last executing test programs: 5m0.535041275s ago: executing program 2 (id=755): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/hwdep\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f00000000c0)=""/10, 0xa) 5m0.450511104s ago: executing program 2 (id=756): ioctl$auto(0x4000000000000c8, 0x800454d3, 0x3) socket(0xa, 0x2, 0x0) select$auto(0xfffffffd, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) settimeofday$auto(&(0x7f0000000000)={0x5, 0x9}, &(0x7f0000000040)={0x3, 0x54b429c5}) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) socket(0x25, 0x1, 0x0) clock_nanosleep$auto(0x9f1c, 0x5, &(0x7f0000000080)={0x0, 0x3b6}, &(0x7f0000000140)={0x10, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x4241c2, 0x48) socket(0xa, 0x1, 0x1) bpf$auto(0x6, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0xfff, 0x5, 0x10, 0x0) socket(0x15, 0x5, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x6, 0xfffffffb) pselect6$auto(0xffffffff, &(0x7f00000000c0)={[0x2, 0xfff, 0x6, 0xbda3, 0x0, 0x9, 0x5, 0xc7, 0x5, 0x400, 0x7, 0x3, 0x2, 0x7fffffff, 0x87d9, 0xa]}, &(0x7f0000000180)={[0x182, 0x9bbb, 0x0, 0x3, 0x58, 0xb5, 0x8, 0x400, 0x6, 0x4, 0x7ff, 0xa5, 0x2, 0x7de1, 0xed1b, 0x8c5]}, &(0x7f0000000200)={[0x8001, 0x0, 0x36d7, 0x39, 0x0, 0x7ff, 0x8, 0x7fffffff, 0x6, 0xe51d, 0x401, 0xffff, 0x95, 0x39d9eb, 0x8, 0x9]}, &(0x7f0000000280)={0xa}, 0x0) flock$auto(0x6, 0x1) keyctl$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5092, 0x2) mknod$auto(0x0, 0xc9, 0xc8) execve$auto(0x0, 0x0, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) rseq$auto(0x0, 0x7ffe, 0x0, 0x6) shmget$auto(0x8, 0x10563, 0x568d1af2) madvise$auto(0x7e, 0xffffffffffff0001, 0x4219) 4m58.536438165s ago: executing program 2 (id=761): r0 = socket$nl_generic(0x10, 0x3, 0x10) listxattr$auto(0x0, 0xffffffffffffffff, 0x2000000000000) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r0) sendmsg$auto_TIPC_NL_MEDIA_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002f80)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/hwdep\x00', 0x20000, 0x0) prctl$auto(0x6, 0x100000000, 0x4e5, 0x7ff, 0xcb) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) connect$auto(r3, &(0x7f00000000c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x3) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000000), 0x0) mmap$auto(0x6, 0x36, 0x800, 0xffff, 0xfffffffffffff000, 0x6) 4m58.349656372s ago: executing program 2 (id=763): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x3, 0x6) (async) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000002700)='/proc/thread-self/attr/smack/current\x00', 0x40000, 0x0) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r0 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0xe) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x100000000, 0x5, 0x1d, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x9, 0x5, 0x2, 0x8, 0xae, 0x9, 0x2, 0x7, 0x5, 0x7, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x80000000000, 0x400000000000000, 0x0, 0x8000000000000000, 0x80000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffbfe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0xfffffffffffffffe, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]}, 0x1fe, 0x81) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x6c, 0x4008) 4m58.160584616s ago: executing program 2 (id=765): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x3, 0x6) (async) r0 = socket(0x10, 0x2, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) (async) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="1a00279e"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r1 = socket(0xa, 0x3, 0x3a) ioctl$auto(r1, 0x890c, 0xac) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) mmap$auto(0x4, 0x6, 0x4, 0x14, 0x9, 0x5) (async) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0x8000, 0xe) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) io_uring_setup$auto(0x1, 0x0) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) (async) tkill$auto(0x1, 0x7) (async) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYRESOCT, @ANYRES32=r3, @ANYBLOB="1800390003000000"], 0x24}, 0x1, 0x0, 0x0, 0x400c001}, 0x140080e4) 4m57.456715527s ago: executing program 2 (id=769): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x123403, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x18}, 0x1, 0x0, 0x0, 0x64048001}, 0x80) (async) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000240)={0x4fc, 0x0, r0}) sendmsg$auto_NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x178, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x8}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xff}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xfd, 0xac, "ccfae82bb889c3eb8a65ac22962dfbf1e14e78c72f1222102d73cd2409d9fd1ae789478afb9c3a1fd34965a06b46bc38b25083df2e30c8127209e521cb119e88fb1984228ca6498bb967a974552e797d594a3f4d144abb6228407de4b53e4c95d8f9cc6efe5d42f9f4cd932bdb7d29fc977b7544af7e10e2137a9de171948fa80ac8fb88c4f720bafb3f5cf9f7abb78e9e396d6a0ce4c10572bf9d7370a69417483d8198af08bd65f1314579c376d103bed3d462869bcdf2cff5dcda8aa8683969c03711f24eb6b9f3f80d1f38717cec68e1b98cbc18ca76a9cf4acd2b433235dfbf4687323281daef6d1a211014bf1b67fcc3ff76c129f94f"}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [@typed={0xc, 0xdb, 0x0, 0x0, @u64=0x7793e86d}, @typed={0xf, 0xe8, 0x0, 0x0, @str='/dev/adsp1\x00'}, @typed={0x8, 0x3a, 0x0, 0x0, @fd=r0}]}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_MESH_ID={0xa, 0x18, "896242ae3503"}]}, 0x178}, 0x1, 0x0, 0x0, 0x40020}, 0x0) (async) mprotect$auto(0x1ffff000, 0x8000000000000002, 0x9) (async) prctl$auto(0x23, 0x3, 0xd929, 0x0, 0x0) (async) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) r4 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x642, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) (async) ioctl$auto_BINDER_CTL_ADD(r4, 0xc1086201, &(0x7f0000000040)={"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", 0x2, 0x1000}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(0x0, 0xb) (async) fcntl$auto(0xff80000000000000, 0x409, 0x3f) (async) ftruncate$auto(0x0, 0x8800000) (async) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)=0x10000) (async) r5 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f00000000c0)={0x1, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500", 0x8}) newfstatat$auto(0xffffffffffffff9c, 0x0, &(0x7f0000000380)={0x5, 0x6, 0xa9, 0x4, 0x0, 0xee01, 0x0, 0x6, 0x3, 0x0, 0x4, 0x8, 0xbc, 0x1, 0x4, 0x0, 0x53}, 0x1) (async) socket(0x28, 0x5, 0x0) settimeofday$auto(&(0x7f0000000180)={0x1ed5d7403, 0x1}, 0x0) (async) connect$auto(0x3, &(0x7f0000000180), 0x54) (async) listen$auto(0x3, 0x10) (async) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) (async) ioctl$auto_SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000140)={0x1, 0x0, 0x1}) 4m57.079002273s ago: executing program 32 (id=769): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x123403, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x18}, 0x1, 0x0, 0x0, 0x64048001}, 0x80) (async) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000240)={0x4fc, 0x0, r0}) sendmsg$auto_NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x178, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x8}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xff}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xfd, 0xac, "ccfae82bb889c3eb8a65ac22962dfbf1e14e78c72f1222102d73cd2409d9fd1ae789478afb9c3a1fd34965a06b46bc38b25083df2e30c8127209e521cb119e88fb1984228ca6498bb967a974552e797d594a3f4d144abb6228407de4b53e4c95d8f9cc6efe5d42f9f4cd932bdb7d29fc977b7544af7e10e2137a9de171948fa80ac8fb88c4f720bafb3f5cf9f7abb78e9e396d6a0ce4c10572bf9d7370a69417483d8198af08bd65f1314579c376d103bed3d462869bcdf2cff5dcda8aa8683969c03711f24eb6b9f3f80d1f38717cec68e1b98cbc18ca76a9cf4acd2b433235dfbf4687323281daef6d1a211014bf1b67fcc3ff76c129f94f"}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [@typed={0xc, 0xdb, 0x0, 0x0, @u64=0x7793e86d}, @typed={0xf, 0xe8, 0x0, 0x0, @str='/dev/adsp1\x00'}, @typed={0x8, 0x3a, 0x0, 0x0, @fd=r0}]}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_MESH_ID={0xa, 0x18, "896242ae3503"}]}, 0x178}, 0x1, 0x0, 0x0, 0x40020}, 0x0) (async) mprotect$auto(0x1ffff000, 0x8000000000000002, 0x9) (async) prctl$auto(0x23, 0x3, 0xd929, 0x0, 0x0) (async) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) r4 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x642, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) (async) ioctl$auto_BINDER_CTL_ADD(r4, 0xc1086201, &(0x7f0000000040)={"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", 0x2, 0x1000}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(0x0, 0xb) (async) fcntl$auto(0xff80000000000000, 0x409, 0x3f) (async) ftruncate$auto(0x0, 0x8800000) (async) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)=0x10000) (async) r5 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f00000000c0)={0x1, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500", 0x8}) newfstatat$auto(0xffffffffffffff9c, 0x0, &(0x7f0000000380)={0x5, 0x6, 0xa9, 0x4, 0x0, 0xee01, 0x0, 0x6, 0x3, 0x0, 0x4, 0x8, 0xbc, 0x1, 0x4, 0x0, 0x53}, 0x1) (async) socket(0x28, 0x5, 0x0) settimeofday$auto(&(0x7f0000000180)={0x1ed5d7403, 0x1}, 0x0) (async) connect$auto(0x3, &(0x7f0000000180), 0x54) (async) listen$auto(0x3, 0x10) (async) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) (async) ioctl$auto_SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000140)={0x1, 0x0, 0x1}) 3m32.911173517s ago: executing program 4 (id=1221): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x80802, 0x0) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x88d0}, 0x2000c041) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) connect$auto(0x3, &(0x7f0000000040), 0x55) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) prctl$auto(0x3f, 0x17, 0x0, 0x0, 0x400) shmat$auto(0x0, &(0x7f0000000580), 0xfffffffa) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x801, 0x100) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x9, 0x400) connect$auto(0x3, &(0x7f0000000140), 0x55) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r0, 0x110, 0x4, 0x0, 0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x2, 0x80802, 0x0) (async) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x88d0}, 0x2000c041) (async) bind$auto(0x3, &(0x7f0000000080), 0x6b) (async) connect$auto(0x3, &(0x7f00000000c0), 0x55) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async) connect$auto(0x3, &(0x7f0000000040), 0x55) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) prctl$auto(0x3f, 0x17, 0x0, 0x0, 0x400) (async) shmat$auto(0x0, &(0x7f0000000580), 0xfffffffa) (async) close_range$auto(0x2, 0x8, 0x0) (async) fanotify_init$auto(0x5, 0x2000000000002) (async) socket(0x2, 0x801, 0x100) (async) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x9, 0x400) (async) connect$auto(0x3, &(0x7f0000000140), 0x55) (async) socket(0x2000000000000021, 0x2, 0x10000000000002) (async) setsockopt$auto(r0, 0x110, 0x4, 0x0, 0x4) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') (async) 3m23.979624564s ago: executing program 4 (id=1229): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) close_range$auto(r0, r0, 0x267) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\x86\xdd\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyxe\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r1, 0x80045438, 0x0) splice$auto(0x1, 0x0, 0x5000000000, 0x0, 0x5, 0xb) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, &(0x7f0000000080)={r1, 0xffffffff}) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x12, 0x0, 0x8) close_range$auto(r3, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f00000000c0), r3) sendmsg$auto_TASKSTATS_CMD_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@TASKSTATS_CMD_ATTR_PID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) write$auto(0x3, 0x0, 0x29) r5 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000002140), 0x80, 0x0) ioctl$auto_IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r5, 0x40096100, &(0x7f0000002180)={@padding, 0x3}) mmap$auto(0x9, 0xc, 0x5, 0x11, 0xa9, 0x7) 3m23.841248304s ago: executing program 4 (id=1230): openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0) ioctl$auto(0x3, 0x89e1, 0x38) 3m23.669764846s ago: executing program 4 (id=1232): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) close_range$auto(0x2, 0x8, 0x0) 3m23.556833857s ago: executing program 4 (id=1234): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x2f, 0x4, 0x0, 0x0, 0x0) mmap$auto(0x1, 0x81, 0x3, 0x17, 0x8001, 0xe) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x14) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r2, 0x104000000000010e, 0xb, 0x0, 0x400) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) tkill$auto(0x1, 0x7) r3 = socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) write$auto(0x3, 0x0, 0xfffffdef) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3ec0) getsockopt$auto(r3, 0x28, 0x1, 0x0, 0x0) 3m22.378234364s ago: executing program 4 (id=1243): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) close_range$auto(0x2, 0x8, 0x0) 3m22.111351546s ago: executing program 33 (id=1243): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) close_range$auto(0x2, 0x8, 0x0) 2m15.661823456s ago: executing program 3 (id=1622): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x26, 0x0, 0x2800) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x88) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x400c084) 2m15.529776131s ago: executing program 3 (id=1624): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x227f, 0x38) (fail_nth: 4) 2m14.9846505s ago: executing program 3 (id=1625): syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, &(0x7f0000000200), 0x6200, 0x0) 2m14.645298646s ago: executing program 3 (id=1628): mkdir$auto(0x0, 0xc001) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040), 0x69) select$auto(0x6d0c, 0x0, &(0x7f0000000100)={[0x0, 0x1ff, 0x800000000000008, 0xc, 0x9, 0xfffffffffffffff9, 0x6, 0x1, 0x400040009, 0x5e582972, 0x4000000000000000, 0x200000014, 0x93, 0xffffffffffffff17, 0x8, 0x8]}, 0x0, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fcc2"], 0x24}, 0x1, 0x0, 0x0, 0x24000080}, 0x800) connect$auto(0x3, &(0x7f0000000140), 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x16, &(0x7f0000000080)=[0x200000, 0x200], 0x1) io_uring_register$auto(0x2, 0x17, &(0x7f00000000c0), 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/1/msr\x00', 0x20000, 0x0) read$auto(0x3, 0x0, 0x80) select$auto(0x2, 0x0, &(0x7f00000001c0)={[0x20000000000d, 0x203, 0x2, 0x7c54, 0x6, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x1, 0x3, 0x4, 0xaab, 0x5, 0x20000004006]}, 0x0, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r2, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fedbdf250200000004000180190001800800", @ANYRES32, @ANYBLOB='\b\x00~\x00', @ANYRES32=0xffffffffffffffff, @ANYBLOB="dac8f9b74b000000"], 0x34}, 0x1, 0x0, 0x0, 0x40c4}, 0x8800) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r1, 0x0, 0x80) prctl$auto(0x9, 0x7c, 0x8000, 0xa8af, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) unshare$auto(0x8) sendmsg$auto_OVS_METER_CMD_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES8=r4, @ANYRESOCT, @ANYRES8=r1, @ANYRES64=r1, @ANYRESDEC=r0], 0x124}, 0x1, 0x0, 0x0, 0x8d5}, 0x2405c001) socket(0xa, 0x5, 0x0) 2m13.622793053s ago: executing program 3 (id=1632): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = gettid() getpgid(r0) (async) mmap$auto(0x4, 0xfff, 0xa, 0x10010, 0x9, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = socket(0x2, 0x1, 0x0) write$auto(r1, &(0x7f0000000040)='@-.@!\x00', 0xff) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), r1) (async) tkill$auto(0x80000000000001, 0x7) 2m12.737761241s ago: executing program 3 (id=1633): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x2283, 0x38) (fail_nth: 3) 2m12.429371364s ago: executing program 34 (id=1633): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x2283, 0x38) (fail_nth: 3) 1m21.492149492s ago: executing program 5 (id=1935): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_fops_atomic_t_ro_(0xffffffffffffff9c, &(0x7f0000000000), 0x1600c0, 0x0) r1 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000100), 0x82002, 0x0) close_range$auto(r0, r1, 0x2) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82000, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x3) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) read$auto(r2, 0x0, 0x56fd7c24) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x88) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0xa, 0x801, 0x106) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) socket(0x2c, 0x2, 0x22) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x149443, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) r3 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$auto_TUNGETIFF(r3, 0x800454d2, 0x0) 1m21.173176447s ago: executing program 5 (id=1938): ioctl$auto(0x4000000000000c8, 0x800454d3, 0x3) socket(0xa, 0x2, 0x0) select$auto(0xfffffffd, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) settimeofday$auto(&(0x7f0000000000)={0x5, 0x9}, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) socket(0x25, 0x1, 0x0) clock_nanosleep$auto(0x9f1c, 0x5, &(0x7f0000000080)={0x0, 0x3b6}, &(0x7f0000000140)={0x10, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x4241c2, 0x48) socket(0xa, 0x1, 0x1) bpf$auto(0x6, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0xfff, 0x5, 0x10, 0x0) socket(0x15, 0x5, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x6, 0xfffffffb) pselect6$auto(0xffffffff, &(0x7f00000000c0)={[0x2, 0xfff, 0x6, 0xbda3, 0x0, 0x9, 0x5, 0xc7, 0x5, 0x400, 0x7, 0x3, 0x2, 0x7fffffff, 0x87d9, 0xa]}, &(0x7f0000000180)={[0x182, 0x9bbb, 0x0, 0x3, 0x58, 0xb5, 0x8, 0x400, 0x6, 0x4, 0x7ff, 0xa5, 0x2, 0x7de1, 0xed1b, 0x8c5]}, &(0x7f0000000200)={[0x8001, 0x0, 0x36d7, 0x39, 0x0, 0x7ff, 0x8, 0x7fffffff, 0x6, 0xe51d, 0x401, 0xffff, 0x95, 0x39d9eb, 0x8, 0x9]}, &(0x7f0000000280)={0xa}, 0x0) flock$auto(0x6, 0x1) keyctl$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5092, 0x2) mknod$auto(0x0, 0xc9, 0xc8) execve$auto(0x0, 0x0, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) rseq$auto(0x0, 0x7ffe, 0x0, 0x6) shmget$auto(0x8, 0x10563, 0x568d1af2) madvise$auto(0x7e, 0xffffffffffff0001, 0x4219) 1m18.73865457s ago: executing program 5 (id=1950): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/pci/00/01.1\x00', 0x44280, 0x0) 1m18.431937689s ago: executing program 5 (id=1951): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/pci/00/01.1\x00', 0x44280, 0x0) (fail_nth: 1) 1m17.624610812s ago: executing program 5 (id=1956): r0 = socket$nl_generic(0x10, 0x3, 0x10) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) (async) migrate_pages$auto(0x1, 0x9, 0x0, &(0x7f0000000840)=0x2) (async) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r0) sendmsg$auto_TIPC_NL_NET_SET(r0, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3fccd8237821a62ce9724a01002cbd709ffcdbdf250f0000000ce526db3763d4bfc02968421995c317e32c998c3f68f10000000000000000000000000000001b44f65545f58976de5a4f07532dd66971f245be6a7921c31ec4fd2a83582500353d140410076424877e4de87cde9f513745ec414f487fa288f32a97502aba6a7f321ee03f5a2e094dd5c29bdfd89323ca70aca32bd0dc87b24eb87160707ecd78e2fc28ba47f66b36149acd013b554a2f2eb9ebbbfadca94b1bafa7ea327e039f91d0c411ef7ecba954b1cd76602784d6765b101a0f96cc34371f83dd7ee3570d3717da9e8e6f91480b037db5b5fb2076603a8d2748d90800"/260], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x3ff, 0x3, 0x9, 0x10001, 0x15, 0xc05, 0xffffffffffffffff, [0x7fd, 0xfff, 0x8], {0x9, 0x1, 0x5, 0x0, 0x400, 0x0, 0x3fe0, 0x5, 0x1000000000e8}, {0x2, 0x100, 0x54f1, 0x0, 0x101, 0xff, 0x8d6, 0xa, 0x5}}) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/nfsd.fh/flush\x00', 0x8a402, 0x0) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x7fffffff) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) r3 = socket(0xa, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f00000000c0)={{&(0x7f0000000040)=[0x200000a], 0xb8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x9}, 0x69, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) madvise$auto(0x0, 0x2003f0, 0x16) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22040, 0x21) (async) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) (async) r4 = socket(0x10, 0x2, 0x4) setpgid$auto(0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r2, @ANYBLOB="1200", @ANYRES8=0x0, @ANYBLOB="d6574503996bad214fa3a94ac29fa2bfb68a"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0xffdffffffffffffc, 0x8}, 0x10000007}, 0x3, 0x0) 1m15.340552404s ago: executing program 5 (id=1968): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) open(&(0x7f0000000800)='./file0\x00', 0x1636c0, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x10677d, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="04002bbd7000fddbdf250200000008000300", @ANYRES32=r4, @ANYBLOB="26a6599b9ebc42a2"], 0x24}}, 0x80) mmap$auto(0x0, 0xfffffffffffffffd, 0x0, 0x20009b72, 0x100000000002, 0x8000) fcntl$auto(0x2, 0x6, 0x80000001) r5 = socket(0x29, 0x5, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES32=r5, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB="060007030080000008000200", @ANYRES64=r0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a00010000000000000000000600060040000000080003000800000008000400ff010000"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) prctl$auto(0x3, 0x9, 0x9, 0x0, 0x8000000000000000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) futex_waitv$auto(&(0x7f0000000000)={0x10, 0x5d92, 0x81, 0x4}, 0x77, 0x3, 0x0, 0xffffffdc) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) io_uring_setup$auto(0x5, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x5, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x7, 0x7, 0x5, 0x5, 0x1, 0xfffffffc, 0x7}, {0x4, 0xfffff654, 0xffff7fff, 0x2, 0x8, 0x200, 0x38c1, 0x0, 0x3}}) madvise$auto(0x0, 0x53, 0x9) socket(0x3, 0x2, 0x7) 1m15.34032296s ago: executing program 35 (id=1968): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) open(&(0x7f0000000800)='./file0\x00', 0x1636c0, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x10677d, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="04002bbd7000fddbdf250200000008000300", @ANYRES32=r4, @ANYBLOB="26a6599b9ebc42a2"], 0x24}}, 0x80) mmap$auto(0x0, 0xfffffffffffffffd, 0x0, 0x20009b72, 0x100000000002, 0x8000) fcntl$auto(0x2, 0x6, 0x80000001) r5 = socket(0x29, 0x5, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES32=r5, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB="060007030080000008000200", @ANYRES64=r0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a00010000000000000000000600060040000000080003000800000008000400ff010000"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) prctl$auto(0x3, 0x9, 0x9, 0x0, 0x8000000000000000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) futex_waitv$auto(&(0x7f0000000000)={0x10, 0x5d92, 0x81, 0x4}, 0x77, 0x3, 0x0, 0xffffffdc) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) io_uring_setup$auto(0x5, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x5, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x7, 0x7, 0x5, 0x5, 0x1, 0xfffffffc, 0x7}, {0x4, 0xfffff654, 0xffff7fff, 0x2, 0x8, 0x200, 0x38c1, 0x0, 0x3}}) madvise$auto(0x0, 0x53, 0x9) socket(0x3, 0x2, 0x7) 5.380210657s ago: executing program 6 (id=2373): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20b42, 0x0) write$auto_snd_pcm_oss_f_reg_pcm_oss(r0, &(0x7f0000000280)="c28270", 0x3) ppoll$auto(&(0x7f0000000000)={r0}, 0x20000003, 0x0, 0x0, 0x8) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0x7) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0xfffffe95) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/tty/drivers\x00', 0x2100, 0x0) poll$auto(&(0x7f0000000040)={r1, 0xd74f, 0x5}, 0x3, 0x8) ioctl$auto_SNAPSHOT_FREE(r2, 0x3305, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x84, 0x15, 0xfffffffffffffffd, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0x2a, 0x1, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x2, 0xb}, 0x800009}, 0x5, 0x20000000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) geteuid() mmap$auto(0x0, 0x202000b, 0x3, 0x1c, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x20013) socket(0xa, 0x2, 0x0) select$auto(0x6, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x0, 0xc, 0x8, 0x3, 0x6, 0x2, 0x9, 0x5e582970, 0x4000000000000000, 0x2, 0x4, 0x5, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)=@sco, 0x55) write$auto(0x3, 0x0, 0xfdef) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) connect$auto(0x3, &(0x7f0000000140), 0x55) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x400c000) 4.939024063s ago: executing program 7 (id=2378): r0 = socket(0x10, 0x2, 0x0) socket(0x2, 0x5, 0x0) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000001c0), r0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r1, 0x5453, 0x0) 4.769713083s ago: executing program 7 (id=2380): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9bf2, 0x2, 0x8003) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x3, 0xa253, 0x81, 0x16, 0x6, 0x9) socket(0xa, 0x801, 0x84) r0 = open(&(0x7f0000000800)='./file0\x00', 0x4ab40, 0x0) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0x5, @new_map_fd=0xb62, 0x3, @old_prog_fd=0x4}, 0xd) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0x3, 0x0, 0x3}, 0x4) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x7}, 0xc) process_vm_writev$auto(0x0, 0x0, 0x3, 0x0, 0x400, 0x0) syz_clone3(&(0x7f0000000300)={0x28020000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4.655380035s ago: executing program 6 (id=2382): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x3, 0x4, 0x9) close_range$auto(0x2, 0x8, 0x2) fanotify_init$auto(0x5, 0x2000000000002) mlockall$auto(0xe) socket(0x2, 0x801, 0x100) getpriority$auto(0x0, 0x1) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x9, 0x400) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r0, 0x0, 0x20008040) connect$auto(0x3, 0x0, 0x55) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0) write$auto_proc_mem_operations_base(r1, 0x0, 0x27) ioctl$auto(0x3, 0x2275, 0x38) 4.57689152s ago: executing program 7 (id=2384): ioctl$auto(0x4000000000000c8, 0x800454d3, 0x3) socket(0xa, 0x2, 0x0) select$auto(0xfffffffd, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) settimeofday$auto(&(0x7f0000000000)={0x5, 0x9}, &(0x7f0000000040)={0x3, 0x54b429c5}) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) socket(0x25, 0x1, 0x0) clock_nanosleep$auto(0x9f1c, 0x5, &(0x7f0000000080)={0x0, 0x3b6}, &(0x7f0000000140)={0x10, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x4241c2, 0x48) socket(0xa, 0x1, 0x1) bpf$auto(0x6, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0xfff, 0x5, 0x10, 0x0) socket(0x15, 0x5, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x6, 0xfffffffb) pselect6$auto(0xffffffff, &(0x7f00000000c0)={[0x2, 0xfff, 0x6, 0xbda3, 0x0, 0x9, 0x5, 0xc7, 0x5, 0x400, 0x7, 0x3, 0x2, 0x7fffffff, 0x87d9, 0xa]}, &(0x7f0000000180)={[0x182, 0x9bbb, 0x0, 0x3, 0x58, 0xb5, 0x8, 0x400, 0x6, 0x4, 0x7ff, 0xa5, 0x2, 0x7de1, 0xed1b, 0x8c5]}, &(0x7f0000000200)={[0x8001, 0x0, 0x36d7, 0x39, 0x0, 0x7ff, 0x8, 0x7fffffff, 0x6, 0xe51d, 0x401, 0xffff, 0x95, 0x39d9eb, 0x8, 0x9]}, 0x0, 0x0) flock$auto(0x6, 0x1) keyctl$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5092, 0x2) mknod$auto(0x0, 0xc9, 0xc8) execve$auto(0x0, 0x0, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) rseq$auto(0x0, 0x7ffe, 0x0, 0x6) shmget$auto(0x8, 0x10563, 0x568d1af2) madvise$auto(0x7e, 0xffffffffffff0001, 0x4219) 3.647422738s ago: executing program 6 (id=2388): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syslog$auto(0x2, &(0x7f0000000000)='-#:\x00[\xda\xe2\xc3L\xd30{Q\xecvP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x102\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd26i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\xf2\xbe\xef\v\xf1d\xdd\x0e\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x033\x8f\xb9(\n/\xcdo\xc2', 0xcf) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) r3 = socket(0x10, 0x2, 0x4) socket(0x200000000000011, 0x2, 0x0) setsockopt$auto(r0, 0xa1b, 0x9cd, &(0x7f00000001c0)='ovs_datapath\x00', 0x7) open(&(0x7f0000000180)='./file0\x00', 0x800, 0x2) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r3, &(0x7f0000000000)='-\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'pimreg1\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, '&SR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) ioctl$auto(r0, 0x89e1, 0x38) 3.207984088s ago: executing program 0 (id=2391): syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0, @ANYRES16=r0], 0x30}}, 0x48001) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0x9, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x4, 0x5ef4825b, 0x9b72, 0x80000000006, 0x8001) sysfs$auto(0x2, 0x1b, 0x0) close_range$auto(0x2, 0x8, 0x0) ioperm$auto(0xfffffffffffffff8, 0x3ff, 0x14a) vmsplice$auto(0x2, 0x0, 0x8000000000000001, 0x0) pselect6$auto(0x8, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x7, 0x4000b4d}, 0x0) socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(0x0) writev$auto(0x5, &(0x7f0000000100)={0x0, 0x7}, 0x201) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x4, 0xa, 0xdb, 0x9b72, 0x401, 0x7fff) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x2, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x2, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x21, &(0x7f0000000240)=[0x10], 0x1) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={0x0}, 0x1, 0x0, 0x0, 0x20004041}, 0x40004) statx$auto(0x2, 0x0, 0x1000, 0xbdfa, 0x0) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x0, 0x53, 0x0, 0x0) 2.984525439s ago: executing program 7 (id=2392): ioctl$auto(0x4000000000000c8, 0x800454d3, 0x3) socket(0xa, 0x2, 0x0) select$auto(0xfffffffd, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) settimeofday$auto(&(0x7f0000000000)={0x5, 0x9}, &(0x7f0000000040)={0x3, 0x54b429c5}) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) socket(0x25, 0x1, 0x0) clock_nanosleep$auto(0x9f1c, 0x5, &(0x7f0000000080)={0x0, 0x3b6}, &(0x7f0000000140)={0x10, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x4241c2, 0x48) socket(0xa, 0x1, 0x1) bpf$auto(0x6, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0xfff, 0x5, 0x10, 0x0) socket(0x15, 0x5, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x6, 0xfffffffb) pselect6$auto(0xffffffff, &(0x7f00000000c0)={[0x2, 0xfff, 0x6, 0xbda3, 0x0, 0x9, 0x5, 0xc7, 0x5, 0x400, 0x7, 0x3, 0x2, 0x7fffffff, 0x87d9, 0xa]}, &(0x7f0000000180)={[0x182, 0x9bbb, 0x0, 0x3, 0x58, 0xb5, 0x8, 0x400, 0x6, 0x4, 0x7ff, 0xa5, 0x2, 0x7de1, 0xed1b, 0x8c5]}, &(0x7f0000000200)={[0x8001, 0x0, 0x36d7, 0x39, 0x0, 0x7ff, 0x8, 0x7fffffff, 0x6, 0xe51d, 0x401, 0xffff, 0x95, 0x39d9eb, 0x8, 0x9]}, &(0x7f0000000280)={0xa}, 0x0) flock$auto(0x6, 0x1) keyctl$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5092, 0x2) mknod$auto(0x0, 0xc9, 0xc8) execve$auto(0x0, 0x0, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) rseq$auto(0x0, 0x8000, 0x0, 0x6) rseq$auto(0x0, 0x7ffe, 0x0, 0x6) shmget$auto(0x8, 0x10563, 0x568d1af2) madvise$auto(0x7e, 0xffffffffffff0001, 0x4219) 2.437566376s ago: executing program 6 (id=2395): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x13f182, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000100)=""/103, 0x67) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x5, 0x6, 0x8009) setsockopt$auto(0x3, 0x0, 0x100000000000c8, 0xfffffffffffffffc, 0x28) mmap$auto(0x0, 0xb0e7, 0x7, 0xcf1, 0x200, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000680)=""/227, 0xe3) ioctl$auto(0x3, 0x2270, 0x38) 2.246948068s ago: executing program 1 (id=2396): syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0, @ANYRES16=r0], 0x30}}, 0x48001) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0x9, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x4, 0x5ef4825b, 0x9b72, 0x80000000006, 0x8001) sysfs$auto(0x2, 0x1b, 0x0) close_range$auto(0x2, 0x8, 0x0) ioperm$auto(0xfffffffffffffff8, 0x3ff, 0x14a) vmsplice$auto(0x2, 0x0, 0x8000000000000001, 0x0) pselect6$auto(0x8, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x7, 0x4000b4d}, 0x0) socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(0x0) writev$auto(0x5, &(0x7f0000000100)={0x0, 0x7}, 0x201) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x4, 0xa, 0xdb, 0x9b72, 0x401, 0x7fff) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_register$auto(0x2, 0x21, &(0x7f0000000240)=[0x10], 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={0x0}, 0x1, 0x0, 0x0, 0x20004041}, 0x40004) statx$auto(0x2, 0x0, 0x1000, 0xbdfa, 0x0) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x0, 0x53, 0x0, 0x0) 1.980836299s ago: executing program 6 (id=2397): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) ioctl$auto(r0, 0x5385, 0x1cfc4b42) 1.806703541s ago: executing program 6 (id=2398): socket(0x22, 0x2, 0x24) (async) r0 = socket(0x22, 0x2, 0x24) getsockopt$auto(r0, 0x3, 0x1, 0x0, &(0x7f00000000c0)=0x1) r1 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022bbd7000fbdbdf2503001000050011001000000031a22054d2c805003600020000000e2a994746850294d5bcbc3e9cf13e896bc43856d3b7ba07bb35a368fc736c39abeb1c61df21c90ff8bfdc0d9d6082c105527e23ab6fb340fda7442e174553fda6c79774584eeb652d73858080bb81f8dfd78ab897622e2264d5532bc6c1b828e963ba424bcc177f93428546c48af887cb5c05b917fa7f2c48a46d9fd73676324e2a21d4ea1c"], 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x48010) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000003e40)='/dev/snd/controlC2\x00', 0x0, 0x0) (async) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000003e40)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f00000003c0)={0xa93, 0x0, "5aa5cd43a4a1d7b8e825783e39f7367b", "ecf80e889d127fd9ab626d74e31099a7", "a0ec06f0b2734cdd37708c3a0420554429e7ffe40573c7ec0beb3623c0510ec2", "5974b15a042361d1bda468dfb1d63e0718cf5c3e246df864ea3f077b51c43452fe4c9ce0e9b4a51cc65342193c386c72da088e84ee0c6a588a23b5cc6f44c9a9496fda4103e600", "92c0b05f3eeae4d76e9ebc970360a97c", "bc81da700a694a4bf144c52771c43ed577f37f8b8bd8c854896f89afd4539919c8cd0e724e63f589a9114ede80887f1c02c0e8d58ebf7a4f3b80f686c2abb2897c232c7e8ad5cad00758cb2c19936f33", "08cd880206273f7a0d08c50645086eda6086d3d8a831255ef4a91d83b99f5789e75274d972c18e390e65470bc817ecfe529ef51faec7210049c6ab38d693e1c6c71ea54d0a5eee59a783cb6dfc9d72a264fefc3cb5a0da1f5a22a04f49e8cf2eecd0eea25ae4050000001ef0bb24772ec8c07a010d03583b923cf86c3c0a2534"}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) sendmsg$auto_ILA_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8d1}, 0x4000050) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x23, 0x80805, 0x0) poll$auto(&(0x7f0000000000)={r3, 0x1, 0x8}, 0x5, 0x400) listen$auto(r3, 0x3b) setsockopt$auto(r4, 0x113, 0x3, 0x0, 0x79ad226b) (async) setsockopt$auto(r4, 0x113, 0x3, 0x0, 0x79ad226b) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') (async) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') 1.708872061s ago: executing program 0 (id=2399): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto(0x3, 0x2288, 0x38) 1.598398648s ago: executing program 0 (id=2400): syz_clone3(&(0x7f0000000200)={0x200004000, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.481904044s ago: executing program 0 (id=2401): socket(0xa, 0xb, 0xbeab) 1.433951935s ago: executing program 1 (id=2402): syz_clone(0x1104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 1.272426217s ago: executing program 0 (id=2403): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x7, 0x9e3, 0x2, 0x75d5, 0xfffffffffffffffd, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x53, 0x9) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) lseek$auto(r0, 0xffffffffffffffff, 0x1) write$auto_proc_mem_operations_base(r0, &(0x7f0000001680)="a7", 0x1) r1 = getpgrp(0xffffffffffffffff) sched_setattr$auto(r1, 0x0, 0xf) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x2474a7d9180cffa3, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0) fstat$auto(r2, &(0x7f0000000080)={0x2, 0x101, 0x100000000, 0x1, 0xee00, 0xee00, 0x0, 0xd, 0x9, 0x4, 0x10, 0x4, 0x10, 0x9cb2, 0x2, 0x33, 0x8}) r7 = gettid() pidfd_open$auto(r7, 0x0) sendmsg$auto_NL802154_CMD_SEND_BEACONS(r3, &(0x7f0000001280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001240)={&(0x7f00000016c0)={0x10fc, r5, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SUPPORTED_COMMANDS={0x10dc, 0x19, 0x0, 0x1, [@typed={0x4, 0x56}, @typed={0x14, 0x9f, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic="515f5a9cda35fbb7bc1eeafbccd193215f2ee1c3f1354849cd524cb81af1d017441ddbf59828b675c6ce541c22e136cca745d286631628c08bfb827f32bc986db41875473e2b316ab36715654f3563ad7a0d2155f3c65a8d34a7b80c1958dea77dc71462ceac3bd1f4c2bf8a2a777ce78fa60fe1925acda0e8689c7c8348087ccfefa69eb9c90de0ab79a825abdf1c328858d720429a73f8012f996d970bdbbe", @typed={0x4, 0x3e}, @nested={0x101c, 0x6c, 0x0, 0x1, [@typed={0x8, 0x4b, 0x0, 0x0, @uid=r6}, @typed={0x8, 0xa4, 0x0, 0x0, @pid=r7}, @typed={0x8, 0x8, 0x0, 0x0, @fd=r2}, @generic="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"]}]}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@typed={0x8, 0x98, 0x0, 0x0, @pid=r7}]}]}, 0x10fc}, 0x1, 0x0, 0x0, 0x8800}, 0x4008000) ioctl$auto(0x3, 0x2275, 0x38) 1.156872642s ago: executing program 7 (id=2404): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syslog$auto(0x2, &(0x7f0000000000)='-#:\x00[\xda\xe2\xc3L\xd30{Q\xecvP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x102\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd26i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\xf2\xbe\xef\v\xf1d\xdd\x0e\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x033\x8f\xb9(\n/\xcdo\xc2', 0xcf) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) r3 = socket(0x10, 0x2, 0x4) socket(0x200000000000011, 0x2, 0x0) setsockopt$auto(r0, 0xa1b, 0x9cd, &(0x7f00000001c0)='ovs_datapath\x00', 0x7) open(&(0x7f0000000180)='./file0\x00', 0x800, 0x2) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r3, &(0x7f0000000000)='-\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'pimreg1\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, '&SR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) ioctl$auto(r0, 0x89e1, 0x38) 940.719643ms ago: executing program 1 (id=2405): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), r0) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={0x0}, 0x1, 0x0, 0x0, 0x4005}, 0x28044004) 733.494127ms ago: executing program 7 (id=2406): pwrite64$auto(0xc8, &(0x7f00000001c0)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea1\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a=g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x00\x00\x00\x00\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00N\xd3\xbe\xc16~&Y\x86\xc6\xa7O\\pP`H\x15O\xdd\x971\xdb\x9c\xdd\xa7\xc5\xc3>\xd4\x97\xfeS\x94\xc1J\xf15 \xe9\xeb6\xb6\xe9\'\xbd\xb6\xcd\xdc\xb9\x95\xa7\x85kr\xd4nJ\x9a\xd4J\x83', 0xfdef, 0x7) bpf$auto(0x6, 0xffffffffffffffff, 0x0) r0 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) close_range$auto(r0, r0, 0x400) clock_gettime$auto(0x9, &(0x7f0000000040)={0x100000000, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000001100)={0x5b00, "90036ae67173ea1838997fb48998eff70a283e71b6cf83eed3d700d764fae68b", 0x5650}) r3 = socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) recvmsg$auto(r3, 0x0, 0x2) mount$auto(0x0, 0x0, 0x0, 0xf, 0x0) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0x40345410, 0x0) dup2$auto(0x0, 0x3) r4 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000004140), 0x8000, 0x0) read$auto_sync_info_debugfs_fops_(r4, &(0x7f0000004180)=""/143, 0x8f) ioctl$sock_SIOCGIFINDEX(r1, 0x8947, &(0x7f0000000000)={'vlan1\x00'}) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/nfs4.nametoid/content\x00', 0x2000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000100)=""/135, 0x87) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r6, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003ac0)={&(0x7f0000000840)=ANY=[@ANYBLOB=',;\x00\x00', @ANYRES16=r7, @ANYBLOB="8b0a2cbd7000ffd9df25010000000800018004000280103b01"], 0x3b2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 677.466062ms ago: executing program 1 (id=2407): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x286802, 0x0) ioctl$auto(r0, 0x5385, 0x1cfc4b42) 492.927227ms ago: executing program 1 (id=2408): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto(0x3, 0x2288, 0x38) 350.504519ms ago: executing program 1 (id=2409): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) ioctl$auto(r0, 