last executing test programs: 12m8.448444425s ago: executing program 2 (id=55): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa801, 0x0) ioctl$auto(0x3, 0x80045518, 0x1) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="1177e6d775f9d4d4f9c458e1bb75f6705030b72e4fbcd344b2cfd5711b46779af5dcef1aab946534f0bcdbc900683d506845f2d706332ef69f187e02ea4fa28e6f6572f1701a66bb063741294a828df2828f748e0eeb95f710ea6fa10d027266680dc84229c0a2240755acf4f0ca0c7b9ade2132693f51a090b896649dff37552135", @ANYRES16=0x0, @ANYBLOB="04002cbd7000ffdbdf250100000008000800", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20044040}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PEER_REMOVE(r8, &(0x7f00000110c0)={0x0, 0x0, &(0x7f0000011080)={&(0x7f000000e000)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="010026bd7000fedbdf251400000004000780"], 0x18}, 0x1, 0x0, 0x0, 0x104}, 0x40) syz_genetlink_get_family_id$auto_nl80211(0x0, r7) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010b27bd7000fda5c5a62073660008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x100000001, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x7, 0x2, 0x9, 0x5, 0x1, 0x7, 0xb3, 0xc, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0xb0b, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x55, 0x400, 0x4000000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x8, 0x800000000, 0xbc]}, 0x1fe, 0x81) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/011/001\x00', 0x121002, 0x0) mmap$auto(0x2000, 0x9, 0x2, 0x8000000008011, r0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f0000000380)="d95f5a3940fc3b82cbb7891c17743fc300dc30765beb90") syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), 0xffffffffffffffff) 12m7.9233115s ago: executing program 2 (id=58): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/mtd/mtd0/flags\x00', 0x1c9440, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003480)=""/247, 0xf7) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/3/node\x00', 0x82340, 0x0) set_robust_list$auto(0xfffffffffffffffe, 0x18) read$auto(r1, &(0x7f0000000040)='!\x00', 0x7) mmap$auto(0x0, 0x8, 0xfff, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0xa, 0x1, 0x84) close_range$auto(0x2, 0x8, 0x0) r3 = fspick$auto(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) r4 = socket(0x10, 0x3, 0x6) r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x7}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x40}, @NETDEV_A_PAGE_POOL_ID={0x2, 0x20, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc}, @NETDEV_A_PAGE_POOL_ID={0x0, 0x1, 0xfd}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r5, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) close_range$auto(r2, 0xffffffffffffffff, 0x0) r7 = epoll_create$auto(0x7) r8 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NODE_GET(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="98000000", @ANYRES16=r8, @ANYRES16=r6], 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x800c044) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/packets_per_slave\x00', 0x182b02, 0x0) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/gro_flush_timeout\x00', 0x88282, 0x0) sendfile$auto(r9, r9, 0x0, 0x1) 12m7.577054191s ago: executing program 2 (id=59): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) pipe2$auto(0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/audio1\x00', 0x44c01, 0x0) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x1) r1 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000280), 0x1e9282, 0x0) read$auto_evm_xattr_ops_evm_secfs(r1, &(0x7f0000000080)=""/208, 0xd0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) sendto$auto(0x3, 0x0, 0x13, 0x7, &(0x7f0000000440)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x20) read$auto_evm_xattr_ops_evm_secfs(r1, 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000140)) r2 = socket(0x2b, 0x1, 0x1) recvmmsg$auto(r1, &(0x7f0000000400)={{&(0x7f0000000480)="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", 0x6, &(0x7f00000002c0)={&(0x7f0000000180)="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", 0xfffffffffffffff9}, 0x5, &(0x7f0000000300)="72785731a91b279965a117586964adf45fec359117384f0c934ca8cce49b29468a1c3a156f0016026e2ef90352760b52d5c9b0c2f6710f39802ab646fd50b30186ea765da965368146ac266f510e36584b576a1e3595fcd6df4cc55bcb9c658b09001f14808a194f6fe79e1df2d700dfc6ecb3b669b0edada0f062f1508893d4ec3f924e201310625e3d3862fb458f6b70907ebff13789c4047ec63965ab7fe2bbd67bdcdb947e210ff4fe530217eb76af90b68f4abe6aa4227c20cca5138f5107ea512fb4e6505d32e78d128e5808a71810a1e353091f", 0x7, 0x800}, 0x7f45}, 0x9, 0x101, &(0x7f0000001480)={0x0, 0x5}) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) setsockopt$auto(r2, 0x0, 0x33, 0x0, 0x4) r3 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x80001, 0x0) write$auto(r3, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 12m7.217388916s ago: executing program 2 (id=60): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) r0 = socket(0x2a, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x40) write$auto(0x3, 0x0, 0xfffffdef) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000002d, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r1 = gettid() connect$auto(0xffffffffffffffff, 0x0, 0x55) mmap$auto(0x0, 0x5, 0x3, 0x16, 0x3, 0x8000) mq_open$auto(&(0x7f0000000180)='{\x9d\xf9.+/\x00', 0x6, 0x0, &(0x7f00000001c0)={0xfffffffffffffff8, 0xffffffffffff8000, 0x100000000}) sendfile$auto(0x6, 0xffffffffffffffff, 0x0, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0x20200, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) fchdir$auto(0xffffffffffffffff) rmdir$auto(&(0x7f0000000340)='MAC80211_HWSIM\x00') process_vm_readv$auto(r1, &(0x7f0000000040)={0x0, 0x8}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0) move_pages$auto(r1, 0x4, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x3, 0x0, 0x0) 12m5.152314336s ago: executing program 2 (id=66): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) getpid() fcntl$getown(r0, 0x9) capget$auto(&(0x7f00000002c0)={0x10001}, 0x0) r1 = getpid() process_vm_readv$auto(r1, 0x0, 0x1, 0x0, 0x6, 0x0) r2 = getpid() pidfd_open$auto(r2, 0x0) syz_clone3(0x0, 0x0) open(0x0, 0x22240, 0x155) mmap$auto_fb_fops_fb_chrdev(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0x9e) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) io_uring_enter$auto(0xffffffffffffffff, 0x100, 0xffff230a, 0x9, 0x0, 0x7fff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) madvise$auto(0x0, 0x2003f0, 0x4) tkill$auto(0x1, 0x7) creat$auto(0x0, 0x4) swapon$auto(0x0, 0x3) 12m3.236273694s ago: executing program 2 (id=73): r0 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x88000, 0x0) copy_file_range$auto(r0, 0x0, r0, &(0x7f0000000040)=0xa, 0x4000000000002, 0x7) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, r1, 0x3) mincore$auto(0x1000, 0x7a, 0x0) r2 = socket(0xa, 0x2, 0x0) select$auto(0xfffffffd, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0xa, 0x2, 0x3a) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000180), r5) sendmsg$auto_NBD_CMD_CONNECT(r6, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)=ANY=[@ANYRES16=r4, @ANYRES8=r6, @ANYRESDEC], 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x40000) r8 = fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(r6, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYRES8=r3, @ANYRESOCT=r8, @ANYRESOCT=r7, @ANYRESHEX, @ANYRES32=r2, @ANYRESOCT=r3, @ANYBLOB="f08e80f3d3096ef8d6af23ce0b04c5ede9f2d3db1f1f0cbe", @ANYRESDEC], 0x1f0}}, 0x10) unshare$auto(0x40000080) unshare$auto(0x3) mmap$auto(0x0, 0x400001, 0xdf, 0xd8b4, 0x2, 0x8000) r9 = prctl$auto(0x7, 0x1, r8, 0x4, 0x7) mmap$auto(0x6, 0x20009, 0xffff, 0xeb1, r9, 0x8000) prctl$auto(0x1000000003b, 0x0, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x1) madvise$auto(0x9, 0xffffffffffff0001, 0x0) clone3$auto(0x0, 0x40) 12m2.837733445s ago: executing program 32 (id=73): r0 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x88000, 0x0) copy_file_range$auto(r0, 0x0, r0, &(0x7f0000000040)=0xa, 0x4000000000002, 0x7) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, r1, 0x3) mincore$auto(0x1000, 0x7a, 0x0) r2 = socket(0xa, 0x2, 0x0) select$auto(0xfffffffd, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0xa, 0x2, 0x3a) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000180), r5) sendmsg$auto_NBD_CMD_CONNECT(r6, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)=ANY=[@ANYRES16=r4, @ANYRES8=r6, @ANYRESDEC], 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x40000) r8 = fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(r6, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYRES8=r3, @ANYRESOCT=r8, @ANYRESOCT=r7, @ANYRESHEX, @ANYRES32=r2, @ANYRESOCT=r3, @ANYBLOB="f08e80f3d3096ef8d6af23ce0b04c5ede9f2d3db1f1f0cbe", @ANYRESDEC], 0x1f0}}, 0x10) unshare$auto(0x40000080) unshare$auto(0x3) mmap$auto(0x0, 0x400001, 0xdf, 0xd8b4, 0x2, 0x8000) r9 = prctl$auto(0x7, 0x1, r8, 0x4, 0x7) mmap$auto(0x6, 0x20009, 0xffff, 0xeb1, r9, 0x8000) prctl$auto(0x1000000003b, 0x0, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x1) madvise$auto(0x9, 0xffffffffffff0001, 0x0) clone3$auto(0x0, 0x40) 11m46.882721556s ago: executing program 3 (id=118): openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000980), 0x200, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x9, 0x9, 0x3, 0x9b72, 0x8000000000000000, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fsopen$auto(0x0, 0x1) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(0xffffffffffffffff, 0x0, 0x24004054) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mtrr\x00', 0xc0800, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) ioctl$auto(r0, 0x2, 0x9) ioctl$auto(0x3, 0x400c4d05, r0) mbind$auto(0x0, 0x100000004, 0x103000000, 0x0, 0x20000000000006, 0x2) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x101401, 0x0) pipe$auto(&(0x7f00000000c0)) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xffffffffffffffff, @new_prog_fd, 0x3}, 0xa3) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000040)=0x4) socket(0x2, 0x1, 0x0) socket(0x10, 0x3, 0xa) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) timer_create$auto(0x3, 0x0, &(0x7f0000000280)=0x6) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x10) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10}, {0x80, 0x200000000}}, 0x0) write$auto(0x3, 0x0, 0xfffffdeb) 11m45.513747286s ago: executing program 3 (id=122): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) socket(0x2, 0x1, 0x106) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r0, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x53, r0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0xfffffffb}, @NL80211_ATTR_TDLS_SUPPORT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000060}, 0x20000010) madvise$auto(0xfffffffffffffffe, 0xffffffffffff0005, 0x19) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x1, 0x7, 0xf3, 0x2000eb7, 0x5, 0x8000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) fstatfs$auto(0x3, 0xfffffffffffffffd) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/0/msr\x00', 0xf82, 0x0) recvmsg$auto(0x4, 0x0, 0x1) sched_setaffinity$auto(0x0, 0x7, &(0x7f00000003c0)=0x80000001) 11m44.453777099s ago: executing program 3 (id=126): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/vm/dirty_background_bytes\x00', 0x81, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) timer_create$auto(0xb, &(0x7f0000000080)={@sival_ptr=0x0, @inferred=0xffffffffffffffff, 0x2}, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/fs/ecryptfs/version\x00', 0x0, 0x0) r3 = signalfd4$auto(r2, &(0x7f0000000000), 0x100000, 0x6) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/tracing/options/trace_printk_dest\x00', 0x101000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto_mon_fops_binary_mon_bin(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000f, 0x100010, r3, 0x9) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/150, 0x96) r4 = pipe$auto(&(0x7f0000000040)=r0) r5 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000180), r1) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_ADD(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@THERMAL_GENL_ATTR_TZ_MODE={0x8, 0xa, 0x8}, @THERMAL_GENL_ATTR_TZ_MODE={0x8, 0xa, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000800) 11m44.227702716s ago: executing program 3 (id=128): socket(0xa, 0x801, 0x106) set_mempolicy$auto(0x2, &(0x7f0000000200)=0x7e, 0x1fe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone3(&(0x7f0000000340)={0x412a0500, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2) sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x800) setsockopt$auto(0x3, 0x0, 0x18, 0x0, 0x9) openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, &(0x7f0000000040), 0x8a02, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) 11m43.186664311s ago: executing program 3 (id=132): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioperm$auto(0x7, 0x6, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) stat$auto(&(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)={0xce1, 0xffffffffffffffff, 0x2, 0x5, 0x0, 0xee00, 0x0, 0x100, 0xf86, 0x0, 0xb35c, 0x2, 0x7fffffff, 0x800, 0x5, 0x10001, 0x8000}) mount$auto(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/35u\x00', 0x8c00, 0x0) fanotify_init$auto(0x65, 0x2) socket(0xa, 0x806, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) tkill$auto(0x80000000000001, 0x7) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100028bd7000fdbbdf2502000000060002000080000014001f00fe80000000000000000000000000001c0c000f00390100000000000014002000ff020000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x5, &(0x7f0000000100)=@bpf_attr_3={0x6, 0x5, 0xffffffffffff8001, 0x9, 0x8, 0x7ff, 0x2, 0x9, 0x6, "4e963b0004000000000800", 0x0, 0x401, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x5, 0x865, 0x6, 0x9, @attach_prog_fd, 0x9, 0x7fffffffffffffff, 0x4, 0x0, 0x6}, 0x201) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket(0x2, 0x801, 0x106) listen$auto(r3, 0x8) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) 11m41.984695259s ago: executing program 3 (id=138): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) timerfd_create$auto(0x0, 0x0) socket(0xb, 0x6, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x3, 0x100) socket(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x7fff, 0xff, 0x0, 0x0, 0x7) r4 = socketpair$auto(0x8, 0x1, 0x8000000000000000, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r7}, @MACSEC_ATTR_OFFLOAD={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040085}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ip6erspan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'rose0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_macvtap\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x140, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3ff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2dd}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd50a}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7fffffff}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$auto_TIOCSTI2(r5, 0x5412, 0x0) 11m41.884592288s ago: executing program 33 (id=138): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) timerfd_create$auto(0x0, 0x0) socket(0xb, 0x6, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x3, 0x100) socket(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x7fff, 0xff, 0x0, 0x0, 0x7) r4 = socketpair$auto(0x8, 0x1, 0x8000000000000000, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r7}, @MACSEC_ATTR_OFFLOAD={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040085}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ip6erspan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'rose0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_macvtap\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x140, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3ff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2dd}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd50a}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7fffffff}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$auto_TIOCSTI2(r5, 0x5412, 0x0) 11m11.985447573s ago: executing program 1 (id=320): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/wg1/disable_xfrm\x00', 0x143402, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/kernel/perf_cpu_time_max_percent\x00', 0xa042, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) ioctl$sock_SIOCGIFINDEX(r2, 0x40086602, &(0x7f0000000000)={'macvtap0\x00'}) sendfile$auto(r1, r0, 0x0, 0x48) ioctl$auto(r1, 0x4, r1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) fcntl$auto(r4, 0x0, 0xa8) 11m11.5769501s ago: executing program 1 (id=313): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), r0) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x808) 11m11.07339843s ago: executing program 1 (id=316): mmap$auto(0x0, 0x2020206, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) pread64$auto(r0, 0x0, 0x8, 0xffff) 11m10.91440001s ago: executing program 1 (id=317): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) pread64$auto(r0, 0x0, 0x8, 0xffff) 11m10.628367697s ago: executing program 1 (id=321): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) getpid() fcntl$getown(r0, 0x9) capget$auto(&(0x7f00000002c0)={0x10001}, 0x0) r1 = getpid() process_vm_readv$auto(r1, 0x0, 0x1, 0x0, 0x6, 0x0) r2 = getpid() pidfd_open$auto(r2, 0x0) syz_clone3(0x0, 0x0) open(0x0, 0x22240, 0x155) mmap$auto_fb_fops_fb_chrdev(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0x9e) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) io_uring_enter$auto(0xffffffffffffffff, 0x100, 0xffff230a, 0x9, 0x0, 0x7fff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) madvise$auto(0x0, 0x2003f0, 0x4) tkill$auto(0x1, 0x7) creat$auto(0x0, 0x4) swapon$auto(0x0, 0x3) 11m7.922519708s ago: executing program 1 (id=339): pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x1) iopl$auto(0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_VPORT_CMD_NEW(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010026bd7000ffdbdf250100000008000900040000000800020004000000060003002a000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 11m7.469851153s ago: executing program 34 (id=339): pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x1) iopl$auto(0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_VPORT_CMD_NEW(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010026bd7000ffdbdf250100000008000900040000000800020004000000060003002a000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 12.954384288s ago: executing program 6 (id=3185): bpf$auto(0xfffff001, &(0x7f0000000000)=@bpf_attr_3={0xa332, 0x2, 0x7, 0x3, 0xfffffbff, 0x2, 0x1, 0x4, 0x7, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x8, 0x81, 0xb03, 0x0, 0x3ff, 0x7, @attach_prog_fd, 0xb5f3, 0x630, 0x57d, 0x9, 0x8}, 0xa3) writev$auto(0xe, 0x0, 0x3) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0xd, 0x8}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_target_scan_time\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r1, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) prctl$auto(0x38, 0x24, r1, 0x5, 0x38) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) open(&(0x7f00000000c0)='./file1\x00', 0x161302, 0x194) landlock_add_rule$auto(0xf6, 0x3, 0x0, 0x6cf) unshare$auto(0x40000080) ioctl$auto(0x20000000000003, 0x8946, 0x2) acct$auto(&(0x7f0000000040)='\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 11.950789457s ago: executing program 6 (id=3194): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x9}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @remote}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_IF2_AGE={0x8, 0x4, 0x10}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR={0xa, 0x1, @random="a01d8645b361"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nbd4/queue/io_poll_delay\x00', 0x102, 0x0) sendfile$auto(r0, r0, 0x0, 0x7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/iscsi_transport/iser/caps\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000100)=""/16, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4044000}, 0x800) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01df2cbd7000fadbdf270300000005"], 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x51b41aab316a9d76) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r4, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000c00)={0x14, r5, 0x309, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r5, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 10.833643037s ago: executing program 6 (id=3197): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) read$auto(0x3, 0x0, 0x10) write$auto(0x3, 0x0, 0xffd8) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000004c40), 0xffffffffffffffff) eventfd$auto(0x1) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r0, &(0x7f00000058c0)={0x0, 0x0, &(0x7f0000005880)={&(0x7f0000005900)=ANY=[@ANYBLOB="ec140000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf2503000000cc1401808a028c8024001c8008004400020000000500140000000000040072800800"], 0x14ec}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008084) 9.727837939s ago: executing program 6 (id=3204): close_range$auto(0x2, 0xa, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd14\x00', 0x30d101, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x80800, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xfffffffffffffffd, 0x9, 0x3, 0x8012, 0x3, 0x8000) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0x20000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) writev$auto(r1, &(0x7f0000000100)={0x0, 0x400000000000fdeb}, 0x1) memfd_create$auto(0x0, 0xa) close_range$auto(0x2, 0x1d, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) read$auto(0x3, 0x0, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0x11, 0x401, 0x7) io_uring_setup$auto(0x6, 0x0) syz_open_procfs$namespace(0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) epoll_ctl$auto(0x5, 0xfffffffd, r2, 0x0) open(0x0, 0x0, 0xeb) madvise$auto(0x0, 0xffffffffffff0005, 0x3f0ff4c0) munmap$auto(0x800, 0x7) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, r0, 0x8000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) 9.29175716s ago: executing program 6 (id=3208): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x20000000000, 0x7ff, 0xffb, 0x8000000008011, 0x3, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x11b, 0x7ff}, 0xc, &(0x7f00000000c0)={0x3, 0x7f}, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = socket(0x2, 0x1, 0x0) getsockopt$auto(r0, 0x0, 0x61, 0x0, &(0x7f00000000c0)=0x28) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x1, 0x0) clock_gettime$auto(0x1, 0x0) sendmmsg$auto(r1, 0x0, 0x5, 0x20000000) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c0001"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='C'], 0x1ac}}, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) 3.428930924s ago: executing program 0 (id=3257): bpf$auto(0xfffff001, &(0x7f0000000000)=@bpf_attr_3={0xa332, 0x2, 0x7, 0x3, 0xfffffbff, 0x2, 0x1, 0x4, 0x7, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x8, 0x81, 0xb03, 0x0, 0x3ff, 0x7, @attach_prog_fd, 0xb5f3, 0x630, 0x57d, 0x9, 0x8}, 0xa3) writev$auto(0xe, 0x0, 0x3) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0xd, 0x8}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r1, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) prctl$auto(0x38, 0x24, r1, 0x5, 0x38) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) open(&(0x7f00000000c0)='./file1\x00', 0x161302, 0x194) landlock_add_rule$auto(0xf6, 0x3, 0x0, 0x6cf) unshare$auto(0x40000080) ioctl$auto(0x20000000000003, 0x8946, 0x2) acct$auto(&(0x7f0000000040)='\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 3.399702466s ago: executing program 4 (id=3258): mkdir$auto(&(0x7f0000000000)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) lchown$auto(&(0x7f0000000100)='}[,&*}\x00', 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x1, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x100) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffc}, 0x55) sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0xb, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) madvise$auto(0xb, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) setpriority$auto(0x4000000001, 0x100000001, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x53, 0x9) mmap$auto(0x8, 0x400008, 0xdf, 0x12, 0x2, 0x8000) timer_create$auto(0x7, 0x0, 0x0) fcntl$auto(0x2, 0x2, 0x80000001) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x9}}, 0x0) timer_gettime$auto(0x0, 0x0) 3.262141048s ago: executing program 4 (id=3259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000240), 0xffffffffffffffff) fchdir$auto(0xffffffffffffffff) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)={0x30, r1, 0x21, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) (fail_nth: 7) 2.847360846s ago: executing program 4 (id=3260): close_range$auto(0x2, 0xa, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd14\x00', 0x30d101, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x80800, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xfffffffffffffffd, 0x9, 0x3, 0x8012, 0x3, 0x8000) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0x20000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) writev$auto(r1, &(0x7f0000000100)={0x0, 0x400000000000fdeb}, 0x1) memfd_create$auto(0x0, 0xa) close_range$auto(0x2, 0x1d, 0x0) socket(0x10, 0x80002, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) read$auto(0x3, 0x0, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0x11, 0x401, 0x7) io_uring_setup$auto(0x6, 0x0) syz_open_procfs$namespace(0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) epoll_ctl$auto(0x5, 0xfffffffd, r2, 0x0) open(0x0, 0x0, 0xeb) madvise$auto(0x0, 0xffffffffffff0005, 0x3f0ff4c0) munmap$auto(0x800, 0x7) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, r0, 0x8000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) 2.623413555s ago: executing program 0 (id=3263): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/console\x00', 0x48600, 0x0) read$auto(r0, 0x0, 0x200) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) 2.292703819s ago: executing program 5 (id=3265): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1e, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20008841) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x21c03, &(0x7f0000000000)={0x0, 0x5}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0) 2.168844656s ago: executing program 5 (id=3266): socket(0x2c, 0x80003, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) madvise$auto(0x0, 0x80000001, 0x8) r0 = socket(0x2, 0x2, 0x0) connect$auto(r0, &(0x7f0000000180)=@in={0x2, 0x0, @private=0xa010100}, 0x15) r1 = socket(0x1d, 0x2, 0x2) sendmmsg$auto(r1, 0x0, 0x0, 0x7000038) openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/cec/cec20/status\x00', 0x80440, 0x0) setsockopt$auto(0x3, 0x11b, 0x2, 0xffffffffffffffff, 0x9) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x19, 0x21, "64b6698fa876c13434397b82dd574e5da012ca6618"}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0xad}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004800}, 0x48080) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) 1.975920866s ago: executing program 5 (id=3267): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/tcp\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) truncate$auto(&(0x7f00000001c0)='./file0\x00', 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) keyctl$auto(0x2000000000000016, 0xff000000000000, 0xfffffffffffffffc, 0x1, 0xc) sendmsg$auto_NL80211_CMD_GET_MPP(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xc0, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_FILS_KEK={0x33, 0xf2, "ea1c8038351836096750e181b6f0913ede765114447024a6393103d1c039f2f3941d9708681673fc4addaf92a08f35"}, @NL80211_ATTR_STA_WME={0x14, 0x81, 0x0, 0x1, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xa}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x44}, @NL80211_ATTR_VHT_CAPABILITY={0x4e, 0x9d, "f3ae03fefbcad2355ccb6fa636df323aeb971bd05dde0793cfda58806ed43a1b50656a2651ac19c5b15294f1a92f6ddb7dd9a8f75b204a1c33c2a40bae737c4f3430071e4f06e61d5900"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x87}]}, 0xc0}}, 0x8000) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000200)=""/130, 0x82) 1.927753401s ago: executing program 4 (id=3268): stat$auto(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000000c0)={0x3, 0x3, 0x3, 0x5, 0xffffffffffffffff, 0xee00, 0x0, 0x4a, 0x6, 0x0, 0x4, 0x1800000, 0xffffffff, 0x2, 0x5, 0x200, 0x2}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/mcfilter\x00', 0x28b04, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x3, 0x4, 0x4000000000dc, 0x40eb2, 0xa1c, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x53, 0x9) semctl$auto(0x1ff, 0x2, 0x13, 0x1) shmctl$auto(0x3ff, 0x4, &(0x7f0000000240)={{0x1, 0x0, r0, 0x6, 0x1f, 0xb44, 0x1}, 0xffffffa2, 0x100000000, 0xa, 0x6, @raw=0x2, @inferred, 0x6, 0x0, &(0x7f0000000180)="f80131c821417a535e8d4f236ceccda887367bd438f05ad58832311959933ef1d47194d3e101eb5d323f9a244135420946f70c23a2c2851b3606a1eef8ba26d5d5213c5f08ee64f068d41e4ddff540e65559c3e9fd5a81986025fe1a65efb5a586b1af1f3954f83b185111bc6be64fc3f8bc257cb62cfe0ac97d0b4899207e315d2a2de44eedb1a9290a477b2c579d2d0c5cd3499c701548549da99857a3f2e45461ddad8deaace5d10b3cffbf0f", &(0x7f0000000040)="6fa1d2e578e88147da70b1fbc7db1cd1b309b2e25413aec21a6858ee"}) ioprio_set$auto(0x10001, r1, 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x2) socket(0x10, 0x2, 0x0) brk$auto(0xfff) 1.876284852s ago: executing program 5 (id=3269): close_range$auto(0x2, 0xa, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd14\x00', 0x8001, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x80800, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xfffffffffffffffd, 0x9, 0x3, 0x8012, 0x3, 0x8000) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munmap$auto(0x800, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) poll$auto(&(0x7f0000000040)={0x3, 0xffff, 0xa}, 0x5, 0x1000010b) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0xfffffffffffffffe, 0x8, 0x8003, 0xeb3, 0xfffffffffffffff9, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) timer_settime$auto(0x0, 