last executing test programs: 1m5.992701326s ago: executing program 2 (id=1336): sched_setattr$auto(0x0, &(0x7f0000000740)={0x1, 0x7, 0x1, 0x7, 0x0, 0x7fffffff, 0x1, 0x7, 0x7, 0x9}, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getpgrp(0xffffffffffffffff) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:<\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8\x06\xa5\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95RUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3O\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde0x0}) (rerun: 64) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r8, r7, 0x4, 0x401, r6, @relative_id=0x13, 0xe600}, 0xf) (async, rerun: 32) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r4, 0x0, 0x3}, 0x4c) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) fsconfig$auto(0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x4}, 0xc) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) 47.4602719s ago: executing program 1 (id=1412): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x2404c084) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x3, 0xff) open(&(0x7f0000000100)='./file0\x00', 0x201c2, 0x10e) socket(0x15, 0x5, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = open(0x0, 0x163340, 0x6a) socket(0xa, 0x2, 0x88) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto_split_huge_pages_fops_huge_memory(r0, &(0x7f0000000200)="470a88ce218bbd3347c4e7199483e2ca94b3e8580ac0383ef4445e393977bd07518a3f47d3f4fc725d8d4c0db8f644f6ff0eee09e7034fae4d130e27d32c63e417eabd80ce171b0c3ec6c5d1d267a17be3f8684a8849dc2e49b671e75ad2d7b21aa7fed00665f28aa3d9ff180abf78f29e9a395e39d4d40ee3434336af6c4b560f8431a7ceb9adc9df3d9ad7c3f4705c3b43b651b23eb7e4664641a71e28304d075e80c9f5976243e346a4052724a8ed525033803d6e9d6896e15749f90fc77a2ee640ebf07e9df5cd60f895ee04f7bb7714d297983618aca83dc7fae77217b03f974a9afb546c73", 0xe8) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) 45.539888888s ago: executing program 1 (id=1419): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f00000022c0), 0x2602, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0xc2, 0x84) clone$auto(0x1, 0x3, 0x0, 0x0, 0x3) io_uring_setup$auto(0x4bf15e08, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x34, 0x0, 0x120, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}, @NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x6}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, 0x0, 0x800) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x0, @rand_addr=0x2}, 0x52) shutdown$auto(0x200000003, 0x2) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x4aa301, 0x0) close$auto(r1) r2 = socket(0x1e, 0x1, 0x0) bind$auto(r2, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x2, {{0x3f}, 0xffffffff}}, 0x66) ioctl$auto_TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 41.508296072s ago: executing program 1 (id=1429): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), r0) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x1c, r1, 0xb11, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1000) 40.566883753s ago: executing program 1 (id=1432): mmap$auto(0x2, 0x2020009, 0x6, 0x80000eb1, 0xfffffffffffffffa, 0x8000) msgsnd$auto(0x8, 0x0, 0x3, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x183800, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) r0 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$auto(r0, 0x0, 0x45c) close_range$auto(0x2, 0xffffffffffffffff, 0x7fff) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/scsi/device_info\x00', 0x8002, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x6, 0x0) mmap$auto(0xc, 0x4, 0x8000000ffb, 0x800000000801d, 0x3, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x3) io_uring_enter$auto(0x3, 0x5, 0x82400004, 0xe, 0x0, 0xd) mlock$auto(0xfbe8, 0x4) r1 = open$auto(0x0, 0x0, 0xff93) ioctl$auto_PPPIOCGFLAGS(r1, 0x8004745a, 0x0) bpf$auto(0x7ff, &(0x7f0000000100)=@task_fd_query={0xffffffffffffffff, 0x4, 0x8201, 0x1, 0x8, 0xc, 0xe3, 0x4000100001, 0x2000000003}, 0xade) 34.770852871s ago: executing program 1 (id=1451): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) (async, rerun: 64) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async, rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async) r1 = fsopen$auto(&(0x7f0000000000)='nlctrl\x00', 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async, rerun: 32) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), r0) (rerun: 32) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x220, r2, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x7f}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0xde, 0x125, "302217e64b3022b29f862bbc6c76d60b383054df5064c0f2159577c46332acd3f59bcd8f107cd1489150fc1a9b0b1dc7312d759782cf0e57f5c745f36a144ce71aef7265576e5b3d9d6a6f871ce64ba9efd9ed2329c8af58371b185d330f0fa75afe73b6373c819f44b3eac1208883bdc37934867a4a94a0e2a81522b95239a3ccdf4ca610eca1f78d5e5c2ca7cdbc0d79cff6caac5e775647e053935ff33135003363def67668725a1c64e8343ff642b4caf4c1d40e2929d34e5258bac4291186cff86643b1572fb9e43e33db2f08b699392ac111fb289c2f13"}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x9}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_S1G_CAPABILITY_MASK={0x102, 0x129, "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"}, @NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0x7}]}, 0x220}, 0x1, 0x0, 0x0, 0x60000011}, 0x2275450a4dd331ed) (async) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) (async, rerun: 32) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) (rerun: 32) madvise$auto(0x6, 0x1, 0xb) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x14, r3, 0x301, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c810}, 0x20000041) (async) r4 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/aql_pending\x00', 0x40000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r4, 0x0, 0x0) r5 = bpf$auto(0xfffff001, &(0x7f0000000000)=@bpf_attr_3={0xa332, 0x2, 0x7, 0x3, 0xfffffbff, 0x2, 0x1, 0x4, 0x7, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x8, 0x81, 0xb03, 0x0, 0x3ff, 0x7, @attach_prog_fd, 0x2, 0x630, 0x57d, 0x9, 0x8}, 0xa3) r6 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000140), r5) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x64, r6, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGE={0x4e, 0x2, 0x0, 0x1, [@generic="055ccda3c9796f5f8add8296fb24012bd6cf3edf6c874203d630d30a2b62858942bdd7fd2ac81f8b04e10dd08e119c26084ed037621f788d90d6a4f5b155c006cb88", @nested={0x8, 0xf8, 0x0, 0x1, [@nested={0x4, 0x107}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x60000000) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) (async, rerun: 32) r7 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) read$auto_uinput_fops_uinput(r7, &(0x7f0000001400)=""/4112, 0x1010) (async, rerun: 32) read$auto(0x4, 0x0, 0xfdef) (rerun: 32) 19.720977324s ago: executing program 33 (id=1451): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) (async, rerun: 64) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async, rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async) r1 = fsopen$auto(&(0x7f0000000000)='nlctrl\x00', 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async, rerun: 32) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), r0) (rerun: 32) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x220, r2, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x7f}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0xde, 0x125, "302217e64b3022b29f862bbc6c76d60b383054df5064c0f2159577c46332acd3f59bcd8f107cd1489150fc1a9b0b1dc7312d759782cf0e57f5c745f36a144ce71aef7265576e5b3d9d6a6f871ce64ba9efd9ed2329c8af58371b185d330f0fa75afe73b6373c819f44b3eac1208883bdc37934867a4a94a0e2a81522b95239a3ccdf4ca610eca1f78d5e5c2ca7cdbc0d79cff6caac5e775647e053935ff33135003363def67668725a1c64e8343ff642b4caf4c1d40e2929d34e5258bac4291186cff86643b1572fb9e43e33db2f08b699392ac111fb289c2f13"}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x9}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_S1G_CAPABILITY_MASK={0x102, 0x129, "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"}, @NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0x7}]}, 0x220}, 0x1, 0x0, 0x0, 0x60000011}, 0x2275450a4dd331ed) (async) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) (async, rerun: 32) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) (rerun: 32) madvise$auto(0x6, 0x1, 0xb) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x14, r3, 0x301, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c810}, 0x20000041) (async) r4 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/aql_pending\x00', 0x40000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r4, 0x0, 0x0) r5 = bpf$auto(0xfffff001, &(0x7f0000000000)=@bpf_attr_3={0xa332, 0x2, 0x7, 0x3, 0xfffffbff, 0x2, 0x1, 0x4, 0x7, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x8, 0x81, 0xb03, 0x0, 0x3ff, 0x7, @attach_prog_fd, 0x2, 0x630, 0x57d, 0x9, 0x8}, 0xa3) r6 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000140), r5) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x64, r6, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGE={0x4e, 0x2, 0x0, 0x1, [@generic="055ccda3c9796f5f8add8296fb24012bd6cf3edf6c874203d630d30a2b62858942bdd7fd2ac81f8b04e10dd08e119c26084ed037621f788d90d6a4f5b155c006cb88", @nested={0x8, 0xf8, 0x0, 0x1, [@nested={0x4, 0x107}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x60000000) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) (async, rerun: 32) r7 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) read$auto_uinput_fops_uinput(r7, &(0x7f0000001400)=""/4112, 0x1010) (async, rerun: 32) read$auto(0x4, 0x0, 0xfdef) (rerun: 32) 4.160707995s ago: executing program 3 (id=1567): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/9/effective_affinity_list\x00', 0x100182, 0x0) r1 = socket(0x1d, 0xa, 0x5) mmap$auto(0xfffffffffffffffc, 0x400003, 0xde, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, r1, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x22, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) read$auto(0x3, 0x0, 0x80) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x5, &(0x7f00000002c0)={0x0, 0xa}, 0x1, 0x0, 0xe, 0xfffffff7}, 0x9}, 0x10002, 0x47) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) socket(0xc, 0x2, 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x8, 0xffffffffffffffff, 0x9b72, 0x2, 0x8000) get_mempolicy$auto(0x0, 0x0, 0x81, 0x8, 0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/9/smp_affinity\x00', 0x129542, 0x0) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) 4.150371185s ago: executing program 5 (id=1568): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) (fail_nth: 12) 3.674926804s ago: executing program 5 (id=1569): getsockopt$auto(0x3, 0x0, 0xe, 0x0, 0x0) socket(0x10, 0x2, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x3, 0x7214, 0x19) madvise$auto(0x0, 0x53, 0x9) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) 3.414140014s ago: executing program 4 (id=1571): r0 = socket(0x28, 0x5, 0x0) mmap$auto(0x8, 0x400008, 0x9, 0x9b7f, r0, 0x8001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x21, 0x0) fsopen$auto(0x0, 0x1) madvise$auto(0x0, 0x2003f0, 0x15) 3.066296754s ago: executing program 3 (id=1572): setrlimit$auto(0xb, 0x0) getpid() mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) gettid() (async) gettid() mmap$auto(0x401, 0x128009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x401, 0x128009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0xde, 0x0) mmap$auto(0x3, 0x2020009, 0xf3d5, 0x10eb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NFSD_CMD_VERSION_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48080}, 0x20000840) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x23, 0x80805, 0x0) socket(0xa, 0x801, 0x84) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) (async) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x84, 0x1d, 0x0, &(0x7f00000000c0)=0x10000) socket(0x10, 0x2, 0x9) socket(0x1c, 0x3, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) prctl$auto(0x1000000003b, 0x40000007a, 0x4, 0x6, 0x7) (async) prctl$auto(0x1000000003b, 0x40000007a, 0x4, 0x6, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) (async) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) mmap$auto(0x0, 0x200003, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async) mmap$auto(0x0, 0x200003, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) 2.976348482s ago: executing program 4 (id=1573): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x0, 0x0) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) move_mount$auto(0xc, 0x0, 0x400, 0x0, 0x356) exit$auto(0x6) timer_delete$auto(0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x20243, 0x0) shmdt$auto(0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr9/carrier_changes\x00', 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume\x00', 0x8100, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)={0x1c, r4, 0x99bc9625bdb7e757, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) r5 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x100403, 0x0) write$auto_evm_xattr_ops_evm_secfs(r5, &(0x7f00000000c0)='.', 0x1) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x100401, 0x0) write$auto_evm_xattr_ops_evm_secfs(r6, &(0x7f00000000c0)='.', 0x1) read$auto_long_retry_limit_ops_(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_COMEDI_CHANINFO(0xffffffffffffffff, 0x80306403, &(0x7f0000000100)={0x10001, &(0x7f0000000000)=0x2, &(0x7f0000000080)=0x8000, &(0x7f00000000c0)=0xe}) bind$auto(r1, &(0x7f0000000200)=@in={0x2, 0x4e23, @remote}, 0x88) 2.57672378s ago: executing program 5 (id=1576): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x2404c084) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x3, 0xff) open(&(0x7f0000000100)='./file0\x00', 0x201c2, 0x10e) socket(0x15, 0x5, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0xa, 0x2, 0x88) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) (fail_nth: 11) 2.386836546s ago: executing program 3 (id=1577): sched_setattr$auto(0x0, &(0x7f0000000740)={0x1, 0x7, 0x1, 0x7, 0x0, 0x7fffffff, 0x1, 0x7, 0x7, 0x9}, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getpgrp(0xffffffffffffffff) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:<\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8\x06\xa5\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95RUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3O\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde0xffffffffffffffff, 0x4, 0x4, 0x0, 0x5, 0x864, 0x6, 0x81, @attach_prog_fd, 0x8, 0x9, 0x4, 0x0, 0x6, 0xffffffffffffffff}, 0x201) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x200068b4) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3) (async) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x165801, 0x0) ioctl$auto_def_blk_fops_fs(r2, 0x125f, 0x0) setreuid$auto(0x0, 0x20000000004) unshare$auto(0x20000) (async) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) mmap$auto(0x9f, 0xffffffff, 0x100000001, 0xffffffffffffffff, r0, 0x6) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x3, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) setsockopt$auto(r1, 0xfffffff8, 0x3d, &(0x7f0000000000)='/dev/nullb0\x00', 0x1) 1.99730593s ago: executing program 4 (id=1581): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) bind$auto(0x3, 0xfffffffffffffffd, 0x0) mmap$auto(0x0, 0xe982, 0x2000000000df, 0xeb1, 0x401, 0x8000) sendto$auto(0x4, 0x0, 0xff, 0x6, 0x0, 0xe) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/modules\x00', 0x12002, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9000000) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) ioctl$auto_PPPIOCSMRU(r1, 0x4004743d, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.778907443s ago: executing program 0 (id=1582): socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x401, 0x0) lsm_set_self_attr$auto(0x3, 0xfffffffffffffffc, 0x9e1d, 0x8000000000000000) socketpair$auto(0xf, 0x7fff, 0x4, &(0x7f00000000c0)=0xe9) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd10\x00', 0x8001, 0x0) ioctl$auto_def_blk_fops_fs(r0, 0xab07, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/drivers\x00', 0x100, 0x0) setuid$auto(0x0) socketpair$auto(0x4, 0x1, 0x20000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x300) 1.52565093s ago: executing program 4 (id=1583): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0xb, 0x0) setrlimit$auto(0x4, &(0x7f0000000100)={0x9, 0x3}) timer_create$auto(0x3, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x30f603, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101142, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/task_delayacct\x00', 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x21a401, 0x0) socket(0x15, 0x5, 0x0) r0 = socket(0xb, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=r0, 0x4, @old_prog_fd=r0}, 0xa3) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/12/smp_affinity_list\x00', 0x8002, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xc18, 0x8000) r2 = socket(0x2, 0x1, 0x0) getsockopt$auto(r2, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e) socket(0x27, 0x5, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1b004d"], 0x1ac}, 0x1, 0x0, 0x0, 0x4048811}, 0x40000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) ioctl$auto(r3, 0xc0184d08, 0x7) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r4 = socket(0x10, 0x3, 0x6) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x50) shutdown$auto(0x200000003, 0x2) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)=""/104, 0x68) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 1.473059133s ago: executing program 0 (id=1584): openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, 0x0, 0x1, 0x0) setfsuid$auto(0xee00) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002580), 0xffffffffffffffff) r2 = socket(0x11, 0x3, 0x9) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000002640)={0x0, 0xf4, &(0x7f0000002600)={&(0x7f00000025c0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'veth0_virt_wifi\x00'}) 1.309103085s ago: executing program 3 (id=1585): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_NAPI_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd29, 0x25cfdbfe, {}, [@NETDEV_A_NAPI_ID={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x800) (fail_nth: 12) mlockall$auto(0xffd) 1.252158376s ago: executing program 5 (id=1586): bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x4008010) r0 = socket(0x11, 0x5, 0x4) getsockopt$auto(r0, 0x87, 0x11, 0x0, 0x0) close_range$auto(0x2, r0, 0x0) mincore$auto(0x1000, 0x8001, 0x0) poll$auto(&(0x7f0000000280)={0xffffffffffffffff, 0x8, 0x27}, 0x400, 0x2) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(0xffffffffffffffff, 0x0, 0x8090) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x58, 0xe, 0xe934) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x240400, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40800, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x502, 0x0) sysfs$auto(0x2, 0x4, 0x4) socket(0x2, 0x5, 0x0) r1 = gettid() setregid$auto(0xee00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'pimreg1\x00'}) prlimit64$auto(r1, 0x0, 0x0, 0x0) mincore$auto(0x1000, 0x8001, 0x0) r3 = io_uring_setup$auto(0x877, 0x0) io_uring_enter$auto(r3, 0xcd00, 0xcd00, 0x7, 0x0, 0xf7ffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xa, 0x0) 878.723945ms ago: executing program 5 (id=1587): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x500, 0x0) mmap$auto(0x9, 0x1, 0x4000000000e3, 0x15, r0, 0x4) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyprintk\x00', 0x8e81, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8201, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x21, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$auto_def_blk_fops_fs(r2, 0x2203, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x11, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1b0026bd7000fddbdf2503000000040008000c000380080018000400070012000100b39b28c10028a6b00485908286dd0000040002"], 0x40}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @multicast}, 0x6a) getpeername$auto(r5, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:00.0/devspec\x00', 0x101000, 0x0) read$auto(0x3, 0x0, 0x80) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) 773.217096ms