0x5385, 0x1cfc4b42) (fail_nth: 3) 0s ago: executing program 0 (id=2410): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8002, 0x0) read$auto(r0, 0x0, 0x80) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x2201, 0x38) kernel console output (not intermixed with test programs): 0 R09: 0000000000000000 [ 396.223761][T11759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.231730][T11759] R13: 0000000000000000 R14: 00007f4c67b75fa0 R15: 00007ffeea623518 [ 396.239723][T11759] [ 396.242786][ C1] vkms_vblank_simulate: vblank timer overrun [ 396.378593][T11759] ERROR: Out of memory at tomoyo_realpath_from_path. [ 397.711066][T11783] FAULT_INJECTION: forcing a failure. [ 397.711066][T11783] name failslab, interval 1, probability 0, space 0, times 0 [ 397.745911][T11783] CPU: 1 UID: 0 PID: 11783 Comm: syz.1.1599 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 397.756761][T11783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 397.766849][T11783] Call Trace: [ 397.770144][T11783] [ 397.773094][T11783] dump_stack_lvl+0x16c/0x1f0 [ 397.777806][T11783] should_fail_ex+0x497/0x5b0 [ 397.782513][T11783] ? fs_reclaim_acquire+0xae/0x150 [ 397.787663][T11783] should_failslab+0xc2/0x120 [ 397.792386][T11783] __kmalloc_noprof+0xce/0x4f0 [ 397.797182][T11783] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 397.802839][T11783] ? tomoyo_realpath_from_path+0xbf/0x710 [ 397.808598][T11783] tomoyo_realpath_from_path+0xbf/0x710 [ 397.814169][T11783] ? tomoyo_path_number_perm+0x235/0x5b0 [ 397.819829][T11783] tomoyo_path_number_perm+0x248/0x5b0 [ 397.825313][T11783] ? tomoyo_path_number_perm+0x235/0x5b0 [ 397.830961][T11783] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 397.836980][T11783] ? __pfx_lock_release+0x10/0x10 [ 397.842022][T11783] ? trace_lock_acquire+0x14e/0x1f0 [ 397.847234][T11783] ? lock_acquire+0x2f/0xb0 [ 397.851740][T11783] ? __fget_files+0x40/0x3a0 [ 397.856359][T11783] ? __fget_files+0x206/0x3a0 [ 397.861073][T11783] security_file_ioctl+0x9b/0x240 [ 397.866116][T11783] __x64_sys_ioctl+0xb7/0x200 [ 397.870815][T11783] do_syscall_64+0xcd/0x250 [ 397.875329][T11783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.881226][T11783] RIP: 0033:0x7f4c67985d19 [ 397.885642][T11783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.905254][T11783] RSP: 002b:00007f4c687d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.913670][T11783] RAX: ffffffffffffffda RBX: 00007f4c67b75fa0 RCX: 00007f4c67985d19 [ 397.921644][T11783] RDX: 0000000000000038 RSI: 0000000000002288 RDI: 0000000000000003 [ 397.929638][T11783] RBP: 00007f4c687d1090 R08: 0000000000000000 R09: 0000000000000000 [ 397.937631][T11783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.945621][T11783] R13: 0000000000000000 R14: 00007f4c67b75fa0 R15: 00007ffeea623518 [ 397.953618][T11783] [ 397.956758][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.122366][T11783] ERROR: Out of memory at tomoyo_realpath_from_path. [ 398.886440][T11795] FAULT_INJECTION: forcing a failure. [ 398.886440][T11795] name failslab, interval 1, probability 0, space 0, times 0 [ 398.906466][T11795] CPU: 1 UID: 0 PID: 11795 Comm: syz.1.1611 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 398.917300][T11795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 398.927385][T11795] Call Trace: [ 398.930688][T11795] [ 398.933648][T11795] dump_stack_lvl+0x16c/0x1f0 [ 398.938359][T11795] should_fail_ex+0x497/0x5b0 [ 398.943081][T11795] ? fs_reclaim_acquire+0xae/0x150 [ 398.948232][T11795] should_failslab+0xc2/0x120 [ 398.952948][T11795] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 398.958359][T11795] ? ptlock_alloc+0x1f/0x70 [ 398.962908][T11795] ptlock_alloc+0x1f/0x70 [ 398.967280][T11795] pte_alloc_one+0x74/0x390 [ 398.971794][T11795] do_pte_missing+0x1ae7/0x3e00 [ 398.976661][T11795] __handle_mm_fault+0x103c/0x2a40 [ 398.981785][T11795] ? __pfx___handle_mm_fault+0x10/0x10 [ 398.987251][T11795] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 398.992904][T11795] ? find_vma+0xc0/0x140 [ 398.997147][T11795] ? __pfx_find_vma+0x10/0x10 [ 399.001825][T11795] handle_mm_fault+0x3fa/0xaa0 [ 399.006599][T11795] do_user_addr_fault+0x7a3/0x13f0 [ 399.011732][T11795] exc_page_fault+0x5c/0xc0 [ 399.016240][T11795] asm_exc_page_fault+0x26/0x30 [ 399.021113][T11795] RIP: 0010:__get_user_4+0x1a/0x30 [ 399.026235][T11795] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 ba 00 f0 ff ff ff 7f 00 00 48 39 c2 48 19 d2 48 09 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 [ 399.045933][T11795] RSP: 0018:ffffc900058b7d68 EFLAGS: 00050202 [ 399.052002][T11795] RAX: 0000000000000038 RBX: ffff888022f98000 RCX: ffffc900058b7cd0 [ 399.059972][T11795] RDX: 0000000000000000 RSI: ffffffff85f7ede4 RDI: ffffffff8bb15760 [ 399.067948][T11795] RBP: 0000000000002275 R08: 0000000000000000 R09: fffffbfff2039862 [ 399.075928][T11795] R10: ffffffff901cc317 R11: 0000000000000000 R12: ffff8880332ca1c0 [ 399.083900][T11795] R13: 000000000000a802 R14: ffff888027c08000 R15: ffff8880332ca230 [ 399.091879][T11795] ? sg_ioctl+0x264/0x26b0 [ 399.096311][T11795] sg_ioctl+0x26d/0x26b0 [ 399.100567][T11795] ? __pfx_sg_ioctl+0x10/0x10 [ 399.105254][T11795] ? __pfx_lock_release+0x10/0x10 [ 399.110288][T11795] ? trace_lock_acquire+0x14e/0x1f0 [ 399.115504][T11795] ? __fget_files+0x206/0x3a0 [ 399.120190][T11795] ? __pfx_sg_ioctl+0x10/0x10 [ 399.124878][T11795] __x64_sys_ioctl+0x190/0x200 [ 399.129657][T11795] do_syscall_64+0xcd/0x250 [ 399.134168][T11795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.140067][T11795] RIP: 0033:0x7f4c67985d19 [ 399.144482][T11795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.164096][T11795] RSP: 002b:00007f4c687d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 399.172515][T11795] RAX: ffffffffffffffda RBX: 00007f4c67b75fa0 RCX: 00007f4c67985d19 [ 399.180496][T11795] RDX: 0000000000000038 RSI: 0000000000002275 RDI: 0000000000000003 [ 399.188467][T11795] RBP: 00007f4c687d1090 R08: 0000000000000000 R09: 0000000000000000 [ 399.196438][T11795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.204423][T11795] R13: 0000000000000000 R14: 00007f4c67b75fa0 R15: 00007ffeea623518 [ 399.212409][T11795] [ 399.552432][T11803] program syz.3.1606 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 399.595310][T11803] FAULT_INJECTION: forcing a failure. [ 399.595310][T11803] name failslab, interval 1, probability 0, space 0, times 0 [ 399.629982][T11803] CPU: 1 UID: 0 PID: 11803 Comm: syz.3.1606 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 399.640813][T11803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 399.650904][T11803] Call Trace: [ 399.654216][T11803] [ 399.657171][T11803] dump_stack_lvl+0x16c/0x1f0 [ 399.661886][T11803] should_fail_ex+0x497/0x5b0 [ 399.666604][T11803] ? percpu_ref_put_many.constprop.0+0x2e/0x2a0 [ 399.672893][T11803] should_failslab+0xc2/0x120 [ 399.677615][T11803] __kmalloc_cache_noprof+0x68/0x420 [ 399.682919][T11803] ? blk_mq_free_request+0x1e9/0x340 [ 399.688219][T11803] ? scsi_execute_cmd+0x11b/0xff0 [ 399.693256][T11803] sdev_prefix_printk+0xe9/0x230 [ 399.698198][T11803] ? __pfx_sdev_prefix_printk+0x10/0x10 [ 399.703759][T11803] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 399.709146][T11803] ioctl_internal_command.constprop.0+0x560/0x5d0 [ 399.715615][T11803] ? __pfx_ioctl_internal_command.constprop.0+0x10/0x10 [ 399.722562][T11803] ? _printk+0xc8/0x100 [ 399.726719][T11803] ? __pfx__printk+0x10/0x10 [ 399.731329][T11803] scsi_ioctl+0x46f/0x1840 [ 399.735758][T11803] ? __pfx___might_resched+0x10/0x10 [ 399.741061][T11803] ? __pfx_scsi_ioctl+0x10/0x10 [ 399.745930][T11803] ? scsi_block_when_processing_errors+0x2c1/0x380 [ 399.752444][T11803] ? __pfx_scsi_block_when_processing_errors+0x10/0x10 [ 399.759306][T11803] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 399.765207][T11803] ? do_vfs_ioctl+0x513/0x1950 [ 399.769992][T11803] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 399.775040][T11803] sg_ioctl+0xb47/0x26b0 [ 399.779301][T11803] ? __pfx_sg_ioctl+0x10/0x10 [ 399.783984][T11803] ? __pfx_lock_release+0x10/0x10 [ 399.789055][T11803] ? trace_lock_acquire+0x14e/0x1f0 [ 399.794290][T11803] ? __fget_files+0x206/0x3a0 [ 399.798993][T11803] ? __pfx_sg_ioctl+0x10/0x10 [ 399.803691][T11803] __x64_sys_ioctl+0x190/0x200 [ 399.808482][T11803] do_syscall_64+0xcd/0x250 [ 399.813016][T11803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.818938][T11803] RIP: 0033:0x7fe1c2b85d19 [ 399.823365][T11803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.842984][T11803] RSP: 002b:00007fe1c393a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 399.851405][T11803] RAX: ffffffffffffffda RBX: 00007fe1c2d75fa0 RCX: 00007fe1c2b85d19 [ 399.859378][T11803] RDX: 000000001cfc4b42 RSI: 0000000000000005 RDI: 0000000000000003 [ 399.867353][T11803] RBP: 00007fe1c393a090 R08: 0000000000000000 R09: 0000000000000000 [ 399.875325][T11803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.883296][T11803] R13: 0000000000000000 R14: 00007fe1c2d75fa0 R15: 00007fffb418d3a8 [ 399.892065][T11803] [ 400.016173][T11811] program syz.5.1603 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.078081][T11813] program syz.1.1610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.091357][T11811] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 400.104596][T11813] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 403.545858][T11865] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1620'. [ 403.586619][T11868] FAULT_INJECTION: forcing a failure. [ 403.586619][T11868] name failslab, interval 1, probability 0, space 0, times 0 [ 403.604892][T11868] CPU: 0 UID: 0 PID: 11868 Comm: syz.3.1624 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 403.615723][T11868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 403.625807][T11868] Call Trace: [ 403.629113][T11868] [ 403.632061][T11868] dump_stack_lvl+0x16c/0x1f0 [ 403.636753][T11868] should_fail_ex+0x497/0x5b0 [ 403.641437][T11868] ? fs_reclaim_acquire+0xae/0x150 [ 403.646558][T11868] should_failslab+0xc2/0x120 [ 403.651252][T11868] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 403.656645][T11868] ? ptlock_alloc+0x1f/0x70 [ 403.661170][T11868] ? __pfx_filemap_map_pages+0x10/0x10 [ 403.666639][T11868] ptlock_alloc+0x1f/0x70 [ 403.670977][T11868] pte_alloc_one+0x74/0x390 [ 403.675486][T11868] __do_fault+0x320/0x490 [ 403.679822][T11868] ? __pfx_filemap_map_pages+0x10/0x10 [ 403.685289][T11868] do_pte_missing+0x1a8/0x3e00 [ 403.690069][T11868] __handle_mm_fault+0x103c/0x2a40 [ 403.695194][T11868] ? __pfx___handle_mm_fault+0x10/0x10 [ 403.700665][T11868] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 403.706314][T11868] ? find_vma+0xc0/0x140 [ 403.710562][T11868] ? __pfx_find_vma+0x10/0x10 [ 403.715246][T11868] handle_mm_fault+0x3fa/0xaa0 [ 403.720021][T11868] do_user_addr_fault+0x7a3/0x13f0 [ 403.725151][T11868] exc_page_fault+0x5c/0xc0 [ 403.729663][T11868] asm_exc_page_fault+0x26/0x30 [ 403.734516][T11868] RIP: 0010:__put_user_4+0x11/0x20 [ 403.739642][T11868] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 403.759268][T11868] RSP: 0018:ffffc9000c39fd68 EFLAGS: 00050202 [ 403.765452][T11868] RAX: 0000000000000040 RBX: 0000000000000000 RCX: 0000000000000038 [ 403.773436][T11868] RDX: 1ffff11004f8101d RSI: ffffffff85f7f8ed RDI: ffff888027c080e8 [ 403.781417][T11868] RBP: 000000000000227f R08: 0000000000000000 R09: fffffbfff2039862 [ 403.789401][T11868] R10: ffffffff901cc317 R11: 0000000000000000 R12: ffff88807e3a0380 [ 403.797375][T11868] R13: 000000000000a802 R14: ffff888027c08000 R15: ffff88807e3a03f0 [ 403.805356][T11868] ? sg_ioctl+0xd6d/0x26b0 [ 403.809790][T11868] sg_ioctl+0xda5/0x26b0 [ 403.814044][T11868] ? __pfx_sg_ioctl+0x10/0x10 [ 403.818727][T11868] ? __pfx_lock_release+0x10/0x10 [ 403.823764][T11868] ? trace_lock_acquire+0x14e/0x1f0 [ 403.828979][T11868] ? __fget_files+0x206/0x3a0 [ 403.833661][T11868] ? __pfx_sg_ioctl+0x10/0x10 [ 403.838347][T11868] __x64_sys_ioctl+0x190/0x200 [ 403.843125][T11868] do_syscall_64+0xcd/0x250 [ 403.847634][T11868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.853538][T11868] RIP: 0033:0x7fe1c2b85d19 [ 403.857953][T11868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.877563][T11868] RSP: 002b:00007fe1c393a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 403.885985][T11868] RAX: ffffffffffffffda RBX: 00007fe1c2d75fa0 RCX: 00007fe1c2b85d19 [ 403.893956][T11868] RDX: 0000000000000038 RSI: 000000000000227f RDI: 0000000000000003 [ 403.901933][T11868] RBP: 00007fe1c393a090 R08: 0000000000000000 R09: 0000000000000000 [ 403.909905][T11868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.917880][T11868] R13: 0000000000000000 R14: 00007fe1c2d75fa0 R15: 00007fffb418d3a8 [ 403.925865][T11868] [ 406.922411][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 406.933716][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 406.942805][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 406.957601][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 406.995877][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 407.003259][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 407.698321][T11902] chnl_net:caif_netlink_parms(): no params data found [ 408.190090][T11902] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.197294][T11902] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.204525][T11902] bridge_slave_0: entered allmulticast mode [ 408.211693][T11902] bridge_slave_0: entered promiscuous mode [ 408.220039][T11902] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.228027][T11902] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.243490][T11902] bridge_slave_1: entered allmulticast mode [ 408.250657][T11902] bridge_slave_1: entered promiscuous mode [ 408.350261][T11902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.362316][T11902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.471851][T11902] team0: Port device team_slave_0 added [ 408.490254][T11902] team0: Port device team_slave_1 added [ 408.615323][T11902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.622321][T11902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.685610][T11902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.723256][T11902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.731848][T11902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.778698][T11902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.923807][T11902] hsr_slave_0: entered promiscuous mode [ 408.952903][T11902] hsr_slave_1: entered promiscuous mode [ 408.977553][T11902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.001590][T11902] Cannot create hsr debugfs directory [ 409.105456][ T5830] Bluetooth: hci2: command tx timeout [ 409.749563][T11902] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 409.830074][T11902] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 409.868755][T11902] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 409.916716][T11902] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 410.049124][T11902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.081063][T11902] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.123963][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.131147][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.180409][ T4806] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.187592][ T4806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.487311][T11902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.186427][ T5830] Bluetooth: hci2: command tx timeout [ 412.051240][T11902] veth0_vlan: entered promiscuous mode [ 412.078008][T11902] veth1_vlan: entered promiscuous mode [ 412.126322][T11902] veth0_macvtap: entered promiscuous mode [ 412.148043][T11902] veth1_macvtap: entered promiscuous mode [ 412.165784][T11902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.176811][T11902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.187225][T11902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.197757][T11902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.207641][T11902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.218132][T11902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.229731][T11902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.243788][T11902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.254436][T11902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.264449][T11902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.275043][T11902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.285394][T11902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.296588][T11902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.307770][T11902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.317806][T11902] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.326639][T11902] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.335420][T11902] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.344146][T11902] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.447773][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.477259][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.511649][ T3472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.519772][ T3472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.265756][ T5830] Bluetooth: hci2: command tx timeout [ 414.903839][T11992] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1649'. [ 415.018003][T11991] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1648'. [ 415.272340][T11990] ima: policy update failed [ 415.279475][ T29] audit: type=1802 audit(4294967360.300:28): pid=11990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1649" res=0 errno=0 [ 415.309685][T11998] program syz.1.1652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 415.349730][ T5830] Bluetooth: hci2: command tx timeout [ 415.357620][T11998] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 415.403303][T11998] FAULT_INJECTION: forcing a failure. [ 415.403303][T11998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.456635][T11998] CPU: 0 UID: 0 PID: 11998 Comm: syz.1.1652 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 415.467471][T11998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 415.477557][T11998] Call Trace: [ 415.480861][T11998] [ 415.483813][T11998] dump_stack_lvl+0x16c/0x1f0 [ 415.488523][T11998] should_fail_ex+0x497/0x5b0 [ 415.493216][T11998] _copy_to_user+0x32/0xd0 [ 415.497650][T11998] simple_read_from_buffer+0xd0/0x160 [ 415.503040][T11998] proc_fail_nth_read+0x198/0x270 [ 415.508075][T11998] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 415.513729][T11998] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 415.519318][T11998] vfs_read+0x1df/0xbe0 [ 415.523484][T11998] ? __fget_files+0x1fc/0x3a0 [ 415.528170][T11998] ? __pfx___mutex_lock+0x10/0x10 [ 415.533207][T11998] ? __pfx_vfs_read+0x10/0x10 [ 415.537908][T11998] ? __fget_files+0x206/0x3a0 [ 415.542602][T11998] ksys_read+0x12b/0x250 [ 415.546851][T11998] ? __pfx_ksys_read+0x10/0x10 [ 415.551630][T11998] do_syscall_64+0xcd/0x250 [ 415.556148][T11998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.562050][T11998] RIP: 0033:0x7f4c6798472c [ 415.566468][T11998] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 415.586085][T11998] RSP: 002b:00007f4c687d1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 415.594506][T11998] RAX: ffffffffffffffda RBX: 00007f4c67b75fa0 RCX: 00007f4c6798472c [ 415.602479][T11998] RDX: 000000000000000f RSI: 00007f4c687d10a0 RDI: 0000000000000004 [ 415.610454][T11998] RBP: 00007f4c687d1090 R08: 0000000000000000 R09: 0000000000000000 [ 415.618429][T11998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.626405][T11998] R13: 0000000000000000 R14: 00007f4c67b75fa0 R15: 00007ffeea623518 [ 415.634402][T11998] [ 416.055521][T12002] program syz.0.1654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 416.087321][T12002] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 417.222596][T12039] FAULT_INJECTION: forcing a failure. [ 417.222596][T12039] name failslab, interval 1, probability 0, space 0, times 0 [ 417.265479][T12039] CPU: 1 UID: 0 PID: 12039 Comm: syz.0.1664 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 417.276312][T12039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 417.286405][T12039] Call Trace: [ 417.289707][T12039] [ 