0xffff8000, 0x0, 0x0) mmap$auto(0xf0, 0x2020008, 0x3, 0xeb1, r1, 0x8000) madvise$auto(0x8c3a, 0x2, 0xf) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) ioctl$auto(0x1, 0x89a0, 0x8) read$auto(0x3, 0x0, 0x400000) 1.673236325s ago: executing program 0 (id=3270): madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/etherd/flush\x00', 0x1, 0x0) writev$auto(0x4, &(0x7f0000000080)={0x0, 0xe0de}, 0x2) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r2 = socket(0x2c, 0x3, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/extfrag/unusable_index\x00', 0x0, 0x0) read$auto_proc_pid_maps_operations_internal(r3, &(0x7f00000010c0)=""/4096, 0x1000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(r2, &(0x7f0000000080)=@xdp={0x2c, 0xc, 0x0, 0x1c}, 0x6b) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)) getsockopt$auto(r0, 0xb60f, 0xce6, &(0x7f0000000000)=']\x00', &(0x7f00000000c0)=0x7) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000080)=0xfbc6) 904.288074ms ago: executing program 5 (id=3271): bpf$auto(0xfffff001, &(0x7f0000000000)=@bpf_attr_3={0xa332, 0x2, 0x7, 0x3, 0xfffffbff, 0x2, 0x1, 0x4, 0x7, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x8, 0x81, 0xb03, 0x0, 0x3ff, 0x7, @attach_prog_fd, 0xb5f3, 0x630, 0x57d, 0x9, 0x8}, 0xa3) writev$auto(0xe, 0x0, 0x3) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0xd, 0x8}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r1, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) prctl$auto(0x38, 0x24, r1, 0x5, 0x38) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) open(&(0x7f00000000c0)='./file1\x00', 0x161302, 0x194) landlock_add_rule$auto(0xf6, 0x3, 0x0, 0x6cf) unshare$auto(0x40000080) ioctl$auto(0x20000000000003, 0x8946, 0x2) acct$auto(&(0x7f0000000040)='\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 903.585565ms ago: executing program 0 (id=3279): mkdir$auto(&(0x7f0000000000)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) lchown$auto(&(0x7f0000000100)='}[,&*}\x00', 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x1, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x100) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffc}, 0x55) sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0xb, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) madvise$auto(0xb, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) setpriority$auto(0x4000000001, 0x100000001, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x53, 0x9) mmap$auto(0x8, 0x400008, 0xdf, 0x12, 0x2, 0x8000) timer_create$auto(0x7, 0x0, 0x0) fcntl$auto(0x2, 0x2, 0x80000001) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x9}}, 0x0) timer_gettime$auto(0x0, 0x0) 581.156165ms ago: executing program 0 (id=3272): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/user\x00') capset$auto(&(0x7f0000000000)={0x4, 0x0}, &(0x7f0000000040)={0x6, 0x9, 0x1dab}) r2 = syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/net\x00') fchdir$auto(r0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x1) open(&(0x7f00000002c0)='./file0\x00', 0x2ef01, 0x20) fcntl$auto(0x3, 0x401, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r3 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0xa, 0x7}, 0x9}, 0x10001, 0x800) r4 = socket(0x10, 0x2, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x9, 0x0, 0x100, 0xee01, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80, 0x8, 0x2, 0xfffffffffffffff8}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYBLOB="7201", @ANYBLOB='!\x00\'', @ANYRES8=r3, @ANYRESOCT=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0xa0080, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, 0x0, 0x40000) mmap$auto(0x0, 0xa6, 0x200000e1, 0x9b72, 0x1ff, 0x28000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) socket(0xa, 0x2, 0x3a) prctl$auto(0x41555856, 0x4, 0x2008, 0x0, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r5 = syz_open_procfs$namespace(0x0, 0x0) getdents64$auto(r5, 0x0, 0x81) ioctl$auto(0x3, 0x890b, 0x38) 311.758978ms ago: executing program 4 (id=3273): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'erspan0\x00'}) r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000480), r0) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0xecc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/block/ram11/queue/discard_zeroes_data\x00', 0x80800, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000005c0), 0x12200, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x20000, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fedbdf2502000000080003008000400008001d"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0xa00}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) close_range$auto(0x2, 0x8, 0x0) 174.072655ms ago: executing program 0 (id=3274): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/user\x00') capset$auto(&(0x7f0000000000)={0x4, 0x0}, &(0x7f0000000040)={0x6, 0x9, 0x1dab}) r2 = syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/net\x00') fchdir$auto(r0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x1) open(&(0x7f00000002c0)='./file0\x00', 0x2ef01, 0x20) fcntl$auto(0x3, 0x401, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r3 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0xa, 0x7}, 0x9}, 0x10001, 0x800) r4 = socket(0x10, 0x2, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x9, 0x0, 0x100, 0xee01, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80, 0x8, 0x2, 0xfffffffffffffff8}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYBLOB="7201", @ANYBLOB='!\x00\'', @ANYRES8=r3, @ANYRESOCT=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) read$auto_msr_fops_msr(0xffffffffffffffff, &(0x7f0000000080)=""/4096, 0x1000) sendmsg$auto_NL80211_CMD_GET_REG(r4, 0x0, 0x40000) mmap$auto(0x0, 0xa6, 0x200000e1, 0x9b72, 0x1ff, 0x28000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) socket(0xa, 0x2, 0x3a) prctl$auto(0x41555856, 0x4, 0x2008, 0x0, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r5 = syz_open_procfs$namespace(0x0, 0x0) getdents64$auto(r5, 0x0, 0x81) ioctl$auto(0x3, 0x890b, 0x38) 163.305698ms ago: executing program 5 (id=3275): stat$auto(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000000c0)={0x3, 0x3, 0x3, 0x5, 0xffffffffffffffff, 0xee00, 0x0, 0x4a, 0x6, 0x0, 0x4, 0x1800000, 0xffffffff, 0x2, 0x5, 0x200, 0x2}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/mcfilter\x00', 0x28b04, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x3, 0x4, 0x4000000000dc, 0x40eb2, 0xa1c, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x53, 0x9) semctl$auto(0x1ff, 0x2, 0x13, 0x1) shmctl$auto(0x3ff, 0x4, &(0x7f0000000240)={{0x1, 0x0, r0, 0x6, 0x1f, 0xb44, 0x1}, 0xffffffa2, 0x100000000, 0xa, 0x6, @raw=0x2, @inferred, 0x6, 0x0, &(0x7f0000000180)="f80131c821417a535e8d4f236ceccda887367bd438f05ad58832311959933ef1d47194d3e101eb5d323f9a244135420946f70c23a2c2851b3606a1eef8ba26d5d5213c5f08ee64f068d41e4ddff540e65559c3e9fd5a81986025fe1a65efb5a586b1af1f3954f83b185111bc6be64fc3f8bc257cb62cfe0ac97d0b4899207e315d2a2de44eedb1a9290a477b2c579d2d0c5cd3499c701548549da99857a3f2e45461ddad8deaace5d10b3cffbf0f", &(0x7f0000000040)="6fa1d2e578e88147da70b1fbc7db1cd1b309b2e25413aec21a6858ee"}) ioprio_set$auto(0x10001, r1, 0x5) r2 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/options/test_nop_accept\x00', 0x881, 0x0) bind$auto(r2, 0x0, 0x2) socket(0x10, 0x2, 0x0) brk$auto(0xfff) 95.620379ms ago: executing program 4 (id=3276): close_range$auto(0x2, 0xa, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd14\x00', 0x30d101, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x80800, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xfffffffffffffffd, 0x9, 0x3, 0x8012, 0x3, 0x8000) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0x20000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) writev$auto(r1, &(0x7f0000000100)={0x0, 0x400000000000fdeb}, 0x1) close_range$auto(0x2, 0x1d, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x80002, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) read$auto(0x3, 0x0, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0x11, 0x401, 0x7) io_uring_setup$auto(0x6, 0x0) syz_open_procfs$namespace(0x0, 0x0) r2 = socket(0x1, 0x1, 0x0) epoll_ctl$auto(0x5, 0xfffffffd, r2, 0x0) open(0x0, 0x0, 0xeb) madvise$auto(0x0, 0xffffffffffff0005, 0x3f0ff4c0) munmap$auto(0x800, 0x7) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, r0, 0x8000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) 0s ago: executing program 6 (id=3277): r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) sendmmsg$auto(r0, &(0x7f0000000280)={{&(0x7f0000000000), 0xff, &(0x7f0000000200)={0x0, 0x8000000000000000}, 0x0, &(0x7f0000000100)="3c0377fa378b7c71453f84d2306fa3a4c392aa346425f93398ba5ca8f0740082118d4064ce9e2c3c1f7d22cc85cb5c871b", 0x2, 0xfd}, 0xdcdc}, 0x0, 0xfd) ioctl$auto_MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x801, 0x100) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0xc4}, 0x6, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto_MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000000)={0x0, 0x4, 0x7}) kernel console output (not intermixed with test programs): /0x710 [ 477.598611][T13128] tomoyo_realpath_from_path+0xbf/0x710 [ 477.604174][T13128] ? tomoyo_path_number_perm+0x235/0x5b0 [ 477.609825][T13128] tomoyo_path_number_perm+0x248/0x5b0 [ 477.615305][T13128] ? tomoyo_path_number_perm+0x235/0x5b0 [ 477.620957][T13128] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 477.626974][T13128] ? __pfx_lock_release+0x10/0x10 [ 477.632004][T13128] ? trace_lock_acquire+0x14e/0x1f0 [ 477.637249][T13128] ? lock_acquire+0x2f/0xb0 [ 477.641771][T13128] ? __fget_files+0x40/0x3a0 [ 477.646387][T13128] ? __fget_files+0x206/0x3a0 [ 477.651083][T13128] security_file_ioctl+0x9b/0x240 [ 477.656121][T13128] __x64_sys_ioctl+0xb7/0x200 [ 477.660807][T13128] do_syscall_64+0xcd/0x250 [ 477.665326][T13128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.671231][T13128] RIP: 0033:0x7fde0df85d29 [ 477.675651][T13128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.695269][T13128] RSP: 002b:00007fde0bdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 477.703690][T13128] RAX: ffffffffffffffda RBX: 00007fde0e175fa0 RCX: 00007fde0df85d29 [ 477.711662][T13128] RDX: 0000000000000007 RSI: 0000000000001276 RDI: 0000000000000003 [ 477.719646][T13128] RBP: 00007fde0bdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 477.727619][T13128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.735594][T13128] R13: 0000000000000000 R14: 00007fde0e175fa0 R15: 00007ffd2d3db198 [ 477.743581][T13128] [ 477.800842][T13128] ERROR: Out of memory at tomoyo_realpath_from_path. [ 478.067615][T13127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1795'. [ 481.328397][T13172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1806'. [ 481.997412][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1809'. [ 482.280500][T13178] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1807'. [ 484.920417][T13247] FAULT_INJECTION: forcing a failure. [ 484.920417][T13247] name failslab, interval 1, probability 0, space 0, times 0 [ 484.946177][T13247] CPU: 0 UID: 0 PID: 13247 Comm: syz.5.1820 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 484.957003][T13247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 484.967089][T13247] Call Trace: [ 484.970400][T13247] [ 484.973374][T13247] dump_stack_lvl+0x16c/0x1f0 [ 484.978092][T13247] should_fail_ex+0x497/0x5b0 [ 484.982809][T13247] ? fs_reclaim_acquire+0xae/0x150 [ 484.987963][T13247] should_failslab+0xc2/0x120 [ 484.992674][T13247] __kmalloc_noprof+0xce/0x4f0 [ 484.997477][T13247] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 485.003136][T13247] ? tomoyo_realpath_from_path+0xbf/0x710 [ 485.008895][T13247] tomoyo_realpath_from_path+0xbf/0x710 [ 485.014479][T13247] ? tomoyo_path_number_perm+0x235/0x5b0 [ 485.020160][T13247] tomoyo_path_number_perm+0x248/0x5b0 [ 485.025666][T13247] ? tomoyo_path_number_perm+0x235/0x5b0 [ 485.031346][T13247] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 485.037413][T13247] ? __pfx_lock_release+0x10/0x10 [ 485.042465][T13247] ? trace_lock_acquire+0x14e/0x1f0 [ 485.047708][T13247] ? lock_acquire+0x2f/0xb0 [ 485.052235][T13247] ? __fget_files+0x40/0x3a0 [ 485.056861][T13247] ? __fget_files+0x206/0x3a0 [ 485.061583][T13247] security_file_ioctl+0x9b/0x240 [ 485.066637][T13247] __x64_sys_ioctl+0xb7/0x200 [ 485.071345][T13247] do_syscall_64+0xcd/0x250 [ 485.075901][T13247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.081832][T13247] RIP: 0033:0x7ff768385d29 [ 485.086274][T13247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.105922][T13247] RSP: 002b:00007ff769275038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 485.114376][T13247] RAX: ffffffffffffffda RBX: 00007ff768575fa0 RCX: 00007ff768385d29 [ 485.122392][T13247] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000004 [ 485.130392][T13247] RBP: 00007ff769275090 R08: 0000000000000000 R09: 0000000000000000 [ 485.138403][T13247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.146409][T13247] R13: 0000000000000000 R14: 00007ff768575fa0 R15: 00007ffe8ef90618 [ 485.154431][T13247] [ 485.355312][T13247] ERROR: Out of memory at tomoyo_realpath_from_path. [ 486.923068][T13287] FAULT_INJECTION: forcing a failure. [ 486.923068][T13287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.981086][T13287] CPU: 0 UID: 0 PID: 13287 Comm: syz.0.1824 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 486.991915][T13287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 487.001999][T13287] Call Trace: [ 487.005304][T13287] [ 487.008261][T13287] dump_stack_lvl+0x16c/0x1f0 [ 487.012980][T13287] should_fail_ex+0x497/0x5b0 [ 487.017677][T13287] _copy_from_user+0x2e/0xd0 [ 487.022282][T13287] copy_msghdr_from_user+0x99/0x160 [ 487.027493][T13287] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 487.033323][T13287] ___sys_sendmsg+0xff/0x1e0 [ 487.037926][T13287] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.043145][T13287] ? __pfx_lock_release+0x10/0x10 [ 487.048176][T13287] ? trace_lock_acquire+0x14e/0x1f0 [ 487.053392][T13287] ? __fget_files+0x206/0x3a0 [ 487.058086][T13287] __sys_sendmsg+0x16e/0x220 [ 487.062689][T13287] ? __pfx___sys_sendmsg+0x10/0x10 [ 487.067825][T13287] do_syscall_64+0xcd/0x250 [ 487.072339][T13287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.078240][T13287] RIP: 0033:0x7fde0df85d29 [ 487.082656][T13287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.102273][T13287] RSP: 002b:00007fde0bdf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.110695][T13287] RAX: ffffffffffffffda RBX: 00007fde0e175fa0 RCX: 00007fde0df85d29 [ 487.118668][T13287] RDX: 0000000020008084 RSI: 00000000200058c0 RDI: 0000000000000004 [ 487.126643][T13287] RBP: 00007fde0bdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 487.134618][T13287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.142593][T13287] R13: 0000000000000000 R14: 00007fde0e175fa0 R15: 00007ffd2d3db198 [ 487.150667][T13287] [ 488.702178][T13304] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1828'. [ 488.740925][T13316] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1830'. [ 