ago: executing program 0 (id=1588): r0 = socket$nl_generic(0x11, 0x3, 0x10) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x800005411, 0x38) bind$auto(r0, &(0x7f0000000200)=@generic={0x11, "00030f00"}, 0x80) 700.57573ms ago: executing program 0 (id=1589): socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x401, 0x0) lsm_set_self_attr$auto(0x3, 0xfffffffffffffffc, 0x9e1d, 0x8000000000000000) socketpair$auto(0xf, 0x7fff, 0x4, &(0x7f00000000c0)=0xe9) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_autofs_root_operations_autofs_i(0xffffffffffffff9c, 0x0, 0x80800, 0x0) socket(0x2, 0x3, 0x6) adjtimex$auto(&(0x7f00000004c0)={0xf332b6b, 0x0, 0x7d, 0xfffffffffffffffd, 0xd4, 0x4, 0x4, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8, 0x81, 0xffffffffffff628e, 0xa747, 0x0, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) read$auto(0x3, 0x0, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00Lb\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf25040000000400018004000a8008000800", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x14) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd10\x00', 0x8001, 0x0) ioctl$auto_def_blk_fops_fs(r4, 0xab07, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x170, 0x1, 0x1, 0x12, r5, 0x40) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) 620.720298ms ago: executing program 4 (id=1590): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x2, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/usb/usbmon/32u\x00', 0x82000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x22340, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x8000000000000010, 0xfffffffffffffffd, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0xf0000, 0x0) socket(0xa, 0x801, 0x84) write$auto(0x3, 0x0, 0xffd8) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x8200, 0x1001, 0x8, 0x1000000f, 0x66b, 0x0, 0x5}, 0x6f4) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(0x0) writev$auto(0x5, &(0x7f0000000100)={0x0, 0x7}, 0x201) vmsplice$auto(0x4, &(0x7f0000000040)={0x0, 0x80000000002}, 0x3, 0x4) close_range$auto(0x2, 0x8, 0x0) epoll_create$auto(0x4) arch_prctl$auto(0x1024, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x22000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) write$auto(0x3, 0x0, 0xfdf3) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) openat$auto_generic(0xffffffffffffff9c, 0x0, 0xa0101, 0x0) 338.699232ms ago: executing program 3 (id=1591): r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r1 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0xc540, 0x0) close_range$auto(r0, r1, 0xffffffff) r2 = timerfd_create$auto(0x80, 0xc) preadv2$auto(r0, &(0x7f00000000c0)={&(0x7f0000000080)="7b4ea1994ac570cc113732737a16cb", 0x3}, 0x1, 0x7, 0x4, 0x400) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'dummy0\x00', 0x0}) r4 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim6/fib/nexthop_bucket_activity\x00', 0x10400, 0x0) sendmsg$auto_MACSEC_CMD_GET_TXSC(r2, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10088100}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x238, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r3}, @MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_OFFLOAD={0x214, 0x9, 0x0, 0x1, [@typed={0x4, 0x4d}, @nested={0x71, 0x13d, 0x0, 0x1, [@generic="0b9dda17659ed339a4881394b220fc6080703accdc24c1d1a5d5fd5e34bb234ba4c5d4caf6e5d8add78217f65b35c00132878e47cc06baa9ddff20ca4523a1afbb39e0272ff866e261e57f53810572eca3e074190abfd8be18cf172caf6adb52f11c344e25", @typed={0x8, 0x29, 0x0, 0x0, @ipv4=@multicast1}]}, @typed={0x8, 0x140, 0x0, 0x0, @fd=r4}, @generic="1edd07e5988d331eb8468c5684fd899e9bc20fc4d994ea7a626de2971e740f0f84e4cd1204390ff30071666eea179d34ea2c6ef7938493a3112cbb34c176a12dfda2233187b56083dcabf8bd79655391c90284d10532289613469be77bdab715868dcd4eae3e68b6af93bd76a420bacf5b0fd198eb185d20bb396a82a872f3e3771702e153b7aecf80c948ca62a133f6435bc27658034d466124809df99efec678489a0dfcc61f21a303661b88bbd29770a4b697fd537dc6b54ad976e0b769cdd70320b26cb222b765a1c496cebc5ab19b5f5b74086f7f95ea3ed59c4162eaf9", @nested={0xb0, 0x142, 0x0, 0x1, [@generic="6037f552760cbfc4476a6023e8d1c66e5dc88507083ebe448a05b6e752a317b41465c2", @nested={0x4, 0x121}, @typed={0x8, 0x51, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0xb7}, @generic="9e101f6f4e12ffb8b0876946215fe172a94f2ad8e6d13e1d3d3c2ad5b0168bca091a665763942bc2b0642972684503a3efce491277ac3c2d0cbfe67854b899c876cbbea8e0ebb1d75d3eb5dca2fa1048050f98bb663142c548d7c5f9d19b093222067938503f87f5c08401c3adc0e4e623", @nested={0x4, 0x46}, @nested={0x4, 0x8}]}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x4000000}, 0x70000000) r5 = bpf$auto(0x8, &(0x7f00000004c0)=@enable_stats={0x4}, 0xdf) r6 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000580)='/sys/devices/platform/regulatory.0/firmware/regulatory.db/data\x00', 0x60441, 0x0) ioctl$auto_snd_seq_f_ops_seq_clientmgr(r6, 0x20800000, &(0x7f00000005c0)="ea6a233e980c0b29d3f5848ccd1f259bdf5fecf06861bec61b643876e18beb4231cb3249e39b585a5e4e471e7b3ee1eda202b213c4309d0a79f06cb3c54e9cea491d4078578388ac63dd4a32361e5a07dc96ae18fd28d3ace4b919284c4effec812c1e988e6930b6f50fcab13c1b43ca4666bdd3d86acb2f0f4ed5c8749229e24b9a8d94dba820c4769af3b96676d5671c0323bf93a6e325300db9ed49524e04477ec5160eb95e0c372c91f3546afd15dc1d76bba71b990b15405591c153b16c7b6f49f7e1219e58cf9dfee944db931fa3f1fb6073d0e50cfc8f83d70391dcda35e35d34bead055f38d3dc39") r7 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000700), r6) sendmsg$auto_ILA_CMD_FLUSH(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r7, 0x200, 0x70bd26, 0x25dfdbff, {}, [@ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x7}, @ILA_ATTR_IFINDEX={0x8, 0x4, r3}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0xbd9b}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x80}, @ILA_ATTR_IFINDEX={0x8, 0x4, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r8 = wait4$auto(0xffffffffffffffff, &(0x7f0000000840)=0xb, 0x100, &(0x7f0000000880)={{0x3, 0x2}, {0x7ff, 0x6}, 0xbb2, 0x94, 0x4, 0xa, 0xff, 0x0, 0xfffffffffffffffe, 0x4, 0x9, 0x1, 0x3, 0x3, 0x0, 0xc}) move_pages$auto(r8, 0x8, &(0x7f0000000980)=&(0x7f0000000940), &(0x7f00000009c0)=0x8, &(0x7f0000000a00)=0x200, 0x2) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "e03629b2f331ae3627b6c25514a3faacb160edddd494208cac044155880b2628"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008890}, 0x20001084) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000b80), r2) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r9, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r10, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r3}, @MACSEC_ATTR_OFFLOAD={0x14, 0x9, 0x0, 0x1, [@nested={0x10, 0x1e, 0x0, 0x1, [@typed={0xb, 0x20, 0x0, 0x0, @str='dummy0\x00'}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x20004080) statmount$auto(&(0x7f0000000c80)={0xe00, @inferred=r0, 0x7ff, 0x3, 0x6}, &(0x7f0000000cc0)={0xf, 0x4, 0xf5, 0x10001, 0xadc7, 0x10000, 0x0, 0x0, 0x101, 0x34a6, 0x6, 0xc9c, 0x7d, 0x9, 0x8000000000000001, 0xfffffffffffffd09, 0x10000, 0x10, 0x5, 0x2ed5, 0x0, 0x10001, 0x1, 0x9, 0xc, 0x8, [0x9, 0x8001, 0xf, 0xffffffff, 0x7fff, 0x7fffffffffffffff, 0xffffffff, 0xc69, 0x3, 0x2, 0xf0, 0x9, 0x1, 0x6, 0x1, 0x1, 0x40, 0x7, 0x59, 0x6, 0x9, 0x4, 0x99, 0x8, 0x3, 0x32a6a7fa, 0xf, 0x6, 0x3d, 0x5, 0xd, 0xffffffffffff27b6, 0x0, 0x1, 0x81, 0x1, 0x8, 0x0, 0x426, 0x1, 0xd04, 0xffffffffffffffff, 0x4, 0x401, 0x10000, 0x53], "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"}, 0x6, 0x7) madvise$auto(0x9, 0x38, 0x401) r11 = socket(0x2a, 0x2, 0x5378) r12 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000001000), r6) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14, r12, 0x400, 0x70bd2c, 0x25dfdbfe}, 0x14}}, 0x40) ioctl$auto_FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f0000001100)=0x401) r13 = open(&(0x7f0000001140)='./file0\x00', 0x400000, 0x0) sendfile$auto(r13, r4, &(0x7f0000001180)=0x5, 0xe) r14 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001200), r11) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x60, r14, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x2}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x2}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x8000000000000000}, @NL802154_ATTR_WPAN_PHY_NAME={0x7, 0x2, '^&\x00'}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x5}, @NL802154_ATTR_BEACON_INTERVAL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001340)='/proc/sys/net/ipv6/conf/nlmon0/disable_ipv6\x00', 0x80800, 0x0) 249.216255ms ago: executing program 4 (id=1592): mmap$auto(0x2, 0x2020009, 0x6, 0x80000eb1, 0xfffffffffffffffa, 0x8000) msgsnd$auto(0x8, 0x0, 0x200, 0xa) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0xffffffffffffffff, 0x48000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') modify_ldt$auto(0x807ff0000000000, 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyu9\x00', 0x0, 0x0) mmap$auto(0xfffffffffffffffc, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x800000000000008) openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) socket(0xa, 0x2, 0x0) userfaultfd$auto(0x3) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r1, 0xc0481273, r1) ioctl$auto(r0, 0x5457, 0xd8) mmap$auto(0xffffffffffffffff, 0xe983, 0xdf, 0xeb1, 0x401, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x3) io_uring_enter$auto(0x3, 0x5, 0x82400004, 0xe, 0x0, 0xd) mlock$auto(0xfbe8, 0x4) open$auto(0x0, 0x0, 0xff93) 58.730756ms ago: executing program 3 (id=1593): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x4000008000) fcntl$auto(0x8000000000000001, 0x5, 0x8) fcntl$auto(0x8000000000000001, 0x24, 0x8) r0 = pipe$auto(&(0x7f0000000200)) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), r0) r1 = socket(0xa, 0x801, 0x100) getsockopt$auto(r1, 0x40000000029, 0x3c, 0xfffffffffffffffe, 0x0) r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={0x121c, r2, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_HMACINFO={0x11d6, 0x7, 0x0, 0x1, [@typed={0x8, 0xd6, 0x0, 0x0, @u32=0x370}, @nested={0xd1, 0xe5, 0x0, 0x1, [@nested={0x4, 0x144}, @nested={0x4, 0x11b}, @nested={0x4, 0x57}, @generic="fa601a952696e16b79cb0409f51c1fd2e0e8fc542a7d1e59be0f7e25afde8f30cc4bfdf2bd2a46508e6d23bb011a49309352bfa7b203652a0c648fe63f27714dd9ae7aabcaa5d3fbc65d82ea34c9095b3fb255079902a6c874cfd6fa56ff78bbe8c3b013c897919d0d17be82b27fc809c3b041b99d59fdac612f6cede70a0b6b7c631b8edd16a979864b9a24724ef616b655fe52807409217a6567af79cb168aff1314247cc920fecc83694e81e881da328ea9bf96a069c2adfa1461656857657c"]}, @nested={0x101c, 0x12b, 0x0, 0x1, [@generic="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", @typed={0x12, 0x25, 0x0, 0x0, @str='/dev/ubi_ctrl\x00'}, @nested={0x4, 0xcd}]}, @generic="adbd2324419f85f2a36b638936ee0d59642f0d90b88dbda5fc5dce5c8e9323bdba3a7b5faf97111a477d17cffe9127a727a2f6a834fd6b825ae85d4689e71602e83059179be46412e1443cc15c20eb370aa5f1e2235af8d7b7085e58406f3a05f29382e11253580068df0bda94483c05480ac673bc278d8a4a987bfc13d4b2ca04e6c1c8771c593eff1ae77ad8b80418c6bbe13edbc66d8272c7281dc7f3029780631a051b16c9ce2d78331bc9fa63c553a6b84a644d6d54e88b0c25a76bb85e6b0e6cae492e50120d7f7faf8297c78cd94b0355c67b8964212e"]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xe0}]}, 0x121c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/demote_size\x00', 0x123902, 0x0) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x109402, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop6/queue/nr_requests\x00', 0x1a3a42, 0x0) mmap$auto(0x0, 0x4020008, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x81, 0x0) ioctl$auto(r3, 0x80045104, 0xffffffffffffffff) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x8) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop6/queue/discard_max_bytes\x00', 0x1a1842, 0x0) write$auto(0x3, 0x0, 0xfffffdef) 0s ago: executing program 0 (id=1594): unshare$auto(0x40000080) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0c\x00', 0x80401, 0x0) r1 = openat$auto_fragmentation_threshold_ops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy3/fragmentation_threshold\x00', 0x800, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x6, 0x0) setsockopt$auto(r2, 0x10d, 0x2, 0x0, 0x17) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r4, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) bpf$auto(0xf, &(0x7f00000001c0)=@bpf_attr_3={0x5, 0xaa, 0x276, 0x0, 0x3, 0x2, 0x8, 0x33, 0xd, "6326bcc7c57ffed984639b375ee8d538", 0x0, 0x3, 0xffffffffffffffff, 0xfffffffc, 0x6, 0x5, 0x0, 0x9, 0x2, 0x7f, @attach_prog_fd, 0xce51, 0x0, 0x7, 0x92c, 0x8}, 0xc) sendfile$auto(r0, r1, &(0x7f0000000080)=0xfbb, 0x1) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/bonding/bond0\x00', 0xc0000, 0x0) ioctl$auto(r5, 0xc0045540, 0xffffffffffffffff) io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) kernel console output (not intermixed with test programs): r parsing attributes in process `syz.3.537'. [ 172.220903][ T7878] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 172.597953][ T7877] Process accounting paused [ 173.103242][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.542'. [ 174.009615][ T7921] netlink: 28 bytes leftover after parsing attributes in process `syz.2.548'. [ 174.130580][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 174.136793][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 174.202458][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 174.280861][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 174.521491][ T7925] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 174.538327][ T7925] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 174.545173][ T7925] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 174.555638][ T7925] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 174.928637][ T7931] mkiss: ax0: crc mode is auto. [ 175.113432][ T7919] netlink: 338 bytes leftover after parsing attributes in process `syz.1.547'. [ 176.091356][ T7960] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 176.101863][ T7960] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 176.108037][ T7960] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 176.121670][ T7960] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 176.162487][ T7963] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 176.227226][ T7963] svc: failed to register nfsdv3 RPC service (errno 111). [ 176.242133][ T7963] svc: failed to register nfsaclv3 RPC service (errno 111). [ 177.178358][ T7997] futex_wake_op: syz.3.566 tries to shift op by 64; fix this program [ 177.913787][ T8013] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 177.920092][ T8013] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 177.938056][ T8013] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 177.976999][ T8013] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 178.828533][ T8039] netlink: 28 bytes leftover after parsing attributes in process `syz.1.573'. [ 179.421296][ T8047] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 179.449237][ T8047] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 179.471110][ T8047] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 179.506054][ T8047] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 180.730916][ T8084] netlink: 28 bytes leftover after parsing attributes in process `syz.0.584'. [ 181.490871][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 181.497939][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.504227][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 181.565394][ T5146] Bluetooth: hci2: command 0x0c1a tx timeout [ 183.088621][ T8134] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 183.134327][ T8134] svc: failed to register nfsdv3 RPC service (errno 111). [ 183.154375][ T8134] svc: failed to register nfsaclv3 RPC service (errno 111). [ 183.660853][ T8145] futex_wake_op: syz.0.595 tries to shift op by 64; fix this program [ 184.006380][ T8154] tipc: Can't bind to reserved service type 63 [ 184.522205][ T8159] netlink: 338 bytes leftover after parsing attributes in process `syz.3.599'. [ 186.484126][ T8204] netlink: 28 bytes leftover after parsing attributes in process `syz.3.612'. [ 188.483919][ T8232] futex_wake_op: syz.0.619 tries to shift op by 64; fix this program [ 191.600196][ T8282] netlink: 338 bytes leftover after parsing attributes in process `syz.3.636'. [ 193.908056][ T8321] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 193.920930][ T8321] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 193.931722][ T8321] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 193.948134][ T8321] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 194.691313][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.697671][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.820035][ T8356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.658'. [ 195.315776][ T8369] futex_wake_op: syz.0.662 tries to shift op by 64; fix this program [ 195.324077][ T5146] Bluetooth: hci1: command 0x0c1a tx timeout [ 195.961383][ T5146] Bluetooth: hci3: command 0x0c1a tx timeout [ 195.967505][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 195.973720][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 198.396870][ T8412] futex_wake_op: syz.3.671 tries to shift op by 64; fix this program [ 199.688698][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.679'. [ 200.861381][ T8468] futex_wake_op: syz.0.687 tries to shift op by 64; fix this program [ 203.225505][ T8500] Process accounting resumed [ 204.272650][ T8532] svc: failed to register nfsdv3 RPC service (errno 111). [ 204.293885][ T8532] svc: failed to register nfsaclv3 RPC service (errno 111). [ 204.646430][ T8530] sp0: Synchronizing with TNC [ 205.095456][ T8540] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 205.111439][ T8540] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 205.130901][ T8540] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 205.151575][ T8540] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 205.435741][ T8562] netlink: 28 bytes leftover after parsing attributes in process `syz.2.715'. [ 206.428124][ T8581] sp0: Synchronizing with TNC [ 206.520816][ T5146] Bluetooth: hci1: command 0x0c1a tx timeout [ 207.162038][ T5146] Bluetooth: hci2: command 0x0c1a tx timeout [ 207.162060][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 207.168115][ T5146] Bluetooth: hci0: command 0x0c1a tx timeout [ 207.781114][ T8598] sp0: Synchronizing with TNC [ 207.997925][ T8615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.730'. [ 208.611270][ T8629] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 208.617424][ T8629] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 208.668864][ T8629] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 208.730998][ T8629] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 209.159960][ T8634] netlink: 338 bytes leftover after parsing attributes in process `syz.0.736'. [ 209.348225][ T8640] futex_wake_op: syz.3.738 tries to shift op by 64; fix this program [ 209.713852][ T8647] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 209.755260][ T8647] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 209.809211][ T8647] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 209.834514][ T8647] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 210.989118][ T8679] futex_wake_op: syz.1.748 tries to shift op by 64; fix this program [ 211.241545][ T8682] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 211.302912][ T8682] svc: failed to register nfsdv3 RPC service (errno 111). [ 211.347063][ T8682] svc: failed to register nfsaclv3 RPC service (errno 111). [ 211.471359][ T8674] sp0: Synchronizing with TNC [ 211.649553][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.751'. [ 211.720761][ T5146] Bluetooth: hci1: command 0x0c1a tx timeout [ 211.800724][ T5146] Bluetooth: hci3: command 0x0c1a tx timeout [ 211.802956][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.890848][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 212.754313][ T8729] futex_wake_op: syz.0.759 tries to shift op by 64; fix this program [ 213.421042][ T8748] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 213.509821][ T8748] svc: failed to register nfsdv3 RPC service (errno 111). [ 213.539352][ T8749] sp0: Synchronizing with TNC [ 213.563117][ T8748] svc: failed to register nfsaclv3 RPC service (errno 111). [ 214.696479][ T8775] sp0: Synchronizing with TNC [ 