last executing test programs: 24m2.191420141s ago: executing program 3 (id=230): adjtimex$auto(&(0x7f00000004c0)={0xf332b6b, 0x0, 0x7d, 0xfffffffffffffffd, 0xd4, 0x4, 0x4, 0x0, 0x1, 0x368e, 0x2, {0xc, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x8000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0x4, 0x0, 0x800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2b, 0x1, 0x1) setsockopt$auto(0x3, 0x8000000000000006, 0x1f, 0x0, 0x7ffffc) close_range$auto(0x2, 0x8, 0x0) 24m1.435337821s ago: executing program 3 (id=231): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) mmap$auto(0x7, 0x8, 0x7, 0x18, 0x42c8b44c, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x40, 0x2, 0x9, 0x111, 0x9, 0x7) migrate_pages$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) r0 = open(0x0, 0x22240, 0x16c) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003ec, 0x14) madvise$auto(0x0, 0xffffffffffff0005, 0x19) msync$auto(0x0, 0x2000000005, 0x6) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="0094946ebb0a63", @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fddbdf2503000000040008000400038012000100898771f1c19f17790485908288470000"], 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="0c00a3f2", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250af4"], 0x1c}, 0x1, 0x0, 0x0, 0x20044004}, 0x20008810) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd11\x00', 0x4840, 0x0) fadvise64$auto(r1, 0x8, 0xc, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r2, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) 23m58.708401028s ago: executing program 3 (id=244): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r0, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003ac0)={&(0x7f0000000840)=ANY=[@ANYBLOB=',;\x00\x00', @ANYRES16=r1, @ANYBLOB="8b0a2cbd7000ffd9df25010000000800018004000280103b01"], 0x3b2c}, 0x1, 0x0, 0x1f00, 0x40000}, 0x4000000) 23m58.502846714s ago: executing program 3 (id=245): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto_snd_pcm_oss_f_reg_pcm_oss(r0, &(0x7f0000000280)="c2", 0x1) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x10000) mmap$auto(0x5000000, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) 23m58.367054526s ago: executing program 3 (id=246): r0 = socket(0x2, 0x1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) (async) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/ext4/sda1/mb_structs_summary\x00', 0xa000, 0x0) read$auto(r1, &(0x7f0000003a80)='/proc/self/net/rpc/nfs4.nametoid/channel\x00', 0x861) (async) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000080)=""/245, 0xf5) (async) socket(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x23, 0x2, 0x0) (async) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) (async) sendfile$auto(0x6, 0x3, 0x0, 0xc01) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000100), r0) 23m58.201843457s ago: executing program 3 (id=247): ioctl$auto_DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5}) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xc0, r1, 0x20, 0x2, 0x25dfdbfe, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0x9e, 0x1a, "81bf9f39a9ba4f2211f390f4d024a7d8f094bab4eb8880556a2f86d7b2dc51a387c03ee97ec1864c0ad3e98e0567ef2539a45416cf6810f0234720bcc62675424598dcc854ef2621ebc22993d7c1785e72af82b7f781c2989753466b9706d790568d23a42566e0b814b2c5c389868c1cb7117078ca4d03a39554855e5174d15166fb47ea02aa6ee69076a55317b180e9471e4bbd6c0f78626356"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "3de520e4393ee0fb"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000094}, 0x40041) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) write$auto_snd_pcm_oss_f_reg_pcm_oss(r2, &(0x7f0000000280)="c2", 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={r2, 0x7ff, 0x6}) r4 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nullb0/integrity/read_verify\x00', 0x102, 0x0) sendfile$auto(r5, r5, 0x0, 0x7) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x6) sendmsg$auto_IEEE802154_START_REQ(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xfffffd3b, &(0x7f0000000180)={&(0x7f00000002c0)={0x34, r4, 0x200, 0x70bd29, 0x25dfdbf7, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x4, 0x1f, '\xe5\xca\xc2d\xf9\x81\xdf\x8a\xb7\xc4.:@cK/t\xda=\xe6 @\x9f\r\x93\xb4\xf8\xaa$3\xf5\x82g\xde\xd5\x0f\xf3f7\xf5\xf6\x8c\xcem\b\xd4\x97n\x18d\xcc\xb1l:koS\xd0l \x11d-\x97n%5DG\xa6\x7fn\x93\x8d\xfeq\xa3\xbf\xe3\b\x84\xaaA\x7fy\xea\xcbw\x8a'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x1) wait4$auto(0x0, &(0x7f0000000000)=0x9, 0x2000002, 0x0) accept$auto(r2, &(0x7f0000000140)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e24, 0x4}}, &(0x7f0000000200)=0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5}) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xc0, r1, 0x20, 0x2, 0x25dfdbfe, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0x9e, 0x1a, "81bf9f39a9ba4f2211f390f4d024a7d8f094bab4eb8880556a2f86d7b2dc51a387c03ee97ec1864c0ad3e98e0567ef2539a45416cf6810f0234720bcc62675424598dcc854ef2621ebc22993d7c1785e72af82b7f781c2989753466b9706d790568d23a42566e0b814b2c5c389868c1cb7117078ca4d03a39554855e5174d15166fb47ea02aa6ee69076a55317b180e9471e4bbd6c0f78626356"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "3de520e4393ee0fb"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000094}, 0x40041) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) (async) write$auto(0x3, 0x0, 0x100082) (async) write$auto_snd_pcm_oss_f_reg_pcm_oss(r2, &(0x7f0000000280)="c2", 0x1) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={r2, 0x7ff, 0x6}) (async) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nullb0/integrity/read_verify\x00', 0x102, 0x0) (async) sendfile$auto(r5, r5, 0x0, 0x7) (async) socket(0x2, 0x80002, 0x73) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x6) (async) sendmsg$auto_IEEE802154_START_REQ(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xfffffd3b, &(0x7f0000000180)={&(0x7f00000002c0)={0x34, r4, 0x200, 0x70bd29, 0x25dfdbf7, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x4, 0x1f, '\xe5\xca\xc2d\xf9\x81\xdf\x8a\xb7\xc4.:@cK/t\xda=\xe6 @\x9f\r\x93\xb4\xf8\xaa$3\xf5\x82g\xde\xd5\x0f\xf3f7\xf5\xf6\x8c\xcem\b\xd4\x97n\x18d\xcc\xb1l:koS\xd0l \x11d-\x97n%5DG\xa6\x7fn\x93\x8d\xfeq\xa3\xbf\xe3\b\x84\xaaA\x7fy\xea\xcbw\x8a'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async) wait4$auto(0x0, &(0x7f0000000000)=0x9, 0x2000002, 0x0) (async) accept$auto(r2, &(0x7f0000000140)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e24, 0x4}}, &(0x7f0000000200)=0x7) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) 23m43.129579208s ago: executing program 32 (id=247): ioctl$auto_DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5}) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xc0, r1, 0x20, 0x2, 0x25dfdbfe, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0x9e, 0x1a, "81bf9f39a9ba4f2211f390f4d024a7d8f094bab4eb8880556a2f86d7b2dc51a387c03ee97ec1864c0ad3e98e0567ef2539a45416cf6810f0234720bcc62675424598dcc854ef2621ebc22993d7c1785e72af82b7f781c2989753466b9706d790568d23a42566e0b814b2c5c389868c1cb7117078ca4d03a39554855e5174d15166fb47ea02aa6ee69076a55317b180e9471e4bbd6c0f78626356"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "3de520e4393ee0fb"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000094}, 0x40041) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) write$auto_snd_pcm_oss_f_reg_pcm_oss(r2, &(0x7f0000000280)="c2", 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={r2, 0x7ff, 0x6}) r4 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nullb0/integrity/read_verify\x00', 0x102, 0x0) sendfile$auto(r5, r5, 0x0, 0x7) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x6) sendmsg$auto_IEEE802154_START_REQ(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xfffffd3b, &(0x7f0000000180)={&(0x7f00000002c0)={0x34, r4, 0x200, 0x70bd29, 0x25dfdbf7, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x4, 0x1f, '\xe5\xca\xc2d\xf9\x81\xdf\x8a\xb7\xc4.:@cK/t\xda=\xe6 @\x9f\r\x93\xb4\xf8\xaa$3\xf5\x82g\xde\xd5\x0f\xf3f7\xf5\xf6\x8c\xcem\b\xd4\x97n\x18d\xcc\xb1l:koS\xd0l \x11d-\x97n%5DG\xa6\x7fn\x93\x8d\xfeq\xa3\xbf\xe3\b\x84\xaaA\x7fy\xea\xcbw\x8a'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x1) wait4$auto(0x0, &(0x7f0000000000)=0x9, 0x2000002, 0x0) accept$auto(r2, &(0x7f0000000140)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e24, 0x4}}, &(0x7f0000000200)=0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5}) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xc0, r1, 0x20, 0x2, 0x25dfdbfe, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0x9e, 0x1a, "81bf9f39a9ba4f2211f390f4d024a7d8f094bab4eb8880556a2f86d7b2dc51a387c03ee97ec1864c0ad3e98e0567ef2539a45416cf6810f0234720bcc62675424598dcc854ef2621ebc22993d7c1785e72af82b7f781c2989753466b9706d790568d23a42566e0b814b2c5c389868c1cb7117078ca4d03a39554855e5174d15166fb47ea02aa6ee69076a55317b180e9471e4bbd6c0f78626356"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "3de520e4393ee0fb"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000094}, 0x40041) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) (async) write$auto(0x3, 0x0, 0x100082) (async) write$auto_snd_pcm_oss_f_reg_pcm_oss(r2, &(0x7f0000000280)="c2", 0x1) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={r2, 0x7ff, 0x6}) (async) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nullb0/integrity/read_verify\x00', 0x102, 0x0) (async) sendfile$auto(r5, r5, 0x0, 0x7) (async) socket(0x2, 0x80002, 0x73) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x6) (async) sendmsg$auto_IEEE802154_START_REQ(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xfffffd3b, &(0x7f0000000180)={&(0x7f00000002c0)={0x34, r4, 0x200, 0x70bd29, 0x25dfdbf7, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x4, 0x1f, '\xe5\xca\xc2d\xf9\x81\xdf\x8a\xb7\xc4.:@cK/t\xda=\xe6 @\x9f\r\x93\xb4\xf8\xaa$3\xf5\x82g\xde\xd5\x0f\xf3f7\xf5\xf6\x8c\xcem\b\xd4\x97n\x18d\xcc\xb1l:koS\xd0l \x11d-\x97n%5DG\xa6\x7fn\x93\x8d\xfeq\xa3\xbf\xe3\b\x84\xaaA\x7fy\xea\xcbw\x8a'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async) wait4$auto(0x0, &(0x7f0000000000)=0x9, 0x2000002, 0x0) (async) accept$auto(r2, &(0x7f0000000140)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e24, 0x4}}, &(0x7f0000000200)=0x7) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) 19m44.891020428s ago: executing program 4 (id=1354): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$auto(r0, 0x560a, 0x7) 19m44.531914678s ago: executing program 4 (id=1357): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x5, 0x4909b6f8, 0x1ffdd, 0x7, 0x3, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x4080, 0x4, 0x0, 0x7, 0x2000, 0x200, 0x8001, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x12, 0x1000002000, 0x0, 0xa, 0x70624ce7, 0xefde, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x400000000005b4, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x100000000000006, 0xfffffffffffffffc, 0x2, 0x3, 0x4]}, 0x1fe, 0xd) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x88) connect$auto(0x3, &(0x7f00000000c0), 0x55) socket(0x2, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000040), 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x34, 0x65f, 0x1ffde, 0x7, 0x3, 0x20000002, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x200000000001, 0x0, 0xffffffffefffffff, 0x200000000000004, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x1000, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x10006]}, 0x1fe, 0xd) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 19m44.129101631s ago: executing program 4 (id=1360): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x10000) ioctl$auto_SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000002e40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4048c40}, 0x4) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0x7) 19m42.952454543s ago: executing program 4 (id=1367): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x40090) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0x9f, 0xeb1, 0x401, 0x8000) get_robust_list$auto(0x0, 0x0, 0x0) (async) get_robust_list$auto(0x0, 0x0, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$auto(r0, 0x10000000084, 0x4, 0x0, 0x4) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x600004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async) mmap$auto(0x0, 0x600004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto_RNDADDENTROPY2(0xffffffffffffffff, 0x40085203, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="7201", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0x2}, 0x5, 0x0, 0x2, 0x7}, 0x7}, 0x3, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/fail_futex/probability\x00', 0x4002, 0x0) ioperm$auto(0x6, 0x4, 0xfffffffd) mknod$auto(&(0x7f0000000080)=':,\x00', 0xc9, 0xcb) (async) mknod$auto(&(0x7f0000000080)=':,\x00', 0xc9, 0xcb) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0) (async) mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0) fspick$auto(0xffffffffffffff9c, &(0x7f0000000000)='!\x00', 0x6) 19m42.105987191s ago: executing program 4 (id=1371): mmap$auto(0x0, 0x8000404, 0x4000000000df, 0x60eb2, 0x4, 0x300000000000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x2800010000000028, 0x80000000000005, 0x5, 0xbb, 0x80000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioperm$auto(0x4, 0xbc6, 0x81) mmap$auto(0x0, 0x3, 0xdc, 0xeb1, 0x401, 0x8003) getsockopt$auto(0x100000006, 0x1, 0x33, 0xfffffffffffffffe, 0x0) socket(0x2, 0x2, 0x88) ioctl$auto(0xc9, 0x100000002, 0x4000000005c8d) write$auto(0x3, 0x0, 0x3f00) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) socket(0x1, 0x1, 0x1) io_uring_setup$auto(0x3, 0x0) io_uring_register$auto(0x2, 0x2, &(0x7f0000000040), 0x86) io_uring_register$auto(0x2, 0x6, &(0x7f0000000180), 0x1) getrandom$auto(0x0, 0x6000000, 0x3) msgrcv$auto(0x9, &(0x7f0000000000)={0x80000000, 0xff}, 0xd647, 0x4, 0x2) madvise$auto(0x0, 0xf663, 0x15) migrate_pages$auto(0x0, 0x101, 0x0, &(0x7f0000000140)=0x9) madvise$auto(0x3d00000000000000, 0xffffffffffff0001, 0x15) 19m41.158795098s ago: executing program 4 (id=1379): sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x6) munmap$auto(0x20001001, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r0, 0xc08c5102, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) ioctl$auto(0x1, 0x89a0, 0x8) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="f4170000", @ANYRES16=0x0, @ANYBLOB="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"], 0x17f4}, 0x1, 0x0, 0x0, 0x4040c00}, 0x44000) 19m40.859564642s ago: executing program 33 (id=1379): sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x6) munmap$auto(0x20001001, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r0, 0xc08c5102, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) ioctl$auto(0x1, 0x89a0, 0x8) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="f4170000", @ANYRES16=0x0, @ANYBLOB="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"], 0x17f4}, 0x1, 0x0, 0x0, 0x4040c00}, 0x44000) 12m4.628760017s ago: executing program 2 (id=4151): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000) madvise$auto(0xfffffffffffffffe, 0x20000a, 0x8) mmap$auto(0x21a5, 0x2020009, 0x3, 0xfffffffffffffff8, 0x8, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) uname$auto(&(0x7f0000000380)={"0d10f09cdb16ab7cd78cfd888758667f28b5224f00558e7188ea0d516b3987b0a78d4eb64e74ec9823e6e3fa65f4f2d8ee852e6000eb8101044e2f88f571745bdc", "01e3fbac66d9eb6011a5a19260e08a4cf2f99c2db04022c5a48da43bd3f64f3c1f16f441f9fbcd59d6955ef88dbc1616d798b23fb4a7190071da662c9e24a6fdbc", "544dc06b56b88f7c139715fc2012493151637183bc3cbe60fc21854094ff2c88eb7a9a5743c306483219ac576339b0f8f4035d2c206347aa2c9bb4cb4d44dd6a37", "21839c359f7aa9ead9c84bf3f2bd1a7bc98b88d947da22aea6fd5bc8141cea247e8da7b58aa308cda54a0813f9cd1a2d37105fbbe2178678108cee70905b7171af", "80c7570773c988970566eb77a10198bdd5c63e94597c9e9b8773f56c6e83dd3c28b2d65d2eca5cca09356a735475c956cb5e7671ac4bd4bc5d2453c9bcb3db75db", "84482abb065d4bc0a14e447ae03eb95cebdeaac91fcf766bda37a44ac3218a4e790870c3fc81c2f2077023195ebe4cefdbf86af4d79ce7f66209052e5881c2e582"}) mmap$auto(0xa0, 0x421acade, 0x8, 0x16, 0x200, 0x9) socket(0x29, 0x3, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x401, 0x3, 0x7fffffffb000) prctl$auto(0x23, 0xb, 0x7ffffffeefff, 0x0, 0x0) 12m3.737937935s ago: executing program 2 (id=4157): r0 = socket(0x2, 0x2, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22040, 0x75) (async) socket(0x840000000002, 0x3, 0xff) (async) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x3) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) (async, rerun: 64) setsockopt$auto(0x3, 0x0, 0x12, 0x0, 0x28) (async, rerun: 64) mmap$auto(0x0, 0x9, 0x2, 0x8000000008011, 0x4, 0x0) (async, rerun: 32) connect$auto(r0, &(0x7f0000000180)=@in={0x2, 0x0, @private=0xa010100}, 0x15) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) connect$auto(0xffffffffffffffff, &(0x7f0000000000), 0x55) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async, rerun: 64) mknod$auto(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0xc1ac, 0x4) (async, rerun: 64) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) (async, rerun: 64) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (rerun: 64) setresuid$auto(0x0, 0x8, 0x8000) (async) ioctl$auto(0x20000000000003, 0x8946, 0x2) write$auto(0x3, 0x0, 0x5b6) 12m2.47492433s ago: executing program 2 (id=4162): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x101200, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chroot$auto(&(0x7f0000000080)='}[,&*}\x00') pivot_root$auto(&(0x7f0000000300)='.\x00\xaf\xeb)\xae$\xfc\x00\xf8\x05AC\x9f\xbbR\xec\xc6c\x85\xc8\xa7\xe84sF\xe3U\x94\x99\x8fR\xd0\x98\f\xa5\xb1S\x7f\xc3\xa5\xc0\x97\x10qa\r\x02\xd2\xc8\xd2\x8e\xc7\x80\x11\x06#\xf5\x18|\xdc\x81Ai\xb6\x96iaR\xdbA\x04\x10\x99\xe6\xdb\xae`G\x1d9`T\xd8\xc6\xea\xf7\x96\xb5\xe9\x164e\xb1 S\x8f\x12_\x15y\x91F\xc89\xb1\xd24?\x89.,Z\xba,\"v\xde\xc4\xe0\x84\xca|\"\x96V\xd5P\xe4\xb9\xea\x88\x15\xacs\xc6\x83\xd6\x81\xd7\x11\x88\x9c\xdd\x8a\x0e\xea\x19|\x7f\xe3A8x\xce\xc1!q\xbbi\\\xd8\xa9\xe0\xed\x9e\x19\xc0IC9^\xfcJG\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) 11m59.505180493s ago: executing program 2 (id=4173): socket(0x2, 0x801, 0x106) open$dir(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, 0xa0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x11, 0x3, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x5ea}, 0x5, 0x0, 0x7, 0x1000}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @host}, 0x55) bind$auto(0x3, &(0x7f0000000080), 0x6b) set_mempolicy$auto(0x1, 0x0, 0x40) unshare$auto(0x40000080) 11m55.042019615s ago: executing program 2 (id=4185): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x101200, 0x0) mknod$auto(&(0x7f00000048c0)='./file0\x00', 0xc46e, 0x9) truncate$auto(&(0x7f0000000040)='./file0\x00', 0x6b71) readv$auto(0xfffffffffffffffa, &(0x7f0000000080)={0x0, 0xffff}, 0xfffffffffffffffa) close_range$auto(0x2, 0xa, 0x0) chroot$auto(0x0) 11m54.605397162s ago: executing program 1 (id=4189): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xfffffffffffff000, 0x2) bpf$auto(0x8000000000000020, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x24, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@HWSIM_ATTR_ADDR_TRANSMITTER={0x9, 0x2, "cacd2dff11"}, @HWSIM_ATTR_NO_VIF={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xb06af94f6e038a6) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x14) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001200c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0xffffffc3, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) 11m54.400091613s ago: executing program 1 (id=4190): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000) madvise$auto(0xfffffffffffffffe, 0x20000a, 0x8) mmap$auto(0x21a5, 0x2020009, 0x3, 0xfffffffffffffff8, 0x8, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x401, 0x3, 0x7fffffffb000) prctl$auto(0x23, 0xb, 0x7ffffffeefff, 0x0, 0x0) 11m53.978456326s ago: executing program 1 (id=4192): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) set_mempolicy$auto(0x2, 0x0, 0x4) setreuid$auto(0x15, 0x5) ioctl$auto(0x3, 0x4b4d, 0x38) timer_gettime$auto(0x9, &(0x7f00000003c0)={{0x1, 0x9}, {0xaf1, 0x7}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) setrlimit$auto(0x2, &(0x7f0000000080)={0x0, 0x6}) mprotect$auto(0x20000000, 0xeb, 0x6) getrandom$auto(0x0, 0x6000000, 0x3) mkdir$auto(0x0, 0x40) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1$auto(0x3000000000000) r1 = openat$auto_fops_atomic_t_ro_(0xffffffffffffff9c, &(0x7f0000000080), 0x4cb00, 0x0) connect$auto(r1, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x3, 0x5}, 0x7) inotify_add_watch$auto(0x4, 0x0, 0x100400a) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x161140, 0x0) ioctl$auto(r2, 0x5457, 0xd8) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000200), r0) pipe$auto(&(0x7f0000000380)=r2) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x924}, @CTRL_ATTR_OP={0x8, 0xa, 0xc7e}, @CTRL_ATTR_FAMILY_NAME={0xe, 0x2, '/dev/ptmx\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x50, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x11e789c}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_IP6_SADDR={0x14}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) mkdir$auto(&(0x7f0000000180)='./file0\x00', 0x4) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 11m53.709333338s ago: executing program 1 (id=4193): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000001c, 0x5, 0x200005, 0x5, 0x80001) setresuid$auto(0x2, 0x7, 0x0) openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_tracers\x00', 0x40000, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0xa) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000010000006b00000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4000023}, 