last executing test programs: 6m4.625913106s ago: executing program 1 (id=148): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0xd40, 0x0) ioctl$auto_EVIOCSCLOCKID(r0, 0x5452, &(0x7f00000000c0)=0xca9) 6m4.059946397s ago: executing program 1 (id=149): mmap$auto(0x1, 0x4, 0x4005, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/ext4/sda1/fc_info\x00', 0x800, 0x0) read$auto_fake_panic_fops_(r0, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a7601, 0x0) getsockopt$auto(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) write$auto(r1, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0) socket(0xa, 0x5, 0x0) socket(0x21, 0x6, 0x84) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x129800, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0xc0100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000e80)=""/199, 0xc7) 6m3.17248463s ago: executing program 1 (id=152): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0xc00, 0x2000000000002) r0 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x8000, 0x8, 0xebf, r1, 0x8000) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x4020aea5, 0x38) ioctl$auto(0x3, 0x4040ae77, 0x38) r2 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/ns/cgroup\x00', 0x480, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001ec0)='/sys/power/mem_sleep\x00', 0x1a9402, 0x0) socket(0x18, 0x80802, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x15, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x2, 0x0) socket(0xa, 0x2, 0x88) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r3 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r3, 0x0, 0xc3) ioctl$auto_NS_GET_TGID_FROM_PIDNS(r2, 0x8004b707, &(0x7f0000000040)=0x9) 6m1.786812238s ago: executing program 1 (id=162): mmap$auto(0x3, 0x2020009, 0x100000001, 0x15, 0xffffffffffffffff, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r0 = socket(0x2b, 0x1, 0x1) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r0, 0x0, 0x20000001) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) kill$auto(0x0, 0x21) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x5, 0x15) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) sendmsg$auto_NL80211_CMD_GET_MPP(r0, 0x0, 0x880) munmap$auto(0x8000, 0xffffffff) getrandom$auto(0x0, 0x6000000, 0x3) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r0) sendmsg$auto_NFC_CMD_STOP_POLL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="00022abd7000fcdbdf2507000000080004000a00000007000200283a2d000800030003000000060014007d2900000400140005001000030000001400020076657468305f766972745f7769666900080003000600000008000e0006000000"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x44084) mmap$auto(0x0, 0x2020009, 0x3, 0x400000eb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) close_range$auto(0x2, 0x8, 0x0) 5m57.922369836s ago: executing program 1 (id=164): mmap$auto(0x2000000000, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x1e1c83, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x4611, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/flags\x00', 0x101142, 0x0) sendmmsg$auto(r0, &(0x7f0000000480)={{&(0x7f00000000c0)="ee1fd7193da99dec59a075aa2fdd0e9ed9b2bf41ed8e2b00cd8a77d8926fdaeee08e6a08dda69fc8db8c12ec9ced58baf641943376b762530459a94514a45aa5c06eac1df55cd2ffe9cef421d7c3fe85fff8f79a2481464abd0f5f5a8df49fcdb279d9ec212676b71634731c577939b1c6d30924878fac4e7e57cc669c2fc220becb8c4673eb271f079e213cfec604950a108469dad1f0535f02660f38a7233e9fc51ee363cfc783286bfc894d8ee8f407023da06f9bb2597ec8c3cf7a1ddf04d6cdee1a026bc380f2a5d0a790c5ca3dbef2d3fcd0747a588016cc11f6f4a984104ca471cf35bd2816", 0x80000000, &(0x7f00000001c0)={&(0x7f0000000380)="1476d90488c0d981ffd221b42a0ec72f1973c4e32712a97741db54e1346b665764cad17748f0360e39d5cf0b5a0191e7a84631de5b2658926e1a73b3b85e5b568e063fb33946bb81f56948cff727979cce2f3da04419f2b2726c56d2c221820de1f281ee19bb3a7b9805f57f9f821ccf959da6f98743a08bd612dcb04df4e51be9ac58464eb6a947c224cde64f7fda12f57c5ac912d91c6b5f16ec0b1eb540557700703d24776ec42b7965b4573d42bd8ca5b378c2104ed82005ec6f140a68d3a97776a85c042eb645da388be44c7ebf400c4f6935b66e9ea3cd419d4b3883c3d59781d8e4d91e6a", 0x9}, 0x3, &(0x7f0000000240)="f9e09af73a4a6424b251d1fd8ee9d8423103fcbf272e77539d7061b51e446440a976d6e1f90704e07fa59954bea8f5207bdb198af50a78fa84f4cd9b532410ea3ab23988d91dbe5e81426d46b91b44f432e964ca8ea7aaa6cc9749040c4ca6046e65dd8ff63a505c95e4e4faa11cf6230bccb57f0585109b3fc0e2f89b4b8b906e47ba30e5aa7613945952425dbd24c8a7c711ba781d45ecca90db5e", 0xa6, 0x5}, 0x480000}, 0x8000, 0x6) mmap$auto(0xfffffffffffffffc, 0x800, 0x1000df, 0x9b72, 0x2, 0x100000000) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/platform/i8042/serio0/id/id\x00', 0x101400, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/system/cpu/vulnerabilities/l1tf\x00', 0x0, 0x0) read$auto(r1, &(0x7f0000000200)='\x00', 0xb) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x60282, 0x0) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) tkill$auto(0x80000000000001, 0x7) write$auto(0xca, 0x0, 0x1ff) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000340), 0x108800, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000085c0)=""/89, 0x59) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x2, 0x2) r3 = prctl$auto_PR_SCHED_CORE_GET(0x7fffffff, 0x0, 0xffffffffffffffff, 0x5a, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'pimreg\x00'}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) socket(0x1f, 0x800, 0xffffff01) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) 5m53.948959657s ago: executing program 1 (id=174): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip_vs_stats\x00', 0x28000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) capset$auto(0x0, 0x0) capget$auto(0x0, &(0x7f0000000180)={0x2000ea6a, 0xf, 0x6}) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/oss/devices\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000280)=""/65, 0x41) symlink$auto(&(0x7f0000000680)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = memfd_create$auto(0x0, 0xe) r3 = socket(0x2, 0x6, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x80502, 0x0) write$auto(0x3, 0x0, 0x7) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000280)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="04030000043e0b67c351cec970b5ad084d69a21b64"], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x37b7b36177aa48f5) ioctl$auto_BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, &(0x7f00000001c0)=0xbe9b) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x5, 0x0, 0x9, 0x0, 0x1f, 0x8}, 0x7}, 0x6, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x9, 0x0, 0x3, 0x1}, 0xfff}, 0xff, 0xc1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101c41, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x2, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6c, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x80000000368e, 0x8, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000404, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) 5m53.644877497s ago: executing program 32 (id=174): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip_vs_stats\x00', 0x28000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) capset$auto(0x0, 0x0) capget$auto(0x0, &(0x7f0000000180)={0x2000ea6a, 0xf, 0x6}) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/oss/devices\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000280)=""/65, 0x41) symlink$auto(&(0x7f0000000680)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = memfd_create$auto(0x0, 0xe) r3 = socket(0x2, 0x6, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x80502, 0x0) write$auto(0x3, 0x0, 0x7) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000280)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="04030000043e0b67c351cec970b5ad084d69a21b64"], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x37b7b36177aa48f5) ioctl$auto_BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, &(0x7f00000001c0)=0xbe9b) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x5, 0x0, 0x9, 0x0, 0x1f, 0x8}, 0x7}, 0x6, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x9, 0x0, 0x3, 0x1}, 0xfff}, 0xff, 0xc1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101c41, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x2, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6c, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x80000000368e, 0x8, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000404, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) 2m52.758661221s ago: executing program 2 (id=736): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async, rerun: 32) fanotify_init$auto(0x5, 0x2000000000002) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) (async) clone$auto(0x20003b4a, 0xf7fffdffffffffff, 0x0, 0x0, 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 32) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) sysfs$auto(0x2, 0x200000001d, 0x0) fsopen$auto(0x0, 0x1) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) setrlimit$auto(0x1000000007, 0x0) (async) socket(0x1d, 0x2, 0x6) (async, rerun: 32) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = socket(0x1e, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) getsockopt$auto(r0, 0x10f, 0x82, 0x0, 0x0) (async, rerun: 64) ioctl$auto(0x3, 0xff02, 0x0) 2m51.883691359s ago: executing program 2 (id=738): socket(0x29, 0x5, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/swradio14\x00', 0x80, 0x0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000000)=""/194, 0x70800) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/kcm\x00', 0x400480, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event2\x00', 0x48841, 0x0) read$auto(r1, &(0x7f0000000300)='2\x06J Nwe0\xbd\"\x8f\xe5h_b\xde\x19\xa5\x0e\xfa\xe0\xcb\xb7\xaceW\x1a\x1f\xae\xd8\xfe\x01Y\xd6\xba\xde3\xc7\xf8\x91\xda\xf6_%\xf30\xdc\x97<\xf3A\xa7\xb4\x8dj\xbd\x02\xb1}{e\xf64\xec4\x83,\xecp7j\xf8<\xc8x\xd4\xb0\x1d\b\xb0\x18\x01\x9e\x9et\x8aa\xe1\re\xcf\x8e\x02\xeeW\xf0z\vk#_\xdb\x15f8>;zM\xa95\x16\xe9l\xf5\xaa\xaa\x03\x18p\x0e\xde$\xc3\xa9\xac\xc7\x98\x05<\xef\xcd@z\fx}F\x93\xe1\xbd\xb3s\x80\xc1w\x1eP\xd0\xea\xab\x8f\xc7\a\xe6\xad\ni\n~-u)\x88\x97\xed\xa7\x9b\x0f\xef\x99\x13\xdc<\xd1{\br\xd6[\xd3\xa9-(KH\b\xdfJ\xdek\xef\xc9\xd7\n\x83m\x86\xf2\a\x8d\x19\xe0\\\xf0lg?\x98\xc8\x8e\xbd2?C\xa5\x8a\xe3\xc6\xd7\x00\x14n\xb8<\xab\x96\x8d\xa1\xf4\x87\xe5\a:z\xea\xcc\xa1\x8d\xae8\x12\xa6\xb9\xd99\xaa\xc5\x10\xad\xdd\x89\xdd\xbb\xf5\xd2Q\x92\xcd\xcc\x9f\x1a\xdbR\xeeL:\x87\xb3#\x00\x1bR\xf2\xe2/\xa3\x0e\x90\x98\x8c\xc0\xa4\xda', 0x805644) 2m51.580598511s ago: executing program 2 (id=742): r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001680), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044010}, 0x20040041) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="110325bd7000fedbdf2501"], 0x14}}, 0x10040) r4 = open(&(0x7f00000001c0)='./cgroup\x00', 0x800, 0x8a) bpf$auto(0x10, &(0x7f00000000c0)=@link_detach={r4}, 0x40) read$auto_fuse_dev_operations_fuse_i(r4, &(0x7f0000000180)=""/90, 0x5a) 2m50.149313399s ago: executing program 2 (id=746): r0 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r0, &(0x7f0000000200)=@generic={0x11, "0000100000000000929e006300"}, 0x80) socket(0xa, 0x1, 0x84) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x121482, 0x0) close_range$auto(0x2, 0x8, 0x0) epoll_create$auto(0x2) r1 = socket(0x25, 0x1, 0x0) setsockopt$auto(r1, 0x111, 0x7f, 0x0, 0x400) r2 = openat$auto_fops_init_pkru_pkeys(0xffffffffffffff9c, &(0x7f0000000000), 0xc0400, 0x0) read$auto_fops_init_pkru_pkeys(r2, &(0x7f0000000100)=""/205, 0xcd) socket(0x1e, 0x6, 0x0) r3 = socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001380)='/dev/bus/usb/032/001\x00', 0x8000, 0x0) ioctl$auto_USBDEVFS_RELEASE_PORT(r4, 0x80045519, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40004) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4004081}, 0x20000084) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x9, 0x4, 0x15f4da0b, 0x3, 0x3, 0xc, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xd]}, 0x0) 2m49.176604222s ago: executing program 2 (id=748): r0 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) ppoll$auto(&(0x7f0000000140)={r1, 0x8, 0x1}, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) read$auto(r0, 0x0, 0x7fff) 2m48.742123423s ago: executing program 2 (id=750): mmap$auto(0x0, 0x100000000009, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_TCFLSH2(r0, 0x540b, &(0x7f0000000000)="3c3cc2427243d3f6db7181d06988829b2b709e516af05593ef3524e515c236765d8b138c26ce87d65761a5ac51f12c64281279b0134582c654176bf93072228e85a12ea60dc80b17542b7ff3c0eedb767a54246379b18660e660") madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) rename$auto(0x0, 0x0) 2m33.062185435s ago: executing program 33 (id=750): mmap$auto(0x0, 0x100000000009, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_TCFLSH2(r0, 0x540b, &(0x7f0000000000)="3c3cc2427243d3f6db7181d06988829b2b709e516af05593ef3524e515c236765d8b138c26ce87d65761a5ac51f12c64281279b0134582c654176bf93072228e85a12ea60dc80b17542b7ff3c0eedb767a54246379b18660e660") madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) rename$auto(0x0, 0x0) 8.006260905s ago: executing program 5 (id=1339): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) mlockall$auto(0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setfsgid$auto(0xee01) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unlink$auto(0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)=""/183, 0xb7) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r2 = io_uring_setup$auto(0xa, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x1020, 0x202, 0x10001, 0x8, r2, [], {0x6, 0x6, 0x8c48, 0x4, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x10000008, 0x52, 0x1, 0x1, 0x40, 0x76c4, 0x80008, 0x5}}) r3 = socket(0x2, 0x5, 0x1000) read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0) setsockopt$auto(r3, 0x6, 0x1f, 0x0, 0xfb3) 6.671057877s ago: executing program 0 (id=1343): setfsuid$auto(0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xc) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$auto(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) read$auto_event_inject_fops_trace(0xffffffffffffffff, &(0x7f00000007c0)=""/4096, 0x1000) mmap$auto(0x80000000, 0x4, 0xffffffffffffffff, 0x13, r0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/cifsFYI\x00', 0x240000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000100)='/\x13-:\xe7J\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\xb6\x01\xb7\xe2\xf7\xc6\xdf\xe1\xa5\xc7\xf7\x94\xfc\x853\xe0\x1a\x05\xe5\xe0E\x00\xb5h\x15\xfd\xbaJT\x85\xe7$\xda\xd5zq\x18\"\x16b\x96\xfe_@\xb2h\n\x81J\xbba8&\xcd`\x9c\x96zG\xc9E\xc2\xa6\xc1Ne\xe2\xfe3u\x95[t\x03\xa6\x9fy\x95\x11\x00'/115, 0x9) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x80600, 0x0) mmap$auto(0x4000001, 0x8, 0x52, 0x1f, r1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r4 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$auto(r4, 0x6f2d, r4) splice$auto(r2, 0x0, r4, 0x0, 0x80000080000001, 0x46) close_range$auto(0x2, 0x8, 0x0) syslog$auto(0x4, &(0x7f0000000040)='..\x00', 0x7) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r2, 0x400000, r0) mprotect$auto(0x81, 0x8000000000000001, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="0200f1bd3db1cb9200006f6669dc5fa1665b32c19d75d2b3f56470daa1f81ae7d4e5089ff02eef1b41eb031a7548bc3cb4855dfd8febdf8edc956f12fd4bd190df7859d87c65295aeb890fa5fc4e26db2716194f28344d3b259592942f65bc2a2b6570aa00faf7ac", @ANYRES16=r6, @ANYBLOB="010029bd7000fedbdf25040000000c000180080001000100000004000a8008000800", @ANYRES32=r7, @ANYRES8=r4], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x10) 5.795503407s ago: executing program 3 (id=1344): keyctl$auto(0x1f, 0x0, 0x0, 0x5, 0x8) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x810000000000003a, 0x0) r0 = fsopen$auto(0x0, 0x1) close_range$auto(r0, 0xa, 0x0) semctl$auto_IPC_RMID(0x1, 0x0, 0x0, 0x1) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(0xffffffffffffffff, 0x0, 0x20000000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) semctl$auto(0x2, 0x5, 0x13, 0x9) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0xa82, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x8000000000049b72, 0xffffffffffffffff, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0xa, 0x0) open(0x0, 0xa240, 0x15e) socket(0x5, 0x1, 0xfff) setsockopt$auto(0x3, 0x8000000000000006, 0x22, 0x0, 0x7ffffc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, 0x0, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r3) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) 5.507471296s ago: executing program 0 (id=1345): r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/authorized\x00', 0x10b142, 0x0) mmap$auto(0x0, 0xb98e, 0x5, 0x1a, r0, 0x2) sendfile$auto(r0, r1, 0x0, 0x1000200) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x4, 0x2020009, 0x3, 0xeb1, r0, 0x8000) r2 = socket(0x2, 0x3, 0x4) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xffd8) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/sctp/remaddr\x00', 0xe2780, 0x0) mmap$auto(0xffffffffffffffff, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x1) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0x20499d, 0x9) pread64$auto(r3, 0x0, 0xf42c, 0x38) open(0x0, 0x22240, 0x154) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/jfs/loglevel\x00', 0x1a9701, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, r2, 0x8) uname$auto(0x0) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x8003, @dev={0xac, 0x14, 0x14, 0x12}}, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001240)='/sys/devices/platform/dummy_hcd.5/usb6/6-0:1.0/bInterfaceProtocol\x00', 0x80400, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) r4 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) madvise$auto(0xfffffffffffff800, 0x97, 0xa8) read$auto_rng_chrdev_ops_core(r4, &(0x7f0000000040)=""/4096, 0xfffffe82) 4.659079084s ago: executing program 5 (id=1346): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioperm$auto(0xcd6b, 0x6, 0x2000005) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) ioperm$auto(0x7, 0x6, 0x2) sendmsg$auto_NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x4008000) sendmsg$auto_NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x815) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, 0x0, 0x4000080) sendmmsg$auto(0x4, 0x0, 0x49a6, 0x6) setresuid$auto(0x0, 0x0, 0x0) ioprio_set$auto(0x3, 0x0, 0x4b34) readv$auto(r0, 0x0, 0x1) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) pwrite64$auto(0xc8, 0x0, 0x5, 0x3d) socket(0x10, 0x2, 0x0) pread64$auto(r1, 0x0, 0x1ff, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="d8"], 0x3d8}, 0x1, 0x0, 0x0, 0x48084}, 0x20000010) socket(0x18, 0x2, 0x0) futex_waitv$auto(&(0x7f0000000300)={0x7f, 0x100000001, 0x2}, 0x1, 0x0, &(0x7f0000000340)={0x92, 0x6}, 0x0) mmap$auto(0x2, 0x2020009, 0x4, 0xeb1, r1, 0x8000) rseq$auto(&(0x7f0000000180)={0x10000, 0x401, 0x0, 0xffff, 0xffffffff, 0x2, "bda5cab6cdb9994354de36524bb77d702ef2134451d5f2160c12e98238d6991512d0d16708bb7a0b7622a971db8ae6f6b37205acf173aa72be0f3de51337d3c0710fb53b5f58804f3574d536a6ec93da09da24c0c3487659b92eb09eb3bdabb80df197650a078c9d238d"}, 0x8002, 0x0, 0x6) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0x4, &(0x7f00000000c0)={{0x0, 0x4, &(0x7f0000000140)={0x0, 0x4da}, 0x670, 0x0, 0xb, 0x800}, 0x3}, 0x107, 0xe, 0x0) write$auto(0x3, 0x0, 0x10001) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x64501, 0x0) pread64$auto(r3, 0x0, 0x4, 0x10) 4.555567013s ago: executing program 3 (id=1348): r0 = socket(0x2, 0x801, 0x106) setsockopt$auto(r0, 0x6, 0x12, 0x0, 0xa1) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x2, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x3, 0x100) sendto$auto(0x3, 0x0, 0xfdef, 0xf950, &(0x7f0000000140), 0x1d) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) write$auto(r2, 0x0, 0x7fff) acct$auto(&(0x7f0000000000)='/dev/fb0\x00') recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/ksm/full_scans\x00', 0x8400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000b40)=""/4096, 0x1000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, r1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/net/rose9/ifindex\x00', 0x2000, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0x2901, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_USBDEVFS_SUBMITURB32(r4, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff0400000001004000"]) ioctl$auto(r4, 0x4004550c, r4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x3, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x27f, 0x101, 0x6, 0x2}, {0x1000009, 0xfffffffe, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_enter$auto(r5, 0x9, 0x820e, 0x2a, 0x0, 0x18) 4.47145414s ago: executing program 5 (id=1349): r0 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r0, &(0x7f0000000200)=@generic={0x11, "0000100000000000929e006300"}, 0x80) socket(0xa, 0x1, 0x84) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x121482, 0x0) close_range$auto(0x2, 0x8, 0x0) epoll_create$auto(0x2) socket(0x25, 0x1, 0x0) r1 = socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001380)='/dev/bus/usb/032/001\x00', 0x8000, 0x0) ioctl$auto_USBDEVFS_RELEASE_PORT(r2, 0x80045519, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40004) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x11, 0x0, 0x0, 0x0, 0x0) 3.668988112s ago: executing program 4 (id=1351): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video6\x00', 0x80383, 0x0) ioctl$auto(r1, 0xc0045627, r1) mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000) read$auto(r0, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x40009, 0x20000000df, 0xb9c, 0x7, 