216.602727][ T8821] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 216.641179][ T8819] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 216.657689][ T8819] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 216.667974][ T8819] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 216.674285][ T8819] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 216.687381][ T8821] svc: failed to register nfsdv3 RPC service (errno 111). [ 216.704379][ T8821] svc: failed to register nfsaclv3 RPC service (errno 111). [ 217.208019][ T8827] sp0: Synchronizing with TNC [ 217.432969][ T8842] futex_wake_op: syz.2.786 tries to shift op by 64; fix this program [ 217.981006][ T8851] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 217.991555][ T8851] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 218.000845][ T8851] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 218.010903][ T8851] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 218.580884][ T8861] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 218.587039][ T8861] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 218.662954][ T8861] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 218.691006][ T8861] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 219.589457][ T8891] futex_wake_op: syz.3.798 tries to shift op by 64; fix this program [ 220.017158][ T8907] futex_wake_op: syz.3.800 tries to shift op by 64; fix this program [ 220.566529][ T8922] netlink: 28 bytes leftover after parsing attributes in process `syz.3.804'. [ 220.600920][ T5146] Bluetooth: hci0: command 0x0c1a tx timeout [ 220.607099][ T5146] Bluetooth: hci1: command 0x0c1a tx timeout [ 220.681638][ T5146] Bluetooth: hci3: command 0x0c1a tx timeout [ 220.761111][ T5146] Bluetooth: hci2: command 0x0c1a tx timeout [ 222.248345][ T8955] sp0: Synchronizing with TNC [ 222.923315][ T8967] sp0: Synchronizing with TNC [ 223.052519][ T8965] netlink: 338 bytes leftover after parsing attributes in process `syz.0.815'. [ 224.632756][ T9006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.825'. [ 225.271835][ T9016] netlink: 28 bytes leftover after parsing attributes in process `syz.0.830'. [ 225.902645][ T9027] futex_wake_op: syz.3.832 tries to shift op by 64; fix this program [ 226.659665][ T9022] mkiss: ax0: crc mode is auto. [ 227.060230][ T9037] sp0: Synchronizing with TNC [ 227.111390][ T9044] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 227.146608][ T9046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.836'. [ 227.156519][ T9044] svc: failed to register nfsdv3 RPC service (errno 111). [ 227.173670][ T9044] svc: failed to register nfsaclv3 RPC service (errno 111). [ 227.462521][ T9054] futex_wake_op: syz.3.839 tries to shift op by 64; fix this program [ 227.905144][ T9072] futex_wake_op: syz.3.842 tries to shift op by 64; fix this program [ 228.120554][ T9059] sp0: Synchronizing with TNC [ 230.751763][ T9124] sp0: Synchronizing with TNC [ 231.102889][ T9108] netlink: 338 bytes leftover after parsing attributes in process `syz.3.852'. [ 231.515779][ T9148] futex_wake_op: syz.0.869 tries to shift op by 64; fix this program [ 231.613448][ T9142] netlink: 338 bytes leftover after parsing attributes in process `syz.1.859'. [ 232.407243][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.865'. [ 233.505198][ T9138] Process accounting paused [ 233.636439][ T9179] sp0: Synchronizing with TNC [ 234.165457][ T9197] futex_wake_op: syz.1.872 tries to shift op by 64; fix this program [ 235.804965][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.877'. [ 239.091694][ T9267] futex_wake_op: syz.0.888 tries to shift op by 64; fix this program [ 243.262320][ T9305] sp0: Synchronizing with TNC [ 243.773415][ T9318] futex_wake_op: syz.0.899 tries to shift op by 64; fix this program [ 245.481175][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'. [ 246.186682][ T9354] sp0: Synchronizing with TNC [ 246.193629][ T9374] futex_wake_op: syz.2.918 tries to shift op by 64; fix this program [ 246.669769][ T29] audit: type=1804 audit(4294967438.710:5): pid=9385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.919" name="/newroot/sys/kernel/tracing/set_event_pid" dev="tracefs" ino=28 res=1 errno=0 [ 247.092401][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.925'. [ 247.502408][ T9411] futex_wake_op: syz.1.928 tries to shift op by 64; fix this program [ 247.716694][ T9403] netlink: 342 bytes leftover after parsing attributes in process `syz.2.926'. [ 248.197909][ T9421] FAULT_INJECTION: forcing a failure. [ 248.197909][ T9421] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 248.252159][ T9421] CPU: 1 UID: 0 PID: 9421 Comm: syz.3.930 Not tainted 6.13.0-rc7-syzkaller #0 [ 248.261077][ T9421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 248.271236][ T9421] Call Trace: [ 248.274517][ T9421] [ 248.277450][ T9421] dump_stack_lvl+0x16c/0x1f0 [ 248.282158][ T9421] should_fail_ex+0x497/0x5b0 [ 248.286850][ T9421] _copy_from_user+0x2e/0xd0 [ 248.291453][ T9421] snd_rawmidi_kernel_write1+0x35e/0x860 [ 248.297103][ T9421] ? _raw_spin_unlock_irq+0x23/0x50 [ 248.302311][ T9421] snd_rawmidi_write+0x267/0xbe0 [ 248.307787][ T9421] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 248.313261][ T9421] ? apparmor_file_permission+0x251/0x400 [ 248.319001][ T9421] ? bpf_lsm_file_permission+0x9/0x10 [ 248.324385][ T9421] ? security_file_permission+0x71/0x210 [ 248.330027][ T9421] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 248.335494][ T9421] vfs_write+0x24c/0x1150 [ 248.339837][ T9421] ? __fget_files+0x1fc/0x3a0 [ 248.344523][ T9421] ? __pfx_lock_release+0x10/0x10 [ 248.349559][ T9421] ? __pfx_vfs_write+0x10/0x10 [ 248.354329][ T9421] ? lock_acquire+0x2f/0xb0 [ 248.358841][ T9421] ? __fget_files+0x40/0x3a0 [ 248.363448][ T9421] ? __fget_files+0x206/0x3a0 [ 248.368160][ T9421] ksys_write+0x207/0x250 [ 248.372514][ T9421] ? __pfx_ksys_write+0x10/0x10 [ 248.377390][ T9421] do_syscall_64+0xcd/0x250 [ 248.381938][ T9421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.387854][ T9421] RIP: 0033:0x7f5004d85d29 [ 248.392291][ T9421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.411905][ T9421] RSP: 002b:00007f5005c1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 248.420322][ T9421] RAX: ffffffffffffffda RBX: 00007f5004f75fa0 RCX: 00007f5004d85d29 [ 248.428296][ T9421] RDX: 000000000000a3d9 RSI: 0000000020000400 RDI: 0000000000000003 [ 248.436268][ T9421] RBP: 00007f5005c1e090 R08: 0000000000000000 R09: 0000000000000000 [ 248.444246][ T9421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.452220][ T9421] R13: 0000000000000000 R14: 00007f5004f75fa0 R15: 00007ffe79920b18 [ 248.460206][ T9421] [ 248.463252][ C1] vkms_vblank_simulate: vblank timer overrun [ 248.929880][ T9417] sp0: Synchronizing with TNC [ 249.289015][ T9442] sp0: Synchronizing with TNC [ 249.606729][ T9452] futex_wake_op: syz.1.939 tries to shift op by 64; fix this program [ 250.239423][ T9465] netlink: 342 bytes leftover after parsing attributes in process `syz.3.940'. [ 251.764549][ T9484] sp0: Synchronizing with TNC [ 252.080448][ T9498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.950'. [ 252.089713][ T9499] futex_wake_op: syz.1.951 tries to shift op by 64; fix this program [ 253.518308][ T9509] sp0: Synchronizing with TNC [ 253.726235][ T9534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.960'. [ 253.956591][ T9541] futex_wake_op: syz.2.962 tries to shift op by 64; fix this program [ 253.975886][ T9535] FAULT_INJECTION: forcing a failure. [ 253.975886][ T9535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.026956][ T9535] CPU: 1 UID: 0 PID: 9535 Comm: syz.0.961 Not tainted 6.13.0-rc7-syzkaller #0 [ 254.035887][ T9535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 254.045979][ T9535] Call Trace: [ 254.049284][ T9535] [ 254.052240][ T9535] dump_stack_lvl+0x16c/0x1f0 [ 254.056961][ T9535] should_fail_ex+0x497/0x5b0 [ 254.061692][ T9535] _copy_to_user+0x32/0xd0 [ 254.066156][ T9535] simple_read_from_buffer+0xd0/0x160 [ 254.071567][ T9535] proc_fail_nth_read+0x198/0x270 [ 254.076644][ T9535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 254.082429][ T9535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 254.088027][ T9535] vfs_read+0x1df/0xbe0 [ 254.092193][ T9535] ? __fget_files+0x1fc/0x3a0 [ 254.096889][ T9535] ? __pfx___mutex_lock+0x10/0x10 [ 254.101929][ T9535] ? __pfx_vfs_read+0x10/0x10 [ 254.106624][ T9535] ? __fget_files+0x206/0x3a0 [ 254.111318][ T9535] ksys_read+0x12b/0x250 [ 254.115566][ T9535] ? __pfx_ksys_read+0x10/0x10 [ 254.120340][ T9535] do_syscall_64+0xcd/0x250 [ 254.124873][ T9535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.130790][ T9535] RIP: 0033:0x7fe44db8473c [ 254.135218][ T9535] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 254.154839][ T9535] RSP: 002b:00007fe44e998030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 254.163260][ T9535] RAX: ffffffffffffffda RBX: 00007fe44dd76080 RCX: 00007fe44db8473c [ 254.171244][ T9535] RDX: 000000000000000f RSI: 00007fe44e9980a0 RDI: 0000000000000005 [ 254.179222][ T9535] RBP: 00007fe44e998090 R08: 0000000000000000 R09: 0000000000000000 [ 254.187200][ T9535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.195170][ T9535] R13: 0000000000000000 R14: 00007fe44dd76080 R15: 00007ffdcb2214e8 [ 254.203160][ T9535] [ 254.206293][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.484130][ T9545] futex_wake_op: syz.0.964 tries to shift op by 64; fix this program [ 256.131967][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.138436][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.210374][ T9583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.976'. [ 256.526745][ T9589] netlink: 'syz.1.978': attribute type 1 has an invalid length. [ 256.544280][ T9589] netlink: 'syz.1.978': attribute type 1 has an invalid length. [ 257.012358][ T9600] FAULT_INJECTION: forcing a failure. [ 257.012358][ T9600] name failslab, interval 1, probability 0, space 0, times 0 [ 257.050985][ T9600] CPU: 1 UID: 0 PID: 9600 Comm: syz.1.980 Not tainted 6.13.0-rc7-syzkaller #0 [ 257.059908][ T9600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 257.069996][ T9600] Call Trace: [ 257.073301][ T9600] [ 257.076259][ T9600] dump_stack_lvl+0x16c/0x1f0 [ 257.080981][ T9600] should_fail_ex+0x497/0x5b0 [ 257.085698][ T9600] ? fs_reclaim_acquire+0xae/0x150 [ 257.090852][ T9600] should_failslab+0xc2/0x120 [ 257.095569][ T9600] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 257.100984][ T9600] ? getname_flags.part.0+0x4c/0x550 [ 257.106312][ T9600] ? vfs_write+0x306/0x1150 [ 257.110852][ T9600] getname_flags.part.0+0x4c/0x550 [ 257.116009][ T9600] getname+0x8d/0xe0 [ 257.119939][ T9600] do_sys_openat2+0x104/0x1e0 [ 257.124664][ T9600] ? __pfx_do_sys_openat2+0x10/0x10 [ 257.129907][ T9600] ? __fget_files+0x206/0x3a0 [ 257.134624][ T9600] __x64_sys_openat+0x175/0x210 [ 257.139518][ T9600] ? __pfx___x64_sys_openat+0x10/0x10 [ 257.144934][ T9600] ? ksys_write+0x1ba/0x250 [ 257.149480][ T9600] do_syscall_64+0xcd/0x250 [ 257.154022][ T9600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.159954][ T9600] RIP: 0033:0x7fe41f785d29 [ 257.164396][ T9600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.184061][ T9600] RSP: 002b:00007fe4204e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 257.192521][ T9600] RAX: ffffffffffffffda RBX: 00007fe41f975fa0 RCX: 00007fe41f785d29 [ 257.200560][ T9600] RDX: 00000000000a0201 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 257.208561][ T9600] RBP: 00007fe4204e0090 R08: 0000000000000000 R09: 0000000000000000 [ 257.216564][ T9600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.224566][ T9600] R13: 0000000000000000 R14: 00007fe41f975fa0 R15: 00007ffc8469dd28 [ 257.232589][ T9600] [ 258.589559][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.986'. [ 259.607780][ T9641] sp0: Synchronizing with TNC [ 261.127207][ T9658] sp0: Synchronizing with TNC [ 261.284377][ T9675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.998'. [ 262.237214][ T9684] futex_wake_op: syz.3.1002 tries to shift op by 64; fix this program [ 262.817840][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1010'. [ 262.892086][ T9715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1010'. [ 262.942087][ T9718] FAULT_INJECTION: forcing a failure. [ 262.942087][ T9718] name failslab, interval 1, probability 0, space 0, times 0 [ 262.990797][ T9718] CPU: 0 UID: 0 PID: 9718 Comm: syz.2.1011 Not tainted 6.13.0-rc7-syzkaller #0 [ 262.999816][ T9718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 263.009903][ T9718] Call Trace: [ 263.013218][ T9718] [ 263.016168][ T9718] dump_stack_lvl+0x16c/0x1f0 [ 263.020883][ T9718] should_fail_ex+0x497/0x5b0 [ 263.025605][ T9718] ? fs_reclaim_acquire+0xae/0x150 [ 263.030762][ T9718] should_failslab+0xc2/0x120 [ 263.035479][ T9718] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 263.040893][ T9718] ? getname_flags.part.0+0x4c/0x550 [ 263.046229][ T9718] ? vfs_write+0x306/0x1150 [ 263.050758][ T9718] getname_flags.part.0+0x4c/0x550 [ 263.055890][ T9718] getname+0x8d/0xe0 [ 263.059796][ T9718] do_sys_openat2+0x104/0x1e0 [ 263.064486][ T9718] ? __pfx_do_sys_openat2+0x10/0x10 [ 263.069697][ T9718] ? __fget_files+0x206/0x3a0 [ 263.074394][ T9718] __x64_sys_openat+0x175/0x210 [ 263.079261][ T9718] ? __pfx___x64_sys_openat+0x10/0x10 [ 263.084646][ T9718] ? ksys_write+0x1ba/0x250 [ 263.089167][ T9718] do_syscall_64+0xcd/0x250 [ 263.093688][ T9718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.099604][ T9718] RIP: 0033:0x7fbe7a585d29 [ 263.104020][ T9718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.123636][ T9718] RSP: 002b:00007fbe7b3db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 263.132070][ T9718] RAX: ffffffffffffffda RBX: 00007fbe7a776080 RCX: 00007fbe7a585d29 [ 263.140061][ T9718] RDX: 0000000000000400 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 263.148045][ T9718] RBP: 00007fbe7b3db090 R08: 0000000000000000 R09: 0000000000000000 [ 263.156018][ T9718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.163990][ T9718] R13: 0000000000000000 R14: 00007fbe7a776080 R15: 00007fff71ee1cf8 [ 263.171976][ T9718] [ 263.353984][ T9724] futex_wake_op: syz.1.1015 tries to shift op by 64; fix this program [ 263.508460][ T9700] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1006'. [ 263.626230][ T9725] Process accounting resumed [ 266.436557][ T9771] futex_wake_op: syz.2.1027 tries to shift op by 64; fix this program [ 268.318510][ T9792] sp0: Synchronizing with TNC [ 270.433241][ T9827] FAULT_INJECTION: forcing a failure. [ 270.433241][ T9827] name failslab, interval 1, probability 0, space 0, times 0 [ 270.470726][ T9827] CPU: 1 UID: 0 PID: 9827 Comm: syz.0.1039 Not tainted 6.13.0-rc7-syzkaller #0 [ 270.479741][ T9827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 270.489835][ T9827] Call Trace: [ 270.493142][ T9827] [ 270.496090][ T9827] dump_stack_lvl+0x16c/0x1f0 [ 270.500809][ T9827] should_fail_ex+0x497/0x5b0 [ 270.505541][ T9827] ? fs_reclaim_acquire+0xae/0x150 [ 270.510699][ T9827] should_failslab+0xc2/0x120 [ 270.515413][ T9827] __kmalloc_noprof+0xce/0x4f0 [ 270.520226][ T9827] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 270.525896][ T9827] ? tomoyo_realpath_from_path+0xbf/0x710 [ 270.531669][ T9827] tomoyo_realpath_from_path+0xbf/0x710 [ 270.537260][ T9827] ? tomoyo_path_number_perm+0x235/0x5b0 [ 270.542946][ T9827] tomoyo_path_number_perm+0x248/0x5b0 [ 270.548457][ T9827] ? tomoyo_path_number_perm+0x235/0x5b0 [ 270.554138][ T9827] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 270.560190][ T9827] ? __pfx_lock_release+0x10/0x10 [ 270.565247][ T9827] ? trace_lock_acquire+0x14e/0x1f0 [ 270.570494][ T9827] ? lock_acquire+0x2f/0xb0 [ 270.575031][ T9827] ? __fget_files+0x40/0x3a0 [ 270.579663][ T9827] ? __fget_files+0x206/0x3a0 [ 270.584396][ T9827] security_file_ioctl+0x9b/0x240 [ 270.589443][ T9827] __x64_sys_ioctl+0xb7/0x200 [ 270.594135][ T9827] do_syscall_64+0xcd/0x250 [ 270.598655][ T9827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.604563][ T9827] RIP: 0033:0x7fe44db85d29 [ 270.608981][ T9827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.628595][ T9827] RSP: 002b:00007fe44e9b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.637013][ T9827] RAX: ffffffffffffffda RBX: 00007fe44dd75fa0 RCX: 00007fe44db85d29 [ 270.644987][ T9827] RDX: 0000000000000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 270.652958][ T9827] RBP: 00007fe44e9b9090 R08: 0000000000000000 R09: 0000000000000000 [ 270.660927][ T9827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.668898][ T9827] R13: 0000000000000000 R14: 00007fe44dd75fa0 R15: 00007ffdcb2214e8 [ 270.676883][ T9827] [ 270.761561][ T9827] ERROR: Out of memory at tomoyo_realpath_from_path. [ 271.666486][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'. [ 272.044541][ T9848] sp0: Synchronizing with TNC [ 273.186350][ T9894] kAFS: unparsable volume name [ 273.223774][ T9896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1052'. [ 273.815179][ T9894] : entered promiscuous mode [ 274.068122][ T9918] netlink: 'syz.0.1055': attribute type 11 has an invalid length. [ 274.120830][ T9918] netlink: 'syz.0.1055': attribute type 11 has an invalid length. [ 274.128724][ T9918] netlink: 'syz.0.1055': attribute type 11 has an invalid length. [ 274.791511][ T9914] sp0: Synchronizing with TNC [ 275.487293][ T9933] sp0: Synchronizing with TNC [ 275.605756][ T9946] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 275.662000][ T9946] svc: failed to register nfsdv3 RPC service (errno 111). [ 275.703970][ T9946] svc: failed to register nfsaclv3 RPC service (errno 111). [ 277.317966][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1071'. [ 279.390872][T10012] FAULT_INJECTION: forcing a failure. [ 279.390872][T10012] name failslab, interval 1, probability 0, space 0, times 0 [ 279.403810][T10012] CPU: 1 UID: 0 PID: 10012 Comm: syz.1.1081 Not tainted 6.13.0-rc7-syzkaller #0 [ 279.412879][T10012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 279.422970][T10012] Call Trace: [ 279.426269][T10012] [ 279.429248][T10012] dump_stack_lvl+0x16c/0x1f0 [ 279.433982][T10012] should_fail_ex+0x497/0x5b0 [ 279.438716][T10012] ? fs_reclaim_acquire+0xae/0x150 [ 279.443873][T10012] should_failslab+0xc2/0x120 [ 279.448595][T10012] __kmalloc_noprof+0xce/0x4f0 [ 279.453405][T10012] ? d_absolute_path+0x137/0x1b0 [ 279.458390][T10012] ? tomoyo_encode2+0x100/0x3e0 [ 279.463286][T10012] tomoyo_encode2+0x100/0x3e0 [ 279.468019][T10012] tomoyo_realpath_from_path+0x1a7/0x710 [ 279.473712][T10012] tomoyo_path_number_perm+0x248/0x5b0 [ 279.479215][T10012] ? tomoyo_path_number_perm+0x235/0x5b0 [ 279.484894][T10012] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 279.490949][T10012] ? __pfx_lock_release+0x10/0x10 [ 279.496009][T10012] ? trace_lock_acquire+0x14e/0x1f0 [ 279.501255][T10012] ? lock_acquire+0x2f/0xb0 [ 279.505786][T10012] ? __fget_files+0x40/0x3a0 [ 279.510417][T10012] ? __fget_files+0x206/0x3a0 [ 279.515125][T10012] security_file_ioctl+0x9b/0x240 [ 279.520159][T10012] __x64_sys_ioctl+0xb7/0x200 [ 279.524843][T10012] do_syscall_64+0xcd/0x250 [ 279.529362][T10012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.535283][T10012] RIP: 0033:0x7fe41f785d29 [ 279.539709][T10012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.559330][T10012] RSP: 002b:00007fe4204e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 279.567757][T10012] RAX: ffffffffffffffda RBX: 00007fe41f975fa0 RCX: 00007fe41f785d29 [ 279.575732][T10012] RDX: 0000000020000000 RSI: 000000004028700f RDI: 0000000000000004 [ 279.583710][T10012] RBP: 00007fe4204e0090 R08: 0000000000000000 R09: 0000000000000000 [ 279.591685][T10012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.599664][T10012] R13: 0000000000000000 R14: 00007fe41f975fa0 R15: 00007ffc8469dd28 [ 279.607659][T10012] [ 279.610773][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.619545][T10012] ERROR: Out of memory at tomoyo_realpath_from_path. [ 280.928578][T10031] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1083'. [ 281.724625][T10051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1088'. [ 282.987632][T10069] sp0: Synchronizing with TNC [ 284.204598][T10089] sp0: Synchronizing with TNC [ 284.236530][T10098] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1097'. [ 