06df85d29 [ 400.795281][T10086] RDX: 0000000000000009 RSI: 000000002000a1c0 RDI: 0000000000000003 [ 400.803489][T10086] RBP: 00007fb06ee01090 R08: 0000000000000000 R09: 0000000000000000 [ 400.811527][T10086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.819555][T10086] R13: 0000000000000000 R14: 00007fb06e175fa0 R15: 00007ffe1f88f098 [ 400.827607][T10086] [ 403.610036][T10119] FAULT_INJECTION: forcing a failure. [ 403.610036][T10119] name failslab, interval 1, probability 0, space 0, times 0 [ 403.725083][T10119] CPU: 1 UID: 0 PID: 10119 Comm: syz.2.1222 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 403.735966][T10119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 403.746080][T10119] Call Trace: [ 403.749415][T10119] [ 403.752415][T10119] dump_stack_lvl+0x16c/0x1f0 [ 403.757171][T10119] should_fail_ex+0x497/0x5b0 [ 403.761924][T10119] ? fs_reclaim_acquire+0xae/0x150 [ 403.767105][T10119] should_failslab+0xc2/0x120 [ 403.771918][T10119] __kmalloc_noprof+0xce/0x4f0 [ 403.776839][T10119] ? rcu_is_watching+0x12/0xc0 [ 403.781670][T10119] ? kernfs_fop_write_iter+0x223/0x500 [ 403.787216][T10119] kernfs_fop_write_iter+0x223/0x500 [ 403.792588][T10119] vfs_write+0x5ae/0x1150 [ 403.796986][T10119] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 403.802870][T10119] ? __pfx___mutex_lock+0x10/0x10 [ 403.807957][T10119] ? __pfx_vfs_write+0x10/0x10 [ 403.812787][T10119] ksys_write+0x12b/0x250 [ 403.817156][T10119] ? __pfx_ksys_write+0x10/0x10 [ 403.822060][T10119] do_syscall_64+0xcd/0x250 [ 403.826618][T10119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.832563][T10119] RIP: 0033:0x7f857bf85d29 [ 403.837045][T10119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.856694][T10119] RSP: 002b:00007f857cce4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 403.865150][T10119] RAX: ffffffffffffffda RBX: 00007f857c175fa0 RCX: 00007f857bf85d29 [ 403.873152][T10119] RDX: 00000000000098c7 RSI: 0000000020000440 RDI: 0000000000000003 [ 403.881168][T10119] RBP: 00007f857cce4090 R08: 0000000000000000 R09: 0000000000000000 [ 403.889177][T10119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.897182][T10119] R13: 0000000000000000 R14: 00007f857c175fa0 R15: 00007fffc805fcf8 [ 403.905202][T10119] [ 404.087440][T10119] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1222'. [ 408.603962][T10161] ubi: mtd0 is already attached to ubi0 [ 409.467049][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1232'. [ 411.046236][T10171] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1234'. [ 414.078869][T10196] ubi: mtd0 is already attached to ubi0 [ 414.746809][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1242'. [ 416.343201][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 416.361212][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 416.370147][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 416.379495][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 416.399466][ T5849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 416.415780][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 417.129570][T10229] chnl_net:caif_netlink_parms(): no params data found [ 417.509258][T10243] ubi: mtd0 is already attached to ubi0 [ 417.863136][T10229] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.894344][T10229] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.916983][T10247] netlink: 'syz.0.1252': attribute type 4 has an invalid length. [ 417.934850][T10229] bridge_slave_0: entered allmulticast mode [ 417.953692][T10229] bridge_slave_0: entered promiscuous mode [ 417.975001][T10229] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.004003][T10229] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.035505][T10229] bridge_slave_1: entered allmulticast mode [ 418.042831][T10229] bridge_slave_1: entered promiscuous mode [ 418.485238][ T5850] Bluetooth: hci4: command tx timeout [ 418.492737][T10229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.569423][T10229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.961242][T10229] team0: Port device team_slave_0 added [ 418.979621][T10229] team0: Port device team_slave_1 added [ 419.006321][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1253'. [ 