last executing test programs: 10m20.927244974s ago: executing program 0 (id=80): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xffffffffffffffff, @new_prog_fd, 0x5, @old_prog_fd=0xffffffffffffffff}, 0x281) ioperm$auto(0x7, 0x6, 0xffffffffffff4064) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) mknod$auto(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0xa240, 0x15e) open(&(0x7f0000000000)='./file1\x00', 0x161342, 0x194) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x40005, 0x0) mmap$auto(0x7, 0x9fb, 0x4, 0x892, 0x0, 0x8000) madvise$auto(0x108000, 0x800034, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vxcan1\x00'}) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, r2, 0x13, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x48050) r5 = socket(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(r1, 0x0, 0x4) madvise$auto(0x0, 0x10001, 0x100000003) 10m19.123664514s ago: executing program 0 (id=87): ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000000c0)={0x1, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500", 0x8}) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x1, "36a2662b59209f6bd4aafa4ed15fdb9c791daf044ae6ff089930def80ce28999", 0x2}) newfstatat$auto(0xffffffffffffff9c, 0x0, &(0x7f0000000380)={0x5, 0x6, 0xa9, 0x4, 0x0, 0xee01, 0x0, 0x6, 0x3, 0x0, 0x4, 0x8, 0xbc, 0x1, 0x4, 0x0, 0x53}, 0x1) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000040)=0x8) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40020204}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20048890}, 0x24004855) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040)=[0x404], 0x1}, 0x7e) socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) io_setup$auto(0x1, 0x0) kexec_load$auto(0x9, 0x9, &(0x7f00000001c0)={@buf=&(0x7f0000000180)=[0x7, 0x7ff, 0x8, 0x9, 0x3ff, 0x9, 0x7], 0x2, 0x8, 0x10001}, 0x4) io_pgetevents$auto(0x4, 0x8, 0xa31f, 0x0, 0x0, 0x0) sendmsg$auto_OVS_DP_CMD_DEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd7000fedbdf250200000008"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/scsi/sg/def_reserved_size\x00', 0xc8000, 0x0) recvmmsg$auto(0x5, 0x0, 0x10000, 0x0, 0x0) fchdir$auto(0xffffffffffffffff) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x10c) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)=""/5, 0x5) poll$auto(&(0x7f0000000000)={r1, 0x6, 0x8}, 0x4, 0x2318) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x151c}, 0x1, 0x0, 0x0, 0x24044091}, 0x80) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="53010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 10m18.56561437s ago: executing program 0 (id=89): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x40, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid_for_children\x00') close_range$auto(0x0, r1, 0x2) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/thread-self/smaps\x00', 0x42000, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) close_range$auto(0x2, r1, 0x0) io_uring_setup$auto(0x18, 0x0) keyctl$auto(0x2000000000000016, 0x1000, 0xfffffffffffffffb, 0x103, 0x7ffffffd) socket(0x2b, 0x1, 0x1) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000000c0)={0x1, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500", 0x8}) ioctl$auto_SW_SYNC_GET_DEADLINE(r2, 0xc0105702, &(0x7f0000000040)={0x9, 0x0, r1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1700", @ANYBLOB="45039f28794a67207ad752"], 0x1ac}}, 0x40000) io_uring_register$auto(0x2, 0x11, 0x0, 0x0) listen$auto(0x3, 0x81) unshare$auto(0x52e4) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000004140), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fddbdf251bee05ba0000000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) r6 = fcntl$getown(r0, 0x9) r7 = getpgrp(0x0) r8 = gettid() r9 = gettid() sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000001540)={0x2a90, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x1424, 0x30, 0x0, 0x1, [@nested={0x8, 0xe2, 0x0, 0x1, [@nested={0x4, 0xa}]}, @generic="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", @nested={0x2be, 0x73, 0x0, 0x1, [@generic="bca2ea7077e7fb347dc89daa706abea44926971e5c41fc0500265e56dd83b105b56a7a951dacdb6d179425b191e734d77d1c9fa734d4740cf0d46a83c700d8f57aea0f5fb6156d301d0c4fb22ca14c01de57a97a41cd6eb682f344357c056fd63527bf2dc2f744386d1226d6034320e3f1916566ebfb99d3e936fc58e69f6ea4b2c93b51e27c13ddbf74969705e928a551d1c3852a818380f35c8b12801cb40b04615ab52a63e6fa321fd9ba96139fb15e35a7bcdf1c08cfa177342b22f3d792f01282cdc1d4dda0eb927d", @nested={0x4, 0x144}, @nested={0x4, 0x56}, @typed={0x8, 0x3f, 0x0, 0x0, @pid=r6}, @generic="f71323b2827fc32fcec9621eb9a08fff5b22e05b186cb42c64b532f0a0062660d5c79e741fad9cb64c3c983f4eb8d656007a440bc2f0a043e47c94ec0512f0d08993d4ceb7118e8ea982d71765b2dd4b19dde76f47bc23983469acd0871ed27a11a4291079ddc9dd1b4ebe527ee194a8ec8e103ff6c0cc92e42287a90f2e3a549e0ec99741381f307a033c25d8f81ff1c7fc97c626ec54461e1e633a57c92052b20f1356619144784ccbdd277a03b5d32b769e7043ccc235a7648df71f42018376b3fd859aef18606fd933faa3", @typed={0x23, 0x3b, 0x0, 0x0, @str='/sys/kernel/debug/sync/sw_sync\x00'}, @generic="47255638b902305b8a8289a6cdb8537428a669f64ebbccfed2352afdf03b1448706ee81ff1ab58b0f6a6cb50db8d8a2e544f42636cf024f3bd23275957cc0052e87d5bd0ee6eb3509a7c73c9002589e7954c8e742b8bbfeac80c4dc93f2c40473f46d3acdb089dd9e639c5ff87c384959fed144df5459b93ff67f6ffe093a1c93836a908bbc857e62fb75816fc065640f1dd77c3383b486dbbdacede42ad152f0192995d5709a55da39b39a97948383bf66311d2baae71cb16ac2c204f6dc0ecd9d1156bb20cf67c3c5a84632b6d1567f81622300ab98e972efffbfa", @generic="a47f738b095336cb323b10faa3b98a63fa63"]}, @nested={0x154, 0x6c, 0x0, 0x1, [@generic="e0431e793498fba08a5c745a219c2bb18ac56fcba8097c875adc0e037d0358cad391ddb26e58a871f661b8305d1ccaf6aa5b10204654986838cdff756cc810b8ad212be23275efbee6c89bc412ecd414f48c1cee9725bd836c04995e77c60e1c14f506273a8abfe57b6ae2aab86bfcfc9a9c63f35656d300f5d2597ed2c7d890ba406ce52771a7c71b562f", @generic="fe4c41583892cce816e1c49b5c1c0d48eda75c6652b23e62ac5bf50971260b7681fbcd06589314a263cb96fee680b63e654d4b2bc6eca5a689668359a556aef766d372ca24eaf3532254b29fd48eee0ffbf4343a7227c65a1b326b600c1b49b992", @nested={0x4, 0xab}, @typed={0x5e, 0x46, 0x0, 0x0, @binary="9b90c603ef86cbae84ff34e576cb5e228ddea2927984d7827aab1821dabc60de199e555ace5a2ad3cd896509290cc8ec3eb9975f95ea13e939abdf87d343d93257502d6e4e9fc3b36882a4fba1821ccf1e6329c3582c71b15b1a"}]}, @typed={0x4, 0xcc}]}, @NL802154_ATTR_SEC_LEVEL={0x1657, 0x2d, 0x0, 0x1, [@nested={0xd7, 0x13, 0x0, 0x1, [@nested={0x4, 0x1c}, @generic="5218959b853e7d898c8b625135beb408803b9c677b410f251c33d1d43da9f4c6deca22962402573b6538b7c93a14d9056e1c3f3cb2cfc3e50779c3fbed394014e2ea421c65ea50a4364299300ca8742ca6bbab09846af7eb8bf4653be611b1365f02a288ed452fea5df6cec28f86d386b724c0f0d02738776e65639e90f6468abba0b06b7148bce7525d46b7875615a09882c2da5ee76305bee69a3e7b90cd482c944af70c18994f9ade6dcf5340156e5c5fd8fa274eb43a191f4e0e4d9c8f5590eda74ac9e03b7713242ba3f686fb"]}, @generic="92be4a6084ddfc77cae58b5f2421b0f51cf20b4384faed15226ecd541d684d1f70e1f1fb65ea2aa17e29ca", @nested={0x18, 0xef, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0x4, 0x26}, @typed={0x8, 0xd7, 0x0, 0x0, @u32=0x4}]}, @typed={0x4, 0x7, 0x0, 0x0, @binary}, @nested={0x9b, 0xe4, 0x0, 0x1, [@typed={0x4, 0x10e}, @generic="799bc2a238c3f0990b5d98925f6c3b61def19cc8e819e7291af057eeb6a8eeb6d4b3aeca57e2ec31450633c5169e6bdfb930b9", @generic="08f3bad7757a33765115b9dbce79eeb894a347c7b6581833e2082d6d61087ca02f89ef8c64f9f544d1657cb9e043059d8294304842da8fe32bfedfd3b0a32b6c", @nested={0x4, 0x26}, @typed={0x8, 0xa0, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x5c}, @nested={0x4, 0x117}, @typed={0xc, 0x148, 0x0, 0x0, @u64=0x10001}]}, @generic="f5df8de55bbce712fb71c1a755e48457", @nested={0x1a8, 0x9d, 0x0, 0x1, [@generic="5a684f95e6480326a7a25be91fed320bc714d0adb6a7f6ffe7ee87be2971801b25389cf01fad9b6886c49a3d4dbb7bb12418b0b305a238054dd86b97fea1bbbba2819be99bd17418a82bb1a1ed88046856a226b19cb06879d0a0e70a6bc4d773616c1d15bbd4ae78e93c62f6d9e7c39ec35be0711e02457bf4c1e02b24179645cfb5fc870391d8d7effde7db02575449df5c8b326cb337c81b4ad68a8f5823459bb98a97763688", @typed={0x8, 0x131, 0x0, 0x0, @pid=r7}, @nested={0x4, 0x109}, @generic="962a1e9cc066d695eab5fb79a273f77884d4d915067da59e2a59083c879dd745e09ae389c5574c067a05344de8e9049750b0f2c3b711f694648ef579d83087e2adee51492084b4f66b9df2190ae1b729110eff10fe72746fb25697885a9f80950e3bbf651648887bfa3aba902d503af1cd87eb171c3cc74f3e6c59a38848f94233a86a0dc8b9d149cb219d66ae7447499072f60bfa0672f14e89d0d4023e25c1093d5372819d37efa4610e683b6676517be13d97f9a41bbe23f3de611568c36470ca73b7e501c22b7144a1cd1234212387ea77e5a1b977c19d297860cf290356f0b9fe190746c0bfbf", @nested={0x4, 0x112}, @nested={0x4, 0x6e}]}, @nested={0x1101, 0x12d, 0x0, 0x1, [@generic="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", @typed={0x8, 0x42, 0x0, 0x0, @pid=r8}, @typed={0x8, 0xf5, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4, 0xdd}, @typed={0x14, 0xc1, 0x0, 0x0, @ipv6=@empty}, @generic="2ba5bf3f29dd1bbf26b9e331f2a183003ce62e8775bf2b57a90970e29fb837a46ae826e56bd30bccaf8171bd3de58febbefb9d066da174cea6b408e13753da65f846cc29784e44a67a61123e3be7ceb10c8026875b1d5ff796084c9b4e975665c2bebec29378d39fe166e1756059f08dd075a7b5391c176da9b16a6c984aea02f0398dd08d5995a4e51a4fb957a36b0dc5ddc698a5a929143975daf84ae84d868a7e6e4e74a6b726ca6072d04e0bbed9c03d7b5cd6fd950889b41c6b87f34cfd1b1475ddb029705f351bf4f015456ed7d36c9ed826"]}, @nested={0x1d2, 0x2b, 0x0, 0x1, [@nested={0x4, 0x10d}, @generic="7c32584390d73c1095db6779a67c8d676c8879733d7461b305f34138ca670e16771b1d099f07dd1d1ece4e76672d71a7d42acfd06a95537c1e1876883ac890a6f1bd35e4326aecdd38ff67", @generic="c46b4f09b7971ffbd906cffd1015", @generic="c0bcc9d405f0d1cd3acdf21e0725c6f21dc2dd782a9c1c6830758859cc9df3c4bad5923787f6aa9e12c9da8f79403ae9dd71e18ce8a2dd15a9b28bdda514b7b6af9099957b875e70e92ef65a324ce4eea438efa441684b268cac62e2c193c69256a1d185816b5f41587f436a9c6efd7e39f933157d43b8a11fb5108661cf6c9410cebb887820ad62ce89cdce0f5ba3202f707f6baddcbfe979", @nested={0x4, 0x7d}, @generic="e6b906c2dc683e26a381722e82ab2bf473f011cb93010e969a407fe3eae89ea684084fe6fe650868b9328481cb992ecf19f4b740d03d5459b1ae8b9920a62354397b8e8b209fc6409fdbc29885c519da44e4ff4a887ead5b2e5019c6acb006ea91f069c70d119d23bc95e86e94441aafe9f9f4ac01391868761dffc3a7b211dc94871e91caae3dabfc5f3f7a5e6c627daadf785c00367e1f79c830dd2aee0f7e8a78593fe6874b0b901488e062a4ffadb58fa9586d7087ccbd564570cbc8c3688683426b2e5de25de8bc6390", @typed={0x8, 0x4d, 0x0, 0x0, @pid=r9}]}, @typed={0x6, 0x4f, 0x0, 0x0, @str='\xc8\x00'}]}]}, 0x2a90}, 0x1, 0x0, 0x0, 0x48100}, 0x8055) accept$auto(0x3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 10m18.070676256s ago: executing program 0 (id=92): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x4, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) msgctl$auto(0x0, 0x3, 0x0) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x8) close_range$auto(r0, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x23, 0x7, 0x2008, 0x0, 0x0) ptrace$auto(0x10, 0x1, 0x3, 0x8) mremap$auto(0x8000000000000000, 0x8, 0x8c76, 0x3, 0x277) connect$auto(0x3, 0x0, 0x55) 10m17.546890234s ago: executing program 0 (id=95): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x80001, 0x0) ioctl$auto_I2C_RDWR(r0, 0x707, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x800000002, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x202000c, 0x3, 0xeb3, 0x0, 0x8000) mmap$auto(0xfffffffffffffffe, 0x6, 0x3, 0xeb1, 0xffffeffffffffffa, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0xb32, 0x8000) mmap$auto(0x0, 0x4020009, 0x80, 0xebf, 0x401, 0x8000) r1 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(r1, 0x80000000, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clone$auto(0x1, 0x1, 0x0, 0x0, 0x7) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0xfffffffffffffffd, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) getsockopt$auto(0x3, 0x200000000001, 0x3f, 0x0, 0x0) dup2$auto(0x5, 0x4) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/smaps\x00', 0x20000, 0x0) mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0) prctl$auto(0x44, 0x0, 0x0, 0x0, 0x0) mount$auto(0x0, &(0x7f0000000040)='802_15_4_MAC\x00', 0x0, 0xaaa, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x402, 0x8000) setreuid$auto(0x15, 0x5) r2 = socket(0x10, 0x2, 0x9) setsockopt$auto(r2, 0x104000000000010e, 0x8, 0x0, 0x380) 10m15.940445645s ago: executing program 0 (id=103): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) fcntl$auto(0x0, 0x407, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x7b3) (async) munmap$auto(0x20001000, 0x2000000c) (async) madvise$auto(0x2, 0xffffffffffff0005, 0x19) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x2c}}, 0x80) (async) mmap$auto(0x5, 0xcb4, 0x4000000000df, 0x40ebe, 0xfffffffffffffff7, 0x300000080000) mincore$auto(0x1000, 0x8, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x80000002}, 0x0) sigaltstack$auto(&(0x7f0000000000)={0x0, 0x80000002, 0x9}, 0x0) sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, 0x0, 0x20000000) (async) mmap$auto(0x0, 0x10000000000004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async, rerun: 32) r3 = socket(0xa, 0x801, 0x84) (rerun: 32) getsockopt$auto(r3, 0x84, 0x8, 0x0, &(0x7f0000000280)=0xc0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x80000001, 0x8) r4 = gettid() process_vm_writev$auto(r4, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x1}, 0x4, 0x1ff) copy_file_range$auto(0x2, 0x0, r2, 0x0, 0x8001, 0x7) (async, rerun: 32) socket(0x11, 0xa, 0x300) (rerun: 32) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000) (async) recvmmsg$auto(0x3, 0x0, 0x8, 0x2000, 0x0) madvise$auto(0x0, 0x2002003ef, 0x15) sendmsg$auto_NBD_CMD_CONNECT(r0, 0x0, 0x8880) 10m0.520685122s ago: executing program 32 (id=103): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) fcntl$auto(0x0, 0x407, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x7b3) (async) munmap$auto(0x20001000, 0x2000000c) (async) madvise$auto(0x2, 0xffffffffffff0005, 0x19) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x2c}}, 0x80) (async) mmap$auto(0x5, 0xcb4, 0x4000000000df, 0x40ebe, 0xfffffffffffffff7, 0x300000080000) mincore$auto(0x1000, 0x8, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x80000002}, 0x0) sigaltstack$auto(&(0x7f0000000000)={0x0, 0x80000002, 0x9}, 0x0) sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, 0x0, 0x20000000) (async) mmap$auto(0x0, 0x10000000000004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async, rerun: 32) r3 = socket(0xa, 0x801, 0x84) (rerun: 32) getsockopt$auto(r3, 0x84, 0x8, 0x0, &(0x7f0000000280)=0xc0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x80000001, 0x8) r4 = gettid() process_vm_writev$auto(r4, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x1}, 0x4, 0x1ff) copy_file_range$auto(0x2, 0x0, r2, 0x0, 0x8001, 0x7) (async, rerun: 32) socket(0x11, 0xa, 0x300) (rerun: 32) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000) (async) recvmmsg$auto(0x3, 0x0, 0x8, 0x2000, 0x0) madvise$auto(0x0, 0x2002003ef, 0x15) sendmsg$auto_NBD_CMD_CONNECT(r0, 0x0, 0x8880) 7m35.16140082s ago: executing program 4 (id=669): sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="1b0026bd7000fddbdf250300000004000800100003800c000b8008001c"], 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) socket(0x1e, 0x805, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x5, 0x0) fsopen$auto(0x0, 0x1) sysfs$auto(0x2, 0xf, 0x0) fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x1, &(0x7f00000001c0)='+\x00', &(0x7f0000000280), 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) copy_file_range$auto(r2, 0x0, r2, &(0x7f0000000180)=0x80, 0x21c1, 0x0) acct$auto(0xfffffffffffffffc) 7m34.24070686s ago: executing program 4 (id=673): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xf6f6, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyx5\x00', 0x0, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x40, 0x0) select$auto(0x7, &(0x7f00000005c0)={[0xff, 0x81, 0x6, 0x10000000008, 0x0, 0x0, 0x7, 0x0, 0x8f, 0x0, 0x3d, 0x0, 0x40, 0xef, 0x2, 0x10000]}, 0x0, 0x0, 0x0) 7m33.296304198s ago: executing program 4 (id=675): mmap$auto(0x0, 0x4, 0xb16e, 0x40eb2, 0x402, 0x300000000000) socket(0xa, 0x6, 0x0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) 7m32.679495008s ago: executing program 4 (id=680): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x204}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x1}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x6}, @HSR_A_IF2_AGE={0x8, 0x4, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) socket(0x10, 0x2, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000300)=""/249, 0xf9) io_uring_register$auto(0xffffffffffffffff, 0x7f, &(0x7f0000000100)=[0x41fb, 0x176, 0x1], 0xffffffb3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x3f, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x1800, 0x9}, 0x7}, 0x3, 0x0) 7m32.165691435s ago: executing program 4 (id=681): sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="1b0026bd7000fddbdf250300000004000800100003800c000b8008001c"], 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) socket(0x1e, 0x805, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x5, 0x0) fsopen$auto(0x0, 0x1) sysfs$auto(0x2, 0xf, 0x0) fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x1, &(0x7f00000001c0)='+\x00', &(0x7f0000000280), 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) copy_file_range$auto(r2, 0x0, r2, &(0x7f0000000180)=0x80, 0x21c1, 0x0) acct$auto(0xfffffffffffffffc) 7m31.632826209s ago: executing program 4 (id=685): keyctl$auto(0x1e, 0x7ffffffffffffffc, 0xfffffffffffffffd, 0x93c, 0x1) keyctl$auto(0x0, 0x3, 0x80000000, 0x71d, 0x3) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() kill$auto(r1, 0x11) move_pages$auto(r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) process_vm_readv$auto(r0, &(0x7f0000000040)={&(0x7f0000000100)=[0x7, 0x2, 0x2, 0x7f, 0x8, 0x5, 0x1, 0x7fffffffffffffff, 0x3, 0x8000000000000001], 0x1000}, 0x4, &(0x7f0000000200)={&(0x7f0000000180)=[0x2, 0xfffffffffffff932, 0x8, 0x1, 0x7, 0x9fb1, 0x9, 0x200, 0x8000000000000000]}, 0x1, 0x51) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x40802, 0x0) write$auto_tomoyo_operations_securityfs_if(r2, &(0x7f00000001c0)="0a1b9a3cec49ec53c2efa0149258607deb6e1601000000886d8ea5c2574c58e9867ecec3371cadb848770dc8f745b2c76eedba12b9bdbcf3401910e7733aca465c9bd40a", 0x44) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mbind$auto(0x0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x2) socket(0x21, 0xa, 0x100) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_SET(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdb9f251500000008000180040001"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x80000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) futex$auto(0x0, 0x5, 0x0, 0x0, 0x0, 0xa0000001) timer_create$auto(0x42, 0x0, 0x0) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000080)='/dev/media11\x00', 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/protocols\x00', 0x80080, 0x0) read$auto(r5, &(0x7f0000000000)='/,\x00', 0x5644) rt_sigprocmask$auto(0x2, &(0x7f0000000000)={0x8}, 