284.453936][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1099'. [ 284.592310][T10109] FAULT_INJECTION: forcing a failure. [ 284.592310][T10109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.621202][T10107] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 284.639029][T10109] CPU: 1 UID: 0 PID: 10109 Comm: syz.0.1102 Not tainted 6.13.0-rc7-syzkaller #0 [ 284.646489][T10107] svc: failed to register nfsdv3 RPC service (errno 111). [ 284.648083][T10109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 284.661688][T10107] svc: failed to register nfsaclv3 RPC service (errno 111). [ 284.665227][T10109] Call Trace: [ 284.665240][T10109] [ 284.678771][T10109] dump_stack_lvl+0x16c/0x1f0 [ 284.683484][T10109] should_fail_ex+0x497/0x5b0 [ 284.688205][T10109] _copy_from_user+0x2e/0xd0 [ 284.692846][T10109] copy_msghdr_from_user+0x99/0x160 [ 284.698094][T10109] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 284.703940][T10109] ? __lock_acquire+0xcc5/0x3c40 [ 284.708900][T10109] ___sys_sendmsg+0xff/0x1e0 [ 284.713517][T10109] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.718747][T10109] ? trace_lock_acquire+0x14e/0x1f0 [ 284.723984][T10109] __sys_sendmmsg+0x201/0x420 [ 284.728680][T10109] ? __pfx___sys_sendmmsg+0x10/0x10 [ 284.733906][T10109] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 284.739911][T10109] ? fput+0x67/0x440 [ 284.743820][T10109] ? ksys_write+0x1ba/0x250 [ 284.748329][T10109] ? __pfx_ksys_write+0x10/0x10 [ 284.753190][T10109] __x64_sys_sendmmsg+0x9c/0x100 [ 284.758401][T10109] ? lockdep_hardirqs_on+0x7c/0x110 [ 284.763607][T10109] do_syscall_64+0xcd/0x250 [ 284.768120][T10109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.774023][T10109] RIP: 0033:0x7fe44db85d29 [ 284.778443][T10109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.798055][T10109] RSP: 002b:00007fe44e9b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 284.806472][T10109] RAX: ffffffffffffffda RBX: 00007fe44dd75fa0 RCX: 00007fe44db85d29 [ 284.814447][T10109] RDX: 00000000000009a6 RSI: 0000000020000000 RDI: 0000000000000003 [ 284.822420][T10109] RBP: 00007fe44e9b9090 R08: 0000000000000000 R09: 0000000000000000 [ 284.830393][T10109] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000001 [ 284.838366][T10109] R13: 0000000000000000 R14: 00007fe44dd75fa0 R15: 00007ffdcb2214e8 [ 284.846358][T10109] [ 286.284134][T10141] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1110'. [ 286.535524][T10143] sp0: Synchronizing with TNC [ 287.889769][T10193] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1120'. [ 289.052412][T10202] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1123'. [ 289.202187][T10224] kAFS: unparsable volume name [ 289.961245][T10239] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1131'. [ 290.036085][T10232] sp0: Synchronizing with TNC [ 290.215297][T10224] : entered promiscuous mode [ 290.572975][T10246] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1140'. [ 293.233350][T10288] FAULT_INJECTION: forcing a failure. [ 293.233350][T10288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.283048][T10288] CPU: 1 UID: 0 PID: 10288 Comm: syz.0.1143 Not tainted 6.13.0-rc7-syzkaller #0 [ 293.292150][T10288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 293.302240][T10288] Call Trace: [ 293.305539][T10288] [ 293.308493][T10288] dump_stack_lvl+0x16c/0x1f0 [ 293.313213][T10288] should_fail_ex+0x497/0x5b0 [ 293.317938][T10288] strncpy_from_user+0x3b/0x2d0 [ 293.322839][T10288] getname_flags.part.0+0x8f/0x550 [ 293.327994][T10288] getname+0x8d/0xe0 [ 293.331925][T10288] do_sys_openat2+0x104/0x1e0 [ 293.336646][T10288] ? __pfx_do_sys_openat2+0x10/0x10 [ 293.341888][T10288] ? __fget_files+0x206/0x3a0 [ 293.346600][T10288] __x64_sys_openat+0x175/0x210 [ 293.351479][T10288] ? __pfx___x64_sys_openat+0x10/0x10 [ 293.356870][T10288] ? ksys_write+0x1ba/0x250 [ 293.361399][T10288] do_syscall_64+0xcd/0x250 [ 293.365922][T10288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.371831][T10288] RIP: 0033:0x7fe44db85d29 [ 293.376259][T10288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.395873][T10288] RSP: 002b:00007fe44e998038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 293.404293][T10288] RAX: ffffffffffffffda RBX: 00007fe44dd76080 RCX: 00007fe44db85d29 [ 293.412266][T10288] RDX: 0000000000000400 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 293.420249][T10288] RBP: 00007fe44e998090 R08: 0000000000000000 R09: 0000000000000000 [ 293.428227][T10288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.436214][T10288] R13: 0000000000000000 R14: 00007fe44dd76080 R15: 00007ffdcb2214e8 [ 293.444203][T10288] [ 293.447311][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.773137][T10216] Process accounting paused [ 293.787136][T10281] sp0: Synchronizing with TNC [ 293.796323][T10293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1144'. [ 294.231436][T10300] futex_wake_op: syz.3.1147 tries to shift op by 64; fix this program [ 294.687827][T10290] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1139'. [ 296.892911][T10335] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1155'. [ 297.423573][T10348] FAULT_INJECTION: forcing a failure. [ 297.423573][T10348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.471899][T10348] CPU: 0 UID: 0 PID: 10348 Comm: syz.3.1159 Not tainted 6.13.0-rc7-syzkaller #0 [ 297.480995][T10348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 297.491153][T10348] Call Trace: [ 297.494436][T10348] [ 297.497365][T10348] dump_stack_lvl+0x16c/0x1f0 [ 297.502055][T10348] should_fail_ex+0x497/0x5b0 [ 297.506747][T10348] _copy_from_user+0x2e/0xd0 [ 297.511347][T10348] copy_msghdr_from_user+0x99/0x160 [ 297.516589][T10348] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 297.522439][T10348] ___sys_sendmsg+0xff/0x1e0 [ 297.527056][T10348] ? __pfx____sys_sendmsg+0x10/0x10 [ 297.532282][T10348] ? __pfx_lock_release+0x10/0x10 [ 297.537312][T10348] ? trace_lock_acquire+0x14e/0x1f0 [ 297.542530][T10348] ? __fget_files+0x206/0x3a0 [ 297.547218][T10348] __sys_sendmsg+0x16e/0x220 [ 297.551818][T10348] ? __pfx___sys_sendmsg+0x10/0x10 [ 297.556953][T10348] do_syscall_64+0xcd/0x250 [ 297.561471][T10348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.567373][T10348] RIP: 0033:0x7f5004d85d29 [ 297.571790][T10348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.591418][T10348] RSP: 002b:00007f5005c1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.599843][T10348] RAX: ffffffffffffffda RBX: 00007f5004f75fa0 RCX: 00007f5004d85d29 [ 297.607816][T10348] RDX: 0000000000040000 RSI: 0000000020000240 RDI: 0000000000000004 [ 297.615791][T10348] RBP: 00007f5005c1e090 R08: 0000000000000000 R09: 0000000000000000 [ 297.623772][T10348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.631750][T10348] R13: 0000000000000000 R14: 00007f5004f75fa0 R15: 00007ffe79920b18 [ 297.639738][T10348] [ 297.974854][T10344] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1158'. [ 298.067744][T10340] sp0: Synchronizing with TNC [ 298.517810][T10361] sp0: Synchronizing with TNC [ 298.616119][T10355] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1161'. [ 299.178831][T10375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1166'. [ 299.581813][T10383] FAULT_INJECTION: forcing a failure. [ 299.581813][T10383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.611464][T10383] CPU: 1 UID: 0 PID: 10383 Comm: syz.1.1169 Not tainted 6.13.0-rc7-syzkaller #0 [ 299.620572][T10383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 299.630650][T10383] Call Trace: [ 299.633957][T10383] [ 299.636908][T10383] dump_stack_lvl+0x16c/0x1f0 [ 299.641620][T10383] should_fail_ex+0x497/0x5b0 [ 299.646339][T10383] _copy_to_user+0x32/0xd0 [ 299.650800][T10383] simple_read_from_buffer+0xd0/0x160 [ 299.656208][T10383] proc_fail_nth_read+0x198/0x270 [ 299.661281][T10383] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 299.666874][T10383] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 299.672463][T10383] vfs_read+0x1df/0xbe0 [ 299.676661][T10383] ? __fget_files+0x1fc/0x3a0 [ 299.681405][T10383] ? __pfx___mutex_lock+0x10/0x10 [ 299.686467][T10383] ? __pfx_vfs_read+0x10/0x10 [ 299.691186][T10383] ? __fget_files+0x206/0x3a0 [ 299.695904][T10383] ksys_read+0x12b/0x250 [ 299.700180][T10383] ? __pfx_ksys_read+0x10/0x10 [ 299.704984][T10383] do_syscall_64+0xcd/0x250 [ 299.709527][T10383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.715459][T10383] RIP: 0033:0x7fe41f78473c [ 299.719899][T10383] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 299.739542][T10383] RSP: 002b:00007fe4204e0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 299.747998][T10383] RAX: ffffffffffffffda RBX: 00007fe41f975fa0 RCX: 00007fe41f78473c [ 299.756006][T10383] RDX: 000000000000000f RSI: 00007fe4204e00a0 RDI: 0000000000000006 [ 299.764019][T10383] RBP: 00007fe4204e0090 R08: 0000000000000000 R09: 0000000000000003 [ 299.772027][T10383] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 299.780034][T10383] R13: 0000000000000000 R14: 00007fe41f975fa0 R15: 00007ffc8469dd28 [ 299.788059][T10383] [ 299.791244][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.461005][T10396] futex_wake_op: syz.2.1171 tries to shift op by 64; fix this program [ 302.020236][T10416] futex_wake_op: syz.3.1176 tries to shift op by 64; fix this program [ 302.534278][T10425] FAULT_INJECTION: forcing a failure. [ 302.534278][T10425] name failslab, interval 1, probability 0, space 0, times 0 [ 302.567470][T10425] CPU: 1 UID: 0 PID: 10425 Comm: syz.1.1178 Not tainted 6.13.0-rc7-syzkaller #0 [ 302.576601][T10425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 302.586695][T10425] Call Trace: [ 302.590007][T10425] [ 302.592970][T10425] dump_stack_lvl+0x16c/0x1f0 [ 302.597700][T10425] should_fail_ex+0x497/0x5b0 [ 302.602423][T10425] ? fs_reclaim_acquire+0xae/0x150 [ 302.607580][T10425] should_failslab+0xc2/0x120 [ 302.612310][T10425] __kmalloc_noprof+0xce/0x4f0 [ 302.617133][T10425] ? d_absolute_path+0x137/0x1b0 [ 302.622211][T10425] ? tomoyo_encode2+0x100/0x3e0 [ 302.627104][T10425] tomoyo_encode2+0x100/0x3e0 [ 302.631830][T10425] tomoyo_realpath_from_path+0x1a7/0x710 [ 302.637518][T10425] tomoyo_path_number_perm+0x248/0x5b0 [ 302.643029][T10425] ? tomoyo_path_number_perm+0x235/0x5b0 [ 302.648728][T10425] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 302.654798][T10425] ? __pfx_lock_release+0x10/0x10 [ 302.659865][T10425] ? trace_lock_acquire+0x14e/0x1f0 [ 302.665122][T10425] ? lock_acquire+0x2f/0xb0 [ 302.669674][T10425] ? __fget_files+0x40/0x3a0 [ 302.674380][T10425] ? __fget_files+0x206/0x3a0 [ 302.679102][T10425] security_file_ioctl+0x9b/0x240 [ 302.684184][T10425] __x64_sys_ioctl+0xb7/0x200 [ 302.688908][T10425] do_syscall_64+0xcd/0x250 [ 302.693469][T10425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.699414][T10425] RIP: 0033:0x7fe41f785d29 [ 302.703874][T10425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.723619][T10425] RSP: 002b:00007fe4204e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.731454][T10424] FAULT_INJECTION: forcing a failure. [ 302.731454][T10424] name failslab, interval 1, probability 0, space 0, times 0 [ 302.732073][T10425] RAX: ffffffffffffffda RBX: 00007fe41f975fa0 RCX: 00007fe41f785d29 [ 302.752653][T10425] RDX: 0000000000000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 302.760659][T10425] RBP: 00007fe4204e0090 R08: 0000000000000000 R09: 0000000000000000 [ 302.768665][T10425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.776674][T10425] R13: 0000000000000000 R14: 00007fe41f975fa0 R15: 00007ffc8469dd28 [ 302.784690][T10425] [ 302.787821][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.794931][T10424] CPU: 0 UID: 0 PID: 10424 Comm: syz.3.1179 Not tainted 6.13.0-rc7-syzkaller #0 [ 302.804016][T10424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 302.814081][T10424] Call Trace: [ 302.817366][T10424] [ 302.820300][T10424] dump_stack_lvl+0x16c/0x1f0 [ 302.824999][T10424] should_fail_ex+0x497/0x5b0 [ 302.829685][T10424] ? fs_reclaim_acquire+0xae/0x150 [ 302.834807][T10424] should_failslab+0xc2/0x120 [ 302.839498][T10424] __kmalloc_cache_node_noprof+0x6f/0x3f0 [ 302.845233][T10424] ? __get_vm_area_node+0x101/0x2f0 [ 302.850448][T10424] __get_vm_area_node+0x101/0x2f0 [ 302.855485][T10424] __vmalloc_node_range_noprof+0x26a/0x1530 [ 302.861396][T10424] ? __do_sys_listmount+0x1be/0xe70 [ 302.866625][T10424] ? find_held_lock+0x2d/0x110 [ 302.871403][T10424] ? __do_sys_listmount+0x1be/0xe70 [ 302.876611][T10424] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 302.882950][T10424] ? rcu_is_watching+0x12/0xc0 [ 302.887723][T10424] ? trace_kmalloc+0x2d/0xd0 [ 302.892341][T10424] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 302.898079][T10424] ? __do_sys_listmount+0x1be/0xe70 [ 302.903290][T10424] __kvmalloc_node_noprof+0x14f/0x1a0 [ 302.908672][T10424] ? __do_sys_listmount+0x1be/0xe70 [ 302.913876][T10424] __do_sys_listmount+0x1be/0xe70 [ 302.918938][T10424] ? __pfx___do_sys_listmount+0x10/0x10 [ 302.924507][T10424] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 302.930780][T10424] do_syscall_64+0xcd/0x250 [ 302.935309][T10424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.941217][T10424] RIP: 0033:0x7f5004d85d29 [ 302.945633][T10424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.965699][T10424] RSP: 002b:00007f5005c1e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 302.974128][T10424] RAX: ffffffffffffffda RBX: 00007f5004f75fa0 RCX: 00007f5004d85d29 [ 302.982124][T10424] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000000020000100 [ 302.990103][T10424] RBP: 00007f5005c1e090 R08: 0000000000000000 R09: 0000000000000000 [ 302.998078][T10424] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 303.006058][T10424] R13: 0000000000000000 R14: 00007f5004f75fa0 R15: 00007ffe79920b18 [ 303.014047][T10424] [ 303.049677][T10425] ERROR: Out of memory at tomoyo_realpath_from_path. [ 303.102292][T10424] syz.3.1179: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 303.241787][T10424] CPU: 1 UID: 0 PID: 10424 Comm: syz.3.1179 Not tainted 6.13.0-rc7-syzkaller #0 [ 303.250880][T10424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 303.260978][T10424] Call Trace: [ 303.264331][T10424] [ 303.267280][T10424] dump_stack_lvl+0x16c/0x1f0 [ 303.271998][T10424] warn_alloc+0x24d/0x3a0 [ 303.276372][T10424] ? __pfx_warn_alloc+0x10/0x10 [ 303.281263][T10424] ? rcu_is_watching+0x12/0xc0 [ 303.286058][T10424] ? __kmalloc_cache_node_noprof+0x245/0x3f0 [ 303.292086][T10424] ? __kasan_kmalloc+0x8a/0xb0 [ 303.296896][T10424] ? __get_vm_area_node+0x1dc/0x2f0 [ 303.302142][T10424] __vmalloc_node_range_noprof+0xd27/0x1530 [ 303.308082][T10424] ? find_held_lock+0x2d/0x110 [ 303.312907][T10424] ? __do_sys_listmount+0x1be/0xe70 [ 303.318156][T10424] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 303.324523][T10424] ? rcu_is_watching+0x12/0xc0 [ 303.329327][T10424] ? trace_kmalloc+0x2d/0xd0 [ 303.333953][T10424] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 303.339730][T10424] ? __do_sys_listmount+0x1be/0xe70 [ 303.344967][T10424] __kvmalloc_node_noprof+0x14f/0x1a0 [ 303.350382][T10424] ? __do_sys_listmount+0x1be/0xe70 [ 303.355621][T10424] __do_sys_listmount+0x1be/0xe70 [ 303.360691][T10424] ? __pfx___do_sys_listmount+0x10/0x10 [ 303.366304][T10424] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 303.372532][T10424] do_syscall_64+0xcd/0x250 [ 303.377087][T10424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.383019][T10424] RIP: 0033:0x7f5004d85d29 [ 303.387454][T10424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.407184][T10424] RSP: 002b:00007f5005c1e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 303.415645][T10424] RAX: ffffffffffffffda RBX: 00007f5004f75fa0 RCX: 00007f5004d85d29 [ 303.423646][T10424] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000000020000100 [ 303.431740][T10424] RBP: 00007f5005c1e090 R08: 0000000000000000 R09: 0000000000000000 [ 303.439740][T10424] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 303.447737][T10424] R13: 0000000000000000 R14: 00007f5004f75fa0 R15: 00007ffe79920b18 [ 303.455757][T10424] [ 303.458925][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.483262][T10424] Mem-Info: [ 303.487852][T10424] active_anon:34438 inactive_anon:0 isolated_anon:0 [ 303.487852][T10424] active_file:5293 inactive_file:51775 isolated_file:0 [ 303.487852][T10424] unevictable:768 dirty:760 writeback:0 [ 303.487852][T10424] slab_reclaimable:10934 slab_unreclaimable:98058 [ 303.487852][T10424] mapped:35458 shmem:28116 pagetables:800 [ 303.487852][T10424] sec_pagetables:0 bounce:0 [ 303.487852][T10424] kernel_misc_reclaimable:0 [ 303.487852][T10424] free:1303499 free_pcp:2935 free_cma:0 [ 303.615562][T10424] Node 0 active_anon:129152kB inactive_anon:0kB active_file:21172kB inactive_file:207092kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121532kB dirty:3040kB writeback:0kB shmem:103228kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10816kB pagetables:3100kB sec_pagetables:0kB all_unreclaimable? no [ 303.728304][T10424] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 303.780767][T10424] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 303.823772][T10424] lowmem_reserve[]: 0 2465 2466 0 0 [ 303.829103][T10424] Node 0 DMA32 free:1309724kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:124212kB inactive_anon:0kB active_file:21172kB inactive_file:206272kB unevictable:1536kB writepending:3040kB present:3129332kB managed:2551332kB mlocked:0kB bounce:0kB free_pcp:3908kB local_pcp:1328kB free_cma:0kB [ 303.900653][T10424] lowmem_reserve[]: 0 0 0 0 0 [ 303.905450][T10424] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 303.971182][T10424] lowmem_reserve[]: 0 0 0 0 0 [ 303.975985][T10424] Node 1 Normal free:3909708kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 304.070617][T10424] lowmem_reserve[]: 0 0 0 0 0 [ 304.075491][T10424] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 304.100614][T10424] Node 0 DMA32: 1703*4kB (UME) 1210*8kB (UME) 1058*16kB (UME) 690*32kB (UME) 280*64kB (UME) 144*128kB (UME) 54*256kB (UME) 97*512kB (UME) 68*1024kB (UME) 14*2048kB (UME) 259*4096kB (M) = 1314508kB [ 304.171353][T10424] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 304.189105][T10424] Node 1 Normal: 171*4kB (UME) 64*8kB (UME) 28*16kB (UME) 175*32kB (UME) 96*64kB (UME) 26*128kB (UME) 11*256kB (UME) 8*512kB (UME) 5*1024kB (UME) 1*2048kB (E) 947*4096kB (UM) = 3909708kB [ 304.242507][T10424] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 304.262529][T10424] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 304.290970][T10424] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 304.330697][T10424] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 304.355779][T10424] 74975 total pagecache pages [ 304.360519][T10424] 0 pages in swap cache [ 304.387148][T10424] Free swap = 124208kB [ 304.404735][T10424] Total swap = 124996kB [ 304.412769][T10424] 2097051 pages RAM [ 304.429038][T10424] 0 pages HighMem/MovableOnly [ 304.449278][T10424] 427368 pages reserved [ 304.460675][T10424] 0 pages cma reserved [ 305.131099][T10467] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1185'. [ 305.550022][T10485] FAULT_INJECTION: forcing a failure. [ 305.550022][T10485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.604397][T10485] CPU: 0 UID: 0 PID: 10485 Comm: syz.2.1189 Not tainted 6.13.0-rc7-syzkaller #0 [ 305.613495][T10485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 305.623586][T10485] Call Trace: [ 305.626894][T10485] [ 305.629846][T10485] dump_stack_lvl+0x16c/0x1f0 [ 305.634570][T10485] should_fail_ex+0x497/0x5b0 [ 305.639291][T10485] _copy_to_iter+0x4a5/0x1400 [ 305.644014][T10485] ? __pfx__copy_to_iter+0x10/0x10 [ 305.649166][T10485] ? __virt_addr_valid+0x1a4/0x590 [ 305.654320][T10485] ? __virt_addr_valid+0x5e/0x590 [ 305.659383][T10485] ? __phys_addr_symbol+0x30/0x80 [ 305.664450][T10485] ? __check_object_size+0x488/0x710 [ 305.669783][T10485] seq_read_iter+0xd00/0x12b0 [ 305.674511][T10485] seq_read+0x39f/0x4e0 [ 305.678788][T10485] ? __pfx_seq_read+0x10/0x10 [ 305.683527][T10485] ? __pfx_seq_read+0x10/0x10 [ 305.688237][T10485] proc_reg_read+0x23d/0x330 [ 305.692872][T10485] ? __pfx_proc_reg_read+0x10/0x10 [ 305.698061][T10485] vfs_read+0x1df/0xbe0 [ 