0x20008088) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x44) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x21fd9a4a, 0x7fff, 0xeb1, 0x3fd, 0x8000008000) arch_prctl$auto(0x1004, 0xe735) io_pgetevents$auto(0xa04, 0x7, 0x5, 0xfffffffffffffffd, 0xfffffffffffffffe, 0xfffffffffffffffc) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 11m52.544122523s ago: executing program 1 (id=4194): socket(0x2, 0x801, 0x106) open$dir(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, 0xa0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x11, 0x3, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x5ea}, 0x5, 0x0, 0x7, 0x1000}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @host}, 0x55) bind$auto(0x3, &(0x7f0000000080), 0x6b) set_mempolicy$auto(0x1, 0x0, 0x40) unshare$auto(0x40000080) 11m51.605927901s ago: executing program 1 (id=4197): ioctl$auto_TIOCSSERIAL2(0xffffffffffffffff, 0x541e, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4020009, 0xde, 0xeb1, 0x401, 0x405) (async) close_range$auto(0x2, 0xa, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x1e, 0x4, 0x0) (async) r2 = socket(0x1e, 0x1, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) (async) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'pimreg0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000129bd7000fedbdf250a000000080003000200000008000200c9e0e43d811816f448852a3cf670f029021f6b8c78263e0ea9c94578874bf8aa3b88e723690b5eade779511ccaeae10b0faa8b7b38e246b62c02abd8e971d04814f812b31549b4c3b174ae7f201de37c5ae9c1aae744f0af9015436d74e51313de2eb4a981c7e6898e6f782a5d366d79ad48131f9ec81ea6c911a5b164281ed6afc66626e8", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r6, @ANYBLOB="08000200", @ANYRES32=r7, @ANYBLOB="0800030002000000080003000800000008000200", @ANYRES32=r8, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x20000005}, 0x40000) (async) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/rose11/statistics/rx_bytes\x00', 0x6940c1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r9, &(0x7f0000001100)=""/4106, 0x100a) (async) write$auto(0x3, 0x0, 0xfdef) mlock$auto(0xfbe8, 0xfffe) (async) mlockall$auto(0x800000000000005) (async) r10 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000240), 0x301200, 0x0) ioctl$auto_RNDADDTOENTCNT(r10, 0x40045201, &(0x7f0000000280)=0x1000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 11m48.098712202s ago: executing program 2 (id=4208): close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) fanotify_init$auto(0x602, 0x1) munmap$auto(0x1000000, 0x200002000000c) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x1, 0x0) io_uring_register$auto(0x2, 0x8, &(0x7f0000000100), 0x1) bpf$auto(0x10, &(0x7f0000001700)=@query={@target_fd, 0x7, 0x1, 0x9, 0x7f, @prog_cnt=0x2, 0x0, 0xf, 0x8, 0x7, 0x1}, 0x63a) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0xffb6fbcc1dba0ef, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20040081}, 0x8010) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) getpeername$auto(0x3, 0x0, 0x0) syz_clone(0x60000, 0x0, 0x0, 0x0, 0x0, 0x0) geteuid() bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, 0xffffffffffffffff, 0xffffffff}, 0xd) dup2$auto(0x0, 0x3) ioctl$auto(0x3, 0x4, 0x8) 11m36.249671314s ago: executing program 34 (id=4197): ioctl$auto_TIOCSSERIAL2(0xffffffffffffffff, 0x541e, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4020009, 0xde, 0xeb1, 0x401, 0x405) (async) close_range$auto(0x2, 0xa, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x1e, 0x4, 0x0) (async) r2 = socket(0x1e, 0x1, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) (async) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'pimreg0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000129bd7000fedbdf250a000000080003000200000008000200c9e0e43d811816f448852a3cf670f029021f6b8c78263e0ea9c94578874bf8aa3b88e723690b5eade779511ccaeae10b0faa8b7b38e246b62c02abd8e971d04814f812b31549b4c3b174ae7f201de37c5ae9c1aae744f0af9015436d74e51313de2eb4a981c7e6898e6f782a5d366d79ad48131f9ec81ea6c911a5b164281ed6afc66626e8", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r6, @ANYBLOB="08000200", @ANYRES32=r7, @ANYBLOB="0800030002000000080003000800000008000200", @ANYRES32=r8, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x20000005}, 0x40000) (async) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/rose11/statistics/rx_bytes\x00', 0x6940c1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r9, &(0x7f0000001100)=""/4106, 0x100a) (async) write$auto(0x3, 0x0, 0xfdef) mlock$auto(0xfbe8, 0xfffe) (async) mlockall$auto(0x800000000000005) (async) r10 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000240), 0x301200, 0x0) ioctl$auto_RNDADDTOENTCNT(r10, 0x40045201, &(0x7f0000000280)=0x1000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 11m32.068595704s ago: executing program 35 (id=4208): close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) fanotify_init$auto(0x602, 0x1) munmap$auto(0x1000000, 0x200002000000c) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x1, 0x0) io_uring_register$auto(0x2, 0x8, &(0x7f0000000100), 0x1) bpf$auto(0x10, &(0x7f0000001700)=@query={@target_fd, 0x7, 0x1, 0x9, 0x7f, @prog_cnt=0x2, 0x0, 0xf, 0x8, 0x7, 0x1}, 0x63a) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0xffb6fbcc1dba0ef, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20040081}, 0x8010) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) getpeername$auto(0x3, 0x0, 0x0) syz_clone(0x60000, 0x0, 0x0, 0x0, 0x0, 0x0) geteuid() bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, 0xffffffffffffffff, 0xffffffff}, 0xd) dup2$auto(0x0, 0x3) ioctl$auto(0x3, 0x4, 0x8) 10m8.650769366s ago: executing program 7 (id=4389): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) socket(0x2, 0x6, 0x0) r0 = socket(0x2, 0x801, 0x106) getsockopt$auto(r0, 0x11c, 0x1, 0x0, 0x0) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) close_range$auto(0x2, 0x8000, 0x0) 10m7.972377121s ago: executing program 7 (id=4391): r0 = socket(0x1, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x0, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) connect$auto(r0, 0x0, 0x1) epoll_create$auto(0x4) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x180, 0x0) epoll_ctl$auto(0x5, 0x1, r0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x30, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) write$auto(r5, &(0x7f00000000c0)=')-(\x00', 0x80000002) r6 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) read$auto_proc_pid_maps_operations_internal(r6, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) 10m3.548969504s ago: executing program 7 (id=4398): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) close_range$auto(0x0, 0x1c94, 0x2) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getcwd$auto(0x0, 0xffffffffffffffff) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0x80000000) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) inotify_init1$auto(0xffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) 9m59.065964263s ago: executing program 7 (id=4405): mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x100, 0x0) socket(0xa, 0x801, 0x84) r0 = socket(0x2, 0x801, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x40054) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_ifindex=r2, r0, 0x9f, 0x0, 0x1, @relative_fd, 0x5}, 0x96) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000000a976f442699a1bdfa868738b39ca6fef0a1f6e3005aebadb4264240283a0cd95dfc2fe0254880645ef5b5b8f1d039c833548585f650244b073cf575681d0518d3039e4bce9577588dbe87dc927bbcba7c1e1dfabfc1f68acf8bb57c756a292a6b2be01f0d82d89b8633979eedef560fb1", @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf250400000004001d00"], 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) 9m56.94995575s ago: executing program 7 (id=4408): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0xffff, 0x20000000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) r1 = socket(0x2, 0x1, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_EDGE(r1, 0x0, 0x8014) sendmmsg$auto(0x3, 0x0, 0xfffff9da, 0x9) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x0) bind$auto(r2, 0x0, 0x67) sendmmsg$auto(r2, 0x0, 0x5, 0x20000000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) bpf$auto(0x0, 0x0, 0xfbf) shutdown$auto(0x200000003, 0x2) close_range$auto(0x2, 0x8, 0x0) 9m54.036526751s ago: executing program 7 (id=4414): move_pages$auto(0x1, 0x3, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x0, 0x5, 0xeb1, 0xfffefffffffffffa, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x7) r0 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x28840, 0x0) read$auto_ptdump_fops_(r0, &(0x7f0000000140)=""/157, 0x9d) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x10, 0x2, 0x4) socket(0x27, 0x3, 0x628) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(0x0, &(0x7f0000000480)={0x7, 0x400, 0x6, 0x7, 0xc, 0x6, 0xffff, 0x10, 0x2, 0x8, 0x27, 0x8, 0x2, 0x9af1, 0x80000001, 0x8, 0x9, 0x4, 0x10, 0x1, 0x5, 0x44ab, 0x10000, 0x9, 0x3ff, 0x2, [0x4aac, 0x6, 0x99, 0x2, 0xa, 0x7e, 0x1, 0x0, 0xfffff7ffffff0000, 0x76d6, 0x3, 0x3f83bc6f, 0x0, 0x7, 0x9, 0x6, 0x1, 0x7, 0xffffffff, 0x3, 0x4, 0xffffffff, 0x8000, 0x0, 0x7, 0x4, 0x4, 0x10000000, 0xffff, 0x7, 0x7fffffff, 0x10001, 0x7, 0x5, 0x7, 0x1000000000000001, 0x2ba, 0x6, 0x0, 0x81, 0x5, 0x30, 0x8, 0x6, 0xeab1, 0xbe]}, 0x7fffffffffffffff, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x106) eventfd$auto(0x0) socket(0x2, 0x801, 0x106) open$dir(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, 0xa0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x3, 0x6) 9m38.604113554s ago: executing program 36 (id=4414): move_pages$auto(0x1, 0x3, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x0, 0x5, 0xeb1, 0xfffefffffffffffa, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x7) r0 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x28840, 0x0) read$auto_ptdump_fops_(r0, &(0x7f0000000140)=""/157, 0x9d) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x10, 0x2, 0x4) socket(0x27, 0x3, 0x628) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(0x0, &(0x7f0000000480)={0x7, 0x400, 0x6, 0x7, 0xc, 0x6, 0xffff, 0x10, 0x2, 0x8, 0x27, 0x8, 0x2, 0x9af1, 0x80000001, 0x8, 0x9, 0x4, 0x10, 0x1, 0x5, 0x44ab, 0x10000, 0x9, 0x3ff, 0x2, [0x4aac, 0x6, 0x99, 0x2, 0xa, 0x7e, 0x1, 0x0, 0xfffff7ffffff0000, 0x76d6, 0x3, 0x3f83bc6f, 0x0, 0x7, 0x9, 0x6, 0x1, 0x7, 0xffffffff, 0x3, 0x4, 0xffffffff, 0x8000, 0x0, 0x7, 0x4, 0x4, 0x10000000, 0xffff, 0x7, 0x7fffffff, 0x10001, 0x7, 0x5, 0x7, 0x1000000000000001, 0x2ba, 0x6, 0x0, 0x81, 0x5, 0x30, 0x8, 0x6, 0xeab1, 0xbe]}, 0x7fffffffffffffff, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x106) eventfd$auto(0x0) socket(0x2, 0x801, 0x106) open$dir(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, 0xa0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x3, 0x6) 3m29.637941929s ago: executing program 5 (id=5180): syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x1, 0x4000000000df, 0x44eb2, 0x3, 0x300000000000) mq_getsetattr$auto(0x6, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0xfc45, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000002c40)=0xf0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x19d0, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000fddbdf25040000000b002e0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4044820) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mount$auto(0x0, &(0x7f0000000100), 0x0, 0x100000, 0x0) unshare$auto(0x20000) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r3, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x100000000005d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) fcntl$auto(0xff80000000000000, 0x4, 0xfffffffffffffffc) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) clone$auto(0x55f, 0x2, 0x0, 0x0, 0x2) ioctl$auto(0x3, 0x800005411, 0x38) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) 3m25.877533283s ago: executing program 5 (id=5190): syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000100), 0x2200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/numa_zonelist_order\x00', 0x202, 0x0) sendfile$auto(r0, r0, &(0x7f0000000000)=0x4, 0x3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vbi11\x00', 0x80700, 0x0) io_uring_setup$auto(0x8000, &(0x7f0000000140)={0x2, 0x8, 0x3, 0x0, 0x7, 0x101, 0xffffffffffffffff, [0x95, 0x9], {0xffffff80, 0x9, 0x10, 0xb831, 0x3, 0xdbb, 0x3, 0xee9, 0x2}, {0x8001, 0x6, 0x8, 0x1, 0x8, 0x0, 0x4, 0x6, 0xf}}) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(0x0, 0x161342, 0x100) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0x22240, 0x155) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x2714, 0xfffffffffffffffc, 0x0) 3m23.276808652s ago: executing program 5 (id=5194): syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket(0x10, 0x2, 0xf) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xc8, 0x400454d9, 0x5c8d) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) pselect6$auto(0x4, 0x0, &(0x7f0000000180)={[0x33e59eb6, 0x9, 0x2da0000, 0xff, 0x101, 0x200000001c00000, 0xa1, 0x4, 0xfffffffffffffffe, 0x8, 0x4, 0x9, 0x1, 0x0, 0xe, 0x80000001]}, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) io_uring_setup$auto(0x6, 0x0) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) 3m19.126156378s ago: executing program 5 (id=5201): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8002, 0x0) ioctl$auto(r0, 0x1, 0x10000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x2, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x58, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@HWSIM_ATTR_RADIO_NAME={0x43, 0x11, ' \x87B\xfeP\xc6\xae\x16\x8eC\x9f\xdf*x$\xe5\xc1\x9b\xfd\x94\x8bY\xb5\xcb]\x1f\x1cR&\xf1v^g\xfe[\x822\x01E^(ZZ\xf9\xb1O\x8e\xf6-`r~\x86\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x4044820) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x8000000000000001, r1, 0x4, r1}, 0x10) bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x400000000000, 0xffffffffffffffff, 0x0, 0x3}, 0x98) read$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffffff, &(0x7f0000000080)=""/45, 0x2d) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0xdd, 0x8000) r4 = syz_clone(0x100281091, 0x0, 0xffb6, 0x0, 0x0, 0x0) move_pages$auto(r4, 0x1002, 0x0, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) 3m16.773390959s ago: executing program 5 (id=5204): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) socket(0xa, 0x2, 0x88) r1 = socket(0x11, 0x2, 0x4) bpf$auto(0x0, &(0x7f0000000000)=@iter_create={r1, 0x8}, 0xa3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r2) r4 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/fib/nexthop_bucket_activity\x00', 0x40000, 0x0) fsconfig$auto(r4, 0x4, 0xfffffffffffffffc, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/nr4/statistics/tx_dropped\x00', 0x48203, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000040)=""/44, 0x2c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="110b27bd7000fbdbdf250900000008000300", @ANYRES32=r5, @ANYBLOB="08000600", @ANYRES32=r7, @ANYBLOB="f3e93a95c6ce7c0b344bbfb93b126481c1002592b642f7cbd73b0b6ae45e80266d8378b376f08404b2a04bfcffce807311da93fc1e4d89d816f63ccbd146423c9f55142439494976455219ef47514bda7794e7b730e78a00ce5684b9ee"], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x9800) 3m15.241724774s ago: executing program 5 (id=5207): socket(0x2, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001a80)={'wg2\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0xe0}, 0x55) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/net/rxrpc/peers\x00', 0x480, 0x0) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) open(0x0, 0x261c2, 0x84) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0x68) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x265, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x4004) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\f\x00', @ANYRES16, @ANYBLOB="010029bd7000fddbdf250200000008000300", @ANYRES32, @ANYBLOB="08000b0109000000"], 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) mmap$auto(0x0, 0x2020009, 0x10000000000000a, 0x210, 0xfffffffffffffffa, 0x8002) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r5, 0x0, 0x2000000) 3m0.098744511s ago: executing program 37 (id=5207): socket(0x2, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001a80)={'wg2\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0xe0}, 0x55) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/net/rxrpc/peers\x00', 0x480, 0x0) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) open(0x0, 0x261c2, 0x84) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0x68) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x265, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x4004) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\f\x00', @ANYRES16, @ANYBLOB="010029bd7000fddbdf250200000008000300", @ANYRES32, @ANYBLOB="08000b0109000000"], 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) mmap$auto(0x0, 0x2020009, 0x10000000000000a, 0x210, 0xfffffffffffffffa, 0x8002) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r5, 0x0, 0x2000000) 14.895521762s ago: executing program 6 (id=5671): mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mmap$auto(0x9, 0x5, 0x6, 0x16, 0x1, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x8, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xc57138c}, 0x9a6, 0xe000) r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000003c0), r1) sendmsg$auto_NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x87}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x8001}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x4}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x7e}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x44040) r3 = socket(0x10, 0x80002, 0x0) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000004140), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fddbdf250a0005000700000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), 0xffffffffffffffff) r7 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/query\x00', 0x0, 0x0) sendmsg$auto_BATADV_CMD_SET_VLAN(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DAT_CACHE_VID={0x6, 0x25, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40000) read$auto_tomoyo_operations_securityfs_if(r7, 0x0, 0x0) read$auto(r7, &(0x7f0000000240)='\x00\x00\x00\x00/kernel/securi\xccy/toMoyo/p5rofile', 0x1a46fabf) r8 = open(&(0x7f0000000200)='./cgroup\x00', 0x400, 0x23) fchdir$auto(r8) ioctl$auto_UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000380)={r7, 0x0, 0xffffffffffffffff, 0x9}) sendmsg$auto_WG_CMD_SET_DEVICE(r5, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)={0x30, r6, 0x21, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) open(&(0x7f0000000000)='./file0\x00', 0xa41c2, 0x84) socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) 13.415610196s ago: executing program 9 (id=5675): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80502, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000340)='*', 0x1) ioctl$auto_TIOCMGET2(r0, 0x5415, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8002, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x101080, 0x0) read$auto_snd_rawmidi_f_ops_rawmidi(r1, &(0x7f0000000080)=""/45, 0x2d) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x11, 0x80003, 0x300) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/udp6\x00', 0x20440, 0x0) pread64$auto(r3, 0x0, 0xa0, 0xf86) setsockopt$auto(r2, 0x107, 0x1, 0x0, 0x8004) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000040)=0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x9, 0x3, 0x1, 0x19, 0xffffffffffffffff, 0x5) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/etherd/err\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) open(0x0, 0xa240, 0x15e) open(0x0, 0x161342, 0x100) 13.213497106s ago: executing program 6 (id=5677): mmap$auto(0x100000001, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x20000840) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x0, 0x0) socket(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0) select$auto(0x7, &(0x7f00000005c0)={[0xff, 0x5, 0x3, 0x10000000008, 0x0, 0x1, 0x7, 0x0, 0x8f, 0x0, 0x3ff, 0x0, 0x40, 0xf1, 0x19, 0x10020]}, 0x0, 0x0, 0x0) 12.322764416s ago: executing program 6 (id=5679): openat$auto_ep0_operations_inode(0xffffffffffffff9c, 0x0, 0x8e000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_USB_RAW_IOCTL_RUN(0xffffffffffffffff, 0x5501, 0x0) mmap$auto(0x8000, 0x400008, 0x208, 0x9b72, 0x80000000002, 0x742e800000) ioperm$auto(0x800, 0x5, 0xd) semget$auto(0x6, 0x10, 0x7fffffffffffffff) socket(0xf, 0x3, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) bpf$auto(0x0, &(0x7f0000000100)=@link_create={@prog_fd=0x1, @target_fd=0xa, 0x3, 0x8, @tracing={0x4, 0xffffffff}}, 0xfbf) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/tracing_thresh\x00', 0x410100, 0x0) bpf$auto(0x2, &(0x7f00000001c0)=@bpf_attr_4={0x8000, r1, 0xb, r0}, 0x7) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x800}, 0xc) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) prctl$auto(0x100003c, 0x32c, 0x4, 0xaebb, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) semtimedop$auto(0x0, 0x0, 0xeb, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xffd8) bpf$auto(0x8, &(0x7f0000000000)=@bpf_attr_5={@target_fd=0x880, 0x9, 0x37, 0x37, 0x80, @relative_id=0x6, 0x3}, 0xc63) madvise$auto(0x3, 0x9, 0x9) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/query\x00', 0x2, 0x0) open(0x0, 0x50800, 0x412) fsmount$auto(0xffffffffffffffff, 0x1, 0xf9) close_range$auto(0x0, 0x5, 0x0) mincore$auto(0x0, 0x0, 0x0) io_uring_setup$auto(0x5, 0x0) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) syz_genetlink_get_family_id$auto_batadv(0x0, r2) 11.63124645s ago: executing program 9 (id=5681): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0x15, 0x5, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fremovexattr$auto(r0, &(0x7f00000001c0)='/proc/tty/driver/serial\x00') openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-touch14\x00', 0x0, 0x0) getsockopt$auto(0xffffffffffffffff, 0x114, 0x2714, 0xfffffffffffffffc, 0x0) 10.410067613s ago: executing program 9 (id=5683): ioperm$auto(0x7, 0x6, 0x5) close_range$auto(0x0, 0xffffffffffffefff, 0x4000000000002) fanotify_init$auto(0x5, 0x2) open(0x0, 0x7ffd, 0x10c) r0 = getpgid(0x0) pidfd_open$auto(r0, 0x0) pidfd_send_signal$auto(0x2, 0x6, 0x0, 0x4) 8.94264262s ago: executing program 6 (id=5688): mmap$auto(0x100000001, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x20000840) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x0, 0x0) socket(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0) select$auto(0x7, &(0x7f00000005c0)={[0xff, 0x5, 0x3, 0x10000000008, 0x0, 0x1, 0x7, 0x0, 0x8f, 0x0, 0x3ff, 0x0, 0x40, 0xf1, 0x19, 0x10020]}, 0x0, 0x0, 0x0) 8.490274155s ago: executing program 9 (id=5689): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) setsockopt$auto(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto_RTC_PARAM_SET(r0, 0x40187014, &(0x7f0000000080)={0xffffffffffffa944, @ptr=0x2, 0x2}) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYBLOB="4687eb"], 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x801}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x82840, 0x0) socket(0x2, 0x80805, 0x0) socket(0x2, 0x1, 0x84) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x181502, 0x0) write$auto(r2, 0x0, 0xc3) 8.171412191s ago: executing program 6 (id=5690): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80502, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000340)='*', 0x1) ioctl$auto_TIOCMGET2(r0, 0x5415, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8002, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x101080, 0x0) read$auto_snd_rawmidi_f_ops_rawmidi(r1, &(0x7f0000000080)=""/45, 0x2d) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x11, 0x80003, 0x300) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/udp6\x00', 0x20440, 0x0) pread64$auto(r3, 0x0, 0xa0, 0xf86) setsockopt$auto(r2, 0x107, 0x1, 0x0, 0x8004) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000040)=0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x9, 0x3, 0x1, 0x19, 0xffffffffffffffff, 0x5) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) open(0x0, 0xa240, 0x15e) open(0x0, 0x161342, 0x100) 7.068337456s ago: executing program 6 (id=5693): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) open(0x0, 0x22240, 0x155) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto_snd_pcm_oss_f_reg_pcm_oss(r0, &(0x7f0000000280)="c2", 0x1) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0x7) ioctl$auto_SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000000)=0x1) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) mmap$auto(0x8000000000000000, 0x8, 0xdf, 0x9b72, 0x4, 0x8000) faccessat2$auto(0xf, 0xfffffffffffffffe, 0x3, 0x1fc) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x10, 0x2, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x801, 0x0) setreuid$auto(0x0, 0xee00) r3 = geteuid() setreuid$auto(r3, 0x0) setrlimit$auto(0x6, &(0x7f0000000000)={0x1, 0x7}) setuid$auto(r3) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x1) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x803, 0x8000) io_uring_setup$auto(0x6, 0x0) clone$auto(0x3, 0x9, 0x0, 0x0, 0x10001) r4 = socket(0x2, 0x6, 0x0) getsockopt$auto(r4, 0x10d, 0xa, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x06\x00\x06\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, &(0x7f00000001c0)={0x5bee967c}, 0x8) 6.479294057s ago: executing program 9 (id=5694): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'batadv0\x00'}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110b27bd7000fbdbdf250900000008000300", @ANYBLOB="08000600", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x9800) 5.556968384s ago: executing program 9 (id=5697): ioperm$auto(0x7, 0x6, 0x5) close_range$auto(0x0, 0xffffffffffffefff, 0x4000000000002) fanotify_init$auto(0x5, 0x2) open(0x0, 0x7ffd, 0x10c) r0 = getpgid(0x0) pidfd_open$auto(r0, 0x0) pidfd_send_signal$auto(0x2, 0x6, 0x0, 0x4) 4.654129194s ago: executing program 0 (id=5701): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80502, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000340)='*', 0x1) ioctl$auto_TIOCMGET2(r0, 0x5415, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8002, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x101080, 0x0) read$auto_snd_rawmidi_f_ops_rawmidi(r1, &(0x7f0000000080)=""/45, 0x2d) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x11, 0x80003, 0x300) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/udp6\x00', 0x20440, 0x0) pread64$auto(r3, 0x0, 0xa0, 0xf86) setsockopt$auto(r2, 0x107, 0x1, 0x0, 0x8004) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000040)=0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x9, 0x3, 0x1, 0x19, 0xffffffffffffffff, 0x5) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) open(0x0, 0xa240, 0x15e) open(0x0, 0x161342, 0x100) 4.167352951s ago: executing program 8 (id=5703): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) setsockopt$auto(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto_RTC_PARAM_SET(r0, 0x40187014, &(0x7f0000000080)={0xffffffffffffa944, @ptr=0x2, 0x2}) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYBLOB="4687eb"], 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x801}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) socket(0x2, 0x1, 0x84) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x181502, 0x0) write$auto(r2, 0x0, 0xc3) 3.004380611s ago: executing program 0 (id=5704): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x82, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) write$auto(0x3, 0x0, 0x100085) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000180)=0x7ff) r2 = socket(0x10, 0x2, 0xc) r3 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2, 0x0) write$auto_uprobe_events_ops_trace_uprobe(r3, &(0x7f0000000380)="703a3a82d9e5cc7c2ceda8d50bfc", 0xe) timer_create$auto(0x8, &(0x7f0000000100)={@sival_int=0x3, 0x9, 0x1, @_sigev_thread={0x0, 0x0}}, &(0x7f0000000080)=0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ptyye/power/runtime_suspended_time\x00', 0xa0000, 0x0) read$auto(r4, 0x0, 0x9) bpf$auto(0x9, &(0x7f0000000140)=@bpf_attr_1={0x400, 0x9, @next_key=0x1, 0xbf1}, 0xff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x100, 0xf201) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3}, 0xf7, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x22, &(0x7f0000000000), 0x1) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_max_receive_size\x00', 0x103742, 0x0) write$auto(r5, 0x0, 0x9) mmap$auto(0x0, 0x400009, 0xdc, 0x9b72, 0x2, 0x8000) timer_gettime$auto(0x0, 0x0) r6 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x2000, 0x0) ioctl$auto_PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000040)={0xff, 0x1ff, 0x7f, 0x5, 0x8000, 0x3, 0x8, 0x3, 0x4, 0x71ef, 0xfffffffffffffffb, 0x3}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r0, @ANYRES32], 0x18}}, 0x80) 2.961337837s ago: executing program 8 (id=5705): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'batadv0\x00'}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110b27bd7000fbdbdf250900000008000300", @ANYBLOB="08000600", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x9800) 2.33464815s ago: executing program 8 (id=5706): r0 = openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000640), 0x201, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1d, 0x2, 0x7) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, 0x0, 0x20442, 0x0) write$auto_kernel_debug_fops_orangefs_debugfs(r0, 0x0, 0x0) 2.1595269s ago: executing program 8 (id=5707): syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0x1000000004, 0x8b72, 0x2, 0x8000) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r0, 0x400454a4, 0x0) socket(0x10, 0x2, 0xf) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xc8, 0x400454d9, 0x5c8d) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) pselect6$auto(0x4, 0x0, &(0x7f0000000180)={[0x33e59eb6, 0x9, 0x2da0000, 0xff, 0x101, 0x200000001c00000, 0xa1, 0x4, 0xfffffffffffffffe, 0x8, 0x4, 0x9, 0x1, 0x0, 0xe, 0x80000001]}, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x106) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$auto_NET_SHAPER_CMD_CAP_GET(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}}, 0x8800) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) io_uring_setup$auto(0x6, 0x0) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) 2.03950936s ago: executing program 0 (id=5708): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffe, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) write$auto(r0, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syslog$auto(0x1, &(0x7f0000000040)='..\x00', 0x9) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/net\x00') lseek$auto(0x3, 0x7fffffffffffffff, 0x1) io_uring_setup$auto(0x6, 0x0) setuid$auto(0xe) r2 = socket(0x10, 0x2, 0x15) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x60000004}, 0xc800) mprotect$auto(0x1ffff000, 0x8000000000000002, 0x5) sendmsg$auto_CTRL_CMD_GETFAMILY(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24006001}, 0x20048000) r3 = socket(0x15, 0x5, 0x0) getsockopt$auto(r3, 0x114, 0x2714, 0xfffffffffffffffc, 0x0) 1.116541672s ago: executing program 8 (id=5709): socket(0x2c, 0x3, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8000, 0x0) (async) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) write$auto(0x3, 0x0, 0xfdef) (async) brk$auto(0x0) 1.0575655s ago: executing program 0 (id=5710): mmap$auto(0x100000001, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x20000840) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x0, 0x0) socket(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0) select$auto(0x7, &(0x7f00000005c0)={[0xff, 0x5, 0x3, 0x10000000008, 0x0, 0x1, 0x7, 0x0, 0x8f, 0x0, 0x3ff, 0x0, 0x40, 0xf1, 0x19, 0x10020]}, 0x0, 0x0, 0x0) 673.011316ms ago: executing program 0 (id=5711): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/lru_gen\x00', 0x12b902, 0x0) write$auto(0x3, 0x0, 0xffd8) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x4004743c, 0x0) 298.792751ms ago: executing program 8 (id=5712): openat$auto_ep0_operations_inode(0xffffffffffffff9c, 0x0, 0x8e000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x420800, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x101080, 0x0) read$auto_snd_rawmidi_f_ops_rawmidi(r0, &(0x7f0000000080)=""/45, 0x2d) munmap$auto(0x0, 0xffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x848000000015, 0x805, 0x0) ioctl$auto_USB_RAW_IOCTL_RUN(0xffffffffffffffff, 0x5501, 0x0) mmap$auto(0x8000, 0x400008, 0x208, 0x9b72, 0x80000000002, 0x742e800000) ioperm$auto(0x800, 0x5, 0xd) semget$auto(0x6, 0x10, 0x7fffffffffffffff) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) semtimedop$auto(0x0, 0x0, 0xeb, 0x0) socket(0x2, 0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x24, 0x0, 0x28) write$auto(0x3, 0x0, 0xffd8) bpf$auto(0x8, &(0x7f0000000000)=@bpf_attr_5={@target_fd=0x880, 0x9, 0x37, 0x37, 0x80, @relative_id=0x6, 0x3}, 0xc63) madvise$auto(0x3, 0x9, 0x9) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/query\x00', 0x2, 0x0) open(0x0, 0x50800, 0x412) fsmount$auto(0xffffffffffffffff, 0x1, 0xf9) close_range$auto(0x0, 0x5, 0x0) io_uring_setup$auto(0x5, 0x0) 0s ago: executing program 0 (id=5713): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80502, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000340)='*', 0x1) ioctl$auto_TIOCMGET2(r0, 0x5415, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8002, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x101080, 0x0) read$auto_snd_rawmidi_f_ops_rawmidi(r1, &(0x7f0000000080)=""/45, 0x2d) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x11, 0x80003, 0x300) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/udp6\x00', 0x20440, 0x0) pread64$auto(r3, 0x0, 0xa0, 0xf86) setsockopt$auto(r2, 0x107, 0x1, 0x0, 0x8004) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000040)=0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x9, 0x3, 0x1, 0x19, 0xffffffffffffffff, 0x5) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) open(0x0, 0xa240, 0x15e) open(0x0, 0x161342, 0x100) kernel console output (not intermixed with test programs): 0x250 [ 818.107710][T20091] ? __pfx_ksys_write+0x10/0x10 [ 818.112869][T20091] do_syscall_64+0xcd/0x250 [ 818.117432][T20091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.123377][T20091] RIP: 0033:0x7f29a8985d19 [ 818.127823][T20091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 818.147507][T20091] RSP: 002b:00007f29a67b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 818.155963][T20091] RAX: ffffffffffffffda RBX: 00007f29a8b76160 RCX: 00007f29a8985d19 [ 818.163987][T20091] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 818.171997][T20091] RBP: 00007f29a67b4090 R08: 0000000000000000 R09: 0000000000000000 [ 818.179996][T20091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.187994][T20091] R13: 0000000000000001 R14: 00007f29a8b76160 R15: 00007ffdb9e63788 [ 818.196017][T20091] [ 818.919660][T20115] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 818.948339][T20115] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 819.261635][T20115] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 819.268131][T20115] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 819.275211][T20115] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 819.425122][T20115] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 819.604558][T20126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3872'. [ 820.617525][T20152] FAULT_INJECTION: forcing a failure. [ 820.617525][T20152] name failslab, interval 1, probability 0, space 0, times 0 [ 820.645444][T20152] CPU: 1 UID: 0 PID: 20152 Comm: syz.1.3879 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 820.656259][T20152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 820.666358][T20152] Call Trace: [ 820.669732][T20152] [ 820.672697][T20152] dump_stack_lvl+0x16c/0x1f0 [ 820.677521][T20152] should_fail_ex+0x497/0x5b0 [ 820.682240][T20152] ? fs_reclaim_acquire+0xae/0x150 [ 820.688488][T20152] should_failslab+0xc2/0x120 [ 820.693234][T20152] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 820.700046][T20152] ? ksys_write+0x207/0x250 [ 820.704584][T20152] ? do_syscall_64+0xcd/0x250 [ 820.709300][T20152] ? __alloc_skb+0x2b3/0x380 [ 820.713936][T20152] __alloc_skb+0x2b3/0x380 [ 820.718389][T20152] ? __pfx___alloc_skb+0x10/0x10 [ 820.723379][T20152] _sctp_make_chunk+0x51/0x270 [ 820.728196][T20152] sctp_make_datafrag_empty+0x15c/0x220 [ 820.733781][T20152] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 820.739988][T20152] sctp_datamsg_from_user+0x590/0x1320 [ 820.745519][T20152] sctp_sendmsg_to_asoc+0xafd/0x1ad0 [ 820.750896][T20152] ? print_usage_bug.part.0+0x550/0x560 [ 820.756544][T20152] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 820.762315][T20152] ? sctp_sendmsg+0x575/0x1f10 [ 820.767128][T20152] ? mark_held_locks+0x9f/0xe0 [ 820.771954][T20152] ? sctp_sendmsg_check_sflags+0x176/0x320 [ 820.777801][T20152] sctp_sendmsg+0x129c/0x1f10 [ 820.782629][T20152] ? __pfx_sctp_sendmsg+0x10/0x10 [ 820.787698][T20152] ? __pfx_lock_release+0x10/0x10 [ 820.792755][T20152] ? __pfx___might_resched+0x10/0x10 [ 820.798358][T20152] ? aa_file_perm+0x4d5/0xfe0 [ 820.803074][T20152] ? __pfx_aa_sk_perm+0x10/0x10 [ 820.807975][T20152] ? find_held_lock+0x2d/0x110 [ 820.812778][T20152] ? __pfx_sctp_sendmsg+0x10/0x10 [ 820.817842][T20152] inet_sendmsg+0x119/0x140 [ 820.822375][T20152] sock_write_iter+0x4ac/0x5b0 [ 820.827964][T20152] ? __pfx_sock_write_iter+0x10/0x10 [ 820.833347][T20152] ? bpf_lsm_file_permission+0x9/0x10 [ 820.838784][T20152] ? security_file_permission+0x71/0x210 [ 820.844462][T20152] vfs_write+0x5ae/0x1150 [ 820.848935][T20152] ? __pfx_sock_write_iter+0x10/0x10 [ 820.854961][T20152] ? __pfx_vfs_write+0x10/0x10 [ 820.860290][T20152] ? __fget_files+0x40/0x3a0 [ 820.864931][T20152] ksys_write+0x207/0x250 [ 820.869297][T20152] ? __pfx_ksys_write+0x10/0x10 [ 820.874219][T20152] do_syscall_64+0xcd/0x250 [ 820.878779][T20152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.886451][T20152] RIP: 0033:0x7f7063585d19 [ 820.891068][T20152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.911157][T20152] RSP: 002b:00007f70613f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 820.919610][T20152] RAX: ffffffffffffffda RBX: 00007f7063776160 RCX: 00007f7063585d19 [ 820.927610][T20152] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 820.935606][T20152] RBP: 00007f70613f6090 R08: 0000000000000000 R09: 0000000000000000 [ 820.943641][T20152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 820.951898][T20152] R13: 0000000000000001 R14: 00007f7063776160 R15: 00007ffeddf5bba8 [ 820.953607][ T5841] Bluetooth: hci3: command 0x0419 tx timeout [ 820.959893][T20152] [ 820.966026][T12989] Bluetooth: hci4: command 0x0419 tx timeout [ 821.283628][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 821.289710][ T5841] Bluetooth: hci2: command 0x041b tx timeout [ 822.938694][T20208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3896'. [ 823.393395][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 825.281552][T20282] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 825.311613][T20282] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 825.323825][T20282] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 825.340224][T20282] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 826.013565][T20302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3922'. [ 827.354604][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 827.354622][T12989] Bluetooth: hci2: command 0x041b tx timeout [ 827.354675][T12989] Bluetooth: hci3: command 0x0419 tx timeout [ 827.360652][ T5841] Bluetooth: hci4: command 0x0419 tx timeout [ 828.104711][T20346] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 828.132557][T20346] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 828.190775][T20346] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 828.202995][T20346] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 830.153960][T12989] Bluetooth: hci3: command 0x0419 tx timeout [ 830.160055][T12989] Bluetooth: hci4: command 0x0419 tx timeout [ 830.233623][T12989] Bluetooth: hci1: command 0x0c1a tx timeout [ 830.239327][ T5841] Bluetooth: hci2: command 0x041b tx timeout [ 834.980315][T20529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3981'. [ 835.038993][T20529] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.129865][T20529] bridge_slave_0 (unregistering): left allmulticast mode [ 835.145217][T20529] bridge_slave_0 (unregistering): left promiscuous mode [ 835.166667][T20529] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.569688][T20545] FAULT_INJECTION: forcing a failure. [ 835.569688][T20545] name failslab, interval 1, probability 0, space 0, times 0 [ 835.630550][T20545] CPU: 0 UID: 0 PID: 20545 Comm: syz.0.3983 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 835.641436][T20545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 835.651508][T20545] Call Trace: [ 835.654790][T20545] [ 835.657723][T20545] dump_stack_lvl+0x16c/0x1f0 [ 835.662409][T20545] should_fail_ex+0x497/0x5b0 [ 835.667108][T20545] ? fs_reclaim_acquire+0xae/0x150 [ 835.672259][T20545] should_failslab+0xc2/0x120 [ 835.676952][T20545] __kmalloc_cache_noprof+0x68/0x420 [ 835.682260][T20545] ? __pfx_aa_file_perm+0x10/0x10 [ 835.687321][T20545] ring_buffer_alloc_read_page+0x13b/0x690 [ 835.693159][T20545] ? __pfx_ring_buffer_alloc_read_page+0x10/0x10 [ 835.699512][T20545] ? find_held_lock+0x2d/0x110 [ 835.704811][T20545] ? import_ubuf+0x1b6/0x220 [ 835.709419][T20545] tracing_buffers_read+0x570/0xa30 [ 835.714639][T20545] ? rw_verify_area+0xd0/0x700 [ 835.719410][T20545] ? __pfx_tracing_buffers_read+0x10/0x10 [ 835.725231][T20545] vfs_readv+0x6bf/0x890 [ 835.729540][T20545] ? fdget_pos+0x267/0x390 [ 835.733982][T20545] ? __pfx_vfs_readv+0x10/0x10 [ 835.739215][T20545] ? __mutex_lock+0x1cc/0xa60 [ 835.743910][T20545] ? find_held_lock+0x2d/0x110 [ 835.748700][T20545] ? __pfx___mutex_lock+0x10/0x10 [ 835.753735][T20545] ? trace_lock_acquire+0x14e/0x1f0 [ 835.758957][T20545] ? __fget_files+0x206/0x3a0 [ 835.763649][T20545] ? do_readv+0x133/0x340 [ 835.768071][T20545] do_readv+0x133/0x340 [ 835.772870][T20545] ? __pfx_do_readv+0x10/0x10 [ 835.777597][T20545] do_syscall_64+0xcd/0x250 [ 835.782250][T20545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.788160][T20545] RIP: 0033:0x7f039c185d19 [ 835.792749][T20545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 835.813181][T20545] RSP: 002b:00007f039cfe3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 835.821709][T20545] RAX: ffffffffffffffda RBX: 00007f039c375fa0 RCX: 00007f039c185d19 [ 835.829692][T20545] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000003 [ 835.837755][T20545] RBP: 00007f039cfe3090 R08: 0000000000000000 R09: 0000000000000000 [ 835.845730][T20545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 835.853716][T20545] R13: 0000000000000000 R14: 00007f039c375fa0 R15: 00007ffec399db38 [ 835.862004][T20545] [ 836.241620][T20566] program syz.2.3990 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 836.675831][T20581] FAULT_INJECTION: forcing a failure. [ 836.675831][T20581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 836.731699][T20581] CPU: 0 UID: 0 PID: 20581 Comm: syz.5.3992 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 