0x28000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x44000, 0x0) r4 = openat$auto_comedi_fops_comedi_fops(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$auto_COMEDI_DEVINFO(r4, 0x80b06401, &(0x7f0000000380)={0x5, 0x2, "a96b9ae168a299370338c43ed80feb0300cf0f7f", "733f929a79ab933dfb57c19e962646d5bd7541b0", 0x2, 0x80}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) fcntl$auto(0x8000000000000001, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x22, 0x940, 0x1ffde, 0x3, 0x3, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, [0x0, 0x0, 0x0, 0x243efbdf, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9, 0x20000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffb, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0xfffffffffffffffe, 0xe6e, 0x0, 0x8, 0x0, 0x0, 0x2]}, 0x7, 0x281) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event1\x00', 0x0, 0x0) ioctl$auto_EVIOCGRAB(r6, 0x40044590, &(0x7f0000000100)=0x6) r7 = openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) write$auto(r7, &(0x7f0000000180)='1l80211\x00', 0x1) socket(0x10, 0x3, 0xb) setsockopt$auto(r3, 0x4, 0x3, 0x0, 0x7fff) 3.536372852s ago: executing program 3 (id=1353): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x8001) connect$auto(r0, &(0x7f0000000080)=@isdn={0x22, 0x6, 0x9, 0x71, 0x5}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) sysfs$auto(0x2, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop1/queue/max_hw_sectors_kb\x00', 0x2000, 0x0) r2 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_l2cap_debugfs_fops_(r2, &(0x7f0000000240)=""/177, 0xb1) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r1, 0x40085511, r3) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0x4020aed2, 0xffffffffffffffff) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x4020aea5, 0x38) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(0x0, 0x5, 0x0, &(0x7f00000003c0)=0x1, 0x0, 0x2) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x1c07, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x20, 0x9}, 0x9}, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) 3.404415963s ago: executing program 5 (id=1354): r0 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r0, &(0x7f0000000200)=@generic={0x11, "0000100000000000929e006300"}, 0x80) socket(0xa, 0x1, 0x84) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x121482, 0x0) close_range$auto(0x2, 0x8, 0x0) epoll_create$auto(0x2) socket(0x25, 0x1, 0x0) r1 = socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001380)='/dev/bus/usb/032/001\x00', 0x8000, 0x0) ioctl$auto_USBDEVFS_RELEASE_PORT(r2, 0x80045519, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40004) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, 0x0, 0xa3d9) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x9, 0x4, 0x15f4da0b, 0x3, 0x3, 0xc, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xd]}, 0x0) 2.859865361s ago: executing program 0 (id=1355): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r0, 0x0, 0xfffffffffffffff7) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/fail-nth\x00', 0x40802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0xb9}, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mknod$auto(&(0x7f0000000300)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x1, 0x4) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x4008ae6a, 0x38) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000080)=0x1) adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffffff, 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x101001, 0x0) 2.811562317s ago: executing program 4 (id=1356): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x5, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(r0, 0x5) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(r1, 0x2) close_range$auto(0x2, 0x8000, 0x0) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec14\x00', 0x2421c0, 0x0) openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x101080, 0x0) syslog$auto(0x3, 0x0, 0x5) r2 = mq_open$auto(0x0, 0x7e, 0x9, 0x0) read$auto_fake_panic_fops_(r2, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x1580, 0x0) ioctl$auto_VHOST_GET_BACKEND_FEATURES(r2, 0x8008af26, &(0x7f0000000200)=0x7) read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000000)=""/194, 0x70800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) 2.538595205s ago: executing program 3 (id=1357): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video6\x00', 0x80383, 0x0) ioctl$auto(r1, 0xc0045627, r1) mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000) read$auto(r0, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x40009, 0x20000000df, 0xb9c, 0x7, 0x28000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x44000, 0x0) r3 = openat$auto_comedi_fops_comedi_fops(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$auto_COMEDI_DEVINFO(r3, 0x80b06401, &(0x7f0000000380)={0x5, 0x2, "a96b9ae168a299370338c43ed80feb0300cf0f7f", "733f929a79ab933dfb57c19e962646d5bd7541b0", 0x2, 0x80}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) fcntl$auto(0x8000000000000001, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x22, 0x940, 0x1ffde, 0x3, 0x3, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, [0x0, 0x0, 0x0, 0x243efbdf, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9, 0x20000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffb, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0xfffffffffffffffe, 0xe6e, 0x0, 0x8, 0x0, 0x0, 0x2]}, 0x7, 0x281) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event1\x00', 0x0, 0x0) ioctl$auto_EVIOCGRAB(r5, 0x40044590, &(0x7f0000000100)=0x6) r6 = openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) write$auto(r6, &(0x7f0000000180)='1l80211\x00', 0x1) socket(0x10, 0x3, 0xb) close_range$auto(0x2, 0x8, 0x0) 1.973171445s ago: executing program 5 (id=1358): keyctl$auto(0x1f, 0x0, 0x0, 0x5, 0x8) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x810000000000003a, 0x0) r0 = fsopen$auto(0x0, 0x1) close_range$auto(r0, 0xa, 0x0) semctl$auto_IPC_RMID(0x1, 0x0, 0x0, 0x1) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(0xffffffffffffffff, 0x0, 0x20000000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) semctl$auto(0x2, 0x5, 0x13, 0x9) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0xa82, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x8000000000049b72, 0xffffffffffffffff, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0xa, 0x0) open(0x0, 0xa240, 0x15e) socket(0x5, 0x1, 0xfff) setsockopt$auto(0x3, 0x8000000000000006, 0x22, 0x0, 0x7ffffc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, 0x0, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r3) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) 1.922332776s ago: executing program 3 (id=1359): mmap$auto(0x0, 0x4020009, 0xdf, 0x8000000000000eb1, 0x401, 0x8000) openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000001280), 0xa00, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) dup2$auto(0x0, 0x3) ioctl$auto(0x3, 0x5760, 0xfffffffffffff4e0) 1.443066424s ago: executing program 4 (id=1360): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES8, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x4) close_range$auto(0x0, 0x5, 0x0) r0 = inotify_init1$auto(0x10000000) poll$auto(&(0x7f0000000d40)={0xffffffffffffffff, 0x1, 0xa}, 0x5, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1ac}}, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/82, 0x52) r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000340), 0xffffffffffffffff) shmget$auto(0x8, 0x10565, 0x7ff) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) shmdt$auto(&(0x7f0000000000)='(\x00') sendmsg$auto_SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="44120000", @ANYRES16=r2, @ANYRES32, @ANYBLOB="40f2c69f5cf27723114ae4b291570826804547bfa6f4664f900dc1a3890c2d1325eff0c352f0c6cb5c4ac953406753edeedbbee7e0c15a9c5161d61067698d626a09fecd5020a09dd3b19a01598e5f53ffb5d8b694bcbd877e1f257aca92675746023ba178ccbfb56d13849fb43e44924f7242e72d6056debf3f3a72f9a16a623dbf1e398ae9b1d416b0b8eb325a68e41cd2982773c7b1cc8540c46f56cf39786230fb540f788de83d354c20e7f1a32d3adf4d5882839dcd28128920efaafbf6cd2ec1563848b80b5d4649df63db0a82b7e1dbd1715206dbfa1c19b3babd14f6377c41390470a427ac89b5ea4a1f67c9367bb5bc9c4a67a3ada85a2c2a2a74b727a4bfb48ef8df05fbe26c1fb7df94a89c7600788e94fb0a86247a171633d54ec6da2c54c9eaf85327d00cc82319a52be1f297c242f060b0588808db0faf8953999cb27ed56ae7a5dafcd0c9452acc3335e5a027652d5e9ff15d172687c06ed70f5859981707db1da610caed53786eac189dec233ec684e49c714c988e483b0c9f85e47979f5bd0f4c91a91655d5030383283aeb2497b1d2411f3b1a22c77eca304aad0a60ae8d8e629129fea807d922c359a40a991e16304fe255fd32709223b2c455b4aa17e950ccee5e0d1489e39ace364b5121cb09515603f49cfbb3fda8acb1ac4b9a295f723e659053cd826e05c9cb5958926586541f206b301a4994a9ef3c29cd074b648a33c17dd855bd9578c7c401992dcef882148752e831077cab82d68c0ebfc1a046c1c2c70c44edcb4d89267fd6b08a3f1c592ce0afca90728810a3992d88f6c35f5426eb5e5253f4c84fb18de87787f0338f78a341050cb70c25fb84fd19dc516fe9d610a87d90e7ef1c5718008d7e576c2b67b354f9818c949b08603f140492e02f66c58cffe13629e85e6dc43ad3920e7122a2117fe3386e0c82f68b0cc5348483dc2095a9811a7e7f080142c71e350cae870cf4910f5f1f25fefa1dd658d38443d382093c7703e196f4ac821401f5a98f066157af7eec2059ec70d63ad2a020020eef26f763971a7a44d820124bf5e4b202d4e62206fbd136c51f68d01f4ec4896b405221bd76ce883d95ab51a4188d9dbde16c8251b362a6891b39e2e6da55c85d67b5c43b89338c5ea8fe61c69d9b62da7681ca58e302cacb60834654b1eca50e162ace3159a804c6603577ef9a7007ae521589c60b1b6d0f651be0578dec16fb975a2099b554832574139215e7d79464ee26dc52dfaeca49abe1ea85d17e3d3730d66e9ead6d8732cba32f74b4eb693841d43c8835cfc59adc422e22786c0a42ebe73b4c166e53ada95bb96a6425e19b03a85618582ad6d9a1184aa23cdb1c7874606d00bb78bd112139e45a3d70f58f6b10527783a3677a6e2578d210413b391cb62db282704994d7956deba4e13f3e2911ed762ec764284f39ce9fd95875dc017deefc28be2adacfb987e7509da6df6973c3b3e12893ddf23fc23af5e57bfbcbf5f665eb8299f2da3c05ec383059bcfa6268c1e436e538a94227c039db00f32d4303385dadce2324f3e9cda8d10c103e317363db49e52d946781dc7ace318587a7d21e3fd2e06ea893ead9d9a17368e4c8619d44382a0f3434d5325ba89a5b703213a7a069d44a1f5b6c2aa12bab1de7fb66e027bd112060549af3d308115496932730518480528254c91f5508e5ae83f1f4f3593c69d8abc3380ada4efcf24380383e077581efd92e96a10f6743cfcd6ee1f99557811d51353d763b6cd6bb1c6bf288a06b01d43fa9f90ae08164dd4a9c9965208ef23f1fe45aa27028be60d3d29308f4aed0656a165703ac88df82d0928c4e1c4ebc25f8a5115a6b937028e9a5eac795771c3f600740b8e384ebdc537a74e386456e0ac8150fa50c3a3e48e3f1c600db5f7bbd59bb8d1da4ecddd4da504aff0a9372ed8cf5133791323c4d6260efe93264877ad8e50c9a69188c13f209f98681e65cfba88b7ac42ea2fedb1da804ebd1d196d30e95fb72cdbe8210dd3a8bf7aa6b3435cd65af1e164639c148b62dc0892b847156d8433463dbb7636a205a324bbf93e66e63ac560b6c037d08a48ba947dc62deeb3dd91fe16eb2ea181fd318ecd2bf2dd0c4b368204c9f74a53b0d8e671c894dc081aaf261a5a4188f59f427576506de166dcb7277ebc450c586e9b0d3743c9c9bd84ebfc752c3c10829eaec32cb87717eb4b994dfc80054e23e9348c6d95fde5edcff4fcb6123dc393b1c6e6afcf28b65d8d951fa1fbd0892802df653d0d9469f3601b3874c786859d068f5c84087caf7285b67751ac8df51c94d73bd356e41a613dc63d43711a6c02613d012c54279ba9b1f017fe4135709e96fe4081bd83638ad78b2f4875ff83e866ae921b60a3f153555344dceb1b054e173e9a4788f5928b73258ef235778f3bc19090a6f5918d8d7b4bd0394603e0b3d3e9a052b2d3c7a583c86f87fd4e8466a42d0e272ec9612c07034c87cca221c2bc67481c01cde883dee5493cb6a866f0c1c354c783deaa15b747dfa73fa3bacb78946acd8b88933e08d217a5c994742ba7942ed3d4ce75fd3e2280ec34406424167f262b3ba609f1456c8fb2397cec3c337289f48f7b1149c533bbba11c3f482bc4bdda6cd031345fe3b9d35efc08a42ce64e85450ff92afad871db46ac4b3aedd85da398a6f2e04f2b07ef549c9972de1769c1795a67e6b86e48f64560fa4babeda9482e05a380fb5303856bc166d27dccf6297725a14c475284ec33d042ea058646499d7463fba253fa202ba28b019fe07e7c17661b4e3beec48a2c70bad8e2a64b6d91ea31fde5721ed58fa8534805c3bf806127d5c7f51d6b28f75af2904a5513a17845fa2c0d333ef24a8ca75da72370e0b6f6ea43385b059bcd8db23c9ccda560d1ea93c2e48fd759b2d7645b07ead5053fbf26eddf37988d7ed9a1ebcd64c11f4f1c382438f3c497c0ae5c26165953c521e08b25527d77149a973d0ad0529f452995b832be8eb4e160baab983d531c22e04be79fffd25aa497aec28e8eddb9c2c1e1abd279baa0c39f07b47525d90b282a0924a69ae30bcff0a87fd70527de432158b943e60839a919229935681958a53bb96b7b594d4e22437353e7ff741fc603bec4d84dfadad1649b2a1253fa4e86d0676b8b560ac815e90af4554e139db3eb590d2e2b9ec3fb9bd231e0ecb2b810b00ba4cd1de6f103e9e7b13cb8e9ccdb59985f8340a712f387f09978fb3477caabb85b308142800ca4fbe189d190c8e96f0f1fa176904b29f245816f56a5d714bae9c36b77a2926cb9f1e3a29aa1ef01337b3a7f29652f1861661f0c2d9d46340be62ef9946dbb4061e3ca88ec8ada14e1ff69c813a710437e21074a26069f1782133613a63c8928db9b66632283fff4db6a7ec72d204db63ddff07c08d0caf70fa9417eb5a1c86408a54af5dd173bbee38ba939fd62de2f67bf6b420f2ec6263ad26c559622c3dbc5596ac5f925f3c4766deeca5e1321ac1f4b1880cd4df965d6fde9bfb0bed6207db0d617ebb09de72cc348bbb75dfa1db1837cd26db7d4170d5340c69c7395095c951edccd95fbe716538ca021216c5cc450b92f08ae134400fbe4a6d5c59445c3c9db9eff417d143f0fb3fe837b63acae30fc80694f0ddf4f8a5e5b903a1b779aac1e6315a11369ffece7a8dd957822140d3ae8655a22512808432f9c958e267354f76a62413fbf7a06133c2cd26006cd084072ac5d6a910bcc43a2241943ddd0315ea317cc67700116d51ba27d953bff40f66d4df7893fb401575effc5aecb90dfcabee1caf01a1347ce7a727938891264cc604e31dc5c9f6fb0fcb6747779c6a5c93c95ae73f0bcf2042ae34b03239571f1a7191548d30f5d0ced9db8b7b8", @ANYRES32, @ANYBLOB], 0x1244}, 0x1, 0x0, 0x0, 0x8042}, 0x804) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xebe, 0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040810}, 0x20000084) r3 = eventfd$auto(0x5) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r4) fstat$auto(r0, &(0x7f0000000e80)={0xfffffffffffffff7, 0x2, 0x628, 0x7, 0xee00, 0xee01, 0x0, 0xfffffffffffffff9, 0x8, 0x4, 0x0, 0x2, 0x0, 0x5, 0xff, 0xfffffffffffffffd, 0x4}) sendmsg$auto_NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000f80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4f156f5a2ea1fb78}, 0xc, &(0x7f0000000f40)={&(0x7f0000001680)={0x23b0, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x4d, 0xe8, "ce6883d659083872146acc42fb187ac19a2077bc79df504e2dd23ab62872c07a0f77ebf5e05b31edbca12f419a6551f1f31e598db9bc65463ca6b02eb449c2212755672d7940021d0b"}, @NL80211_ATTR_CQM={0x2149, 0x5e, 0x0, 0x1, [@generic="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", @nested={0x1a, 0xc4, 0x0, 0x1, [@typed={0x8, 0x57, 0x0, 0x0, @fd=r3}, @typed={0x6, 0x116, 0x0, 0x0, @str='(\x00'}, @generic="9c002ec96728"]}, @typed={0x8, 0xb6, 0x0, 0x0, @u32=0xef}, @generic="4ac785c489cae052697d82a1a7aadaeba684a800b1cd3767acd40725497661cf4ba0d20a38529adb65550a4e7fee6c539ae7a1bed4874f6791e135f9d2c8654456f2356a6231742e08f3537ef3c32ab77d745155e384d7258e6b6eb9a25341d49f8d760d70c3cd3abb8febde368ca78e00849c96ba303862905adda5eb55c42e2128f154a1ccdcde890310a3f2", @generic="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", @typed={0x8, 0xb5, 0x0, 0x0, @fd=r4}, @typed={0x5, 0xea, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0xc0, 0x0, 0x0, @ipv4=@loopback}, @nested={0x6e, 0x22, 0x0, 0x1, [@generic="467efdf5b80372baba1a5ec676257df87b5c16721d7a2cb9b208b2f540c2137fc5641bf6f135568fb5982eb2929b760c2e86c87fc8cb5e6965ba17fb3da1e6984d454a8296b67cb9eabce42a91e4aa410bf3cb23f5f346ae6c0ae68363d7a9ddef79b52ef123", @nested={0x4, 0x71}]}, @typed={0xc, 0x8e, 0x0, 0x0, @u64=0x9}]}, @NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@generic="c387b6e1efb5c265", @typed={0x8, 0xe1, 0x0, 0x0, @u32}, @nested={0x47, 0x76, 0x0, 0x1, [@nested={0x4, 0x8b}, @generic="4b79fda900b1a437b03342b32ca1047f34b2ed6fd5094834364e25fc195c", @typed={0x6, 0x21, 0x0, 0x0, @str='(\x00'}, @typed={0x8, 0x96, 0x0, 0x0, @pid}, @generic="d01dd56182a91804cd7d9822a3b94c8f8d"]}]}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0xb4, 0xbb, "082f72ddd3389343d41f2d19fe1af3d9d25103867b2f0c3640b971d058901ffb5bbf3480a9c5a97922f6ce32466a10fb9370a6ac192f455f5c7e6a8ad2f2f9fff5083dd08fe61f47a9ccbda34d360ba047ea17c9daf7d4d1922a13eece73304173ec2d9280b01a3dc97df1c11c45f27ce411d7e4eaf6658502eda55df6a4e56c9698694f36655b763bfd802057de7aabf93f8d42e96a7acffb369b7f042b518bb516a68506968fa85b87bfcf8e5a53aa"}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xffff}, @NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x8}, @NL80211_ATTR_PMKR0_NAME={0xc1, 0x102, "48339eefdf72a37dd2c9a677a25464066256682446afce104f9771fa0736076a4218bbe6350af1a893911813acccfcfbb05c3cd671363d82c38569b9b6e4fa2e08719c1f957272cef728cdb61ed8f15fa9a7541134482aee7304f8d5258459e69855c485906085948dab8f8018e79a04475b5872e22c0a6b4510067d4f672f39cd40455885494dfa30b08a2fe0895fae1663d41b561d2f7bec5e25164e72da03d71cc68247ca5e16bb0148525275462d9ef5af9994bab43cfa23214ac7"}, @NL80211_ATTR_KEY_DATA={0xe, 0x7, "18541138a0aad093abe1"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x23b0}, 0x1, 0x0, 0x0, 0x4000}, 0x88010) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x2, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x7, 0x400020009, 0xfffffffffffffff8, 0x11, 0xffffffffffffffff, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r5, 0x0, 0x3) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0) 1.436436323s ago: executing program 0 (id=1361): openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/irq/3/smp_affinity_list\x00', 0x8f3b7a51b8162d21, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x1c1080, 0x0) socketpair$auto(0xffffffff, 0x2, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f00000010c0)="dc") 1.250984218s ago: executing program 0 (id=1362): socket$nl_generic(0x11, 0x3, 0x10) socket(0xa, 0x1, 0x84) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x121482, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = epoll_create$auto(0x2) r1 = socket(0x25, 0x1, 0x0) setsockopt$auto(r1, 0x111, 0x7f, 0x0, 0x400) r2 = openat$auto_fops_init_pkru_pkeys(0xffffffffffffff9c, &(0x7f0000000000), 0xc0400, 0x0) read$auto_fops_init_pkru_pkeys(r2, &(0x7f0000000100)=""/205, 0xcd) ioctl$auto_TCSBRKP(r0, 0x5425, 0x0) r3 = socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001380)='/dev/bus/usb/032/001\x00', 0x8000, 0x0) ioctl$auto_USBDEVFS_RELEASE_PORT(r4, 0x80045519, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40004) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x9, 0x4, 0x15f4da0b, 0x3, 0x3, 0xc, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xd]}, 0x0) 1.200707345s ago: executing program 4 (id=1363): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x7ff, 0x9, 0x63, 0x0, 0x0, 0x0, 0x8, 0x200, 0x800000000100002, 0x40000406, 0x2, 0xc, 0x2, 0x11, 0x6, 0x7}) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xee46}, 0x1, 0x0, 0x3f00000000000000, 0x9}, 0x7}, 0x3, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103200, 0x0) 1.007159033s ago: executing program 4 (id=1364): socket(0x15, 0x1, 0x6) close_range$auto(0x0, 0xffffffffffffffff, 0x2) memfd_create$auto(&(0x7f00000000c0)='IPVS\x00\x84\x94\xbf\x7f\xe0(\xc7^M\xbe\x92\x98?I\xa5\x95V\xf2{\xd6\xc1\xc4.