last executing test programs: 14m5.447870121s ago: executing program 3 (id=4055): read$auto(0x3, 0x0, 0xf34) unshare$auto(0x40000080) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) mincore$auto(0x9, 0x8, 0x0) sendmsg$auto_NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x14) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0) read$auto_proc_sessionid_operations_base(r0, &(0x7f00000000c0)=""/4096, 0x1000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0xca) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x3, 0xa) socketpair$auto(0x8, 0x5, 0x3, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000080), 0x6b) fanotify_mark$auto(r0, 0x1, 0x5, r1, &(0x7f0000000040)='./file0\x00') r2 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Writeback-1/edid_override\x00', 0x40901, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r3 = socket(0x11, 0x80003, 0x304) setsockopt$auto(r3, 0x107, 0x12, 0x0, 0x4) setsockopt$auto(r3, 0x107, 0x5, 0x0, 0x24) write$auto(r2, &(0x7f00000000c0)='/sys/kernel/debug/dri/vkms/_riteback-1/edid_override\x00', 0xeaff) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffdef) 14m4.57811244s ago: executing program 3 (id=4059): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) ioctl$auto(0x3, 0x5460, 0x5) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyr3\x00', 0x10f5c3, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f00000001c0)="dd69b6440800ac8caf4bdecc30b530ac6ebbff950e1a647d6a01000000000000005383efda03aef33addb33f3a800002000000f179fa3d472949a7264a1b5f", 0x20) 14m4.362194071s ago: executing program 3 (id=4061): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = memfd_create$auto(&(0x7f0000000080)='{${(}+\x00', 0x7fffffff) read$auto_ep0_operations_inode(r0, &(0x7f00000000c0)=""/41, 0x29) (async) read$auto_ep0_operations_inode(r0, &(0x7f00000000c0)=""/41, 0x29) munlock$auto(0x3, 0x1000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0008, 0x19) accept$auto(r1, 0x0, 0x0) (async) r2 = accept$auto(r1, 0x0, 0x0) ioctl$auto_PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000040)={0x1000, &(0x7f0000000000)={0x5, 0x5, 0x8, @raw=0x76d}}) 14m3.930759474s ago: executing program 3 (id=4066): mmap$auto(0xfffffffffffffff9, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x2, 0x1) connect$auto(0x3, &(0x7f00000000c0), 0x55) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) socket(0xa, 0x3, 0x6) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_ifindex=r3, 0x7f, 0x5, 0x4, 0x1, @relative_id=0x8, 0x9}, 0x92) bpf$auto(0x6, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x8000000000007}, 0x9) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x50bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x8, 0x7, 0x0, 0x1, [@generic="70ab343c"]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200000000006}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8880) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(r4, 0x101, 0x48, 0x0, 0x9) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) madvise$auto(0x1, 0xffffffffffff0008, 0x18) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) io_submit$auto(0x8, 0x5, 0x0) 14m3.310672567s ago: executing program 3 (id=4069): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) socket(0x2, 0x6, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@can, 0x55) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = open(0x0, 0xc162, 0x0) r1 = socket(0x10, 0x2, 0xf) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/0/msr\x00', 0xf82, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB="5de1"], 0x1ac}}, 0x40000) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x181902, 0x0) ioctl$auto(r4, 0x80044dff, 0x9) socket(0x10, 0x2, 0x4) bpf$auto(0x2, &(0x7f00000001c0)=@bpf_attr_0={0x0, 0x10, 0xb, 0x4, 0xffffff6e, r1, 0xc4d, "f764be97dc40f0adc0d3faa53368f611", r3, r0, 0x401, 0x1, 0x2b, 0x0, 0xffffffffffffffff, r1}, 0x8) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x210000, 0x0) ioctl$auto_SNDCTL_DSP_PROFILE(r5, 0x40045017, &(0x7f0000000040)=0xd) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000007c0)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3a8935ae}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$auto_IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000900)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc050000", @ANYRES16=r8, @ANYBLOB="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"], 0x5f8}, 0x1, 0x0, 0x0, 0x40810}, 0x24000005) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb5, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6, 0xffffffffffffffff, 0xffffffffffffffff}, 0x10) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r10) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r9, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r11, 0x200, 0x3, 0x25dfdbfd, {}, [@NL80211_ATTR_BSS_SELECT={0x1f, 0xe3, 0x0, 0x1, [@generic="3e1e246c543ad9c11de6ae89643ea773faf8bd80884282449a0c08"]}, @NL80211_ATTR_TIMED_OUT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$auto(0x15, 0x0, 0x0) 14m2.888929283s ago: executing program 3 (id=4070): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/kernel/soft_watchdog\x00', 0x101a01, 0x0) write$auto_rb_simple_fops_trace(r0, &(0x7f0000000040)="49d8fc0209568533521616d8285d38781c12a90eaaad4e35ea0823055459f597eaef98ffd8022a5f7d1dd33228b6c384b6066c47cd89e390e15b3045d3dbc7ace2005cc8eeb91ef258af4b0dfa63b8edff5c5c2603da2648b9ad1a0bf0b530f53e1cb439a14dcc670c3988d35e1f4f407e89cbc779f2fdd056a9149a16a29c31ad9b36a7c95630445a1b48d69a428f86bdbfc162a2b9fa0afd62c6bbbd913b44ab0852e3461fff119acb12fdd4bb4602bd", 0x6f) 14m2.646618631s ago: executing program 32 (id=4070): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/kernel/soft_watchdog\x00', 0x101a01, 0x0) write$auto_rb_simple_fops_trace(r0, &(0x7f0000000040)="49d8fc0209568533521616d8285d38781c12a90eaaad4e35ea0823055459f597eaef98ffd8022a5f7d1dd33228b6c384b6066c47cd89e390e15b3045d3dbc7ace2005cc8eeb91ef258af4b0dfa63b8edff5c5c2603da2648b9ad1a0bf0b530f53e1cb439a14dcc670c3988d35e1f4f407e89cbc779f2fdd056a9149a16a29c31ad9b36a7c95630445a1b48d69a428f86bdbfc162a2b9fa0afd62c6bbbd913b44ab0852e3461fff119acb12fdd4bb4602bd", 0x6f) 12m21.960552565s ago: executing program 2 (id=4559): close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) r0 = pipe$auto(&(0x7f0000001480)) (async, rerun: 32) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r1, r0, &(0x7f0000000000)=0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram13\x00', 0x10d440, 0x0) (async) mmap$auto(0x0, 0x20007, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000) (async) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) munmap$auto(0x20001000, 0x7) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) socket(0x2, 0x1, 0x106) (async) io_uring_setup$auto(0x6, 0x0) socket(0x1e, 0x5, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101302, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r2, @ANYRES32], 0x18}}, 0x80) (async, rerun: 32) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (rerun: 32) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10048884) 12m21.779981363s ago: executing program 2 (id=4561): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x801, 0x84) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8001, 0x0) ioctl$auto(r1, 0x5402, r0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) 12m20.6992606s ago: executing program 2 (id=4567): prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) socket(0x2b, 0x1, 0x1) socket(0xa, 0x2, 0x0) setsockopt$auto(0x3, 0x100000000, 0x5, 0xffffffffffffffff, 0x0) socket(0xa, 0x4, 0x4073) socket(0xa, 0x2, 0x3a) r0 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x1801, @old_map_fd=0x3ff}, 0xa3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="070094e8d3f0c79cdf25110026ff"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x8800) io_uring_setup$auto(0x1, 0x0) io_uring_register$auto(0x7ff, 0x80000000, 0x0, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x3, 0x4, 0x4000000000dc, 0x40eb2, 0xa1c, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) socket(0x2, 0x3, 0x6) madvise$auto(0x0, 0x1000000000053, 0x9) 12m19.590402713s ago: executing program 2 (id=4571): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000009c0), 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x24, 0x940, 0x1ffde, 0x3, 0x6, 0x8000002, 0x9, 0x5, 0x2, 0x4, 0xb0, 0x7, 0x32, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, [0x0, 0x0, 0x0, 0x243efbdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6e]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00'], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mprotect$auto(0x8, 0xac, 0xe1e0058000000000) r2 = socket(0x25, 0x2, 0xfffffffc) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/set_event\x00', 0x20001, 0x0) write$auto(r3, &(0x7f0000000040)='nbd\x00', 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0x8, 0x2, 0xfffffffffffffffc, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r5 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf) mmap$auto(0x6, 0x40000b, 0x8, 0x9b72, 0x2, 0x8001) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x5, 0x0, &(0x7f0000000400)={[0x2, 0x8, 0xf, 0x1, 0xa, 0x1000, 0xa, 0x100000001, 0xe, 0x0, 0x4, 0x7fff, 0xffffffffffffffff, 0x5, 0x8, 0x7]}, &(0x7f0000000480)={[0x6, 0x8d96, 0x1, 0x4199226f, 0x0, 0x4, 0x380000000000000, 0x89ce, 0x5, 0xc2, 0x100000000, 0x3, 0xfffffffffffffe01, 0x4, 0x5, 0xffffffff]}, &(0x7f0000000140)={0x3, 0x74e}) mmap$auto(0x0, 0x6, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0xd2d2, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r6 = gettid() process_vm_readv$auto(r6, &(0x7f0000000040)={0x0, 0x2}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x4f, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000000}, 0x50020) stat$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x3, 0x800000004, 0x8000, 0xee00, 0xffffffffffffffff, 0x0, 0x6, 0x4ff, 0x7, 0x800, 0xc, 0xa58, 0x3, 0x2, 0xce, 0x8}) sendmsg$auto_OVS_VPORT_CMD_GET(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000080)=ANY=[@ANYBLOB="2100ffdb9d9edd925f0c000000", @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf250300000004000a80"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x804) 12m17.58857215s ago: executing program 2 (id=4581): shmat$auto(0x0, 0x0, 0x873) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1e, 0x1, 0x0) select$auto(0x6, &(0x7f0000000700)={[0x2, 0x100, 0x3ff, 0x2, 0x7f, 0x0, 0xfffffffffffffff9, 0x2, 0x364, 0x0, 0x200, 0x1000, 0x99c, 0x5, 0x3d68, 0x9]}, &(0x7f0000000780)={[0xa7, 0x8, 0x7ff, 0x9, 0x1, 0x0, 0x5, 0xffff, 0x9, 0x6, 0x4, 0xc547, 0x100000001, 0x8, 0xfa5, 0x5]}, &(0x7f0000000800)={[0x9, 0x1, 0x100000000, 0x4, 0x10, 0x8, 0x9, 0xffff, 0x6, 0x9, 0x1, 0xffffffffffffffff, 0x8, 0x67b, 0x8, 0x6]}, &(0x7f0000000880)={0x0, 0x5}) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/eql/testing\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4106, 0x100a) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) symlink$auto(&(0x7f0000001500)='./file0/file0\x00', &(0x7f0000001540)='./file0\x00') r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x101000, 0x10e, 0x36}, 0x18) open_tree$auto(r2, &(0x7f0000000200)='./file0\x00', 0x3) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) keyctl$auto(0x12, 0xf, 0x40000000c6e9, 0x81, 0xa472) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) shmctl$auto(0x400, 0x200000, &(0x7f0000000a80)={{0xa, 0xffffffffffffffff, 0x0, 0x200, 0x1, 0x2, 0x4}, 0x8001, 0xfffffffffffff579, 0x7, 0x3, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x4, 0x0, &(0x7f00000008c0)="bcd241a1728c765403e6285a9c904a38ca134344a34abf3228138d66f6ea5f3afe377cfe0cd5eedf8561d7471913937605f7621d4ca4e22ea7d52698ea551bbdf3fa0d61929265953f84b2f2d524532ff75db3db29ea0273f874f45f8377a6e4861c8530990441dda30cba37b0ca82e5032d210e302ecefce35ba126d023281bd8", &(0x7f0000000980)="7c42d1fcba9d52ac9627cbc9392609e9be0c7fe5872af496bab5133265720d4d9c47d6b88a33ed2c179b4aeef4074c9952bbf7cf6dd595bc61af5625e4a20f0fc6be301e8c0dcfc5951927102af7be1f3a88544959a6fef9c7c2c1e3cdb8e0ae6a57c8ae6106f9b408d91a06dd36038d30b693f63527bb9da8808dfe77b5a8e44ab1d27b27d9a7a707c0c531d266ab8a23bf929a4966e0c95caf6f815f22b3aa83ff8b263381b32d3349d37159942700dad1b8729484f369fca77b67cc927d05653f2c5f0522df2ea32e16b7fb09"}) sendmsg$auto_OVS_VPORT_CMD_DEL(r3, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000002840)={0x7bc, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x364, 0xa, 0x0, 0x1, [@nested={0x64, 0x101, 0x0, 0x1, [@generic="8b67a0cc6ab36cd20bda96440d87b5b8086436ae04b9e4f09e60054e54228061c3e2c77d92c9a05e1ba258ae25b716235d2d744ab0e3a7fd3b2e636b55cf66e0bce1979c19516b3fe540ace2384c3ef35a34d9f9fe71d4905b94295d", @nested={0x4, 0x3e}]}, @nested={0x25c, 0x10, 0x0, 0x1, [@generic="8c7ea9847bafe6102bd247f13fd1bc4b9db1368aac6fd8cfde5a1a6d7ff426027367953466ea9ef7fe2774421aa80a97286cc079968d725d7cd04355726d0fad048076b7fb4b12cab71e7dd935f510d5aac1ea24e7d70d88850b51a4e488f6d4e03cfe77f7c0431ea8cd0b30aff17e4bf74451eadd44a2555c284ebde9781dd039278735232e6670b36f30973c764188ca2cafdb0939a637b7327b43fbbeeedc4806480cd814a17d0cbf2cc8a7d13b917b", @generic="708f5b498d4e880c9a5bc685cc93be692c832a6e4a41d65fcd9ea62a79c9c64da03bd49d8e53ea38de8aa9bd253ece2f930e84bc1a8bf2ece14556fa86bd6818356fe8b8143d6befb9f396f89eb821cf16b874c4796a9a22818795077d6d3591481525143dd7ed", @nested={0x4, 0x5e}, @generic="dbc4f2be0f90851668babf0d842612b4cffcda798caeab4bf87b293c8483fc092f6aa905026070d02cbff470ec9a59d6eaf4648381495e725dc6852c741b9d1a448729b1894ffbefbee649910faeb3526d232d4dcbecd3f0c1f46a81cbbd3cac7ddb5ae0b82c6c6b83a264b84ca06834d22f4b8305d4e32cbb22386fc428363cd0307d2ea3d53fbd2c2431701cf5ae09b37eef3e03b699f36d5f8fee466f77c408cb5439", @generic="a4c5e166949697c276facf11b10ec77017feb93b23d907dba00742bfbd44b820edcbadf38737f84433c1d36fe38a424aa44ea83ec9db1736664bdddec90b5c4c441d55cf452d432dbe755c12985dafea015d4dd3154e29adc22e8e432c4bc2f8e2eaadf7b38e3f71eea24c98831aa3bae23a03b3cd2b43676ba7cae09093c6eb7dfe925b8b1eefb0488ba6f3c3216212fc4ed5436f20d3ab"]}, @nested={0xa0, 0x9b, 0x0, 0x1, [@generic="4cea7b755ef4a9a5af516e56531bb07cada5b179e16547f5d584fb5c816e010f3e1ab87cc131cd4ec8d971ebfa5960045e6a1f524f08807816aa8eeea6471f46d2b0bc4822d561b799aa20f92a9b2930601357d7beaf9f3081019138be496d33e8c4d3ed56893eb1fb3ed1cc4c168ac3fc0875e52b674e2750503b44ae94455c7f3f92d28385bb7b339469f413bacb9bd97651f2ee9b16b4c5d3c58a"]}]}, @OVS_VPORT_ATTR_OPTIONS={0x24c, 0x4, 0x0, 0x1, [@nested={0xc, 0xda, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @uid=0xffffffffffffffff}]}, @typed={0x8, 0xce, 0x0, 0x0, @uid=r5}, @generic="398ed8f81ae72833447d68f86a7ba7d00502368aab06a15396ada053ca05b7e77a0838d887b4fb1b976df05de91b19f84b989375c78a0ba89d36ba9c5c35d06a4220928f3a0f8be482e3cc114d4e73f6505f4632bb69eae1c6", @nested={0xeb, 0x10e, 0x0, 0x1, [@generic="d7319cf2855a8b07939257544eb183b7b9e8021fe5d1989f9d5e7e191ad3fc27ce4842522cf955f824cf0de75bd5e560b114372572ad0bac04dbb42712f1d13078f84b469db1dc38350f27766d8025356e7ab64ac96950297f5e7453ecfa4688bf62e12afbcfc3028d13d30a8ebc5061bab7693bea5752ab5423f76a32578430c3874790bcdda5b82d5948d796f1f462e84646d809e821d8238a227cc9eca6ea95729874cd4b96bda9d7b5da3f62e974886420f34787c20c4229adcfe392692c740b40a08b12abad29b9e43c49515052eb1a2b0112fa8b3c01cc49c1cd71307dcae248ffa2ab97"]}, @generic="f41268b48d3f834136bff6fb50c16c6b45bfcaa9614d70fe4bc8c24ac1860178900e92b15a17a020a768bc35628e3bb0efd754dbe204dbb9b34ddb709a181b6bc76924f29882685c15b76178095638dcf18f9a73e379aa33bf495283bc66e7153f096c7b66ec539237039830047dfc0b2ae2d48b935f5959d92f0f5a9eea8123b28f60b0d08dd9e91b0a4b56d66c7909888312239e84221b98c1aa730285fd63e65f5e4aca647e93490e5b4b248e6f93339a74efe6befb81ee32d2ab9eb2fb2370f366afc644fe1f586e565044211bba09bf99e409c442a6f10bc197695c2f8211c6b200e665d5c78bed7c659b4d68"]}, @OVS_VPORT_ATTR_UPCALL_PID={0xe0, 0x5, "bffcc958b178004bbcdf3604da64cb249b735122c63c1519c721b7f5801d21b9dd8bc212fc8b7a95397ac8709d40a0a21be83d13fc7ba912ba9a842abe89352061714493b429b326c9744ab66a906984678b8546e8e85b969868ee55f0f5b5e3c85cc891f1c53f681d043a2ac5ba291560a0d68e6275ae545af2f6a0217c7786bef3840b484a2226c7332dbe980630df6b46fb5d345514b6d38acad788085473d2bb3ae3edf44372d35eb1b389680743bcabd7e3b2807a040b7b8b0371c385a340152a6f9542ae4737426a1d66c2733105622a2b30daa430ae6d230b"}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x40}, @OVS_VPORT_ATTR_UPCALL_PID={0x100, 0x5, "155e9482de52f3edc9f8ad061b049fc7ec2d50dcc08401a92e2971a220c76ea2cf6ad14bb5e41e9f9e93c801a90009b0699546ad75ae0e110452d74f5adad343649fdfe68aa1117350aa1041055a3bfd56a4337e7c054c282604b0eb00a79723234b035ec540425c05c9fbe1273cbef626e19e185971ad1e3f962a8859cbad8fe19cbc8eb3442af278cd6dd8b705551fd95ea9f223b9d23e142e1b64bec74feee835275ac4f7cf2745c586272a98ef3417d756961002307082436b729afcf0b86908efa6308865d217b2311ff19ff66af9b3c991f140cee35afb69244fafd70a6b79504e44ae9af89c5fe48ed38f8606428a39487621b36c441ad5ae"}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x7}, @OVS_VPORT_ATTR_IFINDEX={0x8, 0x8, r4}]}, 0x7bc}, 0x1, 0x0, 0x0, 0x80}, 0x51) r6 = socket(0xa, 0x2, 0x88) mknod$auto(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1007, 0x100) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r6, @new_prog_fd=0x4, 0x8, @old_map_fd}, 0xa3) msync$auto(0x81, 0x180000000000000, 0x1000005) 12m16.797560536s ago: executing program 2 (id=4585): r0 = openat$auto_fops_u32_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim4/ports/2/ethtool/get_err\x00', 0x40, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) setreuid$auto(0x4, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket(0x2b, 0x1, 0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x8941, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) mmap$auto(0x0, 0x1004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) kcmp$auto(0x1, 0x1, 0x0, 0x7ff, 0xe) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000840) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1, 0x100000004, 0xfbc, 0x0, 0x0, 0x0, 0x6, 0x6, 0x1, 0x5, 0x7ffffffe, 0x5, 0x8001, 0xdf1, 0x64, 0x103}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) close_range$auto(r0, r0, 0x0) 12m16.421015145s ago: executing program 33 (id=4585): r0 = openat$auto_fops_u32_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim4/ports/2/ethtool/get_err\x00', 0x40, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) setreuid$auto(0x4, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket(0x2b, 0x1, 0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x8941, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) mmap$auto(0x0, 0x1004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) kcmp$auto(0x1, 0x1, 0x0, 0x7ff, 0xe) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000840) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1, 0x100000004, 0xfbc, 0x0, 0x0, 0x0, 0x6, 0x6, 0x1, 0x5, 0x7ffffffe, 0x5, 0x8001, 0xdf1, 0x64, 0x103}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) close_range$auto(r0, r0, 0x0) 10m47.666206274s ago: executing program 0 (id=4890): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x48041, 0x0) poll$auto(&(0x7f0000000000)={r0, 0x435, 0x2}, 0x0, 0x3) write$auto_msr_fops_msr(r1, &(0x7f0000000200)="2cdde02c4a23d0bf", 0x8) 10m47.308426636s ago: executing program 0 (id=4893): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0xb2, 0xffffffffffffffff, 0x8002) mmap$auto(0x0, 0xa9, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x336000, 0x0) ioctl$auto(r0, 0x8004c93c, r0) unshare$auto(0x40000080) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$NS_GET_PARENT(r1, 0xff02, 0x0) r2 = socketpair$auto(0x200000f, 0x8000005, 0x8000000000000000, 0x0) mount_setattr$auto(r2, 0x0, 0x0, 0x0, 0x531) preadv$auto(0x40000000000003, 0x0, 0x6, 0x8, 0x5) mmap$auto(0x0, 0x20009, 0x3, 0x15, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0xa, 0x2, 0x88) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/mtd/mtd0/mtdblock0/queue/atomic_write_boundary_bytes\x00', 0x410502, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) write$auto(0xffffffffffffffff, 0x0, 0xfdf6) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4) acct$auto(&(0x7f0000000000)='/sys/devices/platform/i8042/serio1/resync_time\x00') acct$auto(0x0) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x8) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) read$auto_proc_pagemap_operations_internal(r2, &(0x7f0000000080)=""/174, 0xae) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mprotect$auto(0x1ffff000, 0x8000000000002001, 0x4) 10m46.310534527s ago: executing program 0 (id=4896): r0 = socket(0x2c, 0x80003, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x80002, 0x73) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dmmidi2\x00', 0x400000, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000480)=0x8b) r4 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000140), r4) sendmsg$auto_NBD_CMD_DISCONNECT(r1, 0x0, 0x4000000) connect$auto(r4, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r5 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7, 0x25, 0x4, 0x1ffde, 0x9, 0x1, 0x9, 0x9, 0x4, 0x0, 0x1, 0xb8, 0x9, 0x8, 0x10001, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x4084, [0x20000003, 0x8, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xe, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x0, 0x4000, 0x0, 0x2, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x4, 0x1, 0x10000000000, 0xffffffffffffffff, 0x4, 0x9, 0x0, 0x292, 0x0, 0x400000000005b8, 0x9, 0x0, 0x200000000, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0x8000000000000000, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0x4]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xf7374674b920089e) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r1, 0x0, 0x4064890) setsockopt$auto(0x3, 0x29, 0x7, 0xffffffffffffffff, 0x3) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000580), r2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'bond_slave_1\x00', 0x0}) sendmsg$auto_NL802154_CMD_SET_TX_POWER(r5, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="040025bd7000fedbdf250c00000005001a0006000000050010000900000008000300", @ANYRES32=r7, @ANYBLOB="05000f00ea00000008ce010003000000f1f92f6002000000710561352b45a82b632617857590429e5aefebcef2e1189658f69b5ea73d20f0057ad955e100d34807bb67b253c6b1e8a54b44aae07a0064ac45ad0787d3fb270923cde84dcf3a17fc677a5293df6e56626a159979393531e01efa2998ca631811975ca3b7bdba4d05ec0e5315fdf1af45eb8962b74a8d521689ca938a3d1dfbf0659c3eb26ea0c4335714cc08bd7be2490e142fb1acf402a620f9b8cb129b7fb7f08d1d4ba486eec5d7e951e3966547c81f48532a304728db6bcb05434d58f9c5de26d76c3933eebed3347b90d804ec1ec4af81ccca40dbd07c51b4259456b3673f382b6a1a9c3fbf31bf0664b2357e796219ffffffff49e03e3e5e7e601ef4c12b3cf579ef6bd73b255ed369049adddfe3df45cda1287a0ca9c7f8d083df398ca1d59a0945c5d0654575aca10f1c6c72fe9fb1fff84cc8ce6eb7cb3db146689afaab6b100fe64c41a780538a0ebaecaa"], 0x44}, 0x1, 0x0, 0x0, 0x4000411}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) sysfs$auto(0x2, 0x100000000000029, 0x0) fsopen$auto(0x0, 0x1) 10m45.615878421s ago: executing program 0 (id=4898): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0xc686724, 0x2009, 0x5be1, 0x210, 0x1, 0x440008000) (async, rerun: 32) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 32) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) 10m43.666541101s ago: executing program 0 (id=4904): socket(0x2, 0x2, 0x88) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x4, 0xbd2b, 0x3, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001080), 0xffffffffffffffff) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 10m38.691584662s ago: executing program 0 (id=4922): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x130, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_IE_RIC={0x113, 0xb2, "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"}]}, 0x130}, 0x1, 0x0, 0x0, 0x8895}, 0x41) unshare$auto(0x53fa) r2 = socket(0x5, 0x2, 0x200) sendto$auto(r2, &(0x7f0000000240)="03374a71f468ce9e00a8ec26e377abfc0c7c5fcf0eb2601b4b39e05de9bbc057cfceb71631416fcdd73d52c21c90a90457590d7e1afd3f39fdb034715e7be089755c9fb85fed226faa79", 0xfffffffffffff53a, 0x2, &(0x7f00000002c0)=@rc={0x1f, @any, 0x82}, 0x8) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000340), r0) sendmsg$auto_NFC_CMD_ENABLE_SE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x40}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x50de8a438cd2db39) r4 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000480), r2) sendmsg$auto_IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r4, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_PHY_NAME={0xd, 0x1f, '[&\xcd@/.^{:'}, @IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4040010) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r0, &(0x7f0000000ac0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4010000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000600)={0x450, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@MACSEC_ATTR_SA_CONFIG={0x433, 0x3, 0x0, 0x1, [@generic="1ef37a630be3595c20a57b1accec6798ae8d49a47bc720d2", @typed={0xa1, 0x48, 0x0, 0x0, @binary="cd37e22c3fa01f92e6bb9af80bab8e094f3528071fb4f86dcc5beba79fc8f14091d2cf9f808ef714699bf353b5fb444aa4caa4e4db9105fe065cbcb054c9f063aadc0a4b4a4b4a61958ac550fbc3111db0476131e281eaf4ecd412dad8b1f36c9eefef38e70c2de09c66d1dfc56d70c354213db21c0531acffd2620617866c2a6de3cd4af183d0eeed376d00b77893fda0885fa2e5be0dff7e02db302a"}, @nested={0x2c, 0x2a, 0x0, 0x1, [@generic="18212d220d9fd8d1de9f283a7d3c7d125b13a19dc9c314960e52feaadb0a7141834457071734fb5f"]}, @typed={0x8, 0xb7, 0x0, 0x0, @u32=0x7c0}, @generic="4f1a1c6ad17bcbcb1f53008fb855a1f910ac4c5b9cfc8d9fe52dbbd43c1dec871b50208fdd57abf26c7fc1d6eb3738cd0061b44a052cfe7bb5c9f11a532868a6ea5b0f12c548020f29d67262d840e822c213333d41689034c4a5c1e3062f63d80505a9ff4fcf3f707c6282fc1ebd4e075d5191f9258bd2d313ff2c69cf86e31c4b520b245f99dcfc223d905bb05b68e7663cae", @nested={0x84, 0x21, 0x0, 0x1, [@nested={0x4, 0x51}, @typed={0xc, 0x13, 0x0, 0x0, @u64=0x7}, @typed={0x4, 0x84}, @typed={0x69, 0x11f, 0x0, 0x0, @binary="3ee3d5f5b469fa24bbea6ac2539ddf8206c0f61092379b62f50d9f6b78cde6e1123f57a2dede0252749e4c99bbe898bce7bc528280cd9b913f88cb65c033822c6bf90e5de1b9eeb0a64d760bee1690f9914f6d874b6db37ec2c4574ca6e56eb8dde1c9a69a"}]}, @typed={0xb, 0x8c, 0x0, 0x0, @str='.