490.115249][T13341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1833'. [ 490.955999][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1838'. [ 491.925065][T13346] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1837'. [ 492.357233][T13379] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1843'. [ 494.111509][T13408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1851'. [ 494.820260][T13417] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1848'. [ 500.205169][T13485] [U] [ 500.207946][T13485] [U] [ 500.210673][T13485] [U] [ 500.213403][T13485] [U] [ 500.222568][T13485] [U] [ 500.225322][T13485] [U] [ 500.228048][T13485] [U] [ 500.230779][T13485] [U] [ 500.273407][T13490] [U] [ 501.186707][T13511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1874'. [ 502.389057][T13533] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1880'. [ 504.757143][T13583] FAULT_INJECTION: forcing a failure. [ 504.757143][T13583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.791773][T13583] CPU: 1 UID: 0 PID: 13583 Comm: syz.0.1892 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 504.802609][T13583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 504.812700][T13583] Call Trace: [ 504.815998][T13583] [ 504.818953][T13583] dump_stack_lvl+0x16c/0x1f0 [ 504.823671][T13583] should_fail_ex+0x497/0x5b0 [ 504.828456][T13583] _copy_from_user+0x2e/0xd0 [ 504.833087][T13583] copy_msghdr_from_user+0x99/0x160 [ 504.838334][T13583] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 504.844184][T13583] ? __lock_acquire+0xcc5/0x3c40 [ 504.849162][T13583] ___sys_sendmsg+0xff/0x1e0 [ 504.853799][T13583] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.859052][T13583] ? trace_lock_acquire+0x14e/0x1f0 [ 504.864328][T13583] __sys_sendmmsg+0x201/0x420 [ 504.869056][T13583] ? __pfx___sys_sendmmsg+0x10/0x10 [ 504.874306][T13583] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 504.880337][T13583] ? fput+0x67/0x440 [ 504.884277][T13583] ? ksys_write+0x1ba/0x250 [ 504.888809][T13583] ? __pfx_ksys_write+0x10/0x10 [ 504.893694][T13583] __x64_sys_sendmmsg+0x9c/0x100 [ 504.898668][T13583] ? lockdep_hardirqs_on+0x7c/0x110 [ 504.903908][T13583] do_syscall_64+0xcd/0x250 [ 504.908451][T13583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.914388][T13583] RIP: 0033:0x7fde0df85d29 [ 504.918829][T13583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.938470][T13583] RSP: 002b:00007fde0bdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 504.946917][T13583] RAX: ffffffffffffffda RBX: 00007fde0e175fa0 RCX: 00007fde0df85d29 [ 504.954920][T13583] RDX: 0000000000000004 RSI: 0000000020000200 RDI: 0000000000000004 [ 504.962915][T13583] RBP: 00007fde0bdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 504.970910][T13583] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 504.978912][T13583] R13: 0000000000000000 R14: 00007fde0e175fa0 R15: 00007ffd2d3db198 [ 504.986934][T13583] [ 506.993972][T13614] openvswitch: HfR: Dropping previously announced user features [ 507.031476][T13614] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1899'. [ 507.076695][T13614] HfR: left promiscuous mode [ 509.164214][T13652] HfR: entered promiscuous mode [ 509.212412][T13652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1911'. [ 509.265126][T13652] HfR: left promiscuous mode [ 510.346382][T13664] netlink: 306 bytes leftover after parsing attributes in process `syz.0.1913'. [ 510.867273][T13671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1914'. [ 513.410088][T13724] HfR: entered promiscuous mode [ 513.745398][T13721] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1927'. [ 514.978091][T13740] HfR: entered promiscuous mode [ 515.005583][T13740] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1929'. [ 515.644291][T13745] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1934'. [ 519.444192][T13803] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1946'. [ 522.804643][T13867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1956'. [ 523.249447][T13883] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1959'. [ 526.198829][T13925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1970'. [ 526.486271][T13926] HfR: entered promiscuous mode [ 527.084347][T13922] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1969'. [ 528.228275][T13945] openvswitch: HfR: Dropping previously announced user features [ 528.336333][T13940] openvswitch: HfR: Dropping previously announced user features [ 528.413810][T13940] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1972'. [ 528.794912][T13942] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1974'. [ 528.952949][T13945] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1974'. [ 529.118117][T13942] HfR: left promiscuous mode [ 531.405925][T14002] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1985'. [ 531.518038][T14000] openvswitch: HfR: Dropping previously announced user features [ 531.576302][T13997] HfR: entered promiscuous mode [ 531.604057][T13997] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1986'. [ 532.442956][T14015] openvswitch: HfR: Dropping previously announced user features [ 532.659637][T14033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1991'. [ 532.778823][T14010] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1987'. [ 532.787993][T14010] HfR: left promiscuous mode [ 532.839273][T14015] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1987'. [ 533.263372][T14035] openvswitch: HfR: Dropping previously announced user features [ 533.277062][T14035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1992'. [ 533.286373][T14035] HfR: left promiscuous mode [ 533.356889][T14043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1992'. [ 533.490014][ T29] audit: type=1804 audit(8277292331.704:8): pid=14041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1993" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1105 res=1 errno=0 [ 534.801507][T14054] HfR: entered promiscuous mode [ 534.869690][T14054] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1997'. [ 535.485646][T14074] openvswitch: HfR: Dropping previously announced user features [ 535.549396][T14074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2000'. [ 535.582143][T14074] HfR: left promiscuous mode [ 535.614212][T14079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2000'. [ 535.681251][T14098] HfR: entered promiscuous mode [ 535.859968][T14098] HfR: left promiscuous mode [ 536.620634][T14110] HfR: entered promiscuous mode [ 536.673966][T14110] __nla_validate_parse: 2 callbacks suppressed [ 536.673989][T14110] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2005'. [ 536.701089][T14110] HfR: left promiscuous mode [ 536.935105][T14120] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2005'. [ 537.551554][T14123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2008'. [ 538.277101][ T29] audit: type=1804 audit(8277292336.570:9): pid=14132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2010" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1105 res=1 errno=0 [ 542.024805][T14198] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2019'. [ 542.507207][T14197] HfR: entered promiscuous mode [ 542.532695][T14197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2020'. [ 542.549087][T14197] HfR: left promiscuous mode [ 542.602029][T14199] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2020'. [ 543.825697][T14221] openvswitch: HfR: Dropping previously announced user features [ 544.119591][T14227] HfR: entered promiscuous mode [ 544.177312][T14227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2027'. [ 544.213037][T14221] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2026'. [ 544.230332][T14227] HfR: left promiscuous mode [ 544.332261][T14216] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2023'. [ 544.457458][T14213] HfR: entered promiscuous mode [ 544.851451][T14242] [U] [ 544.854234][T14242] [U] [ 544.856971][T14242] [U] [ 544.859699][T14242] [U] [ 544.884451][T14242] [U] [ 544.887222][T14242] [U] [ 544.889949][T14242] [U] [ 544.892673][T14242] [U] [ 544.900144][T14242] [U] [ 544.902879][T14242] [U] [ 544.905581][T14242] [U] [ 544.908283][T14242] [U] [ 544.923174][T14242] [U] [ 544.925929][T14242] [U] [ 544.928655][T14242] [U] [ 544.931377][T14242] [U] [ 544.936657][T14245] [U] [ 546.240394][T14264] [U] [ 546.243167][T14264] [U] [ 546.245899][T14264] [U] [ 546.248622][T14264] [U] [ 546.266202][T14264] [U] [ 546.268973][T14264] [U] [ 546.271694][T14264] [U] [ 546.274421][T14264] [U] [ 546.328704][T14264] [U] [ 546.680218][T14273] [U] [ 546.682988][T14273] [U] [ 546.685715][T14273] [U] [ 546.688438][T14273] [U] [ 546.729253][T14273] [U] [ 546.732030][T14273] [U] [ 546.734767][T14273] [U] [ 546.737501][T14273] [U] [ 546.780224][T14274] [U] [ 548.634035][T14293] openvswitch: HfR: Dropping previously announced user features [ 549.127450][T14288] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2043'. [ 549.424704][T14299] HfR: entered promiscuous mode [ 550.608865][T14304] HfR: entered promiscuous mode [ 550.622208][T14304] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2046'. [ 552.178030][T14340] openvswitch: HfR: Dropping previously announced user features [ 552.231574][T14340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2053'. [ 552.547281][T14345] [U] [ 552.550044][T14345] [U] [ 552.552767][T14345] [U] [ 552.555494][T14345] [U] [ 552.580240][T14345] [U] [ 552.583005][T14345] [U] [ 552.585736][T14345] [U] [ 552.588457][T14345] [U] [ 552.618739][T14347] [U] [ 553.395106][T14354] openvswitch: HfR: Dropping previously announced user features [ 553.425055][T14354] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2058'. [ 553.444604][T14354] HfR: left promiscuous mode [ 555.123971][T14385] netlink: 306 bytes leftover after parsing attributes in process `syz.5.2062'. [ 556.681992][T14410] openvswitch: HfR: Dropping previously announced user features [ 557.042262][T14419] openvswitch: HfR: Dropping previously announced user features [ 557.144777][T14410] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2067'. [ 557.366430][T14415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2069'. [ 557.421051][T14415] HfR: left promiscuous mode [ 558.732363][T14432] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2072'. [ 562.350346][T14479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2082'. [ 562.899431][T14486] openvswitch: HfR: Dropping previously announced user features [ 563.167621][T14481] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2084'. [ 563.178888][T14481] HfR: left promiscuous mode [ 564.854604][T14503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2088'. [ 566.375660][T14540] [U] [ 566.378436][T14540] [U] [ 566.381165][T14540] [U] [ 566.383889][T14540] [U] [ 566.425015][T14540] [U] [ 566.427783][T14540] [U] [ 566.430509][T14540] [U] [ 566.433231][T14540] [U] [ 566.466911][T14540] [U] [ 566.469677][T14540] [U] [ 566.472408][T14540] [U] [ 566.475138][T14540] [U] [ 566.506594][T14543] [U] [ 566.998423][T14534] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2094'. [ 569.045624][T14588] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2100'. [ 569.145615][T14591] openvswitch: HfR: Dropping previously announced user features [ 570.036027][T14602] HfR: entered promiscuous mode [ 570.162348][T14612] openvswitch: HfR: Dropping previously announced user features [ 570.197502][T14612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2105'. [ 570.258135][T14612] HfR: left promiscuous mode [ 572.160955][T14637] openvswitch: HfR: Dropping previously announced user features [ 572.244538][T14637] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2110'. [ 572.304668][T14637] HfR: left promiscuous mode [ 573.239536][T14626] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2108'. [ 574.920000][T14650] HfR: entered promiscuous mode [ 579.534969][T14796] Process accounting resumed [ 581.102627][T14828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2147'. [ 581.493049][T14830] HfR: entered promiscuous mode [ 583.447931][T14863] HfR: entered promiscuous mode [ 585.266859][T14878] openvswitch: HfR: Dropping previously announced user features [ 585.321919][T14878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2159'. [ 585.371089][T14878] HfR: left promiscuous mode [ 585.429255][T14895] netlink: 'syz.4.2162': attribute type 5 has an invalid length. [ 585.468966][T14895] netlink: 314 bytes leftover after parsing attributes in process `syz.4.2162'. [ 586.018989][T14908] FAULT_INJECTION: forcing a failure. [ 586.018989][T14908] name failslab, interval 1, probability 0, space 0, times 0 [ 586.049825][T14908] CPU: 0 UID: 0 PID: 14908 Comm: syz.4.2169 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 586.060649][T14908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 586.070733][T14908] Call Trace: [ 586.074040][T14908] [ 586.076991][T14908] dump_stack_lvl+0x16c/0x1f0 [ 586.081725][T14908] should_fail_ex+0x497/0x5b0 [ 586.086447][T14908] ? fs_reclaim_acquire+0xae/0x150 [ 586.091603][T14908] should_failslab+0xc2/0x120 [ 586.096334][T14908] __kmalloc_noprof+0xce/0x4f0 [ 586.101141][T14908] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 586.106808][T14908] ? tomoyo_realpath_from_path+0xbf/0x710 [ 586.112568][T14908] tomoyo_realpath_from_path+0xbf/0x710 [ 586.118150][T14908] ? tomoyo_path_number_perm+0x235/0x5b0 [ 586.123828][T14908] tomoyo_path_number_perm+0x248/0x5b0 [ 586.129344][T14908] ? tomoyo_path_number_perm+0x235/0x5b0 [ 586.135032][T14908] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 586.141061][T14908] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 586.146770][T14908] ? fd_install+0x242/0x750 [ 586.151329][T14908] security_file_ioctl+0x9b/0x240 [ 586.156399][T14908] __x64_sys_ioctl+0xb7/0x200 [ 586.161116][T14908] do_syscall_64+0xcd/0x250 [ 586.165664][T14908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.171598][T14908] RIP: 0033:0x7f407d385d29 [ 586.176041][T14908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.195680][T14908] RSP: 002b:00007f407e0f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 586.204135][T14908] RAX: ffffffffffffffda RBX: 00007f407d575fa0 RCX: 00007f407d385d29 [ 586.212140][T14908] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000003 [ 586.220143][T14908] RBP: 00007f407e0f3090 R08: 0000000000000000 R09: 0000000000000000 [ 586.228240][T14908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.236248][T14908] R13: 0000000000000000 R14: 00007f407d575fa0 R15: 00007fffd5d34868 [ 586.244264][T14908] [ 586.273770][T14908] ERROR: Out of memory at tomoyo_realpath_from_path. [ 587.352263][T14957] netlink: 4680 bytes leftover after parsing attributes in process `syz.6.2175'. [ 587.447635][T14955] HfR: entered promiscuous mode [ 587.608078][T14959] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2176'. [ 587.628016][T14959] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 588.096475][T14977] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2181'. [ 588.151450][T14977] bridge0: port 3(hsr0) entered disabled state [ 