305.702343][T10485] ? __fget_files+0x1fc/0x3a0 [ 305.707068][T10485] ? __pfx___mutex_lock+0x10/0x10 [ 305.712160][T10485] ? __pfx_vfs_read+0x10/0x10 [ 305.716900][T10485] ? __fget_files+0x206/0x3a0 [ 305.721632][T10485] ksys_read+0x12b/0x250 [ 305.725917][T10485] ? __pfx_ksys_read+0x10/0x10 [ 305.730728][T10485] do_syscall_64+0xcd/0x250 [ 305.735276][T10485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.741218][T10485] RIP: 0033:0x7fbe7a585d29 [ 305.745665][T10485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.765314][T10485] RSP: 002b:00007fbe7b3db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 305.773776][T10485] RAX: ffffffffffffffda RBX: 00007fbe7a776080 RCX: 00007fbe7a585d29 [ 305.781788][T10485] RDX: 0000000000400000 RSI: 0000000000000000 RDI: 0000000000000003 [ 305.789801][T10485] RBP: 00007fbe7b3db090 R08: 0000000000000000 R09: 0000000000000000 [ 305.797806][T10485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.805820][T10485] R13: 0000000000000000 R14: 00007fbe7a776080 R15: 00007fff71ee1cf8 [ 305.813854][T10485] [ 306.828295][T10494] sp0: Synchronizing with TNC [ 308.092173][T10503] sp0: Synchronizing with TNC [ 310.151378][T10549] ======================================================= [ 310.151378][T10549] WARNING: The mand mount option has been deprecated and [ 310.151378][T10549] and is ignored by this kernel. Remove the mand [ 310.151378][T10549] option from the mount to silence this warning. [ 310.151378][T10549] ======================================================= [ 310.186358][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.442450][T10561] futex_wake_op: syz.3.1206 tries to shift op by 64; fix this program [ 312.781146][T10585] FAULT_INJECTION: forcing a failure. [ 312.781146][T10585] name failslab, interval 1, probability 0, space 0, times 0 [ 312.800699][T10585] CPU: 1 UID: 0 PID: 10585 Comm: syz.0.1211 Not tainted 6.13.0-rc7-syzkaller #0 [ 312.809792][T10585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 312.819886][T10585] Call Trace: [ 312.823201][T10585] [ 312.826154][T10585] dump_stack_lvl+0x16c/0x1f0 [ 312.830886][T10585] should_fail_ex+0x497/0x5b0 [ 312.835610][T10585] ? fs_reclaim_acquire+0xae/0x150 [ 312.840769][T10585] should_failslab+0xc2/0x120 [ 312.845507][T10585] __kmalloc_cache_noprof+0x68/0x420 [ 312.850838][T10585] ? __pfx___lock_acquire+0x10/0x10 [ 312.856076][T10585] io_uring_alloc_task_context+0x9e/0x690 [ 312.861843][T10585] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 312.868212][T10585] ? find_held_lock+0x2d/0x110 [ 312.873017][T10585] ? __fget_files+0x1fc/0x3a0 [ 312.877735][T10585] __io_uring_add_tctx_node+0x2e0/0x500 [ 312.883325][T10585] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 312.889617][T10585] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 312.896166][T10585] __do_sys_io_uring_enter+0x1214/0x1620 [ 312.901865][T10585] ? __fget_files+0x206/0x3a0 [ 312.906581][T10585] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 312.912608][T10585] ? fput+0x67/0x440 [ 312.916550][T10585] ? ksys_write+0x1ba/0x250 [ 312.921091][T10585] ? __pfx_ksys_write+0x10/0x10 [ 312.925987][T10585] do_syscall_64+0xcd/0x250 [ 312.930529][T10585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.936458][T10585] RIP: 0033:0x7fe44db85d29 [ 312.940899][T10585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.960548][T10585] RSP: 002b:00007fe44e998038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 312.968999][T10585] RAX: ffffffffffffffda RBX: 00007fe44dd76080 RCX: 00007fe44db85d29 [ 312.977014][T10585] RDX: 0000000082400004 RSI: 0000000000000005 RDI: 0000000000000003 [ 312.985026][T10585] RBP: 00007fe44e998090 R08: 0000000000000000 R09: 000000000000000d [ 312.993032][T10585] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 313.001041][T10585] R13: 0000000000000001 R14: 00007fe44dd76080 R15: 00007ffdcb2214e8 [ 313.009071][T10585] [ 314.335328][T10610] futex_wake_op: syz.3.1218 tries to shift op by 64; fix this program [ 314.702527][T10613] sp0: Synchronizing with TNC [ 315.146380][T10619] sp0: Synchronizing with TNC [ 315.277435][T10617] sp0: Synchronizing with TNC [ 315.389867][T10633] netlink: 'syz.1.1225': attribute type 27 has an invalid length. [ 315.422920][T10633] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1225'. [ 315.518533][T10639] FAULT_INJECTION: forcing a failure. [ 315.518533][T10639] name failslab, interval 1, probability 0, space 0, times 0 [ 315.540687][T10639] CPU: 0 UID: 0 PID: 10639 Comm: syz.0.1227 Not tainted 6.13.0-rc7-syzkaller #0 [ 315.549785][T10639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 315.559967][T10639] Call Trace: [ 315.563283][T10639] [ 315.566246][T10639] dump_stack_lvl+0x16c/0x1f0 [ 315.571004][T10639] should_fail_ex+0x497/0x5b0 [ 315.575721][T10639] ? fs_reclaim_acquire+0xae/0x150 [ 315.581048][T10639] should_failslab+0xc2/0x120 [ 315.585773][T10639] __kmalloc_noprof+0xce/0x4f0 [ 315.590582][T10639] ? find_held_lock+0x2d/0x110 [ 315.595382][T10639] ? iovec_from_user.part.0+0xf3/0x130 [ 315.600894][T10639] iovec_from_user.part.0+0xf3/0x130 [ 315.606318][T10639] __import_iovec+0xd6/0x6d0 [ 315.610964][T10639] import_iovec+0x108/0x140 [ 315.615520][T10639] copy_msghdr_from_user+0xfa/0x160 [ 315.620763][T10639] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 315.626611][T10639] ? __lock_acquire+0xcc5/0x3c40 [ 315.631600][T10639] ___sys_sendmsg+0xff/0x1e0 [ 315.636247][T10639] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.641519][T10639] ? trace_lock_acquire+0x14e/0x1f0 [ 315.646788][T10639] __sys_sendmmsg+0x201/0x420 [ 315.651520][T10639] ? __pfx___sys_sendmmsg+0x10/0x10 [ 315.656782][T10639] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 315.662826][T10639] ? fput+0x67/0x440 [ 315.666769][T10639] ? ksys_write+0x1ba/0x250 [ 315.671308][T10639] ? __pfx_ksys_write+0x10/0x10 [ 315.676214][T10639] __x64_sys_sendmmsg+0x9c/0x100 [ 315.681208][T10639] ? lockdep_hardirqs_on+0x7c/0x110 [ 315.686452][T10639] do_syscall_64+0xcd/0x250 [ 315.691004][T10639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.696943][T10639] RIP: 0033:0x7fe44db85d29 [ 315.701392][T10639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.721046][T10639] RSP: 002b:00007fe44e9b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 315.729507][T10639] RAX: ffffffffffffffda RBX: 00007fe44dd75fa0 RCX: 00007fe44db85d29 [ 315.737605][T10639] RDX: 00000000000009a6 RSI: 0000000020000000 RDI: 0000000000000003 [ 315.745607][T10639] RBP: 00007fe44e9b9090 R08: 0000000000000000 R09: 0000000000000000 [ 315.753614][T10639] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000001 [ 315.761700][T10639] R13: 0000000000000000 R14: 00007fe44dd75fa0 R15: 00007ffdcb2214e8 [ 315.769954][T10639] [ 315.960679][T10646] Process accounting resumed [ 316.019345][T10648] futex_wake_op: syz.0.1230 tries to shift op by 64; fix this program [ 316.470538][ T29] audit: type=1800 audit(8277292084.900:6): pid=10656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1233" name="features" dev="configfs" ino=25567 res=0 errno=0 [ 317.509827][T10674] sp0: Synchronizing with TNC [ 317.563732][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.570405][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.495677][T10698] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1243'. [ 318.802148][T10696] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 318.815698][T10696] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 318.834532][T10696] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 318.853828][T10696] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 319.354107][T10723] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.1249'. [ 319.404690][T10723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1249'. [ 319.576226][T10718] sp0: Synchronizing with TNC [ 320.225765][T10742] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 320.280903][T10742] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 320.530510][T10724] sp0: Synchronizing with TNC [ 320.700956][ T5146] Bluetooth: hci1: command 0x0c1a tx timeout [ 320.766380][T10749] svc: failed to register nfsdv3 RPC service (errno 111). [ 320.841455][ T5146] Bluetooth: hci3: command 0x0c1a tx timeout [ 320.847544][ T5146] Bluetooth: hci0: command 0x0c1a tx timeout [ 320.869944][T10749] svc: failed to register nfsaclv3 RPC service (errno 111). [ 320.920681][ T5146] Bluetooth: hci2: command 0x0c1a tx timeout [ 323.790167][T10770] Process accounting resumed [ 323.873483][T10816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1263'. [ 324.179038][T10823] netlink: 346 bytes leftover after parsing attributes in process `syz.0.1274'. [ 326.002224][T10843] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1270'. [ 326.912640][T10861] netlink: 346 bytes leftover after parsing attributes in process `syz.2.1276'. [ 329.290226][T10899] futex_wake_op: syz.1.1284 tries to shift op by 64; fix this program [ 329.349288][T10902] netlink: 'syz.3.1285': attribute type 11 has an invalid length. [ 329.369154][T10902] netlink: 'syz.3.1285': attribute type 11 has an invalid length. [ 329.380871][T10902] netlink: 'syz.3.1285': attribute type 11 has an invalid length. [ 329.542955][T10905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1286'. [ 329.662975][T10907] sp0: Synchronizing with TNC [ 329.983920][T10922] futex_wake_op: syz.1.1291 tries to shift op by 64; fix this program [ 331.975182][T10946] netlink: 'syz.2.1298': attribute type 11 has an invalid length. [ 331.991014][T10946] netlink: 'syz.2.1298': attribute type 11 has an invalid length. [ 332.012006][T10946] netlink: 'syz.2.1298': attribute type 11 has an invalid length. [ 333.093000][T10966] futex_wake_op: syz.2.1303 tries to shift op by 64; fix this program [ 333.580852][T10970] FAULT_INJECTION: forcing a failure. [ 333.580852][T10970] name failslab, interval 1, probability 0, space 0, times 0 [ 333.594016][T10970] CPU: 1 UID: 0 PID: 10970 Comm: syz.2.1304 Not tainted 6.13.0-rc7-syzkaller #0 [ 333.603082][T10970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 333.613171][T10970] Call Trace: [ 333.616471][T10970] [ 333.619424][T10970] dump_stack_lvl+0x16c/0x1f0 [ 333.624141][T10970] should_fail_ex+0x497/0x5b0 [ 333.628859][T10970] should_failslab+0xc2/0x120 [ 333.633580][T10970] __kmalloc_noprof+0xce/0x4f0 [ 333.638404][T10970] ? io_cqring_event_overflow+0xcb/0x6f0 [ 333.644073][T10970] io_cqring_event_overflow+0xcb/0x6f0 [ 333.649570][T10970] __io_submit_flush_completions+0x1066/0x1fd0 [ 333.655767][T10970] ? io_issue_sqe+0x1d3/0x1360 [ 333.660573][T10970] io_submit_sqes+0xa13/0x25f0 [ 333.665398][T10970] __do_sys_io_uring_enter+0xd43/0x1620 [ 333.671001][T10970] ? __fget_files+0x206/0x3a0 [ 333.675718][T10970] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 333.681742][T10970] ? fput+0x67/0x440 [ 333.685680][T10970] ? ksys_write+0x1ba/0x250 [ 333.690216][T10970] ? __pfx_ksys_write+0x10/0x10 [ 333.695118][T10970] do_syscall_64+0xcd/0x250 [ 333.699665][T10970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.705673][T10970] RIP: 0033:0x7fbe7a585d29 [ 333.710112][T10970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.729757][T10970] RSP: 002b:00007fbe7b3fc038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 333.738224][T10970] RAX: ffffffffffffffda RBX: 00007fbe7a775fa0 RCX: 00007fbe7a585d29 [ 333.746240][T10970] RDX: 0000000082400004 RSI: 0000000000000005 RDI: 0000000000000003 [ 333.754249][T10970] RBP: 00007fbe7b3fc090 R08: 0000000000000000 R09: 000000000000000d [ 333.762427][T10970] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 333.770433][T10970] R13: 0000000000000000 R14: 00007fbe7a775fa0 R15: 00007fff71ee1cf8 [ 333.778456][T10970] syzkaller syzkaller login: [ 334.082553][T10980] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1307'. [ 334.372827][T10983] FAULT_INJECTION: forcing a failure. [ 334.372827][T10983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.411597][T10983] CPU: 1 UID: 0 PID: 10983 Comm: syz.0.1308 Not tainted 6.13.0-rc7-syzkaller #0 [ 334.420694][T10983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 334.430781][T10983] Call Trace: [ 334.434082][T10983] [ 334.437038][T10983] dump_stack_lvl+0x16c/0x1f0 [ 334.441757][T10983] should_fail_ex+0x497/0x5b0 [ 334.446482][T10983] _copy_to_user+0x32/0xd0 [ 334.450941][T10983] simple_read_from_buffer+0xd0/0x160 [ 334.456365][T10983] proc_fail_nth_read+0x198/0x270 [ 334.461434][T10983] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 334.467033][T10983] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 334.472617][T10983] vfs_read+0x1df/0xbe0 [ 334.476805][T10983] ? __fget_files+0x1fc/0x3a0 [ 334.481516][T10983] ? __pfx___mutex_lock+0x10/0x10 [ 334.486586][T10983] ? __pfx_vfs_read+0x10/0x10 [ 334.491310][T10983] ? __fget_files+0x206/0x3a0 [ 334.496039][T10983] ksys_read+0x12b/0x250 [ 334.500317][T10983] ? __pfx_ksys_read+0x10/0x10 [ 334.505146][T10983] do_syscall_64+0xcd/0x250 [ 334.509697][T10983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.515633][T10983] RIP: 0033:0x7fe44db8473c [ 334.520091][T10983] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 334.539742][T10983] RSP: 002b:00007fe44e9b9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 334.548207][T10983] RAX: ffffffffffffffda RBX: 00007fe44dd75fa0 RCX: 00007fe44db8473c [ 334.556213][T10983] RDX: 000000000000000f RSI: 00007fe44e9b90a0 RDI: 0000000000000005 [ 334.564216][T10983] RBP: 00007fe44e9b9090 R08: 0000000000000000 R09: 0000000000000000 [ 334.572222][T10983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.580228][T10983] R13: 0000000000000000 R14: 00007fe44dd75fa0 R15: 00007ffdcb2214e8 [ 334.588253][T10983] [ 334.591370][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.313891][T10954] kexec: Could not allocate control_code_buffer [ 336.236019][T11017] sp0: Synchronizing with TNC [ 337.180426][T11033] FAULT_INJECTION: forcing a failure. [ 337.180426][T11033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.253356][T11033] CPU: 1 UID: 0 PID: 11033 Comm: syz.0.1320 Not tainted 6.13.0-rc7-syzkaller #0 [ 337.262458][T11033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 337.272548][T11033] Call Trace: [ 337.275848][T11033] [ 337.278804][T11033] dump_stack_lvl+0x16c/0x1f0 [ 337.283522][T11033] should_fail_ex+0x497/0x5b0 [ 337.288248][T11033] _copy_from_iter+0x29b/0x1400 [ 337.293151][T11033] ? trace_lock_acquire+0x14e/0x1f0 [ 337.298483][T11033] ? __alloc_skb+0x200/0x380 [ 337.303122][T11033] ? __pfx__copy_from_iter+0x10/0x10 [ 337.308449][T11033] ? __virt_addr_valid+0x1a4/0x590 [ 337.313601][T11033] ? __virt_addr_valid+0x5e/0x590 [ 337.318650][T11033] ? __phys_addr_symbol+0x30/0x80 [ 337.323689][T11033] ? __check_object_size+0x488/0x710 [ 337.328990][T11033] netlink_sendmsg+0x813/0xd70 [ 337.333773][T11033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.339076][T11033] ____sys_sendmsg+0x9ae/0xb40 [ 337.343848][T11033] ? copy_msghdr_from_user+0x10b/0x160 [ 337.349327][T11033] ? __pfx_____sys_sendmsg+0x10/0x10 [ 337.354633][T11033] ___sys_sendmsg+0x135/0x1e0 [ 337.359332][T11033] ? __pfx____sys_sendmsg+0x10/0x10 [ 337.364564][T11033] ? __pfx_lock_release+0x10/0x10 [ 337.369766][T11033] ? trace_lock_acquire+0x14e/0x1f0 [ 337.374984][T11033] ? __fget_files+0x206/0x3a0 [ 337.379677][T11033] __sys_sendmsg+0x16e/0x220 [ 337.384306][T11033] ? __pfx___sys_sendmsg+0x10/0x10 [ 337.389461][T11033] do_syscall_64+0xcd/0x250 [ 337.393992][T11033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.399908][T11033] RIP: 0033:0x7fe44db85d29 [ 337.404337][T11033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.423965][T11033] RSP: 002b:00007fe44e998038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.432388][T11033] RAX: ffffffffffffffda RBX: 00007fe44dd76080 RCX: 00007fe44db85d29 [ 337.440363][T11033] RDX: 0000000000000800 RSI: 0000000020000100 RDI: 0000000000000003 [ 337.448353][T11033] RBP: 00007fe44e998090 R08: 0000000000000000 R09: 0000000000000000 [ 337.456349][T11033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.464764][T11033] R13: 0000000000000000 R14: 00007fe44dd76080 R15: 00007ffdcb2214e8 [ 337.472751][T11033] [ 337.475789][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.717050][T11040] futex_wake_op: syz.0.1323 tries to shift op by 64; fix this program [ 338.981603][T11051] sp0: Synchronizing with TNC [ 339.456552][T11068] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1329'. [ 342.506139][T11109] sp0: Synchronizing with TNC [ 347.446762][T11174] sp0: Synchronizing with TNC [ 348.869013][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 348.879444][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 348.889785][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 348.898113][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 348.906753][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 348.914533][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 349.065532][T11199] FAULT_INJECTION: forcing a failure. [ 349.065532][T11199] name failslab, interval 1, probability 0, space 0, times 0 [ 349.078451][T11199] CPU: 1 UID: 0 PID: 11199 Comm: syz.1.1364 Not tainted 6.13.0-rc7-syzkaller #0 [ 349.087523][T11199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 349.097613][T11199] Call Trace: [ 349.100917][T11199] [ 349.103877][T11199] dump_stack_lvl+0x16c/0x1f0 [ 349.108604][T11199] should_fail_ex+0x497/0x5b0 [ 349.113324][T11199] ? fs_reclaim_acquire+0xae/0x150 [ 349.118483][T11199] should_failslab+0xc2/0x120 [ 349.123211][T11199] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 349.128611][T11199] ? security_file_alloc+0x34/0x2b0 [ 349.133823][T11199] security_file_alloc+0x34/0x2b0 [ 349.138855][T11199] init_file+0x93/0x480 [ 349.143025][T11199] alloc_empty_file+0x91/0x1e0 [ 349.147801][T11199] path_openat+0xe1/0x2d60 [ 349.152223][T11199] ? hlock_class+0x4e/0x130 [ 349.156736][T11199] ? __lock_acquire+0x15a9/0x3c40 [ 349.161780][T11199] ? __pfx_path_openat+0x10/0x10 [ 349.166727][T11199] ? __pfx___lock_acquire+0x10/0x10 [ 349.171934][T11199] ? lock_acquire.part.0+0x11b/0x380 [ 349.177221][T11199] ? find_held_lock+0x2d/0x110 [ 349.181998][T11199] do_filp_open+0x20c/0x470 [ 349.186512][T11199] ? __pfx_do_filp_open+0x10/0x10 [ 349.191545][T11199] ? find_held_lock+0x2d/0x110 [ 349.196334][T11199] ? alloc_fd+0x41f/0x760 [ 349.200677][T11199] do_sys_openat2+0x17a/0x1e0 [ 349.205368][T11199] ? __pfx_do_sys_openat2+0x10/0x10 [ 349.210582][T11199] ? __fget_files+0x206/0x3a0 [ 349.215273][T11199] __x64_sys_openat+0x175/0x210 [ 349.220141][T11199] ? __pfx___x64_sys_openat+0x10/0x10 [ 349.225532][T11199] ? ksys_write+0x1ba/0x250 [ 349.230087][T11199] do_syscall_64+0xcd/0x250 [ 349.234607][T11199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.240514][T11199] RIP: 0033:0x7fe41f785d29 [ 349.244935][T11199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.264551][T11199] RSP: 002b:00007fe4204e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 349.272970][T11199] RAX: ffffffffffffffda RBX: 00007fe41f975fa0 RCX: 00007fe41f785d29 [ 349.280946][T11199] RDX: 00000000000a0201 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 349.288921][T11199] RBP: 00007fe4204e0090 R08: 0000000000000000 R09: 0000000000000000 [ 349.296894][T11199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.304866][T11199] R13: 0000000000000000 R14: 00007fe41f975fa0 R15: 00007ffc8469dd28 [ 349.312862][T11199] [ 349.398987][T11196] chnl_net:caif_netlink_parms(): no params data found [ 349.572897][T11196] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.590395][T11196] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.597837][T11196] bridge_slave_0: entered allmulticast mode [ 349.605384][T11196] bridge_slave_0: entered promiscuous mode [ 349.619377][T11196] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.621564][T11208] FAULT_INJECTION: forcing a failure. [ 349.621564][T11208] name failslab, interval 1, probability 0, space 0, times 0 [ 349.626754][T11196] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.668616][T11196] bridge_slave_1: entered allmulticast mode [ 349.676174][T11196] bridge_slave_1: entered promiscuous mode [ 349.699584][T11208] CPU: 0 UID: 0 PID: 11208 Comm: syz.1.1365 Not tainted 6.13.0-rc7-syzkaller #0 [ 349.708673][T11208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 349.718768][T11208] Call Trace: [ 349.722076][T11208] [ 