\\>{{-\x00'}, @nested={0x21c, 0x10e, 0x0, 0x1, [@generic="75d23d8b2c8e705e02621e1cf52a68dc11ac87ba01443fca41e05a17116e4fd45cdc25dbc3df27d4118bd883ae6657ac320b0653732655e5a9e28049caa007a00fd777d8c33b1d7c52c6259bfc9dc5dc54897e80f4600504d26242310c9de5a671065a901e35374791062a5a0c88b3e37a4f127b175be906a1b43b5d2bd371d6ecc180accdf743c7ff7f6f0863ac86326919564583f7fd65a25de0de829fd21ec97eed82488b0027b5a5e3c3a961b6ed72600b540a0a2248db", @nested={0x4, 0x90}, @typed={0x14, 0x7e, 0x0, 0x0, @ipv6=@mcast2}, @generic="cdbff8bc79f405a424bd1892566342d731f9f6ed67b6832709d2d5046bfd266010e43bb10dd02a857c2f9c81dede139876519ccc723279fef1d6422e840996611be2d780dddec33909532df8683dc6f68ce6ffbff59433faad3f7915392f6befea23c6ee51ab83eeb1c4968819c0654847bb045b198a6bc586782e790ca6b8d7c6a802ab99dfd4c244584ba4222ee682a30bc6341804fecb12b7efb930f97d2bb929fa325a842161dab675701a1f29df5d3ef805c52a2ecf879adc7f9d72bb38707effe87462d52c100b2ee45f6a88dcd4c99cd673d3c18fa51235a33a886a64", @generic="3c6aeb3ed2a6091c17b1dfb0c54a38dfffd6b1d642f2ec777b42b1b43531e8fef4e04ffeb9d403a272942c49bbf20c179b9b58f75718c309b14e3ffcffbeed4c796e34521466929d3ac59f8052cc09f29893c6bfdb2bc9a6a76ff56f0d2ac6bf2417df", @nested={0x4, 0x8a}]}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r5}]}, 0x450}, 0x1, 0x0, 0x0, 0x200c8844}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000b40), r0) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r6, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x9c, r7, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PLCA_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PLCA_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xce5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @ETHTOOL_A_PLCA_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7ebc}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb9}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000090) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_NEW_KEY(r2, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x28, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'ip_vti0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/input/event2\x00', 0x200, 0x0) r9 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) close_range$auto(r0, r9, 0x5) readv$auto(r9, &(0x7f0000000f40)={&(0x7f0000000e40)="0f6aa7c927e2086e6d3857dead691a6d30efc8a1ad23484cb03cfe57355c0ffdccc87452f3391e6b8c149669e6a5a7a027aa8cfd29d5936c9b247ea3402ff0d2f050549fd71fbbe04e6ad5aae70fcf5a74cd4945fbc0233ca3df0211a028c98dcf124b65e83e648a5658dcc07d50fe89dee80f5bd0b0e532682cab86575e6ce5bf20dbdffa6a5eeaf50c3cd602ed4af4efac5f61fb6d3057517f1303f527862792de9c3966b83c6a3c5225d3557e6b781450f5797d03d403dda6436ae375491e42dc943de866da985d88ac3216e5d41df8b4342d", 0xffffffff00000001}, 0x5) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000fc0), r6) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r8, &(0x7f0000001180)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001140)={&(0x7f0000001000)={0x110, r10, 0x4, 0x70bd28, 0x16, {}, [@NL80211_ATTR_MBSSID_CONFIG={0x38, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x40}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r5}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x2}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x8}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x6}]}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x6}, @NL80211_ATTR_REG_ALPHA2={0xbb, 0x21, "7de3579ed1276c5b8c267d685265f02522e1eb711192dfb5d9125654c77406c5eedddb72fb5c8ac79a2e21788dda7d61b40aacc9fe9f91597aabdaf756e68e4414687015153bcba9275ca2104eb74151cce61df44a30534c2793b798f78d5fdc0a2520eb0d11aff434b3e8a6c7e29505dd6cefa94c87ad842aeca2a2c758fd84c9b9b3dfdd19afe1b7b6f9cd1349348bacd375332d90a772af3fa0b937d1afc5234e790dfa01e10ff55bad0ee2b7d3b243036e167b6f8e"}]}, 0x110}, 0x1, 0x0, 0x0, 0x4008050}, 0x24000004) get_mempolicy$auto(&(0x7f00000011c0), &(0x7f0000001200)=0x2, 0x4, 0x800, 0x7) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000001a40)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001280)={0x754, r1, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_MLO_TTLM_ULINK={0x4f, 0x149, "abfa056ced3b42705c8b4c02c1e3b5a1907951af799f922485e7daf20ed796296028b6cdd97c9880f8aeeb1505dd4d80b8ea1f8b49f806bc300ab6d5f1bbd242643e675cdaa3d92d982de1"}, @NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_PMK={0x12, 0xfe, "0b78398b5d858025517908316d4d"}, @NL80211_ATTR_BEACON_TAIL={0x6d4, 0xf, "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"}]}, 0x754}, 0x1, 0x0, 0x0, 0x448c2}, 0x20000000) r11 = socket$auto(0x2400000, 0x85a, 0xffff) read$auto_proc_pagemap_operations_internal(r11, &(0x7f0000001a80)=""/36, 0x24) ioctl$auto_def_blk_fops_fs(r11, 0x2, &(0x7f0000001ac0)="69c3570cd49053eca06c858ffd0c477b27107e7561f05f7d4ab32341c8dfdbbc8dac680a9281176ec9bdb63151dfc8f6a0913f843e5c28c6122be842bce0ea730096b25a943e6e9da5666db7482e4c6e8879b21ac7c0fa1639dd9f2ff772be816760e2e9ee2b39ff49f798e0751ee6fa8577a4a400a1e25de432f6dfa92ac85b4a9241b0d8aebdabc902531ee8e4636f5f83") select$auto(0x3, &(0x7f0000001b80)={[0x9, 0x7ff, 0x2, 0x5, 0x5, 0xffffffff, 0x7fffffff, 0x4000, 0x7, 0x400, 0x6, 0x80000001, 0x2, 0x720, 0x7, 0x2]}, &(0x7f0000001c00)={[0x7, 0x0, 0x10001, 0x763d, 0x8000000000000001, 0x3, 0x10001, 0x7, 0xffffffffffff2cf7, 0x8, 0x8000, 0xd23, 0xfffffffffffffffe, 0x5, 0xc, 0xffffffffffffff81]}, &(0x7f0000001c80)={[0x7c15e6bc, 0x8, 0x8, 0x7, 0x4db0e16d, 0x2, 0x4, 0x63, 0xc65, 0xf6, 0x6, 0x40, 0x1, 0x7, 0x400, 0x1]}, &(0x7f0000001d00)={0x5, 0x81}) 10m23.513492501s ago: executing program 34 (id=4922): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x130, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_IE_RIC={0x113, 0xb2, "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"}]}, 0x130}, 0x1, 0x0, 0x0, 0x8895}, 0x41) unshare$auto(0x53fa) r2 = socket(0x5, 0x2, 0x200) sendto$auto(r2, &(0x7f0000000240)="03374a71f468ce9e00a8ec26e377abfc0c7c5fcf0eb2601b4b39e05de9bbc057cfceb71631416fcdd73d52c21c90a90457590d7e1afd3f39fdb034715e7be089755c9fb85fed226faa79", 0xfffffffffffff53a, 0x2, &(0x7f00000002c0)=@rc={0x1f, @any, 0x82}, 0x8) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000340), r0) sendmsg$auto_NFC_CMD_ENABLE_SE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x40}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x50de8a438cd2db39) r4 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000480), r2) sendmsg$auto_IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r4, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_PHY_NAME={0xd, 0x1f, '[&\xcd@/.^{:'}, @IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4040010) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r0, &(0x7f0000000ac0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4010000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000600)={0x450, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@MACSEC_ATTR_SA_CONFIG={0x433, 0x3, 0x0, 0x1, [@generic="1ef37a630be3595c20a57b1accec6798ae8d49a47bc720d2", @typed={0xa1, 0x48, 0x0, 0x0, @binary="cd37e22c3fa01f92e6bb9af80bab8e094f3528071fb4f86dcc5beba79fc8f14091d2cf9f808ef714699bf353b5fb444aa4caa4e4db9105fe065cbcb054c9f063aadc0a4b4a4b4a61958ac550fbc3111db0476131e281eaf4ecd412dad8b1f36c9eefef38e70c2de09c66d1dfc56d70c354213db21c0531acffd2620617866c2a6de3cd4af183d0eeed376d00b77893fda0885fa2e5be0dff7e02db302a"}, @nested={0x2c, 0x2a, 0x0, 0x1, [@generic="18212d220d9fd8d1de9f283a7d3c7d125b13a19dc9c314960e52feaadb0a7141834457071734fb5f"]}, @typed={0x8, 0xb7, 0x0, 0x0, @u32=0x7c0}, @generic="4f1a1c6ad17bcbcb1f53008fb855a1f910ac4c5b9cfc8d9fe52dbbd43c1dec871b50208fdd57abf26c7fc1d6eb3738cd0061b44a052cfe7bb5c9f11a532868a6ea5b0f12c548020f29d67262d840e822c213333d41689034c4a5c1e3062f63d80505a9ff4fcf3f707c6282fc1ebd4e075d5191f9258bd2d313ff2c69cf86e31c4b520b245f99dcfc223d905bb05b68e7663cae", @nested={0x84, 0x21, 0x0, 0x1, [@nested={0x4, 0x51}, @typed={0xc, 0x13, 0x0, 0x0, @u64=0x7}, @typed={0x4, 0x84}, @typed={0x69, 0x11f, 0x0, 0x0, @binary="3ee3d5f5b469fa24bbea6ac2539ddf8206c0f61092379b62f50d9f6b78cde6e1123f57a2dede0252749e4c99bbe898bce7bc528280cd9b913f88cb65c033822c6bf90e5de1b9eeb0a64d760bee1690f9914f6d874b6db37ec2c4574ca6e56eb8dde1c9a69a"}]}, @typed={0xb, 0x8c, 0x0, 0x0, @str='.\\>{{-\x00'}, @nested={0x21c, 0x10e, 0x0, 0x1, [@generic="75d23d8b2c8e705e02621e1cf52a68dc11ac87ba01443fca41e05a17116e4fd45cdc25dbc3df27d4118bd883ae6657ac320b0653732655e5a9e28049caa007a00fd777d8c33b1d7c52c6259bfc9dc5dc54897e80f4600504d26242310c9de5a671065a901e35374791062a5a0c88b3e37a4f127b175be906a1b43b5d2bd371d6ecc180accdf743c7ff7f6f0863ac86326919564583f7fd65a25de0de829fd21ec97eed82488b0027b5a5e3c3a961b6ed72600b540a0a2248db", @nested={0x4, 0x90}, @typed={0x14, 0x7e, 0x0, 0x0, @ipv6=@mcast2}, @generic="cdbff8bc79f405a424bd1892566342d731f9f6ed67b6832709d2d5046bfd266010e43bb10dd02a857c2f9c81dede139876519ccc723279fef1d6422e840996611be2d780dddec33909532df8683dc6f68ce6ffbff59433faad3f7915392f6befea23c6ee51ab83eeb1c4968819c0654847bb045b198a6bc586782e790ca6b8d7c6a802ab99dfd4c244584ba4222ee682a30bc6341804fecb12b7efb930f97d2bb929fa325a842161dab675701a1f29df5d3ef805c52a2ecf879adc7f9d72bb38707effe87462d52c100b2ee45f6a88dcd4c99cd673d3c18fa51235a33a886a64", @generic="3c6aeb3ed2a6091c17b1dfb0c54a38dfffd6b1d642f2ec777b42b1b43531e8fef4e04ffeb9d403a272942c49bbf20c179b9b58f75718c309b14e3ffcffbeed4c796e34521466929d3ac59f8052cc09f29893c6bfdb2bc9a6a76ff56f0d2ac6bf2417df", @nested={0x4, 0x8a}]}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r5}]}, 0x450}, 0x1, 0x0, 0x0, 0x200c8844}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000b40), r0) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r6, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x9c, r7, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PLCA_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PLCA_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xce5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @ETHTOOL_A_PLCA_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7ebc}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb9}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000090) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_NEW_KEY(r2, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x28, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'ip_vti0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/input/event2\x00', 0x200, 0x0) r9 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) close_range$auto(r0, r9, 0x5) readv$auto(r9, &(0x7f0000000f40)={&(0x7f0000000e40)="0f6aa7c927e2086e6d3857dead691a6d30efc8a1ad23484cb03cfe57355c0ffdccc87452f3391e6b8c149669e6a5a7a027aa8cfd29d5936c9b247ea3402ff0d2f050549fd71fbbe04e6ad5aae70fcf5a74cd4945fbc0233ca3df0211a028c98dcf124b65e83e648a5658dcc07d50fe89dee80f5bd0b0e532682cab86575e6ce5bf20dbdffa6a5eeaf50c3cd602ed4af4efac5f61fb6d3057517f1303f527862792de9c3966b83c6a3c5225d3557e6b781450f5797d03d403dda6436ae375491e42dc943de866da985d88ac3216e5d41df8b4342d", 0xffffffff00000001}, 0x5) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000fc0), r6) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r8, &(0x7f0000001180)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001140)={&(0x7f0000001000)={0x110, r10, 0x4, 0x70bd28, 0x16, {}, [@NL80211_ATTR_MBSSID_CONFIG={0x38, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x40}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r5}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x2}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x8}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x6}]}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x6}, @NL80211_ATTR_REG_ALPHA2={0xbb, 0x21, "7de3579ed1276c5b8c267d685265f02522e1eb711192dfb5d9125654c77406c5eedddb72fb5c8ac79a2e21788dda7d61b40aacc9fe9f91597aabdaf756e68e4414687015153bcba9275ca2104eb74151cce61df44a30534c2793b798f78d5fdc0a2520eb0d11aff434b3e8a6c7e29505dd6cefa94c87ad842aeca2a2c758fd84c9b9b3dfdd19afe1b7b6f9cd1349348bacd375332d90a772af3fa0b937d1afc5234e790dfa01e10ff55bad0ee2b7d3b243036e167b6f8e"}]}, 0x110}, 0x1, 0x0, 0x0, 0x4008050}, 0x24000004) get_mempolicy$auto(&(0x7f00000011c0), &(0x7f0000001200)=0x2, 0x4, 0x800, 0x7) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000001a40)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001280)={0x754, r1, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_MLO_TTLM_ULINK={0x4f, 0x149, "abfa056ced3b42705c8b4c02c1e3b5a1907951af799f922485e7daf20ed796296028b6cdd97c9880f8aeeb1505dd4d80b8ea1f8b49f806bc300ab6d5f1bbd242643e675cdaa3d92d982de1"}, @NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_PMK={0x12, 0xfe, "0b78398b5d858025517908316d4d"}, @NL80211_ATTR_BEACON_TAIL={0x6d4, 0xf, "8c5a6037e0e7925e6abc287192e3ffb087e7702dd52dea8a6699d77cd5be1434c25fd3e6060ce94b058786cf9a47154d06f6f6cb24f00045fca6364b96b355f23cc586f363a7ec90d4f50a5b03b0d3b9e5fcfa1405d50c3395f1eba89ec5b28548086ccfa8f3a80e614b97abe2355c8db88cc8d998807b2b29e11ad4ec26cd71364c023441b3f0d9627981637a12da7d97b58fceb14066107cf4509fa4ec8fdcecb972ce7616a57491ebdbd826b3fb9a3284e71722d7e6fb1e4b03502d58fffdb80a4c99c75fb93272924e03b38a0ba23b5d935c1be7d3c0a1ea528344b06e1d874d110866fc6bfd53d9722537afb833fe43911835a6e7f27c5fa99b5a2f7add296b9d199ba95c7d95e16db21aa362321fb17a4b45f19787931ea4ce397579048df4d71a7a5cdb6eb4523c79432dbb98fd7b12b2c41fbccb02bc8154e2e37ca0f9d96c29f8b49773f53b47ef8268621a158b3f94ed6589fc8530a3193ebb8486fde86a118f7564dbefb92c8832d0a0ea6c003f0fe574fb5c3a3e9736214b97a0285b3fcb5f1eb2c19e4682675cbe37e144743f47ca76ae58e91e92491175afda07923be8181df3d79b2da16d13a1d7c6982bd65dea34719aac379cb633ff30fdc6025b78d45e8b67ed1358256020e69aaed8150c9d458dbc66eee6d4484def62bbc8128e8bf892c85de60084cb2cffb9c981537ef6a23edc59df2575e61b6559c378944092d4380b7864399ca931c6a33d52226bf21842dc7644cc82b8f7f1e2eb0ad106953df853b89dd47abff547bb69cc5c33f41d350907e23405a3311797b8019b7ece0d75bfd28dc7f98d6e4102211f2be5322a22e5290f5f5df2d87def7476c21f7c80c4f3b8aea135fd3d6b0b6d6d153f3e7affca74c73502474604624940e7451bcfbf01e3c00e327e36989e971e2663bb6063ae68d491191ab2b073a7cb67a2eeb606834ef47a96fae42f94d701a741be245089c987d53f32c62620cf05fa7e509343d3e543e27fec908ce9898fdbf3f9508ab44907e8454c2e911ce6b10d57bf8d1eef36e75160e622ca86184b97c4cef2080fbcae85a4715a08ec733c4fc9949b17cfc835b74c28e2b697deab90b71878d057577bb566f5a92e7eae89ebe9cbab4bb46fc4477f0cc4992c407e66edee68fe993e0a21182a2e12ce087ad4c22f601b89e279086cb55b6516db4919d025b5fff21e7c282229074b6b6ebe39c78f8ea8b7c696c17901550b9ca1efc20711130757125c7ddbaa7642f9004488909c1ae8b41db041782f02de02de5cf3ab64d89ac1bd6414f115fbd6927804481f1852d358eab0c414817dcdc6ffe65f550878b28cb3f10db8527e6b2d7c421236b722004042f6100710d3b093200e14e0f24cef7d117d7a03ca8430b544c95a3a11ab1129facc6e4403830fd69025f8d7cd6ee6080ec93163d695fdd2195433b0e2c2caa33d5e1b99454821a0174a9a39fe0636c30764ebeb4b59df7d9939246415a3e0bd6ab0a01687db43dd57c496892f5968b1a355988fcdfc2655f5520cf2e581315b803e8fec4529e8dc4f5cf8ca656e3c756808eeee871ab5288f708aaba55ec177565819d253efab89bd902a2bdfd16b1efb93187a71f238f6a672f657450967bff5e6d63dd0f232abc55c787cadd123f09752b6e4aa479a97037adbc1b9da976c4e855ea15f57fdf7b1a3ea7a493a37fc67490db7edff6c423cc106dcd6cc6b6a3a55260af6bd89d89b928251b0b7ec740877f8574e1436fad4075430afb14ed33d20aff93a6222c8d36a2c159a755a7afe8be589f6b4f7b6a2f8c8e78dd4f234fc885f2b480529d4d3c095f1d5324b932b129e4e606c68f0a611c8eacc42d91b07e9e3d87cd842690c742c1db4a0582ac452f5ed4419f72a8e641b55174d499f99f5b57fb297823fa08c16dbe4ed90ee0906e300474d165c199e258d667d3d04aa205517d13db293d41f27a22475b519f30cbe0e7b826e5913a87af5d72b85dae24312253e0a1f78750d5fe4c043a3a6ca16ff016be3c03b26991fa8dcc95a05699fbe6c400f5e75e01d4b0077b8ccb6e877a788a8aac26bb6ea6a7909f1f2fe9229c30e0df89b0d31ffc917efdd247ec7b730d18138b78a1d23221e6b996b0a2549f028592d171457c7b3b80949730c385112c4f411f59acc1c8a45686ecd442ac3a06706c37af69d014ed05f3f60a5250940b2a9b332a616e6f64c14d5738d8a3b1aae21110089ffbbf1ba37bcbfeb9882edad5cad8d863367af3ec9c6c953f63397f87054f0884f873ce9c4fd555768ca588b15af6a9b93d43df89dae91cd4c25a0294969ee2da6b3d824939c404469950ca070b0ba4bcdf8843d4605331fc9942246eabf5fc61ea932a94f40dc28307bd3df21656014cb81ff4565f19f23e55a03442a54bf10971e638416193ec30e588e4587f538ede66bc9f05e3930230e0149fb7853337f"}]}, 0x754}, 0x1, 0x0, 0x0, 0x448c2}, 0x20000000) r11 = socket$auto(0x2400000, 0x85a, 0xffff) read$auto_proc_pagemap_operations_internal(r11, &(0x7f0000001a80)=""/36, 0x24) ioctl$auto_def_blk_fops_fs(r11, 0x2, &(0x7f0000001ac0)="69c3570cd49053eca06c858ffd0c477b27107e7561f05f7d4ab32341c8dfdbbc8dac680a9281176ec9bdb63151dfc8f6a0913f843e5c28c6122be842bce0ea730096b25a943e6e9da5666db7482e4c6e8879b21ac7c0fa1639dd9f2ff772be816760e2e9ee2b39ff49f798e0751ee6fa8577a4a400a1e25de432f6dfa92ac85b4a9241b0d8aebdabc902531ee8e4636f5f83") select$auto(0x3, &(0x7f0000001b80)={[0x9, 0x7ff, 0x2, 0x5, 0x5, 0xffffffff, 0x7fffffff, 0x4000, 0x7, 0x400, 0x6, 0x80000001, 0x2, 0x720, 0x7, 0x2]}, &(0x7f0000001c00)={[0x7, 0x0, 0x10001, 0x763d, 0x8000000000000001, 0x3, 0x10001, 0x7, 0xffffffffffff2cf7, 0x8, 0x8000, 0xd23, 0xfffffffffffffffe, 0x5, 0xc, 0xffffffffffffff81]}, &(0x7f0000001c80)={[0x7c15e6bc, 0x8, 0x8, 0x7, 0x4db0e16d, 0x2, 0x4, 0x63, 0xc65, 0xf6, 0x6, 0x40, 0x1, 0x7, 0x400, 0x1]}, &(0x7f0000001d00)={0x5, 0x81}) 4m33.544319179s ago: executing program 1 (id=7865): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000900), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'macsec0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x1c, r1, 0x301, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x3, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 4m33.351101578s ago: executing program 1 (id=7867): r0 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/config/nullb/features\x00', 0x3c7582, 0x0) r1 = socket(0x2b, 0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) clock_gettime$auto(0x7fffffff, 0x0) r2 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000000)={0x9, 0x2, [{r0, 0x0, 0x0, 0x6}, {r0, 0x0, 0x1, 0x4}, {r0, 0x0, 0x7, 0x3}, {r0, 0x0, 0x10}, {r0, 0x0, 0x6, 0x2}, {r1, 0x0, 0x1, 0x40}]}) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/vrf/strict_mode\x00', 0x80202, 0x0) sendfile$auto(r3, 0x3, 0x0, 0x400000000008) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x80002, 0x4) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x79, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6a) socket(0x18, 0x5, 0x2) unshare$auto(0x40000080) r4 = io_uring_setup$auto(0xfffffffb, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002540)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="010026bd7000ffdbdf251b0000000400cf00"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4040085) sendmsg$auto_NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="040026bd7000fedbdf257200000006001a01980000000600b1000f0000002400150194a782b08a197e50ebc31329b1b8b13c8a84a0e9435a0334d0d0df3db22e9bf4f0f593ab71160671"], 0x48}, 0x1, 0x0, 0x0, 0x1000}, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) write$auto(r5, 0x0, 0x62f) socket(0x25, 0x2, 0xfffffffd) r8 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r8, 0x0, 0x40000) 4m32.058314413s ago: executing program 1 (id=7870): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram10/queue/max_integrity_segments\x00', 0x40, 0x0) syz_clone3(&(0x7f0000001340)={0x20008000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x17}, &(0x7f0000000200)=""/4096, 0x1000, &(0x7f0000001200)=""/211, &(0x7f0000001300)=[0xffffffffffffffff], 0x1}, 0x58) waitid$auto(0x8001, r1, &(0x7f0000001440)={@siginfo_0_0={0x0, 0x80000000, 0x78193895, @_sigsys={&(0x7f00000013c0)="ef643e267c02ad9abb80429a413085155be2c37d492b47d7332a9131ad5c369f18f505fb2b61022d42799f4d513a60fe798adb7c01f35860e958dd0a12e4a85c651e80", 0x0, 0x80}}}, 0x0, &(0x7f00000014c0)={{0xab08, 0x80000000}, {0xc00000000}, 0x5, 0x6, 0x4, 0x80c, 0x0, 0x4, 0xb, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x7, 0x3, 0xc94}) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/255, 0xff) 4m31.768314055s ago: executing program 1 (id=7872): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x0, 0x301, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 4m31.623644087s ago: executing program 1 (id=7873): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) ioctl$auto_CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)=0x31) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8142, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x80091, 0x0) writev$auto(r1, &(0x7f0000000000)={0x0, 0x710d}, 0x8000000000000001) pread64$auto(r0, 0x0, 0x3f, 0x7fff) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x40400c5) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) mmap$auto(0x0, 0x8, 0xdc, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x0) bind$auto(r2, &(0x7f0000000040)=@xdp={0x2c, 0x8, 0x0, 0x3c}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x2, 0xb}, 0x800009}, 0x5, 0x20000000) setsockopt$auto(0x3, 0x6, 0x13, 0x0, 0xfb3) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f00000000c0), 0x440080, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) setsockopt$auto(0x3, 0x8000000000000006, 0x1f, 0x0, 0x7ffffc) fanotify_init$auto(0x5, 0x800) mmap$auto(0x3, 0x4020029, 0xb3, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x80003, 0x2, 0x200000000001, 0xb4, 0x9, 0x8, 0x10007, 0x80, 0x4, 0x0, 0xa, 0x1, 0x200, 0x0, 0x84, [0x3, 0x0, 0x0, 0x2, 0x0, 0x2000, 0x0, 0xe, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x0, 0xfffffffffffbfffe, 0x2000000000000004, 0x10000000000001, 0x10000000000, 0xfffffffffffffffe, 0x4, 0xfffffffffffffe00, 0x4, 0x0, 0x5, 0x400000000005b8, 0xffff, 0x4, 0x100, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x8, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0x7, 0xc567]}, 0x1fe, 0xd) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x40000000, 0x800c000}, 0x4) 4m30.329050309s ago: executing program 1 (id=7879): sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x5, 0x100, 0x5c, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x80011, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001100)='/dev/sequencer\x00', 0x1, 0x0) listen$auto(r0, 0x83) (async) listen$auto(r0, 0x83) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty2\x00', 0x101a81, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty2\x00', 0x101a81, 0x0) syslog$auto(0x4, &(0x7f0000000040)='..\x00', 0xffffff7f) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') lseek$auto(0x3, 0xffff, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/virtual/tty/tty11/power/runtime_status\x00', 0xe4000, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f00000010c0)=[0x0, 0x7fffffff, 0xa79, 0x3, 0x3, 0xffffffff, 0x5ffffffe, 0x2]) mmap$auto(0x40000, 0x400004, 0xdb, 0x1f2, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) munmap$auto(0x20001000, 0x2000000c) (async) munmap$auto(0x20001000, 0x2000000c) connect$auto(0x3, 0x0, 0x54) madvise$auto(0x2, 0x0, 0x1c) (async) madvise$auto(0x2, 0x0, 0x1c) mmap$auto(0x0, 0x4, 0x4000000000df, 0x1b, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x1b, 0x401, 0x300000000000) mincore$auto(0x1000, 0x8, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x3) (async) lseek$auto(0x3, 0x7fffffffffffffff, 0x3) socketpair$auto(0x4, 0x1, 0x20000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000000000)=""/4151, 0x1037) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/tracing/trace_options\x00', 0x0, 0x0) (async) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/tracing/trace_options\x00', 0x0, 0x0) 4m30.057296024s ago: executing program 35 (id=7879): sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x5, 0x100, 0x5c, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x80011, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001100)='/dev/sequencer\x00', 0x1, 0x0) listen$auto(r0, 0x83) (async) listen$auto(r0, 0x83) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty2\x00', 0x101a81, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty2\x00', 0x101a81, 0x0) syslog$auto(0x4, &(0x7f0000000040)='..\x00', 0xffffff7f) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') lseek$auto(0x3, 0xffff, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/virtual/tty/tty11/power/runtime_status\x00', 0xe4000, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f00000010c0)=[0x0, 0x7fffffff, 0xa79, 0x3, 0x3, 0xffffffff, 0x5ffffffe, 0x2]) mmap$auto(0x40000, 0x400004, 0xdb, 0x1f2, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) munmap$auto(0x20001000, 0x2000000c) (async) munmap$auto(0x20001000, 0x2000000c) connect$auto(0x3, 0x0, 0x54) madvise$auto(0x2, 0x0, 0x1c) (async) madvise$auto(0x2, 0x0, 0x1c) mmap$auto(0x0, 0x4, 0x4000000000df, 0x1b, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x1b, 0x401, 0x300000000000) mincore$auto(0x1000, 0x8, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x3) (async) lseek$auto(0x3, 0x7fffffffffffffff, 0x3) socketpair$auto(0x4, 0x1, 0x20000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000000000)=""/4151, 0x1037) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/tracing/trace_options\x00', 0x0, 0x0) (async) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/tracing/trace_options\x00', 0x0, 0x0) 4m17.506144876s ago: executing program 6 (id=7915): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x3, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='r', @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = open(0x0, 0x103040, 0xd1) setresuid$auto(0x2, 0x7, 0x8080) lstat$auto(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = getpid() ppoll$auto(0x0, 0x5, 0x0, 0x0, 0x8) process_vm_readv$auto(r1, 0x0, 0x1, 0x0, 0x6, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) madvise$auto(0x2000, 0xffffffffffff0001, 0x15) clone$auto(0xffffffff00000000, 0x12, 0x0, 0x0, 0xfffffffffffffffd) ioctl$auto_autofs_root_operations_autofs_i(r0, 0x4, 0x0) 4m15.737428097s ago: executing program 6 (id=7922): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x220a00, 0x0) memfd_secret$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) r1 = getpgid(0x0) pidfd_open$auto(r1, 0x0) capget$auto(&(0x7f0000000040)={0x9, r1}, &(0x7f00000000c0)={0xa, 0x40, 0x8}) ioctl$auto_TCFLSH2(r0, 0x541b, 0x0) 4m15.302844329s ago: executing program 6 (id=7923): mmap$auto(0x0, 0x0, 0x4, 0x80000010, 0x8000000000000003, 0x2) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x2000040080000005, 0xe) madvise$auto(0x1, 0x2, 0x1d) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = syz_clone(0x20010011, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r1, 0x1002, 0x0, 0x0, 0x0, 0x2) openat$auto_autofs_root_operations_autofs_i(0xffffffffffffff9c, 0x0, 0x80800, 0x0) r2 = socket(0x23, 0x3, 0x6) adjtimex$auto(&(0x7f00000004c0)={0xf332b6b, 0x0, 0x7d, 0xfffffffffffffffd, 0xd4, 0x4, 0x4, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8, 0x81, 0xffffffffffff628e, 0xa747, 0x0, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) read$auto(0x3, 0x0, 0x7) io_uring_setup$auto(0x401, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r2) sendmsg$auto_NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r4, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_ROAM_SUPPORT={0x4}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_RADAR_BACKGROUND={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r5 = getsockopt$auto(r0, 0x84, 0x0, 0x0, 0x0) poll$auto(&(0x7f00000001c0)={r5, 0x9, 0x1}, 0x0, 0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x23, 0xc, 0x2008, 0x9, 0x0) r6 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r6, 0x40084d02, 0x8) 4m14.070303356s ago: executing program 6 (id=7926): faccessat2$auto(0xffffffffffffffff, 0x0, 0x4, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000040), 0x262101, 0x0) mmap$auto(0x0, 0x10000, 0x7ffffffe, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x801, 0x100) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x2, 0x0) socketpair$auto(0x1, 0x0, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x3e90c0, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_nfc(0x0, r1) ioctl$auto_TCFLSH2(r2, 0x8926, 