419.661405][T10229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.695099][T10229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.768578][T10229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.819796][T10229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.852073][T10229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.915407][T10229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.567125][ T5850] Bluetooth: hci4: command tx timeout [ 420.737376][T10229] hsr_slave_0: entered promiscuous mode [ 420.834069][T10229] hsr_slave_1: entered promiscuous mode [ 420.862088][T10229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.886975][T10229] Cannot create hsr debugfs directory [ 422.256532][T10277] ubi: mtd0 is already attached to ubi0 [ 422.353050][T10229] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 422.508083][T10229] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 422.617936][T10229] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 422.645592][ T5850] Bluetooth: hci4: command tx timeout [ 422.669893][T10229] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 422.752136][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1261'. [ 423.013350][T10229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.092971][T10229] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.151150][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.158402][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.202881][T10090] Process accounting paused [ 423.214083][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.221299][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.824184][T10229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.560784][T10229] veth0_vlan: entered promiscuous mode [ 424.657084][T10229] veth1_vlan: entered promiscuous mode [ 424.712111][T10229] veth0_macvtap: entered promiscuous mode [ 424.721579][T10229] veth1_macvtap: entered promiscuous mode [ 424.725315][ T5850] Bluetooth: hci4: command tx timeout [ 424.739741][T10229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.750419][T10229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.761003][T10229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.771725][T10229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.781674][T10229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.792316][T10229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.803679][T10229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.814049][T10229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.824629][T10229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.834593][T10229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.845390][T10229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.855680][T10229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.866178][T10229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.877159][T10229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.887832][T10229] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.896812][T10229] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.905657][T10229] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.914421][T10229] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.129223][ T3474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.169402][ T3474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.254165][ T3474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.304801][ T3474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.862319][T10329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1268'. [ 426.231418][T10332] ubi: mtd0 is already attached to ubi0 [ 427.260279][T10342] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 427.289449][T10342] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 427.358835][T10342] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 427.464298][T10342] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 427.532714][T10342] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 427.716102][T10342] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 428.334828][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1278'. [ 428.345944][T10371] zero sized request [ 428.443257][T10368] netlink: del zone limit has 8 unknown bytes [ 429.093823][T10381] capability: warning: `syz.4.1283' uses 32-bit capabilities (legacy support in use) [ 429.278086][T10385] FAULT_INJECTION: forcing a failure. [ 429.278086][T10385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.292804][ T5850] Bluetooth: hci1: command 0x0c1a tx timeout [ 429.309861][T10385] CPU: 0 UID: 0 PID: 10385 Comm: syz.4.1284 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 429.320734][T10385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 429.330838][T10385] Call Trace: [ 429.334141][T10385] [ 429.337127][T10385] dump_stack_lvl+0x16c/0x1f0 [ 429.341847][T10385] should_fail_ex+0x497/0x5b0 [ 429.346573][T10385] _copy_to_iter+0x4a5/0x1400 [ 429.351313][T10385] ? __pfx__copy_to_iter+0x10/0x10 [ 429.356474][T10385] ? __virt_addr_valid+0x1a4/0x590 [ 429.361634][T10385] ? __virt_addr_valid+0x5e/0x590 [ 429.366710][T10385] ? __phys_addr_symbol+0x30/0x80 [ 429.371778][T10385] ? __check_object_size+0x488/0x710 [ 429.377113][T10385] simple_copy_to_iter+0x4f/0x80 [ 429.382092][T10385] __skb_datagram_iter+0x122/0x8c0 [ 429.387241][T10385] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 429.392915][T10385] ? skb_recv_datagram+0x89/0xc0 [ 429.397896][T10385] ? rcu_is_watching+0x12/0xc0 [ 429.402709][T10385] skb_copy_datagram_iter+0x40/0x50 [ 429.407965][T10385] netlink_recvmsg+0x299/0xf30 [ 429.412780][T10385] ? __pfx_netlink_recvmsg+0x10/0x10 [ 429.418098][T10385] ? aa_sk_perm+0x2f5/0xb20 [ 429.422656][T10385] ? __pfx_aa_sk_perm+0x10/0x10 [ 429.427554][T10385] ? find_held_lock+0x2d/0x110 [ 429.432383][T10385] sock_recvmsg+0x1f6/0x250 [ 429.436923][T10385] ____sys_recvmsg+0x219/0x6b0 [ 429.441728][T10385] ? __pfx_____sys_recvmsg+0x10/0x10 [ 429.447069][T10385] ___sys_recvmsg+0x115/0x1a0 [ 429.451799][T10385] ? __pfx____sys_recvmsg+0x10/0x10 [ 429.457050][T10385] ? __pfx_lock_release+0x10/0x10 [ 429.462116][T10385] ? trace_lock_acquire+0x14e/0x1f0 [ 429.467384][T10385] do_recvmmsg+0x2f8/0x740 [ 429.471850][T10385] ? __pfx_do_recvmmsg+0x10/0x10 [ 429.476861][T10385] ? vfs_write+0x306/0x1150 [ 429.481430][T10385] ? __mutex_unlock_slowpath+0x164/0x690 [ 429.487127][T10385] ? __fget_files+0x206/0x3a0 [ 429.491873][T10385] __x64_sys_recvmmsg+0x239/0x290 [ 429.496975][T10385] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 429.502591][T10385] do_syscall_64+0xcd/0x250 [ 429.507143][T10385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.513087][T10385] RIP: 0033:0x7faffb385d29 [ 429.517541][T10385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.537183][T10385] RSP: 002b:00007faffc1da038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 429.545632][T10385] RAX: ffffffffffffffda RBX: 00007faffb575fa0 RCX: 00007faffb385d29 [ 429.553650][T10385] RDX: 000000000000010a RSI: 0000000020000140 RDI: 0000000000000003 [ 429.561653][T10385] RBP: 00007faffc1da090 R08: 0000000000000000 R09: 0000000000000000 [ 429.569671][T10385] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 429.577669][T10385] R13: 0000000000000000 R14: 00007faffb575fa0 R15: 00007ffd673e1e38 [ 429.585678][T10385] [ 429.590998][ T5850] Bluetooth: hci3: command 0x0c1a tx timeout [ 429.597170][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout [ 429.603237][ T5850] Bluetooth: hci4: command 0x0c1a tx timeout [ 431.057167][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1290'. [ 431.326984][T10407] FAULT_INJECTION: forcing a failure. [ 431.326984][T10407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.386157][T10407] CPU: 1 UID: 0 PID: 10407 Comm: syz.2.1292 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 431.397032][T10407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 431.407144][T10407] Call Trace: [ 431.410463][T10407] [ 431.413431][T10407] dump_stack_lvl+0x16c/0x1f0 [ 431.418179][T10407] should_fail_ex+0x497/0x5b0 [ 431.422932][T10407] _copy_from_user+0x2e/0xd0 [ 431.427595][T10407] usbdev_ioctl+0x1750/0x3f90 [ 431.432380][T10407] ? __pfx_usbdev_ioctl+0x10/0x10 [ 431.437466][T10407] ? do_vfs_ioctl+0x513/0x1950 [ 431.442289][T10407] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 431.447392][T10407] ? __pfx_lock_release+0x10/0x10 [ 431.452477][T10407] ? trace_lock_acquire+0x14e/0x1f0 [ 431.457752][T10407] ? __fget_files+0x206/0x3a0 [ 431.462475][T10407] ? __pfx_usbdev_ioctl+0x10/0x10 [ 431.467537][T10407] __x64_sys_ioctl+0x190/0x200 [ 431.472366][T10407] do_syscall_64+0xcd/0x250 [ 431.476918][T10407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.482857][T10407] RIP: 0033:0x7f857bf85d29 [ 431.487299][T10407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.506947][T10407] RSP: 