349.725033][T11208] dump_stack_lvl+0x16c/0x1f0 [ 349.729761][T11208] should_fail_ex+0x497/0x5b0 [ 349.734480][T11208] ? fs_reclaim_acquire+0xae/0x150 [ 349.739639][T11208] should_failslab+0xc2/0x120 [ 349.744362][T11208] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 349.749781][T11208] ? security_file_alloc+0x34/0x2b0 [ 349.755018][T11208] security_file_alloc+0x34/0x2b0 [ 349.760079][T11208] init_file+0x93/0x480 [ 349.764279][T11208] alloc_empty_file+0x91/0x1e0 [ 349.769088][T11208] path_openat+0xe1/0x2d60 [ 349.773543][T11208] ? hlock_class+0x4e/0x130 [ 349.778078][T11208] ? __lock_acquire+0x15a9/0x3c40 [ 349.783144][T11208] ? __pfx_path_openat+0x10/0x10 [ 349.788122][T11208] ? __pfx___lock_acquire+0x10/0x10 [ 349.793353][T11208] ? lock_acquire.part.0+0x11b/0x380 [ 349.798672][T11208] ? find_held_lock+0x2d/0x110 [ 349.803486][T11208] do_filp_open+0x20c/0x470 [ 349.808029][T11208] ? __pfx_do_filp_open+0x10/0x10 [ 349.813086][T11208] ? find_held_lock+0x2d/0x110 [ 349.817910][T11208] ? alloc_fd+0x41f/0x760 [ 349.822283][T11208] do_sys_openat2+0x17a/0x1e0 [ 349.827003][T11208] ? __pfx_do_sys_openat2+0x10/0x10 [ 349.832240][T11208] ? __fget_files+0x206/0x3a0 [ 349.836949][T11208] __x64_sys_openat+0x175/0x210 [ 349.841839][T11208] ? __pfx___x64_sys_openat+0x10/0x10 [ 349.847248][T11208] ? ksys_write+0x1ba/0x250 [ 349.851800][T11208] do_syscall_64+0xcd/0x250 [ 349.856342][T11208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.862270][T11208] RIP: 0033:0x7fe41f785d29 [ 349.866714][T11208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.886352][T11208] RSP: 002b:00007fe41d5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 349.894808][T11208] RAX: ffffffffffffffda RBX: 00007fe41f976080 RCX: 00007fe41f785d29 [ 349.902813][T11208] RDX: 0000000000000400 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 349.910812][T11208] RBP: 00007fe41d5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 349.918815][T11208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.926813][T11208] R13: 0000000000000000 R14: 00007fe41f976080 R15: 00007ffc8469dd28 [ 349.934830][T11208] [ 350.073609][T11196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.093312][T11196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.204945][T11196] team0: Port device team_slave_0 added [ 350.247815][T11196] team0: Port device team_slave_1 added [ 350.380327][T11196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.418182][T11196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.510690][T11196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.568559][T11196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.575948][T11196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.643031][T11196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.934006][T11196] hsr_slave_0: entered promiscuous mode [ 350.944100][T11196] hsr_slave_1: entered promiscuous mode [ 350.955448][T11196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.975792][T11196] Cannot create hsr debugfs directory [ 351.000822][ T5146] Bluetooth: hci0: command tx timeout [ 351.215062][T11196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 351.225726][T11196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 351.236994][T11196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 351.263512][T11196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 351.379543][T11196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.424978][T11196] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.445252][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.452437][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.487224][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.494414][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.933365][T11196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.415803][T11248] futex_wake_op: syz.1.1371 tries to shift op by 64; fix this program [ 352.489899][T11196] veth0_vlan: entered promiscuous mode [ 352.584034][T11196] veth1_vlan: entered promiscuous mode [ 352.662579][T11196] veth0_macvtap: entered promiscuous mode [ 352.751620][T11196] veth1_macvtap: entered promiscuous mode [ 352.800146][T11196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.848960][T11196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.876875][T11196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.893341][T11196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.906982][T11196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.921280][T11196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.944831][T11196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.957078][T11196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.966866][T11196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.979752][T11196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.080936][ T5146] Bluetooth: hci0: command tx timeout [ 353.192035][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.207322][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.270791][ T1311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.278675][ T1311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.561607][T11286] syz.1.1380 uses obsolete (PF_INET,SOCK_PACKET) [ 354.568633][T11284] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1379'. [ 355.171602][ T5146] Bluetooth: hci0: command tx timeout [ 355.514161][T11317] FAULT_INJECTION: forcing a failure. [ 355.514161][T11317] name failslab, interval 1, probability 0, space 0, times 0 [ 355.526946][T11317] CPU: 0 UID: 0 PID: 11317 Comm: syz.0.1387 Not tainted 6.13.0-rc7-syzkaller #0 [ 355.536020][T11317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 355.546111][T11317] Call Trace: [ 355.549516][T11317] [ 355.552477][T11317] dump_stack_lvl+0x16c/0x1f0 [ 355.557196][T11317] should_fail_ex+0x497/0x5b0 [ 355.561906][T11317] should_failslab+0xc2/0x120 [ 355.566640][T11317] __kmalloc_noprof+0xce/0x4f0 [ 355.571470][T11317] ? io_cqring_event_overflow+0xcb/0x6f0 [ 355.577162][T11317] io_cqring_event_overflow+0xcb/0x6f0 [ 355.582678][T11317] __io_submit_flush_completions+0x1066/0x1fd0 [ 355.588875][T11317] ? io_issue_sqe+0x1d3/0x1360 [ 355.593833][T11317] io_submit_sqes+0xa13/0x25f0 [ 355.598627][T11317] __do_sys_io_uring_enter+0xd43/0x1620 [ 355.604193][T11317] ? __fget_files+0x206/0x3a0 [ 355.608885][T11317] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 355.614881][T11317] ? fput+0x67/0x440 [ 355.618790][T11317] ? ksys_write+0x1ba/0x250 [ 355.623305][T11317] ? __pfx_ksys_write+0x10/0x10 [ 355.628171][T11317] do_syscall_64+0xcd/0x250 [ 355.632693][T11317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.638602][T11317] RIP: 0033:0x7fe44db85d29 [ 355.643027][T11317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.662645][T11317] RSP: 002b:00007fe44e9b9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 355.671066][T11317] RAX: ffffffffffffffda RBX: 00007fe44dd75fa0 RCX: 00007fe44db85d29 [ 355.679050][T11317] RDX: 0000000082400004 RSI: 0000000000000005 RDI: 0000000000000003 [ 355.687027][T11317] RBP: 00007fe44e9b9090 R08: 0000000000000000 R09: 000000000000000d [ 355.695004][T11317] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 355.702982][T11317] R13: 0000000000000000 R14: 00007fe44dd75fa0 R15: 00007ffdcb2214e8 [ 355.710973][T11317] [ 355.714009][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.826753][T11347] FAULT_INJECTION: forcing a failure. [ 356.826753][T11347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.840141][T11347] CPU: 1 UID: 0 PID: 11347 Comm: syz.1.1395 Not tainted 6.13.0-rc7-syzkaller #0 [ 356.849200][T11347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 356.859985][T11347] Call Trace: [ 356.863302][T11347] [ 356.866261][T11347] dump_stack_lvl+0x16c/0x1f0 [ 356.870980][T11347] should_fail_ex+0x497/0x5b0 [ 356.875724][T11347] _copy_from_user+0x2e/0xd0 [ 356.880365][T11347] copy_msghdr_from_user+0x99/0x160 [ 356.885605][T11347] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 356.891455][T11347] ? __lock_acquire+0xcc5/0x3c40 [ 356.896443][T11347] ___sys_sendmsg+0xff/0x1e0 [ 356.901080][T11347] ? __pfx____sys_sendmsg+0x10/0x10 [ 356.906336][T11347] ? trace_lock_acquire+0x14e/0x1f0 [ 356.911597][T11347] __sys_sendmmsg+0x201/0x420 [ 356.916321][T11347] ? __pfx___sys_sendmmsg+0x10/0x10 [ 356.921576][T11347] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 356.927610][T11347] ? fput+0x67/0x440 [ 356.931557][T11347] ? ksys_write+0x1ba/0x250 [ 356.936098][T11347] ? __pfx_ksys_write+0x10/0x10 [ 356.940996][T11347] __x64_sys_sendmmsg+0x9c/0x100 [ 356.945984][T11347] ? lockdep_hardirqs_on+0x7c/0x110 [ 356.951238][T11347] do_syscall_64+0xcd/0x250 [ 356.955803][T11347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.961749][T11347] RIP: 0033:0x7fe41f785d29 [ 356.966199][T11347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.985930][T11347] RSP: 002b:00007fe41d5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 356.994390][T11347] RAX: ffffffffffffffda RBX: 00007fe41f976080 RCX: 00007fe41f785d29 [ 357.002399][T11347] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 357.010408][T11347] RBP: 00007fe41d5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 357.018419][T11347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.026520][T11347] R13: 0000000000000000 R14: 00007fe41f976080 R15: 00007ffc8469dd28 [ 357.030942][T11352] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 357.034520][T11347] [ 357.082337][T11352] svc: failed to register nfsdv3 RPC service (errno 111). [ 357.094077][T11352] svc: failed to register nfsaclv3 RPC service (errno 111). [ 357.210290][T11356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1398'. [ 357.258005][ T5146] Bluetooth: hci0: command tx timeout [ 357.506274][T11360] futex_wake_op: syz.1.1399 tries to shift op by 64; fix this program [ 357.811016][T11368] MTRR 1 not used [ 357.867645][T11367] cgroup: fork rejected by pids controller in /syz1 [ 358.177966][T11458] FAULT_INJECTION: forcing a failure. [ 358.177966][T11458] name failslab, interval 1, probability 0, space 0, times 0 [ 358.240745][T11458] CPU: 1 UID: 0 PID: 11458 Comm: syz.4.1401 Not tainted 6.13.0-rc7-syzkaller #0 [ 358.249850][T11458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 358.259944][T11458] Call Trace: [ 358.263257][T11458] [ 358.266224][T11458] dump_stack_lvl+0x16c/0x1f0 [ 358.270988][T11458] should_fail_ex+0x497/0x5b0 [ 358.275708][T11458] ? fs_reclaim_acquire+0xae/0x150 [ 358.280872][T11458] should_failslab+0xc2/0x120 [ 358.285598][T11458] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 358.291014][T11458] ? vma_merge_new_range+0x3f0/0xb70 [ 358.296348][T11458] ? vm_area_dup+0x21/0x300 [ 358.300903][T11458] vm_area_dup+0x21/0x300 [ 358.305273][T11458] copy_vma+0x4fd/0xa90 [ 358.309456][T11458] ? __pfx_copy_vma+0x10/0x10 [ 358.314162][T11458] ? move_vma+0x5c7/0x1c50 [ 358.318601][T11458] ? up_write+0x1b2/0x520 [ 358.322940][T11458] move_vma+0x640/0x1c50 [ 358.327203][T11458] ? __pfx_move_vma+0x10/0x10 [ 358.331895][T11458] ? mtree_load+0x230/0xa40 [ 358.336413][T11458] ? mm_get_unmapped_area+0x95/0xe0 [ 358.341634][T11458] ? bpf_lsm_mmap_addr+0x9/0x10 [ 358.346491][T11458] ? security_mmap_addr+0x6c/0x1e0 [ 358.351615][T11458] __do_sys_mremap+0xfc7/0x15e0 [ 358.356491][T11458] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 358.362493][T11458] ? __pfx___do_sys_mremap+0x10/0x10 [ 358.367793][T11458] ? __fget_files+0x206/0x3a0 [ 358.372482][T11458] ? fput+0x67/0x440 [ 358.376408][T11458] ? ksys_write+0x1ba/0x250 [ 358.380933][T11458] ? __pfx_ksys_write+0x10/0x10 [ 358.385808][T11458] do_syscall_64+0xcd/0x250 [ 358.390337][T11458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.396245][T11458] RIP: 0033:0x7f1cbcd85d29 [ 358.400667][T11458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.420299][T11458] RSP: 002b:00007f1cbdb13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 358.428718][T11458] RAX: ffffffffffffffda RBX: 00007f1cbcf76240 RCX: 00007f1cbcd85d29 [ 358.436700][T11458] RDX: 0000000000013fd4 RSI: 00000000000000b8 RDI: 0000000000004000 [ 358.444673][T11458] RBP: 00007f1cbdb13090 R08: 00000000fffff000 R09: 0000000000000000 [ 358.452657][T11458] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 358.460637][T11458] R13: 0000000000000001 R14: 00007f1cbcf76240 R15: 00007ffebd3875a8 [ 358.468630][T11458] [ 359.152935][T11530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1408'. [ 359.585181][T11537] futex_wake_op: syz.3.1411 tries to shift op by 64; fix this program [ 361.100120][T11556] ubi0: attaching mtd0 [ 361.113016][T11556] ubi0: scanning is finished [ 361.117670][T11556] ubi0: empty MTD device detected [ 361.182115][T11558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1417'. [ 361.584017][T11558] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.046905][T11556] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 362.100795][T11556] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 362.108055][T11556] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 362.165321][T11556] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 362.206433][T11556] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 362.250682][T11556] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 362.263246][T11556] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1725616094 [ 362.311981][T11556] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 362.372135][T11573] ubi0: background thread "ubi_bgt0d" started, PID 11573 [ 362.477778][T11583] netlink: 130 bytes leftover after parsing attributes in process `syz.3.1423'. [ 362.656122][T11586] FAULT_INJECTION: forcing a failure. [ 362.656122][T11586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.711774][T11586] CPU: 0 UID: 0 PID: 11586 Comm: syz.3.1424 Not tainted 6.13.0-rc7-syzkaller #0 [ 362.720872][T11586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 362.730966][T11586] Call Trace: [ 362.734261][T11586] [ 362.737210][T11586] dump_stack_lvl+0x16c/0x1f0 [ 362.741927][T11586] should_fail_ex+0x497/0x5b0 [ 362.746649][T11586] _copy_from_iter+0x29b/0x1400 [ 362.751544][T11586] ? trace_lock_acquire+0x14e/0x1f0 [ 362.756783][T11586] ? __alloc_skb+0x200/0x380 [ 362.761425][T11586] ? __pfx__copy_from_iter+0x10/0x10 [ 362.766751][T11586] ? __virt_addr_valid+0x1a4/0x590 [ 362.771911][T11586] ? __virt_addr_valid+0x5e/0x590 [ 362.776986][T11586] ? __phys_addr_symbol+0x30/0x80 [ 362.782047][T11586] ? __check_object_size+0x488/0x710 [ 362.787383][T11586] netlink_sendmsg+0x813/0xd70 [ 362.792185][T11586] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.797525][T11586] ____sys_sendmsg+0x9ae/0xb40 [ 362.802326][T11586] ? copy_msghdr_from_user+0x10b/0x160 [ 362.807868][T11586] ? __pfx_____sys_sendmsg+0x10/0x10 [ 362.813219][T11586] ___sys_sendmsg+0x135/0x1e0 [ 362.817942][T11586] ? __pfx____sys_sendmsg+0x10/0x10 [ 362.823201][T11586] ? __pfx_lock_release+0x10/0x10 [ 362.828259][T11586] ? trace_lock_acquire+0x14e/0x1f0 [ 362.833511][T11586] ? __fget_files+0x206/0x3a0 [ 362.838235][T11586] __sys_sendmsg+0x16e/0x220 [ 362.842869][T11586] ? __pfx___sys_sendmsg+0x10/0x10 [ 362.848042][T11586] do_syscall_64+0xcd/0x250 [ 362.852587][T11586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.858517][T11586] RIP: 0033:0x7f5004d85d29 [ 362.862962][T11586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.882604][T11586] RSP: 002b:00007f5005c1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.891062][T11586] RAX: ffffffffffffffda RBX: 00007f5004f75fa0 RCX: 00007f5004d85d29 [ 362.899071][T11586] RDX: 0000000000040000 RSI: 0000000020000240 RDI: 0000000000000004 [ 362.907078][T11586] RBP: 00007f5005c1e090 R08: 0000000000000000 R09: 0000000000000000 [ 362.915086][T11586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.923090][T11586] R13: 0000000000000000 R14: 00007f5004f75fa0 R15: 00007ffe79920b18 [ 362.931111][T11586] [ 363.324498][T11558] bridge_slave_0 (unregistering): left allmulticast mode [ 363.332458][T11558] bridge_slave_0 (unregistering): left promiscuous mode [ 363.340770][T11558] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.405340][T11613] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 366.438680][T11613] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 366.463918][T11613] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 366.491507][T11613] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 366.503616][T11613] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 366.524991][T11613] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 366.791116][T11627] FAULT_INJECTION: forcing a failure. [ 366.791116][T11627] name failslab, interval 1, probability 0, space 0, times 0 [ 366.848406][T11627] CPU: 0 UID: 0 PID: 11627 Comm: syz.4.1434 Not tainted 6.13.0-rc7-syzkaller #0 [ 366.857516][T11627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 366.867696][T11627] Call Trace: [ 366.871009][T11627] [ 366.873961][T11627] dump_stack_lvl+0x16c/0x1f0 [ 366.878682][T11627] should_fail_ex+0x497/0x5b0 [ 366.883400][T11627] ? fs_reclaim_acquire+0xae/0x150 [ 366.888553][T11627] should_failslab+0xc2/0x120 [ 366.893288][T11627] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 366.899169][T11627] ? __alloc_skb+0x2b3/0x380 [ 366.903802][T11627] __alloc_skb+0x2b3/0x380 [ 366.908345][T11627] ? __pfx___alloc_skb+0x10/0x10 [ 366.913331][T11627] ? lockdep_hardirqs_on_prepare+0x350/0x420 [ 366.919354][T11627] tipc_buf_acquire+0x26/0xe0 [ 366.924062][T11627] tipc_msg_build+0x114/0x10d0 [ 366.928868][T11627] ? net_generic+0xea/0x2a0 [ 366.933426][T11627] ? __pfx_lock_release+0x10/0x10 [ 366.938486][T11627] ? __pfx_tipc_msg_build+0x10/0x10 [ 366.943738][T11627] tipc_send_group_bcast+0x7ce/0xa60 [ 366.949075][T11627] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 366.954922][T11627] ? __pfx_mark_lock+0x10/0x10 [ 366.959734][T11627] ? __pfx_mark_lock+0x10/0x10 [ 366.964547][T11627] ? __pfx_woken_wake_function+0x10/0x10 [ 366.970225][T11627] ? mark_lock+0xb5/0xc60 [ 366.974612][T11627] ? hlock_class+0x4e/0x130 [ 366.979148][T11627] ? __lock_acquire+0x15a9/0x3c40 [ 366.984206][T11627] __tipc_sendmsg+0x4a5/0x1990 [ 366.989013][T11627] ? __pfx___tipc_sendmsg+0x10/0x10 [ 366.994245][T11627] ? __pfx_mark_lock+0x10/0x10 [ 366.999057][T11627] ? lock_acquire.part.0+0x11b/0x380 [ 367.004468][T11627] ? find_held_lock+0x2d/0x110 [ 367.009281][T11627] ? mark_held_locks+0x9f/0xe0 [ 367.014098][T11627] ? __local_bh_enable_ip+0xa4/0x120 [ 367.019428][T11627] tipc_sendmsg+0x4f/0x70 [ 367.023798][T11627] ____sys_sendmsg+0x9ae/0xb40 [ 367.028598][T11627] ? copy_msghdr_from_user+0x10b/0x160 [ 367.034108][T11627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 367.039438][T11627] ? __lock_acquire+0xcc5/0x3c40 [ 367.044435][T11627] ___sys_sendmsg+0x135/0x1e0 [ 367.049164][T11627] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.054424][T11627] ? trace_lock_acquire+0x14e/0x1f0 [ 367.059691][T11627] __sys_sendmmsg+0x201/0x420 [ 367.064420][T11627] ? __pfx___sys_sendmmsg+0x10/0x10 [ 367.069676][T11627] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 367.075725][T11627] ? fput+0x67/0x440 [ 367.079671][T11627] ? ksys_write+0x1ba/0x250 [ 367.084217][T11627] ? __pfx_ksys_write+0x10/0x10 [ 367.089114][T11627] __x64_sys_sendmmsg+0x9c/0x100 [ 367.094104][T11627] ? lockdep_hardirqs_on+0x7c/0x110 [ 367.099345][T11627] do_syscall_64+0xcd/0x250 [ 367.103894][T11627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.109839][T11627] RIP: 0033:0x7f1cbcd85d29 [ 367.114306][T11627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.133953][T11627] RSP: 002b:00007f1cbdb55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 367.142429][T11627] RAX: ffffffffffffffda RBX: 00007f1cbcf76080 RCX: 00007f1cbcd85d29 [ 367.150447][T11627] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 367.158544][T11627] RBP: 00007f1cbdb55090 R08: 0000000000000000 R09: 0000000000000000 [ 367.166554][T11627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.174570][T11627] R13: 0000000000000000 R14: 00007f1cbcf76080 R15: 00007ffebd3875a8 [ 367.182603][T11627] [ 367.624458][T11641] FAULT_INJECTION: forcing a failure. [ 367.624458][T11641] name failslab, interval 1, probability 0, space 0, times 0 [ 367.691504][T11641] CPU: 0 UID: 0 PID: 11641 Comm: syz.4.1437 Not tainted 6.13.0-rc7-syzkaller #0 [ 367.700695][T11641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 