0xfdfd) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES64, @ANYRESOCT=r0, @ANYBLOB="01002cbd7016fbdbdf25f11b0000080001008000000052d994f08c5d725915799414a6246150827cc205aa5f56c9f8b24fe2ae706e6c2e860de5ed5fd5fb1cd578c4f42a5d7e8f505f358cad56eecdf3c71f2e1f11a651"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(0x3, 0x80045510, 0x38) getsockopt$auto(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0xffffffffffffffff) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x1, 0x100007f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0xffffffff, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mknod$auto(&(0x7f0000000100)=':,/file0\x00', 0xcc, 0x8) 4m13.200116933s ago: executing program 6 (id=7931): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x5) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, 0x0, 0x5, 0x20000000) socket(0x18, 0x5, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) ioctl$auto_SNAPSHOT_FREE(r1, 0x3305, 0x0) tkill$auto(0x1, 0x7) unshare$auto(0x40000080) io_uring_setup$auto(0xfffffffb, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="41004bbd7000fbdbdf250a000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) bind$auto(0x3, 0x0, 0x6b) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) write$auto(r2, 0x0, 0x62f) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0x25, 0x2, 0xfffffffd) close_range$auto(0x2, 0x8, 0x0) 4m10.155424102s ago: executing program 6 (id=7942): r0 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QSTATS_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r0, 0x301, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 4m9.806489389s ago: executing program 36 (id=7942): r0 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QSTATS_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r0, 0x301, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 6.305068157s ago: executing program 7 (id=9217): seccomp$auto(0x2, 0x10, &(0x7f0000000040)="c868ac3c7d6e1e08bbc96ff1dc2f99") unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_setup$auto(0x401, 0x0) write$auto(0x3, 0x0, 0x100082) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ppoll$auto(&(0x7f0000000080)={r0, 0x7980, 0x480}, 0x2, 0x0, 0x0, 0x8) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x4) removexattr$auto(0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffffff, 0x0, 0x0) read$auto(0x3, 0x0, 0x1f40) lstat$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)={0xfb8, 0x0, 0x202, 0xf1, 0x0, 0x0, 0x0, 0x40, 0x8, 0xa, 0x7e, 0x3, 0x915, 0x7, 0x5, 0x401, 0x2}) lstat$auto(&(0x7f0000000380)='./file0\x00', &(0x7f0000000240)={0x6, 0x6, 0xd6f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x6, 0xe, 0x0, 0x3d6b71cd, 0x0, 0x2, 0x2, 0xd, 0xffffffff8a7abdad}) unshare$auto(0x40000080) r2 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x81, 0x0) write$auto(r2, 0x0, 0x4) r3 = socket(0x10, 0x2, 0x9) sendmsg$auto_NL80211_CMD_DEL_MPATH(r3, 0x0, 0x40010) getrandom$auto(0x0, 0x6000000, 0x3) unshare$auto(0x200) connect$auto(r1, 0x0, 0x3000002) r4 = socket(0x2a, 0x2, 0x1) connect$auto(r4, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) write$auto(0x3, 0x0, 0x3f00) 4.259796325s ago: executing program 5 (id=9229): r0 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x80800, 0x0) mmap$auto(0x20000000000, 0x9, 0x3, 0x8012, 0x3, 0xf) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x51, 0x8, 0x1, 0xeb1, r0, 0xb882) r1 = socket(0x21, 0x2, 0x2) socket(0x23, 0x2, 0x53f0800) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0xfffffffffffffffe, 0x8, 0x8003, 0xeb3, 0xfffffffffffffff9, 0x8000) timer_create$auto(0x3, 0x0, 0x0) socket(0x2, 0x3, 0xa) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40040005}, 0x0) 3.69302568s ago: executing program 5 (id=9232): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0x2, 0x0, 0xfb3) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000080)='/dev/media11\x00', 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x121c80, 0x0) read$auto_percpu_stats_fops_(r0, &(0x7f00000002c0)=""/183, 0xb7) r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000003c00), 0x1a9901, 0x0) write$auto(r1, &(0x7f0000004240)='\x01', 0x10000000004) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE, @OVS_FLOW_ATTR_KEY={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@empty}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8001) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r5 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000140), r5) sendmsg$auto_NBD_CMD_DISCONNECT(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r6, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xd}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x7f}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) connect$auto(r5, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r7 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7, 0x25, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, [0x20000003, 0x3, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xe, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x0, 0x4000, 0x0, 0x2, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1, 0x10000000000, 0xffffffffffffffff, 0x4, 0xfffffffffffeffff, 0x0, 0x292, 0x0, 0x400000000005b8, 0x9, 0x0, 0x200000000, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0x8000000000000000, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0x4]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xf7374674b920089e) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 3.328348466s ago: executing program 4 (id=9233): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000000)=""/105, 0x69) socket(0x2c, 0x80003, 0x0) setsockopt$auto(0x3, 0x29, 0x7, 0xffffffffffffffff, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa1, 0x1, 0x8}, 0x8, 0x0) landlock_restrict_self$auto(r1, 0x0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r2, 0x400, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x22281, 0x11) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x2, 0x0) shmctl$auto(0x0, 0xb, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) fanotify_init$auto(0x5, 0x2) mlockall$auto(0x7) setreuid$auto(0x3, 0x7) mlock$auto(0xfbe8, 0x5f626901) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) write$auto(r3, &(0x7f0000000000)='\x9f)\x00', 0x1) syncfs$auto(0x4) lstat$auto(0x0, &(0x7f0000000340)={0x0, 0x5, 0xfffb, 0x39b, 0x0, 0xffffffffffffffff, 0x0, 0x81, 0x3ff, 0x0, 0x8000000000000000, 0xfffffffffffffff6, 0x3, 0x3, 0x1005, 0x4, 0x9}) 2.954678326s ago: executing program 7 (id=9235): capget$auto(&(0x7f00000000c0)={0x20071026, 0xffffffffffffffff}, 0x0) 2.919800099s ago: executing program 5 (id=9236): r0 = epoll_create$auto(0x40) write$auto_kmsg_fops_printk(r0, &(0x7f0000000000)="ce314f071e0df1504af530050ec4b2817f0f3f5f0c01e05207bb618cefbb31593835a395e6c2156a952904b51aa4d973d071492d1e773a4598080e02d42470685b60925ce89cf7a2e5748058c11c5344cef36524924fe32b1921da1f60004cd1278fb591e145335707c125ad6dcef4e962569ffece86e972e34caa3cf4abaa00", 0x80) r1 = openat$auto_fops_x64_ro_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy3/netdev:wlan0/stations/08:02:11:00:00:01/driver_buffered_tids\x00', 0x200000, 0x0) mq_timedsend$auto(r1, &(0x7f0000000100)='(\x00', 0x8000000000000000, 0x8, &(0x7f0000000140)={0xa, 0x7}) (async) ioctl$auto_IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000180)={@padding, 0x9}) ioctl$auto_SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000001c0)=0x81) r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000240), r0) sendmsg$auto_OVS_VPORT_CMD_GET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x2, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x48851) write$auto_tracing_entries_fops_trace(r0, &(0x7f0000000340)="1c7f34de580d45331fd5d08fdce4d4d111af9eca1c1393108b022df2aaa46e216c181caee33e2ecd8fa7bc2c7062918b1c92d2973402b0431d7410242df612e99f547fbeb49f2e361ff313c6f7a69ff64680bcc68f86cac855249720836d55428d159f3846bffe8e182baae8b9fe581f19d0996edc41f1e8b47c649da0c0d71435faf613d59cb778b16068c9976f5dc91ce33bb42605a8608de6904b4689561eb7d55cfcdf9d68b45af6bf9a6add416a4ebeb9b4b969e1fa7102d98fc8e476271fddb9cb6f9ab45dcb3bbf82a43fcd7436121a70f8a619f6432405de23b6dd05520c3127b004e81df94424ba9b745c02fc8ac80590651b59f940fb29804e0fd3cad3477748725cb7b9843a881cc4d2616aa9e9ff01c3d9e5908c5a8c0465c06fd5bf9a59b742f8e431c336ecd39033055c5b938629e47745082b64c9f9cd92c643183672180334004b3b81027577ec42efae18324034af6d962cf4f318ff620183353bed1fc7bb6e5d3ce6ad8a19975af7a7b978ac173047bc36a2e42d51066721edf509d737a184459d195b3f8535586cf7174957a38f1c9d44b04bf5b09138e87de488864d955ef16e2bc4a24d4b7ccb25a350e641f407b3297ca90c4d29eba6436a63b59b0c07c6fdf063dde64be99f5c728897c658083ddc0e5f88aee97bfdfcbe707685501da813b962b388e0652c9ee657668c07a14699ec1f4a455e3b25d50d86b1ca0aa12cde24d0097f829e89d9ed5fa09fda53deb16f56eb0c9cc85b87b6b0d27669f650041ec0e17025fddd442995d654125b4a3c12557878bdef199bf60c632a972a1db9d6ead19d27821719c56cc6f2a7ee14354fedb943d108c2238c70408567ce4367bbd1d7ecd073b021ff5801b3d846718a2e9151f83b037313569cb7dae5bfef79621247bedd22faf4852a0c877bbef855c24652526fd5acecb6cbe985daaf0fb00aa7f195a6d7b9a543730e5115ea83898faf32f88fd8916a5dea10e4d00c325d1135a7656d42bc3fb146a4a784c1842a9a9023b5fa81e4957047244f3e0a68a5a6a5cee677055f38b1e4761fe5de03395effec09a7973a889bc6f5ce406297063356fd8bafadf9de8ac7ef92c57ba4056eecb57fa7a17b42a55dfa55fca58e9e341496b980d3db76f8ae56eb6cad1a55e34276bf7577090e6bda9abf720c9f6ff7aec9d47aba79e1a187717f83916a19e35639e170f1565e900ede23aa61734fbe6cb18ba53cb1ab238e331a6af85a9df4bf37985ba6334b7bb69af9970a0aa777022185fe985e069a80812e20edea53425be0d985213b30669d2e4088c6fa795737be3e955e83c51ef7ff99f371db04a423a653962a0cf493633bc9c072266a371ac8c95387804be30a01402c8c42d4413f87aecc8f30b249887e462bc95e9e85da16590d6678fbdfc7ebb46bdc4e18f09b56601e608343c038310c7ed74d2ffe014c378672bdded88108e9d6f48c14af3fa4267755f064423f63fc9a8b7994684bd3006846feedca3c23535d3a829dfdbcc27f347ecf99e76f34a60914c0d4b796ca5724a116f065d266a260b8a58b8f42f32810a090876852527c20b06f8fe9ecd5bb7ff9cb44be31adb9768813e3a6a9784e5400c4685bf6049d10bafc795dd5305c9539ea5ce0520aad55e2461cfdf07adf7517335513feaa19583da7c13e14f8085c9c3a009c2d8fd62f9dfc4967117b9046578210355f7c676836d897d57c1077c7474b0c4d9416130f31fd55fb881303cdc69bd6e89be4e7001b05a4e788fe65d1c684b5dd5510fa04231e21e4d72d852eba532fc7c94dc5637b8c59c0e230fc37d705c7b6ce8947f60161dcde31fadc1017dd1bc8e866d8f608519d4a56a411693395a2abe7e6e7bd1eb614258c00ce814ddb6e35ef8b625dc6e02842cca2398593b6817e5d8f1a840c4e1fd3a4a071ef5f29b1b65aa1a704f8bfd9e28ccda2d5097f1a4f57e417f8c4b6dd7c9e6c7d5dfb3c70a1b986aa5f052647f73c62f9222f77bc17b1e2704b2b10dfbbd494a5d49e4855367b117cbaf4513ecac6c5f499eff9d5dc847d2eaac3578a1777f669f9b3fbca0e7b503a38a2ecbab5199d20ccf803a59e6979e760c2d3cc570c146c1dfa92c7c3e88eae1e19d975571d0e119b2ccd35566ac904d5eb6f4800c86283860cf6eb530b9699c0fe9d7658a316c3e4b2807126c66240363f7f317d6736c72744cc982bf2984aba1d6c98f6a6fa4d649163c125ca29926539dd93dcd20571a199e6df2b292d11b01cbc3bef3be60e35fa48bb3620a3f73eacded1c4982cc09909d777b9af690df1d23b4c2020db26e4ac3e0232be44779b900c6e1886b245f8c66ec159b2547ea371591f284f9fd5c35be907acc40ce4e4e1a22403b9bc9777f2c85e2c4b58eb850bffc876862bb947ea8fae289d1d7235607fe080beeed595297661272e019ede1a524077ed337562c5f7b9fcbc35c6c24b8592642e68f12191615e9ba20789a25c3c31a28769aaa508577319ce95e3906536d765d1fc8329cf82e034018321427cacae5df9d0bf1fc00c9318e3e2c536bd480588d3335c1a66c2b5d0a32eca760fd655ad8ddefd0e7251192d4206a87cb773672109aac814ff684c5c09b12aae6bddc51cda37d637254fc3343b233234cf3da1131cc115c988290f8483e60672cb069fb3f59564989fd18e4643f6600f53ae197e1bfcec3dc2c707eb98973a80ec2e57c5bd981c798e6919a83f9a119d59867eac291d20229fca1ef638266aaac50ae5f1a6f3422b2e7346bcbb65ddf7d32ad26c16f81b19719b4509c944216af439626c4d60c4df1444c6b90b46f96394f7cedfe46a90719e359973836694cbe9937dcfc7278a20984e78107d1352b5b23cf805372d3d49ee5e8eee2a4b4fd7e1a3019d2ac6957323a45e65b22f2de59907c3265362ca731a8b1b0f691d1a682378fd1e25f4ff551d0b611f4a8b8e8d4adb2d62c2f9fcf8a1391401bbf024c2552dca852f1b46f4e135bfb6250e86151eb4de8d7f5ebee32e10a2cecbd5e431d246964429dfa5c749fa50d6e7c41d45f2fc8306e9bcbda96437fc80de8db07e7beba5c07868617ea184ecd1152bfc735e800b29ca2e39b65f6d9442d6514a2e5a9575ba9237521a6a5a003f992f65178996ce7e1d678d4b02a62df626c957af32204bf2483cdcc75774ce044d40dfb2776352e81f93598b4dd59d780d8ae96abcb3201e7eba2dec5aa6e25d80674b756e0e97368c5e9f7ce9f77ac46968985eb47bb27f31f07427d89c862b0b9c80af57c223bf8c005bbfea84cc8d66500d4738da7fb059c9c58f6ad487d7442fdf65eeb6dc2c86161591b67ca70326d32debca7b7eb5cb6c9f044f1453e2979f818af82d929c81b3441576c269c039475103c1cc11d85d3f7d7eefc12985b0900ba279d7ce697786fa0b8afecaf404b13b2c1c48aa10e5e7cb2ffa7e653f86870968f1e30caf6a417c60e6ede1f6833fd96751239ce660a1665f0522a2cf6608861a6cfba9927ca700db4479df8426a0a2301d2849c31382ff2c1c91ec70ed86d9aa5e4c9e66ef357a9f8f5e5f679b88c1cce1ce280f803c0ce7f4667edd131f2743f13b5f493c9fdcccb7799c1a84ea11107f53ff3d2ace8acdf030b3352a46606c8987e7c8774c09e6c31ea54f6f2d0775e9b92e712051df7003b03ed7d35fb3a23f07ba631aea3a64c403470a3dd8fbc9f86b86a3531136aedf2f8c24177989e028c280b5e208b58d62dd037d2de677622dfacabd63172667bad5271bef672deb0b84f3643b28b2980a0ad092a2cbf92f1a77f6f35e77dc1817eb1e157f933f85084aaa6c0ae1df6c690e7f202fab495f95bc693ccab0365e95a5a407050a54f71b30b11c441e849470a8f16da54b3958600240d372216f4ad59450c64943e6952da12f3380d12b63641911cbfe9e055496030c17cf50b31b237c2f749298fc204cecf7f33ebaf26b5488a9542f5d4d81d966f6f2818fb94727b8b8354aea029ba64ed11da4b7198d741d26d9fe81f6928cd47a30055314615a9122f3904fe07ed83ba24e0479dd2c46a1294c61bdca70565f25381d48d7940aa661c772894d69d890a21202f28d20a659f4f68dafd73d5bda41b2a557308e2ae8090e1aae96ce2451b957bdbfd710ec86638e6cfdaf65c68a354d2e00b71d6d91e214c28230e7e6f7a37d0a73089295beef44e8ac7e090086ff75d9a9e62f80bcf116c0b036428c2859eaf00fc6ad20ff66de4e560e15c42d080f5bc29d7455992da2feb0edb3302f6cb8596d2df949a0895478847002ddd7b1151a4b0025e1c95898520706f738a2b376594bb19a090472b3b46c004e43e9d25894a419f78ef658105db578ba7d82f97299826afec1073cded6ec1a20c4f012e59fa3e4361e608e1360d72c54df2b3b6a657ff2a4bfbaf8be7b521bc14c004b238a1160d193c47f3c6c8801bbacb6a962d7fa158e0da6c1e6b28499cdbcd7cdcce08cc07e50598f1e3ced1b60c543a3b9ffaf3df3accf38793b21237f8853c3daa99d2fdbc12b5e37ed209fee6c80ee503868647c21b59c20edbe4c29526c9af68e4122e8c222e306bd718da6cc813be17e8f37490d833a1ffd3713633c57e6bc0217768183481b56457c42199ab89243370d5aa77e262bd06df7e0082a2622ca30358645e467b508e8b70a784c8744bcf7fab76a3461ea88449c679cb3a1df7e278faa4740ad0b77bd08641b7ef4061676183889a08063fd5c960ed9bcbe556b9408cc3f9211cd8522bc8247c1f42392b6cb07484f302c8cb2652cc258eb430abb199a1620ef2f8b57777268ad44f38add7c7db55a3d19ae9aba0ada22a2a82bf191413c46c6dc0bd0b51f401c8df57184fa1a359b76338ea03280a8353f74a80c14109884cfc2c8c81ca0fcbb2ba2c75386c9757cea77c0f5b890f64e92b90c980ffc6f23827d0ea93b2724b9f57e9de91c61c841b61870b595afe8810d34e138ae1e6132169255cd940638b5f6afa37bd9286307e6d78753f4e108a3d005c044ef2ac839613bee539edec6ffcda32d3e38c81b03d3ac9eb567c00bff4bfd1e66dd2938272578aa397adef4c40d8cd08ded3ccb46a68c5acecb1e2949870461d8148c8e23cd2361ae49493e082976afd8c20215e01c65450a92be5f1f73093eddb7f0e912a8c87f94b85d65650b629c566cb3a41a92a2e3f757c6b552809c882ef7740cabb34d76631274885c1b1542ad5c8f024383a5b2f8ebd5e3302e739515683038962a8a9366cc875fd470a9da27ffb8cf527d8e3e1ae3ddecfc064e2cd9b3575d3afc26e349f6733dacf8f49106ad9e0a16e46930924308e4fc87c15f2aaa9ab122d0d5555ed1f5742c25c7349176a2cb316a8fce76f1148f8c78d05841abb4e98e661dc5a7f3e24d8892203d28a96c4b7dd58128ac9fc831339ac4316e61208b3de7d96a0f420e8c8c3b2d7cae9d2736bc624476e24cde1b4babca8ee7046ebf1461fcd1d610e5b9e1dbca3b6f33bb0bb44f9e91588f5274642bf3a6e55e07e67c95244dfd140b0be7632f00389521254afc300d1cfc551107448a892b01b3f452250a60ec5b7344aa589613a06781148c0fb1a90d71ec3046b286a94b799c22131109c86e7a3397d754c129601db08068c2b73cf9938edf4b177b64f3c215d8bf8208e5b68c4c8a31f0902ca95668b29a53aac19e53d096e05423e62248eae5d1f2f03ae5b2832572f1f9455944e03628555e7587df7a2ab4a1cdd348a10f279af33358ea16edcfba2f4023de0a2031d4", 0x1000) read$auto_fops_x64_ro_(r1, &(0x7f0000001340)=""/65, 0x41) (async) r3 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f00000013c0), 0x200a01, 0x0) read$auto_ptdump_curusr_fops_(r3, &(0x7f0000001400)=""/43, 0x2b) (async) mprotect$auto(0x2, 0x747f, 0xdec) (async, rerun: 32) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000014c0)={'veth1_to_team\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001500)={'pim6reg\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001540)={'macsec0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001580)={'geneve1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r0, &(0x7f0000001700)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000016c0)={&(0x7f00000015c0)={0xe4, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0x4}, @ETHTOOL_A_CABLE_TEST_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa4000000}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7f}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x283a1be2c906e34b}, 0x40) r9 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000001780), r0) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_GET(r0, &(0x7f0000001ac0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001a80)={&(0x7f00000017c0)={0x29c, r9, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@THERMAL_GENL_ATTR_CDEV_ID={0x8, 0x10, 0xac5}, @THERMAL_GENL_ATTR_CDEV_NAME={0x14, 0x13, 'gretap0\x00'}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x18, 0x8}, @THERMAL_GENL_ATTR_TZ={0x25a, 0x1, 0x0, 0x1, [@typed={0x67, 0x137, 0x0, 0x0, @binary="c754286638c2b63ae1cb34027551bf593e5e474a6700397637dfd3859bb95576c2525bafc0edf6a1e01926a533ef231692d780c04321df379ee24adfd45e3f723e136359526d08150ee62b5e0be53918efe357d1ee8a6617c26eb8e8d830e4ad0ee8db"}, @nested={0x5c, 0xc2, 0x0, 0x1, [@typed={0x50, 0xa1, 0x0, 0x0, @binary="bbf5ed4fd201216473112af1912ab2032d6aa7391fa9a2918c3395db1fe8f983353d4fecf43223f7350745f1ef31414c06329a114ecefd03d72dc82edae5e3b96272ead026b475af187abd54"}, @typed={0x8, 0xd2, 0x0, 0x0, @u32=0x8000}]}, @generic="a244723cfa2837142e8a0d855dcfcb45e8750e039a4e4d34a515c29fd7a6993171710145970d1c798042f5387ded34463d7c1247718fa738d0bf2e014bc01467c3c659386586944e8eaf489f7f3698d54fef5de06c8c9bb01108471c4a169f9576862e", @typed={0x9a, 0xf7, 0x0, 0x0, @binary="8699403dac5d4e9ab4ef37322134167b63e43a50c5da381ae993161f1844924aad4b641d265d0254275924d3554eeb78e6909a9e08384a821dfea7397d3b78c64d99ccbfa5e5103812dbf424b0805c8b56ce42d52abb457478083ec04e995b554671cf48dbc63a9d66de69036c7bcae773e01f3ec403bab65fc75f1bfe9aeda02786e6751585764b860f7017099592b900848737a008"}, @generic="6223c4f591a563e94e070b8ba41fa7077c3a937cd52c1e13a5b5f872f85daca819a294b01b026a6ace8414564014432ef06f81c789593f5cf4b713096803c4c88bf7504df17a2d6f742a6eb74bab957180dcce482b39002247042385d9b4ea80c63f96e05f66ccf945d5eb4188557d64e56e769febaeff79ff62972f66e9f1ad83e18d54d9ab2fa251fe5070fabc18b2d96eba"]}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1b, 0x2}]}, 0x29c}, 0x1, 0x0, 0x0, 0x4000045}, 0x1) (async, rerun: 64) r10 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000001b40), r0) (rerun: 64) sendmsg$auto_NFC_CMD_DEV_DOWN(r0, &(0x7f0000001c80)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b80)={0x8c, r10, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x4}, @NFC_ATTR_VENDOR_DATA={0x65, 0x1f, "b44fc5861afafdd697531b8f5412bd3f31f6d6793e6aaa9e5af9f9886e5ae4e32dd25d8f52ac2bd857e5f909a8c9ded6d1a5a9feb9a4598da29240621bfd96643523af645af29263b62898ab3e9d415830f2404c21b7be393d9b719438c89b9b54"}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x8}]}, 0x8c}}, 0x0) (async) bpf$auto(0x7fff, &(0x7f0000001cc0)=@token_create={0x7fff, r3}, 0xa) (async, rerun: 32) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r13 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001dc0), r0) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r12, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x1c, r13, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async, rerun: 32) ioctl$auto_tun_fops_tun(r11, 0xf2, &(0x7f0000001ec0)="1d5db1009b7faa52f9101c377eee2e6b8a") (async, rerun: 32) r14 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000001f00)='/dev/audio1\x00', 0x40001, 0x0) ioctl$auto_SNDCTL_DSP_GETCAPS(r14, 0x8004500f, &(0x7f0000001f40)=0x8) 2.718560672s ago: executing program 7 (id=9237): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010b27bd7000fda5c5a62073660008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040080) 2.622780162s ago: executing program 5 (id=9239): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/dummy0/carrier\x00', 0x8182, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x80480, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop5\x00', 0x60742, 0x0) execve$auto(0x0, 0x0, 0x0) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r2, 0x0, 0x4010) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0) faccessat2$auto(0xffffffffffffff9c, 0x0, 0x1, 0xbc6c) r3 = socket(0xa, 0x1, 0x84) unshare$auto(0x40000080) r4 = open(0x0, 0x101800, 0x100) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(r4, r4, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x341, 0x0) socket(0x11, 0x3, 0x9) capset$auto(0x0, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r5, 0x4b47, 0x1) readahead$auto(r1, 0x10000000e, 0x0) readv$auto(0x3, &(0x7f0000003080)={0x0, 0x4}, 0x9) 2.598067221s ago: executing program 7 (id=9240): r0 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x80800, 0x0) mmap$auto(0x20000000000, 0x9, 0x3, 0x8012, 0x3, 0xf) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x51, 0x8, 0x1, 0xeb1, r0, 0xb882) r1 = socket(0x21, 0x2, 0x2) socket(0x23, 0x2, 0x53f0800) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0xfffffffffffffffe, 0x8, 0x8003, 0xeb3, 0xfffffffffffffff9, 0x8000) timer_create$auto(0x3, 0x0, 0x0) socket(0x2, 0x3, 0xa) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40040005}, 0x0) 2.358086755s ago: executing program 4 (id=9241): r0 = socket(0x1d, 0x4, 0x2) mmap$auto(0x1, 0x202000c, 0x3, 0xeb1, r0, 0x8001) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x4a}) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000040), 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x9, 0x5, 0x8) mbind$auto(0x401, 0x400, 0x6, &(0x7f0000000040)=0x7, 0x7fff, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a"], 0x1ac}}, 0x20040811) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYBLOB], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000140)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc7}, 0x1, 0x0, 0x800000000, 0x6}, 0x1}, 0xfffffff3, 0xafdd) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x62, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) read$auto(r2, 0x0, 0x9) write$auto(0x3, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) 2.094605718s ago: executing program 7 (id=9242): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x7, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES8=r3, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x240000c5) r4 = socket(0x10, 0x2, 0x4) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x4, 0x1, 0xffffffffffffffff, @relative_id=0x13, 0xe600}, 0xf) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x5) socket(0x2, 0x1, 0x106) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) mmap$auto(0x2, 0x2020009, 0x3, 0x12, 0xfffffffffffffffa, 0x4000008000) socket(0x11, 0x2, 0x88) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20008000) r5 = socket(0x2, 0x801, 0x106) io_uring_setup$auto(0x7, &(0x7f0000000000)={0x10000, 0x80, 0xe, 0x8, 0x1fd, 0x4, r5, [0x7fffffff, 0x8, 0x6], {0x5, 0x800000a, 0x200, 0xffffffff, 0x81, 0x1ff, 0x7, 0x8, 0x200}, {0x1136400, 0x72, 0x1800000, 0x4, 0x8, 0x4, 0x3b72, 0x80, 0xffffffffffffffff}}) write$auto(0x3, 0x0, 0x3f00) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008007000fd0300000000000000000300", @ANYRES32=r2, @ANYBLOB="04002580"], 0x20}, 0x1, 0x0, 0x0, 0x4004081}, 0x20000084) 2.094416169s ago: executing program 4 (id=9243): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', 0x181942, 0x0) read$auto(r0, 0x0, 0x1) r1 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_IEEE802154_DEL_IFACE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xfffffee1, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08002abd7000ffdbdf252200000008001400ff07000006000a000500000006000d0008000000140001006d616373656330000000000000000000493db51b03733311e37fa5db42edc7d8479fa01bd39e16122b3aaf2e464dcbe7f3a57a3c9f94211ae6f615397e8e863f9fc29c3264f76c039c498c204b0147295ff24a772e449e73b5442a25b3b72b056cc65d52c0c9094c401690eef87145188e77c73156d0cceec050aa0753702f2120b07dc3dbf00446a8ce1daa309e1f41f0de423e639dd88071192e7c08d85407bc9e7f8d4c7463715b23bf7bb74f629f7538be5b9c8a7d8a6900"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x4080) write$auto(0x3, 0x0, 0x100082) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'pimreg1\x00'}) prlimit64$auto(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wg0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x4, 0x2020009, 0x9, 0xeb1, 0xfffffffffffffffa, 0x8000) msync$auto(0x0, 0xe0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 1.901049139s ago: executing program 8 (id=9244): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0x2, 0x0, 0xfb3) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000080)='/dev/media11\x00', 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x121c80, 0x0) read$auto_percpu_stats_fops_(r0, &(0x7f00000002c0)=""/183, 0xb7) r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000003c00), 0x1a9901, 0x0) write$auto(r1, &(0x7f0000004240)='\x01', 0x10000000004) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE, @OVS_FLOW_ATTR_KEY={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@empty}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8001) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r5 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000140), r5) sendmsg$auto_NBD_CMD_DISCONNECT(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r6, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xd}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x7f}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) connect$auto(r5, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r7 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7, 0x25, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, [0x20000003, 0x3, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xe, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x0, 0x4000, 0x0, 0x2, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1, 0x10000000000, 0xffffffffffffffff, 0x4, 0xfffffffffffeffff, 0x0, 0x292, 0x0, 0x400000000005b8, 0x9, 0x0, 0x200000000, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0x8000000000000000, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0x4]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xf7374674b920089e) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1.585739011s ago: executing program 5 (id=9245): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000000)=""/105, 0x69) socket(0x2c, 0x80003, 0x0) setsockopt$auto(0x3, 0x29, 0x7, 0xffffffffffffffff, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa1, 0x1, 0x8}, 0x8, 0x0) landlock_restrict_self$auto(r1, 0x0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r2, 