002b:00007f857cce4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.515397][T10407] RAX: ffffffffffffffda RBX: 00007f857c175fa0 RCX: 00007f857bf85d29 [ 431.523394][T10407] RDX: 0000000000000001 RSI: 00000000c0105512 RDI: 0000000000000003 [ 431.531417][T10407] RBP: 00007f857cce4090 R08: 0000000000000000 R09: 0000000000000000 [ 431.539416][T10407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.547414][T10407] R13: 0000000000000000 R14: 00007f857c175fa0 R15: 00007fffc805fcf8 [ 431.555431][T10407] [ 431.692225][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout [ 433.768110][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout [ 436.152732][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1318'. [ 436.602899][T10475] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 436.645597][T10475] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 436.683946][T10475] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 436.695405][T10475] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 438.057509][T10503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1316'. [ 438.564117][T10514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1320'. [ 438.645956][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 438.725269][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout [ 438.731407][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 438.737584][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout [ 440.213203][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1331'. [ 440.318516][T10527] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 440.385145][T10527] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 440.423452][T10527] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 440.480949][T10527] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 441.925635][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 442.325283][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 442.485311][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout [ 442.491479][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 443.470183][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1341'. [ 444.746107][T10599] FAULT_INJECTION: forcing a failure. [ 444.746107][T10599] name failslab, interval 1, probability 0, space 0, times 0 [ 444.912046][T10599] CPU: 1 UID: 0 PID: 10599 Comm: syz.1.1343 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 444.923001][T10599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 444.933204][T10599] Call Trace: [ 444.936536][T10599] [ 444.939517][T10599] dump_stack_lvl+0x16c/0x1f0 [ 444.944272][T10599] should_fail_ex+0x497/0x5b0 [ 444.949019][T10599] ? fs_reclaim_acquire+0xae/0x150 [ 444.954204][T10599] should_failslab+0xc2/0x120 [ 444.958969][T10599] __kmalloc_node_noprof+0xd1/0x520 [ 444.964251][T10599] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 444.969963][T10599] ? __pfx_lock_release+0x10/0x10 [ 444.975063][T10599] __kvmalloc_node_noprof+0xad/0x1a0 [ 444.980423][T10599] seq_read_iter+0x82a/0x12b0 [ 444.985184][T10599] seq_read+0x39f/0x4e0 [ 444.989414][T10599] ? __pfx_seq_read+0x10/0x10 [ 444.994179][T10599] ? __pfx_seq_read+0x10/0x10 [ 444.998934][T10599] proc_reg_read+0x23d/0x330 [ 445.003592][T10599] ? __pfx_proc_reg_read+0x10/0x10 [ 445.008795][T10599] vfs_read+0x1df/0xbe0 [ 445.013019][T10599] ? __fget_files+0x1fc/0x3a0 [ 445.017762][T10599] ? __pfx___mutex_lock+0x10/0x10 [ 445.022866][T10599] ? __pfx_vfs_read+0x10/0x10 [ 445.027621][T10599] ? __fget_files+0x206/0x3a0 [ 445.032408][T10599] ksys_read+0x12b/0x250 [ 445.036809][T10599] ? __pfx_ksys_read+0x10/0x10 [ 445.041660][T10599] do_syscall_64+0xcd/0x250 [ 445.046243][T10599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.052196][T10599] RIP: 0033:0x7faf13f85d29 [ 445.056751][T10599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.076405][T10599] RSP: 002b:00007faf14e60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 445.085291][T10599] RAX: ffffffffffffffda RBX: 00007faf14175fa0 RCX: 00007faf13f85d29 [ 445.093320][T10599] RDX: 00000000000000f8 RSI: 0000000020000200 RDI: 0000000000000003 [ 445.101331][T10599] RBP: 00007faf14e60090 R08: 0000000000000000 R09: 0000000000000000 [ 445.109340][T10599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.117344][T10599] R13: 0000000000000000 R14: 00007faf14175fa0 R15: 00007fff803ba7d8 [ 445.125387][T10599] [ 