588.157904][T14977] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.165226][T14977] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.222153][T14977] bridge0: entered allmulticast mode [ 588.416095][T14982] serio: Serial port ptm0 [ 588.442651][T14983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2182'. [ 588.848414][T14987] openvswitch: HfR: Dropping previously announced user features [ 589.198645][T14993] FAULT_INJECTION: forcing a failure. [ 589.198645][T14993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.213373][T14993] CPU: 1 UID: 0 PID: 14993 Comm: syz.4.2186 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 589.224191][T14993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 589.234283][T14993] Call Trace: [ 589.237587][T14993] [ 589.240543][T14993] dump_stack_lvl+0x16c/0x1f0 [ 589.245262][T14993] should_fail_ex+0x497/0x5b0 [ 589.249986][T14993] _copy_from_user+0x2e/0xd0 [ 589.254621][T14993] kstrtouint_from_user+0xd7/0x1c0 [ 589.259772][T14993] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 589.265538][T14993] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 589.271219][T14993] proc_fail_nth_write+0x84/0x250 [ 589.276282][T14993] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 589.281933][T14993] ? ksys_write+0x12b/0x250 [ 589.286452][T14993] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 589.292095][T14993] vfs_write+0x24c/0x1150 [ 589.296437][T14993] ? __pfx_vfs_write+0x10/0x10 [ 589.301211][T14993] ? __pfx_do_sys_openat2+0x10/0x10 [ 589.306444][T14993] ksys_write+0x12b/0x250 [ 589.310870][T14993] ? __pfx_ksys_write+0x10/0x10 [ 589.315738][T14993] do_syscall_64+0xcd/0x250 [ 589.320257][T14993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.326164][T14993] RIP: 0033:0x7f407d3847df [ 589.330589][T14993] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 589.350208][T14993] RSP: 002b:00007f407e0f3030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 589.358636][T14993] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f407d3847df [ 589.366613][T14993] RDX: 0000000000000001 RSI: 00007f407e0f30a0 RDI: 0000000000000005 [ 589.374603][T14993] RBP: 00007f407e0f3090 R08: 0000000000000000 R09: 0000000000000000 [ 589.382589][T14993] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 589.390575][T14993] R13: 0000000000000000 R14: 00007f407d575fa0 R15: 00007fffd5d34868 [ 589.398566][T14993] [ 591.208667][T15047] random: crng reseeded on system resumption [ 591.342520][T15041] openvswitch: HfR: Dropping previously announced user features [ 592.452088][T15089] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2203'. [ 595.746239][T15164] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2218'. [ 595.845509][T15161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2216'. [ 595.919234][T15158] openvswitch: HfR: Dropping previously announced user features [ 595.961060][T15161] HfR: left promiscuous mode [ 596.686613][T15175] Process accounting resumed [ 596.704983][T15175] bridge0: port 3(team0) entered blocking state [ 596.713905][T15175] bridge0: port 3(team0) entered disabled state [ 596.724053][T15175] team0: entered allmulticast mode [ 596.729226][T15175] team_slave_0: entered allmulticast mode [ 596.736551][T15175] team_slave_1: entered allmulticast mode [ 596.746623][T15175] team0: entered promiscuous mode [ 596.756538][T15175] team_slave_0: entered promiscuous mode [ 596.765226][T15175] team_slave_1: entered promiscuous mode [ 596.775630][T15175] bridge0: port 3(team0) entered blocking state [ 596.782032][T15175] bridge0: port 3(team0) entered forwarding state [ 599.431495][T15223] HfR: entered promiscuous mode [ 600.743836][T15221] sctp: [Deprecated]: syz.0.2234 (pid 15221) Use of int in maxseg socket option. [ 600.743836][T15221] Use struct sctp_assoc_value instead [ 602.087570][T15258] FAULT_INJECTION: forcing a failure. [ 602.087570][T15258] name failslab, interval 1, probability 0, space 0, times 0 [ 602.134935][T15258] CPU: 0 UID: 0 PID: 15258 Comm: syz.4.2242 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 602.145765][T15258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 602.155865][T15258] Call Trace: [ 602.159170][T15258] [ 602.164730][T15258] dump_stack_lvl+0x16c/0x1f0 [ 602.164790][T15258] should_fail_ex+0x497/0x5b0 [ 602.164823][T15258] ? fs_reclaim_acquire+0xae/0x150 [ 602.164855][T15258] should_failslab+0xc2/0x120 [ 602.164890][T15258] __kmalloc_noprof+0xce/0x4f0 [ 602.164923][T15258] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 602.164948][T15258] ? tomoyo_realpath_from_path+0xbf/0x710 [ 602.164984][T15258] tomoyo_realpath_from_path+0xbf/0x710 [ 602.165017][T15258] ? tomoyo_path_number_perm+0x235/0x5b0 [ 602.165059][T15258] tomoyo_path_number_perm+0x248/0x5b0 [ 602.165097][T15258] ? tomoyo_path_number_perm+0x235/0x5b0 [ 602.165138][T15258] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 602.165207][T15258] ? __pfx_lock_release+0x10/0x10 [ 602.165232][T15258] ? trace_lock_acquire+0x14e/0x1f0 [ 602.165269][T15258] ? lock_acquire+0x2f/0xb0 [ 602.165291][T15258] ? __fget_files+0x40/0x3a0 [ 602.165326][T15258] ? __fget_files+0x206/0x3a0 [ 602.165360][T15258] security_file_ioctl+0x9b/0x240 [ 602.165390][T15258] __x64_sys_ioctl+0xb7/0x200 [ 602.165418][T15258] do_syscall_64+0xcd/0x250 [ 602.165453][T15258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.165485][T15258] RIP: 0033:0x7f407d385d29 [ 602.165507][T15258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 602.165532][T15258] RSP: 002b:00007f407e0d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 602.165560][T15258] RAX: ffffffffffffffda RBX: 00007f407d576080 RCX: 00007f407d385d29 [ 602.165579][T15258] RDX: 0000000020000100 RSI: 00000000c0109207 RDI: 0000000000000003 [ 602.165596][T15258] RBP: 00007f407e0d2090 R08: 0000000000000000 R09: 0000000000000000 [ 602.165613][T15258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.165629][T15258] R13: 0000000000000000 R14: 00007f407d576080 R15: 00007fffd5d34868 [ 602.165663][T15258] [ 602.165755][ C0] vkms_vblank_simulate: vblank timer overrun [ 602.236227][T15258] ERROR: Out of memory at tomoyo_realpath_from_path. [ 607.131375][T15314] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2255'. [ 607.994813][T15322] openvswitch: HfR: Dropping previously announced user features [ 608.326326][T15337] openvswitch: HfR: Dropping previously announced user features [ 609.317827][T15370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2264'. [ 609.345094][T15370] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 610.811759][T15389] openvswitch: HfR: Dropping previously announced user features [ 613.511120][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 613.526902][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 613.535198][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 613.546046][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 613.556316][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 613.563878][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 613.849643][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.104592][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.309771][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.594750][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.853358][T15437] chnl_net:caif_netlink_parms(): no params data found [ 615.135958][T15437] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.164547][T15437] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.171817][T15437] bridge_slave_0: entered allmulticast mode [ 615.226028][T15437] bridge_slave_0: entered promiscuous mode [ 615.245149][T15437] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.272647][T15437] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.280030][T15437] bridge_slave_1: entered allmulticast mode [ 615.297287][T15437] bridge_slave_1: entered promiscuous mode [ 615.353681][T15462] openvswitch: HfR: Dropping previously announced user features [ 615.413849][ T62] hsr0: left allmulticast mode [ 615.418686][ T62] hsr_slave_0: left allmulticast mode [ 615.442992][ T62] hsr_slave_1: left allmulticast mode [ 615.448499][ T62] hsr0: left promiscuous mode [ 615.456054][ T62] bridge0: port 3(hsr0) entered disabled state [ 615.484320][ T62] bridge_slave_1: left allmulticast mode [ 615.490029][ T62] bridge_slave_1: left promiscuous mode [ 615.502904][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.524368][ T62] bridge_slave_0: left allmulticast mode [ 615.530848][ T62] bridge_slave_0: left promiscuous mode [ 615.550883][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.662688][ T5832] Bluetooth: hci1: command tx timeout [ 616.110879][ T62] erspan0 (unregistering): left allmulticast mode [ 616.847776][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.859371][ T62] bond0 (unregistering): Released all slaves [ 616.883760][T15437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.906136][T15437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.067784][ T62] HfR: left promiscuous mode [ 617.207730][T15437] team0: Port device team_slave_0 added [ 617.217118][T15437] team0: Port device team_slave_1 added [ 617.267816][T15437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.274914][T15437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.320637][T15437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.376592][T15437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.419440][T15437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.477919][T15437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.741331][ T5832] Bluetooth: hci1: command tx timeout [ 617.967387][T15437] hsr_slave_0: entered promiscuous mode [ 617.988407][T15437] hsr_slave_1: entered promiscuous mode [ 617.999197][T15437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 618.009180][T15437] Cannot create hsr debugfs directory [ 618.332720][ T62] hsr_slave_0: left promiscuous mode [ 618.346041][ T62] hsr_slave_1: left promiscuous mode [ 618.352355][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.371822][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.388989][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.406776][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.442654][ T62] veth1_macvtap: left promiscuous mode [ 618.457480][ T62] veth1_vlan: left promiscuous mode [ 618.467315][ T62] veth0_vlan: left promiscuous mode [ 619.145353][ T62] team0 (unregistering): Port device team_slave_1 removed [ 619.211505][ T62] team0 (unregistering): Port device team_slave_0 removed [ 619.811427][ T5832] Bluetooth: hci1: command tx timeout [ 621.212603][T15437] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 621.290477][T15437] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 621.322966][T15437] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 621.401640][T15437] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 621.835112][T15437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.869870][ T5832] Bluetooth: hci1: command tx timeout [ 621.921745][T15437] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.201825][ T2907] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.209028][ T2907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.255440][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.262629][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.291695][T15554] openvswitch: HfR: Dropping previously announced user features [ 622.335141][T15437] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 622.385971][T15437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 622.840497][T15437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.896144][T15437] veth0_vlan: entered promiscuous mode [ 622.907565][T15437] veth1_vlan: entered promiscuous mode [ 622.937215][T15437] veth0_macvtap: entered promiscuous mode [ 622.946212][T15437] veth1_macvtap: entered promiscuous mode [ 622.961367][T15437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.971939][T15437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.981827][T15437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.992347][T15437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.003245][T15437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.012789][T15437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.023315][T15437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.033546][T15437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.044035][T15437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.054847][T15437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.065167][T15437] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.074173][T15437] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.083325][T15437] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.092049][T15437] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.270800][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.303417][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.394138][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.411919][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.836667][T15607] HfR: entered promiscuous mode [ 625.402084][T15644] FAULT_INJECTION: forcing a failure. [ 625.402084][T15644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.473349][T15644] CPU: 1 UID: 0 PID: 15644 Comm: syz.5.2315 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 625.484192][T15644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 625.494280][T15644] Call Trace: [ 625.497582][T15644] [ 625.500539][T15644] dump_stack_lvl+0x16c/0x1f0 [ 625.505252][T15644] should_fail_ex+0x497/0x5b0 [ 625.509971][T15644] _copy_to_iter+0x29b/0x1400 [ 625.514690][T15644] ? trace_lock_acquire+0x14e/0x1f0 [ 625.519929][T15644] ? kasan_quarantine_put+0x10a/0x240 [ 625.525349][T15644] ? __pfx__copy_to_iter+0x10/0x10 [ 625.530552][T15644] ? __virt_addr_valid+0x1a4/0x590 [ 625.535709][T15644] ? __virt_addr_valid+0x5e/0x590 [ 625.540771][T15644] ? __phys_addr_symbol+0x30/0x80 [ 625.545832][T15644] ? __check_object_size+0x488/0x710 [ 625.551170][T15644] seq_read_iter+0xd00/0x12b0 [ 625.555898][T15644] proc_reg_read_iter+0x21d/0x310 [ 625.560962][T15644] vfs_read+0x87f/0xbe0 [ 625.565159][T15644] ? __pfx_vfs_read+0x10/0x10 [ 625.569888][T15644] ksys_read+0x12b/0x250 [ 625.574163][T15644] ? __pfx_ksys_read+0x10/0x10 [ 625.578960][T15644] do_syscall_64+0xcd/0x250 [ 625.583478][T15644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.589387][T15644] RIP: 0033:0x7ff768385d29 [ 625.593806][T15644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.613426][T15644] RSP: 002b:00007ff769275038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 625.621858][T15644] RAX: ffffffffffffffda RBX: 00007ff768575fa0 RCX: 00007ff768385d29 [ 625.629833][T15644] RDX: 0000000000001000 RSI: 0000000020001040 RDI: 0000000000000003 [ 625.637807][T15644] RBP: 00007ff769275090 R08: 0000000000000000 R09: 0000000000000000 [ 625.645783][T15644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.653758][T15644] R13: 0000000000000000 R14: 00007ff768575fa0 R15: 00007ffe8ef90618 [ 625.661762][T15644] [ 626.200130][T15650] HfR: entered promiscuous mode [ 629.972941][T15709] openvswitch: HfR: Dropping previously announced user features [ 633.492648][T15767] openvswitch: HfR: Dropping previously announced user features [ 633.986729][T15792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2341'. [ 636.145077][T15828] openvswitch: netlink: Key 32 has unexpected len 8 expected 2 [ 636.669075][T15837] openvswitch: HfR: Dropping previously announced user features [ 637.468989][T15859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2358'. [ 638.904934][T15907] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2364'. [ 639.234922][T15916] openvswitch: HfR: Dropping previously announced user features [ 639.330261][T15913] openvswitch: HfR: Dropping previously announced user features [ 639.344016][T15916] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2365'. [ 642.124989][T15966] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2375'.