0x400, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x22281, 0x11) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x2, 0x0) shmctl$auto(0x0, 0xb, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) fanotify_init$auto(0x5, 0x2) mlockall$auto(0x7) setreuid$auto(0x3, 0x7) mlock$auto(0xfbe8, 0x5f626901) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) write$auto(0xffffffffffffffff, &(0x7f0000000000)='\x9f)\x00', 0x1) syncfs$auto(0x4) lstat$auto(0x0, &(0x7f0000000340)={0x0, 0x5, 0xfffb, 0x39b, 0x0, 0xffffffffffffffff, 0x0, 0x81, 0x3ff, 0x0, 0x8000000000000000, 0xfffffffffffffff6, 0x3, 0x3, 0x1005, 0x4, 0x9}) 1.536002994s ago: executing program 8 (id=9246): capget$auto(&(0x7f00000000c0)={0x20071026, 0xffffffffffffffff}, 0x0) (fail_nth: 1) 1.278027018s ago: executing program 4 (id=9247): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r1, r0, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0xe600}, 0xf) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'team_slave_0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000001", @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf25030000000a000100ffffffffffff000008000200", @ANYRES32=r6, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3af6000011a992f526412fd92ea04ed394143f", @ANYRES16=r8, @ANYBLOB="010329bd700001dcdf250c00000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd7000fbdbdf255c00000008000300", @ANYRES32=r12], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r17 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r12, r15, 0x4, 0x1ff, 0xffffffffffffffff, @relative_fd=r17, 0xe600}, 0xf) r19 = socket$nl_generic(0x10, 0x3, 0x10) r20 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_GATEWAYS(r19, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r20, @ANYBLOB="011329bd7000fedbdf250a00000008000300", @ANYRES32=r21, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x20008800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'}) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1203800}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="58020000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fbdbb0df25190000008400018009000100d1ff3ddbe7f6238b8d2825ad144dbb5bfe1337a26971479eb26027afb798da9fe31c8837e2cccac7b10813890946fe255be33e99516f8b7a1d19f50b9131fb5cd9f73437c43c153ea4900006b48c7ec4b0cadeaca0d3947653fccf5200727e616b5878ebf5cf38891987b9a5eed80f5cf0ff784f7173f52230e906d32d5ef8e03aefe591daedb4850e1d5d1d8623c8bce9639279b22f7a0cf6f86f06191eb25e71a38161e45a68ecf3b802ff8dd1c437f5f5c63c9fd91f0025eb0110d87c1d00", @ANYRES32=0x0, @ANYBLOB="140002006873723000000000000000000000000008000100", @ANYRES32=0x0, @ANYRESHEX=r5, @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200697036746e6c3000000000000000000008000300060000006c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES64=r2, @ANYBLOB="0800030003000000080003000900000008000100", @ANYRES32=r16, @ANYBLOB="1400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020067656e65766531000000000000000000080003000500010008000100", @ANYRES32=r1, @ANYRESOCT, @ANYRES8=r9, @ANYBLOB="140002006873723000000000000000000000000008000300810000000800030043eb3525080003008a000000640001801400020067656e657665300000000000000000001400020064766d7270310000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="08000300070000001400020073697430000000000000000000000000140002006e657464657673696d30000000000000040001805400018008000100", @ANYRES32=r12, @ANYRESDEC=r18, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000800000008000100", @ANYRES32=r13, @ANYBLOB="0800010099d7c7f13802f0289d38710cfc0f1c14ee9b4ab2aa5839508bc925d04b8b34876c734aaca52121f9fbd5ba44f6b6093fdb1eca0405d90e0b35089083d2a33af1c2260b317401541b6c47c6c4735997a432cd7a9fda98eadd3e133d257de94f718622ee0635fa3a0216b2d30b", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x258}, 0x1, 0x0, 0x0, 0x20004004}, 0x1) capget$auto(&(0x7f00000000c0)={0x20071026, 0xffffffffffffffff}, 0x0) 1.085802076s ago: executing program 8 (id=9248): openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) getsockname$auto(0xffffffffffffffff, 0x0, 0x0) r0 = fcntl$auto(0x0, 0x407, 0x100000) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) r1 = openat$auto_fops_ulong_ro_(0xffffffffffffff9c, 0x0, 0x705802, 0x0) mmap$auto(0x0, 0x1008, 0x80000000000000df, 0x10004000eb1, r1, 0x8000008000) preadv2$auto(0xffffffffffffffff, 0x0, 0x85, 0xffffffffffffffff, 0x7, 0x2e) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd7000f9dbdf25020000000b0001"], 0x20}, 0x1, 0x0, 0x0, 0x4008014}, 0x10) sendmsg$auto_TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010f28bd7000fedbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x840) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100"], 0x20}, 0x1, 0x0, 0x0, 0x4008014}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', 0x0}) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x40045613, 0x38) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x4, 0x100000000000027, 0x10000000000) 1.068422356s ago: executing program 4 (id=9249): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010b27bd7000fda5c5a62073660008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040080) 867.991948ms ago: executing program 4 (id=9250): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000000)=""/105, 0x69) socket(0x2c, 0x80003, 0x0) setsockopt$auto(0x3, 0x29, 0x7, 0xffffffffffffffff, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa1, 0x1, 0x8}, 0x8, 0x0) landlock_restrict_self$auto(r1, 0x0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r2, 0x400, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x22281, 0x11) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x2, 0x0) shmctl$auto(0x0, 0xb, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) fanotify_init$auto(0x5, 0x2) mlockall$auto(0x7) setreuid$auto(0x3, 0x7) mlock$auto(0xfbe8, 0x5f626901) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) write$auto(r3, &(0x7f0000000000)='\x9f)\x00', 0x1) syncfs$auto(0x4) lstat$auto(0x0, &(0x7f0000000340)={0x0, 0x5, 0xfffb, 0x39b, 0x0, 0xffffffffffffffff, 0x0, 0x81, 0x3ff, 0x0, 0x8000000000000000, 0xfffffffffffffff6, 0x3, 0x3, 0x1005, 0x4, 0x9}) 730.954049ms ago: executing program 8 (id=9251): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x101200, 0x0) pread64$auto(r0, 0x0, 0x7, 0x4000000000000007) lstat$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x33c0000000, 0x81, 0x6, 0xee00, 0xee01, 0x0, 0x7, 0xd7, 0x22, 0xf8d, 0x3, 0x168f0e3d, 0x5, 0x290, 0x2, 0x9b69}) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r3 = getegid() fchown$auto(r2, 0x0, r3) setresgid$auto(0x0, r1, r3) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x100000000008, 0x8000) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0xffffffffc0106f32, 0x0) 249.970061ms ago: executing program 5 (id=9252): r0 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x80800, 0x0) mmap$auto(0x20000000000, 0x9, 0x3, 0x8012, 0x3, 0xf) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x51, 0x8, 0x1, 0xeb1, r0, 0xb882) r1 = socket(0x21, 0x2, 0x2) socket(0x23, 0x2, 0x53f0800) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0xfffffffffffffffe, 0x8, 0x8003, 0xeb3, 0xfffffffffffffff9, 0x8000) timer_create$auto(0x3, 0x0, 0x0) socket(0x2, 0x3, 0xa) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40040005}, 0x0) 210.952887ms ago: executing program 8 (id=9253): r0 = socket(0x1d, 0x4, 0x2) mmap$auto(0x1, 0x202000c, 0x3, 0xeb1, r0, 0x8001) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x4a}) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000040), 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x9, 0x5, 0x8) mbind$auto(0x401, 0x400, 0x6, &(0x7f0000000040)=0x7, 0x7fff, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a"], 0x1ac}}, 0x20040811) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYBLOB], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000140)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc7}, 0x1, 0x0, 0x800000000, 0x6}, 0x1}, 0xfffffff3, 0xafdd) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x62, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) read$auto(r2, 0x0, 0x9) write$auto(0x3, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) 119.036674ms ago: executing program 7 (id=9254): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x940, 0x1fee0, 0x3, 0x6, 0x80000002, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x1fe, 0x82) (async, rerun: 32) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async, rerun: 32) socket(0x9, 0x1, 0x9) (async) r0 = socket(0x10, 0x2, 0x0) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async, rerun: 32) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram3/queue/stable_writes\x00', 0x182, 0x0) sendfile$auto(r1, r1, 0x0, 0x6) (async, rerun: 64) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x400000000002, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (rerun: 64) 0s ago: executing program 8 (id=9255): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0x2, 0x0, 0xfb3) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000080)='/dev/media11\x00', 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x121c80, 0x0) read$auto_percpu_stats_fops_(r0, &(0x7f00000002c0)=""/183, 0xb7) r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000003c00), 0x1a9901, 0x0) write$auto(r1, &(0x7f0000004240)='\x01', 0x10000000004) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE, @OVS_FLOW_ATTR_KEY={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@empty}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8001) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r5 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000140), r5) sendmsg$auto_NBD_CMD_DISCONNECT(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r6, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xd}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x7f}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) connect$auto(r5, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r7 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7, 0x25, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, [0x20000003, 0x3, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xe, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x0, 0x4000, 0x0, 0x2, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1, 0x10000000000, 0xffffffffffffffff, 0x4, 0xfffffffffffeffff, 0x0, 0x292, 0x0, 0x400000000005b8, 0x9, 0x0, 0x200000000, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0x8000000000000000, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0x4]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xf7374674b920089e) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x4064890) kernel console output (not intermixed with test programs): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.870681][T25070] team0: Port device team_slave_0 added [ 857.147669][T13664] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.223845][T25070] team0: Port device team_slave_1 added [ 857.323193][T25070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.343053][T25070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.390482][T25070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.429102][T25070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.437151][T25070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.481495][T25070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 857.603555][T25070] hsr_slave_0: entered promiscuous mode [ 857.624034][T25070] hsr_slave_1: entered promiscuous mode [ 857.645012][T25070] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 857.676350][T25070] Cannot create hsr debugfs directory [ 857.797384][T13664] bridge_slave_1: left allmulticast mode [ 857.834087][T13664] bridge_slave_1: left promiscuous mode [ 857.839885][T13664] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.962458][T13664] bridge_slave_0: left allmulticast mode [ 857.968301][T13664] bridge_slave_0: left promiscuous mode [ 857.978619][T13664] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.356550][T25134] netlink: zone id is out of range [ 858.382710][T25134] netlink: zone id is out of range [ 858.387894][T25134] netlink: zone id is out of range [ 858.412913][T25134] netlink: zone id is out of range [ 858.446830][T25134] netlink: zone id is out of range [ 858.489237][T25134] netlink: zone id is out of range [ 858.525060][T25134] netlink: zone id is out of range [ 858.569934][T25134] netlink: zone id is out of range [ 858.609255][T25134] netlink: zone id is out of range [ 858.643954][T19749] Bluetooth: hci3: command tx timeout [ 858.644439][T25134] netlink: zone id is out of range [ 858.701806][T25144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7900'. [ 859.417626][T13664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 859.434574][T13664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 859.445475][T13664] bond0 (unregistering): Released all slaves [ 860.221861][T13664] hsr_slave_0: left promiscuous mode [ 860.252970][T13664] hsr_slave_1: left promiscuous mode [ 860.286249][T13664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 860.308598][T13664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.347028][T13664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.364267][T13664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 860.436080][T13664] veth1_macvtap: left promiscuous mode [ 860.470486][T13664] veth0_macvtap: left promiscuous mode [ 860.496595][T13664] veth1_vlan: left promiscuous mode [ 860.531415][T13664] veth0_vlan: left promiscuous mode [ 860.721702][ T5836] Bluetooth: hci3: command tx timeout [ 860.832687][T25183] binder: 25179:25183 ioctl 541b 38 returned -22 [ 861.460039][T25194] nbd: illegal input index 50331648 [ 862.152832][T13664] team0 (unregistering): Port device team_slave_1 removed [ 862.241069][T13664] team0 (unregistering): Port device team_slave_0 removed [ 862.446305][T25203] netlink: 326 bytes leftover after parsing attributes in process `syz.4.7910'. [ 862.485090][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 863.035932][T25203] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.043525][T25203] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.148249][T25070] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 863.214409][T25070] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 863.243725][T25070] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 863.311070][T25070] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 863.645620][T25070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.716776][T25070] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.754083][T11816] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.761308][T11816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 863.835033][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.842239][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.146156][T25216] cgroup: fork rejected by pids controller in /syz4 [ 864.224598][T25243] cgroup: fork rejected by pids controller in /syz5 [ 864.418448][T25070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 864.960527][T25070] veth0_vlan: entered promiscuous mode [ 864.993663][T25070] veth1_vlan: entered promiscuous mode [ 865.083692][T25070] veth0_macvtap: entered promiscuous mode [ 865.092909][T25374] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(65544.9.131080), cmd(3) [ 865.113701][T25070] veth1_macvtap: entered promiscuous mode [ 865.130335][T25373] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(65544.9.131080), cmd(3) [ 865.193267][T25070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.214460][T25070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.255855][T25070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.291702][T25070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.323377][T25070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.363723][T25070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.389701][T25070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.420701][T25070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.458621][T25070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.489965][T25070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.524857][T25070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.541508][T25070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.555334][T25070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 865.604796][T25070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 865.639261][T25070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.691663][T25070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 865.702277][T25070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.722183][T25070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 865.759461][T25070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.781457][T25070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 865.801649][T25070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.819900][T25070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 865.835367][T25070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.861430][T25070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 865.881468][T25070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.900979][T25070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 865.996942][T25070] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.047000][T25070] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.091090][T25070] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.130589][T25070] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.664939][T25329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.679744][T25389] Process accounting resumed [ 866.710681][T25329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.915738][ T3030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.942455][ T3030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.616453][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 869.311607][T25484] netlink: 648 bytes leftover after parsing attributes in process `syz.7.7932'. [ 869.371457][T25484] Process accounting resumed [ 869.750985][T25467] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 870.644370][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.671812][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.655931][T10506] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.999475][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 873.012667][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 873.028949][T10506] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.054682][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 873.068821][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 873.077878][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 873.090325][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 873.397066][T10506] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.707827][T10506] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.218359][T25596] netlink: 'syz.4.7950': attribute type 1 has an invalid length. [ 874.350359][T25601] netlink: 'syz.4.7950': attribute type 1 has an invalid length. [ 874.425275][T25572] chnl_net:caif_netlink_parms(): no params data found [ 874.747146][T10506] bridge_slave_1: left allmulticast mode [ 874.774486][T10506] bridge_slave_1: left promiscuous mode [ 874.804451][T10506] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.851810][T10506] bridge_slave_0: left allmulticast mode [ 874.866875][T10506] bridge_slave_0: left promiscuous mode [ 874.881758][T10506] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.202866][ T5836] Bluetooth: hci2: command tx timeout [ 876.238205][T10506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 876.250260][T10506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 876.273884][T10506] bond0 (unregistering): Released all slaves [ 876.566238][T25572] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.601621][T25572] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.612396][T25572] bridge_slave_0: entered allmulticast mode [ 876.628173][T25572] bridge_slave_0: entered promiscuous mode [ 876.848874][T25572] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.856428][T25572] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.863959][T25572] bridge_slave_1: entered allmulticast mode [ 876.884584][T25572] bridge_slave_1: entered promiscuous mode [ 877.114582][T25572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.191107][T25572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.275094][T10506] hsr_slave_0: left promiscuous mode [ 877.282155][ T5836] Bluetooth: hci2: command tx timeout [ 877.306765][T10506] hsr_slave_1: left promiscuous mode [ 877.325307][T10506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 877.343249][T10506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.351872][T10506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.359484][T10506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.434303][T10506] veth1_macvtap: left promiscuous mode [ 877.451783][T10506] veth1_vlan: left promiscuous mode [ 877.457177][T10506] veth0_vlan: left promiscuous mode [ 878.983118][T10506] team0 (unregistering): Port device team_slave_1 removed [ 879.056790][T10506] team0 (unregistering): Port device team_slave_0 removed [ 879.361704][ T5836] Bluetooth: hci2: command tx timeout [ 879.858703][T25572] team0: Port device team_slave_0 added [ 879.885003][T25572] team0: Port device team_slave_1 added [ 879.962177][T25572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 879.969189][T25572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 880.011113][T25572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 880.027283][T25572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 880.039534][T25572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 880.065497][ C1] vkms_vblank_simulate: vblank timer overrun [ 880.106601][T25572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 880.409442][T25572] hsr_slave_0: entered promiscuous mode [ 880.448248][T25572] hsr_slave_1: entered promiscuous mode [ 880.455407][T25572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 880.463132][T25572] Cannot create hsr debugfs directory [ 881.365808][T25572] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 881.394942][T25572] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 881.441758][ T5836] Bluetooth: hci2: command tx timeout [ 881.445386][T25572] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 881.555217][T25572] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 882.053856][T25572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 882.213138][T25572] 8021q: adding VLAN 0 to HW filter on device team0 [ 882.244731][ T3030] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.251917][ T3030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 882.295250][T25742] binder: 25740:25742 ioctl 541b 38 returned -22 [ 882.321329][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.328527][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 882.810208][T25767] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7979'. [ 882.879116][T25572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 882.889338][T25769] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7981'. [ 882.960008][T25759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 883.251730][T25783] Process accounting resumed [ 883.422330][T25572] veth0_vlan: entered promiscuous mode [ 883.434853][T25572] veth1_vlan: entered promiscuous mode [ 883.456290][T25572] veth0_macvtap: entered promiscuous mode [ 883.465354][T25572] veth1_macvtap: entered promiscuous mode [ 883.480420][T25572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.491114][T25572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.501055][T25572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.511799][T25572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.522067][T25572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.532787][T25572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.543068][T25572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.553932][T25572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.564139][T25572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.574913][T25572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.585033][T25572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.596669][T25572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.607903][T25572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 883.625884][T25572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.636485][T25572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.646709][T25572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.657363][T25572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.667309][T25572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.677922][T25572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.687928][T25572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.698527][T25572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.708448][T25572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.719016][T25572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.728954][T25572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.739485][T25572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.750841][T25572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 883.802376][T25572] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.811144][T25572] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.830164][T25572] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.849178][T25572] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.053377][T25329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.091683][T25329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.171209][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.192756][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.850882][T25814] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7943'. [ 884.925711][T25814] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7943'. [ 885.229827][T25820] binder: 25819:25820 ioctl 541b 38 returned -22 [ 885.433913][T25839] FAULT_INJECTION: forcing a failure. [ 885.433913][T25839] name failslab, interval 1, probability 0, space 0, times 0 [ 885.490311][T25839] CPU: 1 UID: 0 PID: 25839 Comm: syz.7.7991 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 885.502640][T25839] Tainted: [U]=USER [ 885.506476][T25839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 885.516565][T25839] Call Trace: [ 885.519863][T25839] [ 885.522822][T25839] dump_stack_lvl+0x16c/0x1f0 [ 885.527550][T25839] should_fail_ex+0x497/0x5b0 [ 885.532273][T25839] ? fs_reclaim_acquire+0xae/0x150 [ 885.537425][T25839] should_failslab+0xc2/0x120 [ 885.542164][T25839] __kmalloc_noprof+0xce/0x4f0 [ 885.546971][T25839] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 885.552637][T25839] ? tomoyo_realpath_from_path+0xbf/0x710 [ 885.558405][T25839] tomoyo_realpath_from_path+0xbf/0x710 [ 885.563992][T25839] ? tomoyo_path_number_perm+0x235/0x5b0 [ 885.569675][T25839] tomoyo_path_number_perm+0x248/0x5b0 [ 885.575183][T25839] ? tomoyo_path_number_perm+0x235/0x5b0 [ 885.580872][T25839] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 885.586938][T25839] ? __pfx_lock_release+0x10/0x10 [ 885.592003][T25839] ? trace_lock_acquire+0x14e/0x1f0 [ 885.597265][T25839] ? lock_acquire+0x2f/0xb0 [ 885.601805][T25839] ? __fget_files+0x40/0x3a0 [ 885.606442][T25839] ? __fget_files+0x206/0x3a0 [ 885.611180][T25839] security_file_ioctl+0x9b/0x240 [ 885.616252][T25839] __x64_sys_ioctl+0xb7/0x200 [ 885.620978][T25839] do_syscall_64+0xcd/0x250 [ 885.625535][T25839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.631484][T25839] RIP: 0033:0x7f78a8f85d29 [ 885.635934][T25839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 885.655580][T25839] RSP: 002b:00007f78a9d6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 885.664041][T25839] RAX: ffffffffffffffda RBX: 00007f78a9175fa0 RCX: 00007f78a8f85d29 [ 885.672056][T25839] RDX: 0000000000000001 RSI: 000000000000ae01 RDI: 0000000000000003 [ 885.680058][T25839] RBP: 00007f78a9d6f090 R08: 0000000000000000 R09: 0000000000000000 [ 885.688058][T25839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 885.696068][T25839] R13: 0000000000000000 R14: 00007f78a9175fa0 R15: 00007fff8bc36088 [ 885.704092][T25839] [ 885.747295][T25839] ERROR: Out of memory at tomoyo_realpath_from_path. [ 885.813034][T25848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7992'. [ 887.127999][T25889] erspan0: entered allmulticast mode [ 887.180821][T25894] FAULT_INJECTION: forcing a failure. [ 887.180821][T25894] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 887.225698][T25894] CPU: 1 UID: 0 PID: 25894 Comm: syz.4.7999 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 887.238029][T25894] Tainted: [U]=USER [ 887.241869][T25894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 887.251954][T25894] Call Trace: [ 887.255248][T25894] [ 887.258199][T25894] dump_stack_lvl+0x16c/0x1f0 [ 887.262918][T25894] should_fail_ex+0x497/0x5b0 [ 887.267633][T25894] ? fs_reclaim_acquire+0xae/0x150 [ 887.272782][T25894] should_fail_alloc_page+0xe7/0x130 [ 887.278118][T25894] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 887.284320][T25894] ? __lock_acquire+0x15a9/0x3c40 [ 887.289395][T25894] __alloc_pages_noprof+0x190/0x25b0 [ 887.294739][T25894] ? hlock_class+0x4e/0x130 [ 887.299291][T25894] ? mark_lock+0xb5/0xc60 [ 887.303668][T25894] ? __pfx___lock_acquire+0x10/0x10 [ 887.308913][T25894] ? __pfx_mark_lock+0x10/0x10 [ 887.313729][T25894] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 887.319508][T25894] ? hlock_class+0x4e/0x130 [ 887.324045][T25894] ? mark_lock+0xb5/0xc60 [ 887.328404][T25894] ? hlock_class+0x4e/0x130 [ 887.332924][T25894] ? hlock_class+0x4e/0x130 [ 887.337435][T25894] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 887.343339][T25894] ? policy_nodemask+0xea/0x4e0 [ 887.348207][T25894] alloc_pages_mpol_noprof+0x2c8/0x620 [ 887.353674][T25894] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 887.359660][T25894] ? __pfx___lock_acquire+0x10/0x10 [ 887.364875][T25894] pte_alloc_one+0x20/0x390 [ 887.369388][T25894] do_pte_missing+0x1ae7/0x3e00 [ 887.374262][T25894] __handle_mm_fault+0x103c/0x2a40 [ 887.379395][T25894] ? __pfx___handle_mm_fault+0x10/0x10 [ 887.384868][T25894] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 887.390523][T25894] ? find_vma+0xc0/0x140 [ 887.394773][T25894] ? __pfx_find_vma+0x10/0x10 [ 887.399459][T25894] ? __pfx_mark_lock+0x10/0x10 [ 887.404239][T25894] handle_mm_fault+0x3fa/0xaa0 [ 887.409027][T25894] do_user_addr_fault+0x7a3/0x13f0 [ 887.414154][T25894] exc_page_fault+0x5c/0xc0 [ 887.418668][T25894] asm_exc_page_fault+0x26/0x30 [ 887.423533][T25894] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 887.429352][T25894] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 887.448980][T25894] RSP: 0018:ffffc9000c59fbb0 EFLAGS: 00050206 [ 887.455080][T25894] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000001000 [ 887.463063][T25894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88803377c000 [ 887.471043][T25894] RBP: ffffc9000c59fda0 R08: 0000000000000001 R09: ffffed10066ef9ff [ 887.479018][T25894] R10: ffff88803377cfff R11: 0000000000000000 R12: 0000000000001000 [ 887.486992][T25894] R13: 00007ffffffff000 R14: ffff88803377c000 R15: 0000000000001000 [ 887.494985][T25894] _copy_from_iter+0x384/0x1400 [ 887.499857][T25894] ? trace_lock_acquire+0x14e/0x1f0 [ 887.505075][T25894] ? __pfx__copy_from_iter+0x10/0x10 [ 887.510374][T25894] ? __virt_addr_valid+0x1a4/0x590 [ 887.515504][T25894] ? __virt_addr_valid+0x5e/0x590 [ 887.520541][T25894] ? __phys_addr_symbol+0x30/0x80 [ 887.525585][T25894] ? __check_object_size+0x488/0x710 [ 887.530894][T25894] kernfs_fop_write_iter+0x19d/0x500 [ 887.536205][T25894] vfs_write+0x5ae/0x1150 [ 887.540547][T25894] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 887.546371][T25894] ? __pfx___mutex_lock+0x10/0x10 [ 887.551416][T25894] ? __pfx_vfs_write+0x10/0x10 [ 887.556225][T25894] ksys_write+0x12b/0x250 [ 887.560566][T25894] ? __pfx_ksys_write+0x10/0x10 [ 887.565436][T25894] do_syscall_64+0xcd/0x250 [ 887.569957][T25894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.575869][T25894] RIP: 0033:0x7f2801585d29 [ 887.580288][T25894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 887.599904][T25894] RSP: 002b:00007f2802473038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 887.608334][T25894] RAX: ffffffffffffffda RBX: 00007f2801775fa0 RCX: 00007f2801585d29 [ 887.616313][T25894] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 887.624295][T25894] RBP: 00007f2802473090 R08: 0000000000000000 R09: 0000000000000000 [ 887.632271][T25894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.640250][T25894] R13: 0000000000000000 R14: 00007f2801775fa0 R15: 00007ffe69559768 [ 887.648269][T25894] [ 888.719901][T25928] FAULT_INJECTION: forcing a failure. [ 888.719901][T25928] name failslab, interval 1, probability 0, space 0, times 0 [ 888.774663][T25928] CPU: 1 UID: 0 PID: 25928 Comm: syz.5.8003 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 888.787008][T25928] Tainted: [U]=USER [ 888.790833][T25928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 888.800901][T25928] Call Trace: [ 888.804196][T25928] [ 888.807131][T25928] dump_stack_lvl+0x16c/0x1f0 [ 888.811825][T25928] should_fail_ex+0x497/0x5b0 [ 888.816516][T25928] ? fs_reclaim_acquire+0xae/0x150 [ 888.821638][T25928] should_failslab+0xc2/0x120 [ 888.826328][T25928] __kmalloc_noprof+0xce/0x4f0 [ 888.831103][T25928] ? d_absolute_path+0x137/0x1b0 [ 888.836056][T25928] ? tomoyo_encode2+0x100/0x3e0 [ 888.840925][T25928] tomoyo_encode2+0x100/0x3e0 [ 888.845612][T25928] tomoyo_realpath_from_path+0x1a7/0x710 [ 888.851260][T25928] tomoyo_path_number_perm+0x248/0x5b0 [ 888.856740][T25928] ? tomoyo_path_number_perm+0x235/0x5b0 [ 888.862399][T25928] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 888.868420][T25928] ? __pfx_lock_release+0x10/0x10 [ 888.873451][T25928] ? trace_lock_acquire+0x14e/0x1f0 [ 888.878669][T25928] ? lock_acquire+0x2f/0xb0 [ 888.883177][T25928] ? __fget_files+0x40/0x3a0 [ 888.887784][T25928] ? __fget_files+0x206/0x3a0 [ 888.892475][T25928] security_file_ioctl+0x9b/0x240 [ 888.897509][T25928] __x64_sys_ioctl+0xb7/0x200 [ 888.902195][T25928] do_syscall_64+0xcd/0x250 [ 888.906714][T25928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.912621][T25928] RIP: 0033:0x7f66cc185d29 [ 888.917038][T25928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 888.936659][T25928] RSP: 002b:00007f66ccf4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 888.945082][T25928] RAX: ffffffffffffffda RBX: 00007f66cc375fa0 RCX: 00007f66cc185d29 [ 888.953056][T25928] RDX: 0000000000000001 RSI: 000000000000ae01 RDI: 0000000000000003 [ 888.961029][T25928] RBP: 00007f66ccf4d090 R08: 0000000000000000 R09: 0000000000000000 [ 888.969009][T25928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.976987][T25928] R13: 0000000000000000 R14: 00007f66cc375fa0 R15: 00007ffc47759e48 [ 888.984988][T25928] [ 889.132859][T25928] ERROR: Out of memory at tomoyo_realpath_from_path. [ 889.221809][T25930] binder: 25923:25930 ioctl 541b 38 returned -22 [ 889.894976][T25959] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8009'. [ 889.917608][T25959] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8009'. [ 889.945652][T25959] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8009'. [ 890.562153][T25976] FAULT_INJECTION: forcing a failure. [ 890.562153][T25976] name failslab, interval 1, probability 0, space 0, times 0 [ 890.609268][T25976] CPU: 1 UID: 0 PID: 25976 Comm: syz.5.8012 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 890.621595][T25976] Tainted: [U]=USER [ 890.625417][T25976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 890.635504][T25976] Call Trace: [ 890.638811][T25976] [ 890.641771][T25976] dump_stack_lvl+0x16c/0x1f0 [ 890.646493][T25976] should_fail_ex+0x497/0x5b0 [ 890.651208][T25976] ? fs_reclaim_acquire+0xae/0x150 [ 890.656371][T25976] should_failslab+0xc2/0x120 [ 890.661100][T25976] __kmalloc_cache_node_noprof+0x6f/0x3f0 [ 890.666873][T25976] ? __get_vm_area_node+0x101/0x2f0 [ 890.672113][T25976] ? __pfx_number+0x10/0x10 [ 890.676630][T25976] __get_vm_area_node+0x101/0x2f0 [ 890.681692][T25976] __vmalloc_node_range_noprof+0x26a/0x1530 [ 890.687595][T25976] ? kvm_dev_ioctl+0x151/0x1aa0 [ 890.692456][T25976] ? vsnprintf+0x40f/0x1870 [ 890.696975][T25976] ? __pfx_vsnprintf+0x10/0x10 [ 890.701755][T25976] ? kvm_dev_ioctl+0x151/0x1aa0 [ 890.706633][T25976] ? do_raw_spin_lock+0x12d/0x2c0 [ 890.711676][T25976] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 890.718018][T25976] ? __pfx_snprintf+0x10/0x10 [ 890.722703][T25976] ? _raw_spin_unlock+0x28/0x50 [ 890.727562][T25976] ? alloc_fd+0x41f/0x760 [ 890.731902][T25976] ? kvm_dev_ioctl+0x151/0x1aa0 [ 890.736771][T25976] __vmalloc_noprof+0x6d/0x90 [ 890.741459][T25976] ? kvm_dev_ioctl+0x151/0x1aa0 [ 890.746330][T25976] kvm_dev_ioctl+0x151/0x1aa0 [ 890.751013][T25976] ? __pfx_lock_release+0x10/0x10 [ 890.756042][T25976] ? trace_lock_acquire+0x14e/0x1f0 [ 890.761253][T25976] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 890.766379][T25976] ? __fget_files+0x206/0x3a0 [ 890.771068][T25976] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 890.776189][T25976] __x64_sys_ioctl+0x190/0x200 [ 890.780959][T25976] do_syscall_64+0xcd/0x250 [ 890.785474][T25976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.791384][T25976] RIP: 0033:0x7f66cc185d29 [ 890.795812][T25976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 890.815437][T25976] RSP: 002b:00007f66ccf4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 890.823860][T25976] RAX: ffffffffffffffda RBX: 00007f66cc375fa0 RCX: 00007f66cc185d29 [ 890.831845][T25976] RDX: 0000000000000001 RSI: 000000000000ae01 RDI: 0000000000000003 [ 890.839818][T25976] RBP: 00007f66ccf4d090 R08: 0000000000000000 R09: 0000000000000000 [ 890.847796][T25976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.855770][T25976] R13: 0000000000000000 R14: 00007f66cc375fa0 R15: 00007ffc47759e48 [ 890.863755][T25976] [ 890.902408][T25976] syz.5.8012: vmalloc error: size 39424, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 890.938110][T25976] CPU: 0 UID: 0 PID: 25976 Comm: syz.5.8012 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 890.950430][T25976] Tainted: [U]=USER [ 890.954268][T25976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 890.964351][T25976] Call Trace: [ 890.967656][T25976] [ 890.970612][T25976] dump_stack_lvl+0x16c/0x1f0 [ 890.975334][T25976] warn_alloc+0x24d/0x3a0 [ 890.979712][T25976] ? __pfx_warn_alloc+0x10/0x10 [ 890.984614][T25976] ? __kasan_kmalloc+0x8a/0xb0 [ 890.989428][T25976] ? __get_vm_area_node+0x1dc/0x2f0 [ 890.994684][T25976] __vmalloc_node_range_noprof+0xd27/0x1530 [ 891.000619][T25976] ? vsnprintf+0x40f/0x1870 [ 891.005170][T25976] ? __pfx_vsnprintf+0x10/0x10 [ 891.009977][T25976] ? kvm_dev_ioctl+0x151/0x1aa0 [ 891.014872][T25976] ? do_raw_spin_lock+0x12d/0x2c0 [ 891.019935][T25976] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 891.026303][T25976] ? __pfx_snprintf+0x10/0x10 [ 891.031026][T25976] ? _raw_spin_unlock+0x28/0x50 [ 891.035903][T25976] ? alloc_fd+0x41f/0x760 [ 891.040242][T25976] ? kvm_dev_ioctl+0x151/0x1aa0 [ 891.045102][T25976] __vmalloc_noprof+0x6d/0x90 [ 891.049791][T25976] ? kvm_dev_ioctl+0x151/0x1aa0 [ 891.054655][T25976] kvm_dev_ioctl+0x151/0x1aa0 [ 891.059344][T25976] ? __pfx_lock_release+0x10/0x10 [ 891.064372][T25976] ? trace_lock_acquire+0x14e/0x1f0 [ 891.069583][T25976] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 891.074709][T25976] ? __fget_files+0x206/0x3a0 [ 891.079395][T25976] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 891.084515][T25976] __x64_sys_ioctl+0x190/0x200 [ 891.089287][T25976] do_syscall_64+0xcd/0x250 [ 891.093803][T25976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.099707][T25976] RIP: 0033:0x7f66cc185d29 [ 891.104126][T25976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 891.124093][T25976] RSP: 002b:00007f66ccf4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 891.132514][T25976] RAX: ffffffffffffffda RBX: 00007f66cc375fa0 RCX: 00007f66cc185d29 [ 891.140490][T25976] RDX: 0000000000000001 RSI: 000000000000ae01 RDI: 0000000000000003 [ 891.148468][T25976] RBP: 00007f66ccf4d090 R08: 0000000000000000 R09: 0000000000000000 [ 891.156443][T25976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.164418][T25976] R13: 0000000000000000 R14: 00007f66cc375fa0 R15: 00007ffc47759e48 [ 891.172408][T25976] [ 891.258017][T25976] Mem-Info: [ 891.261476][T25976] active_anon:22514 inactive_anon:28 isolated_anon:0 [ 891.261476][T25976] active_file:18902 inactive_file:46036 isolated_file:0 [ 891.261476][T25976] unevictable:768 dirty:703 writeback:0 [ 891.261476][T25976] slab_reclaimable:11902 slab_unreclaimable:112933 [ 891.261476][T25976] mapped:27805 shmem:1762 pagetables:1072 [ 891.261476][T25976] sec_pagetables:0 bounce:0 [ 891.261476][T25976] kernel_misc_reclaimable:0 [ 891.261476][T25976] free:1287631 free_pcp:7842 free_cma:0 [ 891.309607][T25976] Node 0 active_anon:90156kB inactive_anon:112kB active_file:75608kB inactive_file:184140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111220kB dirty:2812kB writeback:0kB shmem:5512kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12912kB pagetables:4288kB sec_pagetables:0kB all_unreclaimable? no [ 891.342712][T25976] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 891.375589][T25976] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 891.522672][T25976] lowmem_reserve[]: 0 2465 2466 0 0 [ 891.529128][T25976] Node 0 DMA32 free:1243852kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:92076kB inactive_anon:112kB active_file:75608kB inactive_file:183304kB unevictable:1536kB writepending:2940kB present:3129332kB managed:2551336kB mlocked:0kB bounce:0kB free_pcp:13852kB local_pcp:10320kB free_cma:0kB [ 891.621648][T25976] lowmem_reserve[]: 0 0 0 0 0 [ 891.626790][T25976] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 891.744704][T25976] lowmem_reserve[]: 0 0 0 0 0 [ 891.749520][T25976] Node 1 Normal free:3890528kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16284kB local_pcp:9848kB free_cma:0kB [ 891.822805][T25976] lowmem_reserve[]: 0 0 0 0 0 [ 891.827820][T25976] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 891.899041][T25976] Node 0 DMA32: 1879*4kB (UME) 2867*8kB (UME) 2145*16kB (UME) 1580*32kB (UME) 742*64kB (UME) 505*128kB (UME) 281*256kB (UME) 179*512kB (UME) 109*1024kB (UM) 8*2048kB (UM) 179*4096kB (UM) = 1252228kB [ 891.961421][T25976] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 892.021458][T25976] Node 1 Normal: 1*4kB (M) 2*8kB (U) 2*16kB (UE) 137*32kB (UM) 87*64kB (UME) 21*128kB (U) 14*256kB (UME) 11*512kB (UME) 2*1024kB (ME) 0*2048kB 944*4096kB (M) = 3890580kB [ 892.077196][T25976] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 892.118688][T25976] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 892.163717][T25976] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 892.221650][T25976] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 892.284555][T25976] 66650 total pagecache pages [ 892.368411][T25976] 19 pages in swap cache [ 892.393427][T25976] Free swap = 124344kB [ 892.397640][T25976] Total swap = 124996kB [ 892.432632][T26010] binder: 26004:26010 ioctl 541b 38 returned -22 [ 892.440404][T25976] 2097051 pages RAM [ 892.445214][T25976] 0 pages HighMem/MovableOnly [ 892.449928][T25976] 427367 pages reserved [ 892.454625][T25976] 0 pages cma reserved [ 892.804458][T26023] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000000006 [ 894.033005][T26061] netlink: 326 bytes leftover after parsing attributes in process `syz.8.8026'. [ 894.852211][T26081] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8029'. [ 895.146356][T26088] netlink: 292 bytes leftover after parsing attributes in process `syz.8.8031'. [ 895.173483][T26090] netlink: 292 bytes leftover after parsing attributes in process `syz.8.8031'. [ 896.978420][T26146] Process accounting paused [ 899.835338][T26217] binder: 26211:26217 ioctl 541b 38 returned -22 [ 900.954003][T26254] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8065'. [ 901.510300][T26276] Invalid ELF header magic: != ELF [ 901.567235][T26277] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8069'. [ 901.672301][T26277] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8069'. [ 901.733024][T26277] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8069'. [ 901.733026][T26275] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8069'. [ 901.849515][T26277] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8069'. [ 901.859963][T26277] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8069'. [ 901.869399][T26277] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8069'. [ 901.878459][T26277] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8069'. [ 901.892685][T26277] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8069'. [ 902.021578][T26275] i2c i2c-0: delete_device: Can't parse I2C address [ 902.203721][T26287] binder: 26281:26287 ioctl 541b 38 returned -22 [ 902.408414][T26280] Invalid ELF header magic: != ELF [ 904.423150][T26339] binder: 26338:26339 ioctl 541b 38 returned -22 [ 905.001047][T26349] HfR: entered promiscuous mode [ 905.443569][T26373] Invalid ELF header magic: != ELF [ 906.514758][T26395] FAULT_INJECTION: forcing a failure. [ 906.514758][T26395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 906.592026][T26395] CPU: 1 UID: 0 PID: 26395 Comm: syz.7.8096 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 906.604353][T26395] Tainted: [U]=USER [ 906.608186][T26395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 906.618266][T26395] Call Trace: [ 906.621554][T26395] [ 906.624490][T26395] dump_stack_lvl+0x16c/0x1f0 [ 906.629187][T26395] should_fail_ex+0x497/0x5b0 [ 906.633884][T26395] _copy_to_user+0x32/0xd0 [ 906.638316][T26395] snd_pcm_oss_read2+0x292/0x3e0 [ 906.643272][T26395] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 906.648751][T26395] snd_pcm_oss_read+0x5a3/0x750 [ 906.653622][T26395] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 906.659009][T26395] vfs_read+0x1df/0xbe0 [ 906.663178][T26395] ? __fget_files+0x1fc/0x3a0 [ 906.667870][T26395] ? __pfx_lock_release+0x10/0x10 [ 906.672916][T26395] ? __pfx_vfs_read+0x10/0x10 [ 906.677613][T26395] ? lock_acquire+0x2f/0xb0 [ 906.682126][T26395] ? __fget_files+0x40/0x3a0 [ 906.686732][T26395] ? __fget_files+0x206/0x3a0 [ 906.691428][T26395] ksys_read+0x12b/0x250 [ 906.695680][T26395] ? __pfx_ksys_read+0x10/0x10 [ 906.700464][T26395] do_syscall_64+0xcd/0x250 [ 906.704993][T26395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.710919][T26395] RIP: 0033:0x7f78a8f85d29 [ 906.715340][T26395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 906.734967][T26395] RSP: 002b:00007f78a9d6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 906.743399][T26395] RAX: ffffffffffffffda RBX: 00007f78a9175fa0 RCX: 00007f78a8f85d29 [ 906.751381][T26395] RDX: 0000000000001f40 RSI: 0000000000000000 RDI: 0000000000000003 [ 906.759365][T26395] RBP: 00007f78a9d6f090 R08: 0000000000000000 R09: 0000000000000000 [ 906.767351][T26395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.775336][T26395] R13: 0000000000000000 R14: 00007f78a9175fa0 R15: 00007fff8bc36088 [ 906.783335][T26395] [ 908.215873][T26454] cgroup: fork rejected by pids controller in /syz8 [ 914.855555][T26733] __nla_validate_parse: 28 callbacks suppressed [ 914.855587][T26733] netlink: 342 bytes leftover after parsing attributes in process `syz.8.8115'. [ 916.731964][T26790] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8120'. [ 916.882384][T26790] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 917.396832][T26804] 0}^: entered promiscuous mode [ 918.760735][T26819] Process accounting resumed [ 922.172511][T26901] binder: 26900:26901 ioctl 541b 38 returned -22 [ 922.326603][T26914] netlink: 'syz.8.8143': attribute type 2 has an invalid length. [ 922.342469][T26914] netlink: 10 bytes leftover after parsing attributes in process `syz.8.8143'. [ 922.371025][T26914] netlink: 'syz.8.8143': attribute type 2 has an invalid length. [ 923.396914][T26933] binder: 26928:26933 ioctl 541b 38 returned -22 [ 923.935248][T26952] FAULT_INJECTION: forcing a failure. [ 923.935248][T26952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 924.007589][T26952] CPU: 0 UID: 0 PID: 26952 Comm: syz.5.8150 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 924.019914][T26952] Tainted: [U]=USER [ 924.023747][T26952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 924.033837][T26952] Call Trace: [ 924.037147][T26952] [ 924.040109][T26952] dump_stack_lvl+0x16c/0x1f0 [ 924.044838][T26952] should_fail_ex+0x497/0x5b0 [ 924.049568][T26952] _copy_to_user+0x32/0xd0 [ 924.054039][T26952] simple_read_from_buffer+0xd0/0x160 [ 924.059454][T26952] proc_fail_nth_read+0x198/0x270 [ 924.064532][T26952] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 924.070135][T26952] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 924.075736][T26952] vfs_read+0x1df/0xbe0 [ 924.079942][T26952] ? __fget_files+0x1fc/0x3a0 [ 924.084675][T26952] ? __pfx___mutex_lock+0x10/0x10 [ 924.089749][T26952] ? __pfx_vfs_read+0x10/0x10 [ 924.094479][T26952] ? __fget_files+0x206/0x3a0 [ 924.099207][T26952] ksys_read+0x12b/0x250 [ 924.103487][T26952] ? __pfx_ksys_read+0x10/0x10 [ 924.108299][T26952] do_syscall_64+0xcd/0x250 [ 924.112850][T26952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.118788][T26952] RIP: 0033:0x7f66cc18473c [ 924.123227][T26952] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 924.142841][T26952] RSP: 002b:00007f66ccf4d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 924.151260][T26952] RAX: ffffffffffffffda RBX: 00007f66cc375fa0 RCX: 00007f66cc18473c [ 924.159237][T26952] RDX: 000000000000000f RSI: 00007f66ccf4d0a0 RDI: 0000000000000005 [ 924.167213][T26952] RBP: 00007f66ccf4d090 R08: 0000000000000000 R09: 0000000000000000 [ 924.175188][T26952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 924.183167][T26952] R13: 0000000000000000 R14: 00007f66cc375fa0 R15: 00007ffc47759e48 [ 924.191158][T26952] [ 924.763074][T26971] Process accounting resumed [ 924.802835][T26973] ecryptfs_parse_packet_length: Error parsing packet length [ 924.818874][T26973] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 928.060621][T27031] random: crng reseeded on system resumption [ 929.096507][T27048] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8177'. [ 929.480217][T27064] netlink: 118 bytes leftover after parsing attributes in process `syz.5.8182'. [ 929.886394][T27071] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 929.901028][T27071] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 929.991849][T27071] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 929.997917][T27071] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 930.183201][T27071] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 930.189253][T27071] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 930.254303][T27071] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 930.298093][T27071] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 930.305506][T27071] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 930.330623][T27071] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 931.773059][T27108] netlink: 334 bytes leftover after parsing attributes in process `syz.8.8193'. [ 931.921483][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 932.021595][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 932.083995][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.090434][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.241619][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 932.321543][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 934.001479][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 934.081619][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 934.332183][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 934.421579][T19749] Bluetooth: hci2: command 0x0c1a tx timeout [ 936.431257][T19749] Bluetooth: hci3: command 0x0c1a tx timeout [ 936.481529][T19749] Bluetooth: hci2: command 0x0c1a tx timeout [ 936.529015][T27115] ima: policy update failed [ 936.585301][T27174] binder: 27173:27174 ioctl 541b 38 returned -22 [ 936.613907][ T29] audit: type=1802 audit(8277292123.380:21): pid=27115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.8193" res=0 errno=0 [ 943.409430][T27284] Process accounting resumed [ 945.452257][T19749] Bluetooth: hci4: Malformed Event: 0x2f [ 945.964155][T27319] netlink: 326 bytes leftover after parsing attributes in process `syz.8.8243'. [ 953.119553][T27455] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8277'. [ 953.171902][T27437] sctp: [Deprecated]: syz.7.8273 (pid 27437) Use of int in maxseg socket option. [ 953.171902][T27437] Use struct sctp_assoc_value instead [ 953.821808][T27463] mkiss: ax0: crc mode is auto. [ 954.401782][T19749] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 955.981875][T27507] netlink: 334 bytes leftover after parsing attributes in process `syz.8.8293'. [ 958.758907][T27577] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8306'. [ 960.592944][T27615] Invalid ELF header magic: != ELF [ 966.001514][T19749] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 966.226845][T27701] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8338'. [ 966.434317][T27701] bond0: (slave bond_slave_0): Releasing backup interface [ 966.821137][T27711] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8341'. [ 966.876397][T27711] nbd: must specify a size in bytes for the device [ 967.001298][T27714] net_ratelimit: 2 callbacks suppressed [ 967.001320][T27714] netlink: zone id is out of range [ 967.022454][T27709] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 967.091579][T27714] netlink: zone id is out of range [ 