445.535612][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.541983][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.155893][T10231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 470.189457][T10231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 470.198064][T10231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 470.213855][T10231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 470.222996][T10231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 470.232933][T10231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 470.846098][T10851] [U]  [ 470.849003][T10851] [U] [ 470.851771][T10851] [U] [ 470.854530][T10851] [U] [ 470.936122][T10851] [U] [ 470.938938][T10851] [U] [ 470.941718][T10851] [U] [ 470.944487][T10851] [U] [ 471.020336][T10851] [U] [ 471.023152][T10851] [U] [ 471.025925][T10851] [U] [ 471.028691][T10851] [U] [ 471.085908][T10851] [U] [ 471.088720][T10851] [U] [ 471.091483][T10851] [U] [ 471.094256][T10851] [U] [ 471.120806][T10846] chnl_net:caif_netlink_parms(): no params data found [ 471.195600][T10851] [U] [ 471.198410][T10851] [U] [ 471.201179][T10851] [U] [ 471.203949][T10851] [U] [ 471.307739][T10851] [U] [ 471.310543][T10851] [U] [ 471.313309][T10851] [U] [ 471.316080][T10851] [U] [ 471.336181][T10851] [U] [ 471.339012][T10851] [U] [ 471.341798][T10851] [U] [ 471.344561][T10851] [U] [ 471.348458][T10851] [U] [ 471.351228][T10851] [U] [ 471.354000][T10851] [U] [ 471.356770][T10851] [U] [ 471.360847][T10851] [U] [ 471.363622][T10851] [U] [ 471.366397][T10851] [U] [ 471.369149][T10851] [U] [ 471.373043][T10851] [U] [ 471.375911][T10851] [U] [ 471.378682][T10851] [U] [ 471.381446][T10851] [U] [ 471.445591][T10851] [U] [ 471.448415][T10851] [U] [ 471.451279][T10851] [U] [ 471.454046][T10851] [U] [ 471.505488][T10851] [U] [ 471.508297][T10851] [U] [ 471.511034][T10851] [U] [ 471.513766][T10851] [U] [ 471.585737][T10851] [U] [ 471.588585][T10851] [U] [ 471.591355][T10851] [U] [ 471.594123][T10851] [U] [ 471.637696][T10846] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.644873][T10846] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.685509][T10846] bridge_slave_0: entered allmulticast mode [ 471.692815][T10846] bridge_slave_0: entered promiscuous mode [ 471.734271][T10846] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.756665][T10846] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.763983][T10846] bridge_slave_1: entered allmulticast mode [ 471.810048][T10851] [U] [ 471.812253][T10846] bridge_slave_1: entered promiscuous mode [ 472.098993][T10846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.148412][T10846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.326859][T10231] Bluetooth: hci2: command tx timeout [ 472.541682][T10846] team0: Port device team_slave_0 added [ 472.597771][T10846] team0: Port device team_slave_1 added [ 472.836282][T10872] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1417'. [ 473.056586][T10846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.082131][T10846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.185224][T10846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.251585][T10872] lo: entered promiscuous mode [ 473.261633][T10872] lo: entered allmulticast mode [ 473.464682][T10846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.493015][T10846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.575040][T10846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.711830][T10882] netlink: 'syz.4.1419': attribute type 2 has an invalid length. [ 473.919187][T10846] hsr_slave_0: entered promiscuous mode [ 473.995855][T10846] hsr_slave_1: entered promiscuous mode [ 474.013738][T10846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 474.034703][T10846] Cannot create hsr debugfs directory [ 474.235131][T10888] ================================================================== [ 474.243269][T10888] BUG: KASAN: slab-use-after-free in force_devcd_write+0x31f/0x350 [ 474.251225][T10888] Read of size 8 at addr ffff888034b36800 by task syz.4.1420/10888 [ 474.259163][T10888] [ 474.261504][T10888] CPU: 1 UID: 0 PID: 10888 Comm: syz.4.1420 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 474.272309][T10888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 474.282396][T10888] Call Trace: [ 474.285692][T10888] [ 474.288643][T10888] dump_stack_lvl+0x116/0x1f0 [ 474.293366][T10888] print_report+0xc3/0x620 [ 