836.742523][T20581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 836.752600][T20581] Call Trace: [ 836.755899][T20581] [ 836.758856][T20581] dump_stack_lvl+0x16c/0x1f0 [ 836.763567][T20581] should_fail_ex+0x497/0x5b0 [ 836.768286][T20581] _copy_from_iter+0x29b/0x1400 [ 836.773173][T20581] ? trace_lock_acquire+0x14e/0x1f0 [ 836.778405][T20581] ? skb_put+0x138/0x1b0 [ 836.782674][T20581] ? __pfx__copy_from_iter+0x10/0x10 [ 836.787992][T20581] ? __virt_addr_valid+0x1a4/0x590 [ 836.793144][T20581] ? __virt_addr_valid+0x5e/0x590 [ 836.798233][T20581] ? __phys_addr_symbol+0x30/0x80 [ 836.803307][T20581] ? __check_object_size+0x488/0x710 [ 836.808983][T20581] sctp_user_addto_chunk+0x87/0x230 [ 836.814504][T20581] sctp_datamsg_from_user+0x5b3/0x1320 [ 836.820097][T20581] sctp_sendmsg_to_asoc+0xafd/0x1ad0 [ 836.825437][T20581] ? print_usage_bug.part.0+0x550/0x560 [ 836.831738][T20581] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 836.837495][T20581] ? sctp_sendmsg+0x575/0x1f10 [ 836.842303][T20581] ? mark_held_locks+0x9f/0xe0 [ 836.847107][T20581] ? sctp_sendmsg_check_sflags+0x176/0x320 [ 836.852948][T20581] sctp_sendmsg+0x129c/0x1f10 [ 836.857669][T20581] ? __pfx_sctp_sendmsg+0x10/0x10 [ 836.862733][T20581] ? __pfx_lock_release+0x10/0x10 [ 836.867812][T20581] ? __pfx___might_resched+0x10/0x10 [ 836.873151][T20581] ? aa_file_perm+0x4d5/0xfe0 [ 836.877870][T20581] ? __pfx_aa_sk_perm+0x10/0x10 [ 836.882780][T20581] ? find_held_lock+0x2d/0x110 [ 836.887582][T20581] ? __pfx_sctp_sendmsg+0x10/0x10 [ 836.892643][T20581] inet_sendmsg+0x119/0x140 [ 836.897180][T20581] sock_write_iter+0x4ac/0x5b0 [ 836.901975][T20581] ? __pfx_sock_write_iter+0x10/0x10 [ 836.907301][T20581] ? bpf_lsm_file_permission+0x9/0x10 [ 836.912732][T20581] ? security_file_permission+0x71/0x210 [ 836.918444][T20581] vfs_write+0x5ae/0x1150 [ 836.922847][T20581] ? __pfx_sock_write_iter+0x10/0x10 [ 836.931018][T20581] ? __pfx_vfs_write+0x10/0x10 [ 836.936434][T20581] ? __fget_files+0x40/0x3a0 [ 836.941080][T20581] ksys_write+0x207/0x250 [ 836.945444][T20581] ? __pfx_ksys_write+0x10/0x10 [ 836.950420][T20581] do_syscall_64+0xcd/0x250 [ 836.954960][T20581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.960893][T20581] RIP: 0033:0x7f29a8985d19 [ 836.965330][T20581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.985426][T20581] RSP: 002b:00007f29a67b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 836.994145][T20581] RAX: ffffffffffffffda RBX: 00007f29a8b76160 RCX: 00007f29a8985d19 [ 837.002144][T20581] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 837.010135][T20581] RBP: 00007f29a67b4090 R08: 0000000000000000 R09: 0000000000000000 [ 837.018130][T20581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.026125][T20581] R13: 0000000000000001 R14: 00007f29a8b76160 R15: 00007ffdb9e63788 [ 837.034138][T20581] [ 838.660588][T20638] openvswitch: netlink: Unknown nsh attribute 0 [ 838.905620][T20655] program syz.1.4011 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 839.176212][T20666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4014'. [ 839.223902][T20669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4014'. [ 840.432986][T20703] program syz.5.4023 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 841.125757][T20723] openvswitch: netlink: Unknown nsh attribute 0 [ 842.307201][T20762] FAULT_INJECTION: forcing a failure. [ 842.307201][T20762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 842.380603][T20762] CPU: 0 UID: 0 PID: 20762 Comm: syz.1.4036 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 842.391961][T20762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 842.402293][T20762] Call Trace: [ 842.406924][T20762] [ 842.409913][T20762] dump_stack_lvl+0x16c/0x1f0 [ 842.414838][T20762] should_fail_ex+0x497/0x5b0 [ 842.419555][T20762] _copy_to_user+0x32/0xd0 [ 842.424013][T20762] simple_read_from_buffer+0xd0/0x160 [ 842.429439][T20762] proc_fail_nth_read+0x198/0x270 [ 842.434509][T20762] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 842.440377][T20762] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 842.445978][T20762] vfs_read+0x1df/0xbe0 [ 842.450343][T20762] ? __fget_files+0x1fc/0x3a0 [ 842.455559][T20762] ? __pfx___mutex_lock+0x10/0x10 [ 842.461832][T20762] ? __pfx_vfs_read+0x10/0x10 [ 842.466541][T20762] ? __fget_files+0x206/0x3a0 [ 842.471238][T20762] ksys_read+0x12b/0x250 [ 842.475492][T20762] ? __pfx_ksys_read+0x10/0x10 [ 842.480268][T20762] do_syscall_64+0xcd/0x250 [ 842.484789][T20762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.490699][T20762] RIP: 0033:0x7f706358472c [ 842.495118][T20762] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 842.514729][T20762] RSP: 002b:00007f70642f4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 842.523144][T20762] RAX: ffffffffffffffda RBX: 00007f7063775fa0 RCX: 00007f706358472c [ 842.531122][T20762] RDX: 000000000000000f RSI: 00007f70642f40a0 RDI: 0000000000000004 [ 842.539094][T20762] RBP: 00007f70642f4090 R08: 0000000000000000 R09: 0000000000000000 [ 842.547069][T20762] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 842.555041][T20762] R13: 0000000000000000 R14: 00007f7063775fa0 R15: 00007ffeddf5bba8 [ 842.563029][T20762] [ 842.857837][ T29] audit: type=1326 audit(4294967300.210:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20773 comm=093D exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29a8985d19 code=0x0 [ 842.987089][T20776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4041'. [ 843.424760][T20788] openvswitch: netlink: Unknown nsh attribute 0 [ 845.399213][T20811] FAULT_INJECTION: forcing a failure. [ 845.399213][T20811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 845.462208][T20811] CPU: 0 UID: 0 PID: 20811 Comm: syz.1.4049 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 845.473012][T20811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 845.483069][T20811] Call Trace: [ 845.486346][T20811] [ 845.489276][T20811] dump_stack_lvl+0x16c/0x1f0 [ 845.493964][T20811] should_fail_ex+0x497/0x5b0 [ 845.498653][T20811] _copy_to_user+0x32/0xd0 [ 845.503080][T20811] simple_read_from_buffer+0xd0/0x160 [ 845.508473][T20811] proc_fail_nth_read+0x198/0x270 [ 845.513520][T20811] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 845.519092][T20811] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 845.524648][T20811] vfs_read+0x1df/0xbe0 [ 845.528806][T20811] ? __fget_files+0x1fc/0x3a0 [ 845.533488][T20811] ? __pfx___mutex_lock+0x10/0x10 [ 845.538521][T20811] ? __pfx_vfs_read+0x10/0x10 [ 845.543211][T20811] ? __fget_files+0x206/0x3a0 [ 845.547902][T20811] ksys_read+0x12b/0x250 [ 845.552152][T20811] ? __pfx_ksys_read+0x10/0x10 [ 845.556933][T20811] do_syscall_64+0xcd/0x250 [ 845.561448][T20811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.567352][T20811] RIP: 0033:0x7f706358472c [ 845.571781][T20811] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 845.591400][T20811] RSP: 002b:00007f70642f4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 845.599825][T20811] RAX: ffffffffffffffda RBX: 00007f7063775fa0 RCX: 00007f706358472c [ 845.607798][T20811] RDX: 000000000000000f RSI: 00007f70642f40a0 RDI: 0000000000000004 [ 845.615775][T20811] RBP: 00007f70642f4090 R08: 0000000000000000 R09: 0000000000000000 [ 845.623748][T20811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.631720][T20811] R13: 0000000000000000 R14: 00007f7063775fa0 R15: 00007ffeddf5bba8 [ 845.639711][T20811] [ 847.789109][T20843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4060'. [ 851.964668][T20913] mkiss: ax0: crc mode is auto. [ 852.806584][T20944] FAULT_INJECTION: forcing a failure. [ 852.806584][T20944] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 852.826015][T20944] CPU: 0 UID: 0 PID: 20944 Comm: syz.2.4093 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 852.837961][T20944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 852.849037][T20944] Call Trace: [ 852.852436][T20944] [ 852.855764][T20944] dump_stack_lvl+0x16c/0x1f0 [ 852.861022][T20944] should_fail_ex+0x497/0x5b0 [ 852.865826][T20944] ? fs_reclaim_acquire+0xae/0x150 [ 852.870948][T20944] should_fail_alloc_page+0xe7/0x130 [ 852.876248][T20944] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 852.882772][T20944] __alloc_pages_noprof+0x190/0x25b0 [ 852.889904][T20944] ? kasan_save_stack+0x33/0x60 [ 852.896021][T20944] ? __pfx___lock_acquire+0x10/0x10 [ 852.902790][T20944] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 852.910658][T20944] ? hlock_class+0x4e/0x130 [ 852.916790][T20944] ? mark_lock+0xb5/0xc60 [ 852.922983][T20944] ? hlock_class+0x4e/0x130 [ 852.929673][T20944] ? mark_lock+0xb5/0xc60 [ 852.934023][T20944] ? __pfx_mark_lock+0x10/0x10 [ 852.938799][T20944] ? __pfx_mark_lock+0x10/0x10 [ 852.943583][T20944] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 852.949525][T20944] ? policy_nodemask+0xea/0x4e0 [ 852.954652][T20944] alloc_pages_mpol_noprof+0x2c9/0x610 [ 852.960173][T20944] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 852.969357][T20944] pte_alloc_one+0x20/0x390 [ 852.977185][T20944] __pte_alloc+0x6e/0x3b0 [ 852.981523][T20944] ? __pfx___pte_alloc+0x10/0x10 [ 852.986597][T20944] do_pte_missing+0x2810/0x3e00 [ 852.991648][T20944] ? mt_find+0x82d/0xa20 [ 852.996082][T20944] ? __pfx_lock_release+0x10/0x10 [ 853.002952][T20944] __handle_mm_fault+0x103c/0x2a40 [ 853.008114][T20944] ? __pfx___handle_mm_fault+0x10/0x10 [ 853.013584][T20944] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 853.019237][T20944] ? find_vma+0xc0/0x140 [ 853.023497][T20944] ? __pfx_find_vma+0x10/0x10 [ 853.028650][T20944] handle_mm_fault+0x3fa/0xaa0 [ 853.033634][T20944] do_user_addr_fault+0x7a3/0x13f0 [ 853.040123][T20944] exc_page_fault+0x5c/0xc0 [ 853.045460][T20944] asm_exc_page_fault+0x26/0x30 [ 853.050636][T20944] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 853.057007][T20944] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 853.076633][T20944] RSP: 0018:ffffc9000b7afc40 EFLAGS: 00050206 [ 853.082721][T20944] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000000fdef [ 853.091230][T20944] RDX: fffff520006f77be RSI: 0000000000000000 RDI: ffffc900037ac000 [ 853.101330][T20944] RBP: 000000000000fdef R08: 0000000000000001 R09: fffff520006f77bd [ 853.110656][T20944] R10: ffffc900037bbdee R11: 0000000000000000 R12: 0000000000000000 [ 853.119950][T20944] R13: ffffc900037ac000 R14: 0000000000000000 R15: 0000000000000000 [ 853.127946][T20944] _copy_from_user+0x9a/0xd0 [ 853.132554][T20944] fb_sys_write+0x24d/0x3f0 [ 853.137079][T20944] drm_fbdev_shmem_defio_write+0x48/0x90 [ 853.142721][T20944] ? __pfx_drm_fbdev_shmem_defio_write+0x10/0x10 [ 853.149062][T20944] fb_write+0x199/0x2a0 [ 853.153777][T20944] ? __pfx_fb_write+0x10/0x10 [ 853.159410][T20944] vfs_write+0x24c/0x1150 [ 853.164811][T20944] ? __fget_files+0x1fc/0x3a0 [ 853.170412][T20944] ? __pfx_lock_release+0x10/0x10 [ 853.176419][T20944] ? __pfx_vfs_write+0x10/0x10 [ 853.181397][T20944] ? lock_acquire+0x2f/0xb0 [ 853.186436][T20944] ? __fget_files+0x40/0x3a0 [ 853.191043][T20944] ? __fget_files+0x206/0x3a0 [ 853.195737][T20944] __x64_sys_pwrite64+0x1f6/0x250 [ 853.200785][T20944] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 853.206884][T20944] do_syscall_64+0xcd/0x250 [ 853.212587][T20944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.218608][T20944] RIP: 0033:0x7faba8985d19 [ 853.223403][T20944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 853.243038][T20944] RSP: 002b:00007faba9833038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 853.251524][T20944] RAX: ffffffffffffffda RBX: 00007faba8b75fa0 RCX: 00007faba8985d19 [ 853.260387][T20944] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 853.269465][T20944] RBP: 00007faba9833090 R08: 0000000000000000 R09: 0000000000000000 [ 853.278603][T20944] R10: 0000000000003000 R11: 0000000000000246 R12: 0000000000000001 [ 853.287455][T20944] R13: 0000000000000000 R14: 00007faba8b75fa0 R15: 00007ffd771d3568 [ 853.295447][T20944] [ 853.662719][T20954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4095'. [ 854.307265][T20973] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4101'. [ 854.771686][T20988] FAULT_INJECTION: forcing a failure. [ 854.771686][T20988] name failslab, interval 1, probability 0, space 0, times 0 [ 854.813712][T20988] CPU: 0 UID: 0 PID: 20988 Comm: syz.1.4107 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 854.824538][T20988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 854.834617][T20988] Call Trace: [ 854.837899][T20988] [ 854.840835][T20988] dump_stack_lvl+0x16c/0x1f0 [ 854.845526][T20988] should_fail_ex+0x497/0x5b0 [ 854.850210][T20988] ? fs_reclaim_acquire+0xae/0x150 [ 854.855334][T20988] should_failslab+0xc2/0x120 [ 854.860033][T20988] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 854.865437][T20988] ? ptlock_alloc+0x1f/0x70 [ 854.869961][T20988] ptlock_alloc+0x1f/0x70 [ 854.874303][T20988] pte_alloc_one+0x74/0x390 [ 854.878814][T20988] __pte_alloc+0x6e/0x3b0 [ 854.883146][T20988] ? __pfx___pte_alloc+0x10/0x10 [ 854.888101][T20988] do_pte_missing+0x2810/0x3e00 [ 854.892964][T20988] ? mt_find+0x82d/0xa20 [ 854.897217][T20988] ? __pfx_lock_release+0x10/0x10 [ 854.902251][T20988] __handle_mm_fault+0x103c/0x2a40 [ 854.907381][T20988] ? __pfx___handle_mm_fault+0x10/0x10 [ 854.912849][T20988] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 854.918500][T20988] ? find_vma+0xc0/0x140 [ 854.922765][T20988] ? __pfx_find_vma+0x10/0x10 [ 854.927989][T20988] handle_mm_fault+0x3fa/0xaa0 [ 854.932806][T20988] do_user_addr_fault+0x7a3/0x13f0 [ 854.937940][T20988] exc_page_fault+0x5c/0xc0 [ 854.942452][T20988] asm_exc_page_fault+0x26/0x30 [ 854.947313][T20988] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 854.953134][T20988] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 854.972764][T20988] RSP: 0018:ffffc90004777c40 EFLAGS: 00050206 [ 854.978886][T20988] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000000fdef [ 854.986873][T20988] RDX: fffff520006f77be RSI: 0000000000000000 RDI: ffffc900037ac000 [ 854.994855][T20988] RBP: 000000000000fdef R08: 0000000000000001 R09: fffff520006f77bd [ 855.002827][T20988] R10: ffffc900037bbdee R11: 0000000000000000 R12: 0000000000000000 [ 855.010802][T20988] R13: ffffc900037ac000 R14: 0000000000000000 R15: 0000000000000000 [ 855.018822][T20988] _copy_from_user+0x9a/0xd0 [ 855.023470][T20988] fb_sys_write+0x24d/0x3f0 [ 855.028161][T20988] drm_fbdev_shmem_defio_write+0x48/0x90 [ 855.033862][T20988] ? __pfx_drm_fbdev_shmem_defio_write+0x10/0x10 [ 855.040205][T20988] fb_write+0x199/0x2a0 [ 855.044370][T20988] ? __pfx_fb_write+0x10/0x10 [ 855.049061][T20988] vfs_write+0x24c/0x1150 [ 855.053400][T20988] ? __fget_files+0x1fc/0x3a0 [ 855.058085][T20988] ? __pfx_lock_release+0x10/0x10 [ 855.063115][T20988] ? __pfx_vfs_write+0x10/0x10 [ 855.067889][T20988] ? lock_acquire+0x2f/0xb0 [ 855.072460][T20988] ? __fget_files+0x40/0x3a0 [ 855.077155][T20988] ? __fget_files+0x206/0x3a0 [ 855.081855][T20988] __x64_sys_pwrite64+0x1f6/0x250 [ 855.086957][T20988] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 855.092609][T20988] do_syscall_64+0xcd/0x250 [ 855.097132][T20988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.103031][T20988] RIP: 0033:0x7f7063585d19 [ 855.107465][T20988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 855.127091][T20988] RSP: 002b:00007f70642f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 855.135524][T20988] RAX: ffffffffffffffda RBX: 00007f7063775fa0 RCX: 00007f7063585d19 [ 855.143604][T20988] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 855.151578][T20988] RBP: 00007f70642f4090 R08: 0000000000000000 R09: 0000000000000000 [ 855.159558][T20988] R10: 0000000000003000 R11: 0000000000000246 R12: 0000000000000001 [ 855.167589][T20988] R13: 0000000000000000 R14: 00007f7063775fa0 R15: 00007ffeddf5bba8 [ 855.175786][T20988] [ 855.263251][T20991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4106'. [ 855.538297][T20998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4110'. [ 855.587943][T20998] hsr_slave_0: entered allmulticast mode [ 855.787420][T21006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4112'. [ 857.078669][T21030] FAULT_INJECTION: forcing a failure. [ 857.078669][T21030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 857.092341][T21030] CPU: 0 UID: 0 PID: 21030 Comm: syz.2.4122 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 857.103204][T21030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 857.113308][T21030] Call Trace: [ 857.116801][T21030] [ 857.119752][T21030] dump_stack_lvl+0x16c/0x1f0 [ 857.124469][T21030] should_fail_ex+0x497/0x5b0 [ 857.129193][T21030] _copy_to_user+0x32/0xd0 [ 857.133649][T21030] simple_read_from_buffer+0xd0/0x160 [ 857.139071][T21030] proc_fail_nth_read+0x198/0x270 [ 857.144574][T21030] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 857.150178][T21030] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 857.155771][T21030] vfs_read+0x1df/0xbe0 [ 857.159950][T21030] ? __fget_files+0x1fc/0x3a0 [ 857.164645][T21030] ? __pfx___mutex_lock+0x10/0x10 [ 857.169681][T21030] ? __pfx_vfs_read+0x10/0x10 [ 857.174370][T21030] ? __fget_files+0x206/0x3a0 [ 857.179059][T21030] ksys_read+0x12b/0x250 [ 857.183312][T21030] ? __pfx_ksys_read+0x10/0x10 [ 857.188103][T21030] do_syscall_64+0xcd/0x250 [ 857.192627][T21030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.198530][T21030] RIP: 0033:0x7faba898472c [ 857.202951][T21030] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 857.222584][T21030] RSP: 002b:00007faba9833030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 857.231010][T21030] RAX: ffffffffffffffda RBX: 00007faba8b75fa0 RCX: 00007faba898472c [ 857.238984][T21030] RDX: 000000000000000f RSI: 00007faba98330a0 RDI: 0000000000000004 [ 857.246958][T21030] RBP: 00007faba9833090 R08: 0000000000000000 R09: 0000000000000000 [ 857.254963][T21030] R10: 0000000000003000 R11: 0000000000000246 R12: 0000000000000001 [ 857.262961][T21030] R13: 0000000000000000 R14: 00007faba8b75fa0 R15: 00007ffd771d3568 [ 857.270964][T21030] [ 857.414929][T21036] ptrace attach of "./syz-executor exec"[14622] was attempted by ""[21036] [ 857.644408][T21042] FAULT_INJECTION: forcing a failure. [ 857.644408][T21042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 857.713342][T21042] CPU: 0 UID: 0 PID: 21042 Comm: syz.2.4127 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 857.724157][T21042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 857.734234][T21042] Call Trace: [ 857.737538][T21042] [ 857.740468][T21042] dump_stack_lvl+0x16c/0x1f0 [ 857.745504][T21042] should_fail_ex+0x497/0x5b0 [ 857.750196][T21042] _copy_from_user+0x2e/0xd0 [ 857.754798][T21042] __sys_bpf+0x215/0x57a0 [ 857.759131][T21042] ? __pfx_lock_release+0x10/0x10 [ 857.764159][T21042] ? __pfx___sys_bpf+0x10/0x10 [ 857.768926][T21042] ? vfs_write+0x306/0x1150 [ 857.773443][T21042] ? __mutex_unlock_slowpath+0x164/0x690 [ 857.779095][T21042] ? fput+0x67/0x440 [ 857.782997][T21042] ? ksys_write+0x1ba/0x250 [ 857.787504][T21042] ? __pfx_ksys_write+0x10/0x10 [ 857.792364][T21042] __x64_sys_bpf+0x78/0xc0 [ 857.796784][T21042] ? lockdep_hardirqs_on+0x7c/0x110 [ 857.801987][T21042] do_syscall_64+0xcd/0x250 [ 857.806503][T21042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.812406][T21042] RIP: 0033:0x7faba8985d19 [ 857.816830][T21042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 857.836446][T21042] RSP: 002b:00007faba9833038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 857.844864][T21042] RAX: ffffffffffffffda RBX: 00007faba8b75fa0 RCX: 00007faba8985d19 [ 857.852835][T21042] RDX: 00000000000000a3 RSI: 0000000020000780 RDI: 0000000000000000 [ 857.860810][T21042] RBP: 00007faba9833090 R08: 0000000000000000 R09: 0000000000000000 [ 857.868781][T21042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.876751][T21042] R13: 0000000000000000 R14: 00007faba8b75fa0 R15: 00007ffd771d3568 [ 857.884733][T21042] [ 858.452105][T21051] bond0: option updelay: invalid value (/','}:--$:) [ 858.474051][T21051] bond0: option updelay: allowed values 0 - 2147483647 [ 858.531083][T21054] can: request_module (can-proto-0) failed. [ 858.570110][T21053] can: request_module (can-proto-0) failed. [ 858.998153][T21067] FAULT_INJECTION: forcing a failure. [ 858.998153][T21067] name failslab, interval 1, probability 0, space 0, times 0 [ 859.016161][T21067] CPU: 1 UID: 0 PID: 21067 Comm: syz.5.4134 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 859.027184][T21067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 859.037274][T21067] Call Trace: [ 859.040573][T21067] [ 859.043531][T21067] dump_stack_lvl+0x16c/0x1f0 [ 859.048240][T21067] should_fail_ex+0x497/0x5b0 [ 859.052932][T21067] ? fs_reclaim_acquire+0xae/0x150 [ 859.058053][T21067] should_failslab+0xc2/0x120 [ 859.062750][T21067] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 859.068320][T21067] ? __mutex_unlock_slowpath+0x164/0x690 [ 859.074586][T21067] ? getname_flags.part.0+0x4c/0x550 [ 859.080278][T21067] getname_flags.part.0+0x4c/0x550 [ 859.085429][T21067] getname_flags+0x93/0xf0 [ 859.089865][T21067] user_path_at+0x24/0x60 [ 859.094224][T21067] do_fchmodat+0xf0/0x1c0 [ 859.098569][T21067] ? __pfx_do_fchmodat+0x10/0x10 [ 859.103520][T21067] ? __pfx_ksys_write+0x10/0x10 [ 859.108381][T21067] __x64_sys_fchmodat2+0x99/0x100 [ 859.113451][T21067] ? lockdep_hardirqs_on+0x7c/0x110 [ 859.119284][T21067] do_syscall_64+0xcd/0x250 [ 859.123813][T21067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.130594][T21067] RIP: 0033:0x7f29a8985d19 [ 859.135482][T21067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 859.155550][T21067] RSP: 002b:00007f29a67f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c4 [ 859.163991][T21067] RAX: ffffffffffffffda RBX: 00007f29a8b75fa0 