\xc3ja\xe8\xa1o\xb5-Z\x9dc\x152\xaew`0M\x1b3\r\x8afQ\xc2\x82W?r$\xf0\xce\x7f\x15\xa1\x13\xb2\x84\x04\xad<\x91\x85\xb22G\xf6\x8b\xba<\xe9&\x17%\x1a\xa5c\xe8\x06\xd4ok\x8a\xb2\xbaz\xf1\v\xf4\xaa\xda\x91\xfb\xea\x17~C\xb3\xc4S\xce\x83\x13\xd9\xbd{d\xfdB]\xb0R\x05b\x1b\xa5\xb8\x85\xa9\xbc5-9\x94\xa4QG\x06Z3#\x1cK\xbe\x16\xebaE~\x00\x00\x00\x00\x00', 0xa) ftruncate$auto(0x0, 0x8800000) (async) ftruncate$auto(0x0, 0x8800000) 605.446732ms ago: executing program 3 (id=1365): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video6\x00', 0x80383, 0x0) ioctl$auto(r1, 0xc0045627, r1) mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000) read$auto(r0, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x40009, 0x20000000df, 0xb9c, 0x7, 0x28000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x44000, 0x0) r4 = openat$auto_comedi_fops_comedi_fops(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$auto_COMEDI_DEVINFO(r4, 0x80b06401, &(0x7f0000000380)={0x5, 0x2, "a96b9ae168a299370338c43ed80feb0300cf0f7f", "733f929a79ab933dfb57c19e962646d5bd7541b0", 0x2, 0x80}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) fcntl$auto(0x8000000000000001, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x22, 0x940, 0x1ffde, 0x3, 0x3, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, [0x0, 0x0, 0x0, 0x243efbdf, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9, 0x20000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffb, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0xfffffffffffffffe, 0xe6e, 0x0, 0x8, 0x0, 0x0, 0x2]}, 0x7, 0x281) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event1\x00', 0x0, 0x0) ioctl$auto_EVIOCGRAB(r6, 0x40044590, &(0x7f0000000100)=0x6) r7 = openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) write$auto(r7, &(0x7f0000000180)='1l80211\x00', 0x1) socket(0x10, 0x3, 0xb) setsockopt$auto(r3, 0x4, 0x3, 0x0, 0x7fff) 604.456779ms ago: executing program 4 (id=1373): mmap$auto(0x0, 0x4020009, 0xdf, 0x8000000000000eb1, 0x401, 0x8000) openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000001280), 0xa00, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) dup2$auto(0x0, 0x3) ioctl$auto(0x3, 0x5760, 0xfffffffffffff4e0) 565.662965ms ago: executing program 5 (id=1366): r0 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r0, &(0x7f0000000200)=@generic={0x11, "0000100000000000929e006300"}, 0x80) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x121482, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = epoll_create$auto(0x2) r2 = socket(0x25, 0x1, 0x0) setsockopt$auto(r2, 0x111, 0x7f, 0x0, 0x400) r3 = openat$auto_fops_init_pkru_pkeys(0xffffffffffffff9c, &(0x7f0000000000), 0xc0400, 0x0) read$auto_fops_init_pkru_pkeys(r3, &(0x7f0000000100)=""/205, 0xcd) ioctl$auto_TCSBRKP(r1, 0x5425, 0x0) r4 = socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001380)='/dev/bus/usb/032/001\x00', 0x8000, 0x0) ioctl$auto_USBDEVFS_RELEASE_PORT(r5, 0x80045519, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40004) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x9, 0x4, 0x15f4da0b, 0x3, 0x3, 0xc, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xd]}, 0x0) 0s ago: executing program 0 (id=1367): r0 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r0, &(0x7f0000000200)=@generic={0x11, "0000100000000000929e006300"}, 0x80) socket(0xa, 0x1, 0x84) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x121482, 0x0) close_range$auto(0x2, 0x8, 0x0) epoll_create$auto(0x2) socket(0x25, 0x1, 0x0) r1 = socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001380)='/dev/bus/usb/032/001\x00', 0x8000, 0x0) ioctl$auto_USBDEVFS_RELEASE_PORT(r2, 0x80045519, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40004) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, 0x0, 0xa3d9) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x9, 0x4, 0x15f4da0b, 0x3, 0x3, 0xc, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xd]}, 0x0) kernel console output (not intermixed with test programs): process `syz.3.321'. [ 204.704730][ T7420] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.713293][ T7420] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.118845][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 206.567251][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 208.400654][ T7467] netlink: 326 bytes leftover after parsing attributes in process `syz.0.332'. [ 208.449442][ T7467] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.456875][ T7467] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.651686][ T7470] svc: failed to register nfsdv3 RPC service (errno 111). [ 208.715524][ T7470] svc: failed to register nfsaclv3 RPC service (errno 111). [ 210.045389][ T7494] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 210.187213][ T7494] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 210.548004][ T7507] svc: failed to register nfsdv3 RPC service (errno 111). [ 210.566839][ T7507] svc: failed to register nfsaclv3 RPC service (errno 111). [ 211.894260][ T7522] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 211.922336][ T7522] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 211.947863][ T7522] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 211.966112][ T7522] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 213.095000][ T7547] FAULT_INJECTION: forcing a failure. [ 213.095000][ T7547] name failslab, interval 1, probability 0, space 0, times 0 [ 213.163356][ T7547] CPU: 1 UID: 0 PID: 7547 Comm: syz.2.354 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 213.163397][ T7547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 213.163412][ T7547] Call Trace: [ 213.163419][ T7547] [ 213.163429][ T7547] dump_stack_lvl+0x16c/0x1f0 [ 213.163466][ T7547] should_fail_ex+0x512/0x640 [ 213.163492][ T7547] ? __kvmalloc_node_noprof+0x122/0x600 [ 213.163538][ T7547] should_failslab+0xc2/0x120 [ 213.163585][ T7547] __kvmalloc_node_noprof+0x135/0x600 [ 213.163628][ T7547] ? alloc_pages_bulk_noprof+0xa4e/0x13b0 [ 213.163680][ T7547] ? seq_read_iter+0x81e/0x12b0 [ 213.163723][ T7547] ? seq_read_iter+0x81e/0x12b0 [ 213.163759][ T7547] seq_read_iter+0x81e/0x12b0 [ 213.163797][ T7547] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 213.163851][ T7547] kernfs_fop_read_iter+0x422/0x5a0 [ 213.163890][ T7547] copy_splice_read+0x615/0xba0 [ 213.163932][ T7547] ? __mutex_lock+0x1cb/0xb00 [ 213.163972][ T7547] ? __pfx_copy_splice_read+0x10/0x10 [ 213.164014][ T7547] ? __pfx___mutex_lock+0x10/0x10 [ 213.164059][ T7547] ? __fget_files+0x204/0x3c0 [ 213.164102][ T7547] ? __pfx_copy_splice_read+0x10/0x10 [ 213.164140][ T7547] do_splice_read+0x282/0x370 [ 213.164183][ T7547] splice_file_to_pipe+0x109/0x120 [ 213.164229][ T7547] do_sendfile+0x400/0xe50 [ 213.164272][ T7547] ? __pfx_do_sendfile+0x10/0x10 [ 213.164310][ T7547] ? __fget_files+0x20e/0x3c0 [ 213.164359][ T7547] __x64_sys_sendfile64+0x1d8/0x220 [ 213.164411][ T7547] ? ksys_write+0x1b9/0x240 [ 213.164452][ T7547] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 213.164499][ T7547] ? rcu_is_watching+0x12/0xc0 [ 213.164537][ T7547] do_syscall_64+0xcd/0x260 [ 213.164579][ T7547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.164609][ T7547] RIP: 0033:0x7fea7bb8d169 [ 213.164631][ T7547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.164667][ T7547] RSP: 002b:00007fea7caa6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 213.164696][ T7547] RAX: ffffffffffffffda RBX: 00007fea7bda5fa0 RCX: 00007fea7bb8d169 [ 213.164722][ T7547] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 213.164740][ T7547] RBP: 00007fea7caa6090 R08: 0000000000000000 R09: 0000000000000000 [ 213.164757][ T7547] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 213.164772][ T7547] R13: 0000000000000000 R14: 00007fea7bda5fa0 R15: 00007ffe5235e4f8 [ 213.164799][ T7547] [ 213.435017][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 214.007724][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 214.014120][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 214.020243][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 217.038769][ T7590] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 217.094207][ T7590] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 217.242728][ T7607] KVM: debugfs: duplicate directory 7607-3 [ 219.353486][ T7643] netlink: 186 bytes leftover after parsing attributes in process `syz.2.380'. [ 219.508167][ T7638] sctp: [Deprecated]: syz.4.377 (pid 7638) Use of int in max_burst socket option. [ 219.508167][ T7638] Use struct sctp_assoc_value instead [ 219.563945][ T7638] ubi0: attaching mtd0 [ 219.575566][ T7638] ubi0: scanning is finished [ 219.580592][ T7638] ubi0: empty MTD device detected [ 219.831995][ T7638] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 219.862394][ T7638] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 219.872553][ T7638] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 219.888215][ T7638] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 219.910784][ T7638] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 219.920904][ T7638] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 219.941392][ T7638] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2312010439 [ 219.972220][ T7638] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 220.019221][ T7657] ubi0: background thread "ubi_bgt0d" started, PID 7657 [ 220.105961][ T7663] Process accounting resumed [ 221.193513][ T7681] FAULT_INJECTION: forcing a failure. [ 221.193513][ T7681] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 221.264694][ T7681] CPU: 0 UID: 0 PID: 7681 Comm: syz.2.388 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 221.264734][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 221.264751][ T7681] Call Trace: [ 221.264760][ T7681] [ 221.264770][ T7681] dump_stack_lvl+0x16c/0x1f0 [ 221.264879][ T7681] should_fail_ex+0x512/0x640 [ 221.264916][ T7681] should_fail_alloc_page+0xe7/0x130 [ 221.264967][ T7681] prepare_alloc_pages.constprop.0+0x172/0x570 [ 221.265011][ T7681] ? __lock_acquire+0x5ca/0x1ba0 [ 221.265073][ T7681] __alloc_frozen_pages_noprof+0x18f/0x24d0 [ 221.265123][ T7681] ? __lock_acquire+0x5ca/0x1ba0 [ 221.265174][ T7681] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 221.265232][ T7681] ? __lock_acquire+0xaa4/0x1ba0 [ 221.265275][ T7681] ? is_bpf_text_address+0x94/0x1a0 [ 221.265318][ T7681] ? kernel_text_address+0x8d/0x100 [ 221.265348][ T7681] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 221.265396][ T7681] ? policy_nodemask+0xea/0x4e0 [ 221.265451][ T7681] alloc_pages_mpol+0x1fb/0x540 [ 221.265499][ T7681] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 221.265546][ T7681] ? rcu_is_watching+0x12/0xc0 [ 221.265580][ T7681] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 221.265615][ T7681] ? lockdep_hardirqs_on+0x7c/0x110 [ 221.265657][ T7681] alloc_pages_noprof+0x131/0x390 [ 221.265704][ T7681] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 221.265749][ T7681] get_free_pages_noprof+0xc/0x40 [ 221.265779][ T7681] kasan_populate_vmalloc_pte+0x2d/0x160 [ 221.265816][ T7681] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 221.265852][ T7681] __apply_to_page_range+0x5f9/0xd30 [ 221.265891][ T7681] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 221.265939][ T7681] ? __pfx___apply_to_page_range+0x10/0x10 [ 221.265990][ T7681] ? alloc_vmap_area+0x872/0x2970 [ 221.266117][ T7681] alloc_vmap_area+0x919/0x2970 [ 221.266172][ T7681] ? __pfx_alloc_vmap_area+0x10/0x10 [ 221.266214][ T7681] __get_vm_area_node+0x1a7/0x300 [ 221.266255][ T7681] __vmalloc_node_range_noprof+0x277/0x1540 [ 221.266296][ T7681] ? create_io_thread+0xbe/0x100 [ 221.266348][ T7681] ? create_io_thread+0xbe/0x100 [ 221.266390][ T7681] ? __memcg_slab_post_alloc_hook+0x4d0/0x940 [ 221.266441][ T7681] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 221.266491][ T7681] ? trace_kmem_cache_alloc+0x28/0xc0 [ 221.266522][ T7681] ? kmem_cache_alloc_node_noprof+0x225/0x3b0 [ 221.266569][ T7681] ? create_io_thread+0xbe/0x100 [ 221.266609][ T7681] copy_process+0x3063/0x9130 [ 221.266651][ T7681] ? create_io_thread+0xbe/0x100 [ 221.266690][ T7681] ? arch_stack_walk+0xa6/0x100 [ 221.266729][ T7681] ? look_up_lock_class+0x6b/0x150 [ 221.266768][ T7681] ? register_lock_class+0x41/0x4c0 [ 221.266824][ T7681] ? __pfx_copy_process+0x10/0x10 [ 221.266866][ T7681] ? kasan_save_stack+0x42/0x60 [ 221.266917][ T7681] ? look_up_lock_class+0x59/0x150 [ 221.266953][ T7681] ? __mutex_trylock_common+0xe9/0x250 [ 221.267001][ T7681] ? register_lock_class+0x41/0x4c0 [ 221.267041][ T7681] ? __pfx___mutex_trylock_common+0x10/0x10 [ 221.267103][ T7681] ? __lock_acquire+0xaa4/0x1ba0 [ 221.267145][ T7681] ? __pfx_io_sq_thread+0x10/0x10 [ 221.267192][ T7681] create_io_thread+0xbe/0x100 [ 221.267230][ T7681] ? __pfx_create_io_thread+0x10/0x10 [ 221.267282][ T7681] ? __pfx_io_sq_thread+0x10/0x10 [ 221.267330][ T7681] ? rcu_is_watching+0x12/0xc0 [ 221.267359][ T7681] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 221.267394][ T7681] ? lockdep_hardirqs_on+0x7c/0x110 [ 221.267434][ T7681] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 221.267469][ T7681] ? __wake_up+0x3f/0x60 [ 221.267505][ T7681] io_sq_offload_create+0xb76/0x13b0 [ 221.267556][ T7681] ? __pfx_io_sq_offload_create+0x10/0x10 [ 221.267618][ T7681] ? bpf_lsm_capable+0x9/0x10 [ 221.267647][ T7681] ? security_capable+0x7e/0x260 [ 221.267686][ T7681] io_uring_setup+0x14bb/0x2180 [ 221.267725][ T7681] ? __pfx_io_uring_setup+0x10/0x10 [ 221.267765][ T7681] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 221.267813][ T7681] ? __fget_files+0x20e/0x3c0 [ 221.267862][ T7681] ? ksys_write+0x1b9/0x240 [ 221.267903][ T7681] ? __pfx_ksys_write+0x10/0x10 [ 221.267941][ T7681] ? rcu_is_watching+0x12/0xc0 [ 221.267980][ T7681] __x64_sys_io_uring_setup+0x98/0x140 [ 221.268020][ T7681] do_syscall_64+0xcd/0x260 [ 221.268071][ T7681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.268102][ T7681] RIP: 0033:0x7fea7bb8d169 [ 221.268127][ T7681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.268158][ T7681] RSP: 002b:00007fea7ca85038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 221.268186][ T7681] RAX: ffffffffffffffda RBX: 00007fea7bda6080 RCX: 00007fea7bb8d169 [ 221.268206][ T7681] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000059 [ 221.268224][ T7681] RBP: 00007fea7ca85090 R08: 0000000000000000 R09: 0000000000000000 [ 221.268242][ T7681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.268260][ T7681] R13: 0000000000000000 R14: 00007fea7bda6080 R15: 00007ffe5235e4f8 [ 221.268293][ T7681] [ 221.755812][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.817420][ T7681] syz.2.388: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 221.836867][ T7681] CPU: 1 UID: 0 PID: 7681 Comm: syz.2.388 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 221.836918][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 221.836934][ T7681] Call Trace: [ 221.836942][ T7681] [ 221.836952][ T7681] dump_stack_lvl+0x16c/0x1f0 [ 221.836993][ T7681] warn_alloc+0x248/0x3a0 [ 221.837052][ T7681] ? __pfx_warn_alloc+0x10/0x10 [ 221.837096][ T7681] ? kfree+0x2b6/0x4d0 [ 221.837135][ T7681] ? __get_vm_area_node+0x1e5/0x300 [ 221.837175][ T7681] __vmalloc_node_range_noprof+0xd31/0x1540 [ 221.837223][ T7681] ? create_io_thread+0xbe/0x100 [ 221.837265][ T7681] ? __memcg_slab_post_alloc_hook+0x4d0/0x940 [ 221.837314][ T7681] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 221.837357][ T7681] ? trace_kmem_cache_alloc+0x28/0xc0 [ 221.837385][ T7681] ? kmem_cache_alloc_node_noprof+0x225/0x3b0 [ 221.837430][ T7681] ? create_io_thread+0xbe/0x100 [ 221.837469][ T7681] copy_process+0x3063/0x9130 [ 221.837506][ T7681] ? create_io_thread+0xbe/0x100 [ 221.837542][ T7681] ? arch_stack_walk+0xa6/0x100 [ 221.837580][ T7681] ? look_up_lock_class+0x6b/0x150 [ 221.837616][ T7681] ? register_lock_class+0x41/0x4c0 [ 221.837670][ T7681] ? __pfx_copy_process+0x10/0x10 [ 221.837711][ T7681] ? kasan_save_stack+0x42/0x60 [ 221.837754][ T7681] ? look_up_lock_class+0x59/0x150 [ 221.837788][ T7681] ? __mutex_trylock_common+0xe9/0x250 [ 221.837830][ T7681] ? register_lock_class+0x41/0x4c0 [ 221.837869][ T7681] ? __pfx___mutex_trylock_common+0x10/0x10 [ 221.837919][ T7681] ? __lock_acquire+0xaa4/0x1ba0 [ 221.837958][ T7681] ? __pfx_io_sq_thread+0x10/0x10 [ 221.838002][ T7681] create_io_thread+0xbe/0x100 [ 221.838045][ T7681] ? __pfx_create_io_thread+0x10/0x10 [ 221.838091][ T7681] ? __pfx_io_sq_thread+0x10/0x10 [ 221.838137][ T7681] ? rcu_is_watching+0x12/0xc0 [ 221.838167][ T7681] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 221.838219][ T7681] ? lockdep_hardirqs_on+0x7c/0x110 [ 221.838256][ T7681] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 221.838291][ T7681] ? __wake_up+0x3f/0x60 [ 221.838327][ T7681] io_sq_offload_create+0xb76/0x13b0 [ 221.838377][ T7681] ? __pfx_io_sq_offload_create+0x10/0x10 [ 221.838426][ T7681] ? bpf_lsm_capable+0x9/0x10 [ 221.838454][ T7681] ? security_capable+0x7e/0x260 [ 221.838492][ T7681] io_uring_setup+0x14bb/0x2180 [ 221.838532][ T7681] ? __pfx_io_uring_setup+0x10/0x10 [ 221.838567][ T7681] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 221.838617][ T7681] ? __fget_files+0x20e/0x3c0 [ 221.838666][ T7681] ? ksys_write+0x1b9/0x240 [ 221.838706][ T7681] ? __pfx_ksys_write+0x10/0x10 [ 221.838745][ T7681] ? rcu_is_watching+0x12/0xc0 [ 221.838780][ T7681] __x64_sys_io_uring_setup+0x98/0x140 [ 221.838819][ T7681] do_syscall_64+0xcd/0x260 [ 221.838862][ T7681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.838892][ T7681] RIP: 0033:0x7fea7bb8d169 [ 221.838914][ T7681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.838943][ T7681] RSP: 002b:00007fea7ca85038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 221.838971][ T7681] RAX: ffffffffffffffda RBX: 00007fea7bda6080 RCX: 00007fea7bb8d169 [ 221.838991][ T7681] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000059 [ 221.839009][ T7681] RBP: 00007fea7ca85090 R08: 0000000000000000 R09: 0000000000000000 [ 221.839034][ T7681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.839053][ T7681] R13: 0000000000000000 R14: 00007fea7bda6080 R15: 00007ffe5235e4f8 [ 221.839085][ T7681] [ 222.329831][ T7681] Mem-Info: [ 222.333649][ T7681] active_anon:20220 inactive_anon:0 isolated_anon:0 [ 222.333649][ T7681] active_file:17711 inactive_file:39028 isolated_file:0 [ 222.333649][ T7681] unevictable:768 dirty:400 writeback:0 [ 222.333649][ T7681] slab_reclaimable:10602 slab_unreclaimable:95536 [ 222.333649][ T7681] mapped:33957 shmem:7371 pagetables:939 [ 222.333649][ T7681] sec_pagetables:0 bounce:0 [ 222.333649][ T7681] kernel_misc_reclaimable:0 [ 222.333649][ T7681] free:1323951 free_pcp:2968 free_cma:0 [ 222.378949][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.527348][ T7681] Node 0 active_anon:84080kB inactive_anon:0kB active_file:70844kB inactive_file:156040kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136028kB dirty:1600kB writeback:0kB shmem:28048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11104kB pagetables:3756kB sec_pagetables:0kB all_unreclaimable? no [ 222.560009][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.595982][ T7681] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 222.626218][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.649680][ T7681] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 222.676837][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.683054][ T7681] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 222.688978][ T7681] Node 0 DMA32 free:1381044kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:85272kB inactive_anon:0kB active_file:70844kB inactive_file:155948kB unevictable:1536kB writepending:1600kB present:3129332kB managed:2547164kB mlocked:0kB bounce:0kB free_pcp:596kB local_pcp:376kB free_cma:0kB [ 222.719292][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.726353][ T7681] lowmem_reserve[]: 0 0 0 0 0 [ 222.731225][ T7681] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 222.758213][ T7681] lowmem_reserve[]: 0 0 0 0 0 [ 222.763040][ T7681] Node 1 Normal free:3905404kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 222.791990][ T7681] lowmem_reserve[]: 0 0 0 0 0 [ 222.796814][ T7681] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 222.809914][ T7681] Node 0 DMA32: 2270*4kB (UME) 1112*8kB (UME) 1794*16kB (UME) 1434*32kB (UME) 1093*64kB (UME) 676*128kB (UME) 411*256kB (UM) 217*512kB (UM) 104*1024kB (UM) 37*2048kB (UME) 180*4096kB (UM) = 1384920kB [ 222.835460][ T7681] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 222.851289][ T7681] Node 1 Normal: 238*4kB (UME) 68*8kB (UME) 41*16kB (UME) 227*32kB (UME) 117*64kB (UME) 29*128kB (UME) 15*256kB (UM) 8*512kB (UME) 6*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3905416kB [ 222.890542][ T7681] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 222.930317][ T7681] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 222.960375][ T7681] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 222.990675][ T7681] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 223.018776][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.391'. [ 223.053671][ T7681] 64623 total pagecache pages [ 223.062793][ T7681] 0 pages in swap cache [ 223.066999][ T7681] Free swap = 124612kB [ 223.127285][ T7681] Total swap = 124996kB [ 223.133993][ T7681] 2097051 pages RAM [ 223.162422][ T7681] 0 pages HighMem/MovableOnly [ 223.192782][ T7681] 428602 pages reserved [ 223.197003][ T7681] 0 pages cma reserved [ 223.352915][ T7712] aoe: invalid device specification v m w [ 223.397782][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.397'. [ 223.642074][ T7709] sctp: [Deprecated]: syz.0.395 (pid 7709) Use of int in max_burst socket option. [ 223.642074][ T7709] Use struct sctp_assoc_value instead [ 223.712882][ T7709] ubi: mtd0 is already attached to ubi0 [ 296.691851][ T8602] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 298.168852][ T8615] FAULT_INJECTION: forcing a failure. [ 298.168852][ T8615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.304821][ T8615] CPU: 0 UID: 0 PID: 8615 Comm: syz.2.622 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 298.304867][ T8615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 298.304886][ T8615] Call Trace: [ 298.304896][ T8615] [ 298.304907][ T8615] dump_stack_lvl+0x16c/0x1f0 [ 298.304954][ T8615] should_fail_ex+0x512/0x640 [ 298.304992][ T8615] _copy_from_user+0x2e/0xd0 [ 298.305041][ T8615] snd_rawmidi_kernel_write1+0x519/0x8a0 [ 298.305090][ T8615] snd_rawmidi_write+0x26e/0xbd0 [ 298.305135][ T8615] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 298.305174][ T8615] ? __pfx_default_wake_function+0x10/0x10 [ 298.305211][ T8615] ? bpf_lsm_file_permission+0x9/0x10 [ 298.305259][ T8615] ? security_file_permission+0x71/0x210 [ 298.305392][ T8615] ? rw_verify_area+0xcf/0x680 [ 298.305434][ T8615] vfs_write+0x25c/0x1180 [ 298.305473][ T8615] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 298.305515][ T8615] ? __pfx_vfs_write+0x10/0x10 [ 298.305554][ T8615] ? find_held_lock+0x2b/0x80 [ 298.305586][ T8615] ? __fget_files+0x204/0x3c0 [ 298.305636][ T8615] ? __fget_files+0x20e/0x3c0 [ 298.305687][ T8615] ksys_write+0x205/0x240 [ 298.305728][ T8615] ? __pfx_ksys_write+0x10/0x10 [ 298.305769][ T8615] ? rcu_is_watching+0x12/0xc0 [ 298.305809][ T8615] do_syscall_64+0xcd/0x260 [ 298.305854][ T8615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.305898][ T8615] RIP: 0033:0x7fea7bb8d169 [ 298.305922][ T8615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.305956][ T8615] RSP: 002b:00007fea7caa6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 298.305987][ T8615] RAX: ffffffffffffffda RBX: 00007fea7bda5fa0 RCX: 00007fea7bb8d169 [ 298.306010][ T8615] RDX: 000000100000a3d9 RSI: 0000200000000400 RDI: 0000000000000006 [ 298.306045][ T8615] RBP: 00007fea7bc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 298.306065][ T8615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.306084][ T8615] R13: 0000000000000000 R14: 00007fea7bda5fa0 R15: 00007ffe5235e4f8 [ 298.306119][ T8615] [ 300.848602][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.626'. [ 308.890311][ T8717] FAULT_INJECTION: forcing a failure. [ 308.890311][ T8717] name failslab, interval 1, probability 0, space 0, times 0 [ 308.947206][ T8717] CPU: 1 UID: 0 PID: 8717 Comm: syz.4.646 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 308.947251][ T8717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 308.947269][ T8717] Call Trace: [ 308.947278][ T8717] [ 308.947289][ T8717] dump_stack_lvl+0x16c/0x1f0 [ 308.947334][ T8717] should_fail_ex+0x512/0x640 [ 308.947366][ T8717] ? fs_reclaim_acquire+0xae/0x150 [ 308.947404][ T8717] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 308.947451][ T8717] should_failslab+0xc2/0x120 [ 308.947500][ T8717] __kmalloc_noprof+0xd2/0x510 [ 308.947549][ T8717] tomoyo_realpath_from_path+0xc2/0x6e0 [ 308.947600][ T8717] ? tomoyo_profile+0x47/0x60 [ 308.947633][ T8717] tomoyo_path_number_perm+0x245/0x580 [ 308.947671][ T8717] ? tomoyo_path_number_perm+0x237/0x580 [ 308.947716][ T8717] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 308.947757][ T8717] ? find_held_lock+0x2b/0x80 [ 308.947812][ T8717] ? find_held_lock+0x2b/0x80 [ 308.947844][ T8717] ? __fget_files+0x204/0x3c0 [ 308.947892][ T8717] ? __fget_files+0x20e/0x3c0 [ 308.947939][ T8717] security_file_ioctl+0x9b/0x240 [ 308.947984][ T8717] __x64_sys_ioctl+0xb7/0x200 [ 308.948022][ T8717] do_syscall_64+0xcd/0x260 [ 308.948063][ T8717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.948095][ T8717] RIP: 0033:0x7f7f44b8d169 [ 308.948118][ T8717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.948148][ T8717] RSP: 002b:00007f7f429f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.948181][ T8717] RAX: ffffffffffffffda RBX: 00007f7f44da5fa0 RCX: 00007f7f44b8d169 [ 308.948208][ T8717] RDX: 0000000000000000 RSI: 00000000000007a6 RDI: 0000000000000003 [ 308.948227][ T8717] RBP: 00007f7f429f6090 R08: 0000000000000000 R09: 0000000000000000 [ 308.948246][ T8717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.948265][ T8717] R13: 0000000000000000 R14: 00007f7f44da5fa0 R15: 00007ffc3ac64788 [ 308.948299][ T8717] [ 309.007331][ T8717] ERROR: Out of memory at tomoyo_realpath_from_path. [ 309.417986][ T8723] netlink: 'syz.4.648': attribute type 1 has an invalid length. [ 309.446631][ T8723] netlink: 'syz.4.648': attribute type 3 has an invalid length. [ 313.117232][ T8745] Process accounting paused [ 314.105365][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 316.759827][ T30] audit: type=1326 audit(6037988703.855:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8812 comm="syz.0.671" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e5cb8d169 code=0x0 [ 318.645732][ T8836] netlink: 'syz.4.676': attribute type 1 has an invalid length. [ 318.835170][ T8825] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 318.841491][ T8825] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 318.867293][ T8825] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 318.885779][ T8825] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 320.157104][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 320.883036][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 320.957229][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 320.957769][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 321.434426][ T8867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.687'. [ 322.241513][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.257131][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.501092][ T8908] FAULT_INJECTION: forcing a failure. [ 323.501092][ T8908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.532170][ T8908] CPU: 0 UID: 0 PID: 8908 Comm: syz.3.697 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 323.532212][ T8908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 323.532231][ T8908] Call Trace: [ 323.532240][ T8908] [ 323.532251][ T8908] dump_stack_lvl+0x16c/0x1f0 [ 323.532296][ T8908] should_fail_ex+0x512/0x640 [ 323.532333][ T8908] _copy_from_user+0x2e/0xd0 [ 323.532371][ T8908] copy_msghdr_from_user+0x98/0x160 [ 323.532416][ T8908] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 323.532471][ T8908] ? kfree+0x252/0x4d0 [ 323.532507][ T8908] ? __pfx__kstrtoull+0x10/0x10 [ 323.532559][ T8908] ___sys_sendmsg+0xfe/0x1d0 [ 323.532603][ T8908] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.532670][ T8908] ? __pfx___might_resched+0x10/0x10 [ 323.532715][ T8908] __sys_sendmmsg+0x200/0x420 [ 323.532761][ T8908] ? __pfx___sys_sendmmsg+0x10/0x10 [ 323.532813][ T8908] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 323.532867][ T8908] ? fput+0x70/0xf0 [ 323.532894][ T8908] ? ksys_write+0x1b9/0x240 [ 323.532934][ T8908] ? __pfx_ksys_write+0x10/0x10 [ 323.532973][ T8908] ? rcu_is_watching+0x12/0xc0 [ 323.533008][ T8908] __x64_sys_sendmmsg+0x9c/0x100 [ 323.533051][ T8908] ? lockdep_hardirqs_on+0x7c/0x110 [ 323.533086][ T8908] do_syscall_64+0xcd/0x260 [ 323.533129][ T8908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.533160][ T8908] RIP: 0033:0x7f322cd8d169 [ 323.533184][ T8908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.533214][ T8908] RSP: 002b:00007f322dcc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 323.533243][ T8908] RAX: ffffffffffffffda RBX: 00007f322cfa5fa0 RCX: 00007f322cd8d169 [ 323.533263][ T8908] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 323.533282][ T8908] RBP: 00007f322dcc7090 R08: 0000000000000000 R09: 0000000000000000 [ 323.533301][ T8908] R10: 0000000007fffffe R11: 0000000000000246 R12: 0000000000000002 [ 323.533320][ T8908] R13: 0000000000000000 R14: 00007f322cfa5fa0 R15: 00007ffe4401cb18 [ 323.533352][ T8908] [ 323.804683][ T8916] syz.4.700(8916): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 324.177501][ T8908] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 324.185475][ T8908] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 324.218326][ T8908] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 324.252585][ T8908] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 326.247400][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 326.253623][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 326.259870][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 326.317665][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 326.871744][ T8963] FAULT_INJECTION: forcing a failure. [ 326.871744][ T8963] name failslab, interval 1, probability 0, space 0, times 0 [ 326.917238][ T8963] CPU: 0 UID: 0 PID: 8963 Comm: syz.4.712 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 326.917285][ T8963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 326.917305][ T8963] Call Trace: [ 326.917315][ T8963] [ 326.917326][ T8963] dump_stack_lvl+0x16c/0x1f0 [ 326.917374][ T8963] should_fail_ex+0x512/0x640 [ 326.917412][ T8963] should_failslab+0xc2/0x120 [ 326.917463][ T8963] __kmalloc_cache_noprof+0x6a/0x3e0 [ 326.917506][ T8963] ? proc_self_get_link+0x1a9/0x230 [ 326.917558][ T8963] proc_self_get_link+0x1a9/0x230 [ 326.917605][ T8963] ? __pfx_proc_self_get_link+0x10/0x10 [ 326.917652][ T8963] step_into+0x19e4/0x2270 [ 326.917696][ T8963] ? __pfx_step_into+0x10/0x10 [ 326.917740][ T8963] ? lookup_fast+0x156/0x610 [ 326.917783][ T8963] walk_component+0xfc/0x5b0 [ 326.917826][ T8963] link_path_walk.part.0.constprop.0+0x682/0xd60 [ 326.917882][ T8963] path_openat+0x227/0x2d40 [ 326.917923][ T8963] ? __x64_sys_openat+0x174/0x210 [ 326.917967][ T8963] ? __pfx_path_openat+0x10/0x10 [ 326.918020][ T8963] do_filp_open+0x20b/0x470 [ 326.918066][ T8963] ? __pfx_do_filp_open+0x10/0x10 [ 326.918110][ T8963] ? find_held_lock+0x2b/0x80 [ 326.918161][ T8963] ? alloc_fd+0x420/0x760 [ 326.918219][ T8963] do_sys_openat2+0x11b/0x1d0 [ 326.918251][ T8963] ? __pfx_do_sys_openat2+0x10/0x10 [ 326.918294][ T8963] __x64_sys_openat+0x174/0x210 [ 326.918328][ T8963] ? __pfx___x64_sys_openat+0x10/0x10 [ 326.918364][ T8963] ? rcu_is_watching+0x12/0xc0 [ 326.918404][ T8963] do_syscall_64+0xcd/0x260 [ 326.918447][ T8963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.918479][ T8963] RIP: 0033:0x7f7f44b8d169 [ 326.918502][ T8963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.918534][ T8963] RSP: 002b:00007f7f429f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 326.918566][ T8963] RAX: ffffffffffffffda RBX: 00007f7f44da5fa0 RCX: 00007f7f44b8d169 [ 326.918588][ T8963] RDX: 0000000000048402 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 326.918610][ T8963] RBP: 00007f7f44c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 326.918631][ T8963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.918650][ T8963] R13: 0000000000000000 R14: 00007f7f44da5fa0 R15: 00007ffc3ac64788 [ 326.918686][ T8963] [ 327.158488][ C0] vkms_vblank_simulate: vblank timer overrun [ 327.279983][ T30] audit: type=1800 audit(6037988714.375:8): pid=8965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.711" name="features" dev="configfs" ino=20837 res=0 errno=0 [ 328.580526][ T8995] syz.4.720 (8995): drop_caches: 0 [ 331.268136][ T9037] syz.2.733 (9037): drop_caches: 0 [ 331.274504][ T9039] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 334.787085][ T9087] syz.3.745 (9087): drop_caches: 0 [ 335.974184][ T9103] netlink: 186 bytes leftover after parsing attributes in process `syz.4.749'. [ 336.802118][ T9122] FAULT_INJECTION: forcing a failure. [ 336.802118][ T9122] name failslab, interval 1, probability 0, space 0, times 0 [ 336.835906][ T9122] CPU: 0 UID: 0 PID: 9122 Comm: syz.3.757 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 336.835950][ T9122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 336.835969][ T9122] Call Trace: [ 336.835979][ T9122] [ 336.835992][ T9122] dump_stack_lvl+0x16c/0x1f0 [ 336.836036][ T9122] should_fail_ex+0x512/0x640 [ 336.836067][ T9122] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 336.836116][ T9122] should_failslab+0xc2/0x120 [ 336.836164][ T9122] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 336.836209][ T9122] ? __kernfs_new_node+0xd2/0x8a0 [ 336.836258][ T9122] __kernfs_new_node+0xd2/0x8a0 [ 336.836306][ T9122] ? __pfx___kernfs_new_node+0x10/0x10 [ 336.836350][ T9122] ? __pfx___might_resched+0x10/0x10 [ 336.836385][ T9122] ? kernfs_link_sibling+0x3fc/0x550 [ 336.836437][ T9122] ? down_write+0x14d/0x200 [ 336.836479][ T9122] ? find_held_lock+0x2b/0x80 [ 336.836511][ T9122] ? kernfs_add_one+0x3d8/0x530 [ 336.836544][ T9122] ? up_write+0x1b2/0x520 [ 336.836593][ T9122] kernfs_new_node+0x186/0x240 [ 336.836627][ T9122] __kernfs_create_file+0x53/0x350 [ 336.836666][ T9122] sysfs_add_file_mode_ns+0x207/0x3c0 [ 336.836714][ T9122] internal_create_group+0x578/0xf30 [ 336.836767][ T9122] ? __pfx_internal_create_group+0x10/0x10 [ 336.836817][ T9122] ? kernfs_create_link+0x1bd/0x240 [ 336.836858][ T9122] internal_create_groups+0x9d/0x150 [ 336.836911][ T9122] device_add+0x6d1/0x1a70 [ 336.836959][ T9122] ? __pfx_device_add+0x10/0x10 [ 336.837003][ T9122] ? lockdep_init_map_type+0x5c/0x280 [ 336.837047][ T9122] ? __init_waitqueue_head+0xca/0x150 [ 336.837082][ T9122] netdev_register_kobject+0x182/0x3a0 [ 336.837140][ T9122] register_netdevice+0x13d3/0x1dd0 [ 336.837192][ T9122] ? __pfx_register_netdevice+0x10/0x10 [ 336.837244][ T9122] __ip_tunnel_create+0x4a8/0x680 [ 336.837286][ T9122] ? __pfx___ip_tunnel_create+0x10/0x10 [ 336.837327][ T9122] ? read_word_at_a_time+0xe/0x20 [ 336.837381][ T9122] ip_tunnel_init_net+0x22f/0x7d0 [ 336.837435][ T9122] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 336.837484][ T9122] ? trace_kmalloc+0x2b/0xd0 [ 336.837516][ T9122] ? lockdep_init_map_type+0x5c/0x280 [ 336.837566][ T9122] ? __pfx_ipgre_tap_init_net+0x10/0x10 [ 336.837600][ T9122] ops_init+0x1df/0x5f0 [ 336.837650][ T9122] setup_net+0x21e/0x850 [ 336.837701][ T9122] ? __pfx_setup_net+0x10/0x10 [ 336.837747][ T9122] ? lockdep_init_map_type+0x5c/0x280 [ 336.837794][ T9122] ? __pfx_down_read_killable+0x10/0x10 [ 336.837846][ T9122] ? debug_mutex_init+0x37/0x70 [ 336.837882][ T9122] copy_net_ns+0x2a6/0x5f0 [ 336.837914][ T9122] create_new_namespaces+0x3ea/0xad0 [ 336.837962][ T9122] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 336.838006][ T9122] ksys_unshare+0x45b/0xa40 [ 336.838051][ T9122] ? __pfx_ksys_unshare+0x10/0x10 [ 336.838096][ T9122] ? xfd_validate_state+0x5d/0x180 [ 336.838129][ T9122] ? rcu_is_watching+0x12/0xc0 [ 336.838168][ T9122] __x64_sys_unshare+0x31/0x40 [ 336.838212][ T9122] do_syscall_64+0xcd/0x260 [ 336.838255][ T9122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.838288][ T9122] RIP: 0033:0x7f322cd8d169 [ 336.838314][ T9122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.838346][ T9122] RSP: 002b:00007f322dcc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 336.838378][ T9122] RAX: ffffffffffffffda RBX: 00007f322cfa5fa0 RCX: 00007f322cd8d169 [ 336.838399][ T9122] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 336.838430][ T9122] RBP: 00007f322ce0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 336.838450][ T9122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.838470][ T9122] R13: 0000000000000000 R14: 00007f322cfa5fa0 R15: 00007ffe4401cb18 [ 336.838506][ T9122] [ 340.085057][ T9149] openvswitch: netlink: Message has 4 unknown bytes. [ 340.100793][ T9152] random: crng reseeded on system resumption [ 341.799738][ T9186] netlink: 342 bytes leftover after parsing attributes in process `syz.3.772'. [ 342.083403][ T9192] FAULT_INJECTION: forcing a failure. [ 342.083403][ T9192] name failslab, interval 1, probability 0, space 0, times 0 [ 342.129274][ T9192] CPU: 0 UID: 0 PID: 9192 Comm: syz.4.773 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 342.129321][ T9192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 342.129341][ T9192] Call Trace: [ 342.129351][ T9192] [ 342.129363][ T9192] dump_stack_lvl+0x16c/0x1f0 [ 342.129435][ T9192] should_fail_ex+0x512/0x640 [ 342.129470][ T9192] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 342.129526][ T9192] should_failslab+0xc2/0x120 [ 342.129578][ T9192] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 342.129631][ T9192] ? vidtv_psi_service_desc_init+0x30d/0x4c0 [ 342.129679][ T9192] kstrdup+0x53/0x100 [ 342.129716][ T9192] vidtv_psi_service_desc_init+0x30d/0x4c0 [ 342.129763][ T9192] vidtv_channel_s302m_init+0x14f/0x970 [ 342.129814][ T9192] ? __pfx_vidtv_channel_s302m_init+0x10/0x10 [ 342.129862][ T9192] ? trace_kmalloc+0x2b/0xd0 [ 342.129898][ T9192] ? __asan_memcpy+0x3c/0x60 [ 342.129939][ T9192] vidtv_channels_init+0x4c/0xb0 [ 342.129985][ T9192] vidtv_mux_init+0x9c8/0xbe0 [ 342.130037][ T9192] vidtv_start_feed+0x33e/0x4d0 [ 342.130081][ T9192] ? __pfx_vidtv_start_feed+0x10/0x10 [ 342.130119][ T9192] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 342.130173][ T9192] dmx_section_feed_start_filtering+0x3a5/0x660 [ 342.130236][ T9192] dvb_dmxdev_filter_start+0x782/0xe10 [ 342.130297][ T9192] dvb_demux_do_ioctl+0xfc3/0x12f0 [ 342.130353][ T9192] dvb_usercopy+0x164/0x330 [ 342.130391][ T9192] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 342.130439][ T9192] ? __pfx_dvb_usercopy+0x10/0x10 [ 342.130492][ T9192] ? __fget_files+0x20e/0x3c0 [ 342.130543][ T9192] dvb_demux_ioctl+0x29/0x40 [ 342.130583][ T9192] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 342.130627][ T9192] __x64_sys_ioctl+0x190/0x200 [ 342.130666][ T9192] do_syscall_64+0xcd/0x260 [ 342.130710][ T9192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.130762][ T9192] RIP: 0033:0x7f7f44b8d169 [ 342.130788][ T9192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.130821][ T9192] RSP: 002b:00007f7f429d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 342.130853][ T9192] RAX: ffffffffffffffda RBX: 00007f7f44da6080 RCX: 00007f7f44b8d169 [ 342.130874][ T9192] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000009 [ 342.130894][ T9192] RBP: 00007f7f44c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 342.130914][ T9192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.130934][ T9192] R13: 0000000000000000 R14: 00007f7f44da6080 R15: 00007ffc3ac64788 [ 342.130971][ T9192] [ 343.181056][ T9204] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 343.849316][ T9213] FAULT_INJECTION: forcing a failure. [ 343.849316][ T9213] name failslab, interval 1, probability 0, space 0, times 0 [ 343.883125][ T9213] CPU: 1 UID: 0 PID: 9213 Comm: syz.4.780 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 343.883169][ T9213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 343.883188][ T9213] Call Trace: [ 343.883197][ T9213] [ 343.883209][ T9213] dump_stack_lvl+0x16c/0x1f0 [ 343.883254][ T9213] should_fail_ex+0x512/0x640 [ 343.883286][ T9213] ? __kmalloc_noprof+0xbf/0x510 [ 343.883332][ T9213] ? constrain_params_by_rules+0x175/0xca0 [ 343.883367][ T9213] should_failslab+0xc2/0x120 [ 343.883415][ T9213] __kmalloc_noprof+0xd2/0x510 [ 343.883456][ T9213] ? unwind_get_return_address+0x59/0xa0 [ 343.883500][ T9213] constrain_params_by_rules+0x175/0xca0 [ 343.883541][ T9213] ? stack_trace_save+0x8e/0xc0 [ 343.883576][ T9213] ? stack_depot_save_flags+0x29/0x9c0 [ 343.883610][ T9213] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 343.883650][ T9213] ? __kasan_kmalloc+0xaa/0xb0 [ 343.883689][ T9213] ? snd_pcm_oss_change_params_locked+0x6f4/0x3b40 [ 343.883722][ T9213] ? snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 343.883754][ T9213] ? snd_pcm_oss_write+0x4d2/0xa10 [ 343.883795][ T9213] ? snd_interval_refine+0x2fa/0x580 [ 343.883842][ T9213] snd_pcm_hw_refine+0x7de/0xad0 [ 343.883888][ T9213] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 343.883936][ T9213] ? snd_interval_refine+0x2fa/0x580 [ 343.883981][ T9213] snd_pcm_oss_change_params_locked+0x2185/0x3b40 [ 343.884028][ T9213] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 343.884076][ T9213] ? find_held_lock+0x2b/0x80 [ 343.884115][ T9213] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 343.884149][ T9213] snd_pcm_oss_write+0x4d2/0xa10 [ 343.884183][ T9213] ? bpf_lsm_file_permission+0x9/0x10 [ 343.884229][ T9213] ? security_file_permission+0x71/0x210 [ 343.884281][ T9213] vfs_write+0x25c/0x1180 [ 343.884320][ T9213] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 343.884359][ T9213] ? __pfx_vfs_write+0x10/0x10 [ 343.884398][ T9213] ? find_held_lock+0x2b/0x80 [ 343.884430][ T9213] ? __fget_files+0x204/0x3c0 [ 343.884477][ T9213] ? __fget_files+0x20e/0x3c0 [ 343.884528][ T9213] ksys_write+0x12a/0x240 [ 343.884568][ T9213] ? __pfx_ksys_write+0x10/0x10 [ 343.884607][ T9213] ? rcu_is_watching+0x12/0xc0 [ 343.884647][ T9213] do_syscall_64+0xcd/0x260 [ 343.884689][ T9213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.884721][ T9213] RIP: 0033:0x7f7f44b8d169 [ 343.884744][ T9213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.884774][ T9213] RSP: 002b:00007f7f429f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 343.884804][ T9213] RAX: ffffffffffffffda RBX: 00007f7f44da5fa0 RCX: 00007f7f44b8d169 [ 343.884824][ T9213] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 343.884843][ T9213] RBP: 00007f7f429f6090 R08: 0000000000000000 R09: 0000000000000000 [ 343.884862][ T9213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.884887][ T9213] R13: 0000000000000000 R14: 00007f7f44da5fa0 R15: 00007ffc3ac64788 [ 343.884922][ T9213] [ 344.183554][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.790328][ T9219] netlink: 326 bytes leftover after parsing attributes in process `syz.3.781'. [ 345.108870][ T9225] warning: `syz.4.782' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 345.254355][ T9231] FAULT_INJECTION: forcing a failure. [ 345.254355][ T9231] name failslab, interval 1, probability 0, space 0, times 0 [ 345.284535][ T9231] CPU: 0 UID: 0 PID: 9231 Comm: syz.0.784 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 345.284578][ T9231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 345.284597][ T9231] Call Trace: [ 345.284606][ T9231] [ 345.284618][ T9231] dump_stack_lvl+0x16c/0x1f0 [ 345.284661][ T9231] should_fail_ex+0x512/0x640 [ 345.284692][ T9231] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 345.284735][ T9231] should_failslab+0xc2/0x120 [ 345.284783][ T9231] __kmalloc_cache_noprof+0x6a/0x3e0 [ 345.284821][ T9231] ? io_wq_create+0xcc/0x9d0 [ 345.284852][ T9231] io_wq_create+0xcc/0x9d0 [ 345.284883][ T9231] io_uring_alloc_task_context+0x211/0x690 [ 345.284932][ T9231] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 345.284981][ T9231] ? __pfx_io_wq_submit_work+0x10/0x10 [ 345.285016][ T9231] ? __pfx_io_wq_free_work+0x10/0x10 [ 345.285058][ T9231] __io_uring_add_tctx_node+0x2dd/0x500 [ 345.285105][ T9231] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 345.285158][ T9231] ? __fget_files+0x20e/0x3c0 [ 345.285203][ T9231] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 345.285255][ T9231] __do_sys_io_uring_enter+0x1275/0x1670 [ 345.285295][ T9231] ? __fget_files+0x20e/0x3c0 [ 345.285336][ T9231] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 345.285375][ T9231] ? fput+0x70/0xf0 [ 345.285401][ T9231] ? ksys_write+0x1b9/0x240 [ 345.285440][ T9231] ? __pfx_ksys_write+0x10/0x10 [ 345.285477][ T9231] ? rcu_is_watching+0x12/0xc0 [ 345.285526][ T9231] do_syscall_64+0xcd/0x260 [ 345.285569][ T9231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.285600][ T9231] RIP: 0033:0x7f0e5cb8d169 [ 345.285624][ T9231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.285653][ T9231] RSP: 002b:00007f0e5d951038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 345.285681][ T9231] RAX: ffffffffffffffda RBX: 00007f0e5cda6080 RCX: 00007f0e5cb8d169 [ 345.285700][ T9231] RDX: 0000000080000001 RSI: 0000000000000a84 RDI: 0000000000000003 [ 345.285719][ T9231] RBP: 00007f0e5d951090 R08: 0000000000000000 R09: 0000000000000046 [ 345.285738][ T9231] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000001 [ 345.285756][ T9231] R13: 0000000000000000 R14: 00007f0e5cda6080 R15: 00007ffd5d6eaa78 [ 345.285789][ T9231] [ 346.368593][ T9241] mmap: syz.3.787 (9241) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 346.961922][ T9241] [U]  [ 346.965117][ T9241] [U] [ 346.967875][ T9241] [U] [ 346.970623][ T9241] [U] [ 346.981794][ T9241] [U] [ 346.984578][ T9241] [U] [ 