0x0, 0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setxattr$auto(&(0x7f0000000240)=':,\x00', &(0x7f00000002c0)='/sys/kernel/security/tomoyo/exception_policy\x00', &(0x7f0000000300)=[0xca7, 0x0, 0x3d, 0x4], 0x8000, 0x7) mknod$auto(&(0x7f0000000080)=':,\x00', 0x6, 0x800008) 7m16.324558702s ago: executing program 33 (id=685): keyctl$auto(0x1e, 0x7ffffffffffffffc, 0xfffffffffffffffd, 0x93c, 0x1) keyctl$auto(0x0, 0x3, 0x80000000, 0x71d, 0x3) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() kill$auto(r1, 0x11) move_pages$auto(r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) process_vm_readv$auto(r0, &(0x7f0000000040)={&(0x7f0000000100)=[0x7, 0x2, 0x2, 0x7f, 0x8, 0x5, 0x1, 0x7fffffffffffffff, 0x3, 0x8000000000000001], 0x1000}, 0x4, &(0x7f0000000200)={&(0x7f0000000180)=[0x2, 0xfffffffffffff932, 0x8, 0x1, 0x7, 0x9fb1, 0x9, 0x200, 0x8000000000000000]}, 0x1, 0x51) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x40802, 0x0) write$auto_tomoyo_operations_securityfs_if(r2, &(0x7f00000001c0)="0a1b9a3cec49ec53c2efa0149258607deb6e1601000000886d8ea5c2574c58e9867ecec3371cadb848770dc8f745b2c76eedba12b9bdbcf3401910e7733aca465c9bd40a", 0x44) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mbind$auto(0x0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x2) socket(0x21, 0xa, 0x100) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_SET(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdb9f251500000008000180040001"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x80000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) futex$auto(0x0, 0x5, 0x0, 0x0, 0x0, 0xa0000001) timer_create$auto(0x42, 0x0, 0x0) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000080)='/dev/media11\x00', 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/protocols\x00', 0x80080, 0x0) read$auto(r5, &(0x7f0000000000)='/,\x00', 0x5644) rt_sigprocmask$auto(0x2, &(0x7f0000000000)={0x8}, 0x0, 0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setxattr$auto(&(0x7f0000000240)=':,\x00', &(0x7f00000002c0)='/sys/kernel/security/tomoyo/exception_policy\x00', &(0x7f0000000300)=[0xca7, 0x0, 0x3d, 0x4], 0x8000, 0x7) mknod$auto(&(0x7f0000000080)=':,\x00', 0x6, 0x800008) 13.056057427s ago: executing program 5 (id=1848): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) mmap$auto(0x80000000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8004) (async) r0 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r0, &(0x7f0000000140)="65507307ff6587a725ca87720ef9769f20592e77", 0x14) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000) (async) socket(0x1e, 0x2, 0x0) (async) statmount$auto(0x0, 0x0, 0xe3c, 0x0) (async) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) socket(0x25, 0x5, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) (async) mprotect$auto(0x40000, 0x4, 0x6) (async) mmap$auto(0x0, 0x8, 0xdc, 0x9b72, 0x2, 0x8000) socket(0x15, 0x5, 0x0) (async) setsockopt$auto(0x3, 0x114, 0x3f, 0x0, 0x4) 12.567904033s ago: executing program 5 (id=1850): shmctl$auto(0x0, 0x2, &(0x7f0000000280)={{0x100, 0xffffffffffffffff, 0xee00, 0x5, 0x180000, 0x8, 0x4}, 0x8, 0x2, 0xffffffff, 0x8000000000000001, 0x2, 0x3ff, 0xfffd, 0x0, 0x0, 0x0}) r0 = open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x2000, 0xb5d1af1605322c72) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x40049409, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x4610, 0x0) open_by_handle_at$auto(r0, &(0x7f0000000040)={0x8, 0x2, "9700000000000000"}, 0x2) read$auto_bdi_debug_stats_fops_(r0, &(0x7f0000000000)=""/69, 0x45) 11.304591505s ago: executing program 5 (id=1855): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mlockall$auto(0x7) ioctl$auto(0xc8, 0x400454cd, 0xfffffffffffffffe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x8, 0x1000, 0x0) socket(0x2b, 0x1, 0x1) setsockopt$auto(0x3, 0x11e, 0x1, 0x0, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NFSD_A_SERVER_SCOPE={0xc, 0x4, '.\\\xd1[$*]\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xa}]}, 0x28}}, 0x44000) sendmsg$auto_NFSD_CMD_VERSION_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x14, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MINOR={0x8, 0x2, 0x5b4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x404c8c4) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) 10.617966025s ago: executing program 1 (id=1856): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001500), 0xffffffffffffffff) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x5, 0x100005, 0x1, 0xfffffffc, 0x7}, {0x4, 0xfff, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) madvise$auto(0x108000, 0x800034, 0x9) 6.885230543s ago: executing program 3 (id=1859): bpf$auto(0x5, &(0x7f0000000100)=@bpf_attr_3={0x9, 0x5, 0xffffffffffff8001, 0x9, 0x8, 0xfffffffa, 0x2, 0x9, 0x279c, "4e969ec886762377ed00b01d38b1983b", 0x0, 0x401, 0xffffffffffffffff, 0x4, 0x4, 0x5, 0x5, 0x865, 0x1000, 0x9, @attach_btf_obj_fd, 0x9, 0x7fffffffffffffff, 0x2, 0x0, 0x6}, 0x201) close_range$auto(0x0, 0x5, 0x0) fanotify_init$auto(0x5, 0x2000000000002) socket(0xa, 0x2, 0x88) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040)=[0x8000000000000002], 0x10, 0x0, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x7fffffff) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r1 = socket(0x10, 0x2, 0x4) move_pages$auto(0x0, 0x454, &(0x7f0000000580)=&(0x7f00000001c0)=[0xfffffffffffffffd], 0x0, 0x0, 0x0) open(0x0, 0x149443, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) mlock$auto(0xfbe8, 0x4) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x2000c041) bind$auto(0xffffffffffffffff, 0x0, 0x6e) rseq$auto(&(0x7f00000003c0)={0xb, 0x3fd, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) madvise$auto(0x6, 0x5, 0x81) r2 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f00000000c0), 0x109040, 0x0) lseek$auto(r2, 0xc5, 0x1) unshare$auto(0x3) 6.528643628s ago: executing program 1 (id=1860): r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) ioctl$auto_RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x3, {0x5, 0x4, 0x9, 0x7, 0x2, 0x73, 0x5, 0xffff, 0xaa}}) 5.693625973s ago: executing program 1 (id=1861): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0xfffffffffffeffff, 0xffffffffffff0005, 0x401) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000004c0), 0x121401, 0x0) ioctl$auto_VHOST_GET_BACKEND_FEATURES(r0, 0x8008af26, &(0x7f0000000500)=0x8) setpriority$auto(0x4000000001, 0x100000001, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x53, 0x9) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) pselect6$auto(0x101, &(0x7f0000000080)={[0x6, 0x7, 0xffffffffffffffff, 0x3, 0x1, 0x6, 0x9, 0x7, 0x1, 0x4, 0x9, 0x4, 0x4, 0x7, 0xcb2a, 0x9]}, &(0x7f0000000100)={[0xffff, 0x3, 0xfffffffffffff31a, 0x7, 0x590, 0x8, 0x1d4, 0x4, 0x6, 0x7, 0x5, 0x7, 0x80, 0x8, 0x0, 0x1]}, &(0x7f0000000180)={[0xa9, 0x4, 0x4, 0x1, 0x3, 0x6, 0xcbd0, 0x200000001, 0x1f, 0xfffffffffffffffd, 0x7ff, 0x8000000000000001, 0x4, 0x7f, 0x91, 0x7]}, &(0x7f0000000000)={0x899, 0x5}, &(0x7f0000000200)=[0xfff, 0x33, 0x403, 0x532f, 0x8000, 0x9, 0x3, 0x4]) r1 = socket(0x15, 0x6, 0x80) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), 0xffffffffffffffff) setregid$auto(0x5, 0x6) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) process_mrelease$auto(0x4, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x18, r2, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x3f, 0x100000001, 0xffffffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x400, 0xc53d, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) unshare$auto(0x40000080) prctl$auto(0x1d, 0x8000000000000001, 0x8, 0x5, 0x1) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mknod$auto(0x0, 0xc9, 0xc8) add_key$auto(&(0x7f0000000000)='\xb8U\xcf\x8c\x02\x80\x8b\xc3j\x1d\xa1\xa7\xb5\x1e\x80\xc0\x13\x85\x9d\x13\xbe\xf4\xd5\xa9\x03\x10\xca\xfd%}[\x94\x9ct\x8c\xda\xe0\xa0W\'q\x8e\xe4\xeea\xd5X\xd0\xea\xcc\xc7w\x10t\x87?\x1d\x85b\x9b\xa9I\xc6l\x876\xbf|#\xcc', 0x0, 0x0, 0x6, 0x100) mmap$auto(0x0, 0x8, 0xdfc6, 0x29b72, 0xbc2a, 0x8000) prctl$auto(0x1000000003b, 0x1, 0xfff, 0x3, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xfffffffffffffffd, 0x40000008000) 5.693418945s ago: executing program 3 (id=1862): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0x12, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001f00), r0) sendmsg$auto_SMC_PNETID_ADD(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x20, r1, 0x1, 0x70bd2a, 0x25dfd3fb, {}, [@SMC_PNETID_NAME={0xb, 0x1, 'tlep\xc9\t\x00'}]}, 0x20}}, 0x8000) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x101, 0xa, 0x1, r0, 0x40000, 0x3}, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x301, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) socket(0xa, 0x2, 0x88) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYBLOB='\nG'], 0x18}, 0x1, 0x0, 0x0, 0x64048001}, 0x80) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 4.569230797s ago: executing program 2 (id=1865): mmap$auto(0x0, 0x2020009, 0x7, 0xfdf, 0x1, 0x8000) keyctl$auto(0x11, 0xfffffffffffffffa, 0x0, 0x4, 0x3) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) socket(0x21, 0x2, 0x2) setsockopt$auto(0x3, 0x1000000110, 0x2, 0xffffffffffffffff, 0x8001) ioctl$auto_TUNGETIFF(r0, 0x800454d2, 0x0) 4.369274036s ago: executing program 5 (id=1866): r0 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0) write$auto(r0, 0x0, 0x0) ioperm$auto(0x7, 0x6, 0x3) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x3, 0x4, 0x2, 0x7) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x7, 0x9, 0x0, 0x0) mmap$auto(0x0, 0x20007, 0x80000000000000df, 0x10004000eb1, 0x5, 0x8000) close_range$auto(r0, r0, 0xfffffffd) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) r1 = gettid() readlinkat$auto(0xffffffffffffffff, 0x0, 0x0, 0x0) futex$auto(0x0, 0x6, 0x1, 0x0, 0x0, 0x80000001) madvise$auto(0x0, 0x2000040080000005, 0xe) mprotect$auto(0x6, 0x0, 0x100000001) mmap$auto(0x1, 0x5, 0x7, 0x10, 0x280, 0x3) mmap$auto(0x200000000003, 0x120009, 0x4000000000df, 0xeb1, 0x401, 0x7fff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) timer_create$auto(0x3, 0x0, 0x0) kill$auto(r1, 0x11) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) 4.130446703s ago: executing program 3 (id=1867): mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) socket(0x15, 0x5, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x204}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x1}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x6}, @HSR_A_IF2_AGE={0x8, 0x4, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) socket(0x10, 0x2, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000300)=""/249, 0xf9) io_uring_register$auto(0xffffffffffffffff, 0x7f, &(0x7f0000000100)=[0x41fb, 0x176, 0x1], 0xffffffb3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x3f, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) write$auto(0x6, 0x0, 0x100000001) 3.811658517s ago: executing program 2 (id=1868): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_clone(0x4000, &(0x7f0000000040)="11f8c93bce5ce5394d95ed73d1ae78f6588f215772a9a3d170824f2dab21845d41e2ece72654d3222943b0080b537b3d11ec1df79a642dc80da3f2dec499394ab66971e670744916088b114420326ee1170b754de429a02b73333ada444968e0605d82513a2d0510d88e1c53bf45e3c3f8835288dac4435f0bd53bf973877b61778aa62fde749721f746be112fab24349e81ca549dbc64d5110d3e9bbd667f27a633ba5af0005fa099e962d7034f5281225d3aa8a5a619be7e2dfc0871a0ea56db459d145b771158e565", 0xca, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) madvise$auto(0x0, 0x200007, 0xa) pidfd_open$auto(r0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') futimesat$auto(0x2, 0x0, 0x0) 2.57718704s ago: executing program 3 (id=1869): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20040844}, 0x24060090) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x14, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800000000000007, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 2.536359081s ago: executing program 2 (id=1870): r0 = socket(0xa, 0x801, 0x106) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{&(0x7f0000000000)=[0xa, 0x80fe], 0xb8, 0x0, 0x0, 0x0, 0x8, 0x80008000}, 0x5}, 0x1, 0x1fda) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) setreuid$auto(0x80000000, 0x7fffffffffffffff) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c010000", @ANYRES16=0x0, @ANYBLOB="00032bbd7000fcdbdf257c000000080826000700c000282b000809004600277a3929b16baf62d04dacdc00000000340011690c004e00fdffff0000080000040084d5c43cb54884869a00000000000000000000000000000000000000000000972de86be3b93380fca886084f0000000000000000000000c32d16137c35efe888f49112de5a9b6543c26e96a3dab10750cb3049760d48e25b9e1fc7c29574abc60637ad4d1092303d34085bcdff7501ff0b32", @ANYRES32=r0, @ANYBLOB="0800df0067000000d8003c80c8ade23d4374dc9e40eafc408569a13ed62ff00c862ea22abff4fe68b813d777af48e63355fbdc1fd843fb2179147a7cf55da65d3ff3d9dcc5fa1936ee96c52799612cb56844af1c990666baac1e49cdb8f7ef380caef8dfb50c56572d60f33b8f584ab72c64c43b0dbe83f630e1d527ba7e70725a29102f442d5df02acdd94ee020c5e3ba1fd785b2956ff839ccaf5706c005664ed9919f52419f6be3fc214b1eb195cfbea76c3dffc418cc21700a91fad82149b9db8ff24b78588b040022800400f58008001a00", @ANYRES32=r0, @ANYBLOB="0800ea0001000080"], 0x15c}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) connect$auto(0x3, &(0x7f0000000000), 0x55) 2.168816101s ago: executing program 3 (id=1871): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) sysfs$auto(0x2, 0x100000000000027, 0x0) fsopen$auto(0x0, 0x1) socket(0x10, 0x2, 0x0) sendmsg$auto_NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x60000000, 0x9}, 0x7}, 0x3, 0x0) 2.075141249s ago: executing program 1 (id=1872): openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x101202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x2, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="001a0000", @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf2501000000100007800c00018008000180000000000c0002000500000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880) fcntl$getown(0xffffffffffffffff, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getpriority$auto(0x2, 0x7ff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x3ff, 0x8000) mprotect$auto(0x3, 0x0, 0x1) mmap$auto(0xffffffffffffffff, 0x1, 0x4, 0x14, 0x34, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1e, 0x1, 0x0) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) socket(0x2, 0x3, 0xa) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x8, 0x5, 0x8) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) 1.964022126s ago: executing program 2 (id=1873): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd12\x00', 0x8001, 0x0) ioctl$auto_def_blk_fops_fs(r0, 0x1080081272, 0x0) 1.329396635s ago: executing program 5 (id=1874): r0 = socket(0x10, 0x2, 0x0) memfd_secret$auto(0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) ftruncate$auto(0x3, 0x700) socketpair$auto(0x1e, 0x8, 0x8000000000000000, 0x0) socket(0x18, 0x5, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mkdir$auto(0x0, 0xc001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000000), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xe, 0x8000005d94, 0x80004001, 0x4}, 0x77, 0x948, 0x0, 0x62bd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) sendmsg$auto_WG_CMD_GET_DEVICE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x200040c0}, 0x44800) bind$auto(0x3, &(0x7f0000000080), 0x6b) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) connect$auto(0x3, 0x0, 0x55) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) connect$auto(0x3, &(0x7f00000000c0), 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xb, 0x6, 0xeb1, 0x3ff, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) pselect6$auto(0x9, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x8001, 0x4000000000002bc8, 0xfff, 0x9, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b"], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 1.167899708s ago: executing program 1 (id=1875): openat$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy9/netdev:wlan1/stations/08:02:11:00:00:00/rc_stats\x00', 0x4000, 0x0) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$auto_TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000040)=0x10000) 1.121458513s ago: executing program 3 (id=1876): sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40020204}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20048890}, 0x24004855) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040)=[0x404], 0x1}, 0x7e) r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="53010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a00000a"], 0xf8}}, 0x10004010) r2 = getegid() shmctl$auto(0x9, 0x0, &(0x7f0000000340)={{0x9, 0x0, r2, 0x4c, 0x1, 0x0, 0x4}, 0x9, 0x80000000, 0x8, 0x2, 0x7, 0x9, 0x6, 0x0, 0x0, 0x0}) prctl$auto(0x35, 0x8, 0xec, 0x2, 0x80000000) statx$auto(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xa, 0x7ff, 0x0) statx$auto(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x9, 0x14000, 0x0) 991.317996ms ago: executing program 2 (id=1877): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x96b}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x15c0}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x4) socket(0xa, 0x1, 0x84) listen$auto(0x3, 0x0) 597.086799ms ago: executing program 5 (id=1878): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001500), 0xffffffffffffffff) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x5, 0x100005, 0x1, 0xfffffffc, 0x7}, {0x4, 0xfff, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) madvise$auto(0x108000, 0x800034, 0x9) 596.933936ms ago: executing program 1 (id=1879): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20040844}, 0x24060090) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x14, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800000000000007, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 0s ago: executing program 2 (id=1880): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000500), 0x22000, 0x0) mmap$auto(0x4, 0xd4f, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x840, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r3, 0xc0385720, &(0x7f0000000100)={0x0, "34840600", 0x3, 0x6, 0xfc3f, 0x9d5a, "1e2a783accc11a1c06318a1739c06785"}) ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0x6, &(0x7f0000000280)="4a551973e77577ba3b41a88e742122c2688ae0a3e96c0cb5987112c4e0e40bb5776897d02273c0ba54109c0c7b43a27779d1fcae55b904afdd9d278c62abe4700263f4052f9ec5560dbc7877ee0fc1127608b7c936052436295e217c2c21dcb303ee3eb3f57e24d622851a45eb06d9826b67318b74049481162f44e3bc56b5721350ca046022fee9512b4f2b889b59238ebbbd172c289412a1b524047bf00588e69daffdcbdafbec45661ec9cbb937136534f3c697da36c16107a25cbfe10708d82983e79579b70a1475c0f0e30f6c3ae4fdbb128a39d3e37e5bc3d9848039075099ebc882c6ec3a0450b757d2d2938b1434147528") ioctl$sock_SIOCGIFINDEX(r2, 0x4602, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_VENDOR(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000000c0)={0x1c, r5, 0x323, 0x70bda5, 0x25dfdbfb, {}, [@NL80211_ATTR_IE_PROBE_RESP={0x5, 0x7f, 'S'}]}, 0x1c}}, 0x40088d4) r6 