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            [ 715.850656][T17630] [U] [ 715.853691][T17630] [U] [ 715.856687][T17630] [U] [ 715.859680][T17630] [U] [ 715.864575][T17630] [U] [ 715.867601][T17630] [U] [ 715.870589][T17630] [U] [ 715.873578][T17630] [U] [ 715.878137][T17630] [U] [ 715.881145][T17630] [U] [ 715.884139][T17630] [U] [ 715.887121][T17630] [U] [ 715.891802][T17630] [U] [ 715.894809][T17630] [U] [ 715.897797][T17630] [U] [ 715.900781][T17630] [U] [ 715.906741][T17630] [U] [ 715.909745][T17630] [U] [ 715.912735][T17630] [U] [ 715.915717][T17630] [U] syzkaller syzkaller login: [ 715.949792][T17630] [U] [ 715.952801][T17630] [U] [ 715.955768][T17630] [U] [ 715.958732][T17630] [U] [ 715.963077][T17630] [U] [ 715.966083][T17630] [U] [ 715.969068][T17630] [U] [ 715.972051][T17630] [U] [ 715.976368][T17630] [U] [ 715.979372][T17630] [U] [ 715.982368][T17630] [U] [ 715.985356][T17630] [U] [ 715.989919][T17630] [U] [ 715.992919][T17630] [U] [ 715.995905][T17630] [U] [ 715.998894][T17630] [U] [ 716.004307][T17630] [U] [ 716.007311][T17630] [U] [ 716.010302][T17630] [U] [ 716.013291][T17630] [U] [ 716.017553][T17630] [U] [ 716.020548][T17630] [U] [ 716.023516][T17630] [U] [ 716.026478][T17630] [U] [ 716.041964][T17630] [U] [ 716.704725][T17654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2734'. [ 718.154364][T17683] Process accounting resumed [ 718.193066][T17690] FAULT_INJECTION: forcing a failure. [ 718.193066][T17690] name failslab, interval 1, probability 0, space 0, times 0 [ 718.208215][T17690] CPU: 1 UID: 0 PID: 17690 Comm: syz.0.2741 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 718.220091][T17690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 718.231170][T17690] Call Trace: [ 718.234794][T17690] [ 718.238035][T17690] dump_stack_lvl+0x16c/0x1f0 [ 718.243218][T17690] should_fail_ex+0x497/0x5b0 [ 718.248394][T17690] ? fs_reclaim_acquire+0xae/0x150 [ 718.254061][T17690] should_failslab+0xc2/0x120 [ 718.259244][T17690] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 718.265289][T17690] ? ptlock_alloc+0x1f/0x70 [ 718.270289][T17690] ptlock_alloc+0x1f/0x70 [ 718.275081][T17690] pte_alloc_one+0x74/0x390 [ 718.280066][T17690] __pte_alloc+0x6e/0x3b0 [ 718.284856][T17690] ? __pfx___pte_alloc+0x10/0x10 [ 718.290317][T17690] ? find_held_lock+0x2d/0x110 [ 718.295590][T17690] do_pte_missing+0x2810/0x3e00 [ 718.300960][T17690] ? mt_find+0x82d/0xa20 [ 718.305668][T17690] __handle_mm_fault+0x103c/0x2a40 [ 718.311338][T17690] ? __pfx___handle_mm_fault+0x10/0x10 [ 718.317384][T17690] ? __lock_acquire+0x15a9/0x3c40 [ 718.322984][T17690] handle_mm_fault+0x3fa/0xaa0 [ 718.328270][T17690] __get_user_pages+0x8d9/0x3b50 [ 718.333749][T17690] ? __pfx___get_user_pages+0x10/0x10 [ 718.339687][T17690] ? down_read_killable+0xcc/0x380 [ 718.345343][T17690] ? __pfx_down_read_killable+0x10/0x10 [ 718.351486][T17690] ? __pfx___lock_acquire+0x10/0x10 [ 718.357233][T17690] __gup_longterm_locked+0x211/0x1870 [ 718.363190][T17690] ? __pfx___gup_longterm_locked+0x10/0x10 [ 718.369622][T17690] ? gup_fast_fallback+0x1218/0x2690 [ 718.375473][T17690] ? __pfx_lock_release+0x10/0x10 [ 718.381033][T17690] ? trace_lock_acquire+0x14e/0x1f0 [ 718.386794][T17690] ? sanity_check_pinned_pages+0x23/0x11e0 [ 718.393225][T17690] gup_fast_fallback+0x1802/0x2690 [ 718.398878][T17690] ? __pfx_gup_fast_fallback+0x10/0x10 [ 718.404916][T17690] ? is_bpf_text_address+0x94/0x1a0 [ 718.410672][T17690] ? __pfx_mark_lock+0x10/0x10 [ 718.415947][T17690] ? __kernel_text_address+0xd/0x40 [ 718.421733][T17690] ? unwind_get_return_address+0x59/0xa0 [ 718.427925][T17690] pin_user_pages_fast+0xa8/0x100 [ 718.433445][T17690] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 718.439648][T17690] ? __pfx_mark_lock+0x10/0x10 [ 718.444934][T17690] iov_iter_extract_pages+0x3a5/0x2010 [ 718.450998][T17690] ? trace_xfs_defer_create_intent+0x1cd/0x220 [ 718.457783][T17690] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 718.464321][T17690] ? find_held_lock+0x2d/0x110 [ 718.469586][T17690] bio_iov_iter_get_pages+0x37c/0x1100 [ 718.475601][T17690] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 718.482110][T17690] __blkdev_direct_IO_simple+0x318/0x7c0 [ 718.488351][T17690] ? __pfx___blkdev_direct_IO_simple+0x10/0x10 [ 718.495191][T17690] ? rcu_is_watching+0x12/0xc0 [ 718.500470][T17690] ? trace_inode_set_ctime_to_ts+0x17f/0x1f0 [ 718.507113][T17690] ? iov_iter_is_aligned+0xf2/0x5a0 [ 718.512898][T17690] ? iov_iter_npages+0xf0/0x5a0 [ 718.518273][T17690] blkdev_direct_IO+0xa1c/0x1ad0 [ 718.523747][T17690] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 718.529684][T17690] ? rcu_is_watching+0x12/0xc0 [ 718.534958][T17690] ? __mark_inode_dirty+0x2a5/0xe50 [ 718.540721][T17690] ? filemap_check_errors+0xa9/0x160 [ 718.546586][T17690] blkdev_write_iter+0x6f9/0xd40 [ 718.552052][T17690] vfs_write+0x5ae/0x1150 [ 718.556845][T17690] ? __pfx_blkdev_write_iter+0x10/0x10 [ 718.562878][T17690] ? __pfx_vfs_write+0x10/0x10 [ 718.568157][T17690] ? __fget_files+0x40/0x3a0 [ 718.573232][T17690] ksys_write+0x12b/0x250 [ 718.577992][T17690] ? __pfx_ksys_write+0x10/0x10 [ 718.583347][T17690] do_syscall_64+0xcd/0x250 [ 718.588295][T17690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.594808][T17690] RIP: 0033:0x7f15c9d85d29 [ 718.599663][T17690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.621235][T17690] RSP: 002b:00007f15c7bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 718.630507][T17690] RAX: ffffffffffffffda RBX: 00007f15c9f75fa0 RCX: 00007f15c9d85d29 [ 718.639283][T17690] RDX: 00000000fffffffc RSI: 0000000000000000 RDI: 0000000000000003 [ 718.648075][T17690] RBP: 00007f15c7bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 718.656852][T17690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.665638][T17690] R13: 0000000000000000 R14: 00007f15c9f75fa0 R15: 00007ffe24901af8 [ 718.674409][T17690] [ 718.697663][T17692] netlink: 306 bytes leftover after parsing attributes in process `syz.4.2742'. [ 718.970869][T17684] Process accounting resumed [ 719.159252][T17712] program syz.4.2747 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 719.316627][T17718] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2748'. [ 720.127337][T17725] Process accounting resumed [ 720.424913][T17733] Process accounting resumed [ 720.673115][T17743] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 720.685990][T17743] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db syzkaller syzkaller login: [ 722.584032][T17771] Process accounting resumed [ 722.636871][T17785] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2765'. [ 723.667975][T17805] program syz.0.2768 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 723.814828][T17811] netlink: 306 bytes leftover after parsing attributes in process `syz.6.2771'. [ 724.473909][T17825] HfR: entered promiscuous mode [ 724.502091][T17825] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2774'. [ 724.535741][T17825] HfR: left promiscuous mode [ 724.553817][T17828] FAULT_INJECTION: forcing a failure. [ 724.553817][T17828] name failslab, interval 1, probability 0, space 0, times 0 [ 724.597005][T17828] CPU: 1 UID: 0 PID: 17828 Comm: syz.6.2774 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 724.608904][T17828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 724.619990][T17828] Call Trace: [ 724.623610][T17828] [ 724.626858][T17828] dump_stack_lvl+0x16c/0x1f0 [ 724.632042][T17828] should_fail_ex+0x497/0x5b0 [ 724.637215][T17828] ? fs_reclaim_acquire+0xae/0x150 [ 724.642874][T17828] should_failslab+0xc2/0x120 [ 724.648056][T17828] __kmalloc_noprof+0xce/0x4f0 [ 724.653329][T17828] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 724.661374][T17828] ? lockdep_hardirqs_on+0x7c/0x110 [ 724.667102][T17828] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 724.674932][T17828] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 724.680936][T17828] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 724.687611][T17828] ? genl_get_cmd+0x195/0x580 [ 724.692763][T17828] ? __radix_tree_lookup+0x21f/0x2c0 [ 724.698582][T17828] genl_rcv_msg+0x565/0x800 [ 724.703541][T17828] ? __pfx_genl_rcv_msg+0x10/0x10 [ 724.709074][T17828] ? __pfx_ovs_dp_cmd_get+0x10/0x10 [ 724.714802][T17828] netlink_rcv_skb+0x165/0x410 [ 724.720048][T17828] ? __pfx_genl_rcv_msg+0x10/0x10 [ 724.725578][T17828] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 724.731400][T17828] ? down_read+0xc9/0x330 [ 724.736168][T17828] ? __pfx_down_read+0x10/0x10 [ 724.741410][T17828] ? netlink_deliver_tap+0x1ae/0xca0 [ 724.747226][T17828] genl_rcv+0x28/0x40 [ 724.751606][T17828] netlink_unicast+0x53c/0x7f0 [ 724.756855][T17828] ? __pfx_netlink_unicast+0x10/0x10 [ 724.762669][T17828] ? __phys_addr_symbol+0x30/0x80 [ 724.768197][T17828] ? __check_object_size+0x488/0x710 [ 724.774015][T17828] netlink_sendmsg+0x8b8/0xd70 [ 724.779255][T17828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 724.785073][T17828] ____sys_sendmsg+0x9ae/0xb40 [ 724.790334][T17828] ? copy_msghdr_from_user+0x10b/0x160 [ 724.796363][T17828] ? __pfx_____sys_sendmsg+0x10/0x10 [ 724.802203][T17828] ___sys_sendmsg+0x135/0x1e0 [ 724.807365][T17828] ? __pfx____sys_sendmsg+0x10/0x10 [ 724.813107][T17828] ? __pfx_lock_release+0x10/0x10 [ 724.818631][T17828] ? trace_lock_acquire+0x14e/0x1f0 [ 724.824360][T17828] ? __fget_files+0x206/0x3a0 [ 724.829510][T17828] __sys_sendmsg+0x16e/0x220 [ 724.834563][T17828] ? __pfx___sys_sendmsg+0x10/0x10 [ 724.840207][T17828] do_syscall_64+0xcd/0x250 [ 724.845165][T17828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.851648][T17828] RIP: 0033:0x7f9632585d29 [ 724.856514][T17828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 724.878082][T17828] RSP: 002b:00007f96333c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 724.887337][T17828] RAX: ffffffffffffffda RBX: 00007f9632776080 RCX: 00007f9632585d29 [ 724.896103][T17828] RDX: 0000000004000024 RSI: 00000000200002c0 RDI: 0000000000000003 [ 724.904871][T17828] RBP: 00007f96333c8090 R08: 0000000000000000 R09: 0000000000000000 [ 724.913654][T17828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.922416][T17828] R13: 0000000000000001 R14: 00007f9632776080 R15: 00007ffc6b81ef68 [ 724.931489][T17828] [ 725.350888][T17824] Process accounting resumed [ 728.089559][T17897] Process accounting resumed [ 728.574370][T17904] Process accounting resumed [ 729.349227][ T29] audit: type=1804 audit(8277292528.643:10): pid=17944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2792" name="#)-\&[}" dev="mqueue" ino=63481 res=1 errno=0 [ 729.372850][T17944] kernel read not supported for file /#)-\&[} (pid: 17944 comm: syz.0.2792) [ 729.433637][ T29] audit: type=1800 audit(8277292528.714:11): pid=17944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2792" name="#)-\&[}" dev="mqueue" ino=63481 res=0 errno=0 [ 731.156225][T17979] Process accounting resumed [ 734.846224][T18031] Process accounting resumed [ 735.209755][T18057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2814'. [ 736.871661][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 737.746221][T18101] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2823'. [ 737.801061][T18080] Process accounting resumed [ 739.915019][T18137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2832'. syzkaller syzkaller login: [ 741.352560][T18157] Process accounting resumed [ 741.756833][T18186] netlink: 350 bytes leftover after parsing attributes in process `syz.0.2839'. [ 742.730130][T18197] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2843'. syzkaller syzkaller login: [ 744.836627][T18212] Process accounting resumed [ 745.291851][T18238] netlink: 306 bytes leftover after parsing attributes in process `syz.0.2851'. [ 747.587209][T18246] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2854'. [ 749.180577][T18263] Process accounting resumed [ 749.341199][T18283] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2863'. [ 749.489368][T18285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2865'. [ 749.910549][T18295] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2866'. syzkaller syzkaller login: [ 750.032257][T18295] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 750.045242][T18295] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode [ 751.482150][T18320] Process accounting resumed syzkaller syzkaller login: [ 752.307534][T18328] Process accounting resumed [ 752.355426][T18333] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 752.364232][T18333] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 752.382570][T18333] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 752.390346][T18333] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 752.445850][T18333] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 752.464644][T18333] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 752.484011][T18333] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 752.522273][T18333] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 752.556851][T18333] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 752.580042][T18333] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 752.603685][T18333] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 752.925133][T18363] nfs: Bad value for 'source' [ 753.249852][T18367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2886'. [ 753.584984][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 753.703633][T18380] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2890'. [ 753.765546][T18376] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2884'. [ 754.383707][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 754.460247][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 754.619339][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 754.762162][T18396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2893'. [ 754.892030][T18392] FAULT_INJECTION: forcing a failure. [ 754.892030][T18392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 754.952488][T18392] CPU: 0 UID: 0 PID: 18392 Comm: syz.4.2893 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 754.964391][T18392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 754.975479][T18392] Call Trace: [ 754.979113][T18392] [ 754.982356][T18392] dump_stack_lvl+0x16c/0x1f0 [ 