RCX: 00007f29a8985d19 [ 859.172433][T21067] RDX: 0000000000000009 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 859.180578][T21067] RBP: 00007f29a67f6090 R08: 0000000000000000 R09: 0000000000000000 [ 859.189093][T21067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.197076][T21067] R13: 0000000000000000 R14: 00007f29a8b75fa0 R15: 00007ffdb9e63788 [ 859.205241][T21067] [ 863.320091][T21142] cgroup: fork rejected by pids controller in /syz2 [ 863.445090][T21183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4158'. [ 870.199541][T21352] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4178'. [ 870.487572][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.495166][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.848483][T21361] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4181'. [ 870.858540][T21361] IPv6: NLM_F_CREATE should be specified when creating new route [ 870.890408][T21361] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 870.897726][T21361] IPv6: NLM_F_CREATE should be set when creating new route [ 870.905021][T21361] IPv6: NLM_F_CREATE should be set when creating new route [ 870.912245][T21361] IPv6: NLM_F_CREATE should be set when creating new route [ 870.981897][T21362] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4181'. [ 870.991973][T21362] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 871.398869][T21367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4183'. [ 871.443524][T21367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4183'. [ 872.125083][T21383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4189'. [ 873.280872][T21395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4193'. [ 886.227942][T21518] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4224'. [ 891.474336][T12989] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 891.494762][T12989] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 891.504680][T12989] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 891.517096][T12989] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 891.525572][T12989] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 891.533271][T12989] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 892.403723][T21536] chnl_net:caif_netlink_parms(): no params data found [ 893.673561][T12989] Bluetooth: hci0: command tx timeout [ 893.929010][T21536] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.953498][T21536] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.960741][T21536] bridge_slave_0: entered allmulticast mode [ 894.004846][T21536] bridge_slave_0: entered promiscuous mode [ 894.054646][T21536] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.061772][T21536] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.110992][T21536] bridge_slave_1: entered allmulticast mode [ 894.131652][T21536] bridge_slave_1: entered promiscuous mode [ 894.510506][T21536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 894.555117][T21536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 894.999582][T21536] team0: Port device team_slave_0 added [ 895.044672][T21536] team0: Port device team_slave_1 added [ 895.461421][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 895.485336][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 895.512285][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 895.524036][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 895.534190][ T5841] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 895.541608][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 895.761595][T12989] Bluetooth: hci0: command tx timeout [ 896.278089][T21536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 896.313242][T21536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 896.410852][T21536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.203972][T21536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.210958][T21536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.333449][T21536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.693476][T12989] Bluetooth: hci5: command tx timeout [ 897.833442][T12989] Bluetooth: hci0: command tx timeout [ 898.817964][T21569] HSR: entered promiscuous mode [ 899.755000][T12989] Bluetooth: hci5: command tx timeout [ 899.924985][T12989] Bluetooth: hci0: command tx timeout [ 901.797560][T21536] hsr_slave_0: entered promiscuous mode [ 901.843430][T12989] Bluetooth: hci5: command tx timeout [ 902.084300][T21536] hsr_slave_1: entered promiscuous mode [ 902.284769][T21536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 902.292637][T21536] Cannot create hsr debugfs directory [ 903.935055][ T5841] Bluetooth: hci5: command tx timeout [ 905.114958][T21592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4241'. [ 906.758110][T21560] chnl_net:caif_netlink_parms(): no params data found [ 908.689948][T21560] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.723829][T21560] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.731278][T21560] bridge_slave_0: entered allmulticast mode [ 908.817198][T21560] bridge_slave_0: entered promiscuous mode [ 908.855319][T21536] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 909.249819][T21560] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.259829][T21560] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.293692][T21560] bridge_slave_1: entered allmulticast mode [ 909.320170][T21560] bridge_slave_1: entered promiscuous mode [ 909.348240][T21536] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 909.484091][T21536] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 910.076307][T21536] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 910.159266][T21163] syz.2.4157 (21163) used greatest stack depth: 17968 bytes left [ 910.177459][T21560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 910.200111][T21560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 910.250726][T21560] team0: Port device team_slave_0 added [ 910.266820][T21560] team0: Port device team_slave_1 added [ 910.466019][T21560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.501633][T21560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.643271][T21560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.696077][T21560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 910.731490][T21560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.845305][T21560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.277379][T21560] hsr_slave_0: entered promiscuous mode [ 911.320405][T21560] hsr_slave_1: entered promiscuous mode [ 911.353185][T21560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 911.388501][T21560] Cannot create hsr debugfs directory [ 911.682628][T21536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 911.943500][T21536] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.035725][T17447] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.042882][T17447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.076392][T17447] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.083604][T17447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.363336][T21560] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 912.400648][T21560] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 912.448224][T21560] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 912.496609][T21560] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 912.878813][T21560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 912.993705][T21536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 913.019546][T21560] 8021q: adding VLAN 0 to HW filter on device team0 [ 913.095751][T17447] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.102912][T17447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 913.161558][T17447] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.170648][T17447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 914.070402][T21536] veth0_vlan: entered promiscuous mode [ 914.107568][T21536] veth1_vlan: entered promiscuous mode [ 914.143818][T21560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.255405][T21536] veth0_macvtap: entered promiscuous mode [ 914.359053][T21536] veth1_macvtap: entered promiscuous mode [ 914.440262][T21536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.473667][T21536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.483877][T21536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.494753][T21536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.505011][T21536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.515516][T21536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.527856][T21536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 914.539735][T21536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.550263][T21536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.560374][T21536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.570905][T21536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.580935][T21536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.591573][T21536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.601675][T21536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.612393][T21536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.622294][T21536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.633488][T21536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.647693][T21536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 914.657800][T21536] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.666638][T21536] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.675664][T21536] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.684791][T21536] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.178085][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.224781][T21560] veth0_vlan: entered promiscuous mode [ 915.234168][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.326969][T21560] veth1_vlan: entered promiscuous mode [ 915.412952][T14359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.423592][T14359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.431180][T21560] veth0_macvtap: entered promiscuous mode [ 915.461152][T21560] veth1_macvtap: entered promiscuous mode [ 915.528395][T21560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.573365][T21560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.618011][T21560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.672410][T21560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.702309][T21560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.732053][T21560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.762936][T21560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.775026][T21560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.794609][T21560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 915.850239][T21560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.914406][T21560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.941280][T21560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.965232][T21560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.004580][T21560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.036391][T21560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.057571][T21560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.106110][T21560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.134196][T21560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.168583][T21560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.210704][T21560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.236975][T21560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.262649][T21560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 916.309687][T21560] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.373522][T21560] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.392520][T21560] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.414493][T21560] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.658000][T14359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.687774][T14359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.765015][T14348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.791012][T14348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.805416][T21686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4256'. [ 918.822711][T21686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4256'. [ 919.605673][T21701] FAULT_INJECTION: forcing a failure. [ 919.605673][T21701] name failslab, interval 1, probability 0, space 0, times 0 [ 919.758234][T21701] CPU: 1 UID: 0 PID: 21701 Comm: syz.7.4261 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 919.769068][T21701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 919.779138][T21701] Call Trace: [ 919.782607][T21701] [ 919.785556][T21701] dump_stack_lvl+0x16c/0x1f0 [ 919.790286][T21701] should_fail_ex+0x497/0x5b0 [ 919.794996][T21701] ? fs_reclaim_acquire+0xae/0x150 [ 919.800148][T21701] should_failslab+0xc2/0x120 [ 919.804891][T21701] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 919.810307][T21701] ? ptlock_alloc+0x1f/0x70 [ 919.814848][T21701] ptlock_alloc+0x1f/0x70 [ 919.819210][T21701] pte_alloc_one+0x74/0x390 [ 919.823741][T21701] __pte_alloc+0x6e/0x3b0 [ 919.828093][T21701] ? __pfx___pte_alloc+0x10/0x10 [ 919.833062][T21701] do_pte_missing+0x2810/0x3e00 [ 919.837944][T21701] ? mt_find+0x82d/0xa20 [ 919.842224][T21701] ? __pfx_lock_release+0x10/0x10 [ 919.847290][T21701] __handle_mm_fault+0x103c/0x2a40 [ 919.852475][T21701] ? __pfx___handle_mm_fault+0x10/0x10 [ 919.857983][T21701] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 919.863666][T21701] ? find_vma+0xc0/0x140 [ 919.867934][T21701] ? __pfx_find_vma+0x10/0x10 [ 919.872637][T21701] handle_mm_fault+0x3fa/0xaa0 [ 919.877444][T21701] do_user_addr_fault+0x7a3/0x13f0 [ 919.882583][T21701] exc_page_fault+0x5c/0xc0 [ 919.887111][T21701] asm_exc_page_fault+0x26/0x30 [ 919.891990][T21701] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 919.897831][T21701] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 919.917580][T21701] RSP: 0018:ffffc900047a7c40 EFLAGS: 00050206 [ 919.923683][T21701] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 00000000002fd000 [ 919.931674][T21701] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900037ac000 [ 919.939666][T21701] RBP: 00000000002fd000 R08: 0000000000000001 R09: fffff520007551ff [ 919.947667][T21701] R10: ffffc90003aa8fff R11: 0000000000000000 R12: 0000000000000000 [ 919.955846][T21701] R13: ffffc900037ac000 R14: 00000000ffffffe4 R15: 0000000000000000 [ 919.963865][T21701] _copy_from_user+0x9a/0xd0 [ 919.968493][T21701] fb_sys_write+0x24d/0x3f0 [ 919.973029][T21701] drm_fbdev_shmem_defio_write+0x48/0x90 [ 919.978691][T21701] ? __pfx_drm_fbdev_shmem_defio_write+0x10/0x10 [ 919.985051][T21701] fb_write+0x199/0x2a0 [ 919.989235][T21701] ? __pfx_fb_write+0x10/0x10 [ 919.993934][T21701] vfs_write+0x24c/0x1150 [ 919.998297][T21701] ? __fget_files+0x1fc/0x3a0 [ 920.003009][T21701] ? __pfx_lock_release+0x10/0x10 [ 920.008059][T21701] ? __pfx_vfs_write+0x10/0x10 [ 920.012860][T21701] ? lock_acquire+0x2f/0xb0 [ 920.017384][T21701] ? __fget_files+0x40/0x3a0 [ 920.022015][T21701] ? __fget_files+0x206/0x3a0 [ 920.026732][T21701] __x64_sys_pwrite64+0x1f6/0x250 [ 920.031873][T21701] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 920.037982][T21701] do_syscall_64+0xcd/0x250 [ 920.042527][T21701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.048452][T21701] RIP: 0033:0x7f12a8585d19 [ 920.052885][T21701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 920.072517][T21701] RSP: 002b:00007f12a9377038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 920.080959][T21701] RAX: ffffffffffffffda RBX: 00007f12a8775fa0 RCX: 00007f12a8585d19 [ 920.088951][T21701] RDX: 00000000002fe000 RSI: 0000000000000000 RDI: 0000000000000003 [ 920.097050][T21701] RBP: 00007f12a9377090 R08: 0000000000000000 R09: 0000000000000000 [ 920.105130][T21701] R10: 0000000000003000 R11: 0000000000000246 R12: 0000000000000001 [ 920.113121][T21701] R13: 0000000000000000 R14: 00007f12a8775fa0 R15: 00007ffe424b2f68 [ 920.121135][T21701] [ 920.993230][T21711] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 924.931852][T21743] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4271'. [ 925.078316][T21743] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4271'. [ 928.919935][T21779] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4282'. [ 928.983537][T21779] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4282'. [ 932.003927][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.010265][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.255541][T21815] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4292'. [ 933.613585][T21817] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4293'. [ 936.874146][T21856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4302'. [ 936.984164][T21858] FAULT_INJECTION: forcing a failure. [ 936.984164][T21858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 937.021993][T21858] CPU: 1 UID: 0 PID: 21858 Comm: syz.7.4304 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 937.032807][T21858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 937.042878][T21858] Call Trace: [ 937.046168][T21858] [ 937.049112][T21858] dump_stack_lvl+0x16c/0x1f0 [ 937.053823][T21858] should_fail_ex+0x497/0x5b0 [ 937.058532][T21858] _copy_to_user+0x32/0xd0 [ 937.062981][T21858] simple_read_from_buffer+0xd0/0x160 [ 937.068397][T21858] proc_fail_nth_read+0x198/0x270 [ 937.073459][T21858] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 937.079046][T21858] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 937.084627][T21858] vfs_read+0x1df/0xbe0 [ 937.088810][T21858] ? __fget_files+0x1fc/0x3a0 [ 937.093514][T21858] ? __pfx___mutex_lock+0x10/0x10 [ 937.098561][T21858] ? __pfx_vfs_read+0x10/0x10 [ 937.103274][T21858] ? __fget_files+0x206/0x3a0 [ 937.107984][T21858] ksys_read+0x12b/0x250 [ 937.112255][T21858] ? __pfx_ksys_read+0x10/0x10 [ 937.117053][T21858] do_syscall_64+0xcd/0x250 [ 937.121584][T21858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.127505][T21858] RIP: 0033:0x7f12a858472c [ 937.131937][T21858] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 937.151569][T21858] RSP: 002b:00007f12a9377030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 937.160015][T21858] RAX: ffffffffffffffda RBX: 00007f12a8775fa0 RCX: 00007f12a858472c [ 937.168012][T21858] RDX: 000000000000000f RSI: 00007f12a93770a0 RDI: 0000000000000004 [ 937.176007][T21858] RBP: 00007f12a9377090 R08: 0000000000000000 R09: 0000000000000000 [ 937.184002][T21858] R10: 0000000000003000 R11: 0000000000000246 R12: 0000000000000001 [ 937.191994][T21858] R13: 0000000000000000 R14: 00007f12a8775fa0 R15: 00007ffe424b2f68 [ 937.200006][T21858] [ 941.415415][T21887] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4312'. [ 942.964011][T21914] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 947.314211][T21954] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4330'. [ 950.647760][T21974] netlink: 346 bytes leftover after parsing attributes in process `syz.5.4335'. [ 956.189524][T22018] ICMPv6: process `syz.0.4347' is using deprecated sysctl (syscall) net.ipv6.neigh.virt_wifi0.retrans_time - use net.ipv6.neigh.virt_wifi0.retrans_time_ms instead [ 957.731922][T22025] Process accounting resumed [ 958.967408][T22021] netlink: 346 bytes leftover after parsing attributes in process `syz.0.4349'. [ 965.850201][T22107] netlink: 346 bytes leftover after parsing attributes in process `syz.6.4367'. [ 967.049401][T22113] ICMPv6: process `syz.7.4368' is using deprecated sysctl (syscall) net.ipv6.neigh.virt_wifi0.retrans_time - use net.ipv6.neigh.virt_wifi0.retrans_time_ms instead [ 990.503856][T22276] mkiss: ax0: crc mode is auto. [ 993.283753][T22314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4413'. [ 993.355952][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.362339][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1007.402118][T22379] mkiss: ax0: crc mode is auto. [ 1009.464144][T12989] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1009.483264][T12989] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1009.492959][T12989] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1009.503270][T12989] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1010.891811][T12989] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1010.899267][T12989] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1011.574874][T22401] chnl_net:caif_netlink_parms(): no params data found [ 1012.150540][T22416] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4436'. [ 1012.964772][ T5841] Bluetooth: hci4: command tx timeout [ 1013.406397][ T11] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.506109][T22401] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.513813][T22401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.521019][T22401] bridge_slave_0: entered allmulticast mode [ 1013.529450][T22401] bridge_slave_0: entered promiscuous mode [ 1013.537441][T22401] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.548529][T22401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.555860][T22401] bridge_slave_1: entered allmulticast mode [ 1013.562942][T22401] bridge_slave_1: entered promiscuous mode [ 1014.196942][ T11] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.413271][T22401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.001584][ T11] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.033989][T12989] Bluetooth: hci4: command tx timeout [ 1015.357478][T22401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1016.073612][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 1016.190158][ T11] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.304006][T22436] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 1016.400635][T22401] team0: Port device team_slave_0 added [ 1016.433004][T22401] team0: Port device team_slave_1 added [ 1016.787317][T22401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.843408][T22401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.965553][T22401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1017.006124][T22401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1017.014883][T22401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1017.105860][T22401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.124027][ T5841] Bluetooth: hci4: command tx timeout [ 1017.578955][T22401] hsr_slave_0: entered promiscuous mode [ 1017.633931][T22401] hsr_slave_1: entered promiscuous mode [ 1017.693476][T22401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1017.701514][T22401] Cannot create hsr debugfs directory [ 1017.715668][ T11] bridge_slave_1: left allmulticast mode [ 1017.721334][ T11] bridge_slave_1: left promiscuous mode [ 1017.764089][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.874473][ T11] bridge_slave_0: left allmulticast mode [ 1017.924561][ T11] bridge_slave_0: left promiscuous mode [ 1017.930737][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.062964][T22457] zero sized request [ 1019.268002][ T5841] Bluetooth: hci4: command tx timeout [ 1020.680985][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1020.764008][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1020.803176][ T11] bond0 (unregistering): Released all slaves [ 1021.966461][T22401] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1022.014768][T22401] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1022.056438][T22401] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1022.119759][T22401] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1022.456623][T22401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1022.522895][T22401] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.246958][T22401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1024.249159][T22401] veth0_vlan: entered promiscuous mode [ 1024.312163][T22401] veth1_vlan: entered promiscuous mode [ 1024.389159][T22401] veth0_macvtap: entered promiscuous mode [ 1024.443648][T22401] veth1_macvtap: entered promiscuous mode [ 1024.498209][T22401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.545461][T22401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.591557][T22401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.637728][T22499] vivid-009: ================= START STATUS ================= [ 1024.663507][T22401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.683641][T22499] vivid-009: Enable Output Cropping: true [ 1024.692456][T22401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.735560][T22401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.754571][T22499] vivid-009: Enable Output Composing: true [ 1024.771284][T22499] vivid-009: Enable Output Scaler: true [ 1024.777079][T22401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.824336][T22499] vivid-009: Tx RGB Quantization Range: Automatic [ 1024.830858][T22499] vivid-009: Transmit Mode: HDMI [ 1024.836270][T22401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.863469][T22401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.875219][T22499] vivid-009: Hotplug Present: 0x00000000 [ 1024.890393][T22499] vivid-009: RxSense Present: 0x00000000 [ 1024.904118][T22401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.923545][T22499] vivid-009: EDID Present: 0x00000000 [ 1024.933628][T22499] vivid-009: ================== END STATUS ================== [ 1024.953753][T22401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1024.989407][T22401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.010815][T22401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.041384][T22401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.113611][T22401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.155367][T22401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.203483][T22401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.248730][T22401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.311408][T22401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.374084][T22401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.395369][T22401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.413506][T22401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.437695][T22401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.473530][T22401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.516471][T22401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.572374][T22401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1025.629957][T22401] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.675427][T22401] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.697894][T22401] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.757947][T22401] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.045193][T14359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.053044][T14359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1026.167176][ T3419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.179941][ T3419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.672685][T22517] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4460'. [ 1030.697732][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.704912][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1030.781853][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.789003][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1032.093233][ T11] hsr_slave_0: left promiscuous mode [ 1032.168579][ T11] hsr_slave_1: left promiscuous mode [ 1032.228349][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1032.263615][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1032.308531][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1032.365694][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1032.704435][ T11] veth1_macvtap: left promiscuous mode [ 1032.732750][ T11] veth0_macvtap: left promiscuous mode [ 1032.757002][ T11] veth1_vlan: left promiscuous mode [ 1032.825245][ T11] veth0_vlan: left promiscuous mode [ 1037.333934][T22598] ima: policy update failed [ 1037.373002][ T29] audit: type=1802 audit(4294967305.370:39): pid=22598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.4478" res=0 errno=0 [ 1037.732242][T22608] FAULT_INJECTION: forcing a failure. [ 1037.732242][T22608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1037.785131][T22608] CPU: 1 UID: 0 PID: 22608 Comm: syz.8.4481 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 1037.796009][T22608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1037.806714][T22608] Call Trace: [ 1037.810017][T22608] [ 1037.812962][T22608] dump_stack_lvl+0x16c/0x1f0 [ 1037.817682][T22608] should_fail_ex+0x497/0x5b0 [ 1037.823099][T22608] _copy_from_user+0x2e/0xd0 [ 1037.827727][T22608] kstrtouint_from_user+0xd7/0x1c0 [ 1037.832863][T22608] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1037.838620][T22608] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1037.844286][T22608] proc_fail_nth_write+0x84/0x250 [ 1037.849350][T22608] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1037.855034][T22608] ? ksys_write+0x12b/0x250 [ 1037.859765][T22608] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1037.865487][T22608] vfs_write+0x24c/0x1150 [ 1037.869882][T22608] ? __fget_files+0x1fc/0x3a0 [ 1037.874603][T22608] ? __pfx___mutex_lock+0x10/0x10 [ 1037.879677][T22608] ? __pfx_vfs_write+0x10/0x10 [ 1037.884487][T22608] ? __fget_files+0x206/0x3a0 [ 1037.889204][T22608] ksys_write+0x12b/0x250 [ 1037.893562][T22608] ? __pfx_ksys_write+0x10/0x10 [ 1037.898449][T22608] do_syscall_64+0xcd/0x250 [ 1037.902984][T22608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.908904][T22608] RIP: 0033:0x7f2b94f847cf [ 1037.913338][T22608] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1037.933119][T22608] RSP: 002b:00007f2b95e45030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1037.941581][T22608] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2b94f847cf [ 1037.949574][T22608] RDX: 0000000000000001 RSI: 00007f2b95e450a0 RDI: 0000000000000003 [ 1037.957566][T22608] RBP: 00007f2b95e45090 R08: 0000000000000000 R09: 0000000000000000 [ 1037.965555][T22608] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1037.973565][T22608] R13: 0000000000000000 R14: 00007f2b95175fa0 R15: 00007fff00cb51b8 [ 1037.981703][T22608] [ 1037.984939][ C1] vkms_vblank_simulate: vblank timer overrun [ 1040.004261][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1040.440523][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1043.538687][T22602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4479'. [ 1045.446178][T22641] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4487'. [ 1046.072863][T22647] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4488'. [ 1051.445231][T22690] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4492'. [ 1054.806324][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.813556][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1058.001910][T22749] netlink: zone id is out of range [ 1059.327658][T22749] netlink: set zone limit has 8 unknown bytes [ 1059.999978][T22738] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4501'. [ 1060.023547][T22738] team_slave_0: entered allmulticast mode [ 1063.620058][T22806] type: 16776960 invalid [ 1065.562912][T22824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4515'. [ 1065.603731][T22824] team_slave_0: entered allmulticast mode [ 1066.344412][T22863] type: 16776960 invalid [ 1073.590516][T22989] sp0: Synchronizing with TNC [ 1083.705006][T23137] type: 16776960 invalid [ 1088.190994][T23195] zero sized request [ 1090.663100][T23236] netlink: 12644 bytes leftover after parsing attributes in process `syz.8.4595'. [ 1101.060930][T23377] netlink: 12644 bytes leftover after parsing attributes in process `syz.5.4621'. [ 1109.653492][T23478] type: 16776960 invalid [ 1116.236371][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.243249][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.260350][ T12] sl0: compressed packet ignored [ 1120.393880][T23579] type: 16776960 invalid [ 1125.914532][T23634] FAULT_INJECTION: forcing a failure. [ 1125.914532][T23634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1126.007643][T23634] CPU: 1 UID: 0 PID: 23634 Comm: syz.5.4671 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 1126.018471][T23634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1126.028560][T23634] Call Trace: [ 1126.031863][T23634] [ 1126.034820][T23634] dump_stack_lvl+0x16c/0x1f0 [ 1126.039549][T23634] should_fail_ex+0x497/0x5b0 [ 1126.044269][T23634] _copy_from_user+0x2e/0xd0 [ 1126.048983][T23634] __sys_bpf+0x215/0x57a0 [ 1126.053345][T23634] ? __pfx_lock_release+0x10/0x10 [ 1126.058396][T23634] ? __pfx___sys_bpf+0x10/0x10 [ 1126.063183][T23634] ? vfs_write+0x306/0x1150 [ 1126.067720][T23634] ? __mutex_unlock_slowpath+0x164/0x690 [ 1126.073400][T23634] ? fput+0x67/0x440 [ 1126.077337][T23634] ? ksys_write+0x1ba/0x250 [ 1126.082072][T23634] ? __pfx_ksys_write+0x10/0x10 [ 1126.088395][T23634] __x64_sys_bpf+0x78/0xc0 [ 1126.092866][T23634] ? lockdep_hardirqs_on+0x7c/0x110 [ 1126.098376][T23634] do_syscall_64+0xcd/0x250 [ 1126.102916][T23634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.108853][T23634] RIP: 0033:0x7f29a8985d19 [ 1126.113295][T23634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1126.132964][T23634] RSP: 002b:00007f29a67d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1126.141427][T23634] RAX: ffffffffffffffda RBX: 00007f29a8b76080 RCX: 00007f29a8985d19 [ 1126.149427][T23634] RDX: 0000000000000096 RSI: 0000000020000100 RDI: 0000000000000000 [ 1126.157419][T23634] RBP: 00007f29a67d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1126.165412][T23634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1126.173410][T23634] R13: 0000000000000000 R14: 00007f29a8b76080 R15: 00007ffdb9e63788 [ 1126.181494][T23634] [ 1126.184670][ C1] vkms_vblank_simulate: vblank timer overrun [ 1127.739092][T23649] UHID_CREATE from different security context by process 215 (syz.8.4675), this is not allowed. [ 1132.223516][T23689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4683'. [ 1133.676412][T12989] Bluetooth: hci4: command 0x0406 tx timeout [ 1140.721634][T23776] FAULT_INJECTION: forcing a failure. [ 1140.721634][T23776] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.801881][T23776] CPU: 0 UID: 0 PID: 23776 Comm: syz.6.4706 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 1140.812699][T23776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1140.822774][T23776] Call Trace: [ 1140.826071][T23776] [ 1140.829019][T23776] dump_stack_lvl+0x16c/0x1f0 [ 1140.833730][T23776] should_fail_ex+0x497/0x5b0 [ 1140.838439][T23776] ? fs_reclaim_acquire+0xae/0x150 [ 1140.843585][T23776] should_failslab+0xc2/0x120 [ 1140.848300][T23776] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 1140.854150][T23776] ? __alloc_skb+0x2b3/0x380 [ 1140.858781][T23776] __alloc_skb+0x2b3/0x380 [ 1140.863234][T23776] ? __pfx___alloc_skb+0x10/0x10 [ 1140.868207][T23776] ? lock_acquire+0x2f/0xb0 [ 1140.872747][T23776] netlink_alloc_large_skb+0x69/0x130 [ 1140.878152][T23776] netlink_sendmsg+0x689/0xd70 [ 1140.882949][T23776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1140.888273][T23776] ____sys_sendmsg+0x9ae/0xb40 [ 1140.893073][T23776] ? copy_msghdr_from_user+0x10b/0x160 [ 1140.898569][T23776] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1140.903895][T23776] ___sys_sendmsg+0x135/0x1e0 [ 1140.908611][T23776] ? __pfx____sys_sendmsg+0x10/0x10 [ 1140.914039][T23776] ? __pfx_lock_release+0x10/0x10 [ 1140.919126][T23776] ? trace_lock_acquire+0x14e/0x1f0 [ 1140.924411][T23776] ? __fget_files+0x206/0x3a0 [ 1140.929141][T23776] __sys_sendmsg+0x16e/0x220 [ 1140.933788][T23776] ? __pfx___sys_sendmsg+0x10/0x10 [ 1140.938964][T23776] do_syscall_64+0xcd/0x250 [ 1140.943681][T23776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.949604][T23776] RIP: 0033:0x7f3af7985d19 [ 1140.954414][T23776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1140.974336][T23776] RSP: 002b:00007f3af86e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1140.982788][T23776] RAX: ffffffffffffffda RBX: 00007f3af7b75fa0 RCX: 00007f3af7985d19 [ 1140.990788][T23776] RDX: 0000000000000010 RSI: 0000000020000e00 RDI: 0000000000000003 [ 1140.998783][T23776] RBP: 00007f3af86e0090 R08: 0000000000000000 R09: 0000000000000000 [ 1141.006784][T23776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1141.014780][T23776] R13: 0000000000000000 R14: 00007f3af7b75fa0 R15: 00007ffca21545e8 [ 1141.022920][T23776] [ 1141.026088][ C0] vkms_vblank_simulate: vblank timer overrun [ 1150.222510][T23835] FAULT_INJECTION: forcing a failure. [ 1150.222510][T23835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1150.327539][T23835] CPU: 1 UID: 0 PID: 23835 Comm: syz.5.4719 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 1150.339941][T23835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1150.352567][T23835] Call Trace: [ 1150.355972][T23835] [ 1150.359011][T23835] dump_stack_lvl+0x16c/0x1f0 [ 1150.363724][T23835] should_fail_ex+0x497/0x5b0 [ 1150.368442][T23835] _copy_to_user+0x32/0xd0 [ 1150.373686][T23835] snd_rawmidi_kernel_read1+0x1e9/0x420 [ 1150.379554][T23835] snd_rawmidi_read+0x57c/0x770 [ 1150.385696][T23835] ? __pfx_snd_rawmidi_read+0x10/0x10 [ 1150.391415][T23835] ? __pfx_default_wake_function+0x10/0x10 [ 1150.397534][T23835] ? bpf_lsm_file_permission+0x9/0x10 [ 1150.404636][T23835] ? security_file_permission+0x71/0x210 [ 1150.410312][T23835] ? __pfx_snd_rawmidi_read+0x10/0x10 [ 1150.415731][T23835] vfs_read+0x1df/0xbe0 [ 1150.419920][T23835] ? __fget_files+0x1fc/0x3a0 [ 1150.424627][T23835] ? __pfx_lock_release+0x10/0x10 [ 1150.429679][T23835] ? __pfx_vfs_read+0x10/0x10 [ 1150.434665][T23835] ? lock_acquire+0x2f/0xb0 [ 1150.439622][T23835] ? __fget_files+0x40/0x3a0 [ 1150.444802][T23835] ? __fget_files+0x206/0x3a0 [ 1150.450031][T23835] ksys_read+0x207/0x250 [ 1150.454466][T23835] ? __pfx_ksys_read+0x10/0x10 [ 1150.460435][T23835] do_syscall_64+0xcd/0x250 [ 1150.464981][T23835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.470904][T23835] RIP: 0033:0x7f29a8985d19 [ 1150.475327][T23835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1150.496512][T23835] RSP: 002b:00007f29a67f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1150.505997][T23835] RAX: ffffffffffffffda RBX: 00007f29a8b75fa0 RCX: 00007f29a8985d19 [ 1150.515000][T23835] RDX: 000000000000002d RSI: 0000000020000080 RDI: 0000000000000004 [ 1150.523431][T23835] RBP: 00007f29a67f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1150.531768][T23835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1150.539746][T23835] R13: 0000000000000000 R14: 00007f29a8b75fa0 R15: 00007ffdb9e63788 [ 1150.547737][T23835] [ 1160.438808][T23929] FAULT_INJECTION: forcing a failure. [ 1160.438808][T23929] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.451763][T23929] CPU: 0 UID: 0 PID: 23929 Comm: syz.0.4744 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 1160.462556][T23929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1160.473509][T23929] Call Trace: [ 1160.476952][T23929] [ 1160.479998][T23929] dump_stack_lvl+0x16c/0x1f0 [ 1160.487014][T23929] should_fail_ex+0x497/0x5b0 [ 1160.492341][T23929] ? fs_reclaim_acquire+0xae/0x150 [ 1160.497497][T23929] should_failslab+0xc2/0x120 [ 1160.502920][T23929] __kmalloc_noprof+0xce/0x4f0 [ 1160.507722][T23929] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1160.513387][T23929] ? tomoyo_realpath_from_path+0xbf/0x710 [ 1160.519137][T23929] tomoyo_realpath_from_path+0xbf/0x710 [ 1160.524720][T23929] ? tomoyo_path_number_perm+0x235/0x5b0 [ 1160.530837][T23929] tomoyo_path_number_perm+0x248/0x5b0 [ 1160.536620][T23929] ? tomoyo_path_number_perm+0x235/0x5b0 [ 1160.542565][T23929] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1160.550293][T23929] ? __pfx_lock_release+0x10/0x10 [ 1160.557178][T23929] ? trace_lock_acquire+0x14e/0x1f0 [ 1160.562852][T23929] ? lock_acquire+0x2f/0xb0 [ 1160.567647][T23929] ? __fget_files+0x40/0x3a0 [ 1160.572279][T23929] ? __fget_files+0x206/0x3a0 [ 1160.576998][T23929] security_file_ioctl+0x9b/0x240 [ 1160.582075][T23929] __x64_sys_ioctl+0xb7/0x200 [ 1160.587025][T23929] do_syscall_64+0xcd/0x250 [ 1160.591921][T23929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.599092][T23929] RIP: 0033:0x7f039c185d19 [ 1160.603728][T23929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1160.623739][T23929] RSP: 002b:00007f039cfe3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1160.632188][T23929] RAX: ffffffffffffffda RBX: 00007f039c375fa0 RCX: 00007f039c185d19 [ 1160.642284][T23929] RDX: 0000000000000007 RSI: 0000000040104d05 RDI: 0000000000000003 [ 1160.650995][T23929] RBP: 00007f039cfe3090 R08: 0000000000000000 R09: 0000000000000000 [ 1160.659457][T23929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1160.667999][T23929] R13: 0000000000000000 R14: 00007f039c375fa0 R15: 00007ffec399db38 [ 1160.676645][T23929] [ 1160.811696][T23929] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1160.843441][T23929] type: 16776960 invalid [ 1177.679180][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.686039][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.985188][T24112] type: 16776960 invalid [ 1184.570187][T24115] type: 16776960 invalid [ 1196.325989][T24211] netlink: 322 bytes leftover after parsing attributes in process `syz.6.4815'. [ 1196.389532][T24211] bond0: entered promiscuous mode [ 1196.455308][T24211] bond_slave_0: entered promiscuous mode [ 1196.568580][T24211] bond_slave_1: entered promiscuous mode [ 1196.655590][T24211] bond0: entered allmulticast mode [ 1196.713628][T24211] bond_slave_0: entered allmulticast mode [ 1196.755942][T24211] bond_slave_1: entered allmulticast mode [ 1203.061716][T24262] raw_sendmsg: syz.0.4827 forgot to set AF_INET. Fix it! [ 1208.608192][ T29] audit: type=1326 audit(4295967351.639:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24306 comm="syz.5.4842" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29a8985d19 code=0x0 [ 1213.784459][T24353] type: 16776960 invalid [ 1214.304160][T24356] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4852'. [ 1214.940282][T24362] netlink: 178 bytes leftover after parsing attributes in process `syz.8.4855'. [ 1222.358148][T24390] delete_channel: no stack [ 1227.913738][T24429] FAULT_INJECTION: forcing a failure. [ 1227.913738][T24429] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.956427][T24429] CPU: 1 UID: 0 PID: 24429 Comm: syz.5.4872 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 1227.967431][T24429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1227.977508][T24429] Call Trace: [ 1227.980799][T24429] [ 1227.983747][T24429] dump_stack_lvl+0x16c/0x1f0 [ 1227.988588][T24429] should_fail_ex+0x497/0x5b0 [ 1227.993329][T24429] ? fs_reclaim_acquire+0xae/0x150 [ 1227.998496][T24429] should_failslab+0xc2/0x120 [ 1228.003223][T24429] __kmalloc_cache_noprof+0x68/0x420 [ 1228.008559][T24429] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1228.015964][T24429] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1228.023373][T24429] genl_start+0x1e7/0x960 [ 1228.027736][T24429] __netlink_dump_start+0x615/0x980 [ 1228.032991][T24429] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 1228.038780][T24429] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1228.045247][T24429] ? __pfx_genl_get_cmd+0x10/0x10 [ 1228.050478][T24429] ? __pfx_genl_start+0x10/0x10 [ 