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, 0x0, 0x102000, 0x0) ioctl$auto(r6, 0x80044940, 0x20000000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) lsm_set_self_attr$auto(0x1, 0x0, 0x80, 0x0) socket(0x21, 0x1, 0x12) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000) r7 = socket(0x18, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) madvise$auto(0x1, 0xfff, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) keyctl$auto(0xe, 0x100000000000, 0x1, 0x6, 0x7) kernel console output (not intermixed with test programs): > 2 [ 69.095317][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.104547][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.118313][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.129864][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.138882][ T5839] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.142671][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.146089][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.153929][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.169538][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.173718][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.176896][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.193175][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.520291][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 69.544388][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 69.605676][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 69.668984][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 69.751836][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.759378][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.766807][ T5830] bridge_slave_0: entered allmulticast mode [ 69.774301][ T5830] bridge_slave_0: entered promiscuous mode [ 69.790917][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.798106][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.805277][ T5826] bridge_slave_0: entered allmulticast mode [ 69.812235][ T5826] bridge_slave_0: entered promiscuous mode [ 69.843219][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.850408][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.857608][ T5830] bridge_slave_1: entered allmulticast mode [ 69.864799][ T5830] bridge_slave_1: entered promiscuous mode [ 69.871952][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.881780][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.889080][ T5826] bridge_slave_1: entered allmulticast mode [ 69.895672][ T5826] bridge_slave_1: entered promiscuous mode [ 69.913789][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.921114][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.928395][ T5831] bridge_slave_0: entered allmulticast mode [ 69.934979][ T5831] bridge_slave_0: entered promiscuous mode [ 69.959900][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.967082][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.974458][ T5831] bridge_slave_1: entered allmulticast mode [ 69.981657][ T5831] bridge_slave_1: entered promiscuous mode [ 69.996803][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.039535][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.052233][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.081825][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.094864][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.113790][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.121140][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.128631][ T5829] bridge_slave_0: entered allmulticast mode [ 70.135205][ T5829] bridge_slave_0: entered promiscuous mode [ 70.143380][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.169343][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.176525][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.183936][ T5829] bridge_slave_1: entered allmulticast mode [ 70.191148][ T5829] bridge_slave_1: entered promiscuous mode [ 70.214858][ T5826] team0: Port device team_slave_0 added [ 70.238500][ T5830] team0: Port device team_slave_0 added [ 70.245651][ T5826] team0: Port device team_slave_1 added [ 70.260112][ T5831] team0: Port device team_slave_0 added [ 70.268791][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.279626][ T5830] team0: Port device team_slave_1 added [ 70.295263][ T5831] team0: Port device team_slave_1 added [ 70.307765][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.360734][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.367737][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.394248][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.406659][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.413687][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.439737][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.453677][ T5829] team0: Port device team_slave_0 added [ 70.462244][ T5829] team0: Port device team_slave_1 added [ 70.468709][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.475674][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.501953][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.513697][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.521042][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.547168][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.575712][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.582763][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.608809][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.626386][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.633812][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.660391][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.720074][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.727064][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.754204][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.766341][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.773756][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.799772][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.824580][ T5826] hsr_slave_0: entered promiscuous mode [ 70.831030][ T5826] hsr_slave_1: entered promiscuous mode [ 70.840917][ T5830] hsr_slave_0: entered promiscuous mode [ 70.847133][ T5830] hsr_slave_1: entered promiscuous mode [ 70.855985][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.863931][ T5830] Cannot create hsr debugfs directory [ 70.906329][ T5831] hsr_slave_0: entered promiscuous mode [ 70.912877][ T5831] hsr_slave_1: entered promiscuous mode [ 70.919283][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.927422][ T5831] Cannot create hsr debugfs directory [ 70.988802][ T5829] hsr_slave_0: entered promiscuous mode [ 70.995428][ T5829] hsr_slave_1: entered promiscuous mode [ 71.002073][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.010010][ T5829] Cannot create hsr debugfs directory [ 71.228729][ T5835] Bluetooth: hci1: command tx timeout [ 71.234448][ T5835] Bluetooth: hci3: command tx timeout [ 71.238122][ T5839] Bluetooth: hci0: command tx timeout [ 71.245386][ T5840] Bluetooth: hci2: command tx timeout [ 71.271338][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.282478][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.292274][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.310597][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.358622][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.380794][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.398620][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.416677][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.425956][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.439810][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.455834][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.465624][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.520734][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.535650][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.546627][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.568807][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.660301][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.712374][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.718892][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.742374][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.746504][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.772477][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.779727][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.801896][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.814602][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.821770][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.831515][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.864982][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.872095][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.881940][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.889084][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.918840][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.929294][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.972388][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.979543][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.995220][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.002405][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.017178][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.034626][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.041747][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.083515][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.090824][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.233238][ T5829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.258145][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.322616][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.432155][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.483842][ T5830] veth0_vlan: entered promiscuous mode [ 72.529812][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.547142][ T5831] veth0_vlan: entered promiscuous mode [ 72.563682][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.585184][ T5830] veth1_vlan: entered promiscuous mode [ 72.593935][ T5831] veth1_vlan: entered promiscuous mode [ 72.671773][ T5831] veth0_macvtap: entered promiscuous mode [ 72.680891][ T5830] veth0_macvtap: entered promiscuous mode [ 72.691318][ T5826] veth0_vlan: entered promiscuous mode [ 72.700272][ T5831] veth1_macvtap: entered promiscuous mode [ 72.719729][ T5829] veth0_vlan: entered promiscuous mode [ 72.729148][ T5830] veth1_macvtap: entered promiscuous mode [ 72.738784][ T5826] veth1_vlan: entered promiscuous mode [ 72.769532][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.786705][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.798478][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.810691][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.824484][ T5829] veth1_vlan: entered promiscuous mode [ 72.833695][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.848675][ T5826] veth0_macvtap: entered promiscuous mode [ 72.857269][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.868466][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.880579][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.888773][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.897651][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.907119][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.917034][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.952927][ T5826] veth1_macvtap: entered promiscuous mode [ 72.962122][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.972146][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.980975][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.990080][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.016916][ T5829] veth0_macvtap: entered promiscuous mode [ 73.045388][ T5829] veth1_macvtap: entered promiscuous mode [ 73.067600][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.084833][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.096689][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.108416][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.119731][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.131024][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.142323][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.152949][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.166069][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.176665][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.187320][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.198921][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.222291][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.237427][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.248556][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.260533][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.272168][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.283715][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.294884][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.304817][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.308166][ T5839] Bluetooth: hci0: command tx timeout [ 73.315765][ T5828] Bluetooth: hci1: command tx timeout [ 73.320807][ T5840] Bluetooth: hci2: command tx timeout [ 73.326830][ T5835] Bluetooth: hci3: command tx timeout [ 73.331802][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.346909][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.357702][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.369888][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.414015][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.423051][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.432059][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.440825][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.453767][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.463239][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.473098][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.482698][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.496779][ T351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.513137][ T351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.550414][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.576186][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.613217][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.621928][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.666886][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.676593][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.749567][ T2932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.755805][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.757405][ T2932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.836960][ T351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.856430][ T351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.901383][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.912696][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.918096][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.928017][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.097317][ T5891] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.260302][ T5891] netlink: 'syz.3.4': attribute type 11 has an invalid length. [ 74.267256][ T5889] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1'. [ 74.585511][ T5902] ICMPv6: process `syz.0.6' is using deprecated sysctl (syscall) net.ipv6.neigh.virt_wifi0.retrans_time - use net.ipv6.neigh.virt_wifi0.retrans_time_ms instead [ 74.632042][ T5905] mmap: syz.3.7 (5905) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.389807][ T5835] Bluetooth: hci3: command tx timeout [ 75.395279][ T5835] Bluetooth: hci2: command tx timeout [ 75.400782][ T5828] Bluetooth: hci1: command tx timeout [ 75.401163][ T5840] Bluetooth: hci0: command tx timeout [ 75.488387][ T5919] process 'syz.1.12' launched '' with NULL argv: empty string added [ 75.677272][ T29] audit: type=1800 audit(1734056109.702:2): pid=5919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 75.740870][ T5935] ICMPv6: process `syz.2.14' is using deprecated sysctl (syscall) net.ipv6.neigh.virt_wifi0.retrans_time - use net.ipv6.neigh.virt_wifi0.retrans_time_ms instead [ 75.794899][ T5921] Zero length message leads to an empty skb [ 76.652139][ T5952] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.844201][ T5955] ICMPv6: process `syz.3.19' is using deprecated sysctl (syscall) net.ipv6.neigh.virt_wifi0.retrans_time - use net.ipv6.neigh.virt_wifi0.retrans_time_ms instead [ 76.870255][ T5840] Bluetooth: hci0: unexpected event 0x03 length: 72 > 11 [ 77.115067][ T5960] netlink: 93 bytes leftover after parsing attributes in process `syz.1.20'. [ 77.142282][ T5957] netlink: 93 bytes leftover after parsing attributes in process `syz.1.20'. [ 77.208679][ T5957] cifs: Unknown parameter '[ï' [ 77.469545][ T5840] Bluetooth: hci0: command tx timeout [ 77.475709][ T5839] Bluetooth: hci2: command tx timeout [ 77.476052][ T5835] Bluetooth: hci1: command tx timeout [ 77.481896][ T5840] Bluetooth: hci3: command tx timeout [ 77.694532][ T5968] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 79.478357][ T6016] netlink: 338 bytes leftover after parsing attributes in process `syz.1.36'. [ 79.601596][ T6015] Process accounting resumed [ 79.606678][ T6015] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6015 comm: syz.1.36) [ 79.780850][ T6018] lo: entered allmulticast mode [ 79.876295][ T6020] lo: left allmulticast mode [ 80.280271][ T6018] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6018 comm: syz.1.37) [ 80.357207][ T6025] ICMPv6: process `syz.3.39' is using deprecated sysctl (syscall) net.ipv6.neigh.virt_wifi0.retrans_time - use net.ipv6.neigh.virt_wifi0.retrans_time_ms instead [ 80.455890][ T6029] ICMPv6: process `syz.1.40' is using deprecated sysctl (syscall) net.ipv6.neigh.virt_wifi0.retrans_time - use net.ipv6.neigh.virt_wifi0.retrans_time_ms instead [ 80.767316][ T6028] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6028 comm: syz.1.40) [ 80.908888][ T6036] netlink: 'syz.2.42': attribute type 1 has an invalid length. [ 81.081465][ T6040] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.148750][ T6041] netlink: 338 bytes leftover after parsing attributes in process `syz.0.44'. [ 81.159015][ T29] audit: type=1800 audit(1734056115.132:3): pid=6036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="members" dev="configfs" ino=7623 res=0 errno=0 [ 81.308419][ T6037] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6037 comm: syz.1.43) [ 81.400154][ T6040] netlink: 338 bytes leftover after parsing attributes in process `syz.0.44'. [ 81.402314][ T6045] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6045 comm: syz.1.45) [ 81.592994][ T6047] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6047 comm: syz.1.46) [ 81.831458][ T6054] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6054 comm: syz.1.48) [ 82.908679][ T6069] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6069 comm: syz.1.52) [ 83.152878][ T6072] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6072 comm: syz.1.55) [ 83.653217][ T6079] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6079 comm: syz.1.56) [ 84.876708][ T6093] warn_unsupported: 2 callbacks suppressed [ 84.876738][ T6093] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6093 comm: syz.1.61) [ 85.463920][ T6099] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6099 comm: syz.1.63) [ 85.579323][ T6103] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6103 comm: syz.1.63) [ 85.814350][ T6107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.64'. [ 85.886351][ T6108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.64'. [ 86.131474][ T6105] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6105 comm: syz.1.64) [ 86.578513][ T6110] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6110 comm: syz.1.65) [ 87.119687][ T6117] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6117 comm: syz.1.68) [ 87.168041][ T1206] cfg80211: failed to load regulatory.db [ 87.356210][ T6127] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6127 comm: syz.1.70) [ 87.696011][ T6132] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6132 comm: syz.1.72) [ 88.604747][ T6138] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6138 comm: syz.1.72) [ 88.613993][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'. [ 88.727261][ T6153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'. [ 88.809373][ T6156] ALSA: mixer_oss: invalid OSS volume '' [ 88.828910][ T6156] delete_channel: no stack [ 88.899691][ T6155] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6155 comm: syz.1.76) [ 89.047025][ T6151] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 89.074588][ T6160] netlink: 32 bytes leftover after parsing attributes in process `syz.1.78'. [ 90.057705][ T6163] warn_unsupported: 1 callbacks suppressed [ 90.057727][ T6163] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6163 comm: syz.1.79) [ 90.696672][ T6184] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6184 comm: syz.1.82) [ 90.938677][ T6190] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6190 comm: syz.1.84) [ 91.204603][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 91.352327][ T6194] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 91.388950][ T6205] netlink: 32 bytes leftover after parsing attributes in process `syz.0.87'. [ 91.414001][ T6194] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 91.478162][ T6194] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 91.565992][ T6194] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 91.599177][ T6194] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 91.681408][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.88'. [ 91.724672][ T6194] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 91.780500][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.88'. [ 91.828981][ T6188] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6188 comm: syz.1.84) [ 91.841533][ T6194] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 91.908250][ T6194] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 92.090014][ T6194] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 92.148810][ T6194] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 92.154819][ T6194] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 92.230164][ T6194] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 92.443192][ T6216] ======================================================= [ 92.443192][ T6216] WARNING: The mand mount option has been deprecated and [ 92.443192][ T6216] and is ignored by this kernel. Remove the mand [ 92.443192][ T6216] option from the mount to silence this warning. [ 92.443192][ T6216] ======================================================= [ 92.491632][ T6220] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec ASAN_OPTIONS=handle_segv=0 allow_user_segv_handler=1 detect_leaks=0 GLIBC_TUNABLES=glibc.pthread.rseq=0 ./syz-executor"[6220] [ 92.591451][ T6215] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6215 comm: syz.1.91) [ 92.857009][ T6234] netlink: 28 bytes leftover after parsing attributes in process `syz.2.93'. [ 92.859271][ T6237] nfsd: Unknown parameter 'IPVS' [ 93.061375][ T6231] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6231 comm: syz.1.94) [ 93.252984][ T6244] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6244 comm: syz.1.96) [ 93.388196][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 93.436509][ T6246] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6246 comm: syz.1.97) [ 93.549420][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.98'. [ 93.621255][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.98'. [ 93.630024][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 93.723126][ T6248] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6248 comm: syz.1.98) [ 93.868108][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 93.978321][ T6255] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6255 comm: syz.1.100) [ 94.188031][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 94.720440][ T6277] netlink: 'syz.3.105': attribute type 1 has an invalid length. [ 94.769823][ T29] audit: type=1800 audit(4294967304.860:4): pid=6271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.105" name="members" dev="configfs" ino=8075 res=0 errno=0 [ 95.384639][ T6287] netlink: 32 bytes leftover after parsing attributes in process `syz.3.109'. [ 95.468864][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 95.648896][ T6291] warn_unsupported: 4 callbacks suppressed [ 95.648915][ T6291] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6291 comm: syz.1.108) [ 95.717902][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 95.947978][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 96.270216][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.614280][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.788145][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.027946][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 98.347983][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 98.950004][ T6335] FAULT_INJECTION: forcing a failure. [ 98.950004][ T6335] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.026624][ T6335] CPU: 0 UID: 0 PID: 6335 Comm: syz.3.122 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 99.037279][ T6335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 99.047375][ T6335] Call Trace: [ 99.050683][ T6335] [ 99.053640][ T6335] dump_stack_lvl+0x16c/0x1f0 [ 99.058363][ T6335] should_fail_ex+0x497/0x5b0 [ 99.063092][ T6335] _copy_to_user+0x32/0xd0 [ 99.067557][ T6335] simple_read_from_buffer+0xd0/0x160 [ 99.073012][ T6335] proc_fail_nth_read+0x198/0x270 [ 99.078086][ T6335] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.083682][ T6335] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.089279][ T6335] vfs_read+0x1df/0xbe0 [ 99.093475][ T6335] ? __fget_files+0x1fc/0x3a0 [ 99.098189][ T6335] ? __pfx___mutex_lock+0x10/0x10 [ 99.103250][ T6335] ? __pfx_vfs_read+0x10/0x10 [ 99.107974][ T6335] ? __fget_files+0x206/0x3a0 [ 99.112700][ T6335] ksys_read+0x12b/0x250 [ 99.116983][ T6335] ? __pfx_ksys_read+0x10/0x10 [ 99.121803][ T6335] do_syscall_64+0xcd/0x250 [ 99.126356][ T6335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.132298][ T6335] RIP: 0033:0x7f271b38472c [ 99.136752][ T6335] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 99.156399][ T6335] RSP: 002b:00007f271c185030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.164855][ T6335] RAX: ffffffffffffffda RBX: 00007f271b575fa0 RCX: 00007f271b38472c [ 99.172863][ T6335] RDX: 000000000000000f RSI: 00007f271c1850a0 RDI: 0000000000000004 [ 99.180868][ T6335] RBP: 00007f271c185090 R08: 0000000000000000 R09: 0000000000000000 [ 99.188869][ T6335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.196870][ T6335] R13: 0000000000000000 R14: 00007f271b575fa0 R15: 00007ffcc05724d8 [ 99.204898][ T6335] [ 99.437295][ T6302] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6302 comm: syz.1.112) [ 99.903268][ T6345] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6345 comm: syz.1.126) [ 100.887317][ T6365] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6365 comm: syz.1.129) [ 101.634057][ T6358] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6358 comm: syz.1.129) [ 102.442735][ T6292] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6292 comm: syz.1.108) [ 103.575292][ T6376] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6376 comm: syz.1.133) [ 103.969058][ T6328] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6328 comm: syz.1.112) [ 104.122769][ T6378] netlink: 32 bytes leftover after parsing attributes in process `syz.2.135'. [ 104.232926][ T6382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.134'. [ 104.649358][ T6388] netlink: 'syz.3.137': attribute type 1 has an invalid length. [ 104.691041][ T29] audit: type=1800 audit(4294967314.780:5): pid=6388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.137" name="members" dev="configfs" ino=9365 res=0 errno=0 [ 105.010923][ T6382] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6382 comm: syz.1.134) [ 106.335009][ T6399] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6399 comm: syz.1.141) [ 106.877042][ T6408] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6408 comm: syz.1.144) [ 107.369395][ T6414] netlink: 32 bytes leftover after parsing attributes in process `syz.1.146'. [ 108.071067][ T6413] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6413 comm: syz.1.146) [ 108.372628][ T6422] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6422 comm: syz.1.148) [ 109.153993][ T6426] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6426 comm: syz.1.149) [ 109.445036][ T29] audit: type=1800 audit(4294967319.530:6): pid=6439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="members" dev="configfs" ino=9552 res=0 errno=0 [ 109.568501][ T6439] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6439 comm: ) [ 110.003388][ T6447] Process accounting paused [ 110.492701][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 110.502159][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 110.528815][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 110.556586][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 110.578769][ T5828] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 110.586587][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.155312][ T6452] chnl_net:caif_netlink_parms(): no params data found [ 111.648670][ T6452] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.655796][ T6452] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.688082][ T6452] bridge_slave_0: entered allmulticast mode [ 111.716048][ T6452] bridge_slave_0: entered promiscuous mode [ 111.733380][ T6452] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.756076][ T6452] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.776400][ T6452] bridge_slave_1: entered allmulticast mode [ 111.795242][ T6452] bridge_slave_1: entered promiscuous mode [ 111.982242][ T6452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.017185][ T6452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.160874][ T6452] team0: Port device team_slave_0 added [ 112.222681][ T6452] team0: Port device team_slave_1 added [ 112.239634][ T29] audit: type=1800 audit(4294967322.320:7): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="members" dev="configfs" ino=9212 res=0 errno=0 [ 112.391405][ T6452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.402712][ T6452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.436713][ T6452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.450453][ T6452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.457431][ T6452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.548018][ T6452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.667963][ T5835] Bluetooth: hci4: command tx timeout [ 112.852796][ T6452] hsr_slave_0: entered promiscuous mode [ 112.941570][ T6452] hsr_slave_1: entered promiscuous mode [ 112.978485][ T6452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.986103][ T6452] Cannot create hsr debugfs directory [ 113.509696][ T6452] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.541404][ T6452] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.576353][ T6452] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.680650][ T6452] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.992164][ T6452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.065513][ T6452] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.192531][ T6452] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.248633][ T6452] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.460386][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.467521][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.509987][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.517172][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.751997][ T5835] Bluetooth: hci4: command tx timeout [ 115.440619][ T6452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.670986][ T6511] netlink: 28 bytes leftover after parsing attributes in process `syz.3.171'. [ 115.767787][ T6516] netlink: 28 bytes leftover after parsing attributes in process `syz.3.171'. [ 115.929342][ T29] audit: type=1800 audit(4294967326.000:8): pid=6517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="members" dev="configfs" ino=10276 res=0 errno=0 [ 116.524331][ T6452] veth0_vlan: entered promiscuous mode [ 116.557191][ T6452] veth1_vlan: entered promiscuous mode [ 116.711414][ T6523] svc: failed to register nfsdv3 RPC service (errno 111). [ 116.724720][ T6523] svc: failed to register nfsaclv3 RPC service (errno 111). [ 116.725817][ T6452] veth0_macvtap: entered promiscuous mode [ 116.790886][ T6452] veth1_macvtap: entered promiscuous mode [ 116.838414][ T5835] Bluetooth: hci4: command tx timeout [ 116.887181][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.937922][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.986820][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.014468][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.038007][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.067915][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.097330][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.129498][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.163676][ T6452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.190608][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.233922][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.259017][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.287870][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.315644][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.353857][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.374015][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.422401][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.453932][ T6452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.492280][ T6452] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.511869][ T6452] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.537973][ T6452] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.557031][ T6452] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.894078][ T351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.908194][ T351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.009534][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.017414][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.908364][ T5828] Bluetooth: hci4: command tx timeout [ 119.258306][ T6543] netlink: 32 bytes leftover after parsing attributes in process `syz.4.178'. [ 123.046304][ T29] audit: type=1800 audit(4294967333.130:9): pid=6581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="members" dev="configfs" ino=10678 res=0 errno=0 [ 125.379660][ T29] audit: type=1800 audit(4294967335.470:10): pid=6613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="members" dev="configfs" ino=10786 res=0 errno=0 [ 126.089195][ T6616] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 126.234068][ T6616] CIFS mount error: No usable UNC path provided in device string! [ 126.234068][ T6616] [ 126.308582][ T6616] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 128.344993][ T29] audit: type=1800 audit(4294967338.430:11): pid=6651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="members" dev="configfs" ino=10906 res=0 errno=0 [ 129.253004][ T6658] netlink: 32 bytes leftover after parsing attributes in process `syz.2.214'. [ 130.497114][ T6675] CIFS mount error: No usable UNC path provided in device string! [ 130.497114][ T6675] [ 130.538898][ T6675] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 131.322227][ T6699] netlink: 28 bytes leftover after parsing attributes in process `syz.3.226'. [ 131.348272][ T6699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.378909][ T6699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.473710][ T6699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.491785][ T6699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.161017][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.168082][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.242338][ T29] audit: type=1800 audit(4294967343.330:12): pid=6729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="members" dev="configfs" ino=11196 res=0 errno=0 [ 133.801430][ T29] audit: type=1800 audit(4294967343.880:13): pid=6743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="members" dev="configfs" ino=11239 res=0 errno=0 [ 134.055421][ T6740] netlink: 32 bytes leftover after parsing attributes in process `syz.3.242'. [ 134.463759][ T6750] netlink: 350 bytes leftover after parsing attributes in process `syz.2.244'. [ 137.356814][ T5828] Bluetooth: hci4: unexpected event 0x03 length: 72 > 11 [ 138.143121][ T6784] netlink: 93 bytes leftover after parsing attributes in process `syz.4.254'. [ 138.253965][ T6781] netlink: 93 bytes leftover after parsing attributes in process `syz.4.254'. [ 140.711897][ T6768] Process accounting resumed [ 140.716559][ T6768] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6768 comm: syz.1.251) [ 141.295973][ T6802] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6802 comm: syz.1.260) [ 141.437930][ T6810] netlink: 32 bytes leftover after parsing attributes in process `syz.2.261'. [ 141.668869][ T6818] netlink: 28 bytes leftover after parsing attributes in process `syz.2.264'. [ 141.709609][ T6818] macsec0: entered promiscuous mode [ 142.548523][ T6815] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6815 comm: syz.1.262) [ 146.116504][ T6845] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6845 comm: syz.1.269) [ 146.656692][ T6876] kernel write not supported for file netdevsim/netdevsim0/psample/latency_max (pid: 6876 comm: syz.1.279) [ 148.873904][ T6892] netlink: 32 bytes leftover after parsing attributes in process `syz.1.283'. [ 150.006524][ T6914] netlink: 28 bytes leftover after parsing attributes in process `syz.2.292'. [ 150.041272][ T6914] netlink: 28 bytes leftover after parsing attributes in process `syz.2.292'. [ 151.550880][ T6933] netlink: 32 bytes leftover after parsing attributes in process `syz.3.297'. [ 152.054869][ T6948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.304'. [ 152.083821][ T6948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.304'. [ 152.148024][ T5828] Bluetooth: hci2: ACL packet for unknown connection handle 16 [ 153.330311][ T6965] netlink: 32 bytes leftover after parsing attributes in process `syz.1.309'. [ 154.299728][ T6972] netlink: 'syz.2.311': attribute type 2 has an invalid length. [ 154.646372][ T6993] netlink: 28 bytes leftover after parsing attributes in process `syz.1.317'. [ 154.688894][ T6993] netlink: 28 bytes leftover after parsing attributes in process `syz.1.317'. [ 155.988423][ T7003] netlink: 32 bytes leftover after parsing attributes in process `syz.1.320'. [ 158.982471][ T7031] netlink: 32 bytes leftover after parsing attributes in process `syz.2.330'. [ 161.406934][ T7063] netlink: 28 bytes leftover after parsing attributes in process `syz.1.339'. [ 162.049945][ T7063] bridge_slave_1: left allmulticast mode [ 162.092137][ T7063] bridge_slave_1: left promiscuous mode [ 162.128773][ T7063] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.513678][ T29] audit: type=1800 audit(4294967372.600:14): pid=7078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.341" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 162.698130][ T7063] bridge_slave_0: left allmulticast mode [ 162.703830][ T7063] bridge_slave_0: left promiscuous mode [ 162.748312][ T7063] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.896419][ T7092] netlink: 342 bytes leftover after parsing attributes in process `syz.4.345'. [ 167.285309][ T7117] netlink: 'syz.2.352': attribute type 4 has an invalid length. [ 167.368594][ T7117] netlink: 314 bytes leftover after parsing attributes in process `syz.2.352'. [ 167.470650][ T7117] IPv6: NLM_F_CREATE should be specified when creating new route [ 168.471737][ T7129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.356'. [ 168.529370][ T7131] netlink: 28 bytes leftover after parsing attributes in process `syz.1.356'. [ 169.314441][ T7134] netlink: 32 bytes leftover after parsing attributes in process `syz.1.357'. [ 173.382713][ T7180] netlink: 'syz.4.366': attribute type 4 has an invalid length. [ 173.478814][ T7180] netlink: 314 bytes leftover after parsing attributes in process `syz.4.366'. [ 173.581469][ T7180] IPv6: NLM_F_CREATE should be specified when creating new route [ 174.692246][ T7203] netlink: 'syz.1.372': attribute type 1 has an invalid length. [ 174.908526][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.371'. [ 176.207402][ T7219] netlink: 28 bytes leftover after parsing attributes in process `syz.3.375'. [ 176.299403][ T7221] netlink: 28 bytes leftover after parsing attributes in process `syz.3.375'. [ 177.018720][ T7228] netlink: 32 bytes leftover after parsing attributes in process `syz.2.377'. [ 177.888912][ T7237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.383'. [ 180.289445][ T7237] syz.2.383 (7237) used greatest stack depth: 21200 bytes left [ 180.468432][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.389'. [ 181.248975][ T7272] netlink: 32 bytes leftover after parsing attributes in process `syz.1.391'. [ 183.586330][ T7300] netlink: 32 bytes leftover after parsing attributes in process `syz.1.403'. [ 183.627566][ T7301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.404'. [ 183.674463][ T7301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.404'. [ 184.140208][ T7311] tipc: Started in network mode [ 184.145268][ T7311] tipc: Node identity ee00, cluster identity 4711 [ 184.170913][ T7311] tipc: Node number set to 60928 [ 187.376001][ T29] audit: type=1800 audit(4294967397.460:15): pid=7364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.424" name="discovery_nqn" dev="configfs" ino=14208 res=0 errno=0 [ 188.999803][ T7393] netlink: 32 bytes leftover after parsing attributes in process `syz.1.432'. [ 190.378235][ T29] audit: type=1800 audit(4294967400.450:16): pid=7420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.441" name="dbroot" dev="configfs" ino=12893 res=0 errno=0 [ 190.574821][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.444'. [ 191.066925][ T7429] netlink: 32 bytes leftover after parsing attributes in process `syz.3.445'. [ 192.760530][ T7458] netlink: 32 bytes leftover after parsing attributes in process `syz.2.457'. [ 193.781412][ T7474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.461'. [ 194.606521][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.615891][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.408028][ T7493] netlink: 32 bytes leftover after parsing attributes in process `syz.3.467'. [ 195.784384][ T7501] netlink: 28 bytes leftover after parsing attributes in process `syz.3.470'. [ 195.830711][ T7501] netlink: 28 bytes leftover after parsing attributes in process `syz.3.470'. [ 200.056207][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.486'. [ 200.100760][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.486'. [ 200.730536][ T7574] tipc: Started in network mode [ 200.735459][ T7574] tipc: Node identity ee00, cluster identity 4711 [ 200.765320][ T7574] tipc: Node number set to 60928 [ 201.586307][ T7583] netlink: 172 bytes leftover after parsing attributes in process `syz.1.497'. [ 201.715277][ T7587] netlink: 28 bytes leftover after parsing attributes in process `syz.4.498'. [ 201.783182][ T7589] netlink: 28 bytes leftover after parsing attributes in process `syz.4.498'. [ 203.733327][ T7614] tipc: Started in network mode [ 203.739130][ T7614] tipc: Node identity ee00, cluster identity 4711 [ 203.752008][ T7614] tipc: Node number set to 60928 [ 204.114883][ T7626] netlink: 28 bytes leftover after parsing attributes in process `syz.3.509'. [ 207.360095][ T7652] tipc: Started in network mode [ 207.365107][ T7652] tipc: Node identity ee00, cluster identity 4711 [ 207.380030][ T7652] tipc: Node number set to 60928 [ 209.192760][ T7686] netlink: 32 bytes leftover after parsing attributes in process `syz.3.528'. [ 211.423385][ T7718] netlink: 338 bytes leftover after parsing attributes in process `syz.2.538'. [ 211.499451][ T7718] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.507057][ T7718] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.609294][ T7723] FAULT_INJECTION: forcing a failure. [ 211.609294][ T7723] name failslab, interval 1, probability 0, space 0, times 1 [ 211.748166][ T7718] bridge0: entered promiscuous mode [ 211.753561][ T7723] CPU: 1 UID: 0 PID: 7723 Comm: syz.4.540 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 211.764178][ T7723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 211.774261][ T7723] Call Trace: [ 211.777556][ T7723] [ 211.780501][ T7723] dump_stack_lvl+0x16c/0x1f0 [ 211.785243][ T7723] should_fail_ex+0x497/0x5b0 [ 211.789966][ T7723] ? fs_reclaim_acquire+0xae/0x150 [ 211.795121][ T7723] should_failslab+0xc2/0x120 [ 211.799840][ T7723] __kmalloc_node_noprof+0xd1/0x520 [ 211.805070][ T7723] ? trace_contention_end+0xee/0x140 [ 211.810380][ T7723] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 211.815862][ T7723] ? find_held_lock+0x2d/0x110 [ 211.820648][ T7723] __kvmalloc_node_noprof+0xad/0x1a0 [ 211.825948][ T7723] traverse.part.0.constprop.0+0x392/0x640 [ 211.831770][ T7723] ? trace_lock_acquire+0x14e/0x1f0 [ 211.836992][ T7723] seq_lseek+0x2b4/0x440 [ 211.841253][ T7723] proc_reg_llseek+0x205/0x2f0 [ 211.846036][ T7723] ksys_lseek+0xf0/0x1b0 [ 211.850289][ T7723] do_syscall_64+0xcd/0x250 [ 211.854805][ T7723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.860710][ T7723] RIP: 0033:0x7f53e1385d19 [ 211.865142][ T7723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.884764][ T7723] RSP: 002b:00007f53e21c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 211.893189][ T7723] RAX: ffffffffffffffda RBX: 00007f53e1575fa0 RCX: 00007f53e1385d19 [ 211.901165][ T7723] RDX: 0000000000000001 RSI: 7fffffffffffffff RDI: 0000000000000003 [ 211.909140][ T7723] RBP: 00007f53e21c7090 R08: 0000000000000000 R09: 0000000000000000 [ 211.917118][ T7723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.925101][ T7723] R13: 0000000000000000 R14: 00007f53e1575fa0 R15: 00007ffd31d79418 [ 211.933115][ T7723] [ 213.380495][ T7737] netlink: 28 bytes leftover after parsing attributes in process `syz.3.543'. [ 213.681918][ T7739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.543'. [ 213.695319][ T7734] netlink: 32 bytes leftover after parsing attributes in process `syz.1.541'. [ 215.280053][ T29] audit: type=1326 audit(4294967425.210:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7751 comm="syz.3.548" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f271b385d19 code=0x0 [ 221.852753][ T7794] netlink: 28 bytes leftover after parsing attributes in process `syz.3.559'. [ 222.864176][ T7794] hsr_slave_0 (unregistering): left promiscuous mode [ 227.197026][ T7828] netlink: 32 bytes leftover after parsing attributes in process `syz.3.569'. [ 228.001216][ T7839] netlink: 28 bytes leftover after parsing attributes in process `syz.1.573'. [ 228.037310][ T7839] netlink: 28 bytes leftover after parsing attributes in process `syz.1.573'. [ 229.428624][ T7858] netlink: 342 bytes leftover after parsing attributes in process `syz.1.579'. [ 231.239239][ T7883] netlink: 28 bytes leftover after parsing attributes in process `syz.3.584'. [ 231.308240][ T7886] netlink: 28 bytes leftover after parsing attributes in process `syz.3.584'. [ 233.217847][ T7908] Process accounting resumed [ 233.365689][ T7908] Process accounting resumed [ 237.635399][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 248.328668][ T8056] netlink: 326 bytes leftover after parsing attributes in process `syz.3.635'. [ 250.108667][ T8078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.640'. [ 250.118832][ T8081] netlink: 32 bytes leftover after parsing attributes in process `syz.1.642'. [ 250.171801][ T8078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.640'. [ 251.888642][ T8069] ALSA: mixer_oss: invalid OSS volume ' ' [ 252.423851][ T8107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.652'. [ 252.433872][ T8107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.652'. [ 253.186855][ T8106] netlink: 32 bytes leftover after parsing attributes in process `syz.3.651'. [ 254.178466][ T8137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.663'. [ 254.386914][ T8137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.663'. [ 256.426642][ T8157] netlink: 32 bytes leftover after parsing attributes in process `syz.1.672'. [ 257.420498][ T8175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.677'. [ 257.558717][ T8175] veth1_macvtap: left promiscuous mode [ 263.626854][ T8243] Process accounting paused [ 263.802939][ T8252] netlink: 93 bytes leftover after parsing attributes in process `syz.2.707'. [ 266.551339][ T8266] netlink: 32 bytes leftover after parsing attributes in process `syz.2.712'. [ 270.574371][ T8296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.719'. [ 270.655843][ T8300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.719'. [ 270.907309][ T8301] netlink: 32 bytes leftover after parsing attributes in process `syz.2.721'. [ 273.578993][ T8328] netlink: 28 bytes leftover after parsing attributes in process `syz.2.728'. [ 273.639056][ T8330] netlink: 28 bytes leftover after parsing attributes in process `syz.2.728'. [ 275.181612][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.191831][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.200702][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.211578][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.219711][ T5839] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 275.227288][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.036216][ T8339] chnl_net:caif_netlink_parms(): no params data found [ 277.323674][ T5839] Bluetooth: hci5: command tx timeout [ 277.688677][ T8339] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.738033][ T8339] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.745294][ T8339] bridge_slave_0: entered allmulticast mode [ 277.839046][ T8339] bridge_slave_0: entered promiscuous mode [ 277.923971][ T8339] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.977870][ T8339] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.985122][ T8339] bridge_slave_1: entered allmulticast mode [ 278.074418][ T8339] bridge_slave_1: entered promiscuous mode [ 278.781310][ T8339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.831600][ T8339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.394888][ T5839] Bluetooth: hci5: command tx timeout [ 279.876159][ T8339] team0: Port device team_slave_0 added [ 279.936928][ T8339] team0: Port device team_slave_1 added [ 280.345546][ T8339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.378074][ T8339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.534701][ T8339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.623062][ T8339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.647657][ T8339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.788051][ T8339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.127407][ T8339] hsr_slave_0: entered promiscuous mode [ 281.213995][ T8339] hsr_slave_1: entered promiscuous mode [ 281.298015][ T8339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.334782][ T8339] Cannot create hsr debugfs directory [ 281.468060][ T5839] Bluetooth: hci5: command tx timeout [ 282.586811][ T8339] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 282.756977][ T8339] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 283.055020][ T8339] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 283.184340][ T8339] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 283.435834][ T8386] netlink: 32 bytes leftover after parsing attributes in process `syz.2.744'. [ 283.554820][ T5839] Bluetooth: hci5: command tx timeout [ 283.695562][ T8339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.898810][ T8339] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.993660][ T2932] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.000869][ T2932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.059700][ T2932] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.066840][ T2932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.203355][ T8339] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 284.237926][ T8339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 284.968561][ T8408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.749'. [ 284.994684][ T8339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.028541][ T8407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.749'. [ 286.551491][ T8339] veth0_vlan: entered promiscuous mode [ 286.595403][ T8339] veth1_vlan: entered promiscuous mode [ 286.717590][ T8339] veth0_macvtap: entered promiscuous mode [ 286.816632][ T8339] veth1_macvtap: entered promiscuous mode [ 286.894481][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.943808][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.991427][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.045627][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.081904][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.133765][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.175591][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.259590][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.298845][ T8339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.369163][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.417897][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.473001][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.525962][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.583957][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.637637][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.698000][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.747918][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.794851][ T8339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.854988][ T8339] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.900236][ T8339] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.953739][ T8339] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.007873][ T8339] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.751570][ T2932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.791997][ T2932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.896028][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.915652][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.277253][ T8447] FAULT_INJECTION: forcing a failure. [ 290.277253][ T8447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.380924][ T8447] CPU: 1 UID: 0 PID: 8447 Comm: syz.3.757 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 290.391580][ T8447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 290.401665][ T8447] Call Trace: [ 290.404962][ T8447] [ 290.407915][ T8447] dump_stack_lvl+0x16c/0x1f0 [ 290.412623][ T8447] should_fail_ex+0x497/0x5b0 [ 290.417326][ T8447] _copy_to_user+0x32/0xd0 [ 290.421774][ T8447] simple_read_from_buffer+0xd0/0x160 [ 290.427189][ T8447] proc_fail_nth_read+0x198/0x270 [ 290.432248][ T8447] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.437836][ T8447] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.443416][ T8447] vfs_read+0x1df/0xbe0 [ 290.447598][ T8447] ? __fget_files+0x1fc/0x3a0 [ 290.452304][ T8447] ? __pfx___mutex_lock+0x10/0x10 [ 290.457355][ T8447] ? __pfx_vfs_read+0x10/0x10 [ 290.462066][ T8447] ? __fget_files+0x206/0x3a0 [ 290.466786][ T8447] ksys_read+0x12b/0x250 [ 290.471059][ T8447] ? __pfx_ksys_read+0x10/0x10 [ 290.475861][ T8447] do_syscall_64+0xcd/0x250 [ 290.480393][ T8447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.486313][ T8447] RIP: 0033:0x7f271b38472c [ 290.490750][ T8447] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 290.510388][ T8447] RSP: 002b:00007f271c185030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 290.518830][ T8447] RAX: ffffffffffffffda RBX: 00007f271b575fa0 RCX: 00007f271b38472c [ 290.526817][ T8447] RDX: 000000000000000f RSI: 00007f271c1850a0 RDI: 0000000000000004 [ 290.534807][ T8447] RBP: 00007f271c185090 R08: 0000000000000000 R09: 0000000000000000 [ 290.542796][ T8447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.550792][ T8447] R13: 0000000000000000 R14: 00007f271b575fa0 R15: 00007ffcc05724d8 [ 290.558800][ T8447] [ 291.179443][ T8452] netlink: 28 bytes leftover after parsing attributes in process `syz.2.759'. [ 291.581486][ T29] audit: type=1800 audit(4294967501.670:18): pid=8458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="members" dev="configfs" ino=17896 