346.987333][ T9241] [U] [ 346.990166][ T9241] [U] [ 347.068984][ T9241] [U] [ 347.071776][ T9241] [U] [ 347.074526][ T9241] [U] [ 347.077269][ T9241] [U] [ 347.098353][ T9242] [U] [ 348.067894][ T9259] usb usb38: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 348.089216][ T9259] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 348.281098][ T9262] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 349.707548][ T9273] netlink: 326 bytes leftover after parsing attributes in process `syz.0.795'. [ 349.830135][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'. [ 351.688180][ T5841] Process accounting resumed [ 352.067676][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 352.077980][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 352.086623][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 352.096804][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 352.104948][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 352.112333][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 352.401092][ T9296] chnl_net:caif_netlink_parms(): no params data found [ 352.548854][ T9296] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.556074][ T9296] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.580653][ T9296] bridge_slave_0: entered allmulticast mode [ 352.602274][ T9296] bridge_slave_0: entered promiscuous mode [ 352.610262][ T9296] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.637362][ T9296] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.644605][ T9296] bridge_slave_1: entered allmulticast mode [ 352.671907][ T9296] bridge_slave_1: entered promiscuous mode [ 352.739394][ T9296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.774366][ T9296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.868057][ T9296] team0: Port device team_slave_0 added [ 352.887439][ T9296] team0: Port device team_slave_1 added [ 352.982998][ T9296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.007277][ T9296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.067041][ T9296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.096804][ T9296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.127639][ T9296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.170939][ T9306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.805'. [ 353.201547][ T9296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.353494][ T9296] hsr_slave_0: entered promiscuous mode [ 353.399561][ T9296] hsr_slave_1: entered promiscuous mode [ 353.405967][ T9296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.452833][ T9296] Cannot create hsr debugfs directory [ 354.162201][ T5849] Bluetooth: hci4: command tx timeout [ 354.354966][ T9296] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 354.396406][ T9296] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 354.507925][ T9296] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 354.529687][ T9296] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 354.766828][ T9296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.812128][ T9296] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.838359][ T685] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.845517][ T685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.907658][ T3491] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.914816][ T3491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.850435][ T9296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.241891][ T5849] Bluetooth: hci4: command tx timeout [ 356.363315][ T9296] veth0_vlan: entered promiscuous mode [ 356.423345][ T9296] veth1_vlan: entered promiscuous mode [ 356.426858][ T9347] [U]  [ 356.431756][ T9347] [U] [ 356.434530][ T9347] [U] [ 356.437293][ T9347] [U] [ 356.491759][ T9347] [U] [ 356.494640][ T9347] [U] [ 356.497392][ T9347] [U] [ 356.500134][ T9347] [U] [ 356.519673][ T9296] veth0_macvtap: entered promiscuous mode [ 356.550299][ T9349] [U] [ 356.570990][ T9351] random: crng reseeded on system resumption [ 356.582773][ T9296] veth1_macvtap: entered promiscuous mode [ 356.643101][ T9296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.677440][ T9296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.717982][ T9296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.790407][ T9296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.801141][ T9296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.811700][ T9296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.821622][ T9296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.832153][ T9296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.878549][ T9296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.972734][ T9296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.352131][ T9296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.362889][ T9296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.373811][ T9296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.384029][ T9296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.394808][ T9296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.405410][ T9296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.416208][ T9296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.434227][ T9296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.514745][ T9296] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.608020][ T9296] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.667077][ T9296] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.711920][ T9296] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.331719][ T5849] Bluetooth: hci4: command tx timeout [ 358.491041][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.547695][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.771961][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.810179][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.312969][ T9374] FAULT_INJECTION: forcing a failure. [ 359.312969][ T9374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.357552][ T9374] CPU: 0 UID: 0 PID: 9374 Comm: syz.5.803 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 359.357605][ T9374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 359.357623][ T9374] Call Trace: [ 359.357632][ T9374] [ 359.357643][ T9374] dump_stack_lvl+0x16c/0x1f0 [ 359.357687][ T9374] should_fail_ex+0x512/0x640 [ 359.357722][ T9374] _copy_from_user+0x2e/0xd0 [ 359.357758][ T9374] copy_msghdr_from_user+0x98/0x160 [ 359.357803][ T9374] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 359.357859][ T9374] ___sys_sendmsg+0xfe/0x1d0 [ 359.357903][ T9374] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.357977][ T9374] __sys_sendmsg+0x16d/0x220 [ 359.358019][ T9374] ? __pfx___sys_sendmsg+0x10/0x10 [ 359.358070][ T9374] ? rcu_is_watching+0x12/0xc0 [ 359.358108][ T9374] do_syscall_64+0xcd/0x260 [ 359.358150][ T9374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.358180][ T9374] RIP: 0033:0x7fe94898d169 [ 359.358203][ T9374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.358239][ T9374] RSP: 002b:00007fe94979d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.358268][ T9374] RAX: ffffffffffffffda RBX: 00007fe948ba5fa0 RCX: 00007fe94898d169 [ 359.358289][ T9374] RDX: 0000000000000810 RSI: 0000200000002640 RDI: 0000000000000008 [ 359.358308][ T9374] RBP: 00007fe94979d090 R08: 0000000000000000 R09: 0000000000000000 [ 359.358326][ T9374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.358344][ T9374] R13: 0000000000000000 R14: 00007fe948ba5fa0 R15: 00007ffd47985298 [ 359.358377][ T9374] [ 359.533979][ T9374] netlink: 8 bytes leftover after parsing attributes in process `syz.5.803'. [ 360.405016][ T5849] Bluetooth: hci4: command tx timeout [ 361.098273][ T9392] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 361.302127][ T9393] netlink: 544 bytes leftover after parsing attributes in process `syz.0.822'. [ 361.706561][ T9399] netlink: 342 bytes leftover after parsing attributes in process `syz.0.825'. [ 362.261762][ T30] audit: type=1800 audit(6037988749.355:9): pid=9410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.828" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 369.273302][ T9502] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 369.307694][ T9502] CPU: 0 UID: 0 PID: 9502 Comm: syz.4.861 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 369.307740][ T9502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 369.307759][ T9502] Call Trace: [ 369.307769][ T9502] [ 369.307780][ T9502] dump_stack_lvl+0x16c/0x1f0 [ 369.307828][ T9502] sysfs_warn_dup+0x7f/0xa0 [ 369.307873][ T9502] sysfs_do_create_link_sd+0x124/0x140 [ 369.307923][ T9502] sysfs_create_link+0x61/0xc0 [ 369.307968][ T9502] device_add+0x62c/0x1a70 [ 369.308028][ T9502] ? __pfx_device_add+0x10/0x10 [ 369.308076][ T9502] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 369.308129][ T9502] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 369.308176][ T9502] wiphy_register+0x1c9c/0x2850 [ 369.308225][ T9502] ? netdev_run_todo+0x864/0x1320 [ 369.308271][ T9502] ? __dev_printk+0x1a0/0x270 [ 369.308312][ T9502] ? __pfx_wiphy_register+0x10/0x10 [ 369.308374][ T9502] ieee80211_register_hw+0x2432/0x4020 [ 369.308430][ T9502] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 369.308477][ T9502] ? find_held_lock+0x2b/0x80 [ 369.308512][ T9502] ? __asan_memset+0x23/0x50 [ 369.308552][ T9502] ? __hrtimer_init+0x106/0x2c0 [ 369.308601][ T9502] mac80211_hwsim_new_radio+0x3041/0x54f0 [ 369.308667][ T9502] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 369.308742][ T9502] hwsim_new_radio_nl+0xb51/0x12c0 [ 369.308792][ T9502] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 369.308849][ T9502] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 369.308901][ T9502] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 369.308957][ T9502] genl_family_rcv_msg_doit+0x206/0x2f0 [ 369.309006][ T9502] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 369.309061][ T9502] ? trace_cap_capable+0x18d/0x200 [ 369.309105][ T9502] ? bpf_lsm_capable+0x9/0x10 [ 369.309135][ T9502] ? security_capable+0x7e/0x260 [ 369.309173][ T9502] ? ns_capable+0xd7/0x110 [ 369.309209][ T9502] genl_rcv_msg+0x55c/0x800 [ 369.309259][ T9502] ? __pfx_genl_rcv_msg+0x10/0x10 [ 369.309305][ T9502] ? __pfx___dev_queue_xmit+0x10/0x10 [ 369.309340][ T9502] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 369.309390][ T9502] ? __lock_acquire+0xaa4/0x1ba0 [ 369.309437][ T9502] netlink_rcv_skb+0x16a/0x440 [ 369.309477][ T9502] ? __pfx_genl_rcv_msg+0x10/0x10 [ 369.309526][ T9502] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 369.309580][ T9502] ? __pfx_down_read+0x10/0x10 [ 369.309626][ T9502] ? netlink_deliver_tap+0x1ae/0xd30 [ 369.309668][ T9502] genl_rcv+0x28/0x40 [ 369.309709][ T9502] netlink_unicast+0x53a/0x7f0 [ 369.309752][ T9502] ? __pfx_netlink_unicast+0x10/0x10 [ 369.309797][ T9502] ? __phys_addr_symbol+0x30/0x80 [ 369.309841][ T9502] ? __check_object_size+0x4c7/0x710 [ 369.309893][ T9502] netlink_sendmsg+0x8da/0xd70 [ 369.309938][ T9502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.309992][ T9502] ____sys_sendmsg+0xa8d/0xc60 [ 369.310031][ T9502] ? copy_msghdr_from_user+0x10a/0x160 [ 369.310075][ T9502] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.310120][ T9502] ___sys_sendmsg+0x134/0x1d0 [ 369.310165][ T9502] ? __pfx____sys_sendmsg+0x10/0x10 [ 369.310245][ T9502] __sys_sendmsg+0x16d/0x220 [ 369.310289][ T9502] ? __pfx___sys_sendmsg+0x10/0x10 [ 369.310333][ T9502] ? __x64_sys_futex+0x1e0/0x4c0 [ 369.310379][ T9502] ? rcu_is_watching+0x12/0xc0 [ 369.310419][ T9502] do_syscall_64+0xcd/0x260 [ 369.310463][ T9502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.310495][ T9502] RIP: 0033:0x7f7f44b8d169 [ 369.310523][ T9502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.310557][ T9502] RSP: 002b:00007f7f429f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.310588][ T9502] RAX: ffffffffffffffda RBX: 00007f7f44da5fa0 RCX: 00007f7f44b8d169 [ 369.310610][ T9502] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 0000000000000004 [ 369.310631][ T9502] RBP: 00007f7f44c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 369.310652][ T9502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.310671][ T9502] R13: 0000000000000000 R14: 00007f7f44da5fa0 R15: 00007ffc3ac64788 [ 369.310707][ T9502] [ 369.714366][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.670535][ T9529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.859'. [ 371.740591][ T9533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.859'. [ 372.547326][ T9542] netlink: 'syz.3.862': attribute type 1 has an invalid length. [ 374.652302][ T9524] kexec: Could not allocate control_code_buffer [ 375.817796][ T9586] FAULT_INJECTION: forcing a failure. [ 375.817796][ T9586] name failslab, interval 1, probability 0, space 0, times 0 [ 376.068905][ T9586] CPU: 1 UID: 0 PID: 9586 Comm: syz.0.873 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 376.068954][ T9586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 376.068972][ T9586] Call Trace: [ 376.068981][ T9586] [ 376.068993][ T9586] dump_stack_lvl+0x16c/0x1f0 [ 376.069036][ T9586] should_fail_ex+0x512/0x640 [ 376.069068][ T9586] ? __kmalloc_noprof+0xbf/0x510 [ 376.069114][ T9586] ? anon_vma_name_alloc+0x56/0x110 [ 376.069142][ T9586] should_failslab+0xc2/0x120 [ 376.069198][ T9586] __kmalloc_noprof+0xd2/0x510 [ 376.069259][ T9586] anon_vma_name_alloc+0x56/0x110 [ 376.069292][ T9586] __do_sys_prctl+0x1129/0x2450 [ 376.069335][ T9586] ? __pfx___do_sys_prctl+0x10/0x10 [ 376.069365][ T9586] ? rcu_is_watching+0x12/0xc0 [ 376.069404][ T9586] do_syscall_64+0xcd/0x260 [ 376.069455][ T9586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.069487][ T9586] RIP: 0033:0x7f0e5cb8d169 [ 376.069510][ T9586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.069541][ T9586] RSP: 002b:00007f0e5d951038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 376.069570][ T9586] RAX: ffffffffffffffda RBX: 00007f0e5cda6080 RCX: 00007f0e5cb8d169 [ 376.069591][ T9586] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000053564d41 [ 376.069609][ T9586] RBP: 00007f0e5d951090 R08: 0000000000000002 R09: 0000000000000000 [ 376.069628][ T9586] R10: 0000000000008002 R11: 0000000000000246 R12: 0000000000000001 [ 376.069647][ T9586] R13: 0000000000000000 R14: 00007f0e5cda6080 R15: 00007ffd5d6eaa78 [ 376.069681][ T9586] [ 376.612365][ T9592] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(320.8192.108), cmd(5) [ 379.972142][ T9647] netlink: Unknown conntrack attr (type=146, max=9) [ 382.957845][ T9683] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 383.058203][ T9687] netlink: 338 bytes leftover after parsing attributes in process `syz.3.901'. [ 383.142849][ T9685] netlink: 338 bytes leftover after parsing attributes in process `syz.3.901'. [ 383.685001][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.697552][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.303652][ T9714] netlink: Unknown conntrack attr (type=146, max=9) [ 386.175276][ T9722] netlink: 334 bytes leftover after parsing attributes in process `syz.3.912'. [ 387.029813][ T9728] FAULT_INJECTION: forcing a failure. [ 387.029813][ T9728] name failslab, interval 1, probability 0, space 0, times 0 [ 387.088958][ T9728] CPU: 1 UID: 0 PID: 9728 Comm: syz.3.914 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 387.089003][ T9728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 387.089021][ T9728] Call Trace: [ 387.089030][ T9728] [ 387.089042][ T9728] dump_stack_lvl+0x16c/0x1f0 [ 387.089087][ T9728] should_fail_ex+0x512/0x640 [ 387.089119][ T9728] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 387.089161][ T9728] should_failslab+0xc2/0x120 [ 387.089208][ T9728] __kmalloc_cache_noprof+0x6a/0x3e0 [ 387.089248][ T9728] ? usbdev_open+0x9d/0x8b0 [ 387.089279][ T9728] usbdev_open+0x9d/0x8b0 [ 387.089307][ T9728] ? kobject_get_unless_zero+0x156/0x1e0 [ 387.089352][ T9728] ? __pfx_usbdev_open+0x10/0x10 [ 387.089379][ T9728] ? chrdev_open+0x10b/0x6a0 [ 387.089437][ T9728] ? __pfx_usbdev_open+0x10/0x10 [ 387.089464][ T9728] chrdev_open+0x231/0x6a0 [ 387.089507][ T9728] ? __pfx_apparmor_file_open+0x10/0x10 [ 387.089550][ T9728] ? __pfx_chrdev_open+0x10/0x10 [ 387.089597][ T9728] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 387.089643][ T9728] do_dentry_open+0x741/0x1c10 [ 387.089684][ T9728] ? __pfx_chrdev_open+0x10/0x10 [ 387.089731][ T9728] ? inode_permission+0xdd/0x5f0 [ 387.089765][ T9728] vfs_open+0x82/0x3f0 [ 387.089792][ T9728] ? may_open+0x1f2/0x400 [ 387.089828][ T9728] path_openat+0x1e5e/0x2d40 [ 387.089882][ T9728] ? __pfx_path_openat+0x10/0x10 [ 387.089934][ T9728] do_filp_open+0x20b/0x470 [ 387.089979][ T9728] ? __pfx_do_filp_open+0x10/0x10 [ 387.090022][ T9728] ? find_held_lock+0x2b/0x80 [ 387.090072][ T9728] ? alloc_fd+0x420/0x760 [ 387.090120][ T9728] do_sys_openat2+0x11b/0x1d0 [ 387.090151][ T9728] ? __pfx_do_sys_openat2+0x10/0x10 [ 387.090184][ T9728] ? __fget_files+0x20e/0x3c0 [ 387.090223][ T9728] ? __up_read+0x1b0/0x750 [ 387.090271][ T9728] __x64_sys_openat+0x174/0x210 [ 387.090303][ T9728] ? __pfx___x64_sys_openat+0x10/0x10 [ 387.090334][ T9728] ? ksys_write+0x1b9/0x240 [ 387.090384][ T9728] do_syscall_64+0xcd/0x260 [ 387.090433][ T9728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.090463][ T9728] RIP: 0033:0x7f322cd8d169 [ 387.090486][ T9728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.090517][ T9728] RSP: 002b:00007f322dca6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 387.090545][ T9728] RAX: ffffffffffffffda RBX: 00007f322cfa6080 RCX: 00007f322cd8d169 [ 387.090565][ T9728] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 387.090585][ T9728] RBP: 00007f322dca6090 R08: 0000000000000000 R09: 0000000000000000 [ 387.090604][ T9728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.090622][ T9728] R13: 0000000000000001 R14: 00007f322cfa6080 R15: 00007ffe4401cb18 [ 387.090656][ T9728] [ 387.372831][ C1] vkms_vblank_simulate: vblank timer overrun [ 387.965965][ T9734] random: crng reseeded on system resumption [ 394.608219][ T9862] netlink: 330 bytes leftover after parsing attributes in process `syz.5.940'. [ 394.637685][ T9862] netlink: 'syz.5.940': attribute type 14 has an invalid length. [ 394.646061][ T9862] netlink: 330 bytes leftover after parsing attributes in process `syz.5.940'. [ 398.181952][ T9908] netlink: 334 bytes leftover after parsing attributes in process `syz.4.950'. [ 403.293868][ T9973] netlink: 334 bytes leftover after parsing attributes in process `syz.3.969'. [ 404.222148][ T9983] ubi: mtd0 is already attached to ubi0 [ 405.731873][ T9991] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fe00 [ 405.777878][ T9991] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 405.786477][ T9991] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 405.857044][ T9991] page_type: f5(slab) [ 405.861127][ T9991] raw: 00fff00000000040 ffff88801b042140 dead000000000122 0000000000000000 [ 405.997067][ T9991] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 406.005744][ T9991] head: 00fff00000000040 ffff88801b042140 dead000000000122 0000000000000000 [ 406.200193][ T9991] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 406.247599][ T9991] head: 00fff00000000003 ffffea0001ff8001 ffffffffffffffff 0000000000000000 [ 406.329363][ T9991] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 406.362138][ T9996] could not allocate digest TFM handle binfmt_misc [ 406.472603][ T9991] page dumped because: unmovable page [ 406.502761][ T9991] page_owner tracks the page as allocated [ 406.541686][ T9991] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 36, tgid 36 (kworker/u8:2), ts 401222415528, free_ts 400274454939 [ 406.597160][ T9991] post_alloc_hook+0x181/0x1b0 [ 406.607418][ T9991] get_page_from_freelist+0x10c4/0x34c0 [ 406.627169][ T9991] __alloc_frozen_pages_noprof+0x223/0x24d0 [ 406.633169][ T9991] alloc_pages_mpol+0x1fb/0x540 [ 406.657043][ T9991] new_slab+0x23c/0x330 [ 406.661291][ T9991] ___slab_alloc+0xd9c/0x1940 [ 406.681524][ T9991] __slab_alloc.constprop.0+0x56/0xb0 [ 406.687964][ T9991] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 406.694474][ T9991] kmalloc_reserve+0xef/0x2c0 [ 406.703568][ T9991] __alloc_skb+0x166/0x380 [ 406.735049][ T9991] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 406.747058][ T9991] process_one_work+0x9cc/0x1b70 [ 406.752079][ T9991] worker_thread+0x6c1/0xef0 [ 406.777881][ T9991] kthread+0x3a4/0x760 [ 406.782130][ T9991] ret_from_fork+0x45/0x80 [ 406.786595][ T9991] ret_from_fork_asm+0x1a/0x30 [ 406.807668][ T9991] page last free pid 36 tgid 36 stack trace: [ 406.813729][ T9991] free_frozen_pages+0x6d8/0xf40 [ 406.837785][ T9991] __folio_put+0x329/0x450 [ 406.842381][ T9991] gup_put_folio+0x21a/0x2a0 [ 406.847156][ T9991] unpin_user_page+0xce/0x1e0 [ 406.851907][ T9991] io_free_rsrc_node+0x1ef/0x420 [ 406.868206][ T9991] io_sqe_buffers_unregister+0x260/0x360 [ 406.873946][ T9991] io_ring_exit_work+0x6ef/0xf50 [ 406.889888][ T9991] process_one_work+0x9cc/0x1b70 [ 406.894911][ T9991] worker_thread+0x6c1/0xef0 [ 406.901224][ T9991] kthread+0x3a4/0x760 [ 406.905374][ T9991] ret_from_fork+0x45/0x80 [ 406.910988][ T9991] ret_from_fork_asm+0x1a/0x30 [ 407.526178][T10030] netlink: 544 bytes leftover after parsing attributes in process `syz.4.979'. [ 408.049609][T10045] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(4) [ 408.833580][T10051] sp0: Synchronizing with TNC [ 410.576403][T10077] netlink: 334 bytes leftover after parsing attributes in process `syz.3.992'. [ 414.234969][T10125] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1005'. [ 415.581207][T10139] sp0: Synchronizing with TNC [ 417.621016][T10161] FAULT_INJECTION: forcing a failure. [ 417.621016][T10161] name failslab, interval 1, probability 0, space 0, times 0 [ 417.657861][T10161] CPU: 0 UID: 0 PID: 10161 Comm: syz.3.1016 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 417.657903][T10161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 417.657920][T10161] Call Trace: [ 417.657929][T10161] [ 417.657939][T10161] dump_stack_lvl+0x16c/0x1f0 [ 417.657984][T10161] should_fail_ex+0x512/0x640 [ 417.658014][T10161] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 417.658058][T10161] should_failslab+0xc2/0x120 [ 417.658115][T10161] __kmalloc_cache_noprof+0x6a/0x3e0 [ 417.658152][T10161] ? __asan_memset+0x23/0x50 [ 417.658190][T10161] ? snd_pcm_oss_change_params_locked+0x6f4/0x3b40 [ 417.658230][T10161] snd_pcm_oss_change_params_locked+0x6f4/0x3b40 [ 417.658273][T10161] ? rcu_is_watching+0x12/0xc0 [ 417.658307][T10161] ? lockdep_hardirqs_on+0x7c/0x110 [ 417.658348][T10161] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 417.658380][T10161] ? find_held_lock+0x2b/0x80 [ 417.658410][T10161] ? __pfx___mutex_lock+0x10/0x10 [ 417.658447][T10161] ? tomoyo_path_number_perm+0x295/0x580 [ 417.658503][T10161] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 417.658540][T10161] snd_pcm_oss_get_formats+0x7e/0x340 [ 417.658568][T10161] ? find_held_lock+0x2b/0x80 [ 417.658598][T10161] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 417.658626][T10161] ? __might_fault+0x13b/0x190 [ 417.658659][T10161] snd_pcm_oss_ioctl+0x2efb/0x37a0 [ 417.658690][T10161] ? find_held_lock+0x2b/0x80 [ 417.658720][T10161] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 417.658754][T10161] ? __fget_files+0x20e/0x3c0 [ 417.658798][T10161] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 417.658832][T10161] __x64_sys_ioctl+0x190/0x200 [ 417.658867][T10161] do_syscall_64+0xcd/0x260 [ 417.658907][T10161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.658937][T10161] RIP: 0033:0x7f322cd8d169 [ 417.658959][T10161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.658988][T10161] RSP: 002b:00007f322dcc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 417.659015][T10161] RAX: ffffffffffffffda RBX: 00007f322cfa5fa0 RCX: 00007f322cd8d169 [ 417.659034][T10161] RDX: 0000200000000100 RSI: 00000000c0045005 RDI: 0000000000000003 [ 417.659053][T10161] RBP: 00007f322dcc7090 R08: 0000000000000000 R09: 0000000000000000 [ 417.659071][T10161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.659088][T10161] R13: 0000000000000000 R14: 00007f322cfa5fa0 R15: 00007ffe4401cb18 [ 417.659127][T10161] [ 418.509312][T10172] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1018'. [ 419.639983][T10182] sp0: Synchronizing with TNC [ 420.430010][T10193] FAULT_INJECTION: forcing a failure. [ 420.430010][T10193] name failslab, interval 1, probability 0, space 0, times 0 [ 420.490093][T10193] CPU: 0 UID: 0 PID: 10193 Comm: syz.4.1025 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 420.490139][T10193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 420.490159][T10193] Call Trace: [ 420.490169][T10193] [ 420.490181][T10193] dump_stack_lvl+0x16c/0x1f0 [ 420.490229][T10193] should_fail_ex+0x512/0x640 [ 420.490262][T10193] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 420.490309][T10193] should_failslab+0xc2/0x120 [ 420.490360][T10193] __kmalloc_cache_noprof+0x6a/0x3e0 [ 420.490402][T10193] ? __io_uring_add_tctx_node+0x132/0x500 [ 420.490457][T10193] __io_uring_add_tctx_node+0x132/0x500 [ 420.490505][T10193] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 420.490555][T10193] ? __anon_inode_getfile+0x18b/0x370 [ 420.490607][T10193] io_uring_setup+0x15a6/0x2180 [ 420.490648][T10193] ? __pfx_io_uring_setup+0x10/0x10 [ 420.490709][T10193] ? rcu_is_watching+0x12/0xc0 [ 420.490747][T10193] __x64_sys_io_uring_setup+0x98/0x140 [ 420.490787][T10193] do_syscall_64+0xcd/0x260 [ 420.490831][T10193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.490862][T10193] RIP: 0033:0x7f7f44b8d169 [ 420.490896][T10193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.490927][T10193] RSP: 002b:00007f7f429d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 420.490958][T10193] RAX: ffffffffffffffda RBX: 00007f7f44da6080 RCX: 00007f7f44b8d169 [ 420.490980][T10193] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 420.490999][T10193] RBP: 00007f7f44c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 420.491019][T10193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.491038][T10193] R13: 0000000000000000 R14: 00007f7f44da6080 R15: 00007ffc3ac64788 [ 420.491073][T10193] [ 423.411745][T10238] sp0: Synchronizing with TNC [ 425.137528][T10264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1041'. [ 425.155032][T10261] snd_aloop snd_aloop.0: control 16781581:65535:6:'x?F/zF˷fC:0 is already present [ 425.192064][T10264] openvswitch: HfR: Dropping previously announced user features [ 425.216965][T10264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1041'. [ 425.559309][T10273] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 425.586865][T10273] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 425.950269][T10283] sp0: Synchronizing with TNC [ 426.636532][T10290] FAULT_INJECTION: forcing a failure. [ 426.636532][T10290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.722079][T10290] CPU: 1 UID: 0 PID: 10290 Comm: syz.4.1049 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 426.722120][T10290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 426.722137][T10290] Call Trace: [ 426.722145][T10290] [ 426.722157][T10290] dump_stack_lvl+0x16c/0x1f0 [ 426.722200][T10290] should_fail_ex+0x512/0x640 [ 426.722235][T10290] _copy_from_user+0x2e/0xd0 [ 426.722271][T10290] vmemdup_user+0x78/0xe0 [ 426.722306][T10290] __sys_bpf+0x3d9b/0x4c80 [ 426.722358][T10290] ? __pfx___sys_bpf+0x10/0x10 [ 426.722403][T10290] ? do_writev+0x218/0x330 [ 426.722453][T10290] ? do_futex+0x122/0x350 [ 426.722489][T10290] ? __pfx_do_futex+0x10/0x10 [ 426.722536][T10290] ? xfd_validate_state+0x5d/0x180 [ 426.722566][T10290] ? rcu_is_watching+0x12/0xc0 [ 426.722600][T10290] __x64_sys_bpf+0x78/0xc0 [ 426.722642][T10290] ? lockdep_hardirqs_on+0x7c/0x110 [ 426.722678][T10290] do_syscall_64+0xcd/0x260 [ 426.722718][T10290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.722748][T10290] RIP: 0033:0x7f7f44b8d169 [ 426.722771][T10290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.722801][T10290] RSP: 002b:00007f7f429d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 426.722830][T10290] RAX: ffffffffffffffda RBX: 00007f7f44da6080 RCX: 00007f7f44b8d169 [ 426.722851][T10290] RDX: 000000000000000c RSI: 00002000000001c0 RDI: 0000000000000004 [ 426.722870][T10290] RBP: 00007f7f44c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 426.722888][T10290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.722907][T10290] R13: 0000000000000000 R14: 00007f7f44da6080 R15: 00007ffc3ac64788 [ 426.722940][T10290] [ 428.809340][T10326] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 428.831609][T10326] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 429.052181][T10333] snd_aloop snd_aloop.0: control 16781581:65535:6:'x?F/zF˷fC:0 is already present [ 430.953404][T10374] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 430.957569][T10376] snd_aloop snd_aloop.0: control 16781581:65535:6:'x?F/zF˷fC:0 is already present [ 430.989335][T10374] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 434.348858][T10430] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 434.372528][T10432] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1096'. [ 434.377192][T10430] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 434.980603][ T5849] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 437.172968][T10472] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 437.860128][T10469] ima: policy update failed [ 437.870043][ T30] audit: type=1802 audit(4294968386.119:10): pid=10469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1098" res=0 errno=0 [ 440.704684][T10522] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1111'. [ 440.983262][T10528] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 441.881164][T10524] ima: policy update failed [ 441.915250][ T30] audit: type=1802 audit(4294968390.166:11): pid=10524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1113" res=0 errno=0 [ 444.409524][T10576] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1125'. [ 444.575469][T10579] FAULT_INJECTION: forcing a failure. [ 444.575469][T10579] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 444.651842][T10579] CPU: 0 UID: 0 PID: 10579 Comm: syz.3.1126 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 444.651886][T10579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 444.651901][T10579] Call Trace: [ 444.651908][T10579] [ 444.651916][T10579] dump_stack_lvl+0x16c/0x1f0 [ 444.651950][T10579] should_fail_ex+0x512/0x640 [ 444.651976][T10579] should_fail_alloc_page+0xe7/0x130 [ 444.652014][T10579] prepare_alloc_pages.constprop.0+0x172/0x570 [ 444.652048][T10579] __alloc_frozen_pages_noprof+0x18f/0x24d0 [ 444.652085][T10579] ? __pfx_stack_trace_save+0x10/0x10 [ 444.652112][T10579] ? __memcg_kmem_charge_page+0x218/0x420 [ 444.652148][T10579] ? stack_depot_save_flags+0x29/0x9c0 [ 444.652172][T10579] ? rcu_is_watching+0x12/0xc0 [ 444.652198][T10579] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 444.652232][T10579] ? __kasan_slab_alloc+0x89/0x90 [ 444.652265][T10579] ? __pmd_alloc+0xc3/0x870 [ 444.652291][T10579] ? handle_mm_fault+0x3fa/0xaa0 [ 444.652321][T10579] ? do_user_addr_fault+0x7a9/0x1430 [ 444.652356][T10579] ? exc_page_fault+0x5c/0xc0 [ 444.652389][T10579] ? asm_exc_page_fault+0x26/0x30 [ 444.652417][T10579] ? rep_movs_alternative+0xf/0x70 [ 444.652444][T10579] ? _copy_from_user+0x98/0xd0 [ 444.652477][T10579] ? kimage_load_segment+0x393/0x750 [ 444.652535][T10579] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 444.652578][T10579] ? policy_nodemask+0xea/0x4e0 [ 444.652620][T10579] alloc_pages_mpol+0x1fb/0x540 [ 444.652661][T10579] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 444.652702][T10579] ? cgroup_rstat_updated+0x2a/0xb20 [ 444.652733][T10579] alloc_pages_noprof+0x131/0x390 [ 444.652774][T10579] pte_alloc_one+0x19/0x380 [ 444.652804][T10579] do_pte_missing+0x1b1c/0x3ea0 [ 444.652840][T10579] ? do_raw_spin_unlock+0x172/0x230 [ 444.652866][T10579] ? __pmd_alloc+0x3c2/0x870 [ 444.652894][T10579] ? find_held_lock+0x2b/0x80 [ 444.652921][T10579] __handle_mm_fault+0x1043/0x2a50 [ 444.652963][T10579] ? __pfx___handle_mm_fault+0x10/0x10 [ 444.653012][T10579] ? find_vma+0xbf/0x140 [ 444.653039][T10579] ? __pfx_find_vma+0x10/0x10 [ 444.653065][T10579] ? rep_movs_alternative+0xf/0x70 [ 444.653092][T10579] handle_mm_fault+0x3fa/0xaa0 [ 444.653133][T10579] do_user_addr_fault+0x7a9/0x1430 [ 444.653165][T10579] exc_page_fault+0x5c/0xc0 [ 444.653195][T10579] asm_exc_page_fault+0x26/0x30 [ 444.653219][T10579] RIP: 0010:rep_movs_alternative+0xf/0x70 [ 444.653245][T10579] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 444.653271][T10579] RSP: 0000:ffffc9000528fda8 EFLAGS: 00050202 [ 444.653292][T10579] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 [ 444.653308][T10579] RDX: ffffed100fdb9801 RSI: 0000000000000000 RDI: ffff88807edcc000 [ 444.653325][T10579] RBP: 0000000000000002 R08: 0000000000000001 R09: ffffed100fdb9800 [ 444.653348][T10579] R10: ffff88807edcc001 R11: 0000000000000000 R12: 0000000000000000 [ 444.653364][T10579] R13: ffff88807edcc000 R14: ffff88807d26b800 R15: 0000000000000000 [ 444.653393][T10579] _copy_from_user+0x98/0xd0 [ 444.653425][T10579] kimage_load_segment+0x393/0x750 [ 444.653472][T10579] do_kexec_load+0x6fe/0x8d0 [ 444.653497][T10579] ? __pfx_do_kexec_load+0x10/0x10 [ 444.653523][T10579] ? _copy_from_user+0x59/0xd0 [ 444.653556][T10579] __x64_sys_kexec_load+0x1bf/0x230 [ 444.653583][T10579] do_syscall_64+0xcd/0x260 [ 444.653618][T10579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.653644][T10579] RIP: 0033:0x7f322cd8d169 [ 444.653663][T10579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.653689][T10579] RSP: 002b:00007f322dcc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 444.653712][T10579] RAX: ffffffffffffffda RBX: 00007f322cfa5fa0 RCX: 00007f322cd8d169 [ 444.653745][T10579] RDX: 0000200000000080 RSI: 0000000000000002 RDI: 00000000000000ff [ 444.653761][T10579] RBP: 00007f322dcc7090 R08: 0000000000000000 R09: 0000000000000000 [ 444.653777][T10579] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 444.653792][T10579] R13: 0000000000000000 R14: 00007f322cfa5fa0 R15: 00007ffe4401cb18 [ 444.653821][T10579] [ 445.137410][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.144022][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.163384][T10585] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 445.235018][ T5849] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 445.917917][T10581] ima: policy update failed [ 445.993856][ T30] audit: type=1802 audit(4294968394.244:12): pid=10581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1127" res=0 errno=0 [ 447.133697][T10620] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1138'. [ 448.004481][T10641] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1146'. [ 448.083125][ T5849] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 450.945391][T10680] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1154'. [ 451.918837][T10699] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1159'. [ 452.268304][T10706] netlink: zone id is out of range [ 452.273840][T10706] netlink: zone id is out of range [ 452.405267][T10706] netlink: zone id is out of range [ 452.425319][T10706] netlink: zone id is out of range [ 452.430529][T10706] netlink: zone id is out of range [ 452.485376][T10706] netlink: zone id is out of range [ 452.490548][T10706] netlink: zone id is out of range [ 452.585322][T10706] netlink: zone id is out of range [ 452.590585][T10706] netlink: zone id is out of range [ 452.662580][T10706] netlink: zone id is out of range [ 457.820512][T10797] FAULT_INJECTION: forcing a failure. [ 457.820512][T10797] name failslab, interval 1, probability 0, space 0, times 0 [ 457.919950][T10797] CPU: 0 UID: 0 PID: 10797 Comm: syz.5.1184 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 457.919994][T10797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 457.920012][T10797] Call Trace: [ 457.920022][T10797] [ 457.920034][T10797] dump_stack_lvl+0x16c/0x1f0 [ 457.920079][T10797] should_fail_ex+0x512/0x640 [ 457.920110][T10797] ? fs_reclaim_acquire+0xae/0x150 [ 457.920148][T10797] ? tomoyo_encode2+0x100/0x3e0 [ 457.920192][T10797] should_failslab+0xc2/0x120 [ 457.920240][T10797] __kmalloc_noprof+0xd2/0x510 [ 457.920284][T10797] ? d_absolute_path+0x136/0x1a0 [ 457.920326][T10797] tomoyo_encode2+0x100/0x3e0 [ 457.920384][T10797] tomoyo_encode+0x29/0x50 [ 457.920429][T10797] tomoyo_realpath_from_path+0x18f/0x6e0 [ 457.920486][T10797] tomoyo_path_number_perm+0x245/0x580 [ 457.920526][T10797] ? tomoyo_path_number_perm+0x237/0x580 [ 457.920571][T10797] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 457.920615][T10797] ? find_held_lock+0x2b/0x80 [ 457.920670][T10797] ? find_held_lock+0x2b/0x80 [ 457.920702][T10797] ? __fget_files+0x204/0x3c0 [ 457.920749][T10797] ? __fget_files+0x20e/0x3c0 [ 457.920797][T10797] security_file_ioctl+0x9b/0x240 [ 457.920841][T10797] __x64_sys_ioctl+0xb7/0x200 [ 457.920879][T10797] do_syscall_64+0xcd/0x260 [ 457.920921][T10797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.920952][T10797] RIP: 0033:0x7fe94898d169 [ 457.920976][T10797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.921006][T10797] RSP: 002b:00007fe94979d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 457.921036][T10797] RAX: ffffffffffffffda RBX: 00007fe948ba5fa0 RCX: 00007fe94898d169 [ 457.921056][T10797] RDX: 0000000000000000 RSI: 00000000000007a6 RDI: 0000000000000003 [ 457.921075][T10797] RBP: 00007fe94979d090 R08: 0000000000000000 R09: 0000000000000000 [ 457.921094][T10797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.921112][T10797] R13: 0000000000000000 R14: 00007fe948ba5fa0 R15: 00007ffd47985298 [ 457.921147][T10797] [ 458.138438][T10797] ERROR: Out of memory at tomoyo_realpath_from_path. [ 459.123405][T10817] netlink: 'syz.4.1190': attribute type 1 has an invalid length. [ 459.170479][T10817] netlink: 'syz.4.1190': attribute type 3 has an invalid length. [ 459.548548][T10811] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 459.580901][T10811] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 459.614375][T10811] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 459.661575][T10811] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 459.667660][T10811] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 459.705069][T10811] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 459.750903][T10811] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 460.451861][T10840] aoe: skb alloc failure [ 460.479887][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 460.486369][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 461.069803][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 461.620920][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 461.635142][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 461.703065][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout [ 461.709162][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 462.192978][T10864] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1202'. [ 462.548390][T10865] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1201'. [ 462.550572][T10861] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1201'. [ 462.741849][T10865] veth0_macvtap: left promiscuous mode [ 463.670595][T10894] FAULT_INJECTION: forcing a failure. [ 463.670595][T10894] name failslab, interval 1, probability 0, space 0, times 0 [ 463.739529][T10894] CPU: 0 UID: 0 PID: 10894 Comm: syz.4.1211 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 463.739574][T10894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 463.739592][T10894] Call Trace: [ 463.739601][T10894] [ 463.739612][T10894] dump_stack_lvl+0x16c/0x1f0 [ 463.739665][T10894] should_fail_ex+0x512/0x640 [ 463.739697][T10894] ? __kmalloc_noprof+0xbf/0x510 [ 463.739744][T10894] ? alloc_pipe_info+0x1ec/0x590 [ 463.739790][T10894] should_failslab+0xc2/0x120 [ 463.739837][T10894] __kmalloc_noprof+0xd2/0x510 [ 463.739885][T10894] alloc_pipe_info+0x1ec/0x590 [ 463.739934][T10894] splice_direct_to_actor+0x77d/0xa30 [ 463.739978][T10894] ? __pfx_direct_splice_actor+0x10/0x10 [ 463.740021][T10894] ? __pfx_aa_file_perm+0x10/0x10 [ 463.740070][T10894] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 463.740110][T10894] ? get_pid_task+0xfc/0x250 [ 463.740163][T10894] do_splice_direct+0x174/0x240 [ 463.740204][T10894] ? __pfx_do_splice_direct+0x10/0x10 [ 463.740246][T10894] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 463.740292][T10894] ? rw_verify_area+0xcf/0x680 [ 463.740329][T10894] do_sendfile+0xafd/0xe50 [ 463.740371][T10894] ? __pfx_do_sendfile+0x10/0x10 [ 463.740410][T10894] ? __fget_files+0x20e/0x3c0 [ 463.740460][T10894] __x64_sys_sendfile64+0x1d8/0x220 [ 463.740508][T10894] ? ksys_write+0x1b9/0x240 [ 463.740547][T10894] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 463.740595][T10894] ? rcu_is_watching+0x12/0xc0 [ 463.740635][T10894] do_syscall_64+0xcd/0x260 [ 463.740687][T10894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.740717][T10894] RIP: 0033:0x7f7f44b8d169 [ 463.740739][T10894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.740767][T10894] RSP: 002b:00007f7f429f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 463.740789][T10894] RAX: ffffffffffffffda RBX: 00007f7f44da5fa0 RCX: 00007f7f44b8d169 [ 463.740804][T10894] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 463.740821][T10894] RBP: 00007f7f429f6090 R08: 0000000000000000 R09: 0000000000000000 [ 463.740841][T10894] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 463.740858][T10894] R13: 0000000000000000 R14: 00007f7f44da5fa0 R15: 00007ffc3ac64788 [ 463.740890][T10894] [ 464.051162][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout [ 464.533142][T10897] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1212'. [ 465.314878][T10921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1220'. [ 465.420617][T10921] bond0: (slave bond_slave_1): Releasing backup interface [ 466.102137][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout [ 467.693774][T10968] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1231'. [ 467.707577][T10968] FAULT_INJECTION: forcing a failure. [ 467.707577][T10968] name failslab, interval 1, probability 0, space 0, times 0 [ 467.720852][T10968] CPU: 0 UID: 0 PID: 10968 Comm: syz.5.1231 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 467.720903][T10968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 467.720922][T10968] Call Trace: [ 467.720932][T10968] [ 467.720943][T10968] dump_stack_lvl+0x16c/0x1f0 [ 467.720989][T10968] should_fail_ex+0x512/0x640 [ 467.721020][T10968] ? lock_acquire+0x179/0x350 [ 467.721065][T10968] should_failslab+0xc2/0x120 [ 467.721113][T10968] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 467.721160][T10968] ? __alloc_skb+0x2b2/0x380 [ 467.721203][T10968] __alloc_skb+0x2b2/0x380 [ 467.721242][T10968] ? __pfx___alloc_skb+0x10/0x10 [ 467.721279][T10968] ? rt6_nlmsg_size+0xaf/0x450 [ 467.721313][T10968] ? rt6_get_route_info+0x980/0x9e0 [ 467.721381][T10968] inet6_rt_notify+0xc7/0x260 [ 467.721430][T10968] fib6_del+0xf5a/0x1770 [ 467.721471][T10968] ? __pfx_fib6_del+0x10/0x10 [ 467.721501][T10968] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 