474.297832][T10888] ? __virt_addr_valid+0x5e/0x590 [ 474.302898][T10888] ? __phys_addr+0xc6/0x150 [ 474.307444][T10888] kasan_report+0xd9/0x110 [ 474.311912][T10888] ? force_devcd_write+0x31f/0x350 [ 474.317053][T10888] ? force_devcd_write+0x31f/0x350 [ 474.322196][T10888] force_devcd_write+0x31f/0x350 [ 474.327169][T10888] ? __pfx_force_devcd_write+0x10/0x10 [ 474.332662][T10888] ? debugfs_file_get+0x21c/0x5c0 [ 474.337724][T10888] ? __pfx_debugfs_file_get+0x10/0x10 [ 474.343133][T10888] ? rcu_is_watching+0x12/0xc0 [ 474.347934][T10888] ? trace_lock_acquire+0x14e/0x1f0 [ 474.353183][T10888] full_proxy_write+0xfb/0x1b0 [ 474.357988][T10888] ? __pfx_full_proxy_write+0x10/0x10 [ 474.363397][T10888] vfs_write+0x24c/0x1150 [ 474.367759][T10888] ? __fget_files+0x1fc/0x3a0 [ 474.372474][T10888] ? __pfx___mutex_lock+0x10/0x10 [ 474.377541][T10888] ? __pfx_vfs_write+0x10/0x10 [ 474.382346][T10888] ? __fget_files+0x206/0x3a0 [ 474.387060][T10888] ksys_write+0x12b/0x250 [ 474.391425][T10888] ? __pfx_ksys_write+0x10/0x10 [ 474.396399][T10888] do_syscall_64+0xcd/0x250 [ 474.400943][T10888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.406876][T10888] RIP: 0033:0x7faffb385d29 [ 474.411317][T10888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.430958][T10888] RSP: 002b:00007faffc1da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 474.439401][T10888] RAX: ffffffffffffffda RBX: 00007faffb575fa0 RCX: 00007faffb385d29 [ 474.447396][T10888] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003 [ 474.455393][T10888] RBP: 00007faffb401aa8 R08: 0000000000000000 R09: 0000000000000000 [ 474.463389][T10888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.471382][T10888] R13: 0000000000000000 R14: 00007faffb575fa0 R15: 00007ffd673e1e38 [ 474.479385][T10888] [ 474.482417][T10888] [ 474.484748][T10888] Allocated by task 5832: [ 474.489093][T10888] kasan_save_stack+0x33/0x60 [ 474.493815][T10888] kasan_save_track+0x14/0x30 [ 474.498525][T10888] __kasan_kmalloc+0xaa/0xb0 [ 474.503146][T10888] vhci_open+0x4c/0x430 [ 474.507329][T10888] misc_open+0x35a/0x420 [ 474.511603][T10888] chrdev_open+0x237/0x6a0 [ 474.516051][T10888] do_dentry_open+0xf59/0x1ea0 [ 474.520841][T10888] vfs_open+0x82/0x3f0 [ 474.524945][T10888] path_openat+0x1e6a/0x2d60 [ 474.529573][T10888] do_filp_open+0x20c/0x470 [ 474.534110][T10888] do_sys_openat2+0x17a/0x1e0 [ 474.538830][T10888] __x64_sys_openat+0x175/0x210 [ 474.543718][T10888] do_syscall_64+0xcd/0x250 [ 474.548255][T10888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.554181][T10888] [ 474.556514][T10888] Freed by task 10572: [ 474.560592][T10888] kasan_save_stack+0x33/0x60 [ 474.565306][T10888] kasan_save_track+0x14/0x30 [ 474.570019][T10888] kasan_save_free_info+0x3b/0x60 [ 474.575073][T10888] __kasan_slab_free+0x51/0x70 [ 474.579873][T10888] kfree+0x14f/0x4b0 [ 474.583807][T10888] vhci_release+0xbb/0xf0 [ 474.588161][T10888] __fput+0x3f8/0xb60 [ 474.592176][T10888] task_work_run+0x14e/0x250 [ 474.596812][T10888] do_exit+0xad8/0x2d70 [ 474.601002][T10888] do_group_exit+0xd3/0x2a0 [ 474.605542][T10888] get_signal+0x2576/0x2610 [ 474.610079][T10888] arch_do_signal_or_restart+0x90/0x7e0 [ 474.615665][T10888] irqentry_exit_to_user_mode+0x13f/0x280 [ 474.621449][T10888] asm_exc_page_fault+0x26/0x30 [ 474.626334][T10888] [ 474.628670][T10888] The buggy address belongs to the object at ffff888034b36800 [ 474.628670][T10888] which belongs to the cache kmalloc-1k of size 1024 [ 474.642745][T10888] The buggy address is located 0 bytes inside of [ 474.642745][T10888] freed 1024-byte region [ffff888034b36800, ffff888034b36c00) [ 474.656835][T10888] [ 474.659185][T10888] The buggy address belongs to the physical page: [ 474.665628][T10888] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34b30 [ 474.674423][T10888] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 474.682948][T10888] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 474.690525][T10888] page_type: f5(slab) [ 474.694532][T10888] raw: 00fff00000000040 ffff88801ac41dc0 ffffea0001f6f000 dead000000000002 [ 474.703140][T10888] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 474.711840][T10888] head: 00fff00000000040 ffff88801ac41dc0 ffffea0001f6f000 dead000000000002 [ 474.720542][T10888] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 474.729244][T10888] head: 00fff00000000003 ffffea0000d2cc01 