res=0 errno=0 [ 292.175306][ T8463] netlink: 28 bytes leftover after parsing attributes in process `syz.2.759'. [ 292.549463][ T8460] netlink: 32 bytes leftover after parsing attributes in process `syz.5.763'. [ 293.817887][ T8383] Process accounting resumed [ 303.461182][ T8517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.775'. [ 303.880606][ T8517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.775'. [ 309.038928][ T8578] netlink: 28 bytes leftover after parsing attributes in process `syz.1.790'. [ 309.208729][ T8579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.790'. [ 312.704641][ T8602] tipc: Started in network mode [ 312.834829][ T8602] tipc: Node identity ee00, cluster identity 4711 [ 312.890918][ T8602] tipc: Node number set to 60928 [ 313.591033][ T8611] nbd: illegal input index 50331648 [ 314.318586][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.5.803'. [ 314.648283][ T8622] netlink: 28 bytes leftover after parsing attributes in process `syz.3.806'. [ 314.706499][ T8622] netlink: 28 bytes leftover after parsing attributes in process `syz.3.806'. [ 315.219588][ T8626] netlink: 28 bytes leftover after parsing attributes in process `syz.2.807'. [ 319.506789][ T8659] netlink: 32 bytes leftover after parsing attributes in process `syz.2.816'. [ 320.998205][ T8680] netlink: 28 bytes leftover after parsing attributes in process `syz.2.825'. [ 321.128337][ T8682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.825'. [ 323.733070][ T8707] netlink: 32 bytes leftover after parsing attributes in process `syz.1.833'. [ 324.419082][ T8707] Process accounting paused [ 324.579661][ T8719] FAULT_INJECTION: forcing a failure. [ 324.579661][ T8719] name failslab, interval 1, probability 0, space 0, times 0 [ 324.678938][ T8719] CPU: 1 UID: 0 PID: 8719 Comm: syz.3.837 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 324.689593][ T8719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 324.699668][ T8719] Call Trace: [ 324.702969][ T8719] [ 324.705921][ T8719] dump_stack_lvl+0x16c/0x1f0 [ 324.710633][ T8719] should_fail_ex+0x497/0x5b0 [ 324.715336][ T8719] ? fs_reclaim_acquire+0xae/0x150 [ 324.720475][ T8719] should_failslab+0xc2/0x120 [ 324.725192][ T8719] __kmalloc_cache_noprof+0x68/0x420 [ 324.730502][ T8719] ? trace_contention_end+0xee/0x140 [ 324.735814][ T8719] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 324.741302][ T8719] ? find_held_lock+0x2d/0x110 [ 324.746098][ T8719] disk_seqf_start+0x68/0x180 [ 324.750812][ T8719] traverse.part.0.constprop.0+0xac/0x640 [ 324.756558][ T8719] ? trace_lock_acquire+0x14e/0x1f0 [ 324.761795][ T8719] seq_lseek+0x2b4/0x440 [ 324.766069][ T8719] proc_reg_llseek+0x205/0x2f0 [ 324.770867][ T8719] ksys_lseek+0xf0/0x1b0 [ 324.775139][ T8719] do_syscall_64+0xcd/0x250 [ 324.779675][ T8719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.785597][ T8719] RIP: 0033:0x7f271b385d19 [ 324.790034][ T8719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.809674][ T8719] RSP: 002b:00007f271c185038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 324.818129][ T8719] RAX: ffffffffffffffda RBX: 00007f271b575fa0 RCX: 00007f271b385d19 [ 324.826126][ T8719] RDX: 0000000000000001 RSI: 7fffffffffffffff RDI: 0000000000000003 [ 324.834122][ T8719] RBP: 00007f271c185090 R08: 0000000000000000 R09: 0000000000000000 [ 324.842114][ T8719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.850120][ T8719] R13: 0000000000000000 R14: 00007f271b575fa0 R15: 00007ffcc05724d8 [ 324.858142][ T8719] [ 327.169618][ T8733] FAULT_INJECTION: forcing a failure. [ 327.169618][ T8733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.203076][ T8733] CPU: 0 UID: 0 PID: 8733 Comm: syz.5.840 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 327.213803][ T8733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 327.223880][ T8733] Call Trace: [ 327.227183][ T8733] [ 327.230138][ T8733] dump_stack_lvl+0x16c/0x1f0 [ 327.234853][ T8733] should_fail_ex+0x497/0x5b0 [ 327.239562][ T8733] _copy_to_user+0x32/0xd0 [ 327.244010][ T8733] simple_read_from_buffer+0xd0/0x160 [ 327.249418][ T8733] proc_fail_nth_read+0x198/0x270 [ 327.254473][ T8733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 327.260061][ T8733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 327.265642][ T8733] vfs_read+0x1df/0xbe0 [ 327.269825][ T8733] ? __fget_files+0x1fc/0x3a0 [ 327.274528][ T8733] ? __pfx___mutex_lock+0x10/0x10 [ 327.279577][ T8733] ? __pfx_vfs_read+0x10/0x10 [ 327.284286][ T8733] ? __fget_files+0x206/0x3a0 [ 327.288994][ T8733] ksys_read+0x12b/0x250 [ 327.293347][ T8733] ? __pfx_ksys_read+0x10/0x10 [ 327.298145][ T8733] do_syscall_64+0xcd/0x250 [ 327.302682][ T8733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.308599][ T8733] RIP: 0033:0x7f8b7cb8472c [ 327.313030][ T8733] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 327.332658][ T8733] RSP: 002b:00007f8b7d9d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 327.341095][ T8733] RAX: ffffffffffffffda RBX: 00007f8b7cd75fa0 RCX: 00007f8b7cb8472c [ 327.349086][ T8733] RDX: 000000000000000f RSI: 00007f8b7d9d50a0 RDI: 0000000000000004 [ 327.357108][ T8733] RBP: 00007f8b7d9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 327.365095][ T8733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.373082][ T8733] R13: 0000000000000000 R14: 00007f8b7cd75fa0 R15: 00007ffd9f72e748 [ 327.381085][ T8733] [ 327.638419][ T8739] Process accounting resumed [ 329.810185][ T8753] netlink: 32 bytes leftover after parsing attributes in process `syz.3.846'. [ 330.987005][ T7174] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.859540][ T7174] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.018489][ T8779] FAULT_INJECTION: forcing a failure. [ 333.018489][ T8779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.101120][ T8779] CPU: 1 UID: 0 PID: 8779 Comm: syz.3.853 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 333.111781][ T8779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 333.121906][ T8779] Call Trace: [ 333.125231][ T8779] [ 333.128178][ T8779] dump_stack_lvl+0x16c/0x1f0 [ 333.132892][ T8779] should_fail_ex+0x497/0x5b0 [ 333.137612][ T8779] _copy_to_iter+0x4a5/0x1400 [ 333.142337][ T8779] ? __pfx__copy_to_iter+0x10/0x10 [ 333.147487][ T8779] ? __virt_addr_valid+0x1a4/0x590 [ 333.152651][ T8779] ? __virt_addr_valid+0x5e/0x590 [ 333.157715][ T8779] ? __phys_addr_symbol+0x30/0x80 [ 333.162767][ T8779] ? __check_object_size+0x488/0x710 [ 333.168093][ T8779] seq_read_iter+0x725/0x12b0 [ 333.172812][ T8779] seq_read+0x39f/0x4e0 [ 333.177005][ T8779] ? __pfx_seq_read+0x10/0x10 [ 333.181733][ T8779] ? __pfx_seq_read+0x10/0x10 [ 333.186435][ T8779] proc_reg_read+0x23d/0x330 [ 333.191055][ T8779] ? __pfx_proc_reg_read+0x10/0x10 [ 333.196201][ T8779] vfs_read+0x1df/0xbe0 [ 333.200386][ T8779] ? __fget_files+0x1fc/0x3a0 [ 333.205082][ T8779] ? __pfx_lock_release+0x10/0x10 [ 333.210125][ T8779] ? __pfx_vfs_read+0x10/0x10 [ 333.214812][ T8779] ? lock_acquire+0x2f/0xb0 [ 333.219329][ T8779] ? __fget_files+0x40/0x3a0 [ 333.223929][ T8779] ? __fget_files+0x206/0x3a0 [ 333.228619][ T8779] __x64_sys_pread64+0x1f6/0x250 [ 333.233571][ T8779] ? __pfx___x64_sys_pread64+0x10/0x10 [ 333.239045][ T8779] do_syscall_64+0xcd/0x250 [ 333.243565][ T8779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.249469][ T8779] RIP: 0033:0x7f271b385d19 [ 333.253889][ T8779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.273506][ T8779] RSP: 002b:00007f271c185038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 333.281930][ T8779] RAX: ffffffffffffffda RBX: 00007f271b575fa0 RCX: 00007f271b385d19 [ 333.289908][ T8779] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 333.297886][ T8779] RBP: 00007f271c185090 R08: 0000000000000000 R09: 0000000000000000 [ 333.305866][ T8779] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 333.313841][ T8779] R13: 0000000000000000 R14: 00007f271b575fa0 R15: 00007ffcc05724d8 [ 333.321835][ T8779] [ 333.343447][ T7174] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.607961][ T8774] netlink: 342 bytes leftover after parsing attributes in process `syz.2.852'. [ 333.854639][ T8780] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 333.968666][ T8780] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 333.974797][ T8780] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 334.098019][ T8780] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 334.114359][ T8780] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 334.148595][ T8780] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 334.157413][ T7174] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.270801][ T8780] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 334.768066][ T7174] bridge_slave_1: left allmulticast mode [ 334.774048][ T7174] bridge_slave_1: left promiscuous mode [ 334.809313][ T7174] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.849150][ T8793] FAULT_INJECTION: forcing a failure. [ 334.849150][ T8793] name failslab, interval 1, probability 0, space 0, times 0 [ 334.917932][ T8793] CPU: 0 UID: 0 PID: 8793 Comm: syz.5.857 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 334.928589][ T8793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 334.938677][ T8793] Call Trace: [ 334.941988][ T8793] [ 334.944947][ T8793] dump_stack_lvl+0x16c/0x1f0 [ 334.949661][ T8793] should_fail_ex+0x497/0x5b0 [ 334.954378][ T8793] ? fs_reclaim_acquire+0xae/0x150 [ 334.959538][ T8793] should_failslab+0xc2/0x120 [ 334.964254][ T8793] __kmalloc_noprof+0xce/0x4f0 [ 334.969049][ T8793] ? d_absolute_path+0x137/0x1b0 [ 334.974034][ T8793] ? tomoyo_encode2+0x100/0x3e0 [ 334.978934][ T8793] tomoyo_encode2+0x100/0x3e0 [ 334.983650][ T8793] tomoyo_realpath_from_path+0x1a7/0x710 [ 334.989339][ T8793] tomoyo_path_number_perm+0x248/0x5b0 [ 334.994846][ T8793] ? tomoyo_path_number_perm+0x235/0x5b0 [ 335.000529][ T8793] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 335.006591][ T8793] ? __pfx_lock_release+0x10/0x10 [ 335.011663][ T8793] ? trace_lock_acquire+0x14e/0x1f0 [ 335.016925][ T8793] ? lock_acquire+0x2f/0xb0 [ 335.021460][ T8793] ? __fget_files+0x40/0x3a0 [ 335.026089][ T8793] ? __fget_files+0x206/0x3a0 [ 335.030808][ T8793] security_file_ioctl+0x9b/0x240 [ 335.036999][ T8793] __x64_sys_ioctl+0xb7/0x200 [ 335.041744][ T8793] do_syscall_64+0xcd/0x250 [ 335.046294][ T8793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.052228][ T8793] RIP: 0033:0x7f8b7cb85d19 [ 335.056674][ T8793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.076329][ T8793] RSP: 002b:00007f8b7d9d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 335.084798][ T8793] RAX: ffffffffffffffda RBX: 00007f8b7cd75fa0 RCX: 00007f8b7cb85d19 [ 335.092805][ T8793] RDX: 0000000000000000 RSI: 000000004004743d RDI: 0000000000000004 [ 335.100820][ T8793] RBP: 00007f8b7d9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 335.108830][ T8793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.116839][ T8793] R13: 0000000000000000 R14: 00007f8b7cd75fa0 R15: 00007ffd9f72e748 [ 335.124865][ T8793] [ 335.143417][ T7174] bridge_slave_0: left allmulticast mode [ 335.159096][ T8793] ERROR: Out of memory at tomoyo_realpath_from_path. [ 335.172570][ T7174] bridge_slave_0: left promiscuous mode [ 335.203965][ T7174] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.957815][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 336.027941][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 336.034024][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 336.107799][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 336.188081][ T5839] Bluetooth: hci5: command 0x0c1a tx timeout [ 337.348575][ T8829] netlink: 28 bytes leftover after parsing attributes in process `syz.5.861'. [ 337.421987][ T8830] netlink: 28 bytes leftover after parsing attributes in process `syz.5.861'. [ 338.278135][ T5839] Bluetooth: hci5: command 0x0c1a tx timeout [ 338.918295][ T7174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.058786][ T7174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.212744][ T7174] bond0 (unregistering): Released all slaves [ 340.390516][ T5839] Bluetooth: hci5: command 0x0c1a tx timeout [ 341.469426][ T8846] nbd: must specify at least one socket [ 344.120476][ T7174] tipc: Left network mode [ 350.604631][ T7174] hsr_slave_0: left promiscuous mode [ 350.739625][ T7174] hsr_slave_1: left promiscuous mode [ 351.203981][ T7174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.217869][ T7174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.346245][ T7174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.371700][ T7174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.455212][ T7174] veth1_macvtap: left promiscuous mode [ 351.491787][ T7174] veth0_macvtap: left promiscuous mode [ 351.528310][ T7174] veth1_vlan: left promiscuous mode [ 351.538097][ T7174] veth0_vlan: left promiscuous mode [ 354.666200][ T7174] team0 (unregistering): Port device team_slave_1 removed [ 354.783725][ T7174] team0 (unregistering): Port device team_slave_0 removed [ 356.529388][ T8965] HSR: entered promiscuous mode [ 359.597374][ T29] audit: type=1800 audit(4295164177.679:19): pid=8984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.888" name="features" dev="configfs" ino=21050 res=0 errno=0 [ 367.572323][ T9155] syz.5.912 uses obsolete (PF_INET,SOCK_PACKET) [ 370.893448][ T29] audit: type=1800 audit(4295164188.979:20): pid=9201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.920" name="discovery_nqn" dev="configfs" ino=21508 res=0 errno=0 [ 374.739361][ T9243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.929'. [ 374.801006][ T9245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.929'. [ 375.985491][ T9259] ptrace attach of "./syz-executor exec"[5829] was attempted by "./syz-executor exec"[9259] [ 379.969397][ T9318] netlink: 28 bytes leftover after parsing attributes in process `syz.5.941'. [ 380.098288][ T9320] netlink: 28 bytes leftover after parsing attributes in process `syz.5.941'. [ 383.291155][ T9370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.953'. [ 383.334038][ T9370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.953'. [ 384.143308][ T9385] netlink: 4 bytes leftover after parsing attributes in process `syz.5.958'. [ 384.189315][ T9385] netlink: 4 bytes leftover after parsing attributes in process `syz.5.958'. [ 384.889807][ T9399] netlink: 28 bytes leftover after parsing attributes in process `syz.5.963'. [ 384.931579][ T9399] netlink: 28 bytes leftover after parsing attributes in process `syz.5.963'. syzkaller syzkaller login: [ 387.093488][ T9417] netlink: 'syz.2.968': attribute type 1 has an invalid length. [ 387.173504][ T9417] netlink: 53 bytes leftover after parsing attributes in process `syz.2.968'. [ 387.522249][ T9429] FAULT_INJECTION: forcing a failure. [ 387.522249][ T9429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.628181][ T9429] CPU: 1 UID: 0 PID: 9429 Comm: syz.5.969 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 387.638826][ T9429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 387.648905][ T9429] Call Trace: [ 387.652201][ T9429] [ 387.655145][ T9429] dump_stack_lvl+0x16c/0x1f0 [ 387.659850][ T9429] should_fail_ex+0x497/0x5b0 [ 387.664558][ T9429] _copy_to_user+0x32/0xd0 [ 387.669003][ T9429] simple_read_from_buffer+0xd0/0x160 [ 387.674415][ T9429] proc_fail_nth_read+0x198/0x270 [ 387.679486][ T9429] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 387.685071][ T9429] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 387.690644][ T9429] vfs_read+0x1df/0xbe0 [ 387.694824][ T9429] ? __fget_files+0x1fc/0x3a0 [ 387.699525][ T9429] ? __pfx___mutex_lock+0x10/0x10 [ 387.704574][ T9429] ? __pfx_vfs_read+0x10/0x10 [ 387.709282][ T9429] ? __fget_files+0x206/0x3a0 [ 387.713993][ T9429] ksys_read+0x12b/0x250 [ 387.718260][ T9429] ? __pfx_ksys_read+0x10/0x10 [ 387.723056][ T9429] do_syscall_64+0xcd/0x250 [ 387.727583][ T9429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.733501][ T9429] RIP: 0033:0x7f8b7cb8472c [ 387.737942][ T9429] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 387.757575][ T9429] RSP: 002b:00007f8b7d9d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 387.766029][ T9429] RAX: ffffffffffffffda RBX: 00007f8b7cd75fa0 RCX: 00007f8b7cb8472c [ 387.774052][ T9429] RDX: 000000000000000f RSI: 00007f8b7d9d50a0 RDI: 0000000000000003 [ 387.782071][ T9429] RBP: 00007f8b7d9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 387.790065][ T9429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.798055][ T9429] R13: 0000000000000001 R14: 00007f8b7cd75fa0 R15: 00007ffd9f72e748 [ 387.806066][ T9429] [ 390.280554][ T9444] netlink: 28 bytes leftover after parsing attributes in process `syz.5.973'. [ 390.298684][ T9444] netlink: 28 bytes leftover after parsing attributes in process `syz.5.973'. [ 393.472376][ T9497] netlink: 28 bytes leftover after parsing attributes in process `syz.1.983'. [ 393.534526][ T9495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.983'. [ 397.712416][ T9542] FAULT_INJECTION: forcing a failure. [ 397.712416][ T9542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.893889][ T9542] CPU: 1 UID: 0 PID: 9542 Comm: syz.5.992 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 397.904542][ T9542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 397.914625][ T9542] Call Trace: [ 397.917923][ T9542] [ 397.920867][ T9542] dump_stack_lvl+0x16c/0x1f0 [ 397.925574][ T9542] should_fail_ex+0x497/0x5b0 [ 397.930279][ T9542] _copy_to_user+0x32/0xd0 [ 397.934726][ T9542] simple_read_from_buffer+0xd0/0x160 [ 397.940151][ T9542] proc_fail_nth_read+0x198/0x270 [ 397.945218][ T9542] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 397.950814][ T9542] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 397.956396][ T9542] vfs_read+0x1df/0xbe0 [ 397.960577][ T9542] ? __fget_files+0x1fc/0x3a0 [ 397.965276][ T9542] ? __pfx___mutex_lock+0x10/0x10 [ 397.970323][ T9542] ? __pfx_vfs_read+0x10/0x10 [ 397.975028][ T9542] ? __fget_files+0x206/0x3a0 [ 397.979740][ T9542] ksys_read+0x12b/0x250 [ 397.984005][ T9542] ? __pfx_ksys_read+0x10/0x10 [ 397.988803][ T9542] do_syscall_64+0xcd/0x250 [ 397.993685][ T9542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.999605][ T9542] RIP: 0033:0x7f8b7cb8472c [ 398.004040][ T9542] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 398.023668][ T9542] RSP: 002b:00007f8b7d9d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 398.032108][ T9542] RAX: ffffffffffffffda RBX: 00007f8b7cd75fa0 RCX: 00007f8b7cb8472c [ 398.040102][ T9542] RDX: 000000000000000f RSI: 00007f8b7d9d50a0 RDI: 0000000000000004 [ 398.048088][ T9542] RBP: 00007f8b7d9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 398.056072][ T9542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.064057][ T9542] R13: 0000000000000000 R14: 00007f8b7cd75fa0 R15: 00007ffd9f72e748 [ 398.072090][ T9542] [ 398.075250][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.353192][ T9548] netlink: 28 bytes leftover after parsing attributes in process `syz.3.993'. [ 398.447210][ T9546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.993'. [ 403.108767][ T9614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1004'. [ 403.179305][ T9619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1004'. [ 409.400432][ T9692] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1020'. [ 409.652843][ T9696] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1020'. [ 409.730883][ T9687] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1019'. [ 409.865897][ T9699] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1019'. [ 412.704432][ T9722] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1028'. [ 415.093102][ T9749] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1035'. [ 415.178224][ T9750] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1035'. [ 415.837578][ T29] audit: type=1326 audit(4295164233.919:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9731 comm="syz.5.1030" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b7cb85d19 code=0x0 [ 416.710753][ T9733] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1030'. [ 424.758764][ T9816] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1058'. [ 424.800005][ T9816] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1058'. [ 425.721254][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1061'. [ 427.441120][ T29] audit: type=1804 audit(4295164245.529:22): pid=9843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1068" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw" dev="tracefs" ino=1210 res=1 errno=0 [ 430.734854][ T9857] netlink: 93 bytes leftover after parsing attributes in process `syz.5.1071'. [ 436.239398][ T9951] FAULT_INJECTION: forcing a failure. [ 436.239398][ T9951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.283648][ T9951] CPU: 1 UID: 0 PID: 9951 Comm: syz.5.1103 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 436.294393][ T9951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 436.304468][ T9951] Call Trace: [ 436.307762][ T9951] [ 436.310710][ T9951] dump_stack_lvl+0x16c/0x1f0 [ 436.315419][ T9951] should_fail_ex+0x497/0x5b0 [ 436.320131][ T9951] _copy_to_user+0x32/0xd0 [ 436.324584][ T9951] simple_read_from_buffer+0xd0/0x160 [ 436.329993][ T9951] proc_fail_nth_read+0x198/0x270 [ 436.335058][ T9951] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 436.340642][ T9951] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 436.346229][ T9951] vfs_read+0x1df/0xbe0 [ 436.350411][ T9951] ? __fget_files+0x1fc/0x3a0 [ 436.355112][ T9951] ? __pfx___mutex_lock+0x10/0x10 [ 436.360165][ T9951] ? __pfx_vfs_read+0x10/0x10 [ 436.364874][ T9951] ? __fget_files+0x206/0x3a0 [ 436.369587][ T9951] ksys_read+0x12b/0x250 [ 436.373856][ T9951] ? __pfx_ksys_read+0x10/0x10 [ 436.378655][ T9951] do_syscall_64+0xcd/0x250 [ 436.383190][ T9951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.389115][ T9951] RIP: 0033:0x7f8b7cb8472c [ 436.393551][ T9951] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 436.413182][ T9951] RSP: 002b:00007f8b7d9d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 436.421626][ T9951] RAX: ffffffffffffffda RBX: 00007f8b7cd75fa0 RCX: 00007f8b7cb8472c [ 436.429617][ T9951] RDX: 000000000000000f RSI: 00007f8b7d9d50a0 RDI: 0000000000000004 [ 436.437607][ T9951] RBP: 00007f8b7d9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 436.445594][ T9951] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 436.453582][ T9951] R13: 0000000000000000 R14: 00007f8b7cd75fa0 R15: 00007ffd9f72e748 [ 436.461588][ T9951] [ 437.744142][ T9966] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1106'. [ 437.794062][ T9966] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1106'. [ 439.943568][ T9984] netlink: 93 bytes leftover after parsing attributes in process `syz.1.1113'. [ 440.510855][ T9994] delete_channel: no stack [ 440.866576][T10002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1119'. [ 441.042937][T10002] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 441.351149][T10006] netlink: 290 bytes leftover after parsing attributes in process `syz.2.1121'. [ 441.734108][T10014] nbd: must specify at least one socket [ 443.985277][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1131'. [ 447.516330][T10073] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1141'. [ 447.549424][T10073] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1141'. [ 447.849629][ T29] audit: type=1800 audit(4295164265.939:23): pid=10078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="members" dev="configfs" ino=24001 res=0 errno=0 [ 449.010117][T10094] nbd: must specify at least one socket [ 450.282381][T10104] openvswitch: netlink: Flow actions attr not present in new flow. [ 450.549774][T10108] openvswitch: netlink: Key 23 has unexpected len 0 expected 2 [ 450.670384][T10110] nbd: must specify at least one socket [ 453.105258][T10137] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1156'. [ 453.248515][T10138] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1156'. [ 453.507118][T10140] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1158'. [ 455.357842][T10166] nbd: must specify at least one socket [ 458.289514][T10203] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1173'. [ 458.364968][T10208] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1173'. [ 458.678391][T10194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1169'. [ 460.700134][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1177'. [ 462.958441][T10242] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1184'. [ 462.999123][T10242] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1184'. [ 463.026082][T10243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1183'. [ 466.873383][T10292] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1199'. [ 466.913299][T10293] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1200'. [ 466.928752][T10292] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1199'. [ 466.952923][T10293] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1200'. [ 469.065123][T10311] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1204'. [ 469.715913][T10321] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1209'. [ 469.736876][T10321] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1209'. [ 470.413405][T10325] HfR: entered promiscuous mode [ 470.508461][T10325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1207'. [ 472.429880][T10355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1219'. [ 472.495107][T10355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1219'. [ 472.957907][T10373] nbd: must specify at least one socket [ 474.941630][ T5839] Bluetooth: hci0: Malformed Event: 0x2f [ 475.157240][T10399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1234'. [ 475.217941][T10399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1234'. [ 476.967864][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1241'. [ 477.045775][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1241'. [ 477.299090][T10435] nbd: must specify at least one socket [ 477.727828][T10439] bridge0: port 3(syz_tun) entered blocking state [ 477.891986][T10439] bridge0: port 3(syz_tun) entered disabled state [ 477.933447][T10439] syz_tun: entered allmulticast mode [ 478.013088][T10439] syz_tun: entered promiscuous mode [ 478.073424][T10439] bridge0: port 3(syz_tun) entered blocking state [ 478.080066][T10439] bridge0: port 3(syz_tun) entered forwarding state [ 478.343106][T10451] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1249'. [ 480.331524][T10474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1256'. [ 480.393849][T10474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1256'. [ 480.649208][T10477] nbd: must specify at least one socket [ 481.560133][T10495] netlink: 326 bytes leftover after parsing attributes in process `syz.5.1259'. [ 481.849228][T10498] FAULT_INJECTION: forcing a failure. [ 481.849228][T10498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.897790][T10498] CPU: 1 UID: 0 PID: 10498 Comm: syz.3.1263 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 481.908613][T10498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 481.918692][T10498] Call Trace: [ 481.921994][T10498] [ 481.924943][T10498] dump_stack_lvl+0x16c/0x1f0 [ 481.929684][T10498] should_fail_ex+0x497/0x5b0 [ 481.934393][T10498] _copy_to_user+0x32/0xd0 [ 481.938840][T10498] simple_read_from_buffer+0xd0/0x160 [ 481.944250][T10498] proc_fail_nth_read+0x198/0x270 [ 481.949306][T10498] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 481.954889][T10498] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 481.960469][T10498] vfs_read+0x1df/0xbe0 [ 481.964677][T10498] ? __fget_files+0x1fc/0x3a0 [ 481.969393][T10498] ? __pfx___mutex_lock+0x10/0x10 [ 481.974455][T10498] ? __pfx_vfs_read+0x10/0x10 [ 481.979190][T10498] ? __fget_files+0x206/0x3a0 [ 481.983921][T10498] ksys_read+0x12b/0x250 [ 481.988207][T10498] ? __pfx_ksys_read+0x10/0x10 [ 481.993022][T10498] do_syscall_64+0xcd/0x250 [ 481.997555][T10498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.003479][T10498] RIP: 0033:0x7f271b38472c [ 482.007914][T10498] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 482.027550][T10498] RSP: 002b:00007f271c185030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 482.035992][T10498] RAX: ffffffffffffffda RBX: 00007f271b575fa0 RCX: 00007f271b38472c [ 482.043989][T10498] RDX: 000000000000000f RSI: 00007f271c1850a0 RDI: 0000000000000004 [ 482.051986][T10498] RBP: 00007f271c185090 R08: 0000000000000000 R09: 0000000000000000 [ 482.059986][T10498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.067984][T10498] R13: 0000000000000000 R14: 00007f271b575fa0 R15: 00007ffcc05724d8 [ 482.076000][T10498] [ 483.604054][T10517] nbd: must specify at least one socket [ 486.278095][T10560] nbd: must specify at least one socket [ 487.020979][T10571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1281'. [ 487.031127][T10571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1281'. [ 488.019218][T10594] FAULT_INJECTION: forcing a failure. [ 488.019218][T10594] name failslab, interval 1, probability 0, space 0, times 0 [ 488.057776][T10594] CPU: 1 UID: 0 PID: 10594 Comm: syz.2.1289 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 488.068607][T10594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 488.078673][T10594] Call Trace: [ 488.081959][T10594] [ 488.084893][T10594] dump_stack_lvl+0x16c/0x1f0 [ 488.089593][T10594] should_fail_ex+0x497/0x5b0 [ 488.094282][T10594] ? fs_reclaim_acquire+0xae/0x150 [ 488.099406][T10594] should_failslab+0xc2/0x120 [ 488.104097][T10594] __kmalloc_node_noprof+0xd1/0x520 [ 488.109316][T10594] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 488.114793][T10594] __kvmalloc_node_noprof+0xad/0x1a0 [ 488.120092][T10594] seq_read_iter+0x82a/0x12b0 [ 488.124780][T10594] ? __mutex_trylock_common+0xea/0x250 [ 488.130252][T10594] kernfs_fop_read_iter+0x414/0x580 [ 488.135464][T10594] ? rw_verify_area+0xd0/0x700 [ 488.140240][T10594] vfs_read+0x87f/0xbe0 [ 488.144413][T10594] ? __pfx_vfs_read+0x10/0x10 [ 488.149117][T10594] ksys_read+0x12b/0x250 [ 488.153371][T10594] ? __pfx_ksys_read+0x10/0x10 [ 488.158156][T10594] do_syscall_64+0xcd/0x250 [ 488.162671][T10594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.168574][T10594] RIP: 0033:0x7fde53985d19 [ 488.172996][T10594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.192611][T10594] RSP: 002b:00007fde547e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 488.201032][T10594] RAX: ffffffffffffffda RBX: 00007fde53b75fa0 RCX: 00007fde53985d19 [ 488.209011][T10594] RDX: 0000000000001000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 488.216986][T10594] RBP: 00007fde547e9090 R08: 0000000000000000 R09: 0000000000000000 [ 488.224962][T10594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.232935][T10594] R13: 0000000000000000 R14: 00007fde53b75fa0 R15: 00007ffd41270b68 [ 488.240931][T10594] [ 488.843201][T10605] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1292'. [ 488.901661][T10607] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1292'. [ 491.005239][ T29] audit: type=1806 audit(4295164309.089:24): res=-14 [ 492.954143][T10648] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1302'. [ 493.323808][T10649] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1302'. [ 495.355642][T10689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1316'. [ 495.418500][T10689] team_slave_0: entered allmulticast mode [ 497.784610][T10721] sg_read: process 1050 (syz.2.1325) changed security contexts after opening file descriptor, this is not allowed. [ 499.267223][T10731] nbd: must specify at least one socket [ 511.256065][T10832] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1352'. [ 511.697976][T10834] netlink: 322 bytes leftover after parsing attributes in process `syz.5.1353'. [ 512.005881][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1354'. [ 515.416875][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1365'. [ 520.420299][ T29] audit: type=1800 audit(4295164338.509:25): pid=10919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1378" name="discovery_nqn" dev="configfs" ino=26470 res=0 errno=0 [ 522.414351][T10943] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1386'. [ 522.559000][T10944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1385'. [ 522.640968][T10944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1385'. [ 522.753630][T10947] FAULT_INJECTION: forcing a failure. [ 522.753630][T10947] name failslab, interval 1, probability 0, space 0, times 0 [ 522.786752][T10947] CPU: 1 UID: 0 PID: 10947 Comm: syz.2.1387 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 522.797622][T10947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 522.807701][T10947] Call Trace: [ 522.810998][T10947] [ 522.813948][T10947] dump_stack_lvl+0x16c/0x1f0 [ 522.818664][T10947] should_fail_ex+0x497/0x5b0 [ 522.823367][T10947] ? fs_reclaim_acquire+0xae/0x150 [ 522.828514][T10947] should_failslab+0xc2/0x120 [ 522.833218][T10947] __kmalloc_noprof+0xce/0x4f0 [ 522.838010][T10947] ? do_sys_poll+0x24b/0xde0 [ 522.842626][T10947] do_sys_poll+0x24b/0xde0 [ 522.847069][T10947] ? __pfx_mark_lock+0x10/0x10 [ 522.851875][T10947] ? __pfx_do_sys_poll+0x10/0x10 [ 522.856840][T10947] ? __pfx___lock_acquire+0x10/0x10 [ 522.862152][T10947] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 522.868160][T10947] ? __fget_files+0x206/0x3a0 [ 522.872866][T10947] __x64_sys_poll+0xff/0x450 [ 522.877475][T10947] ? __pfx___x64_sys_poll+0x10/0x10 [ 522.882722][T10947] do_syscall_64+0xcd/0x250 [ 522.887250][T10947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.893168][T10947] RIP: 0033:0x7fde53985d19 [ 522.897602][T10947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.917231][T10947] RSP: 002b:00007fde547e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 522.925673][T10947] RAX: ffffffffffffffda RBX: 00007fde53b75fa0 RCX: 00007fde53985d19 [ 522.933667][T10947] RDX: 00000000fffffffd RSI: 0000000000000100 RDI: 0000000020000040 [ 522.941658][T10947] RBP: 00007fde547e9090 R08: 0000000000000000 R09: 0000000000000000 [ 522.949662][T10947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.957651][T10947] R13: 0000000000000000 R14: 00007fde53b75fa0 R15: 00007ffd41270b68 [ 522.965658][T10947] [ 524.063532][T10958] nbd: must specify at least one socket [ 529.040433][T10990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1398'. [ 529.111778][T10993] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1398'. [ 529.715063][T10998] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1400'. [ 529.945616][T11004] nbd: must specify at least one socket [ 530.605459][T10998] veth1_macvtap: left promiscuous mode [ 530.809305][T10998] macsec0: entered promiscuous mode [ 531.653184][T11024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1409'. [ 531.715112][T11028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1409'. [ 531.742920][T11020] netlink: 'syz.1.1407': attribute type 11 has an invalid length. [ 531.781300][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1407'. [ 533.529395][T11041] nbd: must specify at least one socket [ 536.514377][T11064] CIFS: VFS: Invalid SecurityFlags: [ 538.354422][T11091] nbd: must specify at least one socket [ 543.053558][T11142] nbd: must specify at least one socket [ 543.783004][T11146] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1439'. [ 543.839759][T11146] ima: policy update failed [ 543.844434][ T29] audit: type=1802 audit(4295164361.929:26): pid=11146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1439" res=0 errno=0 [ 543.880423][T11146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1439'. [ 555.677329][T11237] kAFS: No cell specified [ 560.375311][ T29] audit: type=1800 audit(4295164378.459:27): pid=11272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1472" name="features" dev="configfs" ino=27603 res=0 errno=0 [ 561.110958][T11282] FAULT_INJECTION: forcing a failure. [ 561.110958][T11282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.258078][T11282] CPU: 1 UID: 0 PID: 11282 Comm: syz.3.1474 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 561.268903][T11282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 561.278983][T11282] Call Trace: [ 561.282274][T11282] [ 561.285217][T11282] dump_stack_lvl+0x16c/0x1f0 [ 561.289923][T11282] should_fail_ex+0x497/0x5b0 [ 561.294634][T11282] _copy_from_user+0x2e/0xd0 [ 561.299259][T11282] memdup_user+0x71/0xd0 [ 561.303528][T11282] strndup_user+0x78/0xe0 [ 561.307883][T11282] __do_sys_fsconfig+0x2e3/0xbe0 [ 561.312866][T11282] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 561.318373][T11282] do_syscall_64+0xcd/0x250 [ 561.322913][T11282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.328832][T11282] RIP: 0033:0x7f271b385d19 [ 561.333248][T11282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.352860][T11282] RSP: 002b:00007f271c185038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 561.361281][T11282] RAX: ffffffffffffffda RBX: 00007f271b575fa0 RCX: 00007f271b385d19 [ 561.369254][T11282] RDX: 00000000200001c0 RSI: 0000000000000001 RDI: 0000000000000004 [ 561.377225][T11282] RBP: 00007f271c185090 R08: 0000000000000000 R09: 0000000000000000 [ 561.385199][T11282] R10: 0000000020000280 R11: 0000000000000246 R12: 0000000000000001 [ 561.393177][T11282] R13: 0000000000000000 R14: 00007f271b575fa0 R15: 00007ffcc05724d8 [ 561.401162][T11282] [ 561.702396][T11287] kAFS: No cell specified [ 566.076707][T11313] openvswitch: netlink: Flow actions attr not present in new flow. [ 567.211712][ T29] audit: type=1800 audit(4295164385.299:28): pid=11332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1486" name="features" dev="configfs" ino=27809 res=0 errno=0 [ 570.838217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 571.334338][T11350] nbd: must specify at least one socket [ 573.008018][T11370] netlink: 'syz.2.1498': attribute type 4 has an invalid length. [ 580.653029][T11404] nbd: must specify at least one socket [ 585.902643][T11450] nbd: must specify