367.710759][T11641] Call Trace: [ 367.714041][T11641] [ 367.716978][T11641] dump_stack_lvl+0x16c/0x1f0 [ 367.721675][T11641] should_fail_ex+0x497/0x5b0 [ 367.726361][T11641] ? fs_reclaim_acquire+0xae/0x150 [ 367.731567][T11641] should_failslab+0xc2/0x120 [ 367.736263][T11641] __kmalloc_cache_noprof+0x68/0x420 [ 367.741572][T11641] io_uring_setup+0x170/0x3230 [ 367.746351][T11641] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 367.752341][T11641] ? __pfx_io_uring_setup+0x10/0x10 [ 367.757634][T11641] ? __fget_files+0x206/0x3a0 [ 367.762338][T11641] ? ksys_write+0x1ba/0x250 [ 367.766848][T11641] ? __pfx_ksys_write+0x10/0x10 [ 367.771710][T11641] __x64_sys_io_uring_setup+0x98/0x140 [ 367.777182][T11641] do_syscall_64+0xcd/0x250 [ 367.781699][T11641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.787604][T11641] RIP: 0033:0x7f1cbcd85d29 [ 367.792024][T11641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.811641][T11641] RSP: 002b:00007f1cbdb55038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 367.820147][T11641] RAX: ffffffffffffffda RBX: 00007f1cbcf76080 RCX: 00007f1cbcd85d29 [ 367.828134][T11641] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000040005 [ 367.836107][T11641] RBP: 00007f1cbdb55090 R08: 0000000000000000 R09: 0000000000000000 [ 367.844082][T11641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.852054][T11641] R13: 0000000000000000 R14: 00007f1cbcf76080 R15: 00007ffebd3875a8 [ 367.860043][T11641] [ 368.449109][ T5146] Bluetooth: hci3: command 0x0c1a tx timeout [ 368.455398][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 368.520924][ T5146] Bluetooth: hci0: command 0x0c1a tx timeout [ 368.527049][ T5146] Bluetooth: hci2: command 0x0c1a tx timeout [ 370.278395][T11673] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 370.317339][T11673] svc: failed to register nfsdv3 RPC service (errno 111). [ 370.329218][T11673] svc: failed to register nfsaclv3 RPC service (errno 111). [ 370.601723][ T5146] Bluetooth: hci0: command 0x0c1a tx timeout [ 371.770793][T11682] FAULT_INJECTION: forcing a failure. [ 371.770793][T11682] name failslab, interval 1, probability 0, space 0, times 0 [ 371.792886][T11682] CPU: 1 UID: 0 PID: 11682 Comm: syz.4.1450 Not tainted 6.13.0-rc7-syzkaller #0 [ 371.801979][T11682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 371.812064][T11682] Call Trace: [ 371.815365][T11682] [ 371.818312][T11682] dump_stack_lvl+0x16c/0x1f0 [ 371.823028][T11682] should_fail_ex+0x497/0x5b0 [ 371.827734][T11682] ? __pfx___ip_dev_find+0x10/0x10 [ 371.832887][T11682] should_failslab+0xc2/0x120 [ 371.837609][T11682] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 371.843031][T11682] ? dst_alloc+0x99/0x1a0 [ 371.847404][T11682] dst_alloc+0x99/0x1a0 [ 371.851601][T11682] rt_dst_alloc+0x35/0x3a0 [ 371.856153][T11682] ip_route_output_key_hash_rcu+0x8a5/0x2770 [ 371.862188][T11682] ip_route_output_key_hash+0x138/0x2e0 [ 371.867783][T11682] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 371.873945][T11682] ? __pfx_lock_release+0x10/0x10 [ 371.879015][T11682] ? trace_lock_acquire+0x14e/0x1f0 [ 371.884255][T11682] ? mark_lock+0xb5/0xc60 [ 371.888640][T11682] ? finish_fault+0xa12/0x1010 [ 371.893449][T11682] ip_route_output_flow+0x27/0x150 [ 371.898606][T11682] udp_sendmsg+0x1b92/0x29b0 [ 371.903255][T11682] ? __pfx_udplite_getfrag+0x10/0x10 [ 371.908597][T11682] ? __pfx_udp_sendmsg+0x10/0x10 [ 371.913602][T11682] ? __lock_acquire+0xcc5/0x3c40 [ 371.918596][T11682] ? __pfx___lock_acquire+0x10/0x10 [ 371.923835][T11682] ? __pfx_mark_lock+0x10/0x10 [ 371.928684][T11682] ? count_memcg_events_mm.constprop.0+0x138/0x340 [ 371.935233][T11682] ? __pfx_mark_lock+0x10/0x10 [ 371.940054][T11682] udpv6_sendmsg+0xf80/0x3040 [ 371.944777][T11682] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 371.949931][T11682] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 371.955348][T11682] ? __lock_acquire+0x15a9/0x3c40 [ 371.960456][T11682] ? __pfx_aa_sk_perm+0x10/0x10 [ 371.965351][T11682] ? __might_fault+0xe3/0x190 [ 371.970076][T11682] ? __might_fault+0xe3/0x190 [ 371.974798][T11682] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 371.979950][T11682] ? inet6_sendmsg+0x105/0x140 [ 371.984747][T11682] inet6_sendmsg+0x105/0x140 [ 371.989372][T11682] ____sys_sendmsg+0x649/0xb40 [ 371.994177][T11682] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.999494][T11682] ? __lock_acquire+0xcc5/0x3c40 [ 372.004473][T11682] ___sys_sendmsg+0x135/0x1e0 [ 372.009192][T11682] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.014446][T11682] ? trace_lock_acquire+0x14e/0x1f0 [ 372.019707][T11682] __sys_sendmmsg+0x201/0x420 [ 372.024426][T11682] ? __pfx___sys_sendmmsg+0x10/0x10 [ 372.029684][T11682] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 372.035722][T11682] ? fput+0x67/0x440 [ 372.039655][T11682] ? ksys_write+0x1ba/0x250 [ 372.044188][T11682] ? __pfx_ksys_write+0x10/0x10 [ 372.049078][T11682] __x64_sys_sendmmsg+0x9c/0x100 [ 372.054053][T11682] ? lockdep_hardirqs_on+0x7c/0x110 [ 372.059296][T11682] do_syscall_64+0xcd/0x250 [ 372.063848][T11682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.069783][T11682] RIP: 0033:0x7f1cbcd85d29 [ 372.074237][T11682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.093890][T11682] RSP: 002b:00007f1cbdb76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 372.102350][T11682] RAX: ffffffffffffffda RBX: 00007f1cbcf75fa0 RCX: 00007f1cbcd85d29 [ 372.110358][T11682] RDX: 00000000000009a6 RSI: 0000000020000000 RDI: 0000000000000003 [ 372.118451][T11682] RBP: 00007f1cbdb76090 R08: 0000000000000000 R09: 0000000000000000 [ 372.126451][T11682] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000001 [ 372.134451][T11682] R13: 0000000000000000 R14: 00007f1cbcf75fa0 R15: 00007ffebd3875a8 [ 372.142479][T11682] [ 372.680841][ T5146] Bluetooth: hci0: command 0x0c1a tx timeout [ 373.560998][T11628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.751325][T11703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1455'. [ 374.173370][T11711] FAULT_INJECTION: forcing a failure. [ 374.173370][T11711] name failslab, interval 1, probability 0, space 0, times 0 [ 374.201755][T11711] CPU: 0 UID: 0 PID: 11711 Comm: syz.4.1458 Not tainted 6.13.0-rc7-syzkaller #0 [ 374.210861][T11711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 374.220949][T11711] Call Trace: [ 374.224253][T11711] [ 374.227205][T11711] dump_stack_lvl+0x16c/0x1f0 [ 374.231921][T11711] should_fail_ex+0x497/0x5b0 [ 374.236640][T11711] ? fs_reclaim_acquire+0xae/0x150 [ 374.241794][T11711] should_failslab+0xc2/0x120 [ 374.246510][T11711] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 374.251921][T11711] ? seq_open+0x55/0x170 [ 374.256216][T11711] seq_open+0x55/0x170 [ 374.260329][T11711] ftrace_event_set_pid_open+0x13a/0x270 [ 374.265997][T11711] do_dentry_open+0xf59/0x1ea0 [ 374.270794][T11711] ? __pfx_ftrace_event_set_pid_open+0x10/0x10 [ 374.276975][T11711] ? inode_permission+0xdd/0x5f0 [ 374.281957][T11711] vfs_open+0x82/0x3f0 [ 374.286065][T11711] ? may_open+0x1f2/0x400 [ 374.290435][T11711] path_openat+0x1e6a/0x2d60 [ 374.295076][T11711] ? __pfx_path_openat+0x10/0x10 [ 374.300048][T11711] ? __pfx___lock_acquire+0x10/0x10 [ 374.305278][T11711] ? lock_acquire.part.0+0x11b/0x380 [ 374.310601][T11711] ? find_held_lock+0x2d/0x110 [ 374.315424][T11711] do_filp_open+0x20c/0x470 [ 374.319971][T11711] ? __pfx_do_filp_open+0x10/0x10 [ 374.325030][T11711] ? find_held_lock+0x2d/0x110 [ 374.329849][T11711] ? alloc_fd+0x41f/0x760 [ 374.334227][T11711] do_sys_openat2+0x17a/0x1e0 [ 374.338948][T11711] ? __pfx_do_sys_openat2+0x10/0x10 [ 374.344202][T11711] ? __fget_files+0x206/0x3a0 [ 374.348917][T11711] __x64_sys_openat+0x175/0x210 [ 374.353812][T11711] ? __pfx___x64_sys_openat+0x10/0x10 [ 374.359224][T11711] ? ksys_write+0x1ba/0x250 [ 374.363777][T11711] do_syscall_64+0xcd/0x250 [ 374.368317][T11711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.374255][T11711] RIP: 0033:0x7f1cbcd85d29 [ 374.378709][T11711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.398360][T11711] RSP: 002b:00007f1cbdb76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 374.406819][T11711] RAX: ffffffffffffffda RBX: 00007f1cbcf75fa0 RCX: 00007f1cbcd85d29 [ 374.414918][T11711] RDX: 00000000000a0201 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 374.422927][T11711] RBP: 00007f1cbdb76090 R08: 0000000000000000 R09: 0000000000000000 [ 374.430928][T11711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.438933][T11711] R13: 0000000000000000 R14: 00007f1cbcf75fa0 R15: 00007ffebd3875a8 [ 374.446960][T11711] [ 374.486094][T11714] FAULT_INJECTION: forcing a failure. [ 374.486094][T11714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.533818][T11714] CPU: 1 UID: 0 PID: 11714 Comm: syz.3.1459 Not tainted 6.13.0-rc7-syzkaller #0 [ 374.542932][T11714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 374.553026][T11714] Call Trace: [ 374.556340][T11714] [ 374.559304][T11714] dump_stack_lvl+0x16c/0x1f0 [ 374.564036][T11714] should_fail_ex+0x497/0x5b0 [ 374.568771][T11714] _copy_from_user+0x2e/0xd0 [ 374.573411][T11714] kstrtouint_from_user+0xd7/0x1c0 [ 374.578577][T11714] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 374.584348][T11714] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 374.590022][T11714] proc_fail_nth_write+0x84/0x250 [ 374.595101][T11714] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 374.600782][T11714] ? ksys_write+0x12b/0x250 [ 374.605336][T11714] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 374.611021][T11714] vfs_write+0x24c/0x1150 [ 374.615415][T11714] ? __fget_files+0x1fc/0x3a0 [ 374.620140][T11714] ? __pfx___mutex_lock+0x10/0x10 [ 374.625208][T11714] ? __pfx_vfs_write+0x10/0x10 [ 374.630028][T11714] ? __fget_files+0x206/0x3a0 [ 374.634764][T11714] ksys_write+0x12b/0x250 [ 374.639142][T11714] ? __pfx_ksys_write+0x10/0x10 [ 374.644121][T11714] do_syscall_64+0xcd/0x250 [ 374.648647][T11714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.654554][T11714] RIP: 0033:0x7f5004d847df [ 374.658979][T11714] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 374.678602][T11714] RSP: 002b:00007f5005bfd030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 374.687119][T11714] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5004d847df [ 374.695106][T11714] RDX: 0000000000000001 RSI: 00007f5005bfd0a0 RDI: 0000000000000005 [ 374.703080][T11714] RBP: 00007f5005bfd090 R08: 0000000000000000 R09: 0000000000000000 [ 374.711054][T11714] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 374.719028][T11714] R13: 0000000000000000 R14: 00007f5004f76080 R15: 00007ffe79920b18 [ 374.727016][T11714] [ 374.730121][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.989191][T11749] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 376.049316][T11749] svc: failed to register nfsdv3 RPC service (errno 111). [ 376.064311][T11749] svc: failed to register nfsaclv3 RPC service (errno 111). [ 378.823371][T11788] Process accounting resumed [ 379.004968][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.012000][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.782913][T11802] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1481'. [ 379.797534][T11802] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1481'. [ 380.183138][T11810] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1482'. [ 381.265670][T11824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1487'. [ 382.940634][T11857] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 383.040747][T11857] svc: failed to register nfsdv3 RPC service (errno 111). [ 383.086491][T11857] svc: failed to register nfsaclv3 RPC service (errno 111). [ 385.904945][T11901] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1500'. [ 385.939173][T11901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.971370][T11901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.004263][T11901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.030136][T11901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.107017][T11890] sp0: Synchronizing with TNC [ 386.201954][T11917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1501'. [ 386.253401][T11917] ip_vti0: entered promiscuous mode [ 386.880844][T11933] netlink: 'syz.3.1506': attribute type 2 has an invalid length. [ 387.471763][T11944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1510'. [ 387.882006][T11949] futex_wake_op: syz.3.1512 tries to shift op by 64; fix this program [ 387.961678][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 387.972112][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 387.987522][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 388.015551][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 388.032917][ T5841] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 388.052132][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 388.520277][T11950] chnl_net:caif_netlink_parms(): no params data found [ 388.756141][T11381] syz.1.1402 (11381) used greatest stack depth: 19424 bytes left [ 388.877361][T11950] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.913970][T11950] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.933129][T11950] bridge_slave_0: entered allmulticast mode [ 388.958374][T11950] bridge_slave_0: entered promiscuous mode [ 388.984298][T11950] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.998127][T11950] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.010767][T11950] bridge_slave_1: entered allmulticast mode [ 389.026163][T11950] bridge_slave_1: entered promiscuous mode [ 389.078144][T11950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.098111][T11950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.342036][T11950] team0: Port device team_slave_0 added [ 389.362680][T11950] team0: Port device team_slave_1 added [ 389.464406][T11978] MTRR 1 not used [ 389.708592][T11950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.740644][T11950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.799467][T11950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.824510][T11950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.832819][T11950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.876388][T11984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1519'. [ 389.893058][T11950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.120857][ T5146] Bluetooth: hci4: command tx timeout [ 390.378701][T11988] can: request_module (can-proto-5) failed. [ 390.435179][T11950] hsr_slave_0: entered promiscuous mode [ 390.594583][T11950] hsr_slave_1: entered promiscuous mode [ 390.686898][T11950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.710809][T11950] Cannot create hsr debugfs directory [ 391.442056][T11383] syz.1.1402 (11383) used greatest stack depth: 18752 bytes left [ 391.772054][T11950] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 391.903576][T11950] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 392.200889][ T5146] Bluetooth: hci4: command tx timeout [ 392.334840][T11950] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 392.499002][T11950] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 392.826592][T11950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.846639][T11950] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.866984][T11912] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.874156][T11912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.923531][T11912] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.930756][T11912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.283731][ T5146] Bluetooth: hci4: command tx timeout [ 395.183580][T11950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.048161][T11950] veth0_vlan: entered promiscuous mode [ 396.110822][T11950] veth1_vlan: entered promiscuous mode [ 396.211291][T11950] veth0_macvtap: entered promiscuous mode [ 396.360902][ T5146] Bluetooth: hci4: command tx timeout [ 396.519997][T11950] veth1_macvtap: entered promiscuous mode [ 396.667189][T11950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.678063][T11950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.691096][T11950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.921420][T11950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.960873][T11950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.974426][T11950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.118871][T11950] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.138479][T11950] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.158729][T11950] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.180616][T11950] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.388555][T11903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.423266][T11903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.543954][T11912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.562518][T11912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.888136][T12076] FAULT_INJECTION: forcing a failure. [ 397.888136][T12076] name failslab, interval 1, probability 0, space 0, times 0 [ 397.901473][T12076] CPU: 1 UID: 0 PID: 12076 Comm: syz.3.1536 Not tainted 6.13.0-rc7-syzkaller #0 [ 397.910538][T12076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 397.920609][T12076] Call Trace: [ 397.923888][T12076] [ 397.926822][T12076] dump_stack_lvl+0x16c/0x1f0 [ 397.931612][T12076] should_fail_ex+0x497/0x5b0 [ 397.936300][T12076] ? fs_reclaim_acquire+0xae/0x150 [ 397.941426][T12076] should_failslab+0xc2/0x120 [ 397.946117][T12076] __kmalloc_noprof+0xce/0x4f0 [ 397.950902][T12076] ? tracepoint_probe_unregister+0x24b/0xd70 [ 397.957065][T12076] ? __pfx_event_filter_pid_sched_wakeup_probe_pre+0x10/0x10 [ 397.964456][T12076] tracepoint_probe_unregister+0x24b/0xd70 [ 397.970540][T12076] ? __pfx_event_filter_pid_sched_wakeup_probe_pre+0x10/0x10 [ 397.977946][T12076] ? __pfx_tracepoint_probe_unregister+0x10/0x10 [ 397.984296][T12076] __ftrace_clear_event_pids+0x25b/0x7a0 [ 397.990039][T12076] ftrace_event_set_pid_open+0x216/0x270 [ 397.995681][T12076] do_dentry_open+0xf59/0x1ea0 [ 398.000456][T12076] ? __pfx_ftrace_event_set_pid_open+0x10/0x10 [ 398.006618][T12076] ? inode_permission+0xdd/0x5f0 [ 398.011577][T12076] vfs_open+0x82/0x3f0 [ 398.015662][T12076] ? may_open+0x1f2/0x400 [ 398.019999][T12076] path_openat+0x1e6a/0x2d60 [ 398.024611][T12076] ? __pfx_path_openat+0x10/0x10 [ 398.029561][T12076] ? __pfx___lock_acquire+0x10/0x10 [ 398.034763][T12076] ? lock_acquire.part.0+0x11b/0x380 [ 398.040062][T12076] ? find_held_lock+0x2d/0x110 [ 398.044838][T12076] do_filp_open+0x20c/0x470 [ 398.049442][T12076] ? __pfx_do_filp_open+0x10/0x10 [ 398.054488][T12076] ? find_held_lock+0x2d/0x110 [ 398.059329][T12076] ? alloc_fd+0x41f/0x760 [ 398.063675][T12076] do_sys_openat2+0x17a/0x1e0 [ 398.068366][T12076] ? __pfx_do_sys_openat2+0x10/0x10 [ 398.073592][T12076] ? __fget_files+0x206/0x3a0 [ 398.078287][T12076] __x64_sys_openat+0x175/0x210 [ 398.083155][T12076] ? __pfx___x64_sys_openat+0x10/0x10 [ 398.088539][T12076] ? ksys_write+0x1ba/0x250 [ 398.093058][T12076] do_syscall_64+0xcd/0x250 [ 398.097578][T12076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.103486][T12076] RIP: 0033:0x7f5004d85d29 [ 398.107907][T12076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.127533][T12076] RSP: 002b:00007f5005c1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 398.135959][T12076] RAX: ffffffffffffffda RBX: 00007f5004f75fa0 RCX: 00007f5004d85d29 [ 398.143935][T12076] RDX: 00000000000a0201 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 398.151907][T12076] RBP: 00007f5005c1e090 R08: 0000000000000000 R09: 0000000000000000 [ 398.159878][T12076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 398.167850][T12076] R13: 0000000000000000 R14: 00007f5004f75fa0 R15: 00007ffe79920b18 [ 398.175839][T12076] [ 398.422751][T12085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1538'. [ 399.153785][T12100] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[12100] [ 400.458881][T12126] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1548'. [ 400.736635][T12131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1550'. [ 400.858365][T12129] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1549'. [ 401.738231][T12159] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1559'. [ 