417.292667][T12039] dump_stack_lvl+0x16c/0x1f0 [ 417.297386][T12039] should_fail_ex+0x497/0x5b0 [ 417.302108][T12039] ? fs_reclaim_acquire+0xae/0x150 [ 417.307265][T12039] should_failslab+0xc2/0x120 [ 417.311986][T12039] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 417.317427][T12039] ? ptlock_alloc+0x1f/0x70 [ 417.321976][T12039] ? __pfx_filemap_map_pages+0x10/0x10 [ 417.327490][T12039] ptlock_alloc+0x1f/0x70 [ 417.331858][T12039] pte_alloc_one+0x74/0x390 [ 417.336400][T12039] __do_fault+0x320/0x490 [ 417.340773][T12039] ? __pfx_filemap_map_pages+0x10/0x10 [ 417.346270][T12039] do_pte_missing+0x1a8/0x3e00 [ 417.351091][T12039] __handle_mm_fault+0x103c/0x2a40 [ 417.356255][T12039] ? __pfx___handle_mm_fault+0x10/0x10 [ 417.361760][T12039] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 417.367451][T12039] ? find_vma+0xc0/0x140 [ 417.371735][T12039] ? __pfx_find_vma+0x10/0x10 [ 417.376450][T12039] handle_mm_fault+0x3fa/0xaa0 [ 417.381252][T12039] do_user_addr_fault+0x7a3/0x13f0 [ 417.386391][T12039] exc_page_fault+0x5c/0xc0 [ 417.390902][T12039] asm_exc_page_fault+0x26/0x30 [ 417.395758][T12039] RIP: 0010:__put_user_4+0x11/0x20 [ 417.400876][T12039] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 417.420495][T12039] RSP: 0018:ffffc90004d2fd68 EFLAGS: 00050202 [ 417.426578][T12039] RAX: 0000000000007748 RBX: 0000000000000000 RCX: 0000000000000038 [ 417.434556][T12039] RDX: ffff88802a9bbc00 RSI: ffffffff85f7f36a RDI: ffffffff8bb15760 [ 417.442531][T12039] RBP: 0000000000002282 R08: 0000000000000000 R09: fffffbfff2039862 [ 417.450506][T12039] R10: ffffffff901cc317 R11: 0000000000000000 R12: ffff888028436c40 [ 417.458563][T12039] R13: 000000000000a802 R14: ffff888027c08000 R15: ffff888028436cb0 [ 417.466544][T12039] ? sg_ioctl+0x7ea/0x26b0 [ 417.470976][T12039] sg_ioctl+0x7f8/0x26b0 [ 417.475242][T12039] ? __pfx_sg_ioctl+0x10/0x10 [ 417.479930][T12039] ? __pfx_lock_release+0x10/0x10 [ 417.484966][T12039] ? trace_lock_acquire+0x14e/0x1f0 [ 417.490189][T12039] ? __fget_files+0x206/0x3a0 [ 417.494874][T12039] ? __pfx_sg_ioctl+0x10/0x10 [ 417.499564][T12039] __x64_sys_ioctl+0x190/0x200 [ 417.504343][T12039] do_syscall_64+0xcd/0x250 [ 417.508858][T12039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.514758][T12039] RIP: 0033:0x7fea0c385d19 [ 417.519173][T12039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.538792][T12039] RSP: 002b:00007fea0a1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 417.547213][T12039] RAX: ffffffffffffffda RBX: 00007fea0c575fa0 RCX: 00007fea0c385d19 [ 417.555189][T12039] RDX: 0000000000000038 RSI: 0000000000002282 RDI: 0000000000000003 [ 417.563160][T12039] RBP: 00007fea0a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 417.571135][T12039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.579107][T12039] R13: 0000000000000000 R14: 00007fea0c575fa0 R15: 00007ffe251c8d28 [ 417.587094][T12039] [ 417.763363][T12044] FAULT_INJECTION: forcing a failure. [ 417.763363][T12044] name failslab, interval 1, probability 0, space 0, times 0 [ 417.784086][T12044] CPU: 1 UID: 0 PID: 12044 Comm: syz.1.1667 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 417.794916][T12044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 417.805006][T12044] Call Trace: [ 417.808305][T12044] [ 417.811260][T12044] dump_stack_lvl+0x16c/0x1f0 [ 417.815982][T12044] should_fail_ex+0x497/0x5b0 [ 417.820692][T12044] ? fs_reclaim_acquire+0xae/0x150 [ 417.825834][T12044] should_failslab+0xc2/0x120 [ 417.830548][T12044] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 417.835970][T12044] ? alloc_empty_file+0x73/0x1e0 [ 417.840953][T12044] alloc_empty_file+0x73/0x1e0 [ 417.845735][T12044] path_openat+0xe1/0x2d60 [ 417.850158][T12044] ? hlock_class+0x4e/0x130 [ 417.854669][T12044] ? __lock_acquire+0x15a9/0x3c40 [ 417.859720][T12044] ? __pfx_path_openat+0x10/0x10 [ 417.864662][T12044] ? __pfx___lock_acquire+0x10/0x10 [ 417.869876][T12044] ? lock_acquire.part.0+0x11b/0x380 [ 417.875165][T12044] ? find_held_lock+0x2d/0x110 [ 417.879944][T12044] do_filp_open+0x20c/0x470 [ 417.884457][T12044] ? __pfx_do_filp_open+0x10/0x10 [ 417.889488][T12044] ? find_held_lock+0x2d/0x110 [ 417.894278][T12044] ? alloc_fd+0x41f/0x760 [ 417.898638][T12044] do_sys_openat2+0x17a/0x1e0 [ 417.903352][T12044] ? __pfx_do_sys_openat2+0x10/0x10 [ 417.908579][T12044] ? __fget_files+0x206/0x3a0 [ 417.913282][T12044] __x64_sys_openat+0x175/0x210 [ 417.918171][T12044] ? __pfx___x64_sys_openat+0x10/0x10 [ 417.923577][T12044] ? ksys_write+0x1ba/0x250 [ 417.928143][T12044] do_syscall_64+0xcd/0x250 [ 417.932681][T12044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.938584][T12044] RIP: 0033:0x7f4c67985d19 [ 417.943007][T12044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.962623][T12044] RSP: 002b:00007f4c687d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 417.971051][T12044] RAX: ffffffffffffffda RBX: 00007f4c67b75fa0 RCX: 00007f4c67985d19 [ 417.979023][T12044] RDX: 0000000000006200 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 417.987000][T12044] RBP: 00007f4c687d1090 R08: 0000000000000000 R09: 0000000000000000 [ 417.994973][T12044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.002949][T12044] R13: 0000000000000000 R14: 00007f4c67b75fa0 R15: 00007ffeea623518 [ 418.010938][T12044] [ 418.025641][T12049] netlink: 252 bytes leftover after parsing attributes in process `syz.6.1665'. [ 419.185957][T12076] FAULT_INJECTION: forcing a failure. [ 419.185957][T12076] name failslab, interval 1, probability 0, space 0, times 0 [ 419.222923][T12076] CPU: 0 UID: 0 PID: 12076 Comm: syz.1.1675 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 419.233768][T12076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 419.243873][T12076] Call Trace: [ 419.247181][T12076] [ 419.250130][T12076] dump_stack_lvl+0x16c/0x1f0 [ 419.254832][T12076] should_fail_ex+0x497/0x5b0 [ 419.259527][T12076] ? fs_reclaim_acquire+0xae/0x150 [ 419.264646][T12076] should_failslab+0xc2/0x120 [ 419.269335][T12076] __kmalloc_noprof+0xce/0x4f0 [ 419.274106][T12076] ? d_absolute_path+0x137/0x1b0 [ 419.279054][T12076] ? tomoyo_encode2+0x100/0x3e0 [ 419.283916][T12076] tomoyo_encode2+0x100/0x3e0 [ 419.288599][T12076] tomoyo_realpath_from_path+0x1a7/0x710 [ 419.294242][T12076] tomoyo_path_number_perm+0x248/0x5b0 [ 419.299711][T12076] ? tomoyo_path_number_perm+0x235/0x5b0 [ 419.305379][T12076] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 419.311402][T12076] ? __pfx_lock_release+0x10/0x10 [ 419.316440][T12076] ? trace_lock_acquire+0x14e/0x1f0 [ 419.321651][T12076] ? lock_acquire+0x2f/0xb0 [ 419.326163][T12076] ? __fget_files+0x40/0x3a0 [ 419.330764][T12076] ? __fget_files+0x206/0x3a0 [ 419.335457][T12076] security_file_ioctl+0x9b/0x240 [ 419.340489][T12076] __x64_sys_ioctl+0xb7/0x200 [ 419.345188][T12076] do_syscall_64+0xcd/0x250 [ 419.349700][T12076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.355601][T12076] RIP: 0033:0x7f4c67985d19 [ 419.360023][T12076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.379665][T12076] RSP: 002b:00007f4c687d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 419.388089][T12076] RAX: ffffffffffffffda RBX: 00007f4c67b75fa0 RCX: 00007f4c67985d19 [ 419.396063][T12076] RDX: 0000000000000038 RSI: 0000000000002288 RDI: 0000000000000003 [ 419.404054][T12076] RBP: 00007f4c687d1090 R08: 0000000000000000 R09: 0000000000000000 [ 419.412048][T12076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.420029][T12076] R13: 0000000000000000 R14: 00007f4c67b75fa0 R15: 00007ffeea623518 [ 419.428029][T12076] [ 419.508515][T12076] ERROR: Out of memory at tomoyo_realpath_from_path. [ 420.834833][T11563] syz.5.1537 (11563) used greatest stack depth: 18064 bytes left [ 421.240038][T12100] netlink: 252 bytes leftover after parsing attributes in process `syz.5.1681'. [ 422.100157][T12118] program syz.0.1692 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 422.114538][T12118] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 423.225808][T12152] FAULT_INJECTION: forcing a failure. [ 423.225808][T12152] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 423.294805][T12152] CPU: 0 UID: 0 PID: 12152 Comm: syz.0.1701 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 423.305649][T12152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 423.315751][T12152] Call Trace: [ 423.319060][T12152] [ 423.322018][T12152] dump_stack_lvl+0x16c/0x1f0 [ 423.326747][T12152] should_fail_ex+0x497/0x5b0 [ 423.331463][T12152] ? fs_reclaim_acquire+0xae/0x150 [ 423.336618][T12152] should_fail_alloc_page+0xe7/0x130 [ 423.341958][T12152] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 423.348206][T12152] __alloc_pages_noprof+0x190/0x25b0 [ 423.353551][T12152] ? __pfx_mark_lock+0x10/0x10 [ 423.358362][T12152] ? __pfx___lock_acquire+0x10/0x10 [ 423.363608][T12152] ? mark_lock+0xb5/0xc60 [ 423.367990][T12152] ? hlock_class+0x4e/0x130 [ 423.372538][T12152] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 423.378293][T12152] ? find_held_lock+0x2d/0x110 [ 423.383071][T12152] ? hlock_class+0x4e/0x130 [ 423.387583][T12152] ? __lock_acquire+0xcc5/0x3c40 [ 423.392538][T12152] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 423.398440][T12152] ? policy_nodemask+0xea/0x4e0 [ 423.403303][T12152] alloc_pages_mpol_noprof+0x2c9/0x610 [ 423.408776][T12152] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 423.414781][T12152] ? find_held_lock+0x2d/0x110 [ 423.419567][T12152] folio_alloc_mpol_noprof+0x36/0xd0 [ 423.424870][T12152] shmem_alloc_folio+0x135/0x160 [ 423.429820][T12152] shmem_alloc_and_add_folio+0x48b/0xc00 [ 423.435459][T12152] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 423.441361][T12152] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 423.447520][T12152] ? shmem_huge_global_enabled+0x176/0x250 [ 423.453338][T12152] ? shmem_allowable_huge_orders+0xcd/0x3e0 [ 423.459240][T12152] shmem_get_folio_gfp+0x689/0x1530 [ 423.464448][T12152] ? mark_lock+0xb5/0xc60 [ 423.468791][T12152] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 423.474451][T12152] ? __pfx_mark_lock+0x10/0x10 [ 423.479233][T12152] shmem_fault+0x200/0xae0 [ 423.483653][T12152] ? __pfx_shmem_fault+0x10/0x10 [ 423.488599][T12152] ? __pfx_lock_release+0x10/0x10 [ 423.493633][T12152] ? __mod_memcg_lruvec_state+0x53c/0x750 [ 423.499371][T12152] ? __pfx_filemap_map_pages+0x10/0x10 [ 423.504838][T12152] ? mark_held_locks+0x9f/0xe0 [ 423.509615][T12152] ? pte_alloc_one+0x2a3/0x390 [ 423.514388][T12152] ? __pfx_filemap_map_pages+0x10/0x10 [ 423.519855][T12152] __do_fault+0x10a/0x490 [ 423.524186][T12152] ? __pfx_filemap_map_pages+0x10/0x10 [ 423.529654][T12152] do_pte_missing+0x1a8/0x3e00 [ 423.534439][T12152] __handle_mm_fault+0x103c/0x2a40 [ 423.539564][T12152] ? __pfx___handle_mm_fault+0x10/0x10 [ 423.545036][T12152] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 423.550696][T12152] ? find_vma+0xc0/0x140 [ 423.554941][T12152] ? __pfx_find_vma+0x10/0x10 [ 423.559623][T12152] handle_mm_fault+0x3fa/0xaa0 [ 423.564406][T12152] do_user_addr_fault+0x7a3/0x13f0 [ 423.569544][T12152] exc_page_fault+0x5c/0xc0 [ 423.574057][T12152] asm_exc_page_fault+0x26/0x30 [ 423.578914][T12152] RIP: 0010:__put_user_4+0x11/0x20 [ 423.584032][T12152] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 423.604423][T12152] RSP: 0018:ffffc9000438fd68 EFLAGS: 00050202 [ 423.610493][T12152] RAX: 0000000000007748 RBX: 0000000000000000 RCX: 0000000000000038 [ 423.618463][T12152] RDX: ffff888044cb0000 RSI: ffffffff85f7f36a RDI: ffffffff8bb15760 [ 423.626440][T12152] RBP: 0000000000002282 R08: 0000000000000000 R09: fffffbfff2039862 [ 423.634412][T12152] R10: ffffffff901cc317 R11: 0000000000000000 R12: ffff888029fa0a80 [ 423.642383][T12152] R13: 000000000000a802 R14: ffff888027c08000 R15: ffff888029fa0af0 [ 423.650364][T12152] ? sg_ioctl+0x7ea/0x26b0 [ 423.654799][T12152] sg_ioctl+0x7f8/0x26b0 [ 423.659066][T12152] ? __pfx_sg_ioctl+0x10/0x10 [ 423.663748][T12152] ? __pfx_lock_release+0x10/0x10 [ 423.668783][T12152] ? trace_lock_acquire+0x14e/0x1f0 [ 423.673998][T12152] ? __fget_files+0x206/0x3a0 [ 423.678688][T12152] ? __pfx_sg_ioctl+0x10/0x10 [ 423.683376][T12152] __x64_sys_ioctl+0x190/0x200 [ 423.688156][T12152] do_syscall_64+0xcd/0x250 [ 423.692669][T12152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.698566][T12152] RIP: 0033:0x7fea0c385d19 [ 423.702982][T12152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.722596][T12152] RSP: 002b:00007fea0a1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 423.731020][T12152] RAX: ffffffffffffffda RBX: 00007fea0c575fa0 RCX: 00007fea0c385d19 [ 423.738993][T12152] RDX: 0000000000000038 RSI: 0000000000002282 RDI: 0000000000000003 [ 423.746968][T12152] RBP: 00007fea0a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 423.754946][T12152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.762919][T12152] R13: 0000000000000000 R14: 00007fea0c575fa0 R15: 00007ffe251c8d28 [ 423.770902][T12152] [ 424.016641][T12156] FAULT_INJECTION: forcing a failure. [ 424.016641][T12156] name failslab, interval 1, probability 0, space 0, times 0 [ 424.045468][T12156] CPU: 0 UID: 0 PID: 12156 Comm: syz.5.1703 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 424.056305][T12156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 424.066394][T12156] Call Trace: [ 424.069699][T12156] [ 424.072654][T12156] dump_stack_lvl+0x16c/0x1f0 [ 424.077376][T12156] should_fail_ex+0x497/0x5b0 [ 424.082089][T12156] ? fs_reclaim_acquire+0xae/0x150 [ 424.087235][T12156] should_failslab+0xc2/0x120 [ 424.091954][T12156] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 424.097364][T12156] ? security_file_alloc+0x34/0x2b0 [ 424.102592][T12156] security_file_alloc+0x34/0x2b0 [ 424.107643][T12156] init_file+0x93/0x480 [ 424.111839][T12156] alloc_empty_file+0x91/0x1e0 [ 424.116643][T12156] path_openat+0xe1/0x2d60 [ 424.121105][T12156] ? hlock_class+0x4e/0x130 [ 424.125643][T12156] ? __lock_acquire+0x15a9/0x3c40 [ 424.130733][T12156] ? __pfx_path_openat+0x10/0x10 [ 424.135715][T12156] ? __pfx___lock_acquire+0x10/0x10 [ 424.140954][T12156] ? lock_acquire.part.0+0x11b/0x380 [ 424.146268][T12156] ? find_held_lock+0x2d/0x110 [ 424.151073][T12156] do_filp_open+0x20c/0x470 [ 424.155612][T12156] ? __pfx_do_filp_open+0x10/0x10 [ 424.160670][T12156] ? find_held_lock+0x2d/0x110 [ 424.165504][T12156] ? alloc_fd+0x41f/0x760 [ 424.169877][T12156] do_sys_openat2+0x17a/0x1e0 [ 424.174599][T12156] ? __pfx_do_sys_openat2+0x10/0x10 [ 424.179849][T12156] ? __fget_files+0x206/0x3a0 [ 424.184574][T12156] __x64_sys_openat+0x175/0x210 [ 424.189472][T12156] ? __pfx___x64_sys_openat+0x10/0x10 [ 424.194882][T12156] ? ksys_write+0x1ba/0x250 [ 424.199429][T12156] do_syscall_64+0xcd/0x250 [ 424.203973][T12156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.209906][T12156] RIP: 0033:0x7f8829785d19 [ 424.214346][T12156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.233989][T12156] RSP: 002b:00007f882a606038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 424.242446][T12156] RAX: ffffffffffffffda RBX: 00007f8829975fa0 RCX: 00007f8829785d19 [ 424.250458][T12156] RDX: 0000000000006200 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 424.258463][T12156] RBP: 00007f882a606090 R08: 0000000000000000 R09: 0000000000000000 [ 424.266466][T12156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.274471][T12156] R13: 0000000000000000 R14: 00007f8829975fa0 R15: 00007ffe455a7508 [ 424.282494][T12156] [ 424.562780][T12158] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1705'. [ 426.067303][T12188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1710'. [ 426.135265][T12192] Process accounting resumed [ 426.263518][T12204] FAULT_INJECTION: forcing a failure. [ 426.263518][T12204] name failslab, interval 1, probability 0, space 0, times 0 [ 426.304327][T12204] CPU: 0 UID: 0 PID: 12204 Comm: syz.0.1714 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 426.315193][T12204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 426.325285][T12204] Call Trace: [ 426.328586][T12204] [ 426.331540][T12204] dump_stack_lvl+0x16c/0x1f0 [ 426.336261][T12204] should_fail_ex+0x497/0x5b0 [ 426.340973][T12204] ? fs_reclaim_acquire+0xae/0x150 [ 426.346123][T12204] should_failslab+0xc2/0x120 [ 426.350845][T12204] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 426.356262][T12204] ? ptlock_alloc+0x1f/0x70 [ 426.360808][T12204] ? __pfx_filemap_map_pages+0x10/0x10 [ 426.366302][T12204] ptlock_alloc+0x1f/0x70 [ 426.370668][T12204] pte_alloc_one+0x74/0x390 [ 426.375200][T12204] __do_fault+0x320/0x490 [ 426.379559][T12204] ? __pfx_filemap_map_pages+0x10/0x10 [ 426.385048][T12204] do_pte_missing+0x1a8/0x3e00 [ 426.389858][T12204] __handle_mm_fault+0x103c/0x2a40 [ 426.395019][T12204] ? __pfx___handle_mm_fault+0x10/0x10 [ 426.400512][T12204] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 426.406202][T12204] ? find_vma+0xc0/0x140 [ 426.410480][T12204] ? __pfx_find_vma+0x10/0x10 [ 426.415195][T12204] handle_mm_fault+0x3fa/0xaa0 [ 426.420002][T12204] do_user_addr_fault+0x7a3/0x13f0 [ 426.425182][T12204] exc_page_fault+0x5c/0xc0 [ 426.429739][T12204] asm_exc_page_fault+0x26/0x30 [ 426.434628][T12204] RIP: 0010:__put_user_4+0x11/0x20 [ 426.439776][T12204] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 426.459428][T12204] RSP: 0018:ffffc9000498fd68 EFLAGS: 00050202 [ 426.465531][T12204] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000038 [ 426.473530][T12204] RDX: 0000000000000003 RSI: ffffffff85f7f88e RDI: ffff888022bcd67b [ 426.481537][T12204] RBP: 0000000000002288 R08: 0000000000000000 R09: fffffbfff2039862 [ 426.489548][T12204] R10: ffffffff901cc317 R11: 0000000000000000 R12: ffff88807ea6cc40 [ 426.497555][T12204] R13: 000000000000a802 R14: ffff888027c08000 R15: ffff88807ea6ccb0 [ 426.505569][T12204] ? sg_ioctl+0xd0e/0x26b0 [ 426.510034][T12204] sg_ioctl+0xd4c/0x26b0 [ 426.514330][T12204] ? __pfx_sg_ioctl+0x10/0x10 [ 426.519049][T12204] ? __pfx_lock_release+0x10/0x10 [ 426.524119][T12204] ? trace_lock_acquire+0x14e/0x1f0 [ 426.529386][T12204] ? __fget_files+0x206/0x3a0 [ 426.534099][T12204] ? __pfx_sg_ioctl+0x10/0x10 [ 426.538829][T12204] __x64_sys_ioctl+0x190/0x200 [ 426.543640][T12204] do_syscall_64+0xcd/0x250 [ 426.548188][T12204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.554111][T12204] RIP: 0033:0x7fea0c385d19 [ 426.558561][T12204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.578208][T12204] RSP: 002b:00007fea0a1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.586664][T12204] RAX: ffffffffffffffda RBX: 00007fea0c575fa0 RCX: 00007fea0c385d19 [ 426.594673][T12204] RDX: 0000000000000038 RSI: 0000000000002288 RDI: 0000000000000003 [ 426.602675][T12204] RBP: 00007fea0a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 426.610682][T12204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.618688][T12204] R13: 0000000000000000 R14: 00007fea0c575fa0 R15: 00007ffe251c8d28 [ 426.626717][T12204] [ 430.985614][T12304] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1740'. [ 431.297219][T12303] ima: policy update failed [ 431.304988][ T29] audit: type=1802 audit(4294967376.320:29): pid=12303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.1740" res=0 errno=0 [ 432.454481][T12340] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1751'. [ 433.039293][T12339] ima: policy update failed [ 433.045874][ T29] audit: type=1802 audit(4294967378.070:30): pid=12339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1751" res=0 errno=0 [ 433.417086][T12362] FAULT_INJECTION: forcing a failure. [ 433.417086][T12362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.462168][T12362] CPU: 1 UID: 0 PID: 12362 Comm: syz.6.1757 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 433.473007][T12362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 433.483107][T12362] Call Trace: [ 433.486414][T12362] [ 433.489369][T12362] dump_stack_lvl+0x16c/0x1f0 [ 433.494082][T12362] should_fail_ex+0x497/0x5b0 [ 433.498801][T12362] _copy_to_user+0x32/0xd0 [ 433.503259][T12362] simple_read_from_buffer+0xd0/0x160 [ 433.508681][T12362] proc_fail_nth_read+0x198/0x270 [ 433.513747][T12362] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 433.519343][T12362] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 433.524935][T12362] vfs_read+0x1df/0xbe0 [ 433.529129][T12362] ? __fget_files+0x1fc/0x3a0 [ 