967.097015][T27714] netlink: zone id is out of range [ 967.121308][T27714] netlink: zone id is out of range [ 967.208709][T27714] netlink: zone id is out of range [ 967.256077][T27714] netlink: zone id is out of range [ 967.261260][T27714] netlink: zone id is out of range [ 967.355974][T27714] netlink: zone id is out of range [ 967.361155][T27714] netlink: zone id is out of range [ 968.756485][T27760] openvswitch: HfR: Dropping previously announced user features [ 968.813611][T27760] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8353'. [ 968.862617][T27760] HfR: left promiscuous mode [ 968.868904][T27766] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8353'. [ 972.536837][T27829] svc: failed to register nfsdv3 RPC service (errno 111). [ 972.573029][T27829] svc: failed to register nfsaclv3 RPC service (errno 111). [ 973.230618][T27844] FAULT_INJECTION: forcing a failure. [ 973.230618][T27844] name failslab, interval 1, probability 0, space 0, times 0 [ 973.261521][T27844] CPU: 1 UID: 0 PID: 27844 Comm: syz.5.8372 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 973.273851][T27844] Tainted: [U]=USER [ 973.277681][T27844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 973.287766][T27844] Call Trace: [ 973.291067][T27844] [ 973.294024][T27844] dump_stack_lvl+0x16c/0x1f0 [ 973.298749][T27844] should_fail_ex+0x497/0x5b0 [ 973.303471][T27844] ? fs_reclaim_acquire+0xae/0x150 [ 973.308633][T27844] should_failslab+0xc2/0x120 [ 973.313365][T27844] __kmalloc_node_noprof+0xd1/0x520 [ 973.318629][T27844] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 973.324148][T27844] __kvmalloc_node_noprof+0xad/0x1a0 [ 973.329491][T27844] io_uring_setup+0x2a1/0x3230 [ 973.334320][T27844] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 973.340381][T27844] ? __pfx_io_uring_setup+0x10/0x10 [ 973.345642][T27844] ? __fget_files+0x206/0x3a0 [ 973.350381][T27844] ? syscall_user_dispatch+0x77/0x140 [ 973.355811][T27844] __x64_sys_io_uring_setup+0x98/0x140 [ 973.361298][T27844] do_syscall_64+0xcd/0x250 [ 973.365822][T27844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.371733][T27844] RIP: 0033:0x7f66cc185d29 [ 973.376154][T27844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 973.395789][T27844] RSP: 002b:00007f66ccf4d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 973.404227][T27844] RAX: ffffffffffffffda RBX: 00007f66cc375fa0 RCX: 00007f66cc185d29 [ 973.412211][T27844] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 973.420188][T27844] RBP: 00007f66ccf4d090 R08: 0000000000000000 R09: 0000000000000000 [ 973.428165][T27844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 973.436146][T27844] R13: 0000000000000000 R14: 00007f66cc375fa0 R15: 00007ffc47759e48 [ 973.444145][T27844] [ 973.623060][T27844] Process accounting paused [ 973.905133][T27856] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8376'. [ 975.810024][T27899] FAULT_INJECTION: forcing a failure. [ 975.810024][T27899] name failslab, interval 1, probability 0, space 0, times 0 [ 975.840213][T27899] CPU: 0 UID: 0 PID: 27899 Comm: syz.5.8388 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 975.852532][T27899] Tainted: [U]=USER [ 975.856362][T27899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 975.866454][T27899] Call Trace: [ 975.869770][T27899] [ 975.872731][T27899] dump_stack_lvl+0x16c/0x1f0 [ 975.877460][T27899] should_fail_ex+0x497/0x5b0 [ 975.882193][T27899] ? fs_reclaim_acquire+0xae/0x150 [ 975.887353][T27899] should_failslab+0xc2/0x120 [ 975.892079][T27899] __kmalloc_cache_noprof+0x68/0x420 [ 975.897421][T27899] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 975.903204][T27899] percpu_ref_init+0xd9/0x400 [ 975.907932][T27899] io_uring_setup+0x379/0x3230 [ 975.912754][T27899] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 975.918786][T27899] ? __pfx_io_uring_setup+0x10/0x10 [ 975.924042][T27899] ? __fget_files+0x206/0x3a0 [ 975.928779][T27899] ? syscall_user_dispatch+0x77/0x140 [ 975.934209][T27899] __x64_sys_io_uring_setup+0x98/0x140 [ 975.939719][T27899] do_syscall_64+0xcd/0x250 [ 975.944272][T27899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.950212][T27899] RIP: 0033:0x7f66cc185d29 [ 975.954664][T27899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 975.974316][T27899] RSP: 002b:00007f66ccf4d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 975.982770][T27899] RAX: ffffffffffffffda RBX: 00007f66cc375fa0 RCX: 00007f66cc185d29 [ 975.990783][T27899] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 975.998792][T27899] RBP: 00007f66ccf4d090 R08: 0000000000000000 R09: 0000000000000000 [ 976.006804][T27899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 976.014815][T27899] R13: 0000000000000000 R14: 00007f66cc375fa0 R15: 00007ffc47759e48 [ 976.022838][T27899] [ 981.383614][T28024] MTRR 1 not used [ 981.443730][T28012] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 981.461567][T28012] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 982.646560][T28060] netlink: 346 bytes leftover after parsing attributes in process `syz.5.8427'. [ 982.700427][T28060] HSR: entered promiscuous mode [ 982.863388][T28063] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8429'. [ 985.890287][T28137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8449'. [ 985.899696][T28137] hsr_slave_0: left promiscuous mode [ 985.907028][T28137] hsr_slave_1: left promiscuous mode [ 987.180079][T28161] netlink: 'syz.8.8457': attribute type 11 has an invalid length. [ 989.027907][T28205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8468'. [ 989.051255][T28205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8468'. [ 989.139708][T28207] dlm: non-version read from control device 0 [ 993.524962][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.532988][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.570021][T28310] netlink: 4200 bytes leftover after parsing attributes in process `syz.4.8504'. [ 993.635145][T28309] can: request_module (can-proto-3) failed. [ 993.652122][T28310] netlink: 4200 bytes leftover after parsing attributes in process `syz.4.8504'. [ 994.085827][T28324] program syz.4.8508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 996.959897][T28364] FAULT_INJECTION: forcing a failure. [ 996.959897][T28364] name failslab, interval 1, probability 0, space 0, times 0 [ 997.021537][T28364] CPU: 1 UID: 0 PID: 28364 Comm: syz.4.8517 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 997.033865][T28364] Tainted: [U]=USER [ 997.037686][T28364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 997.047775][T28364] Call Trace: [ 997.051069][T28364] [ 997.054021][T28364] dump_stack_lvl+0x16c/0x1f0 [ 997.058742][T28364] should_fail_ex+0x497/0x5b0 [ 997.063488][T28364] ? fs_reclaim_acquire+0xae/0x150 [ 997.068724][T28364] should_failslab+0xc2/0x120 [ 997.073443][T28364] __kmalloc_noprof+0xce/0x4f0 [ 997.078246][T28364] ? rcu_is_watching+0x12/0xc0 [ 997.083058][T28364] ? kernfs_fop_write_iter+0x223/0x500 [ 997.088575][T28364] kernfs_fop_write_iter+0x223/0x500 [ 997.093906][T28364] vfs_write+0x5ae/0x1150 [ 997.098277][T28364] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 997.104123][T28364] ? __pfx___mutex_lock+0x10/0x10 [ 997.109168][T28364] ? __pfx_vfs_write+0x10/0x10 [ 997.113963][T28364] ksys_write+0x12b/0x250 [ 997.118310][T28364] ? __pfx_ksys_write+0x10/0x10 [ 997.123181][T28364] do_syscall_64+0xcd/0x250 [ 997.127703][T28364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.133610][T28364] RIP: 0033:0x7f2801585d29 [ 997.138035][T28364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 997.157660][T28364] RSP: 002b:00007f2802473038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 997.166088][T28364] RAX: ffffffffffffffda RBX: 00007f2801775fa0 RCX: 00007f2801585d29 [ 997.174067][T28364] RDX: 0000000000001000 RSI: 0000000020000040 RDI: 0000000000000003 [ 997.182046][T28364] RBP: 00007f2802473090 R08: 0000000000000000 R09: 0000000000000000 [ 997.190023][T28364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 997.198007][T28364] R13: 0000000000000000 R14: 00007f2801775fa0 R15: 00007ffe69559768 [ 997.206007][T28364] [ 997.263424][T28363] net_ratelimit: 11 callbacks suppressed [ 997.263454][T28363] openvswitch: netlink: IPv4 tunnel dst address is zero [ 997.366308][T28363] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8520'. [ 997.400170][T28363] team_slave_0: entered allmulticast mode [ 997.936435][T28371] capability: warning: `syz.5.8522' uses deprecated v2 capabilities in a way that may be insecure [ 999.501826][T28411] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8531'. [ 1002.574942][T28491] FAULT_INJECTION: forcing a failure. [ 1002.574942][T28491] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.593291][T28491] CPU: 1 UID: 0 PID: 28491 Comm: syz.5.8552 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1002.605620][T28491] Tainted: [U]=USER [ 1002.609456][T28491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1002.619552][T28491] Call Trace: [ 1002.622863][T28491] [ 1002.625830][T28491] dump_stack_lvl+0x16c/0x1f0 [ 1002.630565][T28491] should_fail_ex+0x497/0x5b0 [ 1002.635298][T28491] ? fs_reclaim_acquire+0xae/0x150 [ 1002.640462][T28491] should_failslab+0xc2/0x120 [ 1002.645196][T28491] __kmalloc_cache_noprof+0x68/0x420 [ 1002.650543][T28491] alloc_workqueue_attrs+0x40/0x100 [ 1002.655798][T28491] padata_set_cpumask+0x380/0x520 [ 1002.660878][T28491] store_cpumask+0x121/0x1a0 [ 1002.665518][T28491] ? __pfx_store_cpumask+0x10/0x10 [ 1002.670678][T28491] ? rcu_is_watching+0x12/0xc0 [ 1002.675502][T28491] padata_sysfs_store+0x73/0xb0 [ 1002.680419][T28491] ? __pfx_padata_sysfs_store+0x10/0x10 [ 1002.686022][T28491] sysfs_kf_write+0x117/0x170 [ 1002.690764][T28491] kernfs_fop_write_iter+0x33d/0x500 [ 1002.696108][T28491] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1002.701364][T28491] vfs_write+0x5ae/0x1150 [ 1002.705725][T28491] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1002.711553][T28491] ? __pfx___mutex_lock+0x10/0x10 [ 1002.716598][T28491] ? __pfx_vfs_write+0x10/0x10 [ 1002.721403][T28491] ksys_write+0x12b/0x250 [ 1002.725760][T28491] ? __pfx_ksys_write+0x10/0x10 [ 1002.730638][T28491] do_syscall_64+0xcd/0x250 [ 1002.735172][T28491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.741086][T28491] RIP: 0033:0x7f66cc185d29 [ 1002.745513][T28491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1002.765140][T28491] RSP: 002b:00007f66ccf4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1002.773573][T28491] RAX: ffffffffffffffda RBX: 00007f66cc375fa0 RCX: 00007f66cc185d29 [ 1002.781551][T28491] RDX: 0000000000001000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1002.789532][T28491] RBP: 00007f66ccf4d090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.797512][T28491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1002.805493][T28491] R13: 0000000000000000 R14: 00007f66cc375fa0 R15: 00007ffc47759e48 [ 1002.813498][T28491] [ 1003.757509][T28496] Process accounting resumed [ 1009.662132][T28619] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1011.070873][T28654] netlink: 572 bytes leftover after parsing attributes in process `syz.4.8589'. [ 1012.926327][T28697] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1013.125093][ T29] audit: type=1800 audit(4294967371.570:22): pid=28703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8605" name="version" dev="configfs" ino=115546 res=0 errno=0 [ 1013.551114][T28710] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1013.559534][T28710] FAULT_INJECTION: forcing a failure. [ 1013.559534][T28710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1013.572945][T28710] CPU: 1 UID: 0 PID: 28710 Comm: syz.8.8606 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1013.585242][T28710] Tainted: [U]=USER [ 1013.589073][T28710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1013.599161][T28710] Call Trace: [ 1013.602466][T28710] [ 1013.605430][T28710] dump_stack_lvl+0x16c/0x1f0 [ 1013.610156][T28710] should_fail_ex+0x497/0x5b0 [ 1013.614884][T28710] _copy_to_user+0x32/0xd0 [ 1013.619356][T28710] simple_read_from_buffer+0xd0/0x160 [ 1013.624777][T28710] proc_fail_nth_read+0x198/0x270 [ 1013.629860][T28710] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1013.635465][T28710] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1013.641071][T28710] vfs_read+0x1df/0xbe0 [ 1013.645281][T28710] ? __fget_files+0x1fc/0x3a0 [ 1013.650014][T28710] ? __pfx___mutex_lock+0x10/0x10 [ 1013.655093][T28710] ? __pfx_vfs_read+0x10/0x10 [ 1013.659832][T28710] ? __fget_files+0x206/0x3a0 [ 1013.664578][T28710] ksys_read+0x12b/0x250 [ 1013.668871][T28710] ? __pfx_ksys_read+0x10/0x10 [ 1013.673677][T28710] do_syscall_64+0xcd/0x250 [ 1013.678203][T28710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.684122][T28710] RIP: 0033:0x7f3f58f8473c [ 1013.688552][T28710] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1013.708178][T28710] RSP: 002b:00007f3f59e4c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1013.716612][T28710] RAX: ffffffffffffffda RBX: 00007f3f59175fa0 RCX: 00007f3f58f8473c [ 1013.724592][T28710] RDX: 000000000000000f RSI: 00007f3f59e4c0a0 RDI: 0000000000000005 [ 1013.732566][T28710] RBP: 00007f3f59e4c090 R08: 0000000000000000 R09: 0000000000000000 [ 1013.740542][T28710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1013.748522][T28710] R13: 0000000000000000 R14: 00007f3f59175fa0 R15: 00007ffd88abccb8 [ 1013.756518][T28710] [ 1015.600437][T28739] FAULT_INJECTION: forcing a failure. [ 1015.600437][T28739] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.648541][T28739] CPU: 0 UID: 0 PID: 28739 Comm: syz.5.8615 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1015.660863][T28739] Tainted: [U]=USER [ 1015.664704][T28739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1015.674801][T28739] Call Trace: [ 1015.678108][T28739] [ 1015.681066][T28739] dump_stack_lvl+0x16c/0x1f0 [ 1015.685797][T28739] should_fail_ex+0x497/0x5b0 [ 1015.690523][T28739] ? fs_reclaim_acquire+0xae/0x150 [ 1015.695727][T28739] should_failslab+0xc2/0x120 [ 1015.700470][T28739] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 1015.706333][T28739] ? alloc_unbound_pwq+0x3ff/0xe10 [ 1015.711502][T28739] alloc_unbound_pwq+0x3ff/0xe10 [ 1015.716503][T28739] apply_wqattrs_prepare+0x3af/0xbd0 [ 1015.721861][T28739] apply_workqueue_attrs_locked+0x64/0xe0 [ 1015.727649][T28739] apply_workqueue_attrs+0x2a/0x50 [ 1015.732818][T28739] padata_set_cpumask+0x240/0x520 [ 1015.737907][T28739] store_cpumask+0x121/0x1a0 [ 1015.742543][T28739] ? __pfx_store_cpumask+0x10/0x10 [ 1015.747695][T28739] ? rcu_is_watching+0x12/0xc0 [ 1015.752518][T28739] padata_sysfs_store+0x73/0xb0 [ 1015.757425][T28739] ? __pfx_padata_sysfs_store+0x10/0x10 [ 1015.763032][T28739] sysfs_kf_write+0x117/0x170 [ 1015.767765][T28739] kernfs_fop_write_iter+0x33d/0x500 [ 1015.773101][T28739] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1015.778350][T28739] vfs_write+0x5ae/0x1150 [ 1015.782730][T28739] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1015.788592][T28739] ? __pfx___mutex_lock+0x10/0x10 [ 1015.793677][T28739] ? __pfx_vfs_write+0x10/0x10 [ 1015.798516][T28739] ksys_write+0x12b/0x250 [ 1015.802941][T28739] ? __pfx_ksys_write+0x10/0x10 [ 1015.807855][T28739] do_syscall_64+0xcd/0x250 [ 1015.812417][T28739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.818359][T28739] RIP: 0033:0x7f66cc185d29 [ 1015.822813][T28739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1015.842464][T28739] RSP: 002b:00007f66ccf4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1015.850930][T28739] RAX: ffffffffffffffda RBX: 00007f66cc375fa0 RCX: 00007f66cc185d29 [ 1015.858943][T28739] RDX: 0000000000001000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1015.866953][T28739] RBP: 00007f66ccf4d090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.874963][T28739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1015.882974][T28739] R13: 0000000000000000 R14: 00007f66cc375fa0 R15: 00007ffc47759e48 [ 1015.891010][T28739] [ 1015.996747][T28742] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1016.007007][T28742] relay: one or more items not logged [item size (56) > sub-buffer size (28)] [ 1016.042125][T28729] sg_write: data in/out 32516/1048664 bytes for SCSI command 0x0-- guessing data in; [ 1016.042125][T28729] program syz.4.8613 not setting count and/or reply_len properly [ 1018.284755][T28784] netlink: 252 bytes leftover after parsing attributes in process `syz.5.8627'. [ 1018.296602][T28784] netlink: 252 bytes leftover after parsing attributes in process `syz.5.8627'. [ 1019.856243][T28813] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1020.286418][T28825] usb usb28: usbfs: process 28825 (syz.4.8636) did not claim interface 0 before use [ 1021.179419][T28847] FAULT_INJECTION: forcing a failure. [ 1021.179419][T28847] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.204722][T28847] CPU: 0 UID: 0 PID: 28847 Comm: syz.7.8643 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1021.217043][T28847] Tainted: [U]=USER [ 1021.220876][T28847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1021.230970][T28847] Call Trace: [ 1021.234283][T28847] [ 1021.237249][T28847] dump_stack_lvl+0x16c/0x1f0 [ 1021.241979][T28847] should_fail_ex+0x497/0x5b0 [ 1021.246710][T28847] ? fs_reclaim_acquire+0xae/0x150 [ 1021.251870][T28847] should_failslab+0xc2/0x120 [ 1021.256605][T28847] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 1021.262476][T28847] ? alloc_unbound_pwq+0x3ff/0xe10 [ 1021.267642][T28847] alloc_unbound_pwq+0x3ff/0xe10 [ 1021.272644][T28847] apply_wqattrs_prepare+0x8a1/0xbd0 [ 1021.278261][T28847] apply_workqueue_attrs_locked+0x64/0xe0 [ 1021.284033][T28847] apply_workqueue_attrs+0x2a/0x50 [ 1021.289210][T28847] padata_set_cpumask+0x240/0x520 [ 1021.294292][T28847] store_cpumask+0x121/0x1a0 [ 1021.298923][T28847] ? __pfx_store_cpumask+0x10/0x10 [ 1021.304082][T28847] ? rcu_is_watching+0x12/0xc0 [ 1021.308901][T28847] padata_sysfs_store+0x73/0xb0 [ 1021.313801][T28847] ? __pfx_padata_sysfs_store+0x10/0x10 [ 1021.319397][T28847] sysfs_kf_write+0x117/0x170 [ 1021.324131][T28847] kernfs_fop_write_iter+0x33d/0x500 [ 1021.329462][T28847] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1021.334717][T28847] vfs_write+0x5ae/0x1150 [ 1021.339093][T28847] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1021.344946][T28847] ? __pfx___mutex_lock+0x10/0x10 [ 1021.350008][T28847] ? __pfx_vfs_write+0x10/0x10 [ 1021.354824][T28847] ksys_write+0x12b/0x250 [ 1021.359188][T28847] ? __pfx_ksys_write+0x10/0x10 [ 1021.364071][T28847] do_syscall_64+0xcd/0x250 [ 1021.368599][T28847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.374527][T28847] RIP: 0033:0x7f78a8f85d29 [ 1021.378949][T28847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1021.398585][T28847] RSP: 002b:00007f78a9d6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1021.407017][T28847] RAX: ffffffffffffffda RBX: 00007f78a9175fa0 RCX: 00007f78a8f85d29 [ 1021.414997][T28847] RDX: 0000000000001000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1021.422974][T28847] RBP: 00007f78a9d6f090 R08: 0000000000000000 R09: 0000000000000000 [ 1021.430975][T28847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1021.438950][T28847] R13: 0000000000000000 R14: 00007f78a9175fa0 R15: 00007fff8bc36088 [ 1021.446943][T28847] [ 1021.481744][T28846] relay: one or more items not logged [item size (56) > sub-buffer size (28)] [ 1024.439470][T28915] FAULT_INJECTION: forcing a failure. [ 1024.439470][T28915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1024.491488][T28915] CPU: 0 UID: 0 PID: 28915 Comm: syz.5.8664 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1024.503808][T28915] Tainted: [U]=USER [ 1024.507643][T28915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1024.517736][T28915] Call Trace: [ 1024.521041][T28915] [ 1024.523995][T28915] dump_stack_lvl+0x16c/0x1f0 [ 1024.528705][T28915] should_fail_ex+0x497/0x5b0 [ 1024.533425][T28915] _copy_to_user+0x32/0xd0 [ 1024.537891][T28915] simple_read_from_buffer+0xd0/0x160 [ 1024.543305][T28915] proc_fail_nth_read+0x198/0x270 [ 1024.548376][T28915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1024.553995][T28915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1024.559588][T28915] vfs_read+0x1df/0xbe0 [ 1024.563783][T28915] ? __fget_files+0x1fc/0x3a0 [ 1024.568505][T28915] ? __pfx___mutex_lock+0x10/0x10 [ 1024.573582][T28915] ? __pfx_vfs_read+0x10/0x10 [ 1024.578310][T28915] ? __fget_files+0x206/0x3a0 [ 1024.583034][T28915] ksys_read+0x12b/0x250 [ 1024.587310][T28915] ? __pfx_ksys_read+0x10/0x10 [ 1024.592136][T28915] do_syscall_64+0xcd/0x250 [ 1024.596691][T28915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.602630][T28915] RIP: 0033:0x7f66cc18473c [ 1024.607074][T28915] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1024.626703][T28915] RSP: 002b:00007f66ccf4d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1024.635128][T28915] RAX: ffffffffffffffda RBX: 00007f66cc375fa0 RCX: 00007f66cc18473c [ 1024.643114][T28915] RDX: 000000000000000f RSI: 00007f66ccf4d0a0 RDI: 0000000000000004 [ 1024.651097][T28915] RBP: 00007f66ccf4d090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.659094][T28915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1024.667086][T28915] R13: 0000000000000000 R14: 00007f66cc375fa0 R15: 00007ffc47759e48 [ 1024.675259][T28915] [ 1024.678338][ C0] vkms_vblank_simulate: vblank timer overrun [ 1025.156490][ T29] audit: type=1806 audit(4294967383.600:23): res=-14 [ 1027.272147][T28987] __vm_enough_memory: pid: 28987, comm: syz.4.8685, bytes: 4503599627366400 not enough memory for the allocation [ 1028.368470][T29023] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1032.832231][T29120] usb usb28: usbfs: process 29120 (syz.8.8716) did not claim interface 0 before use [ 1033.850604][T29132] Process accounting paused [ 1036.832907][T29209] netlink: 342 bytes leftover after parsing attributes in process `syz.8.8747'. [ 1038.566978][T29245] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1040.237404][ T29] audit: type=1800 audit(8277292044.580:24): pid=29275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.8765" name="dbroot" dev="configfs" ino=118694 res=0 errno=0 [ 1040.263433][T29275] db_root: cannot open: [ 1049.369411][T29480] Process accounting resumed [ 1054.963585][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.969958][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.813592][T29699] FAULT_INJECTION: forcing a failure. [ 1059.813592][T29699] name failslab, interval 1, probability 0, space 0, times 0 [ 1059.868783][T29699] CPU: 0 UID: 0 PID: 29699 Comm: syz.7.8880 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1059.881079][T29699] Tainted: [U]=USER [ 1059.884895][T29699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1059.894964][T29699] Call Trace: [ 1059.898267][T29699] [ 1059.901223][T29699] dump_stack_lvl+0x16c/0x1f0 [ 1059.905951][T29699] should_fail_ex+0x497/0x5b0 [ 1059.910661][T29699] ? fs_reclaim_acquire+0xae/0x150 [ 1059.915808][T29699] should_failslab+0xc2/0x120 [ 1059.920523][T29699] __kmalloc_noprof+0xce/0x4f0 [ 1059.925318][T29699] ? d_absolute_path+0x137/0x1b0 [ 1059.930291][T29699] ? tomoyo_encode2+0x100/0x3e0 [ 1059.935168][T29699] tomoyo_encode2+0x100/0x3e0 [ 1059.939860][T29699] tomoyo_realpath_from_path+0x1a7/0x710 [ 1059.945511][T29699] tomoyo_path_number_perm+0x248/0x5b0 [ 1059.950990][T29699] ? tomoyo_path_number_perm+0x235/0x5b0 [ 1059.956638][T29699] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1059.962655][T29699] ? __pfx_lock_release+0x10/0x10 [ 1059.967681][T29699] ? trace_lock_acquire+0x14e/0x1f0 [ 1059.972897][T29699] ? lock_acquire+0x2f/0xb0 [ 1059.977747][T29699] ? __fget_files+0x40/0x3a0 [ 1059.982607][T29699] ? __fget_files+0x206/0x3a0 [ 1059.987292][T29699] security_file_ioctl+0x9b/0x240 [ 1059.992323][T29699] __x64_sys_ioctl+0xb7/0x200 [ 1059.997009][T29699] do_syscall_64+0xcd/0x250 [ 1060.001525][T29699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.007428][T29699] RIP: 0033:0x7f78a8f85d29 [ 1060.011860][T29699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1060.031466][T29699] RSP: 002b:00007f78a9d4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1060.039878][T29699] RAX: ffffffffffffffda RBX: 00007f78a9176080 RCX: 00007f78a8f85d29 [ 1060.047847][T29699] RDX: 0000000000000005 RSI: 0000000000000301 RDI: 0000000000000003 [ 1060.055816][T29699] RBP: 00007f78a9d4e090 R08: 0000000000000000 R09: 0000000000000000 [ 1060.063784][T29699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1060.071761][T29699] R13: 0000000000000000 R14: 00007f78a9176080 R15: 00007fff8bc36088 [ 1060.079747][T29699] [ 1060.088785][T29699] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1061.988189][T29754] FAULT_INJECTION: forcing a failure. [ 1061.988189][T29754] name failslab, interval 1, probability 0, space 0, times 0 [ 1062.003346][T29754] CPU: 1 UID: 0 PID: 29754 Comm: syz.4.8898 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1062.015626][T29754] Tainted: [U]=USER [ 1062.019448][T29754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1062.029521][T29754] Call Trace: [ 1062.032818][T29754] [ 1062.035770][T29754] dump_stack_lvl+0x16c/0x1f0 [ 1062.040484][T29754] should_fail_ex+0x497/0x5b0 [ 1062.045197][T29754] ? fs_reclaim_acquire+0xae/0x150 [ 1062.050342][T29754] should_failslab+0xc2/0x120 [ 1062.055060][T29754] __kmalloc_noprof+0xce/0x4f0 [ 1062.059860][T29754] ? event_pid_write.isra.0+0x11f/0x7d0 [ 1062.065444][T29754] ? trace_parser_get_init+0x30/0xc0 [ 1062.070756][T29754] trace_parser_get_init+0x30/0xc0 [ 1062.075873][T29754] trace_pid_write+0xf0/0x470 [ 1062.080597][T29754] ? __pfx_trace_pid_write+0x10/0x10 [ 1062.085887][T29754] ? __pfx___mutex_lock+0x10/0x10 [ 1062.090937][T29754] event_pid_write.isra.0+0x3c5/0x7d0 [ 1062.096321][T29754] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 1062.102233][T29754] ? __pfx_ftrace_event_pid_write+0x10/0x10 [ 1062.108141][T29754] vfs_write+0x24c/0x1150 [ 1062.112483][T29754] ? __fget_files+0x1fc/0x3a0 [ 1062.117170][T29754] ? __pfx___mutex_lock+0x10/0x10 [ 1062.122204][T29754] ? __pfx_vfs_write+0x10/0x10 [ 1062.126979][T29754] ? __fget_files+0x206/0x3a0 [ 1062.131670][T29754] ksys_write+0x12b/0x250 [ 1062.136004][T29754] ? __pfx_ksys_write+0x10/0x10 [ 1062.140869][T29754] do_syscall_64+0xcd/0x250 [ 1062.145385][T29754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.151289][T29754] RIP: 0033:0x7f2801585d29 [ 1062.155707][T29754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1062.175751][T29754] RSP: 002b:00007f2802473038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1062.184166][T29754] RAX: ffffffffffffffda RBX: 00007f2801775fa0 RCX: 00007f2801585d29 [ 1062.192137][T29754] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000004 [ 1062.200111][T29754] RBP: 00007f2802473090 R08: 0000000000000000 R09: 0000000000000000 [ 1062.208083][T29754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1062.216052][T29754] R13: 0000000000000000 R14: 00007f2801775fa0 R15: 00007ffe69559768 [ 1062.224040][T29754] [ 