at least one socket [ 587.058371][T11467] ptrace attach of "./syz-executor exec"[5829] was attempted by "./syz-executor exec"[11467] [ 589.778702][T11498] nbd: must specify at least one socket [ 592.752462][ T29] audit: type=1804 audit(8277292045.910:29): pid=11525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1543" name="#)-\&[}" dev="mqueue" ino=28460 res=1 errno=0 [ 592.760332][T11525] kernel read not supported for file /#)-\&[} (pid: 11525 comm: syz.2.1543) [ 592.760562][ T29] audit: type=1800 audit(8277292045.930:30): pid=11525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1543" name="#)-\&[}" dev="mqueue" ino=28460 res=0 errno=0 [ 592.771835][ T29] audit: type=1804 audit(8277292045.940:31): pid=11525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1543" name="#)-\&[}" dev="mqueue" ino=28460 res=1 errno=0 [ 592.786127][ T29] audit: type=1804 audit(8277292045.950:32): pid=11525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1543" name="#)-\&[}" dev="mqueue" ino=28460 res=1 errno=0 [ 597.978918][T11579] openvswitch: netlink: IP tunnel dst address not specified [ 598.379789][T11581] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 598.424279][T11581] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 599.524497][T11593] sock: sock_timestamping_bind_phc: sock not bind to device [ 600.179749][T11581] syz.1.1554 (11581) used greatest stack depth: 20656 bytes left [ 612.059907][T11689] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 612.182223][T11689] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 613.344823][T11709] netlink: 338 bytes leftover after parsing attributes in process `syz.5.1588'. [ 613.768234][T11714] nbd: must specify at least one socket [ 619.073595][ T29] audit: type=1800 audit(8277292072.240:33): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1604" name="discovery_nqn" dev="configfs" ino=28966 res=0 errno=0 [ 619.756172][T11771] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 619.782934][T11771] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 621.678501][T11798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1613'. [ 625.817792][T11838] ima: policy update failed [ 625.951187][ T29] audit: type=1802 audit(8277292078.990:34): pid=11838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1626" res=0 errno=0 [ 626.395964][T11854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1630'. [ 626.460379][T11858] nbd: must specify at least one socket [ 626.933875][T11867] nbd: must specify at least one socket [ 627.340496][T11872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1637'. [ 627.779432][T11876] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 627.906974][T11876] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 627.987865][T11876] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 627.997788][T11876] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 628.031082][T11876] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 629.027975][T11892] ima: policy update failed [ 629.073767][ T29] audit: type=1802 audit(8277292082.240:35): pid=11892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1643" res=0 errno=0 [ 629.789556][T11733] Bluetooth: hci0: command 0x0c1a tx timeout [ 629.947934][T11733] Bluetooth: hci1: command 0x0c1a tx timeout [ 630.035222][T11733] Bluetooth: hci2: command 0x0c1a tx timeout [ 630.041696][T11733] Bluetooth: hci3: command 0x0c1a tx timeout [ 630.107720][T11733] Bluetooth: hci5: command 0x0c1a tx timeout [ 630.250823][T11909] nbd: must specify at least one socket [ 635.763677][T11906] Bluetooth: hci5: unexpected event 0x03 length: 72 > 11 [ 638.508399][T11993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1674'. [ 638.571195][T11993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1674'. [ 640.748598][ T29] audit: type=1800 audit(8277292093.920:36): pid=12004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="members" dev="configfs" ino=30758 res=0 errno=0 [ 641.666871][T12016] FAULT_INJECTION: forcing a failure. [ 641.666871][T12016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.697690][T12016] CPU: 1 UID: 0 PID: 12016 Comm: syz.5.1677 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 641.708517][T12016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 641.718592][T12016] Call Trace: [ 641.721883][T12016] [ 641.724828][T12016] dump_stack_lvl+0x16c/0x1f0 [ 641.729534][T12016] should_fail_ex+0x497/0x5b0 [ 641.734242][T12016] _copy_from_user+0x2e/0xd0 [ 641.738865][T12016] do_sys_poll+0x1d6/0xde0 [ 641.743302][T12016] ? __pfx_mark_lock+0x10/0x10 [ 641.748108][T12016] ? __pfx_do_sys_poll+0x10/0x10 [ 641.753065][T12016] ? __pfx___lock_acquire+0x10/0x10 [ 641.758397][T12016] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 641.764417][T12016] ? __fget_files+0x206/0x3a0 [ 641.769141][T12016] __x64_sys_poll+0xff/0x450 [ 641.773760][T12016] ? __pfx___x64_sys_poll+0x10/0x10 [ 641.778992][T12016] do_syscall_64+0xcd/0x250 [ 641.783521][T12016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.789438][T12016] RIP: 0033:0x7f8b7cb85d19 [ 641.793872][T12016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.813505][T12016] RSP: 002b:00007f8b7d9d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 641.821953][T12016] RAX: ffffffffffffffda RBX: 00007f8b7cd75fa0 RCX: 00007f8b7cb85d19 [ 641.829944][T12016] RDX: 00000000fffffffd RSI: 0000000000000100 RDI: 0000000020000040 [ 641.837931][T12016] RBP: 00007f8b7d9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 641.845919][T12016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.853905][T12016] R13: 0000000000000000 R14: 00007f8b7cd75fa0 R15: 00007ffd9f72e748 [ 641.861917][T12016] [ 643.057837][T12032] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1685'. [ 644.442697][T12045] nbd: must specify at least one socket [ 645.289832][T12034] : Can't lookup blockdev [ 645.329629][T12034] __vm_enough_memory: pid: 12034, comm: syz.2.1686, bytes: 4503599627366400 not enough memory for the allocation [ 649.713279][T12128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1706'. [ 656.308333][T12226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1732'. [ 662.884803][T12332] FAULT_INJECTION: forcing a failure. [ 662.884803][T12332] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 662.947294][T12332] CPU: 0 UID: 0 PID: 12332 Comm: syz.3.1767 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 662.958129][T12332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 662.968204][T12332] Call Trace: [ 662.971497][T12332] [ 662.974444][T12332] dump_stack_lvl+0x16c/0x1f0 [ 662.979151][T12332] should_fail_ex+0x497/0x5b0 [ 662.983856][T12332] ? fs_reclaim_acquire+0xae/0x150 [ 662.988991][T12332] should_fail_alloc_page+0xe7/0x130 [ 662.994309][T12332] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 663.000495][T12332] ? __pfx_mark_lock+0x10/0x10 [ 663.005300][T12332] __alloc_pages_noprof+0x190/0x25b0 [ 663.010622][T12332] ? hlock_class+0x4e/0x130 [ 663.015161][T12332] ? mark_lock+0xb5/0xc60 [ 663.019526][T12332] ? hlock_class+0x4e/0x130 [ 663.024060][T12332] ? __lock_acquire+0xcc5/0x3c40 [ 663.029030][T12332] ? __pfx_mark_lock+0x10/0x10 [ 663.033829][T12332] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 663.039597][T12332] ? hlock_class+0x4e/0x130 [ 663.044139][T12332] ? hlock_class+0x4e/0x130 [ 663.048667][T12332] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 663.054589][T12332] ? policy_nodemask+0xea/0x4e0 [ 663.059479][T12332] alloc_pages_mpol_noprof+0x2c9/0x610 [ 663.065030][T12332] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 663.071063][T12332] ? __pfx___lock_acquire+0x10/0x10 [ 663.076305][T12332] ? lock_acquire+0x2f/0xb0 [ 663.080834][T12332] ? is_bpf_text_address+0x30/0x1a0 [ 663.086076][T12332] pte_alloc_one+0x20/0x390 [ 663.090611][T12332] do_pte_missing+0x1ae7/0x3e00 [ 663.095503][T12332] __handle_mm_fault+0x103c/0x2a40 [ 663.100655][T12332] ? __pfx___handle_mm_fault+0x10/0x10 [ 663.106147][T12332] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 663.111820][T12332] ? find_vma+0xc0/0x140 [ 663.116086][T12332] ? __pfx_find_vma+0x10/0x10 [ 663.120791][T12332] handle_mm_fault+0x3fa/0xaa0 [ 663.125593][T12332] do_user_addr_fault+0x7a3/0x13f0 [ 663.130733][T12332] exc_page_fault+0x5c/0xc0 [ 663.135263][T12332] asm_exc_page_fault+0x26/0x30 [ 663.140142][T12332] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 663.145980][T12332] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 663.165611][T12332] RSP: 0018:ffffc900030677e8 EFLAGS: 00050206 [ 663.171702][T12332] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 00000000000000c4 [ 663.179689][T12332] RDX: ffffed100648a4f9 RSI: 0000000000000000 RDI: ffff888032452700 [ 663.187677][T12332] RBP: ffffc90003067d60 R08: 0000000000000001 R09: ffffed100648a4f8 [ 663.195666][T12332] R10: ffff8880324527c3 R11: 0000000000000000 R12: 00000000000000c4 [ 663.203656][T12332] R13: 00007ffffffff000 R14: ffff888032452700 R15: 00000000000000c4 [ 663.211667][T12332] _copy_from_iter+0x384/0x1400 [ 663.216573][T12332] ? trace_lock_acquire+0x14e/0x1f0 [ 663.221822][T12332] ? __alloc_skb+0x200/0x380 [ 663.226441][T12332] ? __pfx__copy_from_iter+0x10/0x10 [ 663.231753][T12332] ? __virt_addr_valid+0x1a4/0x590 [ 663.236906][T12332] ? __virt_addr_valid+0x5e/0x590 [ 663.241959][T12332] ? __phys_addr_symbol+0x30/0x80 [ 663.247010][T12332] ? __check_object_size+0x488/0x710 [ 663.252329][T12332] netlink_sendmsg+0x813/0xd70 [ 663.257123][T12332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.262444][T12332] ____sys_sendmsg+0x9ae/0xb40 [ 663.267232][T12332] ? copy_msghdr_from_user+0x10b/0x160 [ 663.272717][T12332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 663.278025][T12332] ? __lock_acquire+0xcc5/0x3c40 [ 663.283015][T12332] ___sys_sendmsg+0x135/0x1e0 [ 663.287722][T12332] ? __pfx____sys_sendmsg+0x10/0x10 [ 663.292965][T12332] ? trace_lock_acquire+0x14e/0x1f0 [ 663.298216][T12332] __sys_sendmmsg+0x201/0x420 [ 663.302926][T12332] ? __pfx___sys_sendmmsg+0x10/0x10 [ 663.308170][T12332] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 663.314191][T12332] ? fput+0x67/0x440 [ 663.318118][T12332] ? ksys_write+0x1ba/0x250 [ 663.322643][T12332] ? __pfx_ksys_write+0x10/0x10 [ 663.327522][T12332] __x64_sys_sendmmsg+0x9c/0x100 [ 663.332487][T12332] ? lockdep_hardirqs_on+0x7c/0x110 [ 663.337710][T12332] do_syscall_64+0xcd/0x250 [ 663.342246][T12332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.348168][T12332] RIP: 0033:0x7f271b385d19 [ 663.352604][T12332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.372252][T12332] RSP: 002b:00007f271c185038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 663.380726][T12332] RAX: ffffffffffffffda RBX: 00007f271b575fa0 RCX: 00007f271b385d19 [ 663.388732][T12332] RDX: 0000000000000003 RSI: 0000000020000080 RDI: 0000000000000003 [ 663.396727][T12332] RBP: 00007f271c185090 R08: 0000000000000000 R09: 0000000000000000 [ 663.404717][T12332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.412709][T12332] R13: 0000000000000000 R14: 00007f271b575fa0 R15: 00007ffcc05724d8 [ 663.420718][T12332] [ 663.920175][T12338] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1769'. [ 669.230133][T12397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1790'. [ 669.455570][T12393] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 669.484817][T12393] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 669.508119][T12393] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 669.530215][T12393] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 669.566947][T12393] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 669.853319][T12412] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1791'. [ 670.938175][T10766] Bluetooth: hci0: command 0x0c1a tx timeout [ 671.547933][T10766] Bluetooth: hci2: command 0x0c1a tx timeout [ 671.555119][T11906] Bluetooth: hci3: command 0x0c1a tx timeout [ 671.561812][T10766] Bluetooth: hci1: command 0x0c1a tx timeout [ 671.629457][T12423] Bluetooth: hci5: command 0x0c1a tx timeout [ 672.165266][T12429] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1797'. [ 675.104978][T12450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1802'. [ 675.118019][T12443] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec ASAN_OPTIONS=handle_segv=0 allow_user_segv_handler=1 detect_leaks=0 GLIBC_TUNABLES=glibc.pthread.rseq=0 ./syz-executor"[12443] [ 679.670515][T12491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1814'. [ 688.304130][T12549] debugfs: Bad value for 'gid' [ 688.771343][T12549] debugfs: Bad value for 'gid' [ 689.563929][T12560] svc: failed to register nfsdv3 RPC service (errno 111). [ 689.613324][T12560] svc: failed to register nfsaclv3 RPC service (errno 111). [ 693.071748][T12578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1837'. [ 696.000087][ T29] audit: type=1800 audit(8277292149.160:37): pid=12603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1844" name="discovery_nqn" dev="configfs" ino=32425 res=0 errno=0 [ 700.770088][T12643] svc: failed to register nfsdv3 RPC service (errno 111). [ 700.848566][T12643] svc: failed to register nfsaclv3 RPC service (errno 111). [ 705.746479][T12665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1862'. [ 706.730684][T12686] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1867'. [ 709.076169][T12703] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1874'. [ 709.229926][T12423] Bluetooth: hci3: unexpected event 0x03 length: 72 > 11 [ 709.364455][T12710] svc: failed to register nfsdv3 RPC service (errno 101). [ 709.396943][T12710] svc: failed to register nfsaclv3 RPC service (errno 101). [ 709.433453][T12703] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1874'. [ 709.607746][T12706] netlink: 93 bytes leftover after parsing attributes in process `syz.3.1876'. [ 709.731933][T12712] netlink: 93 bytes leftover after parsing attributes in process `syz.3.1876'. [ 710.760059][T12729] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN PTI [ 710.772703][T12729] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 710.781131][T12729] CPU: 0 UID: 0 PID: 12729 Comm: dhcpcd-run-hook Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 710.792332][T12729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 710.802389][T12729] RIP: 0010:tomoyo_check_acl+0xb0/0x410 [ 710.807968][T12729] Code: 00 0f 85 57 03 00 00 49 8b 5d 00 49 39 dd 0f 84 fc 01 00 00 e8 01 08 48 fd 48 8d 7b 18 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <0f> b6 04 28 38 d0 7f 08 84 c0 0f 85 cc 02 00 00 44 0f b6 7b 18 31 [ 710.827748][T12729] RSP: 0018:ffffc90003137b48 EFLAGS: 00010246 [ 710.833816][T12729] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 0000000000000001 [ 710.841799][T12729] RDX: 0000000000000000 RSI: ffffffff845135ef RDI: 0000000000000018 [ 710.849777][T12729] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 710.857744][T12729] R10: 0000000000000007 R11: 0000000000000000 R12: ffff88807c3cc800 [ 710.865708][T12729] R13: ffff8880272bef90 R14: 0000000000000000 R15: 0000000000000007 [ 710.873677][T12729] FS: 00007f1409d19380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 710.882608][T12729] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 710.889189][T12729] CR2: 00007f1409f065e8 CR3: 00000000254ae000 CR4: 00000000003526f0 [ 710.897245][T12729] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 710.905226][T12729] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 710.913199][T12729] Call Trace: [ 710.916476][T12729] [ 710.919411][T12729] ? die_addr+0x3b/0xa0 [ 710.923575][T12729] ? exc_general_protection+0x155/0x230 [ 710.929132][T12729] ? asm_exc_general_protection+0x26/0x30 [ 710.934875][T12729] ? tomoyo_check_acl+0x9f/0x410 [ 710.939834][T12729] ? tomoyo_check_acl+0xb0/0x410 [ 710.944793][T12729] ? tomoyo_check_acl+0x9f/0x410 [ 710.949749][T12729] ? __pfx_tomoyo_check_env_acl+0x10/0x10 [ 710.955480][T12729] tomoyo_env_perm+0x1be/0x210 [ 710.960252][T12729] ? __pfx_tomoyo_env_perm+0x10/0x10 [ 710.965640][T12729] tomoyo_find_next_domain+0xe6c/0x2070 [ 710.971193][T12729] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 710.977355][T12729] ? lock_acquire+0x2f/0xb0 [ 710.982199][T12729] ? tomoyo_bprm_check_security+0x119/0x1d0 [ 710.988098][T12729] tomoyo_bprm_check_security+0x12e/0x1d0 [ 710.993819][T12729] ? tomoyo_bprm_check_security+0x119/0x1d0 [ 710.999737][T12729] security_bprm_check+0x1b9/0x1e0 [ 711.004859][T12729] bprm_execve+0x642/0x19b0 [ 711.009370][T12729] ? __pfx_bprm_execve+0x10/0x10 [ 711.014307][T12729] ? copy_strings.isra.0+0x3c0/0x450 [ 711.019596][T12729] do_execveat_common.isra.0+0x4f1/0x630 [ 711.025231][T12729] __x64_sys_execve+0x8c/0xb0 [ 711.029916][T12729] do_syscall_64+0xcd/0x250 [ 711.034423][T12729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.040317][T12729] RIP: 0033:0x7f1409e53ef7 [ 711.044727][T12729] Code: ba 0f 00 5b 5d 41 5c 41 5d 41 5e 41 5f e9 63 d8 fb ff 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 66 90 b8 3b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 01 3f 0f 00 f7 d8 64 89 01 48 [ 711.064349][T12729] RSP: 002b:00007ffd43ea8e88 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 711.072771][T12729] RAX: ffffffffffffffda RBX: 000055b6892c2ec0 RCX: 00007f1409e53ef7 [ 711.080762][T12729] RDX: 000055b6892c2f08 RSI: 000055b6892c2ec0 RDI: 000055b6892c2f98 [ 711.088739][T12729] RBP: 000055b6892c2f98 R08: 000055b6892c2f9d R09: 00007ffd43eade8c [ 711.096712][T12729] R10: 00007f140a052088 R11: 0000000000000246 R12: 000055b6892c2f08 [ 711.104680][T12729] R13: 00007f140a001904 R14: 000055b6892c2f08 R15: 0000000000000000 [ 711.112655][T12729] [ 711.115667][T12729] Modules linked in: [ 711.120466][T12729] ---[ end trace 0000000000000000 ]--- [ 711.253247][T12729] RIP: 0010:tomoyo_check_acl+0xb0/0x410 [ 711.260315][T12729] Code: 00 0f 85 57 03 00 00 49 8b 5d 00 49 39 dd 0f 84 fc 01 00 00 e8 01 08 48 fd 48 8d 7b 18 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <0f> b6 04 28 38 d0 7f 08 84 c0 0f 85 cc 02 00 00 44 0f b6 7b 18 31 [ 711.298013][T12729] RSP: 0018:ffffc90003137b48 EFLAGS: 00010246 [ 711.304168][T12729] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 0000000000000001 [ 711.321069][T12729] RDX: 0000000000000000 RSI: ffffffff845135ef RDI: 0000000000000018 [ 711.329760][T12729] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 711.371034][T12729] R10: 0000000000000007 R11: 0000000000000000 R12: ffff88807c3cc800 [ 711.400020][T12729] R13: ffff8880272bef90 R14: 0000000000000000 R15: 0000000000000007 [ 711.418823][T12729] FS: 00007f1409d19380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 711.443207][T12729] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 711.460757][T12729] CR2: 0000000003c58000 CR3: 00000000254ae000 CR4: 00000000003526f0 [ 711.494843][T12729] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 711.507604][T12729] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 711.515637][T12729] Kernel panic - not syncing: Fatal exception [ 711.521850][T12729] Kernel Offset: disabled [ 711.526164][T12729] Rebooting in 86400 seconds..