433.533840][T12362] ? __pfx___mutex_lock+0x10/0x10 [ 433.538905][T12362] ? __pfx_vfs_read+0x10/0x10 [ 433.543631][T12362] ? __fget_files+0x206/0x3a0 [ 433.548353][T12362] ksys_read+0x12b/0x250 [ 433.552629][T12362] ? __pfx_ksys_read+0x10/0x10 [ 433.557435][T12362] do_syscall_64+0xcd/0x250 [ 433.561978][T12362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.567909][T12362] RIP: 0033:0x7fb54878472c [ 433.572353][T12362] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 433.592002][T12362] RSP: 002b:00007fb5495fc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 433.600459][T12362] RAX: ffffffffffffffda RBX: 00007fb548975fa0 RCX: 00007fb54878472c [ 433.608475][T12362] RDX: 000000000000000f RSI: 00007fb5495fc0a0 RDI: 0000000000000004 [ 433.616495][T12362] RBP: 00007fb5495fc090 R08: 0000000000000000 R09: 0000000000000000 [ 433.624508][T12362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.632520][T12362] R13: 0000000000000000 R14: 00007fb548975fa0 R15: 00007ffee8861f48 [ 433.640545][T12362] [ 433.810310][T12369] FAULT_INJECTION: forcing a failure. [ 433.810310][T12369] name failslab, interval 1, probability 0, space 0, times 0 [ 433.834867][T12369] CPU: 1 UID: 0 PID: 12369 Comm: syz.6.1758 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 433.845704][T12369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 433.855796][T12369] Call Trace: [ 433.859100][T12369] [ 433.862062][T12369] dump_stack_lvl+0x16c/0x1f0 [ 433.866784][T12369] should_fail_ex+0x497/0x5b0 [ 433.871501][T12369] ? fs_reclaim_acquire+0xae/0x150 [ 433.876650][T12369] should_failslab+0xc2/0x120 [ 433.881367][T12369] __kmalloc_noprof+0xce/0x4f0 [ 433.886168][T12369] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 433.891835][T12369] ? tomoyo_realpath_from_path+0xbf/0x710 [ 433.897597][T12369] ? rcu_is_watching+0x12/0xc0 [ 433.902405][T12369] tomoyo_realpath_from_path+0xbf/0x710 [ 433.908005][T12369] tomoyo_check_open_permission+0x2ad/0x3c0 [ 433.913956][T12369] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 433.920439][T12369] ? __pfx___lock_acquire+0x10/0x10 [ 433.925716][T12369] ? __pfx_hook_file_open+0x10/0x10 [ 433.930959][T12369] ? lock_acquire+0x2f/0xb0 [ 433.935506][T12369] tomoyo_file_open+0x6b/0x90 [ 433.940217][T12369] security_file_open+0x84/0x1e0 [ 433.945187][T12369] do_dentry_open+0x57e/0x1ea0 [ 433.949990][T12369] ? inode_permission+0xdd/0x5f0 [ 433.954972][T12369] vfs_open+0x82/0x3f0 [ 433.959079][T12369] ? may_open+0x1f2/0x400 [ 433.963463][T12369] path_openat+0x1e6a/0x2d60 [ 433.968106][T12369] ? __pfx_path_openat+0x10/0x10 [ 433.973083][T12369] ? __pfx___lock_acquire+0x10/0x10 [ 433.978422][T12369] ? lock_acquire.part.0+0x11b/0x380 [ 433.983755][T12369] ? find_held_lock+0x2d/0x110 [ 433.988576][T12369] do_filp_open+0x20c/0x470 [ 433.993123][T12369] ? __pfx_do_filp_open+0x10/0x10 [ 433.998186][T12369] ? find_held_lock+0x2d/0x110 [ 434.003013][T12369] ? alloc_fd+0x41f/0x760 [ 434.007396][T12369] do_sys_openat2+0x17a/0x1e0 [ 434.012118][T12369] ? __pfx_do_sys_openat2+0x10/0x10 [ 434.017370][T12369] ? __fget_files+0x206/0x3a0 [ 434.022150][T12369] __x64_sys_openat+0x175/0x210 [ 434.027051][T12369] ? __pfx___x64_sys_openat+0x10/0x10 [ 434.032482][T12369] ? ksys_write+0x1ba/0x250 [ 434.037037][T12369] do_syscall_64+0xcd/0x250 [ 434.041583][T12369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.047517][T12369] RIP: 0033:0x7fb548785d19 [ 434.052051][T12369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.071711][T12369] RSP: 002b:00007fb5495fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 434.080169][T12369] RAX: ffffffffffffffda RBX: 00007fb548975fa0 RCX: 00007fb548785d19 [ 434.088176][T12369] RDX: 0000000000006200 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 434.096186][T12369] RBP: 00007fb5495fc090 R08: 0000000000000000 R09: 0000000000000000 [ 434.104194][T12369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.112200][T12369] R13: 0000000000000000 R14: 00007fb548975fa0 R15: 00007ffee8861f48 [ 434.120223][T12369] [ 434.264832][T12369] ERROR: Out of memory at tomoyo_realpath_from_path. [ 434.627777][ T29] audit: type=1800 audit(4294967379.650:31): pid=12377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1760" name="features" dev="configfs" ino=32989 res=0 errno=0 [ 435.121765][T12385] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1763'. [ 435.178028][T12385] geneve0: entered allmulticast mode [ 437.047262][ T29] audit: type=1800 audit(4294967382.070:32): pid=12432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1778" name="features" dev="configfs" ino=32568 res=0 errno=0 [ 437.112007][T12439] program syz.6.1779 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 437.141342][T12439] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 438.954592][ T29] audit: type=1800 audit(4294967383.970:33): pid=12470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1789" name="features" dev="configfs" ino=33124 res=0 errno=0 [ 440.388855][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.395354][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.405661][T12539] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1810'. [ 440.517862][T12542] FAULT_INJECTION: forcing a failure. [ 440.517862][T12542] name failslab, interval 1, probability 0, space 0, times 0 [ 440.538509][T12542] CPU: 0 UID: 0 PID: 12542 Comm: syz.1.1811 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 440.549316][T12542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 440.559392][T12542] Call Trace: [ 440.562695][T12542] [ 440.565647][T12542] dump_stack_lvl+0x16c/0x1f0 [ 440.570367][T12542] should_fail_ex+0x497/0x5b0 [ 440.575083][T12542] ? fs_reclaim_acquire+0xae/0x150 [ 440.580234][T12542] should_failslab+0xc2/0x120 [ 440.584975][T12542] __kmalloc_noprof+0xce/0x4f0 [ 440.589780][T12542] ? __pfx_d_absolute_path+0x10/0x10 [ 440.595105][T12542] ? tomoyo_encode2+0x100/0x3e0 [ 440.600002][T12542] tomoyo_encode2+0x100/0x3e0 [ 440.604722][T12542] ? rcu_is_watching+0x12/0xc0 [ 440.609533][T12542] tomoyo_realpath_from_path+0x1a7/0x710 [ 440.615219][T12542] tomoyo_check_open_permission+0x2ad/0x3c0 [ 440.621162][T12542] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 440.627656][T12542] ? __pfx___lock_acquire+0x10/0x10 [ 440.632929][T12542] ? __pfx_hook_file_open+0x10/0x10 [ 440.638179][T12542] ? lock_acquire+0x2f/0xb0 [ 440.642730][T12542] tomoyo_file_open+0x6b/0x90 [ 440.647451][T12542] security_file_open+0x84/0x1e0 [ 440.652430][T12542] do_dentry_open+0x57e/0x1ea0 [ 440.657238][T12542] ? inode_permission+0xdd/0x5f0 [ 440.662232][T12542] vfs_open+0x82/0x3f0 [ 440.666343][T12542] ? may_open+0x1f2/0x400 [ 440.670725][T12542] path_openat+0x1e6a/0x2d60 [ 440.675368][T12542] ? __pfx_path_openat+0x10/0x10 [ 440.680343][T12542] ? __pfx___lock_acquire+0x10/0x10 [ 440.685584][T12542] ? lock_acquire.part.0+0x11b/0x380 [ 440.690913][T12542] ? find_held_lock+0x2d/0x110 [ 440.695726][T12542] do_filp_open+0x20c/0x470 [ 440.700273][T12542] ? __pfx_do_filp_open+0x10/0x10 [ 440.705340][T12542] ? find_held_lock+0x2d/0x110 [ 440.710173][T12542] ? alloc_fd+0x41f/0x760 [ 440.714552][T12542] do_sys_openat2+0x17a/0x1e0 [ 440.719273][T12542] ? __pfx_do_sys_openat2+0x10/0x10 [ 440.724520][T12542] ? __fget_files+0x206/0x3a0 [ 440.729240][T12542] __x64_sys_openat+0x175/0x210 [ 440.734127][T12542] ? __pfx___x64_sys_openat+0x10/0x10 [ 440.739537][T12542] ? ksys_write+0x1ba/0x250 [ 440.744102][T12542] do_syscall_64+0xcd/0x250 [ 440.748662][T12542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.754596][T12542] RIP: 0033:0x7f4c67985d19 [ 440.759042][T12542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.778702][T12542] RSP: 002b:00007f4c687d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 440.787156][T12542] RAX: ffffffffffffffda RBX: 00007f4c67b75fa0 RCX: 00007f4c67985d19 [ 440.795166][T12542] RDX: 0000000000006200 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 440.803173][T12542] RBP: 00007f4c687d1090 R08: 0000000000000000 R09: 0000000000000000 [ 440.811173][T12542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.819186][T12542] R13: 0000000000000000 R14: 00007f4c67b75fa0 R15: 00007ffeea623518 [ 440.827215][T12542] [ 440.856760][T12542] ERROR: Out of memory at tomoyo_realpath_from_path. [ 441.595367][T12581] FAULT_INJECTION: forcing a failure. [ 441.595367][T12581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.608997][T12581] CPU: 0 UID: 0 PID: 12581 Comm: syz.6.1821 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 441.619820][T12581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 441.629911][T12581] Call Trace: [ 441.633215][T12581] [ 441.636171][T12581] dump_stack_lvl+0x16c/0x1f0 [ 441.640889][T12581] should_fail_ex+0x497/0x5b0 [ 441.645618][T12581] _copy_to_user+0x32/0xd0 [ 441.650087][T12581] simple_read_from_buffer+0xd0/0x160 [ 441.655512][T12581] proc_fail_nth_read+0x198/0x270 [ 441.660579][T12581] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 441.666170][T12581] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 441.671745][T12581] vfs_read+0x1df/0xbe0 [ 441.675915][T12581] ? __fget_files+0x1fc/0x3a0 [ 441.680601][T12581] ? __pfx___mutex_lock+0x10/0x10 [ 441.685636][T12581] ? __pfx_vfs_read+0x10/0x10 [ 441.690325][T12581] ? __fget_files+0x206/0x3a0 [ 441.695018][T12581] ksys_read+0x12b/0x250 [ 441.699272][T12581] ? __pfx_ksys_read+0x10/0x10 [ 441.704053][T12581] do_syscall_64+0xcd/0x250 [ 441.708565][T12581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.714464][T12581] RIP: 0033:0x7fb54878472c [ 441.718902][T12581] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 441.738521][T12581] RSP: 002b:00007fb5495fc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 441.746943][T12581] RAX: ffffffffffffffda RBX: 00007fb548975fa0 RCX: 00007fb54878472c [ 441.754917][T12581] RDX: 000000000000000f RSI: 00007fb5495fc0a0 RDI: 0000000000000004 [ 441.762889][T12581] RBP: 00007fb5495fc090 R08: 0000000000000000 R09: 0000000000000000 [ 441.770877][T12581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.778868][T12581] R13: 0000000000000000 R14: 00007fb548975fa0 R15: 00007ffee8861f48 [ 441.786867][T12581] [ 442.139964][T12587] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1824'. [ 442.221702][T12587] geneve0: entered allmulticast mode [ 442.999616][T12612] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 443.174934][T12609] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1832'. [ 443.467684][T12608] Process accounting resumed [ 443.593456][T12628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1837'. [ 443.687671][T12628] geneve0: entered allmulticast mode [ 444.415741][T12655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1846'. [ 447.145369][T12719] FAULT_INJECTION: forcing a failure. [ 447.145369][T12719] name failslab, interval 1, probability 0, space 0, times 0 [ 447.234881][T12719] CPU: 0 UID: 0 PID: 12719 Comm: syz.5.1864 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 447.245711][T12719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 447.255792][T12719] Call Trace: [ 447.259090][T12719] [ 447.262039][T12719] dump_stack_lvl+0x16c/0x1f0 [ 447.266752][T12719] should_fail_ex+0x497/0x5b0 [ 447.271464][T12719] ? fs_reclaim_acquire+0xae/0x150 [ 447.276613][T12719] should_failslab+0xc2/0x120 [ 447.281336][T12719] __kmalloc_cache_noprof+0x68/0x420 [ 447.286663][T12719] ? __pfx_lock_release+0x10/0x10 [ 447.291735][T12719] virtual_ncidev_open+0x49/0x220 [ 447.296801][T12719] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 447.302479][T12719] misc_open+0x35a/0x420 [ 447.306747][T12719] ? __pfx_misc_open+0x10/0x10 [ 447.311514][T12719] chrdev_open+0x237/0x6a0 [ 447.315943][T12719] ? __pfx_apparmor_file_open+0x10/0x10 [ 447.321499][T12719] ? __pfx_chrdev_open+0x10/0x10 [ 447.326456][T12719] do_dentry_open+0xf59/0x1ea0 [ 447.331225][T12719] ? __pfx_chrdev_open+0x10/0x10 [ 447.336176][T12719] ? inode_permission+0xdd/0x5f0 [ 447.341128][T12719] vfs_open+0x82/0x3f0 [ 447.345203][T12719] ? may_open+0x1f2/0x400 [ 447.349547][T12719] path_openat+0x1e6a/0x2d60 [ 447.354150][T12719] ? __pfx_path_openat+0x10/0x10 [ 447.359092][T12719] ? __pfx___lock_acquire+0x10/0x10 [ 447.364301][T12719] ? lock_acquire.part.0+0x11b/0x380 [ 447.369586][T12719] ? find_held_lock+0x2d/0x110 [ 447.374361][T12719] do_filp_open+0x20c/0x470 [ 447.378873][T12719] ? __pfx_do_filp_open+0x10/0x10 [ 447.383902][T12719] ? find_held_lock+0x2d/0x110 [ 447.388690][T12719] ? alloc_fd+0x41f/0x760 [ 447.393029][T12719] do_sys_openat2+0x17a/0x1e0 [ 447.397717][T12719] ? __pfx_do_sys_openat2+0x10/0x10 [ 447.402928][T12719] ? __fget_files+0x206/0x3a0 [ 447.407615][T12719] __x64_sys_openat+0x175/0x210 [ 447.412477][T12719] ? __pfx___x64_sys_openat+0x10/0x10 [ 447.417857][T12719] ? ksys_write+0x1ba/0x250 [ 447.422371][T12719] do_syscall_64+0xcd/0x250 [ 447.426883][T12719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.432787][T12719] RIP: 0033:0x7f8829785d19 [ 447.437209][T12719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.456821][T12719] RSP: 002b:00007f882a606038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 447.465242][T12719] RAX: ffffffffffffffda RBX: 00007f8829975fa0 RCX: 00007f8829785d19 [ 447.473231][T12719] RDX: 0000000000006200 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 447.481210][T12719] RBP: 00007f882a606090 R08: 0000000000000000 R09: 0000000000000000 [ 447.489185][T12719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.497183][T12719] R13: 0000000000000000 R14: 00007f8829975fa0 R15: 00007ffe455a7508 [ 447.505195][T12719] [ 448.946549][T12728] nvme_fabrics: missing parameter 'transport=%s' [ 448.953041][T12728] nvme_fabrics: missing parameter 'nqn=%s' [ 449.491797][T12755] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1875'. [ 453.354292][T12844] netlink: 178 bytes leftover after parsing attributes in process `syz.0.1906'. [ 454.520596][T12867] FAULT_INJECTION: forcing a failure. [ 454.520596][T12867] name failslab, interval 1, probability 0, space 0, times 0 [ 454.559914][T12867] CPU: 0 UID: 0 PID: 12867 Comm: syz.0.1911 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 454.570757][T12867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 454.580852][T12867] Call Trace: [ 454.584159][T12867] [ 454.587116][T12867] dump_stack_lvl+0x16c/0x1f0 [ 454.591826][T12867] should_fail_ex+0x497/0x5b0 [ 454.596535][T12867] ? fs_reclaim_acquire+0xae/0x150 [ 454.601694][T12867] should_failslab+0xc2/0x120 [ 454.606416][T12867] __kmalloc_noprof+0xce/0x4f0 [ 454.611218][T12867] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 454.616877][T12867] ? tomoyo_realpath_from_path+0xbf/0x710 [ 454.622640][T12867] tomoyo_realpath_from_path+0xbf/0x710 [ 454.628233][T12867] ? tomoyo_path_number_perm+0x235/0x5b0 [ 454.633917][T12867] tomoyo_path_number_perm+0x248/0x5b0 [ 454.639422][T12867] ? tomoyo_path_number_perm+0x235/0x5b0 [ 454.645102][T12867] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 454.651157][T12867] ? __pfx_lock_release+0x10/0x10 [ 454.656484][T12867] ? trace_lock_acquire+0x14e/0x1f0 [ 454.661722][T12867] ? lock_acquire+0x2f/0xb0 [ 454.666255][T12867] ? __fget_files+0x40/0x3a0 [ 454.670883][T12867] ? __fget_files+0x206/0x3a0 [ 454.675597][T12867] security_file_ioctl+0x9b/0x240 [ 454.680668][T12867] __x64_sys_ioctl+0xb7/0x200 [ 454.685391][T12867] do_syscall_64+0xcd/0x250 [ 454.689925][T12867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.695898][T12867] RIP: 0033:0x7fea0c385d19 [ 454.700345][T12867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.720002][T12867] RSP: 002b:00007fea0a1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 454.728458][T12867] RAX: ffffffffffffffda RBX: 00007fea0c575fa0 RCX: 00007fea0c385d19 [ 454.736462][T12867] RDX: 000000001cfc4b42 RSI: 0000000000002285 RDI: 0000000000000003 [ 454.744468][T12867] RBP: 00007fea0a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 454.752479][T12867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.760494][T12867] R13: 0000000000000000 R14: 00007fea0c575fa0 R15: 00007ffe251c8d28 [ 454.768518][T12867] [ 454.808065][T12867] ERROR: Out of memory at tomoyo_realpath_from_path. [ 454.903721][T12876] FAULT_INJECTION: forcing a failure. [ 454.903721][T12876] name failslab, interval 1, probability 0, space 0, times 0 [ 454.924839][T12876] CPU: 1 UID: 0 PID: 12876 Comm: syz.0.1914 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 454.935675][T12876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 454.945765][T12876] Call Trace: [ 454.949072][T12876] [ 454.952139][T12876] dump_stack_lvl+0x16c/0x1f0 [ 454.956865][T12876] should_fail_ex+0x497/0x5b0 [ 454.961587][T12876] ? fs_reclaim_acquire+0xae/0x150 [ 454.966746][T12876] should_failslab+0xc2/0x120 [ 454.971475][T12876] __kmalloc_cache_noprof+0x68/0x420 [ 454.976818][T12876] nci_allocate_device+0x105/0x430 [ 454.981980][T12876] virtual_ncidev_open+0x6f/0x220 [ 454.987053][T12876] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 454.992738][T12876] misc_open+0x35a/0x420 [ 454.997022][T12876] ? __pfx_misc_open+0x10/0x10 [ 455.001829][T12876] chrdev_open+0x237/0x6a0 [ 455.006288][T12876] ? __pfx_apparmor_file_open+0x10/0x10 [ 455.011879][T12876] ? __pfx_chrdev_open+0x10/0x10 [ 455.016871][T12876] do_dentry_open+0xf59/0x1ea0 [ 455.021764][T12876] ? __pfx_chrdev_open+0x10/0x10 [ 455.026757][T12876] ? inode_permission+0xdd/0x5f0 [ 455.031748][T12876] vfs_open+0x82/0x3f0 [ 455.035864][T12876] ? may_open+0x1f2/0x400 [ 455.040214][T12876] path_openat+0x1e6a/0x2d60 [ 455.044825][T12876] ? __pfx_path_openat+0x10/0x10 [ 455.049769][T12876] ? __pfx___lock_acquire+0x10/0x10 [ 455.054985][T12876] ? lock_acquire.part.0+0x11b/0x380 [ 455.060275][T12876] ? find_held_lock+0x2d/0x110 [ 455.065051][T12876] do_filp_open+0x20c/0x470 [ 455.069562][T12876] ? __pfx_do_filp_open+0x10/0x10 [ 455.074593][T12876] ? find_held_lock+0x2d/0x110 [ 455.079382][T12876] ? alloc_fd+0x41f/0x760 [ 455.083726][T12876] do_sys_openat2+0x17a/0x1e0 [ 455.088418][T12876] ? __pfx_do_sys_openat2+0x10/0x10 [ 455.093630][T12876] ? __fget_files+0x206/0x3a0 [ 455.098317][T12876] __x64_sys_openat+0x175/0x210 [ 455.103179][T12876] ? __pfx___x64_sys_openat+0x10/0x10 [ 455.108563][T12876] ? ksys_write+0x1ba/0x250 [ 455.113079][T12876] do_syscall_64+0xcd/0x250 [ 455.117594][T12876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.123495][T12876] RIP: 0033:0x7fea0c385d19 [ 455.127912][T12876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.147522][T12876] RSP: 002b:00007fea0a1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 455.155941][T12876] RAX: ffffffffffffffda RBX: 00007fea0c575fa0 RCX: 00007fea0c385d19 [ 455.163917][T12876] RDX: 0000000000006200 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 455.171890][T12876] RBP: 00007fea0a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 455.179864][T12876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.187838][T12876] R13: 0000000000000000 R14: 00007fea0c575fa0 R15: 00007ffe251c8d28 [ 455.195824][T12876] [ 456.542835][T12917] FAULT_INJECTION: forcing a failure. [ 456.542835][T12917] name failslab, interval 1, probability 0, space 0, times 0 [ 456.627544][T12917] CPU: 1 UID: 0 PID: 12917 Comm: syz.5.1928 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 456.638378][T12917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 456.648463][T12917] Call Trace: [ 456.651760][T12917] [ 456.654704][T12917] dump_stack_lvl+0x16c/0x1f0 [ 456.659419][T12917] should_fail_ex+0x497/0x5b0 [ 456.664123][T12917] ? fs_reclaim_acquire+0xae/0x150 [ 456.669267][T12917] should_failslab+0xc2/0x120 [ 456.673981][T12917] __kmalloc_noprof+0xce/0x4f0 [ 456.678783][T12917] ? lsm_blob_alloc+0x68/0x90 [ 456.683505][T12917] lsm_blob_alloc+0x68/0x90 [ 456.688038][T12917] security_prepare_creds+0x30/0x270 [ 456.693333][T12917] prepare_creds+0x53e/0x750 [ 456.697943][T12917] lookup_user_key+0xf6a/0x12f0 [ 456.702812][T12917] ? __pfx_lookup_user_key+0x10/0x10 [ 456.708112][T12917] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 456.714102][T12917] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 456.720270][T12917] ? fput+0x67/0x440 [ 456.724174][T12917] ? ksys_write+0x1ba/0x250 [ 456.728686][T12917] keyctl_invalidate_key+0x21/0x1a0 [ 456.733906][T12917] __do_sys_keyctl+0x324/0x590 [ 456.738682][T12917] do_syscall_64+0xcd/0x250 [ 