754.987535][T18392] should_fail_ex+0x497/0x5b0 [ 754.992712][T18392] _copy_to_user+0x32/0xd0 [ 754.997605][T18392] simple_read_from_buffer+0xd0/0x160 [ 755.003535][T18392] proc_fail_nth_read+0x198/0x270 [ 755.009091][T18392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 755.015230][T18392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 755.021369][T18392] vfs_read+0x1df/0xbe0 [ 755.025968][T18392] ? __fget_files+0x1fc/0x3a0 [ 755.031142][T18392] ? __pfx___mutex_lock+0x10/0x10 [ 755.036696][T18392] ? __pfx_vfs_read+0x10/0x10 [ 755.041868][T18392] ? __fget_files+0x206/0x3a0 [ 755.047034][T18392] ksys_read+0x12b/0x250 [ 755.051707][T18392] ? __pfx_ksys_read+0x10/0x10 [ 755.056970][T18392] do_syscall_64+0xcd/0x250 [ 755.061940][T18392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.068426][T18392] RIP: 0033:0x7f992e38473c [ 755.073280][T18392] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 755.094943][T18392] RSP: 002b:00007f992f257030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 755.104203][T18392] RAX: ffffffffffffffda RBX: 00007f992e575fa0 RCX: 00007f992e38473c [ 755.112975][T18392] RDX: 000000000000000f RSI: 00007f992f2570a0 RDI: 0000000000000003 [ 755.121743][T18392] RBP: 00007f992f257090 R08: 0000000000000000 R09: 0000000000000000 [ 755.130510][T18392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 755.139277][T18392] R13: 0000000000000000 R14: 00007f992e575fa0 R15: 00007ffcef8744d8 [ 755.148058][T18392] [ 755.488586][T18415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2899'. syzkaller syzkaller login: [ 755.653881][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 756.194380][T18430] netlink: 306 bytes leftover after parsing attributes in process `syz.0.2902'. [ 756.460256][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 756.529731][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 756.692579][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 757.716560][T18419] Process accounting resumed [ 758.238509][T18440] Process accounting resumed [ 758.519926][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 758.598591][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 758.647385][T18464] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2910'. [ 758.758031][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 759.157840][T18470] FAULT_INJECTION: forcing a failure. [ 759.157840][T18470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 759.235333][T18470] CPU: 0 UID: 0 PID: 18470 Comm: syz.5.2912 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 759.247236][T18470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 759.258326][T18470] Call Trace: [ 759.261953][T18470] [ 759.265194][T18470] dump_stack_lvl+0x16c/0x1f0 [ 759.270375][T18470] should_fail_ex+0x497/0x5b0 [ 759.275552][T18470] _copy_from_user+0x2e/0xd0 [ 759.280628][T18470] copy_msghdr_from_user+0x99/0x160 [ 759.286384][T18470] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 759.292804][T18470] ? __lock_acquire+0xcc5/0x3c40 [ 759.298260][T18470] ? hlock_class+0x4e/0x130 [ 759.303242][T18470] ? __lock_acquire+0x15a9/0x3c40 [ 759.308800][T18470] ___sys_sendmsg+0xff/0x1e0 [ 759.313881][T18470] ? __pfx____sys_sendmsg+0x10/0x10 [ 759.319623][T18470] ? __pfx___lock_acquire+0x10/0x10 [ 759.325400][T18470] ? __pfx___might_resched+0x10/0x10 [ 759.331247][T18470] ? __might_fault+0xe3/0x190 [ 759.336450][T18470] __sys_sendmmsg+0x201/0x420 [ 759.341635][T18470] ? __pfx___sys_sendmmsg+0x10/0x10 [ 759.347402][T18470] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 759.354036][T18470] ? fput+0x67/0x440 [ 759.358372][T18470] ? ksys_write+0x1ba/0x250 [ 759.363357][T18470] ? __pfx_ksys_write+0x10/0x10 [ 759.368728][T18470] __x64_sys_sendmmsg+0x9c/0x100 [ 759.374199][T18470] ? lockdep_hardirqs_on+0x7c/0x110 [ 759.379967][T18470] do_syscall_64+0xcd/0x250 [ 759.384952][T18470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.391466][T18470] RIP: 0033:0x7fdd1a185d29 [ 759.396342][T18470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.417936][T18470] RSP: 002b:00007fdd1afe9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 759.427199][T18470] RAX: ffffffffffffffda RBX: 00007fdd1a375fa0 RCX: 00007fdd1a185d29 [ 759.435969][T18470] RDX: 0000000000000004 RSI: 0000000020000200 RDI: 0000000000000003 [ 759.444732][T18470] RBP: 00007fdd1afe9090 R08: 0000000000000000 R09: 0000000000000000 [ 759.453493][T18470] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 759.462255][T18470] R13: 0000000000000000 R14: 00007fdd1a375fa0 R15: 00007ffec735fbc8 [ 759.471052][T18470] [ 760.133900][T18471] Process accounting resumed [ 761.357195][T18486] Process accounting resumed [ 762.110568][T18507] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2920'. [ 763.720072][T18528] Process accounting resumed [ 764.830688][T18548] Process accounting resumed syzkaller syzkaller login: [ 765.614316][T18566] Process accounting resumed [ 766.414977][T18604] netlink: 306 bytes leftover after parsing attributes in process `syz.6.2948'. [ 767.037094][T18625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2956'. [ 768.117034][T18650] FAULT_INJECTION: forcing a failure. [ 768.117034][T18650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.171738][T18650] CPU: 0 UID: 0 PID: 18650 Comm: syz.4.2964 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 768.183646][T18650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 768.194731][T18650] Call Trace: [ 768.198352][T18650] [ 768.201596][T18650] dump_stack_lvl+0x16c/0x1f0 [ 768.206788][T18650] should_fail_ex+0x497/0x5b0 [ 768.211969][T18650] _copy_from_iter+0x29b/0x1400 [ 768.217341][T18650] ? trace_lock_acquire+0x14e/0x1f0 [ 768.223087][T18650] ? __alloc_skb+0x200/0x380 [ 768.228169][T18650] ? __pfx__copy_from_iter+0x10/0x10 [ 768.234015][T18650] ? __virt_addr_valid+0x1a4/0x590 [ 768.239673][T18650] ? __virt_addr_valid+0x5e/0x590 [ 768.245228][T18650] ? __phys_addr_symbol+0x30/0x80 [ 768.250772][T18650] ? __check_object_size+0x488/0x710 [ 768.256595][T18650] netlink_sendmsg+0x813/0xd70 [ 768.261852][T18650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 768.267673][T18650] ____sys_sendmsg+0x9ae/0xb40 [ 768.272911][T18650] ? copy_msghdr_from_user+0x10b/0x160 [ 768.278921][T18650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 768.284738][T18650] ___sys_sendmsg+0x135/0x1e0 [ 768.289884][T18650] ? __pfx____sys_sendmsg+0x10/0x10 [ 768.295612][T18650] ? __pfx_lock_release+0x10/0x10 [ 768.301137][T18650] ? trace_lock_acquire+0x14e/0x1f0 [ 768.306862][T18650] ? __fget_files+0x206/0x3a0 [ 768.312010][T18650] __sys_sendmsg+0x16e/0x220 [ 768.317064][T18650] ? __pfx___sys_sendmsg+0x10/0x10 [ 768.322707][T18650] do_syscall_64+0xcd/0x250 [ 768.327666][T18650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.334148][T18650] RIP: 0033:0x7f992e385d29 [ 768.338997][T18650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 768.360576][T18650] RSP: 002b:00007f992f257038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 768.369834][T18650] RAX: ffffffffffffffda RBX: 00007f992e575fa0 RCX: 00007f992e385d29 [ 768.378607][T18650] RDX: 0000000004000004 RSI: 0000000020003000 RDI: 0000000000000004 [ 768.387382][T18650] RBP: 00007f992f257090 R08: 0000000000000000 R09: 0000000000000000 [ 768.396144][T18650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.404911][T18650] R13: 0000000000000000 R14: 00007f992e575fa0 R15: 00007ffcef8744d8 [ 768.413687][T18650] [ 770.818466][T18700] Process accounting resumed [ 772.772144][T18737] FAULT_INJECTION: forcing a failure. [ 772.772144][T18737] name failslab, interval 1, probability 0, space 0, times 0 [ 772.788385][T18737] CPU: 0 UID: 0 PID: 18737 Comm: syz.0.2985 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 772.800263][T18737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 772.811347][T18737] Call Trace: [ 772.814972][T18737] [ 772.818209][T18737] dump_stack_lvl+0x16c/0x1f0 [ 772.823381][T18737] should_fail_ex+0x497/0x5b0 [ 772.828553][T18737] ? fs_reclaim_acquire+0xae/0x150 [ 772.834209][T18737] should_failslab+0xc2/0x120 [ 772.839393][T18737] __kmalloc_noprof+0xce/0x4f0 [ 772.844666][T18737] ? __pfx___mutex_trylock_common+0x10/0x10 [ 772.851171][T18737] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 772.859212][T18737] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 772.867041][T18737] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 772.873062][T18737] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 772.879739][T18737] ? genl_get_cmd+0x195/0x580 [ 772.884891][T18737] ? bpf_lsm_capable+0x9/0x10 [ 772.890034][T18737] ? security_capable+0x7e/0x260 [ 772.895480][T18737] genl_rcv_msg+0x565/0x800 [ 772.900437][T18737] ? __pfx_genl_rcv_msg+0x10/0x10 [ 772.905961][T18737] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 772.911969][T18737] ? __pfx_nl802154_set_cca_mode+0x10/0x10 [ 772.918364][T18737] ? __pfx_nl802154_post_doit+0x10/0x10 [ 772.924478][T18737] netlink_rcv_skb+0x165/0x410 [ 772.929722][T18737] ? __pfx_genl_rcv_msg+0x10/0x10 [ 772.935251][T18737] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 772.941078][T18737] ? down_read+0xc9/0x330 [ 772.945844][T18737] ? __pfx_down_read+0x10/0x10 [ 772.951088][T18737] ? netlink_deliver_tap+0x1ae/0xca0 [ 772.956900][T18737] genl_rcv+0x28/0x40 [ 772.961277][T18737] netlink_unicast+0x53c/0x7f0 [ 772.966515][T18737] ? __pfx_netlink_unicast+0x10/0x10 [ 772.972323][T18737] ? __phys_addr_symbol+0x30/0x80 [ 772.977854][T18737] ? __check_object_size+0x488/0x710 [ 772.983685][T18737] netlink_sendmsg+0x8b8/0xd70 [ 772.988936][T18737] ? __pfx_netlink_sendmsg+0x10/0x10 [ 772.994762][T18737] ____sys_sendmsg+0x9ae/0xb40 [ 773.000003][T18737] ? copy_msghdr_from_user+0x10b/0x160 [ 773.006020][T18737] ? __pfx_____sys_sendmsg+0x10/0x10 [ 773.011848][T18737] ___sys_sendmsg+0x135/0x1e0 [ 773.017000][T18737] ? __pfx____sys_sendmsg+0x10/0x10 [ 773.022749][T18737] ? __pfx_lock_release+0x10/0x10 [ 773.028274][T18737] ? trace_lock_acquire+0x14e/0x1f0 [ 773.034003][T18737] ? __fget_files+0x206/0x3a0 [ 773.039160][T18737] __sys_sendmsg+0x16e/0x220 [ 773.044219][T18737] ? __pfx___sys_sendmsg+0x10/0x10 [ 773.049865][T18737] do_syscall_64+0xcd/0x250 [ 773.054825][T18737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.061307][T18737] RIP: 0033:0x7f15c9d85d29 [ 773.066158][T18737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.087723][T18737] RSP: 002b:00007f15c7bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 773.096978][T18737] RAX: ffffffffffffffda RBX: 00007f15c9f75fa0 RCX: 00007f15c9d85d29 [ 773.105756][T18737] RDX: 0000000000000000 RSI: 0000000020001f40 RDI: 0000000000000003 [ 773.114517][T18737] RBP: 00007f15c7bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 773.123278][T18737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.132045][T18737] R13: 0000000000000000 R14: 00007f15c9f75fa0 R15: 00007ffe24901af8 [ 773.140826][T18737] [ 773.463010][T18739] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2986'. [ 773.476308][T18739] bridge_slave_1: left allmulticast mode [ 773.484157][T18739] bridge_slave_1: left promiscuous mode [ 773.490471][T18739] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.544754][T18739] bridge_slave_0: left allmulticast mode [ 773.552480][T18739] bridge_slave_0: left promiscuous mode [ 773.567992][T18739] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.829538][T18750] Process accounting resumed [ 775.123969][T18770] Process accounting paused [ 776.495697][T18792] Process accounting resumed [ 777.213426][T18825] netlink: 306 bytes leftover after parsing attributes in process `syz.5.3005'. [ 781.998013][T18900] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3025'. [ 782.008968][T18900] bridge_slave_1: left allmulticast mode [ 782.015199][T18900] bridge_slave_1: left promiscuous mode [ 782.021657][T18900] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.037507][T18900] bridge_slave_0: left allmulticast mode [ 782.043766][T18900] bridge_slave_0: left promiscuous mode [ 782.058444][T18900] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.126179][T18923] Process accounting resumed [ 785.269058][T18963] Process accounting resumed [ 786.881033][T19002] Process accounting resumed syzkaller syzkaller login: [ 789.493139][T19050] Process accounting resumed syzkaller syzkaller login: [ 791.526635][T19094] Process accounting resumed syzkaller syzkaller login: [ 796.644093][T19239] kAFS: No cell specified syzkaller syzkaller login: [ 800.941674][T19340] Process accounting paused [ 801.483857][T19361] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3167'. [ 801.560819][T19363] FAULT_INJECTION: forcing a failure. [ 801.560819][T19363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.616824][T19363] CPU: 0 UID: 0 PID: 19363 Comm: syz.6.3168 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 801.628719][T19363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 801.639793][T19363] Call Trace: [ 801.643392][T19363] [ 801.646613][T19363] dump_stack_lvl+0x16c/0x1f0 [ 801.651763][T19363] should_fail_ex+0x497/0x5b0 [ 801.656915][T19363] _copy_from_user+0x2e/0xd0 [ 801.661971][T19363] get_bitmap+0xdf/0x1a0 [ 801.666642][T19363] get_nodes+0x1dc/0x210 [ 801.671310][T19363] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 801.677899][T19363] ? __pfx_get_nodes+0x10/0x10 [ 801.683142][T19363] ? __fget_files+0x206/0x3a0 [ 801.688287][T19363] kernel_migrate_pages+0x8a/0x750 [ 801.693916][T19363] ? __pfx_kernel_migrate_pages+0x10/0x10 [ 801.700220][T19363] ? ksys_write+0x1ba/0x250 [ 801.705173][T19363] ? __pfx_ksys_write+0x10/0x10 [ 801.710512][T19363] __x64_sys_migrate_pages+0x96/0x100 [ 801.716428][T19363] ? lockdep_hardirqs_on+0x7c/0x110 [ 801.722148][T19363] do_syscall_64+0xcd/0x250 [ 801.727105][T19363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.733588][T19363] RIP: 0033:0x7f9632585d29 [ 801.738438][T19363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 801.760010][T19363] RSP: 002b:00007f96333e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 801.769267][T19363] RAX: ffffffffffffffda RBX: 00007f9632775fa0 RCX: 00007f9632585d29 [ 801.778033][T19363] RDX: 0000000020000100 RSI: 0000000000000006 RDI: 0000000000000000 [ 801.786794][T19363] RBP: 00007f96333e9090 R08: 0000000000000000 R09: 0000000000000000 [ 801.795559][T19363] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000001 [ 801.804323][T19363] R13: 0000000000000000 R14: 00007f9632775fa0 R15: 00007ffc6b81ef68 [ 801.813099][T19363] [ 801.914609][T19361] bond0: (slave bond_slave_1): Releasing backup interface [ 802.728965][T19401] Process accounting resumed [ 802.746897][T19401] ACPI: Can not change Invalid GPE/Fixed Event status [ 803.011925][T19401] ACPI: Can not change Invalid GPE/Fixed Event status [ 803.963289][T19434] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3181'. [ 804.155135][T19439] netlink: 4680 bytes leftover after parsing attributes in process `syz.0.3182'. [ 804.249337][T19434] bond0: (slave bond_slave_1): Releasing backup interface syzkaller syzkaller login: [ 805.055438][ T29] audit: type=1800 audit(8277292604.737:12): pid=19457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3186" name="discovery_nqn" dev="configfs" ino=71148 