402.675777][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1565'. [ 402.908837][T12193] FAULT_INJECTION: forcing a failure. [ 402.908837][T12193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.967054][T12193] CPU: 0 UID: 0 PID: 12193 Comm: syz.5.1568 Not tainted 6.13.0-rc7-syzkaller #0 [ 402.976411][T12193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 402.986500][T12193] Call Trace: [ 402.989838][T12193] [ 402.992798][T12193] dump_stack_lvl+0x16c/0x1f0 [ 402.997526][T12193] should_fail_ex+0x497/0x5b0 [ 403.002257][T12193] _copy_to_user+0x32/0xd0 [ 403.006738][T12193] simple_read_from_buffer+0xd0/0x160 [ 403.012155][T12193] proc_fail_nth_read+0x198/0x270 [ 403.017234][T12193] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 403.022841][T12193] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 403.028447][T12193] vfs_read+0x1df/0xbe0 [ 403.032649][T12193] ? __fget_files+0x1fc/0x3a0 [ 403.037377][T12193] ? __pfx___mutex_lock+0x10/0x10 [ 403.042450][T12193] ? __pfx_vfs_read+0x10/0x10 [ 403.047183][T12193] ? __fget_files+0x206/0x3a0 [ 403.051918][T12193] ksys_read+0x12b/0x250 [ 403.056207][T12193] ? __pfx_ksys_read+0x10/0x10 [ 403.061021][T12193] do_syscall_64+0xcd/0x250 [ 403.065580][T12193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.071525][T12193] RIP: 0033:0x7f1e2938473c [ 403.075975][T12193] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 403.095625][T12193] RSP: 002b:00007f1e2a23d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 403.104096][T12193] RAX: ffffffffffffffda RBX: 00007f1e29575fa0 RCX: 00007f1e2938473c [ 403.112105][T12193] RDX: 000000000000000f RSI: 00007f1e2a23d0a0 RDI: 0000000000000004 [ 403.120208][T12193] RBP: 00007f1e2a23d090 R08: 0000000000000000 R09: 0000000000000000 [ 403.128262][T12193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 403.136269][T12193] R13: 0000000000000000 R14: 00007f1e29575fa0 R15: 00007ffc24738338 [ 403.144303][T12193] [ 403.231839][T12194] can: request_module (can-proto-5) failed. [ 404.487202][T12229] FAULT_INJECTION: forcing a failure. [ 404.487202][T12229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.504568][T12229] CPU: 0 UID: 0 PID: 12229 Comm: syz.5.1576 Not tainted 6.13.0-rc7-syzkaller #0 [ 404.513696][T12229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 404.523791][T12229] Call Trace: [ 404.527095][T12229] [ 404.530050][T12229] dump_stack_lvl+0x16c/0x1f0 [ 404.534780][T12229] should_fail_ex+0x497/0x5b0 [ 404.539514][T12229] _copy_from_user+0x2e/0xd0 [ 404.544147][T12229] copy_msghdr_from_user+0x99/0x160 [ 404.549392][T12229] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 404.555245][T12229] ? lockdep_hardirqs_on+0x7c/0x110 [ 404.560486][T12229] ? hlock_class+0x4e/0x130 [ 404.565026][T12229] ? __lock_acquire+0x15a9/0x3c40 [ 404.570088][T12229] ___sys_sendmsg+0xff/0x1e0 [ 404.574725][T12229] ? __pfx____sys_sendmsg+0x10/0x10 [ 404.579972][T12229] ? __pfx___lock_acquire+0x10/0x10 [ 404.582874][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1575'. [ 404.585211][T12229] ? __pfx___might_resched+0x10/0x10 [ 404.585244][T12229] ? __might_fault+0xe3/0x190 [ 404.585284][T12229] __sys_sendmmsg+0x201/0x420 [ 404.608799][T12229] ? __pfx___sys_sendmmsg+0x10/0x10 [ 404.614147][T12229] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 404.620190][T12229] ? fput+0x67/0x440 [ 404.624139][T12229] ? ksys_write+0x1ba/0x250 [ 404.628690][T12229] ? __pfx_ksys_write+0x10/0x10 [ 404.633591][T12229] __x64_sys_sendmmsg+0x9c/0x100 [ 404.638669][T12229] ? lockdep_hardirqs_on+0x7c/0x110 [ 404.643910][T12229] do_syscall_64+0xcd/0x250 [ 404.648461][T12229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.654418][T12229] RIP: 0033:0x7f1e29385d29 [ 404.658866][T12229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.678689][T12229] RSP: 002b:00007f1e2a23d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 404.687148][T12229] RAX: ffffffffffffffda RBX: 00007f1e29575fa0 RCX: 00007f1e29385d29 [ 404.695154][T12229] RDX: 00000000000009a6 RSI: 0000000020000000 RDI: 0000000000000003 [ 404.703157][T12229] RBP: 00007f1e2a23d090 R08: 0000000000000000 R09: 0000000000000000 [ 404.711167][T12229] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000002 [ 404.719174][T12229] R13: 0000000000000000 R14: 00007f1e29575fa0 R15: 00007ffc24738338 [ 404.727198][T12229] [ 405.591642][T12260] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 405.650726][T12260] svc: failed to register nfsdv3 RPC service (errno 111). [ 405.691031][T12260] svc: failed to register nfsaclv3 RPC service (errno 111). [ 405.817546][T12267] FAULT_INJECTION: forcing a failure. [ 405.817546][T12267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.836176][T12267] CPU: 0 UID: 0 PID: 12267 Comm: syz.3.1585 Not tainted 6.13.0-rc7-syzkaller #0 [ 405.845264][T12267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 405.855349][T12267] Call Trace: [ 405.858646][T12267] [ 405.861583][T12267] dump_stack_lvl+0x16c/0x1f0 [ 405.866286][T12267] should_fail_ex+0x497/0x5b0 [ 405.870985][T12267] _copy_to_user+0x32/0xd0 [ 405.875416][T12267] simple_read_from_buffer+0xd0/0x160 [ 405.880806][T12267] proc_fail_nth_read+0x198/0x270 [ 405.885872][T12267] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 405.891443][T12267] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 405.897005][T12267] vfs_read+0x1df/0xbe0 [ 405.901174][T12267] ? __fget_files+0x1fc/0x3a0 [ 405.905863][T12267] ? __pfx___mutex_lock+0x10/0x10 [ 405.910900][T12267] ? __pfx_vfs_read+0x10/0x10 [ 405.915598][T12267] ? __fget_files+0x206/0x3a0 [ 405.920303][T12267] ksys_read+0x12b/0x250 [ 405.924563][T12267] ? __pfx_ksys_read+0x10/0x10 [ 405.929339][T12267] do_syscall_64+0xcd/0x250 [ 405.933857][T12267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.939762][T12267] RIP: 0033:0x7f5004d8473c [ 405.944182][T12267] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 405.963832][T12267] RSP: 002b:00007f5005bfd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 405.972265][T12267] RAX: ffffffffffffffda RBX: 00007f5004f76080 RCX: 00007f5004d8473c [ 405.980242][T12267] RDX: 000000000000000f RSI: 00007f5005bfd0a0 RDI: 0000000000000004 [ 405.988216][T12267] RBP: 00007f5005bfd090 R08: 0000000000000000 R09: 0000000000000000 [ 405.996189][T12267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 406.004175][T12267] R13: 0000000000000000 R14: 00007f5004f76080 R15: 00007ffe79920b18 [ 406.012165][T12267] [ 406.210295][T12257] netlink: 178 bytes leftover after parsing attributes in process `syz.4.1583'. [ 406.482414][T12275] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1587'. [ 406.883395][T12288] capability: warning: `syz.4.1592' uses 32-bit capabilities (legacy support in use) [ 407.111097][T12290] [ 407.113465][T12290] ====================================================== [ 407.120488][T12290] WARNING: possible circular locking dependency detected [ 407.127512][T12290] 6.13.0-rc7-syzkaller #0 Not tainted [ 407.132881][T12290] ------------------------------------------------------ [ 407.139894][T12290] syz.3.1593/12290 is trying to acquire lock: [ 407.145955][T12290] ffff8881437a5de0 (&q->sysfs_lock){+.+.}-{4:4}, at: queue_attr_store+0xe2/0x170 [ 407.155111][T12290] [ 407.155111][T12290] but task is already holding lock: [ 407.162467][T12290] ffff8881437a58b0 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: queue_attr_store+0xd8/0x170 [ 407.172680][T12290] [ 407.172680][T12290] which lock already depends on the new lock. [ 407.172680][T12290] [ 407.183081][T12290] [ 407.183081][T12290] the existing dependency chain (in reverse order) is: [ 407.192094][T12290] [ 407.192094][T12290] -> #4 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 407.200727][T12290] blk_mq_submit_bio+0x1fb6/0x24c0 [ 407.206393][T12290] __submit_bio+0x384/0x540 [ 407.211432][T12290] submit_bio_noacct_nocheck+0x698/0xd70 [ 407.217600][T12290] submit_bio_noacct+0x93a/0x1e20 [ 407.223159][T12290] mpage_readahead+0x41d/0x590 [ 407.228465][T12290] read_pages+0x1a8/0xdc0 [ 407.234164][T12290] page_cache_ra_unbounded+0x3dc/0x750 [ 407.240147][T12290] force_page_cache_ra+0x24b/0x340 [ 407.245783][T12290] page_cache_sync_ra+0x110/0x9c0 [ 407.251339][T12290] filemap_get_pages+0xd7b/0x1be0 [ 407.256885][T12290] filemap_read+0x3ca/0xd70 [ 407.261912][T12290] blkdev_read_iter+0x187/0x480 [ 407.267284][T12290] vfs_read+0x87f/0xbe0 [ 407.271963][T12290] ksys_read+0x12b/0x250 [ 407.276730][T12290] do_syscall_64+0xcd/0x250 [ 407.281761][T12290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.288185][T12290] [ 407.288185][T12290] -> #3 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 407.296713][T12290] down_read+0x9a/0x330 [ 407.301401][T12290] filemap_fault+0x2e0/0x2820 [ 407.306604][T12290] __do_fault+0x10a/0x490 [ 407.311453][T12290] do_pte_missing+0xebd/0x3e00 [ 407.316746][T12290] __handle_mm_fault+0x103c/0x2a40 [ 407.322386][T12290] handle_mm_fault+0x3fa/0xaa0 [ 407.327675][T12290] __get_user_pages+0x8d9/0x3b50 [ 407.333152][T12290] populate_vma_page_range+0x27f/0x3a0 [ 407.339146][T12290] __mm_populate+0x1d6/0x380 [ 407.344268][T12290] vm_mmap_pgoff+0x293/0x360 [ 407.349384][T12290] ksys_mmap_pgoff+0x32c/0x5c0 [ 407.354670][T12290] __x64_sys_mmap+0x125/0x190 [ 407.359866][T12290] do_syscall_64+0xcd/0x250 [ 407.364894][T12290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.371311][T12290] [ 407.371311][T12290] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 407.378868][T12290] __might_fault+0x11b/0x190 [ 407.383988][T12290] _copy_from_user+0x29/0xd0 [ 407.389101][T12290] __blk_trace_setup+0xa8/0x180 [ 407.394482][T12290] blk_trace_ioctl+0x163/0x290 [ 407.399788][T12290] blkdev_ioctl+0x106/0x670 [ 407.404826][T12290] __x64_sys_ioctl+0x190/0x200 [ 407.410111][T12290] do_syscall_64+0xcd/0x250 [ 407.415146][T12290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.421574][T12290] [ 407.421574][T12290] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 407.429393][T12290] __mutex_lock+0x19b/0xa60 [ 407.434434][T12290] blk_register_queue+0x13c/0x4f0 [ 407.439981][T12290] add_disk_fwnode+0x785/0x1300 [ 407.445348][T12290] brd_alloc.isra.0+0x50a/0x7c0 [ 407.450724][T12290] brd_init+0x12b/0x1d0 [ 407.455400][T12290] do_one_initcall+0x128/0x630 [ 407.460703][T12290] kernel_init_freeable+0x58f/0x8b0 [ 407.466436][T12290] kernel_init+0x1c/0x2b0 [ 407.471305][T12290] ret_from_fork+0x45/0x80 [ 407.476246][T12290] ret_from_fork_asm+0x1a/0x30 [ 407.481540][T12290] [ 407.481540][T12290] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 407.489105][T12290] __lock_acquire+0x249e/0x3c40 [ 407.494479][T12290] lock_acquire.part.0+0x11b/0x380 [ 407.500105][T12290] __mutex_lock+0x19b/0xa60 [ 407.505131][T12290] queue_attr_store+0xe2/0x170 [ 407.510413][T12290] sysfs_kf_write+0x117/0x170 [ 407.515611][T12290] kernfs_fop_write_iter+0x33d/0x500 [ 407.521434][T12290] vfs_write+0x5ae/0x1150 [ 407.526312][T12290] ksys_write+0x12b/0x250 [ 407.531168][T12290] do_syscall_64+0xcd/0x250 [ 407.536199][T12290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.542712][T12290] [ 407.542712][T12290] other info that might help us debug this: [ 407.542712][T12290] [ 407.552932][T12290] Chain exists of: [ 407.552932][T12290] &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#23 [ 407.552932][T12290] [ 407.567718][T12290] Possible unsafe locking scenario: [ 407.567718][T12290] [ 407.575157][T12290] CPU0 CPU1 [ 407.580514][T12290] ---- ---- [ 407.585871][T12290] lock(&q->q_usage_counter(io)#23); [ 407.591246][T12290] lock(mapping.invalidate_lock#2); [ 407.599051][T12290] lock(&q->q_usage_counter(io)#23); [ 407.606947][T12290] lock(&q->sysfs_lock); [ 407.611273][T12290] [ 407.611273][T12290] *** DEADLOCK *** [ 407.611273][T12290] [ 407.619404][T12290] 6 locks held by syz.3.1593/12290: [ 407.624592][T12290] #0: ffff8880299da2b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x267/0x390 [ 407.633663][T12290] #1: ffff888036330420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 407.642647][T12290] #2: ffff88803347b488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 407.652406][T12290] #3: ffff8880252412d8 (kn->active#101){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 407.662530][T12290] #4: ffff8881437a58b0 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: queue_attr_store+0xd8/0x170 [ 407.673228][T12290] #5: ffff8881437a58e8 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: queue_attr_store+0xd8/0x170 [ 407.684034][T12290] [ 407.684034][T12290] stack backtrace: [ 407.689921][T12290] CPU: 1 UID: 0 PID: 12290 Comm: syz.3.1593 Not tainted 6.13.0-rc7-syzkaller #0 [ 407.698942][T12290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 407.708996][T12290] Call Trace: [ 407.712268][T12290] [ 407.715193][T12290] dump_stack_lvl+0x116/0x1f0 [ 407.719879][T12290] print_circular_bug+0x41c/0x610 [ 407.724914][T12290] check_noncircular+0x31a/0x400 [ 407.729859][T12290] ? __pfx_check_noncircular+0x10/0x10 [ 407.735332][T12290] ? save_trace+0x42/0xa10 [ 407.739850][T12290] ? add_lock_to_list+0x17d/0x390 [ 407.744885][T12290] __lock_acquire+0x249e/0x3c40 [ 407.749736][T12290] ? __pfx___lock_acquire+0x10/0x10 [ 407.754944][T12290] ? __pfx___lock_acquire+0x10/0x10 [ 407.760139][T12290] lock_acquire.part.0+0x11b/0x380 [ 407.765254][T12290] ? queue_attr_store+0xe2/0x170 [ 407.770195][T12290] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 407.775826][T12290] ? rcu_is_watching+0x12/0xc0 [ 407.780597][T12290] ? trace_lock_acquire+0x14e/0x1f0 [ 407.785799][T12290] ? find_held_lock+0x2d/0x110 [ 407.790567][T12290] ? queue_attr_store+0xe2/0x170 [ 407.795506][T12290] ? lock_acquire+0x2f/0xb0 [ 407.800006][T12290] ? queue_attr_store+0xe2/0x170 [ 407.804961][T12290] __mutex_lock+0x19b/0xa60 [ 407.809468][T12290] ? queue_attr_store+0xe2/0x170 [ 407.814407][T12290] ? mark_held_locks+0x9f/0xe0 [ 407.819221][T12290] ? queue_attr_store+0xe2/0x170 [ 407.824185][T12290] ? __pfx___mutex_lock+0x10/0x10 [ 407.829219][T12290] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 407.835027][T12290] ? blk_mq_freeze_queue_wait+0xaf/0x190 [ 407.840666][T12290] ? __pfx_autoremove_wake_function+0x10/0x10 [ 407.846747][T12290] ? queue_attr_store+0xd8/0x170 [ 407.851693][T12290] ? queue_attr_store+0xe2/0x170 [ 407.856726][T12290] queue_attr_store+0xe2/0x170 [ 407.861494][T12290] ? __pfx_queue_attr_store+0x10/0x10 [ 407.866864][T12290] sysfs_kf_write+0x117/0x170 [ 407.871547][T12290] kernfs_fop_write_iter+0x33d/0x500 [ 407.876838][T12290] ? __pfx_sysfs_kf_write+0x10/0x10 [ 407.882054][T12290] vfs_write+0x5ae/0x1150 [ 407.886492][T12290] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 407.892344][T12290] ? __pfx___mutex_lock+0x10/0x10 [ 407.897383][T12290] ? __pfx_vfs_write+0x10/0x10 [ 407.902165][T12290] ksys_write+0x12b/0x250 [ 407.906499][T12290] ? __pfx_ksys_write+0x10/0x10 [ 407.911468][T12290] do_syscall_64+0xcd/0x250 [ 407.915985][T12290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.921885][T12290] RIP: 0033:0x7f5004d85d29 [ 407.926298][T12290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.945921][T12290] RSP: 002b:00007f5005c1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 407.954355][T12290] RAX: ffffffffffffffda RBX: 00007f5004f75fa0 RCX: 00007f5004d85d29 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 407.962349][T12290] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 407.970341][T12290] RBP: 00007f5004e01b08 R08: 0000000000000000 R09: 0000000000000000 [ 407.978357][T12290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.986456][T12290] R13: 0000000000000000 R14: 00007f5004f75fa0 R15: 00007ffe79920b18 [ 407.994459][T12290] [ 408.719168][T11903] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.774670][T11903] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.826513][T11903] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.863787][T11903] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.946427][T11903] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.984427][T11903] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.024777][T11903] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.074920][T11903] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.149017][T11903] team0: left allmulticast mode [ 409.155340][T11903] team_slave_0: left allmulticast mode [ 409.163144][T11903] team_slave_1: left allmulticast mode [ 409.169007][T11903] team0: left promiscuous mode [ 409.175321][T11903] team_slave_0: left promiscuous mode [ 409.181043][T11903] team_slave_1: left promiscuous mode [ 409.186683][T11903] bridge0: port 3(team0) entered disabled state [ 409.194066][T11903] bridge_slave_1: left allmulticast mode [ 409.199707][T11903] bridge_slave_1: left promiscuous mode [ 409.205586][T11903] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.213467][T11903] bridge_slave_0: left allmulticast mode [ 409.219104][T11903] bridge_slave_0: left promiscuous mode [ 409.224796][T11903] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.233571][T11903] bridge_slave_1: left allmulticast mode [ 409.239209][T11903] bridge_slave_1: left promiscuous mode [ 409.245151][T11903] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.253163][T11903] bridge_slave_0: left allmulticast mode [ 409.258823][T11903] bridge_slave_0: left promiscuous mode [ 409.264709][T11903] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.465308][T11903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.475512][T11903] bond0 (unregistering): Released all slaves [ 409.486923][T11903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.497583][T11903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.507652][T11903] bond0 (unregistering): Released all slaves [ 409.619913][T11903] HSR: left promiscuous mode [ 409.662830][T11903] : left promiscuous mode [ 410.119178][T11903] hsr_slave_0: left promiscuous mode [ 410.125860][T11903] hsr_slave_1: left promiscuous mode [ 410.135031][T11903] hsr_slave_0: left promiscuous mode [ 410.143120][T11903] hsr_slave_1: left promiscuous mode [ 410.150883][T11903] veth1_macvtap: left promiscuous mode [ 410.156722][T11903] veth0_macvtap: left promiscuous mode [ 410.162448][T11903] veth1_vlan: left promiscuous mode [ 410.167749][T11903] veth0_vlan: left promiscuous mode [ 410.174654][T11903] veth1_macvtap: left promiscuous mode [ 410.180158][T11903] veth0_macvtap: left promiscuous mode [ 410.186069][T11903] veth1_vlan: left promiscuous mode [ 410.191330][T11903] veth0_vlan: left promiscuous mode [ 410.334733][T11903] team0 (unregistering): Port device team_slave_1 removed [ 410.359093][T11903] team0 (unregistering): Port device team_slave_0 removed [ 410.514516][T11903] team0 (unregistering): Port device team_slave_1 removed [ 410.539539][T11903] team0 (unregistering): Port device team_slave_0 removed [ 410.971252][T11903] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.038970][T11903] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.095554][T11903] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.145969][T11903] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.217196][T11903] bridge_slave_1: left allmulticast mode [ 411.225136][T11903] bridge_slave_1: left promiscuous mode [ 411.232669][T11903] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.242081][T11903] bridge_slave_0: left allmulticast mode [ 411.247779][T11903] bridge_slave_0: left promiscuous mode [ 411.255492][T11903] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.366372][T11903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.376357][T11903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.386444][T11903] bond0 (unregistering): Released all slaves [ 411.609568][T11903] hsr_slave_0: left promiscuous mode [ 411.616762][T11903] hsr_slave_1: left promiscuous mode [ 411.624955][T11903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.632657][T11903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.640256][T11903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.648456][T11903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.657817][T11903] veth1_macvtap: left promiscuous mode [ 411.663581][T11903] veth0_macvtap: left promiscuous mode [ 411.669120][T11903] veth1_vlan: left promiscuous mode [ 411.674466][T11903] veth0_vlan: left promiscuous mode [ 411.775644][T11903] team0 (unregistering): Port device team_slave_1 removed [ 411.801865][T11903] team0 (unregistering): Port device team_slave_0 removed