456.743197][T12917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.749095][T12917] RIP: 0033:0x7f8829785d19 [ 456.753510][T12917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.773642][T12917] RSP: 002b:00007f882a606038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 456.782066][T12917] RAX: ffffffffffffffda RBX: 00007f8829975fa0 RCX: 00007f8829785d19 [ 456.790040][T12917] RDX: 0000000000000005 RSI: 00000000fffffffd RDI: 0000000000000015 [ 456.798015][T12917] RBP: 00007f882a606090 R08: 0000000000000009 R09: 0000000000000000 [ 456.805990][T12917] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 456.813962][T12917] R13: 0000000000000001 R14: 00007f8829975fa0 R15: 00007ffe455a7508 [ 456.821951][T12917] [ 457.355638][T12926] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1932'. [ 457.369725][T12926] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.379421][T12926] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.389117][T12926] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.405046][T12926] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.824382][T12937] program syz.6.1937 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 457.849797][T12937] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 460.812613][T12996] FAULT_INJECTION: forcing a failure. [ 460.812613][T12996] name failslab, interval 1, probability 0, space 0, times 0 [ 460.942324][T12996] CPU: 1 UID: 0 PID: 12996 Comm: syz.5.1951 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 460.953173][T12996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 460.963262][T12996] Call Trace: [ 460.966571][T12996] [ 460.969532][T12996] dump_stack_lvl+0x16c/0x1f0 [ 460.974246][T12996] should_fail_ex+0x497/0x5b0 [ 460.978958][T12996] ? fs_reclaim_acquire+0xae/0x150 [ 460.984115][T12996] should_failslab+0xc2/0x120 [ 460.988837][T12996] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 460.994260][T12996] ? getname_flags.part.0+0x4c/0x550 [ 460.999941][T12996] ? vfs_write+0x306/0x1150 [ 461.004519][T12996] getname_flags.part.0+0x4c/0x550 [ 461.009674][T12996] getname+0x8d/0xe0 [ 461.013605][T12996] do_sys_openat2+0x104/0x1e0 [ 461.018321][T12996] ? __pfx_do_sys_openat2+0x10/0x10 [ 461.023564][T12996] ? __fget_files+0x206/0x3a0 [ 461.028279][T12996] __x64_sys_openat+0x175/0x210 [ 461.033169][T12996] ? __pfx___x64_sys_openat+0x10/0x10 [ 461.038574][T12996] ? ksys_write+0x1ba/0x250 [ 461.043125][T12996] do_syscall_64+0xcd/0x250 [ 461.047669][T12996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.053599][T12996] RIP: 0033:0x7f8829785d19 [ 461.058043][T12996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.077695][T12996] RSP: 002b:00007f882a606038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 461.086148][T12996] RAX: ffffffffffffffda RBX: 00007f8829975fa0 RCX: 00007f8829785d19 [ 461.094156][T12996] RDX: 0000000000044280 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 461.102163][T12996] RBP: 00007f882a606090 R08: 0000000000000000 R09: 0000000000000000 [ 461.110174][T12996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.118179][T12996] R13: 0000000000000001 R14: 00007f8829975fa0 R15: 00007ffe455a7508 [ 461.126199][T12996] [ 461.129365][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.266134][T13006] FAULT_INJECTION: forcing a failure. [ 461.266134][T13006] name failslab, interval 1, probability 0, space 0, times 0 [ 461.284784][T13006] CPU: 0 UID: 0 PID: 13006 Comm: syz.1.1955 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 461.295617][T13006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 461.305706][T13006] Call Trace: [ 461.309007][T13006] [ 461.311955][T13006] dump_stack_lvl+0x16c/0x1f0 [ 461.316689][T13006] should_fail_ex+0x497/0x5b0 [ 461.321402][T13006] ? fs_reclaim_acquire+0xae/0x150 [ 461.326552][T13006] should_failslab+0xc2/0x120 [ 461.331274][T13006] __kmalloc_noprof+0xce/0x4f0 [ 461.336086][T13006] ? d_absolute_path+0x137/0x1b0 [ 461.341067][T13006] ? tomoyo_encode2+0x100/0x3e0 [ 461.345960][T13006] tomoyo_encode2+0x100/0x3e0 [ 461.350691][T13006] tomoyo_realpath_from_path+0x1a7/0x710 [ 461.356380][T13006] tomoyo_path_number_perm+0x248/0x5b0 [ 461.361889][T13006] ? tomoyo_path_number_perm+0x235/0x5b0 [ 461.367572][T13006] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 461.373629][T13006] ? __pfx_lock_release+0x10/0x10 [ 461.378705][T13006] ? trace_lock_acquire+0x14e/0x1f0 [ 461.383953][T13006] ? lock_acquire+0x2f/0xb0 [ 461.388488][T13006] ? __fget_files+0x40/0x3a0 [ 461.393115][T13006] ? __fget_files+0x206/0x3a0 [ 461.397830][T13006] security_file_ioctl+0x9b/0x240 [ 461.402886][T13006] __x64_sys_ioctl+0xb7/0x200 [ 461.407610][T13006] do_syscall_64+0xcd/0x250 [ 461.412152][T13006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.418089][T13006] RIP: 0033:0x7f4c67985d19 [ 461.422528][T13006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.442180][T13006] RSP: 002b:00007f4c687d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 461.450648][T13006] RAX: ffffffffffffffda RBX: 00007f4c67b75fa0 RCX: 00007f4c67985d19 [ 461.459093][T13006] RDX: 000000001cfc4b42 RSI: 0000000000002285 RDI: 0000000000000003 [ 461.467099][T13006] RBP: 00007f4c687d1090 R08: 0000000000000000 R09: 0000000000000000 [ 461.475100][T13006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.483099][T13006] R13: 0000000000000000 R14: 00007f4c67b75fa0 R15: 00007ffeea623518 [ 461.491121][T13006] [ 461.512461][T13006] ERROR: Out of memory at tomoyo_realpath_from_path. [ 461.676890][T13017] sd 0:0:1:0: PR command failed: 1026 [ 461.682396][T13017] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 461.689573][T13017] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 462.845249][ T3472] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.008430][ T3472] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.177101][ T3472] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.268044][ T3472] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.871984][T13057] FAULT_INJECTION: forcing a failure. [ 463.871984][T13057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.903514][T13057] CPU: 1 UID: 0 PID: 13057 Comm: syz.6.1969 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 463.914351][T13057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 463.924442][T13057] Call Trace: [ 463.927749][T13057] [ 463.930709][T13057] dump_stack_lvl+0x16c/0x1f0 [ 463.935434][T13057] should_fail_ex+0x497/0x5b0 [ 463.940156][T13057] _copy_to_user+0x32/0xd0 [ 463.944617][T13057] simple_read_from_buffer+0xd0/0x160 [ 463.950038][T13057] proc_fail_nth_read+0x198/0x270 [ 463.955112][T13057] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 463.960707][T13057] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 463.966307][T13057] vfs_read+0x1df/0xbe0 [ 463.970478][T13057] ? __fget_files+0x1fc/0x3a0 [ 463.975162][T13057] ? __pfx___mutex_lock+0x10/0x10 [ 463.980195][T13057] ? __pfx_vfs_read+0x10/0x10 [ 463.984888][T13057] ? __fget_files+0x206/0x3a0 [ 463.989589][T13057] ksys_read+0x12b/0x250 [ 463.993856][T13057] ? __pfx_ksys_read+0x10/0x10 [ 463.998636][T13057] do_syscall_64+0xcd/0x250 [ 464.003151][T13057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.009056][T13057] RIP: 0033:0x7fb54878472c [ 464.013475][T13057] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 464.033090][T13057] RSP: 002b:00007fb5495fc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 464.041507][T13057] RAX: ffffffffffffffda RBX: 00007fb548975fa0 RCX: 00007fb54878472c [ 464.049480][T13057] RDX: 000000000000000f RSI: 00007fb5495fc0a0 RDI: 0000000000000003 [ 464.057452][T13057] RBP: 00007fb5495fc090 R08: 0000000000000000 R09: 0000000000000000 [ 464.065421][T13057] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 464.073390][T13057] R13: 0000000000000001 R14: 00007fb548975fa0 R15: 00007ffee8861f48 [ 464.081377][T13057] [ 464.114976][ T3472] bridge_slave_1: left allmulticast mode [ 464.120951][ T3472] bridge_slave_1: left promiscuous mode [ 464.145716][ T3472] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.170647][ T3472] bridge_slave_0: left allmulticast mode [ 464.229770][ T3472] bridge_slave_0: left promiscuous mode [ 464.246186][ T3472] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.354072][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 464.367237][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 464.382406][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 464.432873][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 464.455183][ T5842] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 464.466743][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 464.543652][T13065] sd 0:0:1:0: PR command failed: 1026 [ 464.555554][T13065] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 464.562312][T13065] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 465.538357][ T3472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.553084][ T3472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.567818][ T3472] bond0 (unregistering): Released all slaves [ 465.699287][T13105] &SR: entered promiscuous mode [ 466.208640][T13072] chnl_net:caif_netlink_parms(): no params data found [ 466.555894][ T5842] Bluetooth: hci3: command tx timeout [ 466.616948][T13072] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.625853][T13072] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.647267][T13072] bridge_slave_0: entered allmulticast mode [ 466.659055][T13072] bridge_slave_0: entered promiscuous mode [ 466.681759][T13072] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.689209][T13072] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.697985][T13072] bridge_slave_1: entered allmulticast mode [ 466.704645][T13072] bridge_slave_1: entered promiscuous mode [ 466.752573][T13072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.783871][T13072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.802908][ T3472] hsr_slave_0: left promiscuous mode [ 466.810448][ T3472] hsr_slave_1: left promiscuous mode [ 466.820606][ T3472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.828562][ T3472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.837495][ T3472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.845275][ T3472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.873039][ T3472] veth1_macvtap: left promiscuous mode [ 466.878749][ T3472] veth0_macvtap: left promiscuous mode [ 466.884353][ T3472] veth1_vlan: left promiscuous mode [ 466.890210][ T3472] veth0_vlan: left promiscuous mode [ 467.605755][ T3472] team0 (unregistering): Port device team_slave_1 removed [ 467.723461][ T3472] team0 (unregistering): Port device team_slave_0 removed [ 468.626212][ T5842] Bluetooth: hci3: command tx timeout [ 468.860463][T13072] team0: Port device team_slave_0 added [ 468.887329][T13072] team0: Port device team_slave_1 added [ 469.043338][T13072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.065307][T13072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.131525][T13072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.156109][T13072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.163137][T13072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.193613][T13072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.413339][T13072] hsr_slave_0: entered promiscuous mode [ 469.455650][T13072] hsr_slave_1: entered promiscuous mode [ 469.569478][T13072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 469.577310][T13072] Cannot create hsr debugfs directory [ 469.957178][T13072] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 470.007555][T13072] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 470.082910][T13072] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 470.163682][T13072] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 470.369703][T13072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.421923][T13072] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.452563][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.459749][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.522678][ T4806] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.529869][ T4806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.611221][T13229] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1999'. [ 470.706379][ T5842] Bluetooth: hci3: command tx timeout [ 470.999328][T13072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.409083][T13268] sd 0:0:1:0: PR command failed: 1026 [ 471.414565][T13268] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 471.455024][T13268] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 471.519306][T13072] veth0_vlan: entered promiscuous mode [ 471.545140][T13072] veth1_vlan: entered promiscuous mode [ 471.652365][T13072] veth0_macvtap: entered promiscuous mode [ 471.684625][T13072] veth1_macvtap: entered promiscuous mode [ 471.723265][T13072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.738043][T13072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.755021][T13072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.779301][T13072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.815125][T13072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.834855][T13072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.864019][T13072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.907361][T13072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.937937][T13072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.952602][T13072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.980031][T13072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.005075][T13072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.015639][T13072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.035911][T13072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.049513][T13072] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.076095][T13072] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.097538][T13072] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.114850][T13072] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.233624][ T3472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.248303][ T3472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.280732][ T3472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.290388][ T3472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.785599][ T5842] Bluetooth: hci3: command tx timeout [ 473.488351][T13332] FAULT_INJECTION: forcing a failure. [ 473.488351][T13332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.533265][T13332] CPU: 0 UID: 0 PID: 13332 Comm: syz.0.2009 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 473.544111][T13332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 473.554199][T13332] Call Trace: [ 473.557492][T13332] [ 473.560425][T13332] dump_stack_lvl+0x16c/0x1f0 [ 473.565116][T13332] should_fail_ex+0x497/0x5b0 [ 473.569810][T13332] _copy_from_user+0x2e/0xd0 [ 473.574408][T13332] get_sg_io_hdr+0x157/0x8e0 [ 473.579015][T13332] ? sg_add_request+0x2c8/0x380 [ 473.583877][T13332] ? __pfx_lock_release+0x10/0x10 [ 473.588923][T13332] ? __pfx_get_sg_io_hdr+0x10/0x10 [ 473.594054][T13332] ? _raw_write_unlock_irqrestore+0x3b/0x80 [ 473.599953][T13332] ? sg_add_request+0x2cd/0x380 [ 473.604818][T13332] sg_new_write.isra.0+0x15a/0xaa0 [ 473.609942][T13332] ? __pfx_sg_new_write.isra.0+0x10/0x10 [ 473.615605][T13332] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 473.620648][T13332] sg_ioctl+0x179d/0x26b0 [ 473.624994][T13332] ? __pfx_sg_ioctl+0x10/0x10 [ 473.629679][T13332] ? __pfx_lock_release+0x10/0x10 [ 473.634721][T13332] ? trace_lock_acquire+0x14e/0x1f0 [ 473.639944][T13332] ? __fget_files+0x206/0x3a0 [ 473.644632][T13332] ? __pfx_sg_ioctl+0x10/0x10 [ 473.649322][T13332] __x64_sys_ioctl+0x190/0x200 [ 473.654103][T13332] do_syscall_64+0xcd/0x250 [ 473.658619][T13332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.664520][T13332] RIP: 0033:0x7fea0c385d19 [ 473.668941][T13332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.688552][T13332] RSP: 002b:00007fea0a1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 473.696974][T13332] RAX: ffffffffffffffda RBX: 00007fea0c575fa0 RCX: 00007fea0c385d19 [ 473.704951][T13332] RDX: 000000001cfc4b42 RSI: 0000000000002285 RDI: 0000000000000003 [ 473.712923][T13332] RBP: 00007fea0a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 473.720982][T13332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.728951][T13332] R13: 0000000000000000 R14: 00007fea0c575fa0 R15: 00007ffe251c8d28 [ 473.736936][T13332] [ 474.244474][T13353] &SR: entered promiscuous mode [ 476.944623][T13417] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2024'. [ 476.954529][T13417] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 476.962995][T13417] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 477.576449][T13449] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2037'. [ 477.586076][T13449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.593550][T13449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.603594][T13449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.647911][T13449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.307468][T13459] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2039'. [ 478.353029][T13459] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 478.378847][T13459] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 478.971893][T13493] openvswitch: &SR: Dropping previously announced user features [ 478.997942][T13495] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2055'. [ 479.007292][T13495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.020287][T13495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.029751][T13495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.038938][T13495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.368958][T13540] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2066'. [ 480.378824][T13540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.387054][T13540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.396910][T13540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.407189][T13540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.991066][T13557] FAULT_INJECTION: forcing a failure. [ 480.991066][T13557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.028154][T13557] CPU: 1 UID: 0 PID: 13557 Comm: syz.1.2071 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 481.038988][T13557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 481.049072][T13557] Call Trace: [ 481.052375][T13557] [ 481.055331][T13557] dump_stack_lvl+0x16c/0x1f0 [ 481.060045][T13557] should_fail_ex+0x497/0x5b0 [ 481.064764][T13557] _copy_to_user+0x32/0xd0 [ 481.069224][T13557] simple_read_from_buffer+0xd0/0x160 [ 481.074648][T13557] proc_fail_nth_read+0x198/0x270 [ 481.079720][T13557] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 481.085325][T13557] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 481.091350][T13557] vfs_read+0x1df/0xbe0 [ 481.095540][T13557] ? __fget_files+0x1fc/0x3a0 [ 481.100253][T13557] ? __pfx___mutex_lock+0x10/0x10 [ 481.105315][T13557] ? __pfx_vfs_read+0x10/0x10 [ 481.110038][T13557] ? __fget_files+0x206/0x3a0 [ 481.114760][T13557] ksys_read+0x12b/0x250 [ 481.119040][T13557] ? __pfx_ksys_read+0x10/0x10 [ 481.123853][T13557] do_syscall_64+0xcd/0x250 [ 481.128395][T13557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.134327][T13557] RIP: 0033:0x7f4c6798472c [ 481.138800][T13557] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 481.158441][T13557] RSP: 002b:00007f4c687d1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 481.166902][T13557] RAX: ffffffffffffffda RBX: 00007f4c67b75fa0 RCX: 00007f4c6798472c [ 481.174912][T13557] RDX: 000000000000000f RSI: 00007f4c687d10a0 RDI: 0000000000000004 [ 481.182915][T13557] RBP: 00007f4c687d1090 R08: 0000000000000000 R09: 0000000000000000 [ 481.190908][T13557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.198897][T13557] R13: 0000000000000000 R14: 00007f4c67b75fa0 R15: 00007ffeea623518 [ 481.206914][T13557] [ 481.955449][T13592] program syz.7.2082 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 481.967282][T13592] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 483.169450][T13623] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2091'. [ 483.440963][T13634] &SR: entered promiscuous mode [ 