res=0 errno=0 [ 805.762025][T19450] Process accounting resumed [ 805.879473][T19483] netlink: 326 bytes leftover after parsing attributes in process `syz.6.3194'. [ 806.492318][T19483] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3194'. [ 806.568022][T19491] FAULT_INJECTION: forcing a failure. [ 806.568022][T19491] name failslab, interval 1, probability 0, space 0, times 0 [ 806.602153][T19491] CPU: 0 UID: 0 PID: 19491 Comm: syz.4.3196 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 806.614058][T19491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 806.625141][T19491] Call Trace: [ 806.628763][T19491] [ 806.631999][T19491] dump_stack_lvl+0x16c/0x1f0 [ 806.637172][T19491] should_fail_ex+0x497/0x5b0 [ 806.642348][T19491] ? fs_reclaim_acquire+0xae/0x150 [ 806.648002][T19491] should_failslab+0xc2/0x120 [ 806.653178][T19491] __kmalloc_node_noprof+0xd1/0x520 [ 806.658930][T19491] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 806.664970][T19491] __kvmalloc_node_noprof+0xad/0x1a0 [ 806.670816][T19491] seq_read_iter+0x82a/0x12b0 [ 806.676007][T19491] kernfs_fop_read_iter+0x414/0x580 [ 806.681756][T19491] ? copy_splice_read+0x1a8/0xb90 [ 806.687310][T19491] copy_splice_read+0x620/0xb90 [ 806.692687][T19491] ? __pfx_copy_splice_read+0x10/0x10 [ 806.698632][T19491] ? __pfx_register_lock_class+0x10/0x10 [ 806.704876][T19491] ? __pfx_copy_splice_read+0x10/0x10 [ 806.710804][T19491] do_splice_read+0x282/0x370 [ 806.715955][T19491] splice_direct_to_actor+0x2a4/0xa40 [ 806.721872][T19491] ? __pfx_direct_splice_actor+0x10/0x10 [ 806.728077][T19491] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 806.734563][T19491] ? __fget_files+0x1fc/0x3a0 [ 806.739712][T19491] do_splice_direct+0x178/0x250 [ 806.745047][T19491] ? __pfx_do_splice_direct+0x10/0x10 [ 806.750955][T19491] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 806.757449][T19491] do_sendfile+0xaed/0xe30 [ 806.762316][T19491] ? __pfx_do_sendfile+0x10/0x10 [ 806.767746][T19491] ? __fget_files+0x206/0x3a0 [ 806.772893][T19491] __x64_sys_sendfile64+0x1da/0x220 [ 806.778610][T19491] ? ksys_write+0x1ba/0x250 [ 806.783563][T19491] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 806.789866][T19491] do_syscall_64+0xcd/0x250 [ 806.794831][T19491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.801314][T19491] RIP: 0033:0x7f992e385d29 [ 806.806167][T19491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 806.827743][T19491] RSP: 002b:00007f992f257038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 806.837006][T19491] RAX: ffffffffffffffda RBX: 00007f992e575fa0 RCX: 00007f992e385d29 [ 806.845771][T19491] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 806.854536][T19491] RBP: 00007f992f257090 R08: 0000000000000000 R09: 0000000000000000 [ 806.863298][T19491] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 806.872060][T19491] R13: 0000000000000000 R14: 00007f992e575fa0 R15: 00007ffcef8744d8 [ 806.880840][T19491] [ 807.156812][T19497] netlink: 4680 bytes leftover after parsing attributes in process `syz.6.3197'. [ 808.767722][T19531] netlink: 306 bytes leftover after parsing attributes in process `syz.6.3208'. [ 808.807680][T19535] netlink: 306 bytes leftover after parsing attributes in process `syz.4.3211'. [ 809.576112][T19556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3218'. [ 809.593281][T19556] FAULT_INJECTION: forcing a failure. [ 809.593281][T19556] name failslab, interval 1, probability 0, space 0, times 0 [ 809.613680][T19556] CPU: 1 UID: 0 PID: 19556 Comm: syz.5.3218 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 809.625570][T19556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 809.636655][T19556] Call Trace: [ 809.640287][T19556] [ 809.643526][T19556] dump_stack_lvl+0x16c/0x1f0 [ 809.648686][T19556] should_fail_ex+0x497/0x5b0 [ 809.653842][T19556] ? fs_reclaim_acquire+0xae/0x150 [ 809.659476][T19556] should_failslab+0xc2/0x120 [ 809.664633][T19556] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 809.671028][T19556] ? __alloc_skb+0x2b3/0x380 [ 809.676106][T19556] __alloc_skb+0x2b3/0x380 [ 809.680967][T19556] ? __pfx___alloc_skb+0x10/0x10 [ 809.686398][T19556] ? __pfx_mark_lock+0x10/0x10 [ 809.691647][T19556] ? __pfx___nla_validate_parse+0x10/0x10 [ 809.697946][T19556] nldev_sys_get_doit.part.0+0x7f/0x510 [ 809.704042][T19556] ? find_held_lock+0x2d/0x110 [ 809.709283][T19556] ? __pfx_nldev_sys_get_doit.part.0+0x10/0x10 [ 809.716053][T19556] ? __nla_parse+0x40/0x60 [ 809.720946][T19556] nldev_sys_get_doit+0x119/0x1d0 [ 809.726472][T19556] ? __pfx_nldev_sys_get_doit+0x10/0x10 [ 809.732643][T19556] ? down_read+0xc9/0x330 [ 809.737407][T19556] ? __pfx_down_read+0x10/0x10 [ 809.742650][T19556] ? __pfx_nldev_sys_get_doit+0x10/0x10 [ 809.748743][T19556] rdma_nl_rcv_msg+0x388/0x6e0 [ 809.753990][T19556] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 809.759812][T19556] ? __pfx___lock_acquire+0x10/0x10 [ 809.765535][T19556] rdma_nl_rcv_skb.constprop.0.isra.0+0x2e6/0x450 [ 809.772612][T19556] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 809.780270][T19556] ? netlink_deliver_tap+0x1ae/0xca0 [ 809.786095][T19556] netlink_unicast+0x53c/0x7f0 [ 809.791342][T19556] ? __pfx_netlink_unicast+0x10/0x10 [ 809.797157][T19556] ? __phys_addr_symbol+0x30/0x80 [ 809.802689][T19556] ? __check_object_size+0x488/0x710 [ 809.808505][T19556] netlink_sendmsg+0x8b8/0xd70 [ 809.813749][T19556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 809.819566][T19556] ____sys_sendmsg+0x9ae/0xb40 [ 809.824809][T19556] ? copy_msghdr_from_user+0x10b/0x160 [ 809.830822][T19556] ? __pfx_____sys_sendmsg+0x10/0x10 [ 809.836644][T19556] ___sys_sendmsg+0x135/0x1e0 [ 809.841790][T19556] ? __pfx____sys_sendmsg+0x10/0x10 [ 809.847532][T19556] ? __pfx_lock_release+0x10/0x10 [ 809.853052][T19556] ? trace_lock_acquire+0x14e/0x1f0 [ 809.858776][T19556] ? __fget_files+0x206/0x3a0 [ 809.863929][T19556] __sys_sendmsg+0x16e/0x220 [ 809.868981][T19556] ? __pfx___sys_sendmsg+0x10/0x10 [ 809.874627][T19556] do_syscall_64+0xcd/0x250 [ 809.879583][T19556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.886065][T19556] RIP: 0033:0x7fdd1a185d29 [ 809.890914][T19556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.912481][T19556] RSP: 002b:00007fdd1afe9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 809.921742][T19556] RAX: ffffffffffffffda RBX: 00007fdd1a375fa0 RCX: 00007fdd1a185d29 [ 809.930517][T19556] RDX: 0000000004000004 RSI: 0000000020003000 RDI: 0000000000000004 [ 809.939281][T19556] RBP: 00007fdd1afe9090 R08: 0000000000000000 R09: 0000000000000000 [ 809.948041][T19556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.956800][T19556] R13: 0000000000000000 R14: 00007fdd1a375fa0 R15: 00007ffec735fbc8 [ 809.965575][T19556] [ 811.254726][T19598] mkiss: ax0: crc mode is auto. [ 811.949901][T19615] ubi13: attaching mtd0 [ 811.965632][T19615] ubi13 error: ubi_attach_mtd_dev: bad VID header (13) or data offsets (77) [ 812.384517][T19627] netlink: 306 bytes leftover after parsing attributes in process `syz.0.3243'. [ 813.385799][T19649] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3248'. [ 814.532702][T19682] FAULT_INJECTION: forcing a failure. [ 814.532702][T19682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.547761][T19682] CPU: 0 UID: 0 PID: 19682 Comm: syz.4.3259 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 814.559636][T19682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 814.570732][T19682] Call Trace: [ 814.574357][T19682] [ 814.577601][T19682] dump_stack_lvl+0x16c/0x1f0 [ 814.582772][T19682] should_fail_ex+0x497/0x5b0 [ 814.587956][T19682] _copy_to_user+0x32/0xd0 [ 814.592855][T19682] simple_read_from_buffer+0xd0/0x160 [ 814.598800][T19682] proc_fail_nth_read+0x198/0x270 [ 814.604372][T19682] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 814.610518][T19682] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 814.616665][T19682] vfs_read+0x1df/0xbe0 [ 814.621266][T19682] ? __fget_files+0x1fc/0x3a0 [ 814.626437][T19682] ? __pfx___mutex_lock+0x10/0x10 [ 814.631991][T19682] ? __pfx_vfs_read+0x10/0x10 [ 814.637148][T19682] ? __fget_files+0x206/0x3a0 [ 814.642297][T19682] ksys_read+0x12b/0x250 [ 814.646965][T19682] ? __pfx_ksys_read+0x10/0x10 [ 814.652216][T19682] do_syscall_64+0xcd/0x250 [ 814.657174][T19682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.663663][T19682] RIP: 0033:0x7f992e38473c [ 814.668516][T19682] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 814.690083][T19682] RSP: 002b:00007f992f257030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 814.699338][T19682] RAX: ffffffffffffffda RBX: 00007f992e575fa0 RCX: 00007f992e38473c [ 814.708108][T19682] RDX: 000000000000000f RSI: 00007f992f2570a0 RDI: 0000000000000004 [ 814.716876][T19682] RBP: 00007f992f257090 R08: 0000000000000000 R09: 0000000000000000 [ 814.725665][T19682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.734427][T19682] R13: 0000000000000000 R14: 00007f992e575fa0 R15: 00007ffcef8744d8 [ 814.743219][T19682] [ 814.746549][ C0] vkms_vblank_simulate: vblank timer overrun [ 815.519543][T19705] netlink: 306 bytes leftover after parsing attributes in process `syz.5.3265'. [ 817.831694][ T5868] [ 817.834297][ T5868] ====================================================== [ 817.842021][ T5868] WARNING: possible circular locking dependency detected [ 817.849746][ T5868] 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 Not tainted [ 817.857568][ T5868] ------------------------------------------------------ [ 817.865290][ T5868] kworker/0:4/5868 is trying to acquire lock: [ 817.871961][ T5868] ffffffff8fabfd48 (rtnl_mutex){+.+.}-{4:4}, at: smc_vlan_by_tcpsk+0x251/0x620 [ 817.881837][ T5868] [ 817.881837][ T5868] but task is already holding lock: [ 817.889941][ T5868] ffff888011e8c758 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_connect_work+0x53c/0xae0 [ 817.900210][ T5868] [ 817.900210][ T5868] which lock already depends on the new lock. [ 817.900210][ T5868] [ 817.911670][ T5868] [ 817.911670][ T5868] the existing dependency chain (in reverse order) is: [ 817.921594][ T5868] [ 817.921594][ T5868] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 817.930036][ T5868] lock_sock_nested+0x3a/0xf0 [ 817.935780][ T5868] sockopt_lock_sock+0x54/0x70 [ 817.941620][ T5868] do_ip_setsockopt+0x101/0x38c0 [ 817.947653][ T5868] ip_setsockopt+0x59/0xf0 [ 817.953103][ T5868] raw_setsockopt+0xb8/0x290 [ 817.958743][ T5868] do_sock_setsockopt+0x222/0x480 [ 817.964859][ T5868] __sys_setsockopt+0x1a0/0x230 [ 817.970786][ T5868] __x64_sys_setsockopt+0xbd/0x160 [ 817.977007][ T5868] do_syscall_64+0xcd/0x250 [ 817.982552][ T5868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.989639][ T5868] [ 817.989639][ T5868] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 817.997597][ T5868] __lock_acquire+0x249e/0x3c40 [ 818.003532][ T5868] lock_acquire.part.0+0x11b/0x380 [ 818.009743][ T5868] __mutex_lock+0x19b/0xa60 [ 818.015287][ T5868] smc_vlan_by_tcpsk+0x251/0x620 [ 818.021311][ T5868] __smc_connect+0x466/0x4890 [ 818.027048][ T5868] smc_connect_work+0x54f/0xae0 [ 818.032979][ T5868] process_one_work+0x958/0x1b30 [ 818.038998][ T5868] worker_thread+0x6c8/0xf00 [ 818.044642][ T5868] kthread+0x2c1/0x3a0 [ 818.049707][ T5868] ret_from_fork+0x45/0x80 [ 818.055148][ T5868] ret_from_fork_asm+0x1a/0x30 [ 818.060986][ T5868] [ 818.060986][ T5868] other info that might help us debug this: [ 818.060986][ T5868] [ 818.072242][ T5868] Possible unsafe locking scenario: [ 818.072242][ T5868] [ 818.080443][ T5868] CPU0 CPU1 [ 818.086335][ T5868] ---- ---- [ 818.092219][ T5868] lock(sk_lock-AF_INET); [ 818.097054][ T5868] lock(rtnl_mutex); [ 818.104184][ T5868] lock(sk_lock-AF_INET); [ 818.111801][ T5868] lock(rtnl_mutex); [ 818.116181][ T5868] [ 818.116181][ T5868] *** DEADLOCK *** [ 818.116181][ T5868] [ 818.125120][ T5868] 3 locks held by kworker/0:4/5868: [ 818.130815][ T5868] #0: ffff88803193fd48 ((wq_completion)smc_hs_wq){+.+.}-{0:0}, at: process_one_work+0x12cd/0x1b30 [ 818.142562][ T5868] #1: ffffc900041dfd80 ((work_completion)(&smc->connect_work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 818.155463][ T5868] #2: ffff888011e8c758 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_connect_work+0x53c/0xae0 [ 818.166175][ T5868] [ 818.166175][ T5868] stack backtrace: [ 818.172649][ T5868] CPU: 0 UID: 0 PID: 5868 Comm: kworker/0:4 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 818.184488][ T5868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 818.195546][ T5868] Workqueue: smc_hs_wq smc_connect_work [ 818.201653][ T5868] Call Trace: [ 818.205245][ T5868] [ 818.208462][ T5868] dump_stack_lvl+0x116/0x1f0 [ 818.213616][ T5868] print_circular_bug+0x41c/0x610 [ 818.219147][ T5868] check_noncircular+0x31a/0x400 [ 818.224577][ T5868] ? __pfx_check_noncircular+0x10/0x10 [ 818.230584][ T5868] ? __lock_acquire+0x2077/0x3c40 [ 818.236104][ T5868] ? lockdep_lock+0xc6/0x200 [ 818.241150][ T5868] ? __pfx_lockdep_lock+0x10/0x10 [ 818.246669][ T5868] __lock_acquire+0x249e/0x3c40 [ 818.251996][ T5868] ? __pfx___lock_acquire+0x10/0x10 [ 818.257698][ T5868] ? __pfx_lock_release+0x10/0x10 [ 818.263216][ T5868] lock_acquire.part.0+0x11b/0x380 [ 818.268828][ T5868] ? smc_vlan_by_tcpsk+0x251/0x620 [ 818.274488][ T5868] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 818.280697][ T5868] ? rcu_is_watching+0x12/0xc0 [ 818.285939][ T5868] ? trace_lock_acquire+0x14e/0x1f0 [ 818.291657][ T5868] ? smc_vlan_by_tcpsk+0x251/0x620 [ 818.297271][ T5868] ? lock_acquire+0x2f/0xb0 [ 818.302214][ T5868] ? smc_vlan_by_tcpsk+0x251/0x620 [ 818.307827][ T5868] __mutex_lock+0x19b/0xa60 [ 818.312775][ T5868] ? smc_vlan_by_tcpsk+0x251/0x620 [ 818.318396][ T5868] ? smc_vlan_by_tcpsk+0x251/0x620 [ 818.324011][ T5868] ? __pfx___mutex_lock+0x10/0x10 [ 818.329530][ T5868] ? smc_vlan_by_tcpsk+0x32e/0x620 [ 818.335157][ T5868] ? smc_vlan_by_tcpsk+0x251/0x620 [ 818.340782][ T5868] smc_vlan_by_tcpsk+0x251/0x620 [ 818.346221][ T5868] ? __pfx_smc_vlan_by_tcpsk+0x10/0x10 [ 818.352228][ T5868] __smc_connect+0x466/0x4890 [ 818.357371][ T5868] ? __pfx___smc_connect+0x10/0x10 [ 818.362986][ T5868] ? mark_held_locks+0x9f/0xe0 [ 818.368227][ T5868] ? __local_bh_enable_ip+0xa4/0x120 [ 818.374037][ T5868] smc_connect_work+0x54f/0xae0 [ 818.379366][ T5868] ? __pfx_smc_connect_work+0x10/0x10 [ 818.385267][ T5868] ? lock_acquire+0x2f/0xb0 [ 818.390211][ T5868] ? process_one_work+0x8bb/0x1b30 [ 818.395820][ T5868] process_one_work+0x958/0x1b30 [ 818.401240][ T5868] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 818.407427][ T5868] ? __pfx_process_one_work+0x10/0x10 [ 818.413328][ T5868] ? rcu_is_watching+0x12/0xc0 [ 818.418577][ T5868] ? assign_work+0x1a0/0x250 [ 818.423623][ T5868] worker_thread+0x6c8/0xf00 [ 818.428661][ T5868] ? __pfx_worker_thread+0x10/0x10 [ 818.434279][ T5868] kthread+0x2c1/0x3a0 [ 818.438746][ T5868] ? _raw_spin_unlock_irq+0x23/0x50 [ 818.444451][ T5868] ? __pfx_kthread+0x10/0x10 [ 818.449496][ T5868] ret_from_fork+0x45/0x80 [ 818.454345][ T5868] ? __pfx_kthread+0x10/0x10 [ 818.459389][ T5868] ret_from_fork_asm+0x1a/0x30 [ 818.464629][ T5868]