1228.055456][T24429] ? __pfx_genl_dumpit+0x10/0x10 [ 1228.060418][T24429] ? __pfx_genl_done+0x10/0x10 [ 1228.065214][T24429] ? __radix_tree_lookup+0x21f/0x2c0 [ 1228.070532][T24429] genl_rcv_msg+0x470/0x800 [ 1228.075071][T24429] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1228.080125][T24429] ? __pfx_netdev_nl_qstats_get_dumpit+0x10/0x10 [ 1228.086501][T24429] netlink_rcv_skb+0x165/0x410 [ 1228.091315][T24429] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1228.096374][T24429] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1228.101703][T24429] ? down_read+0xc9/0x330 [ 1228.106149][T24429] ? __pfx_down_read+0x10/0x10 [ 1228.110946][T24429] ? netlink_deliver_tap+0x1ae/0xca0 [ 1228.116280][T24429] genl_rcv+0x28/0x40 [ 1228.120295][T24429] netlink_unicast+0x53c/0x7f0 [ 1228.125087][T24429] ? __pfx_netlink_unicast+0x10/0x10 [ 1228.130400][T24429] ? __phys_addr_symbol+0x30/0x80 [ 1228.135517][T24429] ? __check_object_size+0x488/0x710 [ 1228.140850][T24429] netlink_sendmsg+0x8b8/0xd70 [ 1228.145739][T24429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1228.151074][T24429] ____sys_sendmsg+0x9ae/0xb40 [ 1228.156133][T24429] ? copy_msghdr_from_user+0x10b/0x160 [ 1228.161623][T24429] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1228.166946][T24429] ___sys_sendmsg+0x135/0x1e0 [ 1228.171654][T24429] ? __pfx____sys_sendmsg+0x10/0x10 [ 1228.176895][T24429] ? __pfx_lock_release+0x10/0x10 [ 1228.181944][T24429] ? trace_lock_acquire+0x14e/0x1f0 [ 1228.187188][T24429] ? __fget_files+0x206/0x3a0 [ 1228.191899][T24429] __sys_sendmsg+0x16e/0x220 [ 1228.196793][T24429] ? __pfx___sys_sendmsg+0x10/0x10 [ 1228.202048][T24429] do_syscall_64+0xcd/0x250 [ 1228.207913][T24429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.214410][T24429] RIP: 0033:0x7f29a8985d19 [ 1228.218845][T24429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1228.238489][T24429] RSP: 002b:00007f29a67f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1228.246965][T24429] RAX: ffffffffffffffda RBX: 00007f29a8b75fa0 RCX: 00007f29a8985d19 [ 1228.254969][T24429] RDX: 0000000000000010 RSI: 0000000020000e00 RDI: 0000000000000003 [ 1228.262987][T24429] RBP: 00007f29a67f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1228.270985][T24429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1228.278975][T24429] R13: 0000000000000000 R14: 00007f29a8b75fa0 R15: 00007ffdb9e63788 [ 1228.286988][T24429] [ 1229.048207][ T29] audit: type=1807 audit(4294967308.650:41): UNKNOWN=$ res=0 [ 1229.077989][ T29] audit: type=1802 audit(4294967308.670:42): pid=24440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.6.4874" res=0 errno=0 [ 1230.316940][T24439] ima: policy update failed [ 1230.350515][ T29] audit: type=1802 audit(4294967309.930:43): pid=24439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.4874" res=0 errno=0 [ 1230.785148][T24470] netlink: 342 bytes leftover after parsing attributes in process `syz.8.4878'. [ 1232.029541][T24490] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4886'. [ 1232.707912][T24495] MTRR 1 not used [ 1234.256886][T24533] netlink: 342 bytes leftover after parsing attributes in process `syz.5.4892'. [ 1238.117460][T24556] MTRR 1 not used [ 1239.116032][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.122703][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1242.804944][T24588] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4907'. [ 1243.812487][T24595] MTRR 1 not used [ 1244.013441][T24597] Process accounting resumed [ 1248.444660][T24653] netlink: 342 bytes leftover after parsing attributes in process `syz.6.4924'. [ 1250.784718][T24670] netlink: 'syz.8.4929': attribute type 10 has an invalid length. [ 1250.792682][T24670] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4929'. [ 1251.854124][T24677] syz.0.4931 (24677) used obsolete PPPIOCDETACH ioctl [ 1253.609646][T24683] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4932'. [ 1253.855915][T24689] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4932'. [ 1264.261032][T24773] can: request_module (can-proto-0) failed. [ 1266.236478][T24790] FAULT_INJECTION: forcing a failure. [ 1266.236478][T24790] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.374594][T24790] CPU: 1 UID: 0 PID: 24790 Comm: syz.0.4946 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 1266.385409][T24790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1266.395483][T24790] Call Trace: [ 1266.398774][T24790] [ 1266.401723][T24790] dump_stack_lvl+0x16c/0x1f0 [ 1266.406431][T24790] should_fail_ex+0x497/0x5b0 [ 1266.411136][T24790] ? fs_reclaim_acquire+0xae/0x150 [ 1266.416277][T24790] should_failslab+0xc2/0x120 [ 1266.420984][T24790] __kmalloc_noprof+0xce/0x4f0 [ 1266.425780][T24790] ? tomoyo_encode2+0x100/0x3e0 [ 1266.430664][T24790] tomoyo_encode2+0x100/0x3e0 [ 1266.435378][T24790] tomoyo_realpath_from_path+0x1a7/0x710 [ 1266.441045][T24790] ? tomoyo_path_number_perm+0x235/0x5b0 [ 1266.446718][T24790] tomoyo_path_number_perm+0x248/0x5b0 [ 1266.452217][T24790] ? tomoyo_path_number_perm+0x235/0x5b0 [ 1266.457886][T24790] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1266.463931][T24790] ? __pfx_lock_release+0x10/0x10 [ 1266.468978][T24790] ? trace_lock_acquire+0x14e/0x1f0 [ 1266.474216][T24790] ? lock_acquire+0x2f/0xb0 [ 1266.478741][T24790] ? __fget_files+0x40/0x3a0 [ 1266.483360][T24790] ? __fget_files+0x206/0x3a0 [ 1266.488068][T24790] security_file_ioctl+0x9b/0x240 [ 1266.493116][T24790] __x64_sys_ioctl+0xb7/0x200 [ 1266.497836][T24790] do_syscall_64+0xcd/0x250 [ 1266.502368][T24790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.508288][T24790] RIP: 0033:0x7f039c185d19 [ 1266.512721][T24790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1266.532352][T24790] RSP: 002b:00007f039cfe3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1266.540791][T24790] RAX: ffffffffffffffda RBX: 00007f039c375fa0 RCX: 00007f039c185d19 [ 1266.548781][T24790] RDX: 0000000000000000 RSI: 000000000000541b RDI: 000000000000000f [ 1266.556770][T24790] RBP: 00007f039cfe3090 R08: 0000000000000000 R09: 0000000000000000 [ 1266.564759][T24790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1266.572747][T24790] R13: 0000000000000000 R14: 00007f039c375fa0 R15: 00007ffec399db38 [ 1266.580755][T24790] [ 1266.583839][ C1] vkms_vblank_simulate: vblank timer overrun [ 1266.958597][T24790] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1271.163006][T24823] Ignoring unsupported numa_zonelist_order value: [ 1271.163006][T24823] [ 1274.454575][T24859] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4963'. [ 1278.855079][T24911] Ignoring unsupported numa_zonelist_order value: [ 1278.855079][T24911] [ 1283.603271][T12989] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1283.619158][T12989] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1283.628049][T12989] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1283.637027][T12989] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1283.645217][T12989] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1283.653656][T12989] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1285.001112][T24939] chnl_net:caif_netlink_parms(): no params data found [ 1285.762854][T12989] Bluetooth: hci5: command tx timeout [ 1286.203859][T24972] MTRR 1 not used [ 1286.703871][T24939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1286.741948][T24939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.815034][T24939] bridge_slave_0: entered allmulticast mode [ 1286.822192][T24939] bridge_slave_0: entered promiscuous mode [ 1286.887115][T24939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1286.963809][T24939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.971126][T24939] bridge_slave_1: entered allmulticast mode [ 1287.039988][T24939] bridge_slave_1: entered promiscuous mode [ 1287.477131][T24939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1287.526897][T24939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1287.851753][T12989] Bluetooth: hci5: command tx timeout [ 1287.884498][T24939] team0: Port device team_slave_0 added [ 1288.096184][T24939] team0: Port device team_slave_1 added [ 1288.146078][T24984] Ignoring unsupported numa_zonelist_order value: [ 1288.146078][T24984] [ 1288.284977][T24939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1288.308393][T24939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1288.433868][T24939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1288.514326][T24939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1288.542426][T24939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1288.671231][T24939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1288.941870][T24939] hsr_slave_0: entered promiscuous mode [ 1288.968800][T24939] hsr_slave_1: entered promiscuous mode [ 1288.986253][T24939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1289.015334][T24939] Cannot create hsr debugfs directory [ 1289.780388][T24939] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.921674][T12989] Bluetooth: hci5: command tx timeout [ 1290.228315][T24939] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.426153][T24939] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.717317][T24939] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.230087][T24939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1291.315503][T24939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1291.379506][T24939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1291.454484][T24939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1291.772754][T24939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1291.858115][T24939] 8021q: adding VLAN 0 to HW filter on device team0 [ 1291.919978][T14358] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.927129][T14358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1291.978097][T14358] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.985265][T14358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1292.028686][T12989] Bluetooth: hci5: command tx timeout [ 1293.215069][T24939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1293.428915][T24939] veth0_vlan: entered promiscuous mode [ 1293.524964][T24939] veth1_vlan: entered promiscuous mode [ 1293.662353][T24939] veth0_macvtap: entered promiscuous mode [ 1293.698068][T24939] veth1_macvtap: entered promiscuous mode [ 1293.803228][T24939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1293.867487][T24939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.917701][T24939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1293.978268][T24939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.030259][T24939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1294.088355][T24939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.133610][T24939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1294.189954][T24939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.233892][T24939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1294.273692][T24939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.322460][T24939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1294.395914][T24939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1294.440491][T24939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.474498][T24939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1294.516088][T24939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.567958][T24939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1294.609918][T24939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.650738][T24939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1294.702893][T24939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.763732][T24939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1294.824364][T24939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.873922][T24939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1294.913792][T24939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.953893][T24939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1295.003469][T24939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.044704][T24939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1295.106535][T24939] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.156312][T24939] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.216162][T24939] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.263554][T24939] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.744805][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.773766][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.877773][T14357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.906689][T14357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.559552][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.566194][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.459305][T25092] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5012'. [ 1307.691924][T25110] Ignoring unsupported numa_zonelist_order value: [ 1307.691924][T25110] [ 1308.285928][T25115] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5016'. [ 1312.373788][T25184] Ignoring unsupported numa_zonelist_order value: [ 1312.373788][T25184] [ 1317.543594][T25215] Ignoring unsupported numa_zonelist_order value: [ 1317.543594][T25215] [ 1320.857849][T25245] netlink: 266 bytes leftover after parsing attributes in process `syz.6.5048'. [ 1320.900824][T25245] IPv6: NLM_F_CREATE should be specified when creating new route [ 1326.094997][T25298] Ignoring unsupported numa_zonelist_order value: [ 1326.094997][T25298] [ 1326.762415][T25305] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5064'. [ 1329.846848][T25345] netlink: 330 bytes leftover after parsing attributes in process `syz.5.5072'. [ 1329.923537][T25345] net veth1_virt_wifi ›: renamed from virt_wifi0 [ 1330.291193][T25353] Process accounting resumed [ 1331.764199][T25344] ubi: mtd0 is already attached to ubi0 [ 1335.054623][T25383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5084'. [ 1338.576832][T25415] Ignoring unsupported numa_zonelist_order value: [ 1338.576832][T25415] [ 1340.285869][T25422] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4. [ 1340.367181][T25424] FAULT_INJECTION: forcing a failure. [ 1340.367181][T25424] name failslab, interval 1, probability 0, space 0, times 0 [ 1340.483596][T25424] CPU: 1 UID: 0 PID: 25424 Comm: syz.0.5094 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 1340.494654][T25424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1340.504742][T25424] Call Trace: [ 1340.508036][T25424] [ 1340.510983][T25424] dump_stack_lvl+0x16c/0x1f0 [ 1340.515694][T25424] should_fail_ex+0x497/0x5b0 [ 1340.520398][T25424] ? fs_reclaim_acquire+0xae/0x150 [ 1340.525540][T25424] should_failslab+0xc2/0x120 [ 1340.530246][T25424] __kmalloc_noprof+0xce/0x4f0 [ 1340.535111][T25424] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1340.541029][T25424] ? tomoyo_realpath_from_path+0xbf/0x710 [ 1340.546783][T25424] tomoyo_realpath_from_path+0xbf/0x710 [ 1340.552361][T25424] ? tomoyo_path_number_perm+0x235/0x5b0 [ 1340.558035][T25424] tomoyo_path_number_perm+0x248/0x5b0 [ 1340.563525][T25424] ? tomoyo_path_number_perm+0x235/0x5b0 [ 1340.569193][T25424] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1340.575240][T25424] ? __pfx_lock_release+0x10/0x10 [ 1340.580285][T25424] ? trace_lock_acquire+0x14e/0x1f0 [ 1340.585607][T25424] ? lock_acquire+0x2f/0xb0 [ 1340.590136][T25424] ? __fget_files+0x40/0x3a0 [ 1340.595286][T25424] ? __fget_files+0x206/0x3a0 [ 1340.600080][T25424] security_file_ioctl+0x9b/0x240 [ 1340.605858][T25424] __x64_sys_ioctl+0xb7/0x200 [ 1340.610580][T25424] do_syscall_64+0xcd/0x250 [ 1340.615115][T25424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1340.621398][T25424] RIP: 0033:0x7fd010f85d19 [ 1340.625836][T25424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1340.646685][T25424] RSP: 002b:00007fd011df4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1340.655210][T25424] RAX: ffffffffffffffda RBX: 00007fd011175fa0 RCX: 00007fd010f85d19 [ 1340.663198][T25424] RDX: 0000000000000007 RSI: 0000000040104d09 RDI: 0000000000000003 [ 1340.671547][T25424] RBP: 00007fd011df4090 R08: 0000000000000000 R09: 0000000000000000 [ 1340.679547][T25424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1340.687548][T25424] R13: 0000000000000000 R14: 00007fd011175fa0 R15: 00007ffee9497cd8 [ 1340.696176][T25424] [ 1343.544435][T25441] Ignoring unsupported numa_zonelist_order value: [ 1343.544435][T25441] [ 1344.350339][T25424] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1344.426675][T25424] MTRR 1 not used [ 1348.149499][T25484] Ignoring unsupported numa_zonelist_order value: [ 1348.149499][T25484] [ 1350.442785][T25501] type: 16776960 invalid [ 1353.561177][T25528] Ignoring unsupported numa_zonelist_order value: [ 1353.561177][T25528] [ 1354.901094][T25518] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1354.919951][T25518] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1354.968267][T25518] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1354.994342][T25518] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1355.062749][T25518] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1355.185007][T25518] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1355.198850][T25518] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1355.218215][T25518] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1355.447936][T25518] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1355.833532][T12989] Bluetooth: hci2: command 0x041b tx timeout [ 1356.995444][T12989] Bluetooth: hci1: command 0x0c1a tx timeout [ 1357.033741][T12989] Bluetooth: hci0: command 0x0406 tx timeout [ 1357.113502][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 1357.273466][ T5841] Bluetooth: hci5: command 0x0c1a tx timeout [ 1358.466093][T25565] Ignoring unsupported numa_zonelist_order value: [ 1358.466093][T25565] [ 1359.113851][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 1359.201534][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 1359.361465][ T5841] Bluetooth: hci5: command 0x0c1a tx timeout [ 1361.369812][T25597] Ignoring unsupported numa_zonelist_order value: [ 1361.369812][T25597] [ 1361.434174][ T5841] Bluetooth: hci5: command 0x0c1a tx timeout [ 1361.996605][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.003033][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.313810][T25606] Ignoring unsupported numa_zonelist_order value: [ 1362.313810][T25606] [ 1362.885466][T25615] MTRR 1 not used [ 1366.161611][T25639] kexec: Could not allocate control_code_buffer [ 1366.967407][T25671] netlink: 342 bytes leftover after parsing attributes in process `syz.8.5156'. [ 1369.498191][T25692] Ignoring unsupported numa_zonelist_order value: [ 1369.498191][T25692] [ 1370.743878][T25706] Ignoring unsupported numa_zonelist_order value: [ 1370.743878][T25706] [ 1375.870984][T25747] Ignoring unsupported numa_zonelist_order value: [ 1375.870984][T25747] [ 1376.197674][T25755] Ignoring unsupported numa_zonelist_order value: [ 1376.197674][T25755] [ 1376.608541][T25761] Process accounting resumed [ 1378.693538][T25771] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5180'. [ 1380.264799][T25805] type: 16776960 invalid [ 1380.642379][T25816] Process accounting resumed [ 1380.858286][T25815] Ignoring unsupported numa_zonelist_order value: [ 1380.858286][T25815] [ 1381.410944][T25824] Ignoring unsupported numa_zonelist_order value: [ 1381.410944][T25824] [ 1386.966048][T25884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5199'. [ 1390.099972][T25911] Ignoring unsupported numa_zonelist_order value: [ 1390.099972][T25911] [ 1391.736449][T25921] Ignoring unsupported numa_zonelist_order value: [ 1391.736449][T25921] [ 1393.423947][T25934] ecryptfs_miscdev_write: Invalid packet size [232] [ 1395.332837][T25945] MTRR 1 not used [ 1397.245213][T25959] Ignoring unsupported numa_zonelist_order value: [ 1397.245213][T25959] [ 1398.205738][T25966] type: 16776960 invalid [ 1403.837588][T26006] MTRR 1 not used [ 1408.718952][T12989] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1408.729107][T12989] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1408.741160][T12989] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1408.750344][T12989] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1408.758372][T12989] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1408.766335][T12989] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1410.841530][T26049] FAULT_INJECTION: forcing a failure. [ 1410.841530][T26049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1410.873594][T12989] Bluetooth: hci3: command tx timeout [ 1411.013671][T26049] CPU: 1 UID: 0 PID: 26049 Comm: syz.6.5233 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 1411.024498][T26049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1411.034574][T26049] Call Trace: [ 1411.037870][T26049] [ 1411.040817][T26049] dump_stack_lvl+0x16c/0x1f0 [ 1411.045532][T26049] should_fail_ex+0x497/0x5b0 [ 1411.050242][T26049] _copy_from_user+0x2e/0xd0 [ 1411.054866][T26049] move_addr_to_kernel+0x68/0x160 [ 1411.059919][T26049] __sys_bind+0x11c/0x260 [ 1411.064279][T26049] ? __pfx___sys_bind+0x10/0x10 [ 1411.069153][T26049] ? __fget_files+0x206/0x3a0 [ 1411.073872][T26049] ? __pfx_ksys_write+0x10/0x10 [ 1411.078761][T26049] __x64_sys_bind+0x72/0xb0 [ 1411.083285][T26049] ? lockdep_hardirqs_on+0x7c/0x110 [ 1411.088504][T26049] do_syscall_64+0xcd/0x250 [ 1411.093035][T26049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1411.098956][T26049] RIP: 0033:0x7f3af7985d19 [ 1411.103393][T26049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1411.123022][T26049] RSP: 002b:00007f3af57f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1411.131463][T26049] RAX: ffffffffffffffda RBX: 00007f3af7b76080 RCX: 00007f3af7985d19 [ 1411.139456][T26049] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1411.147447][T26049] RBP: 00007f3af57f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1411.155437][T26049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1411.163428][T26049] R13: 0000000000000000 R14: 00007f3af7b76080 R15: 00007ffca21545e8 [ 1411.171434][T26049] [ 1411.174562][ C1] vkms_vblank_simulate: vblank timer overrun [ 1411.281975][T26032] chnl_net:caif_netlink_parms(): no params data found [ 1412.346226][T26055] MTRR 1 not used [ 1412.953678][T12989] Bluetooth: hci3: command tx timeout [ 1413.072040][T26032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.093239][T26032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.144165][T26032] bridge_slave_0: entered allmulticast mode [ 1413.151348][T26032] bridge_slave_0: entered promiscuous mode [ 1413.234590][T26032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.243102][T26032] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.307659][T26032] bridge_slave_1: entered allmulticast mode [ 1413.334732][T26032] bridge_slave_1: entered promiscuous mode [ 1413.364955][T26069] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5243'. [ 1413.590265][T26069] macsec0: entered promiscuous mode [ 1413.601639][T26032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1413.706366][T26032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1414.129975][T26032] team0: Port device team_slave_0 added [ 1414.176205][T26032] team0: Port device team_slave_1 added [ 1415.035615][T12989] Bluetooth: hci3: command tx timeout [ 1416.751199][T25880] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 1417.105171][T26032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1417.112604][T26032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1417.213437][T12989] Bluetooth: hci3: command tx timeout [ 1417.433409][T26032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1417.492077][ T29] audit: type=1807 audit(4294967340.420:44): UNKNOWN=$ res=0 [ 1417.500371][T26032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1417.562002][ T29] audit: type=1802 audit(4294967340.420:45): pid=26131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.6.5247" res=0 errno=0 [ 1417.580513][T26032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1417.619758][T26135] ima: policy update failed [ 1417.688174][ T29] audit: type=1802 audit(4294967340.600:46): pid=26135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.5247" res=0 errno=0 [ 1417.761138][T26032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1418.844885][T26139] HSR: entered promiscuous mode [ 1418.926785][T26032] hsr_slave_0: entered promiscuous mode [ 1418.994368][T26032] hsr_slave_1: entered promiscuous mode [ 1419.089925][T26032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1419.129349][T26032] Cannot create hsr debugfs directory [ 1419.989373][T26149] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5251'. [ 1420.361279][T26032] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1420.467840][T26032] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1420.609730][T26032] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1420.774037][T26032] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1421.381121][T26032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1421.498265][T26032] 8021q: adding VLAN 0 to HW filter on device team0 [ 1421.565689][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.573127][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1421.707928][ T4926] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.715248][ T4926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1421.895551][T26032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1422.700633][ T29] audit: type=1807 audit(4294967345.629:47): UNKNOWN=$ res=0 [ 1422.728623][ T29] audit: type=1802 audit(4294967345.639:48): pid=26174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.8.5257" res=0 errno=0 [ 1422.774577][T26177] ima: policy update failed [ 1422.863628][ T29] audit: type=1802 audit(4294967345.799:49): pid=26177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.5257" res=0 errno=0 [ 1423.446281][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.452946][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.550226][T26032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1423.967723][T26188] Ignoring unsupported numa_zonelist_order value: [ 1423.967723][T26188] [ 1424.700169][T26200] netlink: 'syz.0.5262': attribute type 2 has an invalid length. [ 1424.768675][T26200] netlink: 'syz.0.5262': attribute type 2 has an invalid length. [ 1424.862606][T26032] veth0_vlan: entered promiscuous mode [ 1424.911678][T26032] veth1_vlan: entered promiscuous mode [ 1425.011953][T26032] veth0_macvtap: entered promiscuous mode [ 1425.045882][T26032] veth1_macvtap: entered promiscuous mode [ 1425.100409][T26032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1425.139713][T26032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.179217][T26032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1425.209861][T26032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.255511][T26032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1425.285276][T26032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.317146][T26032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1425.339133][T26032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.370090][T26032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1425.412444][T26032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.453126][T26032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1425.503431][T26032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.526179][T26032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1425.546635][T26032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1425.567459][T26032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.578015][T26032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1425.588974][T26032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.599136][T26032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1425.610431][T26032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.622079][T26032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1425.632689][T26032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.642594][T26032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1425.653093][T26032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.663256][T26032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1425.673947][T26032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.685015][T26032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1425.696263][T26032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.706933][T26032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1425.718146][T26032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.729323][T26032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1425.914660][T26032] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.943501][T26032] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.952263][T26032] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.995021][T26032] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.581247][T26222] ecryptfs_miscdev_write: Invalid packet size [232] [ 1426.861722][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.895459][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.977337][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.996918][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1427.760002][T26234] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5268'. [ 1429.909775][T26260] MTRR 1 not used [ 1430.483032][T26265] ecryptfs_miscdev_write: Invalid packet size [232] [ 1432.606387][T26275] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5280'. [ 1432.721853][T26275] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 1434.436096][T26337] ecryptfs_miscdev_write: Invalid packet size [232] [ 1437.470439][T26369] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1438.678742][T26374] ecryptfs_miscdev_write: Invalid packet size [232] [ 1439.589218][T26382] type: 16776960 invalid [ 1440.520831][T26395] FAULT_INJECTION: forcing a failure. [ 1440.520831][T26395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1440.612113][T26395] CPU: 1 UID: 0 PID: 26395 Comm: syz.9.5308 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 1440.622930][T26395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1440.633006][T26395] Call Trace: [ 1440.636306][T26395] [ 1440.639346][T26395] dump_stack_lvl+0x16c/0x1f0 [ 1440.644064][T26395] should_fail_ex+0x497/0x5b0 [ 1440.648781][T26395] _copy_from_user+0x2e/0xd0 [ 1440.653413][T26395] do_sock_getsockopt+0x319/0x870 [ 1440.658470][T26395] ? trace_lock_acquire+0x70/0x1f0 [ 1440.663625][T26395] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1440.669198][T26395] ? lock_acquire+0x2f/0xb0 [ 1440.673726][T26395] ? __fget_files+0x40/0x3a0 [ 1440.678352][T26395] ? 0xffffffffff600000 [ 1440.682535][T26395] ? __fget_files+0x206/0x3a0 [ 1440.687248][T26395] __sys_getsockopt+0x12f/0x260 [ 1440.692136][T26395] ? 0xffffffffff600000 [ 1440.696315][T26395] __x64_sys_getsockopt+0xbd/0x160 [ 1440.701457][T26395] ? do_syscall_64+0x91/0x250 [ 1440.706164][T26395] ? lockdep_hardirqs_on+0x7c/0x110 [ 1440.711406][T26395] do_syscall_64+0xcd/0x250 [ 1440.715951][T26395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.721879][T26395] RIP: 0033:0x7f83ba385d19 [ 1440.726503][T26395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1440.747373][T26395] RSP: 002b:00007f83b81f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1440.756174][T26395] RAX: ffffffffffffffda RBX: 00007f83ba576080 RCX: 00007f83ba385d19 [ 1440.764176][T26395] RDX: 0000000000002714 RSI: 0000000000000114 RDI: 0000000000000003 [ 1440.772175][T26395] RBP: 00007f83b81f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1440.780955][T26395] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000001 [ 1440.789215][T26395] R13: 0000000000000000 R14: 00007f83ba576080 R15: 00007ffeea30a628 [ 1440.797226][T26395] ? 0xffffffffff600000 [ 1440.801420][T26395] [ 1442.881132][T26411] ecryptfs_miscdev_write: Invalid packet size [232] [ 1445.052604][T26399] kexec: Could not allocate control_code_buffer [ 1450.487279][T26456] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5324'. [ 1455.374072][T26506] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5344'. [ 1455.688685][T26503] netlink: 342 bytes leftover after parsing attributes in process `syz.6.5335'. [ 1457.655519][T26523] ecryptfs_miscdev_write: Invalid packet size [232] [ 1462.045584][T26574] Process accounting resumed [ 1462.494566][T26575] netlink: 342 bytes leftover after parsing attributes in process `syz.8.5348'. [ 1463.182026][T26594] ecryptfs_miscdev_write: Invalid packet size [232] [ 1466.520558][T26632] ecryptfs_miscdev_write: Invalid packet size [232] [ 1466.620594][T26630] netlink: 342 bytes leftover after parsing attributes in process `syz.0.5362'. [ 1469.297784][T26655] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1473.119715][T26692] MTRR 1 not used [ 1476.368478][T26717] ecryptfs_miscdev_write: Invalid packet size [232] [ 1477.569105][T26732] ecryptfs_miscdev_write: Invalid packet size [232] [ 1479.004002][T26742] netlink: 342 bytes leftover after parsing attributes in process `syz.9.5393'. [ 1482.421622][T26768] ecryptfs_miscdev_write: Invalid packet size [232] [ 1483.721027][T26780] ecryptfs_miscdev_write: Invalid packet size [232] [ 1484.876341][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.883092][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.209943][T26813] ecryptfs_miscdev_write: Invalid packet size [232] [ 1491.960311][T26845] ecryptfs_miscdev_write: Invalid packet size [232] [ 1494.158228][T26883] ecryptfs_miscdev_write: Invalid packet size [232] [ 1495.596785][T26899] nl80211: entered promiscuous mode [ 1495.663630][T26899] MTRR 1 not used [ 1496.308556][T26911] FAULT_INJECTION: forcing a failure. [ 1496.308556][T26911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1496.381542][T26911] CPU: 1 UID: 0 PID: 26911 Comm: syz.9.5451 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 1496.392365][T26911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1496.402438][T26911] Call Trace: [ 1496.405730][T26911] [ 1496.408675][T26911] dump_stack_lvl+0x16c/0x1f0 [ 1496.413385][T26911] should_fail_ex+0x497/0x5b0 [ 1496.418095][T26911] _copy_from_user+0x2e/0xd0 [ 1496.422719][T26911] do_sock_getsockopt+0x319/0x870 [ 1496.427767][T26911] ? trace_lock_acquire+0x70/0x1f0 [ 1496.432923][T26911] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1496.438500][T26911] ? lock_acquire+0x2f/0xb0 [ 1496.443030][T26911] ? __fget_files+0x40/0x3a0 [ 1496.447660][T26911] ? 0xffffffffff600000 [ 1496.451836][T26911] ? __fget_files+0x206/0x3a0 [ 1496.456547][T26911] __sys_getsockopt+0x12f/0x260 [ 1496.461433][T26911] ? 0xffffffffff600000 [ 1496.465614][T26911] __x64_sys_getsockopt+0xbd/0x160 [ 1496.470768][T26911] ? do_syscall_64+0x91/0x250 [ 1496.475473][T26911] ? lockdep_hardirqs_on+0x7c/0x110 [ 1496.480697][T26911] do_syscall_64+0xcd/0x250 [ 1496.485231][T26911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.491150][T26911] RIP: 0033:0x7f83ba385d19 [ 1496.495583][T26911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1496.515217][T26911] RSP: 002b:00007f83b81f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1496.523660][T26911] RAX: ffffffffffffffda RBX: 00007f83ba576080 RCX: 00007f83ba385d19 [ 1496.531653][T26911] RDX: 0000000000002714 RSI: 0000000000000114 RDI: 0000000000000004 [ 1496.539648][T26911] RBP: 00007f83b81f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1496.547642][T26911] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000001 [ 1496.555638][T26911] R13: 0000000000000000 R14: 00007f83ba576080 R15: 00007ffeea30a628 [ 1496.563640][T26911] ? 0xffffffffff600000 [ 1496.567824][T26911] [ 1497.611629][T26920] ecryptfs_miscdev_write: Invalid packet size [232] [ 1500.144853][T26947] mkiss: ax0: crc mode is auto. [ 1501.872418][T26962] ecryptfs_miscdev_write: Invalid packet size [232] [ 1510.098229][T27025] Invalid ELF header magic: != ELF [ 1511.467502][T27046] ecryptfs_miscdev_write: Invalid packet size [232] [ 1515.866549][T27081] ecryptfs_miscdev_write: Invalid packet size [232] [ 1518.140295][T27109] ovs_: entered promiscuous mode [ 1519.494211][T27129] ecryptfs_miscdev_write: Invalid packet size [232] [ 1523.573600][T27186] ecryptfs_miscdev_write: Invalid packet size [232] [ 1524.850616][T27193] block nbd0: not configured, cannot reconfigure [ 1525.708339][T27191] Invalid ELF header magic: != ELF [ 1528.158430][T27225] ecryptfs_miscdev_write: Invalid packet size [232] [ 1530.093154][T27268] ecryptfs_miscdev_write: Invalid packet size [232] [ 1533.518095][T27281] Bluetooth: hci3: command 0x0406 tx timeout [ 1536.385481][T27317] ecryptfs_miscdev_write: Invalid packet size [232] [ 1544.759156][T27412] netlink: 326 bytes leftover after parsing attributes in process `syz.9.5600'. [ 1545.046779][T27414] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5600'. [ 1546.328446][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.337429][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.884198][T27521] netlink: 122 bytes leftover after parsing attributes in process `syz.9.5628'. [ 1561.883643][T27573] netlink: zone id is out of range [ 1564.383930][T27592] netlink: 334 bytes leftover after parsing attributes in process `syz.0.5650'. [ 1570.070268][T27635] MTRR 1 not used [ 1571.729325][T27653] : Can't lookup blockdev [ 1584.751027][T27781] CIFS: VFS: Invalid SecurityFlags: [ 1586.895122][T27798] [ 1586.897515][T27798] ====================================================== [ 1586.904552][T27798] WARNING: possible circular locking dependency detected [ 1586.911657][T27798] 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 Not tainted [ 1586.918868][T27798] ------------------------------------------------------ [ 1586.925889][T27798] syz.8.5712/27798 is trying to acquire lock: [ 1586.931961][T27798] ffff88806153f5d8 (sk_lock-AF_INET){+.+.}-{0:0}, at: sockopt_lock_sock+0x54/0x70 [ 1586.941235][T27798] [ 1586.941235][T27798] but task is already holding lock: [ 1586.948608][T27798] ffffffff8fabf2c8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xf9/0x38c0 [ 1586.958142][T27798] [ 1586.958142][T27798] which lock already depends on the new lock. [ 1586.958142][T27798] [ 1586.968639][T27798] [ 1586.968639][T27798] the existing dependency chain (in reverse order) is: [ 1586.977661][T27798] [ 1586.977661][T27798] -> #1 (rtnl_mutex){+.+.}-{4:4}: [ 1586.984900][T27798] __mutex_lock+0x19b/0xa60 [ 1586.989949][T27798] smc_vlan_by_tcpsk+0x251/0x620 [ 1586.995427][T27798] __smc_connect+0x466/0x4890 [ 1587.000636][T27798] smc_connect_work+0x54f/0xae0 [ 1587.006020][T27798] process_one_work+0x958/0x1b30 [ 1587.011506][T27798] worker_thread+0x6c8/0xf00 [ 1587.016823][T27798] kthread+0x2c1/0x3a0 [ 1587.021715][T27798] ret_from_fork+0x45/0x80 [ 1587.027034][T27798] ret_from_fork_asm+0x1a/0x30 [ 1587.032380][T27798] [ 1587.032380][T27798] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1587.040156][T27798] __lock_acquire+0x249e/0x3c40 [ 1587.045563][T27798] lock_acquire.part.0+0x11b/0x380 [ 1587.051209][T27798] lock_sock_nested+0x3a/0xf0 [ 1587.056431][T27798] sockopt_lock_sock+0x54/0x70 [ 1587.061746][T27798] do_ip_setsockopt+0x101/0x38c0 [ 1587.067326][T27798] ip_setsockopt+0x59/0xf0 [ 1587.072309][T27798] dccp_setsockopt+0x108/0xb20 [ 1587.077805][T27798] do_sock_setsockopt+0x222/0x480 [ 1587.083408][T27798] __sys_setsockopt+0x1a0/0x230 [ 1587.088811][T27798] __x64_sys_setsockopt+0xbd/0x160 [ 1587.094469][T27798] do_syscall_64+0xcd/0x250 [ 1587.099515][T27798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1587.105963][T27798] [ 1587.105963][T27798] other info that might help us debug this: [ 1587.105963][T27798] [ 1587.116461][T27798] Possible unsafe locking scenario: [ 1587.116461][T27798] [ 1587.124091][T27798] CPU0 CPU1 [ 1587.129465][T27798] ---- ---- [ 1587.134837][T27798] lock(rtnl_mutex); [ 1587.138839][T27798] lock(sk_lock-AF_INET); [ 1587.145803][T27798] lock(rtnl_mutex); [ 1587.152329][T27798] lock(sk_lock-AF_INET); [ 1587.156760][T27798] [ 1587.156760][T27798] *** DEADLOCK *** [ 1587.156760][T27798] [ 1587.165269][T27798] 1 lock held by syz.8.5712/27798: [ 1587.171015][T27798] #0: ffffffff8fabf2c8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xf9/0x38c0 [ 1587.180465][T27798] [ 1587.180465][T27798] stack backtrace: [ 1587.186364][T27798] CPU: 1 UID: 0 PID: 27798 Comm: syz.8.5712 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 1587.197146][T27798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1587.207214][T27798] Call Trace: [ 1587.210500][T27798] [ 1587.213439][T27798] dump_stack_lvl+0x116/0x1f0 [ 1587.218404][T27798] print_circular_bug+0x41c/0x610 [ 1587.223461][T27798] check_noncircular+0x31a/0x400 [ 1587.229731][T27798] ? __pfx_check_noncircular+0x10/0x10 [ 1587.235222][T27798] ? lockdep_lock+0xc6/0x200 [ 1587.239834][T27798] ? __pfx_lockdep_lock+0x10/0x10 [ 1587.244903][T27798] ? finish_task_switch.isra.0+0x160/0xcc0 [ 1587.250739][T27798] __lock_acquire+0x249e/0x3c40 [ 1587.255632][T27798] ? __pfx___lock_acquire+0x10/0x10 [ 1587.260869][T27798] ? rcu_is_watching+0x12/0xc0 [ 1587.265667][T27798] lock_acquire.part.0+0x11b/0x380 [ 1587.270802][T27798] ? sockopt_lock_sock+0x54/0x70 [ 1587.275766][T27798] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1587.281462][T27798] ? rcu_is_watching+0x12/0xc0 [ 1587.286285][T27798] ? trace_lock_acquire+0x14e/0x1f0 [ 1587.292130][T27798] ? plist_check_prev_next+0x12a/0x1a0 [ 1587.297712][T27798] ? sockopt_lock_sock+0x54/0x70 [ 1587.302680][T27798] ? lock_acquire+0x2f/0xb0 [ 1587.307198][T27798] ? sockopt_lock_sock+0x54/0x70 [ 1587.312163][T27798] lock_sock_nested+0x3a/0xf0 [ 1587.316863][T27798] ? sockopt_lock_sock+0x54/0x70 [ 1587.321822][T27798] sockopt_lock_sock+0x54/0x70 [ 1587.326606][T27798] do_ip_setsockopt+0x101/0x38c0 [ 1587.331567][T27798] ? __futex_wait+0x324/0x3c0 [ 1587.336350][T27798] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1587.341914][T27798] ? try_to_wake_up+0x158/0x1490 [ 1587.346879][T27798] ip_setsockopt+0x59/0xf0 [ 1587.351339][T27798] dccp_setsockopt+0x108/0xb20 [ 1587.356134][T27798] ? __pfx_dccp_setsockopt+0x10/0x10 [ 1587.361434][T27798] ? sock_common_setsockopt+0x2e/0xf0 [ 1587.366833][T27798] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1587.372749][T27798] do_sock_setsockopt+0x222/0x480 [ 1587.377808][T27798] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1587.383387][T27798] ? lock_acquire+0x2f/0xb0 [ 1587.387919][T27798] __sys_setsockopt+0x1a0/0x230 [ 1587.392814][T27798] __x64_sys_setsockopt+0xbd/0x160 [ 1587.398017][T27798] ? syscall_trace_enter+0x5e/0x260 [ 1587.403244][T27798] do_syscall_64+0xcd/0x250 [ 1587.407816][T27798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1587.413769][T27798] RIP: 0033:0x7f2b94f85d19 [ 1587.418205][T27798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1587.437829][T27798] RSP: 002b:00007f2b95e24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1587.446259][T27798] RAX: ffffffffffffffda RBX: 00007f2b95176080 RCX: 00007f2b94f85d19 [ 1587.454431][T27798] RDX: 0000000000000024 RSI: 0000000000000000 RDI: 0000000000000003 [ 1587.462427][T27798] RBP: 00007f2b95001a20 R08: 0000000000000028 R09: 0000000000000000 [ 1587.470420][T27798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1587.478497][T27798] R13: 0000000000000000 R14: 00007f2b95176080 R15: 00007fff00cb51b8 [ 1587.486580][T27798]