483.907166][T13653] &SR: entered promiscuous mode [ 483.921808][T13651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2100'. [ 483.978093][T13651] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2100'. [ 484.846821][T13692] openvswitch: &SR: Dropping previously announced user features [ 485.288269][T13709] openvswitch: &SR: Dropping previously announced user features [ 486.287286][T13746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2120'. [ 488.426011][T13827] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2130'. [ 488.476056][T13827] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2130'. [ 488.925116][T13851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2135'. [ 489.455358][T13868] FAULT_INJECTION: forcing a failure. [ 489.455358][T13868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.495035][T13868] CPU: 1 UID: 0 PID: 13868 Comm: syz.0.2139 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 489.505880][T13868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 489.515968][T13868] Call Trace: [ 489.519271][T13868] [ 489.522223][T13868] dump_stack_lvl+0x16c/0x1f0 [ 489.526935][T13868] should_fail_ex+0x497/0x5b0 [ 489.531648][T13868] _copy_to_user+0x32/0xd0 [ 489.536109][T13868] simple_read_from_buffer+0xd0/0x160 [ 489.541530][T13868] proc_fail_nth_read+0x198/0x270 [ 489.546596][T13868] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 489.552189][T13868] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 489.557780][T13868] vfs_read+0x1df/0xbe0 [ 489.561969][T13868] ? __fget_files+0x1fc/0x3a0 [ 489.566685][T13868] ? __pfx___mutex_lock+0x10/0x10 [ 489.571763][T13868] ? __pfx_vfs_read+0x10/0x10 [ 489.576491][T13868] ? __fget_files+0x206/0x3a0 [ 489.581206][T13868] ksys_read+0x12b/0x250 [ 489.585475][T13868] ? __pfx_ksys_read+0x10/0x10 [ 489.590278][T13868] do_syscall_64+0xcd/0x250 [ 489.594815][T13868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.600745][T13868] RIP: 0033:0x7fea0c38472c [ 489.605184][T13868] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 489.624821][T13868] RSP: 002b:00007fea0a1f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 489.633267][T13868] RAX: ffffffffffffffda RBX: 00007fea0c575fa0 RCX: 00007fea0c38472c [ 489.641274][T13868] RDX: 000000000000000f RSI: 00007fea0a1f60a0 RDI: 0000000000000004 [ 489.649271][T13868] RBP: 00007fea0a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 489.657267][T13868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.665268][T13868] R13: 0000000000000000 R14: 00007fea0c575fa0 R15: 00007ffe251c8d28 [ 489.673289][T13868] [ 490.065557][T13876] openvswitch: &SR: Dropping previously announced user features [ 490.087172][T13887] netlink: 'syz.1.2140': attribute type 28 has an invalid length. [ 490.120129][T13887] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2140'. [ 491.080278][T13914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2151'. [ 491.128349][T13917] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2150'. [ 492.140174][T13952] FAULT_INJECTION: forcing a failure. [ 492.140174][T13952] name failslab, interval 1, probability 0, space 0, times 0 [ 492.195819][T13952] CPU: 0 UID: 0 PID: 13952 Comm: syz.1.2155 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 492.206660][T13952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 492.216752][T13952] Call Trace: [ 492.220059][T13952] [ 492.223014][T13952] dump_stack_lvl+0x16c/0x1f0 [ 492.227735][T13952] should_fail_ex+0x497/0x5b0 [ 492.232459][T13952] ? fs_reclaim_acquire+0xae/0x150 [ 492.237617][T13952] should_failslab+0xc2/0x120 [ 492.242345][T13952] __kmalloc_noprof+0xce/0x4f0 [ 492.247157][T13952] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 492.252837][T13952] ? tomoyo_realpath_from_path+0xbf/0x710 [ 492.258608][T13952] tomoyo_realpath_from_path+0xbf/0x710 [ 492.264198][T13952] ? tomoyo_path_number_perm+0x235/0x5b0 [ 492.269887][T13952] tomoyo_path_number_perm+0x248/0x5b0 [ 492.275396][T13952] ? tomoyo_path_number_perm+0x235/0x5b0 [ 492.281092][T13952] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 492.287147][T13952] ? __pfx_lock_release+0x10/0x10 [ 492.292201][T13952] ? trace_lock_acquire+0x14e/0x1f0 [ 492.297415][T13952] ? lock_acquire+0x2f/0xb0 [ 492.301920][T13952] ? __fget_files+0x40/0x3a0 [ 492.306521][T13952] ? __fget_files+0x206/0x3a0 [ 492.311210][T13952] security_file_ioctl+0x9b/0x240 [ 492.316261][T13952] __x64_sys_ioctl+0xb7/0x200 [ 492.320955][T13952] do_syscall_64+0xcd/0x250 [ 492.325468][T13952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.331375][T13952] RIP: 0033:0x7f4c67985d19 [ 492.335793][T13952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.355407][T13952] RSP: 002b:00007f4c687d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 492.363836][T13952] RAX: ffffffffffffffda RBX: 00007f4c67b75fa0 RCX: 00007f4c67985d19 [ 492.371808][T13952] RDX: 0000000000000038 RSI: 0000000000002275 RDI: 0000000000000003 [ 492.379779][T13952] RBP: 00007f4c687d1090 R08: 0000000000000000 R09: 0000000000000000 [ 492.387751][T13952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.395721][T13952] R13: 0000000000000000 R14: 00007f4c67b75fa0 R15: 00007ffeea623518 [ 492.403709][T13952] [ 492.522957][T13952] ERROR: Out of memory at tomoyo_realpath_from_path. [ 492.829796][T13972] openvswitch: &SR: Dropping previously announced user features [ 493.070646][T13982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2162'. [ 493.127619][T13983] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2163'. [ 494.926832][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2175'. [ 495.852888][T14057] FAULT_INJECTION: forcing a failure. [ 495.852888][T14057] name failslab, interval 1, probability 0, space 0, times 0 [ 495.901034][T14057] CPU: 1 UID: 0 PID: 14057 Comm: syz.7.2182 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 495.911884][T14057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 495.921977][T14057] Call Trace: [ 495.925285][T14057] [ 495.928237][T14057] dump_stack_lvl+0x16c/0x1f0 [ 495.932950][T14057] should_fail_ex+0x497/0x5b0 [ 495.937668][T14057] ? fs_reclaim_acquire+0xae/0x150 [ 495.942823][T14057] should_failslab+0xc2/0x120 [ 495.947543][T14057] __kmalloc_noprof+0xce/0x4f0 [ 495.952353][T14057] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 495.958020][T14057] ? tomoyo_realpath_from_path+0xbf/0x710 [ 495.963758][T14057] tomoyo_realpath_from_path+0xbf/0x710 [ 495.969314][T14057] ? tomoyo_path_number_perm+0x235/0x5b0 [ 495.975005][T14057] tomoyo_path_number_perm+0x248/0x5b0 [ 495.980504][T14057] ? tomoyo_path_number_perm+0x235/0x5b0 [ 495.986162][T14057] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 495.992184][T14057] ? __pfx_lock_release+0x10/0x10 [ 495.997227][T14057] ? trace_lock_acquire+0x14e/0x1f0 [ 496.002433][T14057] ? lock_acquire+0x2f/0xb0 [ 496.006940][T14057] ? __fget_files+0x40/0x3a0 [ 496.011542][T14057] ? __fget_files+0x206/0x3a0 [ 496.016229][T14057] security_file_ioctl+0x9b/0x240 [ 496.021258][T14057] __x64_sys_ioctl+0xb7/0x200 [ 496.025954][T14057] do_syscall_64+0xcd/0x250 [ 496.030465][T14057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.036364][T14057] RIP: 0033:0x7f678a185d19 [ 496.040788][T14057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.060412][T14057] RSP: 002b:00007f6787ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 496.068852][T14057] RAX: ffffffffffffffda RBX: 00007f678a375fa0 RCX: 00007f678a185d19 [ 496.076833][T14057] RDX: 000000001cfc4b42 RSI: 0000000000005385 RDI: 0000000000000003 [ 496.084806][T14057] RBP: 00007f6787ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 496.092778][T14057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.100747][T14057] R13: 0000000000000000 R14: 00007f678a375fa0 R15: 00007ffd5c8609e8 [ 496.108734][T14057] [ 496.124014][T14057] ERROR: Out of memory at tomoyo_realpath_from_path. [ 497.947004][T14103] bridge0: port 3(hsr0) entered blocking state [ 497.955865][T14103] bridge0: port 3(hsr0) entered disabled state [ 497.981260][T14103] hsr0: entered allmulticast mode [ 498.018740][T14103] hsr_slave_0: entered allmulticast mode [ 498.056884][T14103] hsr_slave_1: entered allmulticast mode [ 498.078806][T14103] hsr0: entered promiscuous mode [ 498.098034][T14103] bridge0: port 3(hsr0) entered blocking state [ 498.104371][T14103] bridge0: port 3(hsr0) entered forwarding state [ 498.420281][T14114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2198'. [ 498.487556][T14116] FAULT_INJECTION: forcing a failure. [ 498.487556][T14116] name failslab, interval 1, probability 0, space 0, times 0 [ 498.531810][T14116] CPU: 1 UID: 0 PID: 14116 Comm: syz.7.2200 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 498.542646][T14116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 498.552741][T14116] Call Trace: [ 498.556133][T14116] [ 498.559084][T14116] dump_stack_lvl+0x16c/0x1f0 [ 498.563804][T14116] should_fail_ex+0x497/0x5b0 [ 498.568519][T14116] ? fs_reclaim_acquire+0xae/0x150 [ 498.573687][T14116] should_failslab+0xc2/0x120 [ 498.578409][T14116] __kmalloc_noprof+0xce/0x4f0 [ 498.583259][T14116] ? d_absolute_path+0x137/0x1b0 [ 498.588236][T14116] ? tomoyo_encode2+0x100/0x3e0 [ 498.593121][T14116] tomoyo_encode2+0x100/0x3e0 [ 498.597811][T14116] tomoyo_realpath_from_path+0x1a7/0x710 [ 498.603458][T14116] tomoyo_path_number_perm+0x248/0x5b0 [ 498.608933][T14116] ? tomoyo_path_number_perm+0x235/0x5b0 [ 498.614581][T14116] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 498.620608][T14116] ? __pfx_lock_release+0x10/0x10 [ 498.625647][T14116] ? trace_lock_acquire+0x14e/0x1f0 [ 498.630862][T14116] ? lock_acquire+0x2f/0xb0 [ 498.635368][T14116] ? __fget_files+0x40/0x3a0 [ 498.639970][T14116] ? __fget_files+0x206/0x3a0 [ 498.644656][T14116] security_file_ioctl+0x9b/0x240 [ 498.649688][T14116] __x64_sys_ioctl+0xb7/0x200 [ 498.654381][T14116] do_syscall_64+0xcd/0x250 [ 498.658897][T14116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.664813][T14116] RIP: 0033:0x7f678a185d19 [ 498.669232][T14116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.688845][T14116] RSP: 002b:00007f6787ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 498.697267][T14116] RAX: ffffffffffffffda RBX: 00007f678a375fa0 RCX: 00007f678a185d19 [ 498.705243][T14116] RDX: 0000000000000038 RSI: 0000000000002201 RDI: 0000000000000003 [ 498.713217][T14116] RBP: 00007f6787ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 498.721190][T14116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.729163][T14116] R13: 0000000000000000 R14: 00007f678a375fa0 R15: 00007ffd5c8609e8 [ 498.737155][T14116] [ 498.767557][T14116] ERROR: Out of memory at tomoyo_realpath_from_path. [ 499.324486][T14138] openvswitch: &SR: Dropping previously announced user features [ 499.921705][T14159] openvswitch: &SR: Dropping previously announced user features [ 500.579557][ T29] audit: type=1800 audit(4294967445.600:34): pid=14174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="members" dev="configfs" ino=39659 res=0 errno=0 [ 500.783396][T14176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2212'. [ 501.521132][T14186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2225'. [ 501.849733][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.849830][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.073648][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2223'. [ 504.804208][T14250] bridge0: port 3(hsr0) entered blocking state [ 504.814898][T14250] bridge0: port 3(hsr0) entered disabled state [ 504.821318][T14250] hsr0: entered allmulticast mode [ 504.871505][T14250] hsr_slave_0: entered allmulticast mode [ 504.885297][T14250] hsr_slave_1: entered allmulticast mode [ 504.895825][T14250] hsr0: entered promiscuous mode [ 504.901441][T14250] bridge0: port 3(hsr0) entered blocking state [ 504.908931][T14250] bridge0: port 3(hsr0) entered forwarding state [ 505.117305][T14260] openvswitch: &SR: Dropping previously announced user features [ 505.144900][T14262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2239'. [ 505.238371][T14268] openvswitch: &SR: Dropping previously announced user features [ 505.646986][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2242'. [ 507.520505][T14305] bridge0: port 3(hsr0) entered blocking state [ 507.579437][T14305] bridge0: port 3(hsr0) entered disabled state [ 507.645999][T14305] hsr0: entered allmulticast mode [ 507.655843][T14315] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2251'. [ 507.678278][T14305] hsr_slave_0: entered allmulticast mode [ 507.735846][T14305] hsr0: entered promiscuous mode [ 507.792656][T14305] bridge0: port 3(hsr0) entered blocking state [ 507.799067][T14305] bridge0: port 3(hsr0) entered forwarding state [ 507.875307][T14310] openvswitch: &SR: Dropping previously announced user features [ 508.417088][T14329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2255'. [ 511.008167][T14365] openvswitch: &SR: Dropping previously announced user features [ 511.213467][T14372] openvswitch: &SR: Dropping previously announced user features [ 511.304495][T14375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2264'. [ 511.588100][T14383] openvswitch: &SR: Dropping previously announced user features [ 511.782564][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 511.794098][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 511.804128][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 511.812525][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 511.820420][ T5830] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 511.828187][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 512.071304][T14391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2269'. [ 512.260877][T14384] chnl_net:caif_netlink_parms(): no params data found [ 512.632626][T14384] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.639981][T14384] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.655191][T14384] bridge_slave_0: entered allmulticast mode [ 512.662887][T14384] bridge_slave_0: entered promiscuous mode [ 512.688432][T14384] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.705601][T14384] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.724953][T14384] bridge_slave_1: entered allmulticast mode [ 512.745250][T14384] bridge_slave_1: entered promiscuous mode [ 512.870445][T14384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.913955][T14384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.071017][T14384] team0: Port device team_slave_0 added [ 513.118102][T14384] team0: Port device team_slave_1 added [ 513.502429][T14384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.517228][T14384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.576995][T14384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.609067][T14384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.644830][T14384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.704981][T14384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.818623][T14384] hsr_slave_0: entered promiscuous mode [ 513.885535][T14384] hsr_slave_1: entered promiscuous mode [ 513.897283][T14384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 513.919104][ T5842] Bluetooth: hci4: command tx timeout [ 514.079193][T14384] Cannot create hsr debugfs directory [ 514.570596][T14384] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.777636][T14384] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.967817][T14384] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.070407][T14384] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.355496][T14384] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 515.391878][T14384] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 515.417729][T14384] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 515.434459][T14384] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 515.585904][T14384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.603921][T14384] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.628571][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.635748][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.669207][ T3472] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.676365][ T3472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.984904][ T5842] Bluetooth: hci4: command tx timeout [ 516.046700][T14384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.098795][T14384] veth0_vlan: entered promiscuous mode [ 516.114062][T14384] veth1_vlan: entered promiscuous mode [ 516.141332][T14384] veth0_macvtap: entered promiscuous mode [ 516.150697][T14384] veth1_macvtap: entered promiscuous mode [ 516.164571][T14384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.177213][T14384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.188448][T14384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.200947][T14384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.212593][T14384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.224333][T14384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.239454][T14384] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.248605][T14384] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.257634][T14384] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.266497][T14384] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.339077][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.351627][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.374652][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.383057][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.689529][T14447] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2275'. [ 516.855691][T14451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2276'. [ 516.895515][T14454] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2278'. [ 518.067717][ T5842] Bluetooth: hci4: command tx timeout [ 518.509490][T14480] openvswitch: &SR: Dropping previously announced user features [ 518.995700][T14483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2288'. [ 520.145173][ T5842] Bluetooth: hci4: command tx timeout [ 521.280561][T14515] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2294'. [ 521.590398][T14525] openvswitch: &SR: Dropping previously announced user features [ 522.139474][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2301'. [ 522.157982][T14532] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2300'. [ 522.173034][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2301'. [ 523.200081][ T29] audit: type=1800 audit(4294967468.220:35): pid=14560 uid=60928 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2310" name="features" dev="configfs" ino=41661 res=0 errno=0 [ 523.304990][ T29] audit: type=1800 audit(4294967468.270:36): pid=14560 uid=60928 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2310" name="dbroot" dev="configfs" ino=41662 res=0 errno=0 [ 523.408662][T14573] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2315'. [ 523.490281][T14576] openvswitch: &SR: Dropping previously announced user features [ 523.708786][T14583] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2316'. [ 524.257296][T14599] FAULT_INJECTION: forcing a failure. [ 524.257296][T14599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.286146][T14599] CPU: 0 UID: 0 PID: 14599 Comm: syz.7.2320 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 524.296983][T14599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 524.307073][T14599] Call Trace: [ 524.310376][T14599] [ 524.313351][T14599] dump_stack_lvl+0x16c/0x1f0 [ 524.318072][T14599] should_fail_ex+0x497/0x5b0 [ 524.322797][T14599] _copy_to_user+0x32/0xd0 [ 524.327263][T14599] simple_read_from_buffer+0xd0/0x160 [ 524.332693][T14599] proc_fail_nth_read+0x198/0x270 [ 524.337771][T14599] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 524.343369][T14599] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 524.348971][T14599] vfs_read+0x1df/0xbe0 [ 524.353169][T14599] ? __fget_files+0x1fc/0x3a0 [ 524.357891][T14599] ? __pfx___mutex_lock+0x10/0x10 [ 524.362952][T14599] ? __pfx_vfs_read+0x10/0x10 [ 524.367650][T14599] ? __fget_files+0x206/0x3a0 [ 524.372346][T14599] ksys_read+0x12b/0x250 [ 524.376599][T14599] ? __pfx_ksys_read+0x10/0x10 [ 524.381379][T14599] do_syscall_64+0xcd/0x250 [ 524.385916][T14599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.391819][T14599] RIP: 0033:0x7f678a18472c [ 524.396238][T14599] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 524.415863][T14599] RSP: 002b:00007f6787ff6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 524.424284][T14599] RAX: ffffffffffffffda RBX: 00007f678a375fa0 RCX: 00007f678a18472c [ 524.432257][T14599] RDX: 000000000000000f RSI: 00007f6787ff60a0 RDI: 0000000000000004 [ 524.440232][T14599] RBP: 00007f6787ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 524.448205][T14599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.456175][T14599] R13: 0000000000000000 R14: 00007f678a375fa0 R15: 00007ffd5c8609e8 [ 524.464162][T14599] [ 526.239267][T14633] openvswitch: &SR: Dropping previously announced user features [ 526.784032][T14639] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2328'. [ 527.098704][T14649] FAULT_INJECTION: forcing a failure. [ 527.098704][T14649] name failslab, interval 1, probability 0, space 0, times 0 [ 527.134289][T14649] CPU: 1 UID: 0 PID: 14649 Comm: syz.1.2332 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 527.145125][T14649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 527.155218][T14649] Call Trace: [ 527.158516][T14649] [ 527.161465][T14649] dump_stack_lvl+0x16c/0x1f0 [ 527.166190][T14649] should_fail_ex+0x497/0x5b0 [ 527.170911][T14649] ? fs_reclaim_acquire+0xae/0x150 [ 527.176070][T14649] should_failslab+0xc2/0x120 [ 527.180798][T14649] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 527.186566][T14649] ? proc_alloc_inode+0x25/0x200 [ 527.191546][T14649] ? __pfx_proc_alloc_inode+0x10/0x10 [ 527.196932][T14649] proc_alloc_inode+0x25/0x200 [ 527.201708][T14649] alloc_inode+0x5d/0x230 [ 527.206152][T14649] new_inode+0x22/0x210 [ 527.210324][T14649] proc_get_inode+0x1d/0x7d0 [ 527.214923][T14649] proc_lookup_de+0x13e/0x220 [ 527.219609][T14649] proc_lookup+0xcf/0x110 [ 527.223949][T14649] proc_root_lookup+0x3b/0x70 [ 527.228641][T14649] __lookup_slow+0x24f/0x460 [ 527.233333][T14649] ? __pfx___lookup_slow+0x10/0x10 [ 527.238462][T14649] ? walk_component+0x342/0x5b0 [ 527.243329][T14649] ? lookup_fast+0x155/0x540 [ 527.247930][T14649] walk_component+0x350/0x5b0 [ 527.252623][T14649] link_path_walk.part.0.constprop.0+0x669/0xd40 [ 527.258967][T14649] path_openat+0x228/0x2d60 [ 527.263479][T14649] ? hlock_class+0x4e/0x130 [ 527.268002][T14649] ? __pfx_path_openat+0x10/0x10 [ 527.272946][T14649] ? __pfx___lock_acquire+0x10/0x10 [ 527.278161][T14649] ? lock_acquire.part.0+0x11b/0x380 [ 527.283450][T14649] ? find_held_lock+0x2d/0x110 [ 527.288256][T14649] do_filp_open+0x20c/0x470 [ 527.292796][T14649] ? __pfx_do_filp_open+0x10/0x10 [ 527.297855][T14649] ? find_held_lock+0x2d/0x110 [ 527.302662][T14649] ? alloc_fd+0x41f/0x760 [ 527.307022][T14649] do_sys_openat2+0x17a/0x1e0 [ 527.311723][T14649] ? __pfx_do_sys_openat2+0x10/0x10 [ 527.316937][T14649] ? __fget_files+0x206/0x3a0 [ 527.321630][T14649] __x64_sys_openat+0x175/0x210 [ 527.326495][T14649] ? __pfx___x64_sys_openat+0x10/0x10 [ 527.331875][T14649] ? ksys_write+0x1ba/0x250 [ 527.336403][T14649] do_syscall_64+0xcd/0x250 [ 527.340916][T14649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.346814][T14649] RIP: 0033:0x7fb61b185d19 [ 527.351233][T14649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.370848][T14649] RSP: 002b:00007fb61c026038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 527.379288][T14649] RAX: ffffffffffffffda RBX: 00007fb61b375fa0 RCX: 00007fb61b185d19 [ 527.387277][T14649] RDX: 0000000000044280 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 527.395257][T14649] RBP: 00007fb61c026090 R08: 0000000000000000 R09: 0000000000000000 [ 527.403238][T14649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.411225][T14649] R13: 0000000000000001 R14: 00007fb61b375fa0 R15: 00007ffef851f098 [ 527.419216][T14649] [ 527.922160][T14665] program syz.7.2337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 527.943041][T14665] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 527.955822][T14667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2335'. [ 528.740742][T14689] openvswitch: &SR: Dropping previously announced user features [ 529.520199][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 529.804369][T14710] netlink: 326 bytes leftover after parsing attributes in process `syz.0.2346'. [ 530.004633][T14713] netlink: zone id is out of range [ 530.015817][T14713] netlink: zone id is out of range [ 530.057894][T14713] netlink: zone id is out of range [ 530.072703][T14713] netlink: zone id is out of range [ 530.078232][T14713] netlink: zone id is out of range [ 530.083610][T14713] netlink: zone id is out of range [ 530.098494][T14713] netlink: zone id is out of range [ 530.113794][T14713] netlink: zone id is out of range [ 530.123936][T14713] netlink: zone id is out of range [ 530.132559][T14713] netlink: zone id is out of range [ 530.459406][T14721] FAULT_INJECTION: forcing a failure. [ 530.459406][T14721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.472938][T14721] CPU: 0 UID: 0 PID: 14721 Comm: syz.7.2350 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 530.483739][T14721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 530.493804][T14721] Call Trace: [ 530.497084][T14721] [ 530.500019][T14721] dump_stack_lvl+0x16c/0x1f0 [ 530.504713][T14721] should_fail_ex+0x497/0x5b0 [ 530.509406][T14721] _copy_to_iter+0x29b/0x1400 [ 530.514091][T14721] ? trace_lock_acquire+0x14e/0x1f0 [ 530.519303][T14721] ? __pfx__copy_to_iter+0x10/0x10 [ 530.524422][T14721] ? __virt_addr_valid+0x1a4/0x590 [ 530.529546][T14721] ? __virt_addr_valid+0x5e/0x590 [ 530.534577][T14721] ? __phys_addr_symbol+0x30/0x80 [ 530.539610][T14721] ? __check_object_size+0x488/0x710 [ 530.544913][T14721] seq_read_iter+0xd00/0x12b0 [ 530.549620][T14721] proc_reg_read_iter+0x21d/0x310 [ 530.554665][T14721] vfs_read+0x87f/0xbe0 [ 530.558834][T14721] ? __pfx_vfs_read+0x10/0x10 [ 530.563535][T14721] ksys_read+0x12b/0x250 [ 530.567784][T14721] ? __pfx_ksys_read+0x10/0x10 [ 530.572562][T14721] do_syscall_64+0xcd/0x250 [ 530.577075][T14721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.582977][T14721] RIP: 0033:0x7f678a185d19 [ 530.587501][T14721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.607117][T14721] RSP: 002b:00007f6787ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 530.615536][T14721] RAX: ffffffffffffffda RBX: 00007f678a375fa0 RCX: 00007f678a185d19 [ 530.623510][T14721] RDX: 000000000000c9e3 RSI: 0000000020000000 RDI: 0000000000000003 [ 530.631488][T14721] RBP: 00007f6787ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 530.639469][T14721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.647445][T14721] R13: 0000000000000000 R14: 00007f678a375fa0 R15: 00007ffd5c8609e8 [ 530.655434][T14721] [ 530.686728][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2348'. [ 530.722108][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2348'. [ 531.054176][T14737] openvswitch: &SR: Dropping previously announced user features [ 532.331229][T14770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2362'. [ 532.357622][T14770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2362'. [ 532.583754][T14776] FAULT_INJECTION: forcing a failure. [ 532.583754][T14776] name failslab, interval 1, probability 0, space 0, times 0 [ 532.601327][T14776] CPU: 1 UID: 0 PID: 14776 Comm: syz.0.2364 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 532.612151][T14776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 532.622241][T14776] Call Trace: [ 532.625559][T14776] [ 532.628509][T14776] dump_stack_lvl+0x16c/0x1f0 [ 532.633231][T14776] should_fail_ex+0x497/0x5b0 [ 532.637948][T14776] ? fs_reclaim_acquire+0xae/0x150 [ 532.643102][T14776] should_failslab+0xc2/0x120 [ 532.647827][T14776] __kmalloc_noprof+0xce/0x4f0 [ 532.652634][T14776] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 532.658300][T14776] ? tomoyo_realpath_from_path+0xbf/0x710 [ 532.664059][T14776] tomoyo_realpath_from_path+0xbf/0x710 [ 532.669645][T14776] ? tomoyo_path_number_perm+0x235/0x5b0 [ 532.675322][T14776] tomoyo_path_number_perm+0x248/0x5b0 [ 532.680815][T14776] ? tomoyo_path_number_perm+0x235/0x5b0 [ 532.686489][T14776] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 532.692548][T14776] ? __pfx_lock_release+0x10/0x10 [ 532.697623][T14776] ? trace_lock_acquire+0x14e/0x1f0 [ 532.702866][T14776] ? lock_acquire+0x2f/0xb0 [ 532.707400][T14776] ? __fget_files+0x40/0x3a0 [ 532.712031][T14776] ? __fget_files+0x206/0x3a0 [ 532.716746][T14776] security_file_ioctl+0x9b/0x240 [ 532.721803][T14776] __x64_sys_ioctl+0xb7/0x200 [ 532.726524][T14776] do_syscall_64+0xcd/0x250 [ 532.731076][T14776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.737007][T14776] RIP: 0033:0x7fea0c385d19 [ 532.741448][T14776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.761088][T14776] RSP: 002b:00007fea0a1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 532.769545][T14776] RAX: ffffffffffffffda RBX: 00007fea0c575fa0 RCX: 00007fea0c385d19 [ 532.777551][T14776] RDX: 1000000000000007 RSI: 0000000000005385 RDI: 0000000000000003 [ 532.785547][T14776] RBP: 00007fea0a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 532.793545][T14776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.801545][T14776] R13: 0000000000000000 R14: 00007fea0c575fa0 R15: 00007ffe251c8d28 [ 532.809569][T14776] [ 532.849957][T14776] ERROR: Out of memory at tomoyo_realpath_from_path. [ 533.008068][T14780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2366'. [ 533.495879][T14795] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2371'. [ 534.209591][T14815] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2378'. [ 535.655992][T14854] openvswitch: &SR: Dropping previously announced user features [ 536.006632][T14863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2390'. [ 536.300834][T14871] program syz.1.2393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 538.135872][T14916] openvswitch: &SR: Dropping previously announced user features [ 538.180592][T14891] delete_channel: no stack [ 538.193559][T14891] delete_channel: no stack [ 538.653218][T14928] net_ratelimit: 3 callbacks suppressed [ 538.653241][T14928] netlink: zone id is out of range [ 538.675085][T14928] netlink: zone id is out of range [ 538.761533][T14928] netlink: zone id is out of range [ 538.776073][T14930] FAULT_INJECTION: forcing a failure. [ 538.776073][T14930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 538.780545][T14928] netlink: zone id is out of range [ 538.805778][T14930] CPU: 1 UID: 0 PID: 14930 Comm: syz.1.2409 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 538.813456][T14928] netlink: zone id is out of range [ 538.816586][T14930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 538.816625][T14930] Call Trace: [ 538.816634][T14930] [ 538.816645][T14930] dump_stack_lvl+0x16c/0x1f0 [ 538.816678][T14930] should_fail_ex+0x497/0x5b0 [ 538.834920][T14928] netlink: zone id is out of range [ 538.835114][T14930] _copy_to_user+0x32/0xd0 [ 538.838105][T14928] netlink: zone id is out of range [ 538.842695][T14930] simple_read_from_buffer+0xd0/0x160 [ 538.867443][T14930] proc_fail_nth_read+0x198/0x270 [ 538.869196][T14928] netlink: zone id is out of range [ 538.872489][T14930] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 538.872533][T14930] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 538.872565][T14930] vfs_read+0x1df/0xbe0 [ 538.872592][T14930] ? __fget_files+0x1fc/0x3a0 [ 538.872620][T14930] ? __pfx___mutex_lock+0x10/0x10 [ 538.872649][T14930] ? __pfx_vfs_read+0x10/0x10 [ 538.872686][T14930] ? __fget_files+0x206/0x3a0 [ 538.872724][T14930] ksys_read+0x12b/0x250 [ 538.872751][T14930] ? __pfx_ksys_read+0x10/0x10 [ 538.872788][T14930] do_syscall_64+0xcd/0x250 [ 538.872820][T14930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.872848][T14930] RIP: 0033:0x7fb61b18472c [ 538.894845][T14928] netlink: zone id is out of range [ 538.897838][T14930] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 538.897865][T14930] RSP: 002b:00007fb61c026030 EFLAGS: 00000246 [ 538.904763][T14928] netlink: zone id is out of range [ 538.907528][T14930] ORIG_RAX: 0000000000000000 [ 538.907540][T14930] RAX: ffffffffffffffda RBX: 00007fb61b375fa0 RCX: 00007fb61b18472c [ 538.907559][T14930] RDX: 000000000000000f RSI: 00007fb61c0260a0 RDI: 0000000000000004 [ 538.992598][T14930] RBP: 00007fb61c026090 R08: 0000000000000000 R09: 0000000000000000 [ 539.000596][T14930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.008588][T14930] R13: 0000000000000000 R14: 00007fb61b375fa0 R15: 00007ffef851f098 [ 539.016602][T14930] [ 539.085392][T14932] ------------[ cut here ]------------ [ 539.091202][T14932] WARNING: CPU: 1 PID: 14932 at mm/page_alloc.c:4727 __alloc_pages_noprof+0xeff/0x25b0 [ 539.101056][T14932] Modules linked in: [ 539.105242][T14932] CPU: 1 UID: 0 PID: 14932 Comm: syz.0.2410 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 539.116132][T14932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 539.126290][T14932] RIP: 0010:__alloc_pages_noprof+0xeff/0x25b0 [ 539.132413][T14932] Code: 24 2c 00 00 00 00 89 cd 0f 84 8b f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 0e b3 fe ff e9 69 f9 ff ff c6 05 21 45 16 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 9f a2 0c 00 8b 14 24 e9 [ 539.152438][T14932] RSP: 0018:ffffc90003e3f958 EFLAGS: 00010246 [ 539.158996][T14932] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 539.167154][T14932] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 539.175225][T14932] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 539.183711][T14932] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000013 [ 539.192439][T14932] R13: 0000000000040cc0 R14: 1ffff920007c7f3f R15: 00000000ffffffff [ 539.200523][T14932] FS: 00007fea0a1f66c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 539.209802][T14932] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 539.216493][T14932] CR2: 000000000000f000 CR3: 0000000061eec000 CR4: 00000000003526f0 [ 539.224511][T14932] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 539.232710][T14932] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 539.240786][T14932] Call Trace: [ 539.244103][T14932] [ 539.247159][T14932] ? __warn+0xea/0x3c0 [ 539.251287][T14932] ? __alloc_pages_noprof+0xeff/0x25b0 [ 539.257006][T14932] ? report_bug+0x3c0/0x580 [ 539.261556][T14932] ? handle_bug+0x54/0xa0 [ 539.266180][T14932] ? exc_invalid_op+0x17/0x50 [ 539.270928][T14932] ? asm_exc_invalid_op+0x1a/0x20 [ 539.276079][T14932] ? __alloc_pages_noprof+0xeff/0x25b0 [ 539.282066][T14932] ? hlock_class+0x4e/0x130 [ 539.287144][T14932] ? mark_lock+0xb5/0xc60 [ 539.291552][T14932] ? __pfx_mark_lock+0x10/0x10 [ 539.296456][T14932] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 539.302249][T14932] ? trace_lock_acquire+0x14e/0x1f0 [ 539.307615][T14932] ? hlock_class+0x4e/0x130 [ 539.312181][T14932] ? __lock_acquire+0x15a9/0x3c40 [ 539.317385][T14932] ___kmalloc_large_node+0x84/0x1b0 [ 539.322647][T14932] __kmalloc_large_node_noprof+0x1c/0x70 [ 539.328448][T14932] __kmalloc_node_track_caller_noprof.cold+0x5/0x5f [ 539.335146][T14932] ? bitmap_parse_user+0x24/0x90 [ 539.340153][T14932] memdup_user_nul+0x2b/0x110 [ 539.345072][T14932] bitmap_parse_user+0x24/0x90 [ 539.349906][T14932] tracing_cpumask_write+0xfc/0x1a0 [ 539.355237][T14932] ? __pfx_tracing_cpumask_write+0x10/0x10 [ 539.361267][T14932] ? ksys_write+0x12b/0x250 [ 539.366085][T14932] ? __pfx_tracing_cpumask_write+0x10/0x10 [ 539.371961][T14932] vfs_write+0x24c/0x1150 [ 539.376415][T14932] ? __fget_files+0x1fc/0x3a0 [ 539.381145][T14932] ? __pfx___mutex_lock+0x10/0x10 [ 539.386763][T14932] ? __pfx_vfs_write+0x10/0x10 [ 539.391603][T14932] ? __fget_files+0x206/0x3a0 [ 539.396820][T14932] ksys_write+0x12b/0x250 [ 539.401199][T14932] ? __pfx_ksys_write+0x10/0x10 [ 539.406236][T14932] do_syscall_64+0xcd/0x250 [ 539.410795][T14932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.416787][T14932] RIP: 0033:0x7fea0c385d19 [ 539.421244][T14932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.441232][T14932] RSP: 002b:00007fea0a1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 539.449749][T14932] RAX: ffffffffffffffda RBX: 00007fea0c575fa0 RCX: 00007fea0c385d19 [ 539.457835][T14932] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 539.466140][T14932] RBP: 00007fea0c401a20 R08: 0000000000000000 R09: 0000000000000000 [ 539.474150][T14932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.482424][T14932] R13: 0000000000000000 R14: 00007fea0c575fa0 R15: 00007ffe251c8d28 [ 539.490724][T14932] [ 539.493751][T14932] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 539.501028][T14932] CPU: 1 UID: 0 PID: 14932 Comm: syz.0.2410 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 539.511785][T14932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 539.521841][T14932] Call Trace: [ 539.525115][T14932] [ 539.528050][T14932] dump_stack_lvl+0x3d/0x1f0 [ 539.532644][T14932] panic+0x71d/0x800 [ 539.536548][T14932] ? __pfx_panic+0x10/0x10 [ 539.541015][T14932] ? show_trace_log_lvl+0x29d/0x3d0 [ 539.546246][T14932] ? __alloc_pages_noprof+0xeff/0x25b0 [ 539.551743][T14932] check_panic_on_warn+0xab/0xb0 [ 539.556703][T14932] __warn+0xf6/0x3c0 [ 539.560614][T14932] ? __alloc_pages_noprof+0xeff/0x25b0 [ 539.566099][T14932] report_bug+0x3c0/0x580 [ 539.570438][T14932] handle_bug+0x54/0xa0 [ 539.574607][T14932] exc_invalid_op+0x17/0x50 [ 539.579122][T14932] asm_exc_invalid_op+0x1a/0x20 [ 539.583983][T14932] RIP: 0010:__alloc_pages_noprof+0xeff/0x25b0 [ 539.590089][T14932] Code: 24 2c 00 00 00 00 89 cd 0f 84 8b f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 0e b3 fe ff e9 69 f9 ff ff c6 05 21 45 16 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 9f a2 0c 00 8b 14 24 e9 [ 539.609714][T14932] RSP: 0018:ffffc90003e3f958 EFLAGS: 00010246 [ 539.615791][T14932] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 539.623789][T14932] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 539.631762][T14932] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 539.639734][T14932] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000013 [ 539.647711][T14932] R13: 0000000000040cc0 R14: 1ffff920007c7f3f R15: 00000000ffffffff [ 539.655706][T14932] ? hlock_class+0x4e/0x130 [ 539.660226][T14932] ? mark_lock+0xb5/0xc60 [ 539.664577][T14932] ? __pfx_mark_lock+0x10/0x10 [ 539.669361][T14932] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 539.675105][T14932] ? trace_lock_acquire+0x14e/0x1f0 [ 539.680324][T14932] ? hlock_class+0x4e/0x130 [ 539.684834][T14932] ? __lock_acquire+0x15a9/0x3c40 [ 539.689894][T14932] ___kmalloc_large_node+0x84/0x1b0 [ 539.695111][T14932] __kmalloc_large_node_noprof+0x1c/0x70 [ 539.700769][T14932] __kmalloc_node_track_caller_noprof.cold+0x5/0x5f [ 539.707377][T14932] ? bitmap_parse_user+0x24/0x90 [ 539.712331][T14932] memdup_user_nul+0x2b/0x110 [ 539.717017][T14932] bitmap_parse_user+0x24/0x90 [ 539.721794][T14932] tracing_cpumask_write+0xfc/0x1a0 [ 539.727004][T14932] ? __pfx_tracing_cpumask_write+0x10/0x10 [ 539.732826][T14932] ? ksys_write+0x12b/0x250 [ 539.737342][T14932] ? __pfx_tracing_cpumask_write+0x10/0x10 [ 539.743165][T14932] vfs_write+0x24c/0x1150 [ 539.747521][T14932] ? __fget_files+0x1fc/0x3a0 [ 539.752227][T14932] ? __pfx___mutex_lock+0x10/0x10 [ 539.757274][T14932] ? __pfx_vfs_write+0x10/0x10 [ 539.762060][T14932] ? __fget_files+0x206/0x3a0 [ 539.766754][T14932] ksys_write+0x12b/0x250 [ 539.771088][T14932] ? __pfx_ksys_write+0x10/0x10 [ 539.775955][T14932] do_syscall_64+0xcd/0x250 [ 539.780469][T14932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.786368][T14932] RIP: 0033:0x7fea0c385d19 [ 539.790787][T14932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.810407][T14932] RSP: 002b:00007fea0a1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 539.818830][T14932] RAX: ffffffffffffffda RBX: 00007fea0c575fa0 RCX: 00007fea0c385d19 [ 539.826804][T14932] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 539.834780][T14932] RBP: 00007fea0c401a20 R08: 0000000000000000 R09: 0000000000000000 [ 539.842752][T14932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.850732][T14932] R13: 0000000000000000 R14: 00007fea0c575fa0 R15: 00007ffe251c8d28 [ 539.858723][T14932] [ 539.862016][T14932] Kernel Offset: disabled [ 539.866396][T14932] Rebooting in 86400 seconds..