467.721549][T10968] ? fib6_ifdown+0xcd/0x8f0 [ 467.721586][T10968] fib6_clean_node+0x424/0x5b0 [ 467.721627][T10968] ? __pfx_fib6_clean_node+0x10/0x10 [ 467.721670][T10968] fib6_walk_continue+0x44f/0x8d0 [ 467.721724][T10968] fib6_walk+0x182/0x370 [ 467.721751][T10968] ? __pfx_fib6_ifdown+0x10/0x10 [ 467.721782][T10968] fib6_clean_tree+0xd4/0x110 [ 467.721810][T10968] ? __pfx_fib6_clean_tree+0x10/0x10 [ 467.721837][T10968] ? find_held_lock+0x2b/0x80 [ 467.721872][T10968] ? __pfx_fib6_clean_node+0x10/0x10 [ 467.721905][T10968] ? __pfx_fib6_ifdown+0x10/0x10 [ 467.721943][T10968] ? __pfx_fib6_ifdown+0x10/0x10 [ 467.721975][T10968] __fib6_clean_all+0x107/0x2d0 [ 467.722009][T10968] rt6_disable_ip+0x2ec/0x990 [ 467.722051][T10968] ? __mutex_trylock_common+0xe9/0x250 [ 467.722096][T10968] ? __pfx___mutex_trylock_common+0x10/0x10 [ 467.722142][T10968] ? __pfx_rt6_disable_ip+0x10/0x10 [ 467.722188][T10968] ? rcu_is_watching+0x12/0xc0 [ 467.722223][T10968] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 467.722261][T10968] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 467.722306][T10968] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 467.722352][T10968] addrconf_notify+0x220/0x19e0 [ 467.722392][T10968] ? ip6mr_device_event+0x1bc/0x230 [ 467.722439][T10968] notifier_call_chain+0xb9/0x410 [ 467.722479][T10968] ? __pfx_addrconf_notify+0x10/0x10 [ 467.722524][T10968] call_netdevice_notifiers_info+0xbe/0x140 [ 467.722556][T10968] dev_close_many+0x319/0x630 [ 467.722588][T10968] ? __pfx_dev_close_many+0x10/0x10 [ 467.722626][T10968] ? __pfx___mutex_trylock_common+0x10/0x10 [ 467.722673][T10968] unregister_netdevice_many_notify+0x493/0x1fa0 [ 467.722722][T10968] ? rcu_is_watching+0x12/0xc0 [ 467.722755][T10968] ? __mutex_lock+0x1cb/0xb00 [ 467.722796][T10968] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 467.722849][T10968] ? rtnl_dellink+0x27e/0xa90 [ 467.722893][T10968] ? unregister_netdevice_queue+0x22e/0x3f0 [ 467.722943][T10968] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 467.723005][T10968] rtnl_dellink+0x3d2/0xa90 [ 467.723043][T10968] ? __pfx_veth_dellink+0x10/0x10 [ 467.723084][T10968] ? kasan_save_stack+0x33/0x60 [ 467.723126][T10968] ? kasan_save_track+0x14/0x30 [ 467.723169][T10968] ? kasan_save_free_info+0x3b/0x60 [ 467.723204][T10968] ? __kasan_slab_free+0x51/0x70 [ 467.723250][T10968] ? __pfx_rtnl_dellink+0x10/0x10 [ 467.723288][T10968] ? nlmon_xmit+0xa5/0xe0 [ 467.723332][T10968] ? netlink_deliver_tap+0xa87/0xd30 [ 467.723368][T10968] ? netlink_unicast+0x5df/0x7f0 [ 467.723455][T10968] ? __lock_acquire+0x5ca/0x1ba0 [ 467.723502][T10968] ? rcu_is_watching+0x12/0xc0 [ 467.723531][T10968] ? trace_cap_capable+0x18d/0x200 [ 467.723574][T10968] ? find_held_lock+0x2b/0x80 [ 467.723613][T10968] ? __pfx_rtnl_dellink+0x10/0x10 [ 467.723653][T10968] ? __pfx_rtnl_dellink+0x10/0x10 [ 467.723692][T10968] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 467.723736][T10968] ? __pfx_rtnl_dellink+0x10/0x10 [ 467.723778][T10968] rtnetlink_rcv_msg+0x95b/0xe90 [ 467.723825][T10968] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 467.723880][T10968] netlink_rcv_skb+0x16a/0x440 [ 467.723919][T10968] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 467.723962][T10968] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 467.724016][T10968] ? netlink_deliver_tap+0x1ae/0xd30 [ 467.724058][T10968] netlink_unicast+0x53a/0x7f0 [ 467.724100][T10968] ? __pfx_netlink_unicast+0x10/0x10 [ 467.724142][T10968] ? __phys_addr_symbol+0x30/0x80 [ 467.724184][T10968] ? __check_object_size+0x4c7/0x710 [ 467.724237][T10968] netlink_sendmsg+0x8da/0xd70 [ 467.724277][T10968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.724320][T10968] ____sys_sendmsg+0xa8d/0xc60 [ 467.724349][T10968] ? copy_msghdr_from_user+0x10a/0x160 [ 467.724388][T10968] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.724418][T10968] ? kfree+0x252/0x4d0 [ 467.724457][T10968] ? schedule+0x2d7/0x3a0 [ 467.724491][T10968] ___sys_sendmsg+0x134/0x1d0 [ 467.724529][T10968] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.724587][T10968] ? __pfx___might_resched+0x10/0x10 [ 467.724632][T10968] __sys_sendmmsg+0x200/0x420 [ 467.724672][T10968] ? __pfx___sys_sendmmsg+0x10/0x10 [ 467.724718][T10968] ? __pfx_do_futex+0x10/0x10 [ 467.724774][T10968] ? xfd_validate_state+0x5d/0x180 [ 467.724803][T10968] ? rcu_is_watching+0x12/0xc0 [ 467.724835][T10968] __x64_sys_sendmmsg+0x9c/0x100 [ 467.724875][T10968] ? lockdep_hardirqs_on+0x7c/0x110 [ 467.724908][T10968] do_syscall_64+0xcd/0x260 [ 467.724946][T10968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.724974][T10968] RIP: 0033:0x7fe94898d169 [ 467.724995][T10968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.725022][T10968] RSP: 002b:00007fe94979d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 467.725049][T10968] RAX: ffffffffffffffda RBX: 00007fe948ba5fa0 RCX: 00007fe94898d169 [ 467.725068][T10968] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000007 [ 467.725085][T10968] RBP: 00007fe948a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 467.725102][T10968] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000000 [ 467.725118][T10968] R13: 0000000000000000 R14: 00007fe948ba5fa0 R15: 00007ffd47985298 [ 467.725148][T10968] [ 469.087606][T10968] bond0: (slave bond_slave_1): Releasing backup interface [ 470.735872][T10983] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 470.742500][T10983] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 470.749620][T10983] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 470.778657][T10983] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 470.816023][T10983] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 471.464882][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 472.745724][ T5849] Bluetooth: hci0: command 0x0406 tx timeout [ 472.826108][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout [ 472.832466][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 472.838521][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 473.671006][T11050] FAULT_INJECTION: forcing a failure. [ 473.671006][T11050] name failslab, interval 1, probability 0, space 0, times 0 [ 473.734936][T11050] CPU: 1 UID: 0 PID: 11050 Comm: syz.4.1249 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 473.734980][T11050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 473.735000][T11050] Call Trace: [ 473.735009][T11050] [ 473.735021][T11050] dump_stack_lvl+0x16c/0x1f0 [ 473.735065][T11050] should_fail_ex+0x512/0x640 [ 473.735095][T11050] ? fs_reclaim_acquire+0xae/0x150 [ 473.735132][T11050] ? tomoyo_encode2+0x100/0x3e0 [ 473.735179][T11050] should_failslab+0xc2/0x120 [ 473.735237][T11050] __kmalloc_noprof+0xd2/0x510 [ 473.735281][T11050] ? d_absolute_path+0x136/0x1a0 [ 473.735318][T11050] tomoyo_encode2+0x100/0x3e0 [ 473.735367][T11050] tomoyo_encode+0x29/0x50 [ 473.735412][T11050] tomoyo_realpath_from_path+0x18f/0x6e0 [ 473.735470][T11050] tomoyo_path_number_perm+0x245/0x580 [ 473.735510][T11050] ? tomoyo_path_number_perm+0x237/0x580 [ 473.735555][T11050] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 473.735599][T11050] ? find_held_lock+0x2b/0x80 [ 473.735656][T11050] ? find_held_lock+0x2b/0x80 [ 473.735687][T11050] ? __fget_files+0x204/0x3c0 [ 473.735735][T11050] ? __fget_files+0x20e/0x3c0 [ 473.735781][T11050] security_file_ioctl+0x9b/0x240 [ 473.735829][T11050] __x64_sys_ioctl+0xb7/0x200 [ 473.735866][T11050] do_syscall_64+0xcd/0x260 [ 473.735906][T11050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.735936][T11050] RIP: 0033:0x7f7f44b8d169 [ 473.735959][T11050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.735990][T11050] RSP: 002b:00007f7f429f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 473.736018][T11050] RAX: ffffffffffffffda RBX: 00007f7f44da5fa0 RCX: 00007f7f44b8d169 [ 473.736037][T11050] RDX: 00002000000000c0 RSI: 0000000000005452 RDI: 0000000000000003 [ 473.736056][T11050] RBP: 00007f7f429f6090 R08: 0000000000000000 R09: 0000000000000000 [ 473.736075][T11050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.736093][T11050] R13: 0000000000000000 R14: 00007f7f44da5fa0 R15: 00007ffc3ac64788 [ 473.736127][T11050] [ 474.003701][T11050] ERROR: Out of memory at tomoyo_realpath_from_path. [ 474.487920][T11061] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1253'. [ 474.628263][T11061] bond0: (slave bond_slave_1): Releasing backup interface [ 476.252710][T11093] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1261'. [ 476.843936][T11101] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1264'. [ 478.755039][T11129] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1271'. [ 481.944503][T11178] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1282'. [ 482.288724][T11188] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1285'. [ 482.629767][T11188] FAULT_INJECTION: forcing a failure. [ 482.629767][T11188] name failslab, interval 1, probability 0, space 0, times 0 [ 482.694351][T11188] CPU: 1 UID: 0 PID: 11188 Comm: syz.5.1285 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 482.694396][T11188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 482.694415][T11188] Call Trace: [ 482.694424][T11188] [ 482.694435][T11188] dump_stack_lvl+0x16c/0x1f0 [ 482.694480][T11188] should_fail_ex+0x512/0x640 [ 482.694511][T11188] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 482.694558][T11188] should_failslab+0xc2/0x120 [ 482.694612][T11188] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 482.694656][T11188] ? __pfx_acct_collect+0x10/0x10 [ 482.694701][T11188] ? taskstats_exit+0x654/0xbe0 [ 482.694748][T11188] taskstats_exit+0x654/0xbe0 [ 482.694794][T11188] ? __pfx_taskstats_exit+0x10/0x10 [ 482.694846][T11188] do_exit+0x84e/0x2d60 [ 482.694894][T11188] ? __pfx_do_exit+0x10/0x10 [ 482.694936][T11188] ? do_raw_spin_lock+0x12c/0x2b0 [ 482.694985][T11188] ? find_held_lock+0x2b/0x80 [ 482.695020][T11188] do_group_exit+0xd3/0x2a0 [ 482.695066][T11188] get_signal+0x24cf/0x26a0 [ 482.695105][T11188] ? __pfx___sys_sendmmsg+0x10/0x10 [ 482.695154][T11188] ? __pfx_get_signal+0x10/0x10 [ 482.695188][T11188] ? do_futex+0x122/0x350 [ 482.695223][T11188] ? __pfx_do_futex+0x10/0x10 [ 482.695262][T11188] arch_do_signal_or_restart+0x8f/0x7d0 [ 482.695306][T11188] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 482.695360][T11188] ? rcu_is_watching+0x12/0xc0 [ 482.695396][T11188] syscall_exit_to_user_mode+0x150/0x2a0 [ 482.695438][T11188] do_syscall_64+0xda/0x260 [ 482.695480][T11188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.695510][T11188] RIP: 0033:0x7fe94898d169 [ 482.695534][T11188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.695564][T11188] RSP: 002b:00007fe94979d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 482.695598][T11188] RAX: fffffffffffffe00 RBX: 00007fe948ba5fa8 RCX: 00007fe94898d169 [ 482.695619][T11188] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe948ba5fa8 [ 482.695638][T11188] RBP: 00007fe948ba5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 482.695657][T11188] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe948ba5fac [ 482.695676][T11188] R13: 0000000000000000 R14: 00007ffd479851b0 R15: 00007ffd47985298 [ 482.695710][T11188] [ 483.314914][T11200] ima: policy update failed [ 483.320261][ T30] audit: type=1802 audit(4294968433.549:13): pid=11200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1288" res=0 errno=0 [ 484.613690][T11225] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1294'. [ 484.858814][T11228] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1295'. [ 485.102329][T11228] FAULT_INJECTION: forcing a failure. [ 485.102329][T11228] name fail_futex, interval 1, probability 0, space 0, times 0 [ 485.151757][T11228] CPU: 0 UID: 0 PID: 11228 Comm: syz.3.1295 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 485.151799][T11228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 485.151818][T11228] Call Trace: [ 485.151826][T11228] [ 485.151837][T11228] dump_stack_lvl+0x16c/0x1f0 [ 485.151880][T11228] should_fail_ex+0x512/0x640 [ 485.151913][T11228] get_futex_key+0x1c2/0x1000 [ 485.151949][T11228] ? __pfx_get_futex_key+0x10/0x10 [ 485.151990][T11228] futex_wake+0xe7/0x4e0 [ 485.152029][T11228] ? rcu_is_watching+0x12/0xc0 [ 485.152062][T11228] ? __pfx_futex_wake+0x10/0x10 [ 485.152124][T11228] do_futex+0x1e3/0x350 [ 485.152160][T11228] ? __pfx_do_futex+0x10/0x10 [ 485.152191][T11228] ? __might_fault+0xe3/0x190 [ 485.152224][T11228] mm_release+0x24e/0x300 [ 485.152256][T11228] do_exit+0x887/0x2d60 [ 485.152302][T11228] ? __pfx_do_exit+0x10/0x10 [ 485.152344][T11228] ? do_raw_spin_lock+0x12c/0x2b0 [ 485.152393][T11228] ? find_held_lock+0x2b/0x80 [ 485.152428][T11228] do_group_exit+0xd3/0x2a0 [ 485.152474][T11228] get_signal+0x24cf/0x26a0 [ 485.152512][T11228] ? __pfx___sys_sendmmsg+0x10/0x10 [ 485.152560][T11228] ? __pfx_get_signal+0x10/0x10 [ 485.152596][T11228] ? do_futex+0x122/0x350 [ 485.152633][T11228] ? __pfx_do_futex+0x10/0x10 [ 485.152671][T11228] arch_do_signal_or_restart+0x8f/0x7d0 [ 485.152716][T11228] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 485.152767][T11228] ? rcu_is_watching+0x12/0xc0 [ 485.152802][T11228] syscall_exit_to_user_mode+0x150/0x2a0 [ 485.152842][T11228] do_syscall_64+0xda/0x260 [ 485.152884][T11228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.152916][T11228] RIP: 0033:0x7f322cd8d169 [ 485.152940][T11228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.152970][T11228] RSP: 002b:00007f322dcc70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 485.152999][T11228] RAX: fffffffffffffe00 RBX: 00007f322cfa5fa8 RCX: 00007f322cd8d169 [ 485.153020][T11228] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f322cfa5fa8 [ 485.153039][T11228] RBP: 00007f322cfa5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 485.153058][T11228] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f322cfa5fac [ 485.153077][T11228] R13: 0000000000000000 R14: 00007ffe4401ca30 R15: 00007ffe4401cb18 [ 485.153110][T11228] [ 486.746441][T11259] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1304'. [ 489.369503][T11292] FAULT_INJECTION: forcing a failure. [ 489.369503][T11292] name failslab, interval 1, probability 0, space 0, times 0 [ 489.413307][T11292] CPU: 1 UID: 0 PID: 11292 Comm: syz.4.1316 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 489.413348][T11292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 489.413366][T11292] Call Trace: [ 489.413374][T11292] [ 489.413386][T11292] dump_stack_lvl+0x16c/0x1f0 [ 489.413427][T11292] should_fail_ex+0x512/0x640 [ 489.413461][T11292] should_failslab+0xc2/0x120 [ 489.413505][T11292] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 489.413551][T11292] ? dst_alloc+0x99/0x1a0 [ 489.413586][T11292] ? __pfx_ip6_dst_gc+0x10/0x10 [ 489.413627][T11292] dst_alloc+0x99/0x1a0 [ 489.413665][T11292] ip6_rt_cache_alloc+0x1f6/0x8c0 [ 489.413703][T11292] ? __pfx_ip6_rt_cache_alloc+0x10/0x10 [ 489.413747][T11292] ip6_pol_route+0xd7b/0x1230 [ 489.413785][T11292] ? is_bpf_text_address+0x8a/0x1a0 [ 489.413826][T11292] ? __pfx_ip6_pol_route+0x10/0x10 [ 489.413867][T11292] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 489.413903][T11292] ? is_bpf_text_address+0x94/0x1a0 [ 489.413945][T11292] ? unwind_get_return_address+0x59/0xa0 [ 489.413981][T11292] ? arch_stack_walk+0xa6/0x100 [ 489.414031][T11292] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 489.414070][T11292] fib6_rule_lookup+0x24c/0x720 [ 489.414108][T11292] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 489.414142][T11292] ? stack_trace_save+0x8e/0xc0 [ 489.414186][T11292] ? kasan_save_stack+0x42/0x60 [ 489.414227][T11292] ? kasan_save_stack+0x33/0x60 [ 489.414269][T11292] ? kasan_record_aux_stack+0xb8/0xd0 [ 489.414309][T11292] ip6_route_output_flags+0x1d0/0x640 [ 489.414345][T11292] ip6_dst_lookup_tail.constprop.0+0x1157/0x2140 [ 489.414397][T11292] ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10 [ 489.414445][T11292] ? __lock_acquire+0x5ca/0x1ba0 [ 489.414495][T11292] ip6_dst_lookup_flow+0x99/0x1d0 [ 489.414536][T11292] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 489.414572][T11292] ? find_held_lock+0x2b/0x80 [ 489.414605][T11292] ? rawv6_sendmsg+0xa3a/0x46d0 [ 489.414641][T11292] rawv6_sendmsg+0xd87/0x46d0 [ 489.414684][T11292] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 489.414725][T11292] ? __lock_acquire+0x5ca/0x1ba0 [ 489.414777][T11292] ? __pfx___might_resched+0x10/0x10 [ 489.414825][T11292] ? __pfx_aa_sk_perm+0x10/0x10 [ 489.414864][T11292] ? __import_iovec+0x1c8/0x660 [ 489.414901][T11292] ? __might_fault+0xe3/0x190 [ 489.414927][T11292] ? __might_fault+0x13b/0x190 [ 489.414954][T11292] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 489.414989][T11292] ? inet_sendmsg+0x119/0x140 [ 489.415039][T11292] inet_sendmsg+0x119/0x140 [ 489.415085][T11292] ____sys_sendmsg+0x96b/0xc60 [ 489.415116][T11292] ? copy_msghdr_from_user+0x10a/0x160 [ 489.415155][T11292] ? __pfx_____sys_sendmsg+0x10/0x10 [ 489.415191][T11292] ? kfree+0x252/0x4d0 [ 489.415224][T11292] ? __pfx__kstrtoull+0x10/0x10 [ 489.415277][T11292] ___sys_sendmsg+0x134/0x1d0 [ 489.415319][T11292] ? __pfx____sys_sendmsg+0x10/0x10 [ 489.415383][T11292] ? __pfx___might_resched+0x10/0x10 [ 489.415422][T11292] __sys_sendmmsg+0x200/0x420 [ 489.415466][T11292] ? __pfx___sys_sendmmsg+0x10/0x10 [ 489.415516][T11292] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 489.415567][T11292] ? fput+0x70/0xf0 [ 489.415593][T11292] ? ksys_write+0x1b9/0x240 [ 489.415632][T11292] ? __pfx_ksys_write+0x10/0x10 [ 489.415670][T11292] ? rcu_is_watching+0x12/0xc0 [ 489.415704][T11292] __x64_sys_sendmmsg+0x9c/0x100 [ 489.415744][T11292] ? lockdep_hardirqs_on+0x7c/0x110 [ 489.415780][T11292] do_syscall_64+0xcd/0x260 [ 489.415819][T11292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.415848][T11292] RIP: 0033:0x7f7f44b8d169 [ 489.415871][T11292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.415899][T11292] RSP: 002b:00007f7f429f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 489.415927][T11292] RAX: ffffffffffffffda RBX: 00007f7f44da5fa0 RCX: 00007f7f44b8d169 [ 489.415947][T11292] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 489.415963][T11292] RBP: 00007f7f429f6090 R08: 0000000000000000 R09: 0000000000000000 [ 489.415982][T11292] R10: 0000000007fffffe R11: 0000000000000246 R12: 0000000000000002 [ 489.415999][T11292] R13: 0000000000000000 R14: 00007f7f44da5fa0 R15: 00007ffc3ac64788 [ 489.416037][T11292] [ 490.929363][T11293] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 490.937036][T11293] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 490.953577][T11293] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 490.960081][T11293] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 490.971062][T11293] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 491.258388][T11305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1319'. [ 491.290137][T11305] FAULT_INJECTION: forcing a failure. [ 491.290137][T11305] name failslab, interval 1, probability 0, space 0, times 0 [ 491.308205][T11305] CPU: 0 UID: 0 PID: 11305 Comm: syz.3.1319 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 491.308252][T11305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 491.308271][T11305] Call Trace: [ 491.308282][T11305] [ 491.308294][T11305] dump_stack_lvl+0x16c/0x1f0 [ 491.308343][T11305] should_fail_ex+0x512/0x640 [ 491.308375][T11305] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 491.308428][T11305] should_failslab+0xc2/0x120 [ 491.308477][T11305] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 491.308523][T11305] ? lockdep_init_map_type+0x5c/0x280 [ 491.308577][T11305] ? __d_alloc+0x31/0xaa0 [ 491.308609][T11305] __d_alloc+0x31/0xaa0 [ 491.308639][T11305] d_alloc_pseudo+0x1c/0xc0 [ 491.308677][T11305] alloc_file_pseudo+0xcf/0x230 [ 491.308710][T11305] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 491.308741][T11305] ? alloc_fd+0x420/0x760 [ 491.308787][T11305] sock_alloc_file+0x50/0x210 [ 491.308836][T11305] __sys_socket+0x1c0/0x260 [ 491.308870][T11305] ? __pfx___sys_socket+0x10/0x10 [ 491.308908][T11305] ? do_user_addr_fault+0x850/0x1430 [ 491.308943][T11305] __x64_sys_socket+0x72/0xb0 [ 491.308977][T11305] ? lockdep_hardirqs_on+0x7c/0x110 [ 491.309016][T11305] do_syscall_64+0xcd/0x260 [ 491.309059][T11305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.309091][T11305] RIP: 0033:0x7f322cd8f087 [ 491.309115][T11305] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.309147][T11305] RSP: 002b:00007f322dcc5fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 491.309176][T11305] RAX: ffffffffffffffda RBX: 00007f322cfa5fa0 RCX: 00007f322cd8f087 [ 491.309196][T11305] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 491.309215][T11305] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 491.309234][T11305] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 491.309252][T11305] R13: 0000000000000000 R14: 00007f322cfa5fa0 R15: 00007ffe4401cb18 [ 491.309286][T11305] [ 492.195396][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 492.297637][T11309] FAULT_INJECTION: forcing a failure. [ 492.297637][T11309] name failslab, interval 1, probability 0, space 0, times 0 [ 492.336820][T11309] CPU: 1 UID: 0 PID: 11309 Comm: syz.4.1320 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 492.336863][T11309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 492.336883][T11309] Call Trace: [ 492.336892][T11309] [ 492.336904][T11309] dump_stack_lvl+0x16c/0x1f0 [ 492.336950][T11309] should_fail_ex+0x512/0x640 [ 492.336977][T11309] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 492.337021][T11309] should_failslab+0xc2/0x120 [ 492.337065][T11309] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 492.337105][T11309] ? __d_alloc+0x31/0xaa0 [ 492.337131][T11309] __d_alloc+0x31/0xaa0 [ 492.337156][T11309] d_alloc+0x4a/0x1e0 [ 492.337180][T11309] d_alloc_parallel+0xe3/0x12d0 [ 492.337214][T11309] ? is_bpf_text_address+0x94/0x1a0 [ 492.337248][T11309] ? kernel_text_address+0x8d/0x100 [ 492.337274][T11309] ? __x64_sys_ioctl+0x190/0x200 [ 492.337304][T11309] ? __kernel_text_address+0xd/0x40 [ 492.337331][T11309] ? unwind_get_return_address+0x59/0xa0 [ 492.337363][T11309] ? __pfx_d_alloc_parallel+0x10/0x10 [ 492.337398][T11309] ? lockdep_init_map_type+0x5c/0x280 [ 492.337437][T11309] ? lockdep_init_map_type+0x5c/0x280 [ 492.337478][T11309] __lookup_slow+0x193/0x460 [ 492.337549][T11309] ? __pfx___lookup_slow+0x10/0x10 [ 492.337586][T11309] ? isolate_migratepages_block+0x4110/0x56f0 [ 492.337632][T11309] ? isolate_migratepages_block+0x4110/0x56f0 [ 492.337673][T11309] ? d_lookup+0xe7/0x190 [ 492.337709][T11309] lookup_one_len+0x17f/0x1b0 [ 492.337737][T11309] ? __pfx_lookup_one_len+0x10/0x10 [ 492.337768][T11309] ? mntput+0x10/0x90 [ 492.337803][T11309] start_creating.part.0+0x12f/0x3a0 [ 492.337837][T11309] __debugfs_create_file+0xa7/0x6b0 [ 492.337870][T11309] debugfs_create_file_full+0x41/0x60 [ 492.337905][T11309] kvm_dev_ioctl+0x14ff/0x1ad0 [ 492.337944][T11309] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 492.337983][T11309] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 492.338015][T11309] __x64_sys_ioctl+0x190/0x200 [ 492.338048][T11309] do_syscall_64+0xcd/0x260 [ 492.338084][T11309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.338110][T11309] RIP: 0033:0x7f7f44b8d169 [ 492.338130][T11309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.338156][T11309] RSP: 002b:00007f7f429f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 492.338182][T11309] RAX: ffffffffffffffda RBX: 00007f7f44da5fa0 RCX: 00007f7f44b8d169 [ 492.338199][T11309] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 492.338215][T11309] RBP: 00007f7f44c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 492.338231][T11309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.338247][T11309] R13: 0000000000000000 R14: 00007f7f44da5fa0 R15: 00007ffc3ac64788 [ 492.338274][T11309] [ 492.996129][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout [ 493.002208][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 493.008429][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 493.014658][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 493.041095][T11325] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1323'. [ 501.275652][T11435] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1351'. [ 501.326747][T11435] FAULT_INJECTION: forcing a failure. [ 501.326747][T11435] name failslab, interval 1, probability 0, space 0, times 0 [ 501.349883][T11435] CPU: 0 UID: 0 PID: 11435 Comm: syz.4.1351 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 501.349929][T11435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 501.349949][T11435] Call Trace: [ 501.349959][T11435] [ 501.349972][T11435] dump_stack_lvl+0x16c/0x1f0 [ 501.350019][T11435] should_fail_ex+0x512/0x640 [ 501.350052][T11435] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 501.350104][T11435] should_failslab+0xc2/0x120 [ 501.350163][T11435] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 501.350210][T11435] ? lockdep_init_map_type+0x5c/0x280 [ 501.350255][T11435] ? __d_alloc+0x31/0xaa0 [ 501.350286][T11435] __d_alloc+0x31/0xaa0 [ 501.350317][T11435] d_alloc_pseudo+0x1c/0xc0 [ 501.350353][T11435] alloc_file_pseudo+0xcf/0x230 [ 501.350388][T11435] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 501.350421][T11435] ? alloc_fd+0x420/0x760 [ 501.350467][T11435] sock_alloc_file+0x50/0x210 [ 501.350517][T11435] __sys_socket+0x1c0/0x260 [ 501.350550][T11435] ? __pfx___sys_socket+0x10/0x10 [ 501.350586][T11435] ? do_user_addr_fault+0x850/0x1430 [ 501.350621][T11435] __x64_sys_socket+0x72/0xb0 [ 501.350652][T11435] ? lockdep_hardirqs_on+0x7c/0x110 [ 501.350689][T11435] do_syscall_64+0xcd/0x260 [ 501.350731][T11435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.350762][T11435] RIP: 0033:0x7f7f44b8f087 [ 501.350786][T11435] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.350826][T11435] RSP: 002b:00007f7f429f4fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 501.350856][T11435] RAX: ffffffffffffffda RBX: 00007f7f44da5fa0 RCX: 00007f7f44b8f087 [ 501.350877][T11435] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 501.350896][T11435] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 501.350915][T11435] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 501.350933][T11435] R13: 0000000000000000 R14: 00007f7f44da5fa0 R15: 00007ffc3ac64788 [ 501.350974][T11435] [ 502.178071][T11452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1357'. [ 502.282409][T11452] FAULT_INJECTION: forcing a failure. [ 502.282409][T11452] name failslab, interval 1, probability 0, space 0, times 0 [ 502.312640][T11452] CPU: 0 UID: 0 PID: 11452 Comm: syz.3.1357 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 502.312687][T11452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 502.312707][T11452] Call Trace: [ 502.312717][T11452] [ 502.312729][T11452] dump_stack_lvl+0x16c/0x1f0 [ 502.312778][T11452] should_fail_ex+0x512/0x640 [ 502.312809][T11452] ? fs_reclaim_acquire+0xae/0x150 [ 502.312850][T11452] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 502.312903][T11452] should_failslab+0xc2/0x120 [ 502.312953][T11452] __kmalloc_noprof+0xd2/0x510 [ 502.313004][T11452] tomoyo_realpath_from_path+0xc2/0x6e0 [ 502.313066][T11452] ? tomoyo_profile+0x47/0x60 [ 502.313101][T11452] tomoyo_path_number_perm+0x245/0x580 [ 502.313144][T11452] ? tomoyo_path_number_perm+0x237/0x580 [ 502.313189][T11452] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 502.313259][T11452] ? find_held_lock+0x2b/0x80 [ 502.313293][T11452] ? __fget_files+0x204/0x3c0 [ 502.313341][T11452] ? __fget_files+0x20e/0x3c0 [ 502.313390][T11452] security_file_ioctl+0x9b/0x240 [ 502.313437][T11452] __x64_sys_ioctl+0xb7/0x200 [ 502.313476][T11452] do_syscall_64+0xcd/0x260 [ 502.313519][T11452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.313551][T11452] RIP: 0033:0x7f322cd8d169 [ 502.313576][T11452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.313611][T11452] RSP: 002b:00007f322dcc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 502.313642][T11452] RAX: ffffffffffffffda RBX: 00007f322cfa5fa0 RCX: 00007f322cd8d169 [ 502.313663][T11452] RDX: 0000200000000100 RSI: 0000000040044590 RDI: 0000000000000009 [ 502.313683][T11452] RBP: 00007f322ce0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 502.313703][T11452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.313722][T11452] R13: 0000000000000000 R14: 00007f322cfa5fa0 R15: 00007ffe4401cb18 [ 502.313758][T11452] [ 502.313839][T11452] ERROR: Out of memory at tomoyo_realpath_from_path. [ 504.388521][T11485] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1365'. [ 504.480431][T11485] FAULT_INJECTION: forcing a failure. [ 504.480431][T11485] name failslab, interval 1, probability 0, space 0, times 0 [ 504.574361][T11485] CPU: 1 UID: 0 PID: 11485 Comm: syz.3.1365 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 504.574409][T11485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 504.574428][T11485] Call Trace: [ 504.574438][T11485] [ 504.574450][T11485] dump_stack_lvl+0x16c/0x1f0 [ 504.574497][T11485] should_fail_ex+0x512/0x640 [ 504.574529][T11485] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 504.574581][T11485] should_failslab+0xc2/0x120 [ 504.574641][T11485] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 504.574691][T11485] ? sock_alloc_inode+0x25/0x1c0 [ 504.574724][T11485] ? __pfx_sock_alloc_inode+0x10/0x10 [ 504.574752][T11485] sock_alloc_inode+0x25/0x1c0 [ 504.574780][T11485] alloc_inode+0x61/0x240 [ 504.574813][T11485] sock_alloc+0x40/0x280 [ 504.574861][T11485] __sock_create+0xc1/0x8d0 [ 504.574899][T11485] __sys_socket+0x14d/0x260 [ 504.574933][T11485] ? __pfx___sys_socket+0x10/0x10 [ 504.574970][T11485] ? do_user_addr_fault+0x850/0x1430 [ 504.575007][T11485] __x64_sys_socket+0x72/0xb0 [ 504.575039][T11485] ? lockdep_hardirqs_on+0x7c/0x110 [ 504.575078][T11485] do_syscall_64+0xcd/0x260 [ 504.575121][T11485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.575153][T11485] RIP: 0033:0x7f322cd8f087 [ 504.575177][T11485] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.575209][T11485] RSP: 002b:00007f322dcc5fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 504.575239][T11485] RAX: ffffffffffffffda RBX: 00007f322cfa5fa0 RCX: 00007f322cd8f087 [ 504.575261][T11485] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 504.575280][T11485] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 504.575299][T11485] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 504.575318][T11485] R13: 0000000000000000 R14: 00007f322cfa5fa0 R15: 00007ffe4401cb18 [ 504.575353][T11485] [ 504.575368][T11485] net_ratelimit: 84 callbacks suppressed [ 504.575383][T11485] socket: no more sockets [ 504.791814][ T31] INFO: task syz.2.750:9106 blocked for more than 143 seconds. [ 504.802109][ T31] Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 [ 504.809584][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 504.818588][ T31] task:syz.2.750 state:D stack:29192 pid:9106 tgid:9101 ppid:5841 task_flags:0x400640 flags:0x00000004 [ 504.831012][ T31] Call Trace: [ 504.843313][ T31] [ 504.849693][ T31] __schedule+0x1129/0x5c00 [ 504.854796][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 504.859963][ T31] ? __pfx___schedule+0x10/0x10 [ 504.875723][ T31] ? find_held_lock+0x2b/0x80 [ 504.880646][ T31] ? schedule+0x2d7/0x3a0 [ 504.885375][ T31] schedule+0xe7/0x3a0 [ 504.889652][ T31] schedule_timeout+0x242/0x280 [ 504.895118][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 504.900771][ T31] ? rcu_is_watching+0x12/0xc0 [ 504.915403][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 504.920829][ T31] __wait_for_common+0x3df/0x600 [ 504.926412][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 504.932264][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 504.937943][ T31] ? __pfx_try_to_wake_up+0x10/0x10 [ 504.943698][ T31] ? rcu_is_watching+0x12/0xc0 [ 504.948662][ T31] wait_for_completion_state+0x1c/0x40 [ 504.954691][ T31] do_coredump+0x887/0x44a0 [ 504.959390][ T31] ? __kernel_text_address+0xd/0x40 [ 504.965299][ T31] ? unwind_get_return_address+0x59/0xa0 [ 504.971238][ T31] ? __pfx_do_coredump+0x10/0x10 [ 504.990266][ T31] ? stack_trace_save+0x8e/0xc0 [ 505.008794][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 505.027042][ T31] ? stack_depot_save_flags+0x29/0x9c0 [ 505.045868][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 505.063128][ T31] ? kasan_save_stack+0x42/0x60 [ 505.064008][T11484] caif:caif_disconnect_client(): nothing to disconnect [ 505.070362][ T31] ? kasan_save_stack+0x33/0x60 [ 505.100385][ T31] ? kasan_save_track+0x14/0x30 [ 505.111008][ T31] ? kasan_save_free_info+0x3b/0x60 [ 505.116744][ T31] ? __kasan_slab_free+0x51/0x70 [ 505.122158][ T31] ? kmem_cache_free+0x2d4/0x4d0 [ 505.127231][ T31] ? __sigqueue_free+0xba/0x2a0 [ 505.133315][ T31] ? get_signal+0xca9/0x26a0 [ 505.138099][ T31] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 505.144391][ T31] ? proc_coredump_connector+0x2d1/0x4f0 [ 505.150149][ T31] ? __pfx_proc_coredump_connector+0x10/0x10 [ 505.156684][ T31] ? rcu_is_watching+0x12/0xc0 [ 505.162313][ T31] get_signal+0x22ed/0x26a0 [ 505.167039][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 505.172838][ T31] ? __pfx_get_signal+0x10/0x10 [ 505.177868][ T31] ? force_sig_info_to_task+0x3a0/0x660 [ 505.184159][ T31] arch_do_signal_or_restart+0x8f/0x7d0 [ 505.189886][ T31] ? __pfx_force_exit_sig+0x10/0x10 [ 505.197323][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 505.204799][ T31] ? syscall_user_dispatch+0x120/0x140 [ 505.210494][ T31] syscall_exit_to_user_mode+0x150/0x2a0 [ 505.219832][ T31] do_syscall_64+0xda/0x260 [ 505.225444][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.231497][ T31] RIP: 0033:0x7fea7bb8d169 [ 505.236527][ T31] RSP: 002b:00007fea7ca850e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 505.245396][ T31] RAX: ffffffffffffffda RBX: 00007fea7bda6088 RCX: 00007fea7bb8d169 [ 505.253737][ T31] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fea7bda608c [ 505.262860][ T31] RBP: 00007fea7bda6080 R08: 00007fea7caa7000 R09: 0000000000000000 [ 505.270963][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fea7bda608c [ 505.279642][ T31] R13: 0000000000000000 R14: 00007ffe5235e410 R15: 00007ffe5235e4f8 [ 505.288344][ T31] [ 505.292066][ T31] [ 505.292066][ T31] Showing all locks held in the system: [ 505.321294][ T31] 1 lock held by khungtaskd/31: [ 505.339264][ T31] #0: ffffffff8e1be0c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 505.376620][ T31] 3 locks held by kworker/u8:2/36: [ 505.382232][ T31] #0: ffff8880b8639ed8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 505.392741][ T31] #1: ffff8880b8623c48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 505.404661][ T31] #2: ffff8880b86256d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x127/0x1d0 [ 505.414591][ T31] 2 locks held by kworker/u8:7/3018: [ 505.419997][ T31] #0: ffff8880b8639ed8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 505.430505][ T31] #1: ffff8880b8623c48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 505.442669][ T31] 2 locks held by kworker/u8:8/3491: [ 505.448302][ T31] #0: ffff8880b8739ed8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 505.460386][ T31] #1: ffff8880b8723c48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 505.477357][ T31] 2 locks held by getty/5598: [ 505.484728][ T31] #0: ffff8880312860a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 505.498884][ T31] #1: ffffc90002fd62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfa1/0x1450 [ 505.509437][ T31] 1 lock held by syz.2.750/9102: [ 505.518704][ T31] [ 505.521122][ T31] ============================================= [ 505.521122][ T31] [ 505.530846][ T31] NMI backtrace for cpu 1 [ 505.530866][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 505.530901][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 505.530919][ T31] Call Trace: [ 505.530927][ T31] [ 505.530938][ T31] dump_stack_lvl+0x116/0x1f0 [ 505.530980][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 505.531009][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 505.531038][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 505.531069][ T31] watchdog+0xf70/0x12c0 [ 505.531120][ T31] ? __pfx_watchdog+0x10/0x10 [ 505.531164][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 505.531201][ T31] ? __kthread_parkme+0x148/0x220 [ 505.531242][ T31] ? __pfx_watchdog+0x10/0x10 [ 505.531284][ T31] kthread+0x3a4/0x760 [ 505.531328][ T31] ? __pfx_kthread+0x10/0x10 [ 505.531371][ T31] ? __pfx_kthread+0x10/0x10 [ 505.531420][ T31] ? __pfx_kthread+0x10/0x10 [ 505.531465][ T31] ? __pfx_kthread+0x10/0x10 [ 505.531509][ T31] ? rcu_is_watching+0x12/0xc0 [ 505.531539][ T31] ? __pfx_kthread+0x10/0x10 [ 505.531585][ T31] ret_from_fork+0x45/0x80 [ 505.531611][ T31] ? __pfx_kthread+0x10/0x10 [ 505.531656][ T31] ret_from_fork_asm+0x1a/0x30 [ 505.531708][ T31] [ 505.658686][ T31] Sending NMI from CPU 1 to CPUs 0: [ 505.664174][ C0] NMI backtrace for cpu 0 [ 505.664200][ C0] CPU: 0 UID: 0 PID: 9102 Comm: syz.2.750 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 505.664232][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 505.664247][ C0] RIP: 0010:sha256_transform_rorx+0x623/0x1120 [ 505.664285][ C0] Code: d9 c4 43 7b f0 e3 02 45 31 cf c5 e5 ef da 45 31 e6 45 89 dc 41 21 dc 45 01 ef c4 c1 65 ef c8 c5 fd 70 d5 fa 44 09 e6 45 01 f2 fd fe c1 44 01 f9 45 01 fa 41 01 f2 c5 bd 72 d2 0a 44 89 d6 c4 [ 505.664309][ C0] RSP: 0018:ffffc900037bf1c0 EFLAGS: 00000a92 [ 505.664329][ C0] RAX: 00000000963de184 RBX: 00000000d2a5bee0 RCX: 000000007fe7f1f2 [ 505.664346][ C0] RDX: 00000000daa72e01 RSI: 00000000d2b5fa80 RDI: 0000000000000100 [ 505.664361][ C0] RBP: ffffc900037bf3e0 R08: 000000008ee44b8d R09: 00000000512fd186 [ 505.664378][ C0] R10: 00000000df288570 R11: 00000000c9d27a0b R12: 00000000c0803a00 [ 505.664393][ C0] R13: 0000000035af8b60 R14: 000000006bc2ff36 R15: 00000000115f2563 [ 505.664408][ C0] FS: 00007fea7caa66c0(0000) GS:ffff888124e5a000(0000) knlGS:0000000000000000 [ 505.664433][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 505.664449][ C0] CR2: 00007fe948b7b338 CR3: 000000006b1dc000 CR4: 00000000003526f0 [ 505.664465][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 505.664479][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 505.664494][ C0] Call Trace: [ 505.664502][ C0] [ 505.664517][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 505.664543][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 505.664567][ C0] ? nmi_handle.part.0+0x1a7/0x5d0 [ 505.664596][ C0] ? nmi_handle+0x86/0xc0 [ 505.664619][ C0] ? sha256_transform_rorx+0x623/0x1120 [ 505.664649][ C0] ? default_do_nmi+0x6a/0x160 [ 505.664671][ C0] ? exc_nmi+0x170/0x1e0 [ 505.664691][ C0] ? end_repeat_nmi+0xf/0x53 [ 505.664722][ C0] ? sha256_transform_rorx+0x623/0x1120 [ 505.664752][ C0] ? sha256_transform_rorx+0x623/0x1120 [ 505.664784][ C0] ? sha256_transform_rorx+0x623/0x1120 [ 505.664814][ C0] [ 505.664821][ C0] [ 505.664852][ C0] ? __pfx_sha256_transform_rorx+0x10/0x10 [ 505.664883][ C0] lib_sha256_base_do_update.isra.0+0x130/0x150 [ 505.664917][ C0] ? __pfx_sha256_transform_rorx+0x10/0x10 [ 505.664948][ C0] _sha256_update+0xbe/0xf0 [ 505.664982][ C0] ima_calc_file_hash_tfm+0x300/0x3d0 [ 505.665009][ C0] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 505.665052][ C0] ? stack_trace_save+0x8e/0xc0 [ 505.665079][ C0] ? ima_alloc_tfm+0x21a/0x2e0 [ 505.665101][ C0] ? generic_fillattr+0x6bf/0x940 [ 505.665142][ C0] ima_calc_file_hash+0x1ba/0x490 [ 505.665170][ C0] ima_collect_measurement+0x897/0xa40 [ 505.665202][ C0] ? __pfx_ima_collect_measurement+0x10/0x10 [ 505.665239][ C0] ? trace_contention_end+0xdd/0x130 [ 505.665274][ C0] ? __mutex_lock+0x1cb/0xb00 [ 505.665305][ C0] ? is_bad_inode+0xd/0x40 [ 505.665335][ C0] ? xattr_resolve_name+0x27b/0x3f0 [ 505.665371][ C0] ? vfs_getxattr_alloc+0xec/0x340 [ 505.665409][ C0] ? ima_get_hash_algo+0x27c/0x400 [ 505.665446][ C0] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 505.665487][ C0] ? process_measurement+0x126c/0x2360 [ 505.665519][ C0] process_measurement+0x126c/0x2360 [ 505.665545][ C0] ? __pfx_process_measurement+0x10/0x10 [ 505.665568][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 505.665601][ C0] ? init_file+0x93/0x4c0 [ 505.665622][ C0] ? alloc_empty_file+0x73/0x1e0 [ 505.665646][ C0] ? hugetlb_file_setup+0x4cd/0x620 [ 505.665673][ C0] ? ksys_mmap_pgoff+0x189/0x5c0 [ 505.665700][ C0] ? __x64_sys_mmap+0x125/0x190 [ 505.665745][ C0] ima_file_mmap+0x1b1/0x1d0 [ 505.665768][ C0] ? __pfx_ima_file_mmap+0x10/0x10 [ 505.665794][ C0] security_mmap_file+0x88c/0x990 [ 505.665831][ C0] vm_mmap_pgoff+0xec/0x450 [ 505.665865][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 505.665896][ C0] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 505.665922][ C0] ? hugetlbfs_get_inode+0x31f/0x730 [ 505.665947][ C0] ? __up_read+0x1f8/0x750 [ 505.665987][ C0] ksys_mmap_pgoff+0x1c8/0x5c0 [ 505.666018][ C0] __x64_sys_mmap+0x125/0x190 [ 505.666044][ C0] do_syscall_64+0xcd/0x260 [ 505.666077][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.666101][ C0] RIP: 0033:0x7fea7bb8d169 [ 505.666119][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.666143][ C0] RSP: 002b:00007fea7caa6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 505.666165][ C0] RAX: ffffffffffffffda RBX: 00007fea7bda5fa0 RCX: 00007fea7bb8d169 [ 505.666181][ C0] RDX: 00004000000000df RSI: 0000100000000009 RDI: 0000000000000000 [ 505.666197][ C0] RBP: 00007fea7bc0e2a0 R08: 0000000000000401 R09: 0000300000000000 [ 505.666212][ C0] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 505.666227][ C0] R13: 0000000000000001 R14: 00007fea7bda5fa0 R15: 00007ffe5235e4f8 [ 505.666250][ C0] [ 506.158472][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 506.165382][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 506.176882][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 506.186973][ T31] Call Trace: [ 506.190280][ T31] [ 506.193242][ T31] dump_stack_lvl+0x3d/0x1f0 [ 506.197891][ T31] panic+0x71c/0x800 [ 506.201833][ T31] ? __pfx_panic+0x10/0x10 [ 506.206295][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 506.211725][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 506.217738][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 506.223168][ T31] ? watchdog+0xdda/0x12c0 [ 506.227643][ T31] ? watchdog+0xdcd/0x12c0 [ 506.232128][ T31] watchdog+0xdeb/0x12c0 [ 506.236432][ T31] ? __pfx_watchdog+0x10/0x10 [ 506.241161][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 506.246408][ T31] ? __kthread_parkme+0x148/0x220 [ 506.251488][ T31] ? __pfx_watchdog+0x10/0x10 [ 506.256221][ T31] kthread+0x3a4/0x760 [ 506.260344][ T31] ? __pfx_kthread+0x10/0x10 [ 506.264990][ T31] ? __pfx_kthread+0x10/0x10 [ 506.269629][ T31] ? __pfx_kthread+0x10/0x10 [ 506.274271][ T31] ? __pfx_kthread+0x10/0x10 [ 506.278924][ T31] ? rcu_is_watching+0x12/0xc0 [ 506.283733][ T31] ? __pfx_kthread+0x10/0x10 [ 506.288387][ T31] ret_from_fork+0x45/0x80 [ 506.292856][ T31] ? __pfx_kthread+0x10/0x10 [ 506.297513][ T31] ret_from_fork_asm+0x1a/0x30 [ 506.302348][ T31] [ 506.305527][ T31] Kernel Offset: disabled [ 506.309894][ T31] Rebooting in 86400 seconds..