1063.470782][T29795] FAULT_INJECTION: forcing a failure. [ 1063.470782][T29795] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.492487][T29795] CPU: 1 UID: 0 PID: 29795 Comm: syz.7.8906 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1063.504776][T29795] Tainted: [U]=USER [ 1063.508589][T29795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1063.518664][T29795] Call Trace: [ 1063.521962][T29795] [ 1063.524912][T29795] dump_stack_lvl+0x16c/0x1f0 [ 1063.529629][T29795] should_fail_ex+0x497/0x5b0 [ 1063.534343][T29795] ? fs_reclaim_acquire+0xae/0x150 [ 1063.539485][T29795] should_failslab+0xc2/0x120 [ 1063.544199][T29795] __kmalloc_node_track_caller_noprof+0xcf/0x520 [ 1063.550564][T29795] ? scsi_bios_ptable+0xea/0x1f0 [ 1063.555530][T29795] kmemdup_noprof+0x29/0x60 [ 1063.560063][T29795] scsi_bios_ptable+0xea/0x1f0 [ 1063.564854][T29795] scsi_partsize+0x2c/0x520 [ 1063.569387][T29795] scsicam_bios_param+0x2a/0x5b0 [ 1063.574352][T29795] sd_getgeo+0x305/0x3b0 [ 1063.578627][T29795] ? __pfx_sd_getgeo+0x10/0x10 [ 1063.583436][T29795] ? __pfx_sd_getgeo+0x10/0x10 [ 1063.588234][T29795] blkdev_ioctl+0x374/0x670 [ 1063.592771][T29795] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1063.597830][T29795] ? __fget_files+0x206/0x3a0 [ 1063.602540][T29795] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1063.607601][T29795] __x64_sys_ioctl+0x190/0x200 [ 1063.612404][T29795] do_syscall_64+0xcd/0x250 [ 1063.616941][T29795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.622866][T29795] RIP: 0033:0x7f78a8f85d29 [ 1063.627307][T29795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1063.646936][T29795] RSP: 002b:00007f78a9d6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1063.655376][T29795] RAX: ffffffffffffffda RBX: 00007f78a9175fa0 RCX: 00007f78a8f85d29 [ 1063.663372][T29795] RDX: 0000000000000005 RSI: 0000000000000301 RDI: 0000000000000003 [ 1063.671361][T29795] RBP: 00007f78a9d6f090 R08: 0000000000000000 R09: 0000000000000000 [ 1063.679355][T29795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1063.687347][T29795] R13: 0000000000000000 R14: 00007f78a9175fa0 R15: 00007fff8bc36088 [ 1063.695356][T29795] [ 1064.864640][T29813] Process accounting resumed [ 1066.464456][T29867] FAULT_INJECTION: forcing a failure. [ 1066.464456][T29867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1066.543097][T29867] CPU: 1 UID: 0 PID: 29867 Comm: syz.4.8924 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1066.555391][T29867] Tainted: [U]=USER [ 1066.559193][T29867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1066.569251][T29867] Call Trace: [ 1066.572532][T29867] [ 1066.575464][T29867] dump_stack_lvl+0x16c/0x1f0 [ 1066.580153][T29867] should_fail_ex+0x497/0x5b0 [ 1066.584840][T29867] _copy_from_user+0x2e/0xd0 [ 1066.589440][T29867] copy_msghdr_from_user+0x99/0x160 [ 1066.594651][T29867] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1066.600463][T29867] ? __lock_acquire+0xcc5/0x3c40 [ 1066.605414][T29867] ___sys_sendmsg+0xff/0x1e0 [ 1066.610014][T29867] ? __pfx____sys_sendmsg+0x10/0x10 [ 1066.615231][T29867] ? trace_lock_acquire+0x14e/0x1f0 [ 1066.620453][T29867] __sys_sendmmsg+0x201/0x420 [ 1066.625150][T29867] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1066.630369][T29867] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1066.636388][T29867] ? fput+0x67/0x440 [ 1066.640299][T29867] ? ksys_write+0x1ba/0x250 [ 1066.644809][T29867] ? __pfx_ksys_write+0x10/0x10 [ 1066.649678][T29867] __x64_sys_sendmmsg+0x9c/0x100 [ 1066.654636][T29867] ? lockdep_hardirqs_on+0x7c/0x110 [ 1066.659842][T29867] do_syscall_64+0xcd/0x250 [ 1066.664358][T29867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.670266][T29867] RIP: 0033:0x7f2801585d29 [ 1066.674681][T29867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1066.694288][T29867] RSP: 002b:00007f2802452038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1066.702705][T29867] RAX: ffffffffffffffda RBX: 00007f2801776080 RCX: 00007f2801585d29 [ 1066.710677][T29867] RDX: 0000000000000006 RSI: 0000000020000080 RDI: 0000000000000003 [ 1066.718647][T29867] RBP: 00007f2802452090 R08: 0000000000000000 R09: 0000000000000000 [ 1066.726622][T29867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1066.734594][T29867] R13: 0000000000000001 R14: 00007f2801776080 R15: 00007ffe69559768 [ 1066.742578][T29867] [ 1068.004755][T29910] openvswitch: netlink: Unknown nsh attribute 0 [ 1068.222911][T29916] FAULT_INJECTION: forcing a failure. [ 1068.222911][T29916] name failslab, interval 1, probability 0, space 0, times 0 [ 1068.235873][T29916] CPU: 0 UID: 0 PID: 29916 Comm: syz.5.8937 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1068.248158][T29916] Tainted: [U]=USER [ 1068.251974][T29916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1068.262053][T29916] Call Trace: [ 1068.265439][T29916] [ 1068.268387][T29916] dump_stack_lvl+0x16c/0x1f0 [ 1068.273192][T29916] should_fail_ex+0x497/0x5b0 [ 1068.277909][T29916] ? fs_reclaim_acquire+0xae/0x150 [ 1068.283062][T29916] should_failslab+0xc2/0x120 [ 1068.287779][T29916] __kmalloc_cache_noprof+0x68/0x420 [ 1068.293099][T29916] ? trace_kmalloc+0x2d/0xd0 [ 1068.297720][T29916] ? __kmalloc_noprof+0x23b/0x4f0 [ 1068.302777][T29916] trace_pid_list_alloc+0x9d/0x3f0 [ 1068.308016][T29916] trace_pid_write+0x10f/0x470 [ 1068.312822][T29916] ? __pfx_trace_pid_write+0x10/0x10 [ 1068.318139][T29916] ? __pfx___mutex_lock+0x10/0x10 [ 1068.323226][T29916] event_pid_write.isra.0+0x3c5/0x7d0 [ 1068.328728][T29916] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 1068.334668][T29916] ? __pfx_ftrace_event_pid_write+0x10/0x10 [ 1068.340600][T29916] vfs_write+0x24c/0x1150 [ 1068.344960][T29916] ? __fget_files+0x1fc/0x3a0 [ 1068.349666][T29916] ? __pfx___mutex_lock+0x10/0x10 [ 1068.354731][T29916] ? __pfx_vfs_write+0x10/0x10 [ 1068.359537][T29916] ? __fget_files+0x206/0x3a0 [ 1068.364248][T29916] ksys_write+0x12b/0x250 [ 1068.368611][T29916] ? __pfx_ksys_write+0x10/0x10 [ 1068.373501][T29916] do_syscall_64+0xcd/0x250 [ 1068.378050][T29916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.383977][T29916] RIP: 0033:0x7f66cc185d29 [ 1068.388424][T29916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1068.408063][T29916] RSP: 002b:00007f66ccf4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1068.416509][T29916] RAX: ffffffffffffffda RBX: 00007f66cc375fa0 RCX: 00007f66cc185d29 [ 1068.424504][T29916] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000004 [ 1068.432501][T29916] RBP: 00007f66ccf4d090 R08: 0000000000000000 R09: 0000000000000000 [ 1068.440501][T29916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1068.448497][T29916] R13: 0000000000000000 R14: 00007f66cc375fa0 R15: 00007ffc47759e48 [ 1068.456500][T29916] [ 1072.091878][T30012] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8964'. [ 1072.431226][T30021] FAULT_INJECTION: forcing a failure. [ 1072.431226][T30021] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.489108][T30021] CPU: 1 UID: 0 PID: 30021 Comm: syz.5.8966 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1072.501395][T30021] Tainted: [U]=USER [ 1072.505215][T30021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1072.515290][T30021] Call Trace: [ 1072.518588][T30021] [ 1072.521540][T30021] dump_stack_lvl+0x16c/0x1f0 [ 1072.526258][T30021] should_fail_ex+0x497/0x5b0 [ 1072.530969][T30021] ? fs_reclaim_acquire+0xae/0x150 [ 1072.536121][T30021] should_failslab+0xc2/0x120 [ 1072.540836][T30021] __kmalloc_cache_noprof+0x68/0x420 [ 1072.546167][T30021] sctp_stream_init_ext+0x4e/0x1b0 [ 1072.551310][T30021] sctp_sendmsg_to_asoc+0x15f5/0x1ad0 [ 1072.556717][T30021] ? __pfx_mark_lock+0x10/0x10 [ 1072.561531][T30021] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1072.567281][T30021] ? sctp_sendmsg+0x575/0x1f10 [ 1072.572065][T30021] ? mark_held_locks+0x9f/0xe0 [ 1072.576847][T30021] ? sctp_sendmsg_check_sflags+0x176/0x320 [ 1072.582667][T30021] sctp_sendmsg+0x129c/0x1f10 [ 1072.587386][T30021] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1072.592437][T30021] ? __pfx___might_resched+0x10/0x10 [ 1072.597761][T30021] ? __pfx_aa_sk_perm+0x10/0x10 [ 1072.602650][T30021] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1072.607693][T30021] inet_sendmsg+0x119/0x140 [ 1072.612205][T30021] ____sys_sendmsg+0x907/0xb40 [ 1072.616977][T30021] ? copy_msghdr_from_user+0x10b/0x160 [ 1072.622448][T30021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1072.627751][T30021] ? __lock_acquire+0xcc5/0x3c40 [ 1072.632712][T30021] ___sys_sendmsg+0x135/0x1e0 [ 1072.637405][T30021] ? __pfx____sys_sendmsg+0x10/0x10 [ 1072.642632][T30021] ? trace_lock_acquire+0x14e/0x1f0 [ 1072.647862][T30021] __sys_sendmmsg+0x201/0x420 [ 1072.652554][T30021] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1072.657776][T30021] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1072.663780][T30021] ? fput+0x67/0x440 [ 1072.667692][T30021] ? ksys_write+0x1ba/0x250 [ 1072.672203][T30021] ? __pfx_ksys_write+0x10/0x10 [ 1072.677063][T30021] __x64_sys_sendmmsg+0x9c/0x100 [ 1072.682017][T30021] ? lockdep_hardirqs_on+0x7c/0x110 [ 1072.687224][T30021] do_syscall_64+0xcd/0x250 [ 1072.691740][T30021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.697646][T30021] RIP: 0033:0x7f66cc185d29 [ 1072.702064][T30021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1072.721678][T30021] RSP: 002b:00007f66ccf2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1072.730095][T30021] RAX: ffffffffffffffda RBX: 00007f66cc376080 RCX: 00007f66cc185d29 [ 1072.738071][T30021] RDX: 0000000000000006 RSI: 0000000020000080 RDI: 0000000000000003 [ 1072.746046][T30021] RBP: 00007f66ccf2c090 R08: 0000000000000000 R09: 0000000000000000 [ 1072.754112][T30021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1072.762085][T30021] R13: 0000000000000001 R14: 00007f66cc376080 R15: 00007ffc47759e48 [ 1072.770071][T30021] [ 1073.863048][T30050] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8974'. [ 1073.895280][T30050] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1074.086695][T30059] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1074.322489][T30068] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1074.341253][T30066] FAULT_INJECTION: forcing a failure. [ 1074.341253][T30066] name failslab, interval 1, probability 0, space 0, times 0 [ 1074.381545][T30066] CPU: 0 UID: 0 PID: 30066 Comm: syz.7.8979 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1074.393842][T30066] Tainted: [U]=USER [ 1074.397659][T30066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1074.407824][T30066] Call Trace: [ 1074.411127][T30066] [ 1074.414077][T30066] dump_stack_lvl+0x16c/0x1f0 [ 1074.418794][T30066] should_fail_ex+0x497/0x5b0 [ 1074.423510][T30066] ? fs_reclaim_acquire+0xae/0x150 [ 1074.428657][T30066] should_failslab+0xc2/0x120 [ 1074.433376][T30066] __kmalloc_noprof+0xce/0x4f0 [ 1074.438182][T30066] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1074.443843][T30066] ? tomoyo_realpath_from_path+0xbf/0x710 [ 1074.449601][T30066] tomoyo_realpath_from_path+0xbf/0x710 [ 1074.455184][T30066] ? tomoyo_path_number_perm+0x235/0x5b0 [ 1074.460856][T30066] tomoyo_path_number_perm+0x248/0x5b0 [ 1074.466357][T30066] ? tomoyo_path_number_perm+0x235/0x5b0 [ 1074.472048][T30066] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1074.478102][T30066] ? __pfx_lock_release+0x10/0x10 [ 1074.483157][T30066] ? trace_lock_acquire+0x14e/0x1f0 [ 1074.488401][T30066] ? lock_acquire+0x2f/0xb0 [ 1074.492945][T30066] ? __fget_files+0x40/0x3a0 [ 1074.497574][T30066] ? __fget_files+0x206/0x3a0 [ 1074.502282][T30066] security_file_ioctl+0x9b/0x240 [ 1074.507336][T30066] __x64_sys_ioctl+0xb7/0x200 [ 1074.512039][T30066] do_syscall_64+0xcd/0x250 [ 1074.516580][T30066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.522512][T30066] RIP: 0033:0x7f78a8f85d29 [ 1074.526949][T30066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1074.546588][T30066] RSP: 002b:00007f78a9d6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1074.555033][T30066] RAX: ffffffffffffffda RBX: 00007f78a9175fa0 RCX: 00007f78a8f85d29 [ 1074.563030][T30066] RDX: 0000000000000007 RSI: 0000000000001275 RDI: 0000000000000003 [ 1074.571024][T30066] RBP: 00007f78a9d6f090 R08: 0000000000000000 R09: 0000000000000000 [ 1074.579019][T30066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1074.587019][T30066] R13: 0000000000000000 R14: 00007f78a9175fa0 R15: 00007fff8bc36088 [ 1074.595032][T30066] [ 1074.621053][T30066] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1076.881811][T30120] netlink: 342 bytes leftover after parsing attributes in process `syz.7.8990'. [ 1079.115058][T30182] pty pty83: ldisc open failed (-12), clearing slot 83 [ 1079.715702][T30199] FAULT_INJECTION: forcing a failure. [ 1079.715702][T30199] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.759346][T30199] CPU: 1 UID: 0 PID: 30199 Comm: syz.4.9012 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1079.771632][T30199] Tainted: [U]=USER [ 1079.775452][T30199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1079.785529][T30199] Call Trace: [ 1079.788828][T30199] [ 1079.791786][T30199] dump_stack_lvl+0x16c/0x1f0 [ 1079.796501][T30199] should_fail_ex+0x497/0x5b0 [ 1079.801208][T30199] ? fs_reclaim_acquire+0xae/0x150 [ 1079.806350][T30199] should_failslab+0xc2/0x120 [ 1079.811062][T30199] __kmalloc_cache_noprof+0x68/0x420 [ 1079.816387][T30199] sctp_datamsg_from_user+0x8d/0x1320 [ 1079.821800][T30199] ? __sk_mem_raise_allocated+0x8a1/0x1710 [ 1079.827651][T30199] ? sctp_sched_init_sid+0x89/0x160 [ 1079.832893][T30199] ? __sk_mem_schedule+0xd0/0x100 [ 1079.837962][T30199] sctp_sendmsg_to_asoc+0xafd/0x1ad0 [ 1079.843288][T30199] ? print_usage_bug.part.0+0x500/0x560 [ 1079.848885][T30199] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1079.854645][T30199] ? sctp_sendmsg+0x575/0x1f10 [ 1079.859445][T30199] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1079.864854][T30199] ? mark_held_locks+0x9f/0xe0 [ 1079.869660][T30199] ? sctp_sendmsg_check_sflags+0x176/0x320 [ 1079.875510][T30199] sctp_sendmsg+0x129c/0x1f10 [ 1079.880241][T30199] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1079.885309][T30199] ? __pfx___might_resched+0x10/0x10 [ 1079.890637][T30199] ? __pfx_aa_sk_perm+0x10/0x10 [ 1079.895527][T30199] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1079.900591][T30199] inet_sendmsg+0x119/0x140 [ 1079.905130][T30199] ____sys_sendmsg+0x907/0xb40 [ 1079.909927][T30199] ? copy_msghdr_from_user+0x10b/0x160 [ 1079.915437][T30199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1079.920750][T30199] ? __lock_acquire+0xcc5/0x3c40 [ 1079.925727][T30199] ___sys_sendmsg+0x135/0x1e0 [ 1079.930448][T30199] ? __pfx____sys_sendmsg+0x10/0x10 [ 1079.935701][T30199] ? trace_lock_acquire+0x14e/0x1f0 [ 1079.940957][T30199] __sys_sendmmsg+0x201/0x420 [ 1079.945682][T30199] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1079.950937][T30199] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1079.956980][T30199] ? fput+0x67/0x440 [ 1079.960914][T30199] ? ksys_write+0x1ba/0x250 [ 1079.965455][T30199] ? __pfx_ksys_write+0x10/0x10 [ 1079.970342][T30199] __x64_sys_sendmmsg+0x9c/0x100 [ 1079.975322][T30199] ? lockdep_hardirqs_on+0x7c/0x110 [ 1079.980564][T30199] do_syscall_64+0xcd/0x250 [ 1079.985100][T30199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.991026][T30199] RIP: 0033:0x7f2801585d29 [ 1079.995464][T30199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1080.015100][T30199] RSP: 002b:00007f2802452038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1080.023543][T30199] RAX: ffffffffffffffda RBX: 00007f2801776080 RCX: 00007f2801585d29 [ 1080.031539][T30199] RDX: 0000000000000006 RSI: 0000000020000080 RDI: 0000000000000003 [ 1080.039535][T30199] RBP: 00007f2802452090 R08: 0000000000000000 R09: 0000000000000000 [ 1080.047533][T30199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1080.055529][T30199] R13: 0000000000000001 R14: 00007f2801776080 R15: 00007ffe69559768 [ 1080.063543][T30199] [ 1080.898497][T30223] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1081.162153][T30230] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1081.170424][T30230] FAULT_INJECTION: forcing a failure. [ 1081.170424][T30230] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.183499][T30230] CPU: 1 UID: 0 PID: 30230 Comm: syz.4.9020 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1081.195780][T30230] Tainted: [U]=USER [ 1081.199598][T30230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1081.209674][T30230] Call Trace: [ 1081.212971][T30230] [ 1081.215922][T30230] dump_stack_lvl+0x16c/0x1f0 [ 1081.220629][T30230] should_fail_ex+0x497/0x5b0 [ 1081.225341][T30230] ? fs_reclaim_acquire+0xae/0x150 [ 1081.230485][T30230] should_failslab+0xc2/0x120 [ 1081.235198][T30230] __kmalloc_noprof+0xce/0x4f0 [ 1081.239993][T30230] ? d_absolute_path+0x137/0x1b0 [ 1081.244969][T30230] ? tomoyo_encode2+0x100/0x3e0 [ 1081.249858][T30230] tomoyo_encode2+0x100/0x3e0 [ 1081.254559][T30230] tomoyo_realpath_from_path+0x1a7/0x710 [ 1081.260210][T30230] tomoyo_path_number_perm+0x248/0x5b0 [ 1081.265683][T30230] ? tomoyo_path_number_perm+0x235/0x5b0 [ 1081.271331][T30230] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1081.277355][T30230] ? __pfx_lock_release+0x10/0x10 [ 1081.282381][T30230] ? trace_lock_acquire+0x14e/0x1f0 [ 1081.287590][T30230] ? lock_acquire+0x2f/0xb0 [ 1081.292095][T30230] ? __fget_files+0x40/0x3a0 [ 1081.296695][T30230] ? __fget_files+0x206/0x3a0 [ 1081.301389][T30230] security_file_ioctl+0x9b/0x240 [ 1081.306426][T30230] __x64_sys_ioctl+0xb7/0x200 [ 1081.311105][T30230] do_syscall_64+0xcd/0x250 [ 1081.315621][T30230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.321521][T30230] RIP: 0033:0x7f2801585d29 [ 1081.325936][T30230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1081.345544][T30230] RSP: 002b:00007f2802473038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1081.353961][T30230] RAX: ffffffffffffffda RBX: 00007f2801775fa0 RCX: 00007f2801585d29 [ 1081.361930][T30230] RDX: 0000000000000007 RSI: 0000000000001275 RDI: 0000000000000003 [ 1081.369902][T30230] RBP: 00007f2802473090 R08: 0000000000000000 R09: 0000000000000000 [ 1081.377873][T30230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1081.385854][T30230] R13: 0000000000000000 R14: 00007f2801775fa0 R15: 00007ffe69559768 [ 1081.393842][T30230] [ 1081.422959][T30230] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1081.658759][T30245] FAULT_INJECTION: forcing a failure. [ 1081.658759][T30245] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.672698][T30245] CPU: 0 UID: 0 PID: 30245 Comm: syz.5.9024 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1081.684988][T30245] Tainted: [U]=USER [ 1081.688807][T30245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1081.698882][T30245] Call Trace: [ 1081.702182][T30245] [ 1081.705136][T30245] dump_stack_lvl+0x16c/0x1f0 [ 1081.709851][T30245] should_fail_ex+0x497/0x5b0 [ 1081.714551][T30245] ? fs_reclaim_acquire+0xae/0x150 [ 1081.719680][T30245] should_failslab+0xc2/0x120 [ 1081.724373][T30245] __kmalloc_cache_noprof+0x68/0x420 [ 1081.729675][T30245] trace_pid_list_alloc+0x1b0/0x3f0 [ 1081.734891][T30245] trace_pid_write+0x10f/0x470 [ 1081.739663][T30245] ? __pfx_trace_pid_write+0x10/0x10 [ 1081.744950][T30245] ? __pfx___mutex_lock+0x10/0x10 [ 1081.750001][T30245] event_pid_write.isra.0+0x3c5/0x7d0 [ 1081.755392][T30245] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 1081.761304][T30245] ? __pfx_ftrace_event_pid_write+0x10/0x10 [ 1081.767209][T30245] vfs_write+0x24c/0x1150 [ 1081.771545][T30245] ? __fget_files+0x1fc/0x3a0 [ 1081.776227][T30245] ? __pfx___mutex_lock+0x10/0x10 [ 1081.781259][T30245] ? __pfx_vfs_write+0x10/0x10 [ 1081.786043][T30245] ? __fget_files+0x206/0x3a0 [ 1081.790733][T30245] ksys_write+0x12b/0x250 [ 1081.795065][T30245] ? __pfx_ksys_write+0x10/0x10 [ 1081.799929][T30245] do_syscall_64+0xcd/0x250 [ 1081.804445][T30245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.810348][T30245] RIP: 0033:0x7f66cc185d29 [ 1081.814764][T30245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1081.834371][T30245] RSP: 002b:00007f66ccf4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1081.842838][T30245] RAX: ffffffffffffffda RBX: 00007f66cc375fa0 RCX: 00007f66cc185d29 [ 1081.850835][T30245] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000004 [ 1081.858812][T30245] RBP: 00007f66ccf4d090 R08: 0000000000000000 R09: 0000000000000000 [ 1081.866790][T30245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1081.874768][T30245] R13: 0000000000000000 R14: 00007f66cc375fa0 R15: 00007ffc47759e48 [ 1081.882756][T30245] [ 1082.760073][T30261] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1084.499786][T30305] FAULT_INJECTION: forcing a failure. [ 1084.499786][T30305] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.515235][T30305] CPU: 1 UID: 0 PID: 30305 Comm: syz.8.9038 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1084.527519][T30305] Tainted: [U]=USER [ 1084.531321][T30305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1084.541382][T30305] Call Trace: [ 1084.544667][T30305] [ 1084.547600][T30305] dump_stack_lvl+0x16c/0x1f0 [ 1084.552293][T30305] should_fail_ex+0x497/0x5b0 [ 1084.556977][T30305] ? fs_reclaim_acquire+0xae/0x150 [ 1084.562100][T30305] should_failslab+0xc2/0x120 [ 1084.566786][T30305] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 1084.572608][T30305] ? __sys_sendmmsg+0x201/0x420 [ 1084.577469][T30305] ? __x64_sys_sendmmsg+0x9c/0x100 [ 1084.582618][T30305] ? __alloc_skb+0x2b3/0x380 [ 1084.587224][T30305] __alloc_skb+0x2b3/0x380 [ 1084.591655][T30305] ? __pfx___alloc_skb+0x10/0x10 [ 1084.596644][T30305] _sctp_make_chunk+0x51/0x270 [ 1084.601415][T30305] sctp_make_datafrag_empty+0x15c/0x220 [ 1084.606964][T30305] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 1084.613041][T30305] sctp_datamsg_from_user+0x590/0x1320 [ 1084.618560][T30305] sctp_sendmsg_to_asoc+0xafd/0x1ad0 [ 1084.623863][T30305] ? print_usage_bug.part.0+0x500/0x560 [ 1084.629446][T30305] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1084.635182][T30305] ? sctp_sendmsg+0x575/0x1f10 [ 1084.639966][T30305] ? mark_held_locks+0x9f/0xe0 [ 1084.644751][T30305] ? sctp_sendmsg_check_sflags+0x176/0x320 [ 1084.650579][T30305] sctp_sendmsg+0x129c/0x1f10 [ 1084.655274][T30305] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1084.660324][T30305] ? __pfx___might_resched+0x10/0x10 [ 1084.665639][T30305] ? __pfx_aa_sk_perm+0x10/0x10 [ 1084.670535][T30305] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1084.675595][T30305] inet_sendmsg+0x119/0x140 [ 1084.680108][T30305] ____sys_sendmsg+0x907/0xb40 [ 1084.684881][T30305] ? copy_msghdr_from_user+0x10b/0x160 [ 1084.690353][T30305] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1084.695646][T30305] ? __lock_acquire+0xcc5/0x3c40 [ 1084.700603][T30305] ___sys_sendmsg+0x135/0x1e0 [ 1084.705382][T30305] ? __pfx____sys_sendmsg+0x10/0x10 [ 1084.710603][T30305] ? trace_lock_acquire+0x14e/0x1f0 [ 1084.715827][T30305] __sys_sendmmsg+0x201/0x420 [ 1084.720516][T30305] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1084.725736][T30305] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1084.731734][T30305] ? fput+0x67/0x440 [ 1084.735637][T30305] ? ksys_write+0x1ba/0x250 [ 1084.740144][T30305] ? __pfx_ksys_write+0x10/0x10 [ 1084.745002][T30305] __x64_sys_sendmmsg+0x9c/0x100 [ 1084.749951][T30305] ? lockdep_hardirqs_on+0x7c/0x110 [ 1084.755155][T30305] do_syscall_64+0xcd/0x250 [ 1084.759667][T30305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.765573][T30305] RIP: 0033:0x7f3f58f85d29 [ 1084.769989][T30305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1084.789605][T30305] RSP: 002b:00007f3f59e2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1084.798021][T30305] RAX: ffffffffffffffda RBX: 00007f3f59176080 RCX: 00007f3f58f85d29 [ 1084.805993][T30305] RDX: 0000000000000006 RSI: 0000000020000080 RDI: 0000000000000003 [ 1084.813963][T30305] RBP: 00007f3f59e2b090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.821935][T30305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1084.829904][T30305] R13: 0000000000000001 R14: 00007f3f59176080 R15: 00007ffd88abccb8 [ 1084.837888][T30305] [ 1086.773846][T30339] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1087.133117][T30354] FAULT_INJECTION: forcing a failure. [ 1087.133117][T30354] name failslab, interval 1, probability 0, space 0, times 0 [ 1087.185660][T30354] CPU: 0 UID: 0 PID: 30354 Comm: syz.8.9049 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1087.197969][T30354] Tainted: [U]=USER [ 1087.201793][T30354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1087.211867][T30354] Call Trace: [ 1087.215161][T30354] [ 1087.218111][T30354] dump_stack_lvl+0x16c/0x1f0 [ 1087.222822][T30354] should_fail_ex+0x497/0x5b0 [ 1087.227525][T30354] ? fs_reclaim_acquire+0xae/0x150 [ 1087.232669][T30354] should_failslab+0xc2/0x120 [ 1087.237386][T30354] __kmalloc_cache_noprof+0x68/0x420 [ 1087.242712][T30354] trace_pid_list_alloc+0x1b0/0x3f0 [ 1087.247952][T30354] trace_pid_write+0x10f/0x470 [ 1087.252750][T30354] ? __pfx_trace_pid_write+0x10/0x10 [ 1087.258064][T30354] ? __pfx___mutex_lock+0x10/0x10 [ 1087.263143][T30354] event_pid_write.isra.0+0x3c5/0x7d0 [ 1087.268557][T30354] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 1087.274500][T30354] ? __pfx_ftrace_event_pid_write+0x10/0x10 [ 1087.280434][T30354] vfs_write+0x24c/0x1150 [ 1087.284792][T30354] ? __fget_files+0x1fc/0x3a0 [ 1087.289495][T30354] ? __pfx___mutex_lock+0x10/0x10 [ 1087.294550][T30354] ? __pfx_vfs_write+0x10/0x10 [ 1087.299359][T30354] ? __fget_files+0x206/0x3a0 [ 1087.304076][T30354] ksys_write+0x12b/0x250 [ 1087.308432][T30354] ? __pfx_ksys_write+0x10/0x10 [ 1087.313329][T30354] do_syscall_64+0xcd/0x250 [ 1087.317867][T30354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.323793][T30354] RIP: 0033:0x7f3f58f85d29 [ 1087.328231][T30354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1087.347869][T30354] RSP: 002b:00007f3f59e4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1087.356325][T30354] RAX: ffffffffffffffda RBX: 00007f3f59175fa0 RCX: 00007f3f58f85d29 [ 1087.364339][T30354] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000004 [ 1087.372343][T30354] RBP: 00007f3f59e4c090 R08: 0000000000000000 R09: 0000000000000000 [ 1087.380348][T30354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1087.388344][T30354] R13: 0000000000000000 R14: 00007f3f59175fa0 R15: 00007ffd88abccb8 [ 1087.396366][T30354] [ 1092.354090][T30462] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1092.409051][T30462] relay: one or more items not logged [item size (56) > sub-buffer size (28)] [ 1092.714616][T30476] netlink: 146 bytes leftover after parsing attributes in process `syz.7.9082'. [ 1095.054159][T30499] kexec: Could not allocate control_code_buffer [ 1095.125948][T30507] Process accounting paused [ 1097.102391][T30559] [U]  [ 1097.105241][T30559] [U] [ 1097.107958][T30559] [U] [ 1097.110687][T30559] [U] [ 1097.150155][T30559] [U] [ 1097.152910][T30559] [U] [ 1097.155628][T30559] [U] [ 1097.158342][T30559] [U] [ 1097.174874][T30559] [U] [ 1097.177616][T30559] [U] [ 1097.180332][T30559] [U] [ 1097.183047][T30559] [U] [ 1097.223052][T30559] [U] [ 1097.225823][T30559] [U] Ր-fGMhV99ݑ p?Y1JyprHĩv먘C͚YUꔻZXWVM߬uMAS͔2&޾] [ 1097.304280][T30559] [U] !L,W#O4"ջ$| y@bF%s+Ir5 ,RM鬗8\i^zF\æ)]WxGրm:l8O' Nrxd [ 1097.502442][T30559] [U] &"lEaOSf-{#！