ffffffffffffffff 0000000000000000 [ 474.737938][T10888] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 474.746629][T10888] page dumped because: kasan: bad access detected [ 474.753065][T10888] page_owner tracks the page as allocated [ 474.758790][T10888] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 32644005686, free_ts 0 [ 474.778541][T10888] post_alloc_hook+0x2d1/0x350 [ 474.783342][T10888] get_page_from_freelist+0xfce/0x2f80 [ 474.788846][T10888] __alloc_pages_noprof+0x223/0x25b0 [ 474.794196][T10888] alloc_pages_mpol_noprof+0x2c9/0x610 [ 474.799703][T10888] new_slab+0x2c9/0x410 [ 474.803909][T10888] ___slab_alloc+0xce2/0x1650 [ 474.808631][T10888] __slab_alloc.constprop.0+0x56/0xb0 [ 474.814040][T10888] __kmalloc_noprof+0x2de/0x4f0 [ 474.818932][T10888] __alloc_workqueue+0xd4c/0x1810 [ 474.824003][T10888] alloc_workqueue+0xd3/0x200 [ 474.828750][T10888] udp_tunnel_nic_init_module+0x21/0x110 [ 474.834410][T10888] do_one_initcall+0x128/0x630 [ 474.839211][T10888] kernel_init_freeable+0x58f/0x8b0 [ 474.844446][T10888] kernel_init+0x1c/0x2b0 [ 474.848815][T10888] ret_from_fork+0x45/0x80 [ 474.853283][T10888] ret_from_fork_asm+0x1a/0x30 [ 474.858085][T10888] page_owner free stack trace missing [ 474.863464][T10888] [ 474.865805][T10888] Memory state around the buggy address: [ 474.871450][T10888] ffff888034b36700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 474.879553][T10888] ffff888034b36780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 474.887724][T10888] >ffff888034b36800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 474.895804][T10888] ^ [ 474.899891][T10888] ffff888034b36880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 474.908010][T10888] ffff888034b36900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 474.916305][T10888] ================================================================== [ 474.995117][T10231] Bluetooth: hci2: command tx timeout [ 475.431699][T10888] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 475.438982][T10888] CPU: 0 UID: 0 PID: 10888 Comm: syz.4.1420 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 475.449805][T10888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 475.459910][T10888] Call Trace: [ 475.463228][T10888] [ 475.466191][T10888] dump_stack_lvl+0x3d/0x1f0 [ 475.470929][T10888] panic+0x71d/0x800 [ 475.475148][T10888] ? __pfx_panic+0x10/0x10 [ 475.479645][T10888] ? preempt_schedule_thunk+0x1a/0x30 [ 475.485072][T10888] ? preempt_schedule_common+0x44/0xc0 [ 475.490591][T10888] check_panic_on_warn+0xab/0xb0 [ 475.495682][T10888] end_report+0x117/0x180 [ 475.500080][T10888] kasan_report+0xe9/0x110 [ 475.504555][T10888] ? force_devcd_write+0x31f/0x350 [ 475.509730][T10888] ? force_devcd_write+0x31f/0x350 [ 475.514894][T10888] force_devcd_write+0x31f/0x350 [ 475.519880][T10888] ? __pfx_force_devcd_write+0x10/0x10 [ 475.525389][T10888] ? debugfs_file_get+0x21c/0x5c0 [ 475.530469][T10888] ? __pfx_debugfs_file_get+0x10/0x10 [ 475.535906][T10888] ? rcu_is_watching+0x12/0xc0 [ 475.540733][T10888] ? trace_lock_acquire+0x14e/0x1f0 [ 475.545994][T10888] full_proxy_write+0xfb/0x1b0 [ 475.550814][T10888] ? __pfx_full_proxy_write+0x10/0x10 [ 475.556245][T10888] vfs_write+0x24c/0x1150 [ 475.560628][T10888] ? __fget_files+0x1fc/0x3a0 [ 475.565365][T10888] ? __pfx___mutex_lock+0x10/0x10 [ 475.570449][T10888] ? __pfx_vfs_write+0x10/0x10 [ 475.575273][T10888] ? __fget_files+0x206/0x3a0 [ 475.580009][T10888] ksys_write+0x12b/0x250 [ 475.584398][T10888] ? __pfx_ksys_write+0x10/0x10 [ 475.589312][T10888] do_syscall_64+0xcd/0x250 [ 475.593875][T10888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.599826][T10888] RIP: 0033:0x7faffb385d29 [ 475.604282][T10888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.624035][T10888] RSP: 002b:00007faffc1da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 475.632517][T10888] RAX: ffffffffffffffda RBX: 00007faffb575fa0 RCX: 00007faffb385d29 [ 475.640535][T10888] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003 [ 475.648589][T10888] RBP: 00007faffb401aa8 R08: 0000000000000000 R09: 0000000000000000 [ 475.656618][T10888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.664634][T10888] R13: 0000000000000000 R14: 00007faffb575fa0 R15: 00007ffd673e1e38 [ 475.672665][T10888] [ 475.676007][T10888] Kernel Offset: disabled [ 475.680349][T10888] Rebooting in 86400 seconds..