jv Z?52mZ>X~g+^C [ 1097.605384][T30559] [U] \ dWy-wWB(G~ArR': [ 1097.642318][T30559] [U] OPS@r/~aC1B%4.[3'=f)p [ 1097.663208][T30559] [U]  lOAkd~TO8 U5`͕sNTJ [ 1097.681052][T30559] [U] _md;'#%)摦br퉜vX|Ep~в{SLRI@H++k̍F7/1)?YňK>MfKF5hhhT@?o{Mlw}T{."1UԤyRP-&cWV=N̯CJۿnF74ig9'vZ1LƢ7%k&$wm%x8=ٴE*p -%/x(<4Zv)r @->3 Q}`>E'%K|Ti$w> q:n.5 o]~4ʋT|o_ٴc@8l/sěj ckAh03#LAHwL@4rk(olC^mkqgB"~}FoEeIcT'4 [ 1097.726594][T30559] [U] )Z&f'd;D3_XA=wVhlADqg^G"i`HeP9Y]X꣚༃2Z/`#!ih@G{=x1;~ù [ 1097.739016][T30559] [U] B#LyQ>D [ 1097.809412][T30559] [U] **1G83kˉ뵃+U_R,CV$&I4C{$)>YL#fuP*n r [ 1097.838591][T30559] [U] +2u.m [ 1097.846126][T30559] [U] 0j!sv[};ٵ,fL8lf [ 1097.866065][T30559] [U] u9aLUTR[4Â3gm ůf3% TR]3j̀ Dt>ǽ [ 1100.100175][T30637] FAULT_INJECTION: forcing a failure. [ 1100.100175][T30637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1100.129311][T30637] CPU: 0 UID: 0 PID: 30637 Comm: syz.4.9122 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1100.141604][T30637] Tainted: [U]=USER [ 1100.145426][T30637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1100.155500][T30637] Call Trace: [ 1100.158797][T30637] [ 1100.161746][T30637] dump_stack_lvl+0x16c/0x1f0 [ 1100.166463][T30637] should_fail_ex+0x497/0x5b0 [ 1100.171178][T30637] _copy_to_user+0x32/0xd0 [ 1100.175637][T30637] simple_read_from_buffer+0xd0/0x160 [ 1100.181043][T30637] proc_fail_nth_read+0x198/0x270 [ 1100.186106][T30637] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1100.191695][T30637] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1100.197273][T30637] vfs_read+0x1df/0xbe0 [ 1100.201456][T30637] ? __fget_files+0x1fc/0x3a0 [ 1100.206165][T30637] ? __pfx___mutex_lock+0x10/0x10 [ 1100.211227][T30637] ? __pfx_vfs_read+0x10/0x10 [ 1100.215942][T30637] ? __fget_files+0x206/0x3a0 [ 1100.220663][T30637] ksys_read+0x12b/0x250 [ 1100.224933][T30637] ? __pfx_ksys_read+0x10/0x10 [ 1100.229734][T30637] do_syscall_64+0xcd/0x250 [ 1100.234278][T30637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.240200][T30637] RIP: 0033:0x7f280158473c [ 1100.244634][T30637] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1100.264267][T30637] RSP: 002b:00007f2802473030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1100.272712][T30637] RAX: ffffffffffffffda RBX: 00007f2801775fa0 RCX: 00007f280158473c [ 1100.280703][T30637] RDX: 000000000000000f RSI: 00007f28024730a0 RDI: 0000000000000003 [ 1100.288694][T30637] RBP: 00007f2802473090 R08: 0000000000000000 R09: 0000000000000000 [ 1100.296685][T30637] R10: 4000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 1100.304672][T30637] R13: 0000000000000000 R14: 00007f2801775fa0 R15: 00007ffe69559768 [ 1100.312684][T30637] [ 1100.315832][ C0] vkms_vblank_simulate: vblank timer overrun [ 1101.782473][T30677] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1102.190828][T30695] FAULT_INJECTION: forcing a failure. [ 1102.190828][T30695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1102.221274][T30695] CPU: 0 UID: 0 PID: 30695 Comm: syz.7.9139 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1102.233573][T30695] Tainted: [U]=USER [ 1102.237387][T30695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1102.247459][T30695] Call Trace: [ 1102.250755][T30695] [ 1102.253705][T30695] dump_stack_lvl+0x16c/0x1f0 [ 1102.258415][T30695] should_fail_ex+0x497/0x5b0 [ 1102.263126][T30695] _copy_from_user+0x2e/0xd0 [ 1102.267752][T30695] load_msg+0x1a1/0x470 [ 1102.271944][T30695] do_mq_timedsend+0x3ce/0xc30 [ 1102.276750][T30695] ? __pfx_do_mq_timedsend+0x10/0x10 [ 1102.282083][T30695] ? __fget_files+0x206/0x3a0 [ 1102.286799][T30695] __x64_sys_mq_timedsend+0x1b3/0x240 [ 1102.292212][T30695] ? __pfx___x64_sys_mq_timedsend+0x10/0x10 [ 1102.298157][T30695] do_syscall_64+0xcd/0x250 [ 1102.302698][T30695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.308623][T30695] RIP: 0033:0x7f78a8f85d29 [ 1102.313065][T30695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1102.332696][T30695] RSP: 002b:00007f78a9d4e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 1102.341133][T30695] RAX: ffffffffffffffda RBX: 00007f78a9176080 RCX: 00007f78a8f85d29 [ 1102.349125][T30695] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000008 [ 1102.357116][T30695] RBP: 00007f78a9d4e090 R08: 0000000000000000 R09: 0000000000000000 [ 1102.365113][T30695] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 1102.373102][T30695] R13: 0000000000000001 R14: 00007f78a9176080 R15: 00007fff8bc36088 [ 1102.381108][T30695] [ 1103.425934][T30718] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1107.081976][T30796] FAULT_INJECTION: forcing a failure. [ 1107.081976][T30796] name failslab, interval 1, probability 0, space 0, times 0 [ 1107.101541][T30796] CPU: 1 UID: 0 PID: 30796 Comm: syz.8.9166 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1107.113830][T30796] Tainted: [U]=USER [ 1107.117646][T30796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1107.127722][T30796] Call Trace: [ 1107.131018][T30796] [ 1107.133973][T30796] dump_stack_lvl+0x16c/0x1f0 [ 1107.138688][T30796] should_fail_ex+0x497/0x5b0 [ 1107.143402][T30796] ? fs_reclaim_acquire+0xae/0x150 [ 1107.148550][T30796] should_failslab+0xc2/0x120 [ 1107.153264][T30796] __kmalloc_cache_noprof+0x68/0x420 [ 1107.158593][T30796] trace_pid_list_alloc+0x1b0/0x3f0 [ 1107.163836][T30796] trace_pid_write+0x10f/0x470 [ 1107.168633][T30796] ? __pfx_trace_pid_write+0x10/0x10 [ 1107.173947][T30796] ? __pfx___mutex_lock+0x10/0x10 [ 1107.179029][T30796] event_pid_write.isra.0+0x3c5/0x7d0 [ 1107.184442][T30796] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 1107.190387][T30796] ? __pfx_ftrace_event_pid_write+0x10/0x10 [ 1107.196319][T30796] vfs_write+0x24c/0x1150 [ 1107.200685][T30796] ? __fget_files+0x1fc/0x3a0 [ 1107.205396][T30796] ? __pfx___mutex_lock+0x10/0x10 [ 1107.210453][T30796] ? __pfx_vfs_write+0x10/0x10 [ 1107.215257][T30796] ? __fget_files+0x206/0x3a0 [ 1107.219977][T30796] ksys_write+0x12b/0x250 [ 1107.224336][T30796] ? __pfx_ksys_write+0x10/0x10 [ 1107.229224][T30796] do_syscall_64+0xcd/0x250 [ 1107.233768][T30796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.239705][T30796] RIP: 0033:0x7f3f58f85d29 [ 1107.244150][T30796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1107.263796][T30796] RSP: 002b:00007f3f59e4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1107.272242][T30796] RAX: ffffffffffffffda RBX: 00007f3f59175fa0 RCX: 00007f3f58f85d29 [ 1107.280239][T30796] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000004 [ 1107.288235][T30796] RBP: 00007f3f59e4c090 R08: 0000000000000000 R09: 0000000000000000 [ 1107.296227][T30796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1107.304218][T30796] R13: 0000000000000000 R14: 00007f3f59175fa0 R15: 00007ffd88abccb8 [ 1107.312230][T30796] [ 1109.192250][T30835] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1109.475824][T30835] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9173'. [ 1109.513747][T30835] team_slave_0: entered allmulticast mode [ 1109.672904][T30846] blktrace: Concurrent blktraces are not allowed on sda1 [ 1111.531707][T30886] blktrace: Concurrent blktraces are not allowed on sda1 [ 1112.410881][T30922] bridge0: port 3(team0) entered blocking state [ 1112.446272][T30922] bridge0: port 3(team0) entered disabled state [ 1112.462760][T30922] team0: entered allmulticast mode [ 1112.470078][T30922] team_slave_1: entered allmulticast mode [ 1112.489229][T30922] team0: entered promiscuous mode [ 1112.516301][T30922] team_slave_0: entered promiscuous mode [ 1112.531003][T30922] team_slave_1: entered promiscuous mode [ 1112.955773][T30940] blktrace: Concurrent blktraces are not allowed on sda1 [ 1115.147634][T30984] FAULT_INJECTION: forcing a failure. [ 1115.147634][T30984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1115.185046][T30984] CPU: 0 UID: 0 PID: 30984 Comm: syz.7.9214 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1115.197339][T30984] Tainted: [U]=USER [ 1115.201156][T30984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1115.211232][T30984] Call Trace: [ 1115.214528][T30984] [ 1115.217482][T30984] dump_stack_lvl+0x16c/0x1f0 [ 1115.222197][T30984] should_fail_ex+0x497/0x5b0 [ 1115.226911][T30984] _copy_from_iter+0x29b/0x1400 [ 1115.231800][T30984] ? trace_lock_acquire+0x14e/0x1f0 [ 1115.237029][T30984] ? skb_put+0x138/0x1b0 [ 1115.241302][T30984] ? __pfx__copy_from_iter+0x10/0x10 [ 1115.246619][T30984] ? __virt_addr_valid+0x1a4/0x590 [ 1115.251769][T30984] ? __virt_addr_valid+0x5e/0x590 [ 1115.256825][T30984] ? __phys_addr_symbol+0x30/0x80 [ 1115.261881][T30984] ? __check_object_size+0x488/0x710 [ 1115.267207][T30984] sctp_user_addto_chunk+0x87/0x230 [ 1115.272442][T30984] sctp_datamsg_from_user+0x5b3/0x1320 [ 1115.277957][T30984] sctp_sendmsg_to_asoc+0xafd/0x1ad0 [ 1115.283275][T30984] ? print_usage_bug.part.0+0x500/0x560 [ 1115.288869][T30984] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1115.294618][T30984] ? sctp_sendmsg+0x575/0x1f10 [ 1115.299426][T30984] ? mark_held_locks+0x9f/0xe0 [ 1115.304230][T30984] ? sctp_sendmsg_check_sflags+0x176/0x320 [ 1115.310077][T30984] sctp_sendmsg+0x129c/0x1f10 [ 1115.314798][T30984] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1115.319862][T30984] ? __pfx___might_resched+0x10/0x10 [ 1115.325185][T30984] ? __pfx_aa_sk_perm+0x10/0x10 [ 1115.330080][T30984] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1115.335138][T30984] inet_sendmsg+0x119/0x140 [ 1115.339667][T30984] ____sys_sendmsg+0x907/0xb40 [ 1115.344460][T30984] ? copy_msghdr_from_user+0x10b/0x160 [ 1115.349958][T30984] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1115.355269][T30984] ? __lock_acquire+0xcc5/0x3c40 [ 1115.360245][T30984] ___sys_sendmsg+0x135/0x1e0 [ 1115.364961][T30984] ? __pfx____sys_sendmsg+0x10/0x10 [ 1115.370210][T30984] ? trace_lock_acquire+0x14e/0x1f0 [ 1115.375462][T30984] __sys_sendmmsg+0x201/0x420 [ 1115.380181][T30984] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1115.385427][T30984] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1115.391458][T30984] ? fput+0x67/0x440 [ 1115.395383][T30984] ? ksys_write+0x1ba/0x250 [ 1115.399911][T30984] ? __pfx_ksys_write+0x10/0x10 [ 1115.404795][T30984] __x64_sys_sendmmsg+0x9c/0x100 [ 1115.409760][T30984] ? lockdep_hardirqs_on+0x7c/0x110 [ 1115.414956][T30984] do_syscall_64+0xcd/0x250 [ 1115.419458][T30984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.425368][T30984] RIP: 0033:0x7f78a8f85d29 [ 1115.429787][T30984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1115.449418][T30984] RSP: 002b:00007f78a9d4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1115.457858][T30984] RAX: ffffffffffffffda RBX: 00007f78a9176080 RCX: 00007f78a8f85d29 [ 1115.465856][T30984] RDX: 0000000000000006 RSI: 0000000020000080 RDI: 0000000000000003 [ 1115.473851][T30984] RBP: 00007f78a9d4e090 R08: 0000000000000000 R09: 0000000000000000 [ 1115.481850][T30984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1115.489843][T30984] R13: 0000000000000001 R14: 00007f78a9176080 R15: 00007fff8bc36088 [ 1115.497853][T30984] [ 1116.404563][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.411006][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.599289][T30993] sg_write: data in/out 32596/1048664 bytes for SCSI command 0x0-- guessing data in; [ 1116.599289][T30993] program syz.7.9217 not setting count and/or reply_len properly [ 1117.582147][T31027] FAULT_INJECTION: forcing a failure. [ 1117.582147][T31027] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.604658][T31027] CPU: 1 UID: 0 PID: 31027 Comm: syz.8.9226 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1117.616952][T31027] Tainted: [U]=USER [ 1117.620775][T31027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1117.630849][T31027] Call Trace: [ 1117.634143][T31027] [ 1117.637090][T31027] dump_stack_lvl+0x16c/0x1f0 [ 1117.641812][T31027] should_fail_ex+0x497/0x5b0 [ 1117.646523][T31027] ? fs_reclaim_acquire+0xae/0x150 [ 1117.651675][T31027] should_failslab+0xc2/0x120 [ 1117.656391][T31027] __kmalloc_cache_noprof+0x68/0x420 [ 1117.661719][T31027] trace_pid_list_alloc+0x1b0/0x3f0 [ 1117.666958][T31027] trace_pid_write+0x10f/0x470 [ 1117.671757][T31027] ? __pfx_trace_pid_write+0x10/0x10 [ 1117.677071][T31027] ? __pfx___mutex_lock+0x10/0x10 [ 1117.682152][T31027] event_pid_write.isra.0+0x3c5/0x7d0 [ 1117.687566][T31027] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 1117.693511][T31027] ? __pfx_ftrace_event_pid_write+0x10/0x10 [ 1117.699437][T31027] vfs_write+0x24c/0x1150 [ 1117.703798][T31027] ? __fget_files+0x1fc/0x3a0 [ 1117.708507][T31027] ? __pfx___mutex_lock+0x10/0x10 [ 1117.713567][T31027] ? __pfx_vfs_write+0x10/0x10 [ 1117.718374][T31027] ? __fget_files+0x206/0x3a0 [ 1117.723094][T31027] ksys_write+0x12b/0x250 [ 1117.727452][T31027] ? __pfx_ksys_write+0x10/0x10 [ 1117.732344][T31027] do_syscall_64+0xcd/0x250 [ 1117.736879][T31027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.742803][T31027] RIP: 0033:0x7f3f58f85d29 [ 1117.747241][T31027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1117.766878][T31027] RSP: 002b:00007f3f59e4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1117.775321][T31027] RAX: ffffffffffffffda RBX: 00007f3f59175fa0 RCX: 00007f3f58f85d29 [ 1117.783314][T31027] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000004 [ 1117.791309][T31027] RBP: 00007f3f59e4c090 R08: 0000000000000000 R09: 0000000000000000 [ 1117.799298][T31027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1117.807290][T31027] R13: 0000000000000000 R14: 00007f3f59175fa0 R15: 00007ffd88abccb8 [ 1117.815302][T31027] [ 1118.249371][T30998] sg_write: data in/out 1362788955/16080 bytes for SCSI command 0xb8-- guessing data in; [ 1118.249371][T30998] program syz.7.9217 not setting count and/or reply_len properly [ 1118.253072][T31049] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1118.465310][T31048] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9231'. [ 1118.544359][T31051] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1118.722368][T31051] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9232'. [ 1118.861659][T31051] team_slave_0: entered allmulticast mode [ 1120.201773][T31096] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1120.303830][T31099] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9244'. [ 1120.522406][T31103] FAULT_INJECTION: forcing a failure. [ 1120.522406][T31103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1120.562926][T31103] CPU: 0 UID: 0 PID: 31103 Comm: syz.8.9246 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1120.575238][T31103] Tainted: [U]=USER [ 1120.579055][T31103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1120.589136][T31103] Call Trace: [ 1120.592435][T31103] [ 1120.595384][T31103] dump_stack_lvl+0x16c/0x1f0 [ 1120.600092][T31103] should_fail_ex+0x497/0x5b0 [ 1120.604805][T31103] _copy_to_user+0x32/0xd0 [ 1120.609259][T31103] simple_read_from_buffer+0xd0/0x160 [ 1120.614710][T31103] proc_fail_nth_read+0x198/0x270 [ 1120.619771][T31103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1120.625364][T31103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1120.630943][T31103] vfs_read+0x1df/0xbe0 [ 1120.635132][T31103] ? __fget_files+0x1fc/0x3a0 [ 1120.639845][T31103] ? __pfx___mutex_lock+0x10/0x10 [ 1120.644906][T31103] ? __pfx_vfs_read+0x10/0x10 [ 1120.649630][T31103] ? __fget_files+0x206/0x3a0 [ 1120.654359][T31103] ksys_read+0x12b/0x250 [ 1120.658636][T31103] ? __pfx_ksys_read+0x10/0x10 [ 1120.663443][T31103] do_syscall_64+0xcd/0x250 [ 1120.667983][T31103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.673910][T31103] RIP: 0033:0x7f3f58f8473c [ 1120.678344][T31103] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1120.698160][T31103] RSP: 002b:00007f3f59e4c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1120.706607][T31103] RAX: ffffffffffffffda RBX: 00007f3f59175fa0 RCX: 00007f3f58f8473c [ 1120.714603][T31103] RDX: 000000000000000f RSI: 00007f3f59e4c0a0 RDI: 0000000000000003 [ 1120.722596][T31103] RBP: 00007f3f59e4c090 R08: 0000000000000000 R09: 0000000000000000 [ 1120.730594][T31103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1120.738595][T31103] R13: 0000000000000001 R14: 00007f3f59175fa0 R15: 00007ffd88abccb8 [ 1120.746613][T31103] [ 1121.941946][T31128] [ 1121.944301][T31128] ====================================================== [ 1121.951298][T31128] WARNING: possible circular locking dependency detected [ 1121.958312][T31128] 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 Tainted: G U [ 1121.966903][T31128] ------------------------------------------------------ [ 1121.973921][T31128] syz.7.9254/31128 is trying to acquire lock: [ 1121.979992][T31128] ffff888143780fa0 (&q->sysfs_lock){+.+.}-{4:4}, at: queue_attr_store+0xe2/0x170 [ 1121.989164][T31128] [ 1121.989164][T31128] but task is already holding lock: [ 1121.996525][T31128] ffff888143780a70 (&q->q_usage_counter(io)#4){++++}-{0:0}, at: queue_attr_store+0xd8/0x170 [ 1122.006658][T31128] [ 1122.006658][T31128] which lock already depends on the new lock. [ 1122.006658][T31128] [ 1122.011620][T31131] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1122.017047][T31128] [ 1122.017047][T31128] the existing dependency chain (in reverse order) is: [ 1122.017057][T31128] [ 1122.017057][T31128] -> #4 (&q->q_usage_counter(io)#4){++++}-{0:0}: [ 1122.017096][T31128] __submit_bio+0x49c/0x540 [ 1122.017129][T31128] submit_bio_noacct_nocheck+0x892/0xd70 [ 1122.017161][T31128] submit_bio_noacct+0x93a/0x1e20 [ 1122.017192][T31128] mpage_readahead+0x41d/0x590 [ 1122.017221][T31128] read_pages+0x1a8/0xdc0 [ 1122.017251][T31128] page_cache_ra_unbounded+0x3dc/0x750 [ 1122.017276][T31128] page_cache_ra_order+0x8f2/0xc80 [ 1122.017299][T31128] page_cache_sync_ra+0x4b4/0x9c0 [ 1122.017322][T31128] filemap_get_pages+0xd7b/0x1be0 [ 1122.017350][T31128] filemap_splice_read+0x5cc/0xd00 [ 1122.017379][T31128] do_splice_read+0x282/0x370 [ 1122.017400][T31128] splice_file_to_pipe+0x109/0x120 [ 1122.017423][T31128] do_sendfile+0x3fd/0xe30 [ 1122.017446][T31128] __x64_sys_sendfile64+0x1da/0x220 [ 1122.017475][T31128] do_syscall_64+0xcd/0x250 [ 1122.017504][T31128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.129606][T31128] [ 1122.129606][T31128] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 1122.138131][T31128] down_read+0x9a/0x330 [ 1122.142814][T31128] filemap_fault+0x2e0/0x2820 [ 1122.148012][T31128] __do_fault+0x10a/0x490 [ 1122.152860][T31128] do_pte_missing+0xebd/0x3e00 [ 1122.158144][T31128] __handle_mm_fault+0x103c/0x2a40 [ 1122.163776][T31128] handle_mm_fault+0x3fa/0xaa0 [ 1122.169057][T31128] __get_user_pages+0x8d9/0x3b50 [ 1122.174517][T31128] __gup_longterm_locked+0x211/0x1870 [ 1122.180409][T31128] gup_fast_fallback+0x1802/0x2690 [ 1122.186038][T31128] pin_user_pages_fast+0xa8/0x100 [ 1122.191582][T31128] iov_iter_extract_pages+0x3a5/0x2010 [ 1122.197563][T31128] bio_iov_iter_get_pages+0x37c/0x1100 [ 1122.203544][T31128] blkdev_direct_IO+0x1054/0x1ad0 [ 1122.209083][T31128] blkdev_write_iter+0x6f9/0xd40 [ 1122.214533][T31128] vfs_write+0x5ae/0x1150 [ 1122.219380][T31128] ksys_write+0x12b/0x250 [ 1122.224229][T31128] do_syscall_64+0xcd/0x250 [ 1122.229253][T31128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.235666][T31128] [ 1122.235666][T31128] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 1122.243223][T31128] __might_fault+0x11b/0x190 [ 1122.248336][T31128] _copy_from_user+0x29/0xd0 [ 1122.253447][T31128] __blk_trace_setup+0xa8/0x180 [ 1122.258818][T31128] blk_trace_ioctl+0x163/0x290 [ 1122.264104][T31128] blkdev_ioctl+0x106/0x670 [ 1122.269126][T31128] __x64_sys_ioctl+0x190/0x200 [ 1122.274404][T31128] do_syscall_64+0xcd/0x250 [ 1122.279425][T31128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.285846][T31128] [ 1122.285846][T31128] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 1122.293660][T31128] __mutex_lock+0x19b/0xa60 [ 1122.298682][T31128] blk_register_queue+0x13c/0x4f0 [ 1122.304228][T31128] add_disk_fwnode+0x785/0x1300 [ 1122.309593][T31128] brd_alloc.isra.0+0x50a/0x7c0 [ 1122.315052][T31128] brd_init+0x12b/0x1d0 [ 1122.319722][T31128] do_one_initcall+0x128/0x630 [ 1122.325008][T31128] kernel_init_freeable+0x58f/0x8b0 [ 1122.330730][T31128] kernel_init+0x1c/0x2b0 [ 1122.335584][T31128] ret_from_fork+0x45/0x80 [ 1122.340518][T31128] ret_from_fork_asm+0x1a/0x30 [ 1122.345805][T31128] [ 1122.345805][T31128] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 1122.353361][T31128] __lock_acquire+0x249e/0x3c40 [ 1122.358729][T31128] lock_acquire.part.0+0x11b/0x380 [ 1122.364354][T31128] __mutex_lock+0x19b/0xa60 [ 1122.369376][T31128] queue_attr_store+0xe2/0x170 [ 1122.374658][T31128] sysfs_kf_write+0x117/0x170 [ 1122.379861][T31128] kernfs_fop_write_iter+0x33d/0x500 [ 1122.385665][T31128] iter_file_splice_write+0x90f/0x10b0 [ 1122.391644][T31128] direct_splice_actor+0x18f/0x6c0 [ 1122.397272][T31128] splice_direct_to_actor+0x346/0xa40 [ 1122.403158][T31128] do_splice_direct+0x178/0x250 [ 1122.408528][T31128] do_sendfile+0xaed/0xe30 [ 1122.413460][T31128] __x64_sys_sendfile64+0x1da/0x220 [ 1122.419177][T31128] do_syscall_64+0xcd/0x250 [ 1122.424213][T31128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.430630][T31128] [ 1122.430630][T31128] other info that might help us debug this: [ 1122.430630][T31128] [ 1122.440853][T31128] Chain exists of: [ 1122.440853][T31128] &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#4 [ 1122.440853][T31128] [ 1122.455552][T31128] Possible unsafe locking scenario: [ 1122.455552][T31128] [ 1122.462992][T31128] CPU0 CPU1 [ 1122.468342][T31128] ---- ---- [ 1122.473691][T31128] lock(&q->q_usage_counter(io)#4); [ 1122.478977][T31128] lock(mapping.invalidate_lock#2); [ 1122.486782][T31128] lock(&q->q_usage_counter(io)#4); [ 1122.494588][T31128] lock(&q->sysfs_lock); [ 1122.498912][T31128] [ 1122.498912][T31128] *** DEADLOCK *** [ 1122.498912][T31128] [ 1122.507040][T31128] 5 locks held by syz.7.9254/31128: [ 1122.512227][T31128] #0: ffff888030278420 (sb_writers#8){.+.+}-{0:0}, at: splice_direct_to_actor+0x346/0xa40 [ 1122.522245][T31128] #1: ffff88807603a488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 1122.532000][T31128] #2: ffff88802494c968 (kn->active#169){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 1122.542111][T31128] #3: ffff888143780a70 (&q->q_usage_counter(io)#4){++++}-{0:0}, at: queue_attr_store+0xd8/0x170 [ 1122.552654][T31128] #4: ffff888143780aa8 (&q->q_usage_counter(queue)#55){+.+.}-{0:0}, at: queue_attr_store+0xd8/0x170 [ 1122.563545][T31128] [ 1122.563545][T31128] stack backtrace: [ 1122.569427][T31128] CPU: 1 UID: 0 PID: 31128 Comm: syz.7.9254 Tainted: G U 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1122.581663][T31128] Tainted: [U]=USER [ 1122.585454][T31128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1122.595500][T31128] Call Trace: [ 1122.598784][T31128] [ 1122.601715][T31128] dump_stack_lvl+0x116/0x1f0 [ 1122.606395][T31128] print_circular_bug+0x41c/0x610 [ 1122.611439][T31128] check_noncircular+0x31a/0x400 [ 1122.616382][T31128] ? __pfx_check_noncircular+0x10/0x10 [ 1122.621849][T31128] ? save_trace+0x42/0xa10 [ 1122.626267][T31128] ? add_lock_to_list+0x17d/0x390 [ 1122.631303][T31128] __lock_acquire+0x249e/0x3c40 [ 1122.636159][T31128] ? __pfx___lock_acquire+0x10/0x10 [ 1122.641362][T31128] ? __pfx___lock_acquire+0x10/0x10 [ 1122.646565][T31128] lock_acquire.part.0+0x11b/0x380 [ 1122.651673][T31128] ? queue_attr_store+0xe2/0x170 [ 1122.656608][T31128] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1122.662238][T31128] ? rcu_is_watching+0x12/0xc0 [ 1122.667003][T31128] ? trace_lock_acquire+0x14e/0x1f0 [ 1122.672209][T31128] ? find_held_lock+0x2d/0x110 [ 1122.676970][T31128] ? queue_attr_store+0xe2/0x170 [ 1122.681911][T31128] ? lock_acquire+0x2f/0xb0 [ 1122.686412][T31128] ? queue_attr_store+0xe2/0x170 [ 1122.691348][T31128] __mutex_lock+0x19b/0xa60 [ 1122.695864][T31128] ? queue_attr_store+0xe2/0x170 [ 1122.700802][T31128] ? mark_held_locks+0x9f/0xe0 [ 1122.705568][T31128] ? queue_attr_store+0xe2/0x170 [ 1122.710506][T31128] ? __pfx___mutex_lock+0x10/0x10 [ 1122.715532][T31128] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1122.721335][T31128] ? blk_mq_freeze_queue_wait+0xaf/0x190 [ 1122.726972][T31128] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1122.733046][T31128] ? queue_attr_store+0xd8/0x170 [ 1122.737984][T31128] ? queue_attr_store+0xe2/0x170 [ 1122.742920][T31128] queue_attr_store+0xe2/0x170 [ 1122.747680][T31128] ? __pfx_queue_attr_store+0x10/0x10 [ 1122.753052][T31128] sysfs_kf_write+0x117/0x170 [ 1122.757731][T31128] kernfs_fop_write_iter+0x33d/0x500 [ 1122.763020][T31128] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1122.768225][T31128] iter_file_splice_write+0x90f/0x10b0 [ 1122.773685][T31128] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1122.779580][T31128] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1122.785209][T31128] ? splice_direct_to_actor+0x346/0xa40 [ 1122.790752][T31128] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1122.796642][T31128] direct_splice_actor+0x18f/0x6c0 [ 1122.801754][T31128] splice_direct_to_actor+0x346/0xa40 [ 1122.807122][T31128] ? __pfx_direct_splice_actor+0x10/0x10 [ 1122.812758][T31128] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1122.818649][T31128] ? __fget_files+0x1fc/0x3a0 [ 1122.823324][T31128] do_splice_direct+0x178/0x250 [ 1122.828173][T31128] ? __pfx_do_splice_direct+0x10/0x10 [ 1122.833539][T31128] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1122.839432][T31128] do_sendfile+0xaed/0xe30 [ 1122.843849][T31128] ? __pfx_do_sendfile+0x10/0x10 [ 1122.848785][T31128] ? __sys_sendmsg+0x19a/0x220 [ 1122.853555][T31128] ? __x64_sys_futex+0x1e1/0x4c0 [ 1122.858498][T31128] ? __x64_sys_futex+0x1ea/0x4c0 [ 1122.863439][T31128] __x64_sys_sendfile64+0x1da/0x220 [ 1122.868641][T31128] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1122.874365][T31128] do_syscall_64+0xcd/0x250 [ 1122.878871][T31128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.884767][T31128] RIP: 0033:0x7f78a8f85d29 [ 1122.889180][T31128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1122.908781][T31128] RSP: 002b:00007f78a9d4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1122.917188][T31128] RAX: ffffffffffffffda RBX: 00007f78a9176080 RCX: 00007f78a8f85d29 [ 1122.925158][T31128] RDX: 0000000000000000 RSI: 000000000000001d RDI: 000000000000001d [ 1122.933120][T31128] RBP: 00007f78a9001b08 R08: 0000000000000000 R09: 0000000000000000 [ 1122.941084][T31128] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 1122.949048][T31128] R13: 0000000000000000